last executing test programs: 23.793697219s ago: executing program 0 (id=3248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500070007000000f5e0f1260520ce9e4636c612b8b27ee50d2528993611bbb65f9a9e6f719bc952affa842fd197ddf5b9108afe14ec504f69d57b781f4aa0c2b3"], 0x3c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) (async) socket(0x2c, 0x3, 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x9, 0xf}, {0xfff3, 0xf}, {0xa, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x2000011) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r6, 0x0, 0x0}, 0x10) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x4c, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x900d}, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x8084) (async) socket$netlink(0x10, 0x3, 0x7) 23.594583981s ago: executing program 0 (id=3250): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfd1f, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280500003d000701000000000000000001640000040000000c0003"], 0x528}}, 0xc000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8108100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4020) 23.50197173s ago: executing program 0 (id=3252): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r1, 0x101, 0x6, 0x0, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 23.282352285s ago: executing program 0 (id=3253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x1, 0x80805, 0x7) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000002700)=""/4089, &(0x7f0000001000)=0xff9) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x3, 0x0, &(0x7f0000000080)) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000007c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x40800) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0}, 0x18) socket$inet6(0xa, 0xa, 0x40) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) 22.806334913s ago: executing program 0 (id=3259): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100253d700001dbdf2504000500000006000b000a000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x300}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40805}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYBLOB="01002abd7000fedbdf250700000008000400ac14141a14000300"/50], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22.756641717s ago: executing program 0 (id=3260): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) unshare(0x20000400) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000003840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000037c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000022c0)="2c2b74fddbc858e42edcd12037e5751c", 0x10}], 0x1, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000000000001701000004000000fcffffff00000000180000000000000017010000030000000100000000000000e0"], 0x110, 0x4000}], 0x1, 0x8081) recvmmsg(r5, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) write$bt_hci(r3, &(0x7f0000000300)=ANY=[], 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 22.528900161s ago: executing program 2 (id=3263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)={0x10003, {{0x2, 0x800, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0xa9) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendto$l2tp6(r6, &(0x7f0000000400)="28d7820168e3e85b18f7dbd5f962e8471948fc5975e5dc2c66d6c906b82b8c0cbac639a61abe3f384e6e67d83c9d4aba3925c06ed9ac8c9e7def19d100d747c857d5d07887aabb9520b7e6de1b8e342f9e19915f09e9f98676bfa8c047754694f30664bb5f1533fc", 0x68, 0x20000010, &(0x7f0000000340)={0xa, 0x0, 0x8, @mcast2, 0x1}, 0x20) sendmsg$nl_route(r5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$isdn(0x22, 0x2, 0x23) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r9, 0x801, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc79f7db688e9f680}, 0x44000) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a1835eb265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21900c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b710000004d0012803b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71a338c0c6a42d17"], 0xb4}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000200000000140012800b00010065727370616e000004000280060001"], 0x40}}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 22.114656497s ago: executing program 2 (id=3265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000035c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x84) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) 22.057842161s ago: executing program 2 (id=3266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a0001006c696d80080003400000000408000440000300000c00024000000000000000020c000140000000004a9c4b670900010073797a30000000000900000014000000110001000000000000"], 0x94}}, 0x4) 21.942658861s ago: executing program 2 (id=3268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x30, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80c}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x20000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008010) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000c80)={'veth0_to_batadv\x00'}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "0fecbbf3be57c19fce9521211b60237d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 21.560074049s ago: executing program 2 (id=3271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2b, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1, 0x0, &(0x7f00000003c0)) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c000000021408002abd7000fbdbdf250900020073797a320000000008004400142512c9e7f943348d37d64e9b0358856a942c91efdbc27ae4c824b524c56ea0f5379ed806a70d809d5437e48bf925968389a33f312cab8ee623934c96fa0fa5ad22869ebe127750c162753e2cb989fb58d76b3d9b5beecaf2791e380670fdfb689cad018b83b9673a07955baa6b2d", @ANYRES32=r4, @ANYBLOB="0900020073797a30000000000900020073797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0xd69fb0b584937548}, 0x20000000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES32=r1], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) syz_emit_ethernet(0x2a, &(0x7f00000007c0)=ANY=[@ANYBLOB="0182c2000000a547ae4121320800456bf100ff010000000000029078ac1e00019d1414aa16009078e0000dbc9178e1f2a3bef9f978b26e33f81c868a021574e8bab9a990cb57625340b7d3d8ca56dc43b9fa37398c7e8cf371ac0dcd5a70107128698f8d23649cc8b62818e47c05600635da070974ffc33ab04a6e2aaaa208e1350ce65155710a9b7b1af22babbfe98d68d2b5b3b40d36229d53f206c2ad7b5cc9517dbc55bb4569"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="0d000000010001", 0x7) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e0001000000000000000000000000e000000100ff03000000000000000000f4fdbf"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write$tun(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000f90000000000000000000f0f00000000000000000000000000000500000000000000000f00000000004002006500670000f80690787f000001640101028907e1ac1414aa4424dfa1e000000200000004e0000001000000abac141438000001000000000000000db6000000000000000000000000000000000100004e2400004e2300000002000000000000000000"], 0x91) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 21.23326732s ago: executing program 1 (id=3274): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x7, 0x8, 0xf, 0x32}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x4000000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x5}, {0x9, 0xffff}, {0xffe0, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$packet(r2, &(0x7f0000000000)={0x11, 0x1c, r10, 0x1, 0xc}, 0x14) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) 20.667554476s ago: executing program 2 (id=3280): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000280)=0x4) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x4000000) recvfrom$rxrpc(r0, &(0x7f0000000140)=""/130, 0x82, 0x2000, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x1000, @loopback, 0xcdda}}, 0x24) socket(0x400000000010, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0xfff, 'syz0\x00', @null, 0xffffffff, 0x4, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 20.663056057s ago: executing program 1 (id=3281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x14}, 0x1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x18, 0x11, 0x0, @remote, @local, {[@dstopts={0x2c}], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100}}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000080), 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="000427bd7000ffdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0001000000080001007063690011000200303030303a30303a31302e300000000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d5bc6fa11008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0003000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30ad16b795dafc22b9000008008e0002000000"], 0x114}, 0x1, 0x0, 0x0, 0x14}, 0x1) (async) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fddbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x20048054) (async) syz_emit_ethernet(0x4e, &(0x7f00000007c0)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "018100", 0x18, 0x11, 0x0, @remote, @local, {[@dstopts={0x2c}], {0x4e20, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x8, 0x100}}}}}}}}, 0x0) (async) 20.506913938s ago: executing program 1 (id=3284): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000600)={'nr0\x00', 0x400}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000240)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="4400000013002f0a2bbd70000000004407006800", @ANYRES32=r4, @ANYBLOB="400900004522030024001a8009000100766c616e0000000014000480100004800c12"], 0x44}}, 0x8004) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000680)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xfffffffffffffede}], 0x1, 0x8) close(r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) getpeername$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x200200d1) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000ff100039042abd7000eaffc38489bf0c43", @ANYRES32=r11, @ANYBLOB="03000000c01006001800128008000100736974000c000280080003000a010100"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000700)={0xa, {{0xa, 0x4, 0xfffffffb, @mcast1, 0xcac}}, {{0xa, 0x4e20, 0xffffffc0, @private1, 0x499}}}, 0x108) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x80}, 0x1, 0xba01}, 0x8044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x20008000) r12 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r13, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x0) 20.176877386s ago: executing program 1 (id=3289): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001f"], 0x3}}, 0x0) (async) r0 = epoll_create1(0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'net_cls'}, {0x2b, 'cpu'}, {0x2b, 'net_cls'}, {0x2d, 'io'}, {0x2b, 'io'}, {0x2d, 'blkio'}, {0x2d, 'io'}, {0x6, 'hugetlb'}]}, 0x33) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)) 20.084683318s ago: executing program 1 (id=3291): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x6, 0x10, 0x9, 0x0, 0xa, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x10, 0x9, 0x4}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4804}, 0x5) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) 20.000456207s ago: executing program 1 (id=3293): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 18.146703207s ago: executing program 3 (id=3304): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001080)={'ip6tnl0\x00', &(0x7f0000001000)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x6e, 0x6, 0x20, @mcast1, @empty, 0x1, 0x8000, 0xc, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001340)={'syztnl0\x00', &(0x7f00000012c0)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x5, 0x2, 0x50, @mcast1, @mcast2, 0x80, 0x10, 0x9, 0xfffffffe}}) 17.928705377s ago: executing program 3 (id=3307): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000340)=0xff, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x9, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x1, 0x0, 0x0, [0x6]}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x38}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x118, 0xb, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xe, 0x1a, 'syzkaller\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7ff00edd}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x200}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffff7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xf}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004084) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788fb", 0x15}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) 17.694250749s ago: executing program 3 (id=3309): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_proto_private(r0, 0x8b20, &(0x7f0000000080)) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x58, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @private=0xa010102}, @in6={0xa, 0x4e20, 0xffffff80, @rand_addr=' \x01\x00', 0x81}]}, &(0x7f00000002c0)=0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000240)=""/205, &(0x7f0000000180)=0xcd) (async) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 17.527980903s ago: executing program 3 (id=3311): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x50bd2c, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x81}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xffffffff}]}}]}, 0x44}}, 0x24000010) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x2, 0x2, {{0xd, 0x4, 0x1, 0x28, 0x34, 0x67, 0x0, 0xe6, 0x2f, 0x0, @multicast2, @multicast1, {[@timestamp={0x44, 0x20, 0x2, 0x0, 0x1, [0x4, 0x7, 0xdcd, 0xd3, 0x79c, 0x200, 0x1]}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xa, 0x42, 0x40}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x3, 0xffff, 0x5, 0x4a0c, r0, 0x53a9, '\x00', r3, r4, 0x5, 0x4, 0x1, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.413038224s ago: executing program 4 (id=3312): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 17.405442314s ago: executing program 3 (id=3313): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d00400001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000240)='syz1\x00', 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="383b13e0f5ffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d00400001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdirat$cgroup(r1, &(0x7f0000000240)='syz1\x00', 0x1ff) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="383b13e0f5ffffff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 17.228662353s ago: executing program 3 (id=3314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) select(0x20000048, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x40, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x6}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x204800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x100}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000140004800800014000000003080002401886c30128000000000a"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 17.026648992s ago: executing program 4 (id=3315): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) socket$alg(0x26, 0x5, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) 16.161074746s ago: executing program 4 (id=3316): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000d727"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1016, &(0x7f0000003080)=""/4118, 0x40f00}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="14475f000000330001000000"], 0x14}}, 0x4) r9 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14, 0x80000) getpeername$packet(r9, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r9, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r12, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) r14 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r14, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r13, 0x84, 0x40000}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r15, 0xc040ff0b, 0x110c2300fe) openat$cgroup_ro(r15, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000010004b0400000000000000007a000000", @ANYRES32=r16, @ANYBLOB="4300000210fffe699edcf1a5"], 0x20}}, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000540)=r12) 15.266369069s ago: executing program 4 (id=3317): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000200)={'virt_wifi0\x00', @random="955375c9b013"}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'lo\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x13, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0x800005}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94) 15.106407972s ago: executing program 4 (id=3318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2cca441979"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf, 0x5e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x140c, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x2000811) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x1d, r4}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)={0x1, 0x200, 0x4, {0x77359400}, {r5, r6/1000+10000}, {0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0x29, 0x0, 0x0, 0x0, "5f9cf9ec53c00cc9bbd9b61de94169afbca9fc43a7b6f2e00b221694e5fe6535595a8275c75c8386d0a8ba2ea9f995921575ac327642606bbda80cdff51a4f8b"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000805}, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xd8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044840}, 0x80) r8 = accept$inet(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x0, @local}, &(0x7f0000000680)=0x10) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f00000006c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010102}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @empty}, 0x164, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x8000000000000000, 0x7f}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv6_getrule={0x1c, 0x22, 0x904, 0x70bd28, 0x25dfdbfe, {0xa, 0x14, 0x10, 0xf, 0x3, 0x0, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) getsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000000840)={@private, @remote, @remote}, &(0x7f0000000880)=0xc) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r10, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x28001000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000a00)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000a40)=0x1c) r11 = socket$packet(0x11, 0x3, 0x300) bind$packet(r11, &(0x7f0000000a80)={0x11, 0x4, r4, 0x1, 0x3, 0x6, @local}, 0x14) sendmsg$can_bcm(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5, 0x902, 0x7, {0x77359400}, {0x77359400}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "55fa67d13c26bc10678e39cd71c0ddbcba7589843f4ec7fecab134cb243c7493111407d15d01d1b617d0f93e4d2c30c1c3a090bad6ba9428674db87702e24fe3"}}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmmsg$alg(r0, &(0x7f0000003b40)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000bc0)="8a232ca0259d170f6cf739ce1054ca77e5eee5074b3b1c4dbd86e7318e54f5b9378331520270639bd4a0206f30e2fb90", 0x30}, {&(0x7f0000000c00)="09d85c4344233eea9dc78381ca51812e6f1d4d563d0b18e55a7faa9916abb36df0b79b22b7cc064d037cc3b6f7904b658d79036c46602dcb85a8ee3eeeae47d71b3cbc25c7a4ba654cc183c6d11b3d61f10eadf052f98338eeac2a8bb4ebe1af907b6ec2176130baa994c8c0f0d56c1b45a5e246df5e6b8963a9ea4a82710e507f3f52b2b88f4b5d992d15f7952cfa4964b3a3c2428eb03b1ec29a01e6ade5893fb2c85796faa60cf23877c78c439da641ea34e376161a25d8ac6857b084", 0xbe}, {&(0x7f0000000cc0)="1e682c69fdc0e91e2a86b54ec4453ca19e47fa19c243539bf98598a4f90bff0fa1a309b5b6c7f562f45c95b0f4f1d1c840ff664830fa1f586265be0062b2b2550ea761a6a42bd5ae63a00ec049110d9af450a642b1f410508c52de6aaf4169fb039a2ad5db6756621121753a6bd4338e0e24f684455a26cf43f047ed57c0df0b1741a3b5e35204216ab329ccdea386279bc1056ff30aefb24442df4d86b8e99b838713e9a5dfcac7a417a901a7751ed05cc7c33dc822", 0xb6}, {&(0x7f0000000d80)="86abed7735a00438f70ccbfdf89ecf281d4f867f4e263018839e16c5ffda1076d1c8bb02fe4be28d7acef591bbcbeff7980e86a2b4147087d4554d48fb1c1b241ff6bf7bd9d5f428aecd0daeb76f1f3f7ea47d6d953701f0ebd9ec46b97a5fa7afc60315c210edd6696c378d565567a2cae29a76af23d009e0f036e5788b95f2", 0x80}], 0x4, &(0x7f0000000e40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}, {0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000e80)="94359a02a05bea59e9c6140307f0e69ba77d2983698ddbe28e981baa96cd143666b7dc995a2850dc7fca2b71b40a2c8bb42438a97e718913e27b7add785603c1340365444d7d9cad5f84de0528addea7b736c60c31cfb42807e8d9c41f028b3a49713e2d55b51466d56c7f7e904315261af1367d3b39dcc31908a43d6df8c87d47bd670bfecd566962ec3e4a43d02a4c9b943da3e3f964f059907eccc879c9aa7719824df968524590", 0xa9}, {&(0x7f0000000f40)="b67d03a5b0e3e410cb2b961e7ad76f8e2b78371b19098a00168cbe157653a2a46938a453a7749f45f2fe5f27c39198abfae8c9741702a4b08f7fffeed5986176ebdcf26ac30cb93b76edeb5e4354642e1763bcec495fe51b1597b2e2e39473c72e77edb5d41aebe8c6e6978cf831c02dc64b4381952c15cd7c758deb8332a2d0615ec2772ac34c8c8d4cfa191d7e3173a1ae2a85ee1ae2390c3123de2289dd2181a42bb225d412268e5f8b37a1af2a21b71dbe2e340a1431bc7338af2ba113afa08658ed4b6be6789829e9a374fa6303c3ea6ae5690b3924d5fc19e8da5bab5a21c0fceae8fbe733e9a153", 0xeb}, {&(0x7f0000001040)="f2ad3e4dc0dd91de748b299be2ff74e0a46772a743914f8ec284f46f8722a258a386b3", 0x23}, {&(0x7f0000001080)="26378fd28700cc9b5672e43a8b231607443659118064b2ee2df9f2b9696812b5ca793c5b47f14941b43e608e3db6b3b86bb0", 0x32}, {&(0x7f00000010c0)="44947076aaeeaebfe7f90e8fe30278b64fc2e086f12171dccfd3dc2cc7046389abcfb3d2ce6d600ee8f24c5d84e0effe89f68562619df8ba1ca1ab245f0faf432b985df56323d8b6d9ea5769d8f69cd1aaa519", 0x53}, {&(0x7f0000001140)="7a0ab54b221359abaa7837f54f2580ba9424194dbfe7bfd6b28279b974fdb5b332119db865ac5d8d7ebe9855c748474caa7cb5bcbfa4270541a0e906686d9f6b170ef0751e0aa2b5b8955e0ffb63553824b0248230ee4e3f34b1864eb203e3291a5a1cf5771357eaa55bddc3e9e84da5c36afde18d038dbb173909d65c8f21", 0x7f}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="7fd7fe35a4342571dd03ab150d37146be23d1b1554bbf50d81093a5c3615c3ae0dfef76177a8eb5a9397df657ae3ad87d8e5ebfa0169d3c3c4f55515922c96827acb07a574d6682d925b498c88c276094196b320a42b268c8d981b77e437f83eafa1b9f52f66", 0x66}, {&(0x7f0000002240)="5808147ddeef327bdcaee3fed9c4c49e08544ef6fd5f7b0f474553710e1e05f10bc804fc9d8db0577c34d8a1dd9b5bbc08d146d82c5500406496eecfd20dfcd372e171b0e5e73c31ca8a065a4fadbe95386bf3b22a25b056e3626163465d69781edc56495ba0462249033664afef5af78dcfdafe6f7c12184a88dc0f8aa7c9a44ae7c532181a42744340460e2d9ce6fb8c9ac6", 0x93}], 0x9, 0x0, 0x0, 0x20000040}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f00000023c0)="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", 0x1000}], 0x1, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003400)="979cecebaf62e8e98a51abf5a4c68b4250193597eb2c2282", 0x18}], 0x1, &(0x7f0000003480)=[@iv={0x38, 0x117, 0x2, 0x1f, "afd5c896d3b38c80603e231bf8d3e7df0b1254238b44344b0c49e5a08c1617"}, @iv={0xa0, 0x117, 0x2, 0x89, "f478d68f58f76cda6b60f3990849aa31173c55dc39fe7fab24120bfd08778cf8aa6e9681fa403dd6381ee30d16cf0fdbd552eb6cb7f19f191fe4b0fed31eca91a969d0c9dfb92301d2b92f2c18c0915ea72b9f0060afce7c2bc2b2c14661c5efe54f35f98fb8342068b105f1e7b0ba6fbf4133b6c9b9ef5d375bf56db675252aecbb6a5543f0f06f12"}], 0xd8, 0x80}, {0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003580)="c888c04ca584193b57e643213f35686bca75584450015bd7870775a4b4bb071d172d1a3a5089ba428217477818b1b303e7379fe0d262478ec723836bcf044f287b9171262e0fc4ed69012f344ce06a83b581a05219d810f701860d52ffdb005bf264e5", 0x63}, {&(0x7f0000003600)="32efa45847ecfc836371e6f9c62eb8c145fcc4d41bd995e34e5e1bd3a8005ed0f6691488937503034bc5bff42716302bac75c25c7f42ce76e5de3947c29db9be27dec8945d07a1db05dddcbd7c5094076c64a5ade576c6d28e57a8944810f3fc41f374d22e32246fea2cac00f85ae08fb7ba580fe662a8b8b64887dee4449bed0764fb97c2b0e0c77048aa885195ab772b33b22890bf4e05f6cc7b5a2963c76aecdbc4b4289129bc35d9217110de314a6280999d03585ea8af2ca339fac2946bc17b676dd06120b9e625d715a8cd560e3b150a2e75ff74b4b16970157911ea", 0xdf}, {&(0x7f0000003700)="b18ebd47d0df0637ceb9bf5afdaf642241249284de257bb00524a2522f9074024e1564a195a7765abd", 0x29}, {&(0x7f0000003740)="10dd7caa009214de4c4febbdd39b81f0296d96709215edb27681cefdc104bd33510ac59b309fcae48e389b36f2e17616a92028fa95723148d8a229715e9985", 0x3f}], 0x4, &(0x7f00000037c0)=[@assoc={0x18, 0x117, 0x4, 0xfc0}, @op={0x18}, @iv={0x38, 0x117, 0x2, 0x21, "1d8380f036daee9c62e74e156fb471e796493d1e03466f794c242a2bab1d6cec8d"}, @assoc={0x18, 0x117, 0x4, 0xfd63}], 0x80, 0x8080}, {0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003840)="3427394aa2717a5c76fe517db939281eced5869e5cfb1df696049b5512d0bcc8bd9588efed3ba0e40ba9e25f8ce9a793a23ee4d85962739a5da82b21dc90a3546fafdfc673e0294c7bf28a305961badf0af55961858ba11e0a16797b4136ab6d43cfbf8f0665df16ebbc088545d2ba479045265d69f2538b68fc0ac3b9185d9cc48e87d70707c8ca20fec1470a2c900052d2f4727c545370fc5d931581bdb7c6aa4a8e322aeb4216f82f9c5fd417c5f9bc50b792348fefb9172981a2c53123d9fd1bd544535ec5eba13667", 0xcb}, {&(0x7f0000003940)="358f9e0633ef17bf23371de2589bcaccbd3cfa7ebaf716cd846850aad1d1930649ba3f0b185242dc481962501cb127d606b51d72f74a636edc8a5dc3b19112147208a910e4b69b3678e6c11bac37f47f0cb776776aceaf4ff85eea0ad6ca88363fa7f469958149ceca589e63b8c8c134a15ddb2a1cc91cf4507aff583fedd2bd58139c1a38305b1e58547f2e1a1aefa766b0ab854f82c54cf68df9cecaa10d6af2e046", 0xa3}, {&(0x7f0000003a00)="6e38af429785590cdea37b6973347e201ffd5e1506d069da24dad243c29ca330a55d1504e02a2c37477fe04169c3e76e84679cc299adec515d519dbefd78044e8c279ba7393a532fe3b33c40aac1755ae4642063bc653ee5445ad99a33bae88c84633c4196a2c97be40cf2214c71a2b5e0402cb9a7b0f8464d404e8b3abb83782b68d84a03804a9cb5223fe5f031ed8f68ecfd7113f7c24ef9ff7830277c0c7c301c206e981b9658433d419142d2f9ea188c589569410be311e31c6f9fc48cd98321378ea82829da11f7b08bcb1f9541", 0xd0}], 0x3, 0x0, 0x0, 0x20000040}], 0x6, 0x8c1) ioctl$sock_SIOCADDDLCI(r9, 0x8980, &(0x7f0000003cc0)={'sit0\x00', 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000003e00)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x28, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x77}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) r13 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r13, 0x89e0, &(0x7f0000003e40)={0xffffffffffffffff}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000003e80)="a5002056fb79ccdf9775c210aa3cc47678c1dcd5afcf2016ee5abca3a70789883879f9bde15ab2f096e471d71de7d01ca835816f966048904d05ae5240c30ad00e4ac474c7f7de329d1f8c001119bc3ce9ff08a05461cf3dacf000d4fb76402e98685fac13b17128190b509dfdd667bb1ea441a61996e31348c52229ccd30e9614fd20c403c4dbcb5c2bd2bf35692229c011854a2d00b30a708646e9b9f0b37f75a3b435987ae90445ce8d754463afd50cbc4e9e3c7d076e0105f03edcab4ef659c9", 0xc2) 15.101270082s ago: executing program 4 (id=3319): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = accept4(r0, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x0, 0x80000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x40) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080) close(r0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/223, 0xdf}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0xfff3}, {0x6, 0xffe0}, {0x10, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r9, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5.071745006s ago: executing program 32 (id=3280): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000280)=0x4) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x5}}}]}, 0x38}}, 0x4000000) recvfrom$rxrpc(r0, &(0x7f0000000140)=""/130, 0x82, 0x2000, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x1000, @loopback, 0xcdda}}, 0x24) socket(0x400000000010, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0xfff, 'syz0\x00', @null, 0xffffffff, 0x4, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 4.050515247s ago: executing program 33 (id=3293): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2.025823271s ago: executing program 34 (id=3314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) select(0x20000048, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x40, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x6}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x204800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x100}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000140004800800014000000003080002401886c30128000000000a"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 0s ago: executing program 35 (id=3319): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = accept4(r0, &(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x0, 0x80000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x40c1}, 0x40) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080) close(r0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/223, 0xdf}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff1, 0xfff3}, {0x6, 0xffe0}, {0x10, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r9, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): t failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 186.317197][T10482] tipc: Enabling of bearer rejected, failed to enable media [ 186.373664][T10485] tipc: Enabling of bearer rejected, failed to enable media [ 186.410183][T10482] __nla_validate_parse: 54 callbacks suppressed [ 186.410204][T10482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1250'. [ 186.643141][T10496] ipvlan0: entered promiscuous mode [ 186.649141][T10496] ipvlan0: entered allmulticast mode [ 186.665131][T10496] veth0_vlan: entered allmulticast mode [ 186.826585][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1255'. [ 186.855603][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 186.991301][T10520] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1258'. [ 187.058378][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 187.093614][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 187.183885][T10535] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1261'. [ 188.011683][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'. [ 188.147355][T10574] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1271'. [ 188.175088][T10574] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.1271'. [ 188.472909][T10601] team0: left allmulticast mode [ 188.482050][T10601] team_slave_0: left allmulticast mode [ 188.488119][T10601] team0: left promiscuous mode [ 188.493052][T10601] team_slave_0: left promiscuous mode [ 188.499611][T10601] bridge0: port 3(team0) entered disabled state [ 188.520272][T10601] bridge_slave_1: left allmulticast mode [ 188.530107][T10601] bridge_slave_1: left promiscuous mode [ 188.537384][T10601] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.548164][T10601] bridge_slave_0: left allmulticast mode [ 188.563351][T10601] bridge_slave_0: left promiscuous mode [ 188.570928][T10601] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.793646][T10616] wg1: entered promiscuous mode [ 188.801600][T10616] wg1: entered allmulticast mode [ 188.999884][T10628] validate_nla: 6 callbacks suppressed [ 188.999914][T10628] netlink: 'syz.1.1287': attribute type 5 has an invalid length. [ 189.671356][T10661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.874492][T10681] netlink: 'syz.2.1301': attribute type 3 has an invalid length. [ 189.957906][T10689] netlink: 'syz.4.1306': attribute type 1 has an invalid length. [ 190.070447][T10697] netlink: 'syz.1.1308': attribute type 11 has an invalid length. [ 190.093431][T10699] netlink: 'syz.1.1308': attribute type 11 has an invalid length. [ 190.259853][T10704] netlink: 'syz.0.1311': attribute type 2 has an invalid length. [ 190.291508][T10704] netlink: 'syz.0.1311': attribute type 8 has an invalid length. [ 190.818743][ T5937] IPVS: starting estimator thread 0... [ 190.908834][T10754] IPVS: using max 27 ests per chain, 64800 per kthread [ 191.101993][ T6603] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.115284][T10771] netlink: 'syz.1.1332': attribute type 21 has an invalid length. [ 191.123532][T10771] netlink: 'syz.1.1332': attribute type 4 has an invalid length. [ 191.134908][T10771] netlink: 'syz.1.1332': attribute type 5 has an invalid length. [ 191.144039][T10771] netlink: 'syz.1.1332': attribute type 21 has an invalid length. [ 191.153533][T10771] netlink: 'syz.1.1332': attribute type 4 has an invalid length. [ 191.437627][T10787] __nla_validate_parse: 18 callbacks suppressed [ 191.437646][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1339'. [ 191.522929][T10787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1339'. [ 191.685371][T10804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1345'. [ 191.689184][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'. [ 191.706844][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 191.716905][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 191.813696][T10808] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1344'. [ 191.823027][T10808] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1344'. [ 191.925745][T10814] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1347'. [ 191.962060][T10814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.140284][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1352'. [ 192.158632][T10827] geneve3: entered promiscuous mode [ 192.169350][T10827] geneve3: entered allmulticast mode [ 192.187052][ T6609] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 192.232801][ T6609] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 192.281855][ T6609] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 192.291788][ T6609] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 192.726485][T10870] IPVS: set_ctl: invalid protocol: 190 172.20.20.170:20002 [ 192.926711][T10883] tipc: Enabling of bearer rejected, failed to enable media [ 193.739148][T10930] C: renamed from team_slave_0 [ 193.767529][T10930] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 194.170061][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.204835][T10960] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 194.284850][T10960] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 194.297923][T10973] validate_nla: 7 callbacks suppressed [ 194.297941][T10973] netlink: 'syz.0.1390': attribute type 6 has an invalid length. [ 194.395125][T10977] vlan1: entered allmulticast mode [ 194.402594][T10977] veth0_vlan: entered allmulticast mode [ 194.586124][ T30] audit: type=1800 audit(1757774053.742:2): pid=10993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1397" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1494 res=0 errno=0 [ 194.693191][T11003] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 194.732936][T10999] vlan3: entered promiscuous mode [ 195.440527][T11057] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.461023][T11060] netlink: 'syz.0.1415': attribute type 33 has an invalid length. [ 195.524404][T11060] batadv_slave_0: entered promiscuous mode [ 195.538036][T11060] batadv_slave_0: left promiscuous mode [ 196.295576][T11081] netlink: 'syz.4.1422': attribute type 15 has an invalid length. [ 196.369273][ T6600] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 196.380784][T11081] netlink: 'syz.4.1422': attribute type 15 has an invalid length. [ 196.410980][ T6600] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 196.426409][ T6600] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 196.438638][ T6600] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 196.531845][T11101] ipvlan2: entered promiscuous mode [ 196.980701][T11072] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.989546][T11072] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 197.015864][T11072] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.026922][T11072] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 197.036482][T11121] dvmrp1: entered allmulticast mode [ 197.050881][T11072] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.059246][T11072] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 197.073349][T11072] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.081521][T11072] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 197.092255][T11072] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 197.098742][T11072] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 197.480882][T11142] netlink: 'syz.4.1439': attribute type 11 has an invalid length. [ 197.601487][T11146] tipc: Enabled bearer , priority 0 [ 197.626187][T11146] syzkaller0: entered promiscuous mode [ 197.631713][T11146] syzkaller0: entered allmulticast mode [ 197.709770][T11157] sock: sock_set_timeout: `syz.1.1444' (pid 11157) tries to set negative timeout [ 197.721058][T11145] tipc: Resetting bearer [ 197.737248][T11157] sock: sock_set_timeout: `syz.1.1444' (pid 11157) tries to set negative timeout [ 197.767771][T11145] tipc: Disabling bearer [ 197.854550][T11163] __nla_validate_parse: 47 callbacks suppressed [ 197.854571][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1446'. [ 197.900231][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1446'. [ 198.001532][T11175] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1451'. [ 198.028798][T11175] netlink: 'syz.1.1451': attribute type 9 has an invalid length. [ 198.142419][T11190] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1454'. [ 198.187168][T11194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1451'. [ 198.228071][T11175] !€ÿ: renamed from bond_slave_0 (while UP) [ 198.232413][T11195] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1454'. [ 198.520724][T11190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.553460][T11190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.570885][T11190] bond0 (unregistering): Released all slaves [ 198.816625][T11223] netlink: 'syz.4.1459': attribute type 2 has an invalid length. [ 198.841528][T11225] netlink: 'syz.3.1460': attribute type 4 has an invalid length. [ 198.981024][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 199.098351][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'. [ 199.108820][T11243] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 199.116580][T11243] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 199.189226][T11245] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 199.306040][T11249] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1468'. [ 199.527738][T11261] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1471'. [ 199.633220][ T6596] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.652726][T11267] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 199.658681][ T6596] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.674933][ T6596] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 199.762246][T11267] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.816513][T11267] veth3: entered promiscuous mode [ 200.034094][T11293] batman_adv: batadv0: Adding interface: dummy0 [ 200.049408][T11293] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.096380][T11293] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 200.410420][T11317] tipc: Enabling of bearer rejected, failed to enable media [ 201.792551][T11405] netlink: 'syz.1.1507': attribute type 10 has an invalid length. [ 201.841871][T11405] team0: Port device dummy0 added [ 201.992844][T11412] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 202.091536][T11423] netlink: 'syz.0.1513': attribute type 21 has an invalid length. [ 202.137870][T11423] netlink: 'syz.0.1513': attribute type 1 has an invalid length. [ 202.270689][T11437] netlink: 'syz.2.1516': attribute type 1 has an invalid length. [ 202.541304][T11446] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 202.565045][T11446] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 202.574060][T11446] gretap1: entered promiscuous mode [ 202.580181][T11446] gretap1: entered allmulticast mode [ 202.597656][T11437] gretap2: entered promiscuous mode [ 202.618952][T11437] bond5: (slave gretap2): making interface the new active one [ 202.643842][T11437] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 202.693006][T11442] macvlan3: entered promiscuous mode [ 202.711210][T11442] macvlan3: entered allmulticast mode [ 202.723553][T11442] bond5: entered promiscuous mode [ 202.733082][T11442] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 202.741507][T11442] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 202.760320][T11442] bond5: left promiscuous mode [ 202.857760][T11469] __nla_validate_parse: 16 callbacks suppressed [ 202.857801][T11469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1524'. [ 203.082092][T11486] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 203.289232][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1534'. [ 203.311081][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1534'. [ 203.358282][T11502] syzkaller0: entered promiscuous mode [ 203.365960][T11502] syzkaller0: entered allmulticast mode [ 203.424167][T11495] sctp: [Deprecated]: syz.1.1530 (pid 11495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.424167][T11495] Use struct sctp_sack_info instead [ 203.442618][T11495] netlink: 'syz.1.1530': attribute type 7 has an invalid length. [ 203.452303][T11495] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1530'. [ 203.603048][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'. [ 203.851466][T11540] nbd: must specify at least one socket [ 203.860558][ T5937] IPVS: starting estimator thread 0... [ 203.965516][T11541] IPVS: using max 30 ests per chain, 72000 per kthread [ 204.654472][T11551] sctp: [Deprecated]: syz.4.1544 (pid 11551) Use of int in maxseg socket option. [ 204.654472][T11551] Use struct sctp_assoc_value instead [ 205.131559][T11553] vxcan1: entered allmulticast mode [ 205.417176][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'. [ 205.463886][T11574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1547'. [ 205.470855][T11576] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1551'. [ 205.593079][T11576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1551'. [ 205.656550][T11580] syzkaller1: entered promiscuous mode [ 205.662068][T11580] syzkaller1: entered allmulticast mode [ 205.668593][T11583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'. [ 205.941871][T11598] nbd: must specify an index to disconnect [ 206.042251][T11605] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 206.056760][T11604] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 206.102797][T11614] netlink: 'syz.4.1563': attribute type 1 has an invalid length. [ 206.116998][T11605] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 206.178475][T11626] netlink: 'syz.3.1565': attribute type 10 has an invalid length. [ 206.202864][T11614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.267608][T11604] bond6: entered promiscuous mode [ 206.273834][T11604] 8021q: adding VLAN 0 to HW filter on device bond6 [ 206.480488][T11641] openvswitch: netlink: Flow key attr not present in new flow. [ 206.557144][T11650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.746059][T11660] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 206.816719][T11658] netlink: 'syz.3.1574': attribute type 10 has an invalid length. [ 207.039698][T11674] geneve3: entered promiscuous mode [ 207.044979][T11674] geneve3: entered allmulticast mode [ 207.183124][T11682] sctp: [Deprecated]: syz.1.1584 (pid 11682) Use of int in maxseg socket option. [ 207.183124][T11682] Use struct sctp_assoc_value instead [ 207.233962][T11686] ip6gre2: entered allmulticast mode [ 207.349753][T11690] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 207.394306][T11694] wg1: entered promiscuous mode [ 207.438511][T11696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.534997][T11701] Dead loop on virtual device ipvlan0, fix it urgently! [ 208.058770][T11741] syzkaller1: entered promiscuous mode [ 208.074782][T11741] syzkaller1: entered allmulticast mode [ 208.213023][T11745] tipc: Enabled bearer , priority 0 [ 208.249416][T11745] syzkaller0: entered promiscuous mode [ 208.278017][T11745] syzkaller0: entered allmulticast mode [ 208.387403][T11745] tipc: Resetting bearer [ 208.403687][T11701] syz.3.1589 (11701) used greatest stack depth: 11336 bytes left [ 208.449686][T11742] tipc: Resetting bearer [ 208.457168][T11767] __nla_validate_parse: 13 callbacks suppressed [ 208.457184][T11767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1608'. [ 208.496749][T11765] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1608'. [ 208.535350][T11742] tipc: Disabling bearer [ 208.949729][T11791] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1615'. [ 208.983214][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 209.060340][T11798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 209.100344][T11806] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1622'. [ 209.324018][T11819] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1624'. [ 209.482652][T11835] delete_channel: no stack [ 209.544765][T11836] netlink: 'syz.3.1630': attribute type 162 has an invalid length. [ 209.559250][T11836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1630'. [ 209.732651][T11845] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1633'. [ 209.818318][T11851] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1635'. [ 209.827576][T11851] openvswitch: netlink: Actions may not be safe on all matching packets [ 210.082733][T11861] ipvlan2: entered promiscuous mode [ 210.109620][T11861] vlan2: entered allmulticast mode [ 210.167139][T11864] netlink: 'syz.1.1637': attribute type 33 has an invalid length. [ 210.672267][T11887] bond6: entered promiscuous mode [ 210.687795][T11887] bond6: entered allmulticast mode [ 210.693373][T11887] 8021q: adding VLAN 0 to HW filter on device bond6 [ 210.793217][T11887] bond6 (unregistering): Released all slaves [ 211.180080][T11931] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 211.208853][T11931] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 211.309067][T11939] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 211.518879][T11961] openvswitch: netlink: Flow key attr not present in new flow. [ 211.960192][T11991] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20004 [ 212.074225][T11992] netlink: 'syz.4.1676': attribute type 1 has an invalid length. [ 212.296426][T12010] netlink: 'syz.0.1684': attribute type 4 has an invalid length. [ 212.528971][T12036] netlink: 'syz.0.1690': attribute type 5 has an invalid length. [ 212.765116][T12055] netlink: 'syz.4.1696': attribute type 83 has an invalid length. [ 212.832020][T12064] openvswitch: netlink: Message has 5 unknown bytes. [ 213.040576][T12079] netlink: 'syz.0.1705': attribute type 24 has an invalid length. [ 213.719309][T12129] __nla_validate_parse: 18 callbacks suppressed [ 213.719327][T12129] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1720'. [ 213.919536][T12137] netlink: 'syz.2.1724': attribute type 2 has an invalid length. [ 213.927516][T12137] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1724'. [ 213.943176][T12139] netlink: 'syz.1.1727': attribute type 4 has an invalid length. [ 213.945472][T12137] nbd: must specify at least one socket [ 214.046281][T12145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.177409][T12157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1731'. [ 215.011145][T12181] netlink: 'syz.0.1738': attribute type 1 has an invalid length. [ 215.127970][T12189] 8021q: adding VLAN 0 to HW filter on device bond7 [ 215.144909][T12189] bond6: (slave bond7): making interface the new active one [ 215.153062][T12189] bond6: (slave bond7): Enslaving as an active interface with an up link [ 215.193859][T12192] pim6reg1: entered promiscuous mode [ 215.245546][T12192] pim6reg1: entered allmulticast mode [ 215.306320][T12181] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.339577][T12181] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 215.510625][T12206] bond0: (slave rose0): Enslaving as an active interface with an up link [ 215.837004][T12229] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1753'. [ 215.939233][T12231] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1755'. [ 216.083471][T12242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'. [ 216.134503][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1758'. [ 216.592016][T12280] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1768'. [ 216.823616][T12276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1766'. [ 216.834411][T12281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1766'. [ 216.860687][T12294] sock: sock_set_timeout: `syz.4.1773' (pid 12294) tries to set negative timeout [ 217.194609][T12306] tipc: Enabled bearer , priority 0 [ 217.216721][T12306] syzkaller0: entered promiscuous mode [ 217.252167][T12306] syzkaller0: entered allmulticast mode [ 217.291297][T12306] tipc: Resetting bearer [ 217.368813][T12303] tipc: Resetting bearer [ 217.414545][T12303] tipc: Disabling bearer [ 217.731117][T12338] tipc: Enabled bearer , priority 0 [ 217.925132][T12338] syzkaller0: entered promiscuous mode [ 217.933668][T12338] syzkaller0: entered allmulticast mode [ 217.950202][T12338] tipc: Resetting bearer [ 217.974531][T12351] validate_nla: 1 callbacks suppressed [ 217.974550][T12351] netlink: 'syz.3.1789': attribute type 15 has an invalid length. [ 217.996412][T12337] tipc: Resetting bearer [ 218.059459][T12356] netlink: 'syz.2.1791': attribute type 10 has an invalid length. [ 218.859579][ T7541] tipc: Node number set to 3920156781 [ 219.336348][T12337] tipc: Disabling bearer [ 219.367835][T12356] team0: Port device geneve0 added [ 219.405563][T12034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.434840][T12034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.457639][T12034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.466839][T12034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.624882][T12377] hsr0 speed is unknown, defaulting to 1000 [ 219.629814][T12372] __nla_validate_parse: 2 callbacks suppressed [ 219.629833][T12372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1795'. [ 219.631978][T12375] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 219.656865][T12377] hsr0 speed is unknown, defaulting to 1000 [ 219.668097][T12377] hsr0 speed is unknown, defaulting to 1000 [ 219.688130][T12377] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.699229][T12380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.720349][T12377] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 219.749428][T12385] netlink: 'syz.0.1800': attribute type 3 has an invalid length. [ 219.777270][T12385] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1800'. [ 219.818311][T12377] hsr0 speed is unknown, defaulting to 1000 [ 219.830038][T12377] hsr0 speed is unknown, defaulting to 1000 [ 219.843422][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 219.843715][T12377] hsr0 speed is unknown, defaulting to 1000 [ 219.873511][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'. [ 219.900531][T12377] hsr0 speed is unknown, defaulting to 1000 [ 219.959988][T12377] hsr0 speed is unknown, defaulting to 1000 [ 220.135063][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1805'. [ 220.221947][T12411] netlink: 'syz.0.1806': attribute type 1 has an invalid length. [ 220.240953][T12411] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1806'. [ 220.326447][T12416] netlink: 'syz.4.1810': attribute type 1 has an invalid length. [ 220.364698][T12418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'. [ 220.366050][T12416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.438943][T12421] netlink: 'syz.1.1813': attribute type 1 has an invalid length. [ 220.536845][T12432] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 220.682029][T12431] veth9: entered promiscuous mode [ 220.763968][T12455] 8021q: VLANs not supported on wg2 [ 221.020498][T12466] team0: Port device dummy0 removed [ 221.049287][T12466] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.074092][T12466] bridge_slave_1: left allmulticast mode [ 221.099034][T12466] bridge_slave_1: left promiscuous mode [ 221.108388][T12466] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.137947][T12466] bond0: (slave 1!€ÿ): Releasing backup interface [ 221.154536][T12466] !€ÿ: left allmulticast mode [ 221.184159][T12466] bond0: (slave bond_slave_1): Releasing backup interface [ 221.193970][T12466] bond_slave_1: left allmulticast mode [ 221.224979][T12466] team0: Port device team_slave_0 removed [ 221.259313][T12466] team0: Port device team_slave_1 removed [ 221.277549][T12466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.291776][T12466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.301930][T12466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.310268][T12466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.336474][T12466] bond1: (slave ip6gretap1): Releasing backup interface [ 221.343706][T12466] bond1: (slave ip6gretap1): the permanent HWaddr of slave - ea:07:e2:dc:5d:9c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 221.382083][T12466] bond1: (slave veth5): Releasing backup interface [ 221.404658][T12466] bond2: (slave gretap1): Releasing active interface [ 221.430937][T12466] bond3: (slave gretap2): Releasing active interface [ 221.448601][T12466] bond5: (slave bond6): Releasing backup interface [ 221.460002][T12466] bond6: left promiscuous mode [ 221.465020][T12466] bond6: left allmulticast mode [ 221.534988][ T7541] hsr0 speed is unknown, defaulting to 1000 [ 221.732219][T12488] macvtap0: entered promiscuous mode [ 221.756178][T12488] macvtap0: entered allmulticast mode [ 221.768919][T12488] bond0: entered allmulticast mode [ 221.784414][T12488] bond0: entered promiscuous mode [ 221.811211][T12488] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 221.828101][T12488] team0: Device macvtap0 failed to register rx_handler [ 221.837004][T12488] bond0: left allmulticast mode [ 221.841984][T12488] bond0: left promiscuous mode [ 222.005121][T12504] veth0: entered promiscuous mode [ 222.047451][T12507] IPVS: set_ctl: invalid protocol: 0 172.20.20.49:20003 [ 222.064107][T12504] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 222.094826][T12509] netlink: 'syz.4.1834': attribute type 1 has an invalid length. [ 222.154453][T12509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.167476][T12503] veth0: left promiscuous mode [ 222.199737][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1834'. [ 222.277964][T12522] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1838'. [ 222.279920][T12523] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1838'. [ 222.570756][T12541] netlink: 'syz.3.1843': attribute type 5 has an invalid length. [ 222.731552][T12550] netlink: 'syz.3.1847': attribute type 7 has an invalid length. [ 222.973169][T12566] block nbd1: Unsupported socket: shutdown callout must be supported. [ 223.038111][T12566] netlink: 'syz.3.1849': attribute type 1 has an invalid length. [ 223.279391][T12583] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 223.287166][T12583] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 223.304077][T12583] netlink: 'syz.1.1854': attribute type 1 has an invalid length. [ 223.668170][T12601] bond0: left allmulticast mode [ 223.822986][T12609] netlink: 'syz.1.1862': attribute type 5 has an invalid length. [ 223.888828][T12609] geneve4: entered promiscuous mode [ 223.902525][T12609] geneve4: entered allmulticast mode [ 224.999571][T12029] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 225.016915][T12029] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 225.044354][T12029] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 225.094678][T12029] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.114214][T12029] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.188012][T12029] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 225.235521][T12029] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.244432][T12029] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.288356][T12029] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 225.315922][T12642] tipc: Bearer : already 2 bearers with priority 10 [ 225.325150][T12642] tipc: Bearer : trying with adjusted priority [ 225.333079][T12642] tipc: Enabling of bearer rejected, failed to enable media [ 225.369871][T12641] bond7: entered promiscuous mode [ 225.375025][T12641] bond7: entered allmulticast mode [ 225.381717][T12641] 8021q: adding VLAN 0 to HW filter on device bond7 [ 225.389608][T12029] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.399147][T12029] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.411353][T12029] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 225.431263][T12029] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.445646][T12029] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.454800][T12029] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 225.487121][T12649] netlink: 'syz.3.1872': attribute type 1 has an invalid length. [ 225.535060][T12649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.592749][T12649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.614871][T12649] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 225.632850][T12649] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 225.688673][T12661] __nla_validate_parse: 8 callbacks suppressed [ 225.688692][T12661] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1877'. [ 225.717761][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1877'. [ 225.730883][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'. [ 225.822248][T12676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.829959][T12676] IPv6: NLM_F_CREATE should be set when creating new route [ 225.837361][T12676] IPv6: NLM_F_CREATE should be set when creating new route [ 225.844605][T12676] IPv6: NLM_F_CREATE should be set when creating new route [ 225.883645][T12676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.903623][T12676] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 226.178693][T12696] macsec0: entered promiscuous mode [ 226.184174][T12696] macsec0: entered allmulticast mode [ 226.211103][T12696] veth1_macvtap: entered allmulticast mode [ 226.221450][T12696] bridge0: port 1(macsec0) entered blocking state [ 226.228295][T12696] bridge0: port 1(macsec0) entered disabled state [ 226.236708][T12695] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1884'. [ 226.243648][T12696] bridge0: port 1(macsec0) entered blocking state [ 226.252265][T12696] bridge0: port 1(macsec0) entered forwarding state [ 226.350691][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 226.392989][T12710] team1: entered promiscuous mode [ 226.403373][T12710] team1: entered allmulticast mode [ 226.541555][T12729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1895'. [ 226.590773][T12726] syzkaller0: entered promiscuous mode [ 226.606774][T12726] syzkaller0: entered allmulticast mode [ 226.639637][T12726] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1893'. [ 226.665697][T12726] openvswitch: netlink: Flow key attr not present in new flow. [ 226.677683][T12726] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 226.786800][T12737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1897'. [ 227.513175][T12781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1910'. [ 227.541800][ T36] tipc: Subscription rejected, illegal request [ 227.565646][T12781] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1910'. [ 227.968259][T12804] tipc: Enabled bearer , priority 0 [ 227.987203][T12800] tipc: Disabling bearer [ 228.921494][T12872] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 229.240762][T12886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.551882][T12911] geneve2: entered promiscuous mode [ 229.697605][T12917] xfrm1: entered promiscuous mode [ 229.703542][T12917] xfrm1: entered allmulticast mode [ 230.107729][T12936] vlan3: entered allmulticast mode [ 230.112898][T12936] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 230.996377][T12980] netlink: 'syz.3.1969': attribute type 21 has an invalid length. [ 231.004452][T12980] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.014084][T12980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.021375][T12980] IPv6: NLM_F_CREATE should be set when creating new route [ 231.028661][T12980] IPv6: NLM_F_CREATE should be set when creating new route [ 231.036009][T12980] IPv6: NLM_F_CREATE should be set when creating new route [ 231.117790][T12986] netlink: 'syz.4.1972': attribute type 32 has an invalid length. [ 231.136353][T12986] __nla_validate_parse: 16 callbacks suppressed [ 231.136372][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'. [ 231.178087][T12986] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 231.211699][T12992] netlink: 'syz.1.1974': attribute type 2 has an invalid length. [ 231.223736][T12992] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1974'. [ 231.382716][T13006] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1979'. [ 231.394632][T13006] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1979'. [ 231.403720][T13010] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.526835][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 231.705122][T13029] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1986'. [ 231.818836][T13032] netlink: 152064 bytes leftover after parsing attributes in process `syz.0.1987'. [ 231.841835][T13032] netlink: zone id is out of range [ 231.858334][T13032] netlink: zone id is out of range [ 231.873766][T13032] netlink: zone id is out of range [ 231.892683][T13032] netlink: zone id is out of range [ 231.908936][T13032] netlink: zone id is out of range [ 231.914482][T13041] netlink: 'syz.4.1989': attribute type 2 has an invalid length. [ 231.923240][T13032] netlink: zone id is out of range [ 231.935197][T13032] netlink: zone id is out of range [ 231.968918][T13032] netlink: zone id is out of range [ 231.984354][T13032] netlink: zone id is out of range [ 232.000779][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1990'. [ 232.004669][T13032] netlink: zone id is out of range [ 232.054644][T13044] tipc: Enabled bearer , priority 0 [ 232.067653][T13044] syzkaller0: entered promiscuous mode [ 232.115510][T13044] syzkaller0: entered allmulticast mode [ 232.159172][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1991'. [ 232.185022][T13044] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 232.221802][T13055] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1992'. [ 232.247351][T13040] tipc: Resetting bearer [ 232.315595][T13038] tipc: Resetting bearer [ 232.368259][T13038] tipc: Disabling bearer [ 232.551260][T13070] netlink: 'syz.2.1997': attribute type 2 has an invalid length. [ 233.065170][T13100] netlink: 'syz.2.2005': attribute type 3 has an invalid length. [ 233.385338][T13114] hsr0 speed is unknown, defaulting to 1000 [ 233.412455][T13116] netlink: 'syz.4.2013': attribute type 10 has an invalid length. [ 235.716083][T13240] netlink: 'syz.0.2050': attribute type 10 has an invalid length. [ 235.748634][T13240] team0: Device veth0_vlan failed to register rx_handler [ 236.036174][T13262] tipc: Enabling of bearer rejected, failed to enable media [ 236.216658][T13268] __nla_validate_parse: 8 callbacks suppressed [ 236.216676][T13268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2057'. [ 236.268776][T13272] netlink: 'syz.4.2058': attribute type 10 has an invalid length. [ 236.467051][T13283] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 236.504118][T13281] team0: Device gtp0 is of different type [ 236.545732][T13291] netlink: 'syz.0.2063': attribute type 4 has an invalid length. [ 236.559919][T13292] netlink: 'syz.0.2063': attribute type 4 has an invalid length. [ 236.845254][T13305] netlink: 'syz.4.2067': attribute type 10 has an invalid length. [ 236.893886][T13307] netlink: 'syz.2.2069': attribute type 7 has an invalid length. [ 236.925163][T13309] macsec0: entered promiscuous mode [ 236.938393][T13309] macsec0: entered allmulticast mode [ 236.984589][T13310] veth1_macvtap: entered promiscuous mode [ 237.017615][T13310] veth1_macvtap: entered allmulticast mode [ 237.055123][T13317] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2071'. [ 237.069693][T13310] macsec0: left promiscuous mode [ 237.075173][T13310] macsec0: left allmulticast mode [ 237.090946][T13310] veth1_macvtap: left allmulticast mode [ 237.362190][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2075'. [ 237.406017][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2075'. [ 237.791500][T13356] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 238.172064][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'. [ 238.209621][T13380] netlink: 'syz.1.2089': attribute type 1 has an invalid length. [ 238.213675][T13378] net_ratelimit: 232 callbacks suppressed [ 238.213696][T13378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.257965][T13380] netlink: 'syz.1.2089': attribute type 1 has an invalid length. [ 238.283018][T13387] IPVS: ip_vs_edit_dest(): server weight less than zero [ 238.311808][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'. [ 238.316715][T13388] netlink: 'syz.0.2092': attribute type 14 has an invalid length. [ 238.359287][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 238.430157][T13388] netlink: 'syz.0.2092': attribute type 14 has an invalid length. [ 238.431486][T12032] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.455558][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 238.518130][T12032] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.550817][T12032] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.593234][T13410] netlink: 'syz.4.2096': attribute type 29 has an invalid length. [ 238.671474][T13415] 8021q: adding VLAN 0 to HW filter on device bond8 [ 239.247060][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 239.256068][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2103'. [ 240.983464][T13508] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 241.157857][T13528] gretap1: entered promiscuous mode [ 241.179425][T13528] gretap1: entered allmulticast mode [ 241.192430][T13530] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 241.291586][T13536] __nla_validate_parse: 10 callbacks suppressed [ 241.291608][T13536] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2128'. [ 241.323780][T13538] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2129'. [ 241.476689][T13546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2133'. [ 241.496551][T13546] IPVS: Unknown mcast interface: veth1_to_team [ 241.691404][T13561] validate_nla: 8 callbacks suppressed [ 241.691423][T13561] netlink: 'syz.0.2137': attribute type 29 has an invalid length. [ 241.719468][T13563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2135'. [ 241.912700][T13576] netlink: 576 bytes leftover after parsing attributes in process `syz.0.2141'. [ 241.958265][T13582] netlink: 'syz.2.2143': attribute type 4 has an invalid length. [ 242.009486][T13586] netlink: 'syz.2.2143': attribute type 4 has an invalid length. [ 242.064796][T13581] hsr0 speed is unknown, defaulting to 1000 [ 242.321185][T13599] netem: change failed [ 242.350376][T13600] wg1: entered promiscuous mode [ 242.373182][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2148'. [ 242.403977][T13600] macsec1: entered promiscuous mode [ 242.418070][T13600] bridge0: entered promiscuous mode [ 242.423685][T13600] macsec1: entered allmulticast mode [ 242.429409][T13600] bridge0: entered allmulticast mode [ 242.438303][T13600] bridge0: port 1(macsec1) entered blocking state [ 242.445271][T13600] bridge0: port 1(macsec1) entered disabled state [ 242.467564][T13600] bridge0: left allmulticast mode [ 242.472782][T13600] bridge0: left promiscuous mode [ 242.621655][T13611] delete_channel: no stack [ 242.773631][ T30] audit: type=1800 audit(1757774101.932:3): pid=13618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2155" name="memory.events" dev="tmpfs" ino=2154 res=0 errno=0 [ 242.839319][T13620] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2156'. [ 242.848678][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2156'. [ 242.868907][T13622] syzkaller0: entered promiscuous mode [ 242.874416][T13622] syzkaller0: entered allmulticast mode [ 242.884714][T13622] tipc: Enabled bearer , priority 0 [ 242.894291][T13622] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 242.935804][T13622] tipc: Resetting bearer [ 242.946180][T13621] tipc: Resetting bearer [ 242.989398][T13621] tipc: Disabling bearer [ 242.996301][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2159'. [ 243.008314][T13627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2159'. [ 243.029407][T13630] team0: Device gtp1 is of different type [ 243.057678][T13627] geneve2: entered promiscuous mode [ 243.062993][T13627] geneve2: entered allmulticast mode [ 243.247979][T13642] xt_l2tp: invalid flags combination: 8 [ 243.314649][T13646] macvtap2: entered promiscuous mode [ 243.325249][T13646] macvtap2: entered allmulticast mode [ 243.369849][T13650] gretap0: entered promiscuous mode [ 243.714079][T13668] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.741754][T13668] team0: Cannot enslave team device to itself [ 243.918966][T13679] openvswitch: netlink: Invalid VLAN frame [ 244.373701][T13713] netlink: 'syz.1.2188': attribute type 10 has an invalid length. [ 244.589124][T13723] netlink: 'syz.2.2193': attribute type 1 has an invalid length. [ 244.696281][T13732] bond9: (slave bridge6): making interface the new active one [ 244.704717][T13732] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 244.804765][T13740] pim6reg527: entered allmulticast mode [ 245.104182][T13764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.390397][T13777] xt_time: unknown flags 0xf4 [ 245.742687][T13806] netlink: 'syz.0.2218': attribute type 1 has an invalid length. [ 245.944709][T13819] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 246.273142][T13841] netlink: 'syz.4.2230': attribute type 12 has an invalid length. [ 246.551435][T13863] __nla_validate_parse: 20 callbacks suppressed [ 246.551454][T13863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2237'. [ 246.708321][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2241'. [ 246.784258][T13874] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2242'. [ 247.027095][T13892] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 247.041925][T13892] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2246'. [ 247.051324][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2246'. [ 247.062955][T13892] siw: device registration error -23 [ 247.241240][T13908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2252'. [ 247.389075][T13915] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 247.397633][T13915] netlink: 'syz.3.2254': attribute type 2 has an invalid length. [ 247.497738][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2255'. [ 247.631787][T13919] hsr_slave_0 (unregistering): left promiscuous mode [ 247.793178][T13941] IPVS: length: 144 != 24 [ 247.807176][T13942] IPVS: length: 144 != 24 [ 248.068266][T13958] netlink: 'syz.3.2269': attribute type 1 has an invalid length. [ 248.080416][T13958] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2269'. [ 248.118707][T13967] veth1_macvtap: left promiscuous mode [ 248.359101][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 248.438538][T13993] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 248.518561][T14002] netlink: 'syz.1.2279': attribute type 12 has an invalid length. [ 248.765225][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2287'. [ 249.164894][T14053] netlink: 'syz.0.2297': attribute type 4 has an invalid length. [ 249.880401][T14106] tipc: Enabled bearer , priority 0 [ 249.890587][T14106] syzkaller0: entered promiscuous mode [ 249.897081][T14106] syzkaller0: entered allmulticast mode [ 250.009401][T14111] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 250.027315][T14111] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 250.101725][T14115] syzkaller0: mtu less than device minimum [ 250.258903][T14120] veth3: entered allmulticast mode [ 250.268071][T14105] tipc: Resetting bearer [ 250.309557][T14105] tipc: Disabling bearer [ 251.251886][T14183] netlink: 'syz.1.2336': attribute type 1 has an invalid length. [ 251.287777][T14183] 8021q: adding VLAN 0 to HW filter on device bond9 [ 251.297473][T14184] netlink: 'syz.2.2337': attribute type 6 has an invalid length. [ 251.307839][T14184] netlink: 'syz.2.2337': attribute type 6 has an invalid length. [ 251.408922][T14195] netlink: 'syz.2.2340': attribute type 1 has an invalid length. [ 251.465960][T14195] 8021q: adding VLAN 0 to HW filter on device bond10 [ 251.574905][T14208] tipc: Enabled bearer , priority 0 [ 251.587486][T14208] syzkaller0: entered promiscuous mode [ 251.598007][T14208] syzkaller0: entered allmulticast mode [ 251.627017][T14208] tipc: Resetting bearer [ 251.664329][T14206] tipc: Resetting bearer [ 251.703471][T14206] tipc: Disabling bearer [ 251.721291][T14215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.002981][T14240] __nla_validate_parse: 17 callbacks suppressed [ 252.003000][T14240] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2353'. [ 252.035634][T14239] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2353'. [ 252.148922][T14246] tipc: Bearer : already 2 bearers with priority 10 [ 252.150420][T14248] netlink: 'syz.1.2358': attribute type 1 has an invalid length. [ 252.161881][T14246] tipc: Bearer : trying with adjusted priority [ 252.174229][T14246] tipc: New replicast peer: 255.255.255.255 [ 252.181062][T14246] tipc: Enabled bearer , priority 9 [ 252.296639][T14248] 8021q: adding VLAN 0 to HW filter on device bond10 [ 252.419772][T14262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2362'. [ 252.466881][T14262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2362'. [ 252.488832][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 252.505818][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 252.521337][T14270] netlink: 'syz.0.2365': attribute type 21 has an invalid length. [ 252.529671][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'. [ 253.414674][T14305] netlink: 'syz.1.2376': attribute type 9 has an invalid length. [ 253.435633][T14309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2378'. [ 253.574088][T14319] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2382'. [ 253.589216][T14319] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2382'. [ 254.012239][T14350] pim6reg: entered allmulticast mode [ 254.533374][T14373] openvswitch: netlink: Message has 4 unknown bytes. [ 254.540633][T14373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.718928][T14392] gre0: entered promiscuous mode [ 254.959276][T14406] netlink: 'syz.3.2409': attribute type 2 has an invalid length. [ 255.558861][T14437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.611154][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.907900][T14451] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 256.097283][T14458] nbd1: detected capacity change from 0 to 127 [ 256.108459][ T5873] block nbd1: Receive control failed (result -32) [ 256.699675][T14506] syz_tun: left allmulticast mode [ 257.011446][T14525] __nla_validate_parse: 10 callbacks suppressed [ 257.011466][T14525] netlink: 159784 bytes leftover after parsing attributes in process `syz.0.2451'. [ 257.049439][T14525] netlink: 'syz.0.2451': attribute type 1 has an invalid length. [ 257.209378][T14535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2457'. [ 257.273375][T14538] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2458'. [ 257.298864][T14537] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2458'. [ 257.338849][T14541] netlink: 'syz.3.2458': attribute type 4 has an invalid length. [ 257.369702][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2458'. [ 257.385544][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2458'. [ 257.400361][T14546] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !ãÙdñ4QNªå¯¿$ûÌÌULÙv…D£øUDŒw [ 257.509581][T14550] syzkaller0: entered promiscuous mode [ 257.515342][T14550] syzkaller0: entered allmulticast mode [ 257.525256][T14551] sysfs: cannot create duplicate filename '/class/ieee80211/!ãÙdñ4QNªå¯¿$ûÌÌULÙv…D£øUDŒw˜}zR3âëp' [ 257.537496][T14551] CPU: 0 UID: 0 PID: 14551 Comm: syz.2.2461 Not tainted syzkaller #0 PREEMPT(full) [ 257.537522][T14551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.537544][T14551] Call Trace: [ 257.537552][T14551] [ 257.537561][T14551] dump_stack_lvl+0x189/0x250 [ 257.537594][T14551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.537619][T14551] ? __pfx__printk+0x10/0x10 [ 257.537655][T14551] ? kernfs_path_from_node+0x2f/0x290 [ 257.537677][T14551] ? kernfs_path_from_node+0x250/0x290 [ 257.537697][T14551] ? kernfs_path_from_node+0x2f/0x290 [ 257.537724][T14551] sysfs_warn_dup+0x8e/0xa0 [ 257.537746][T14551] sysfs_do_create_link_sd+0xc0/0x110 [ 257.537770][T14551] device_add_class_symlinks+0x1cf/0x240 [ 257.537800][T14551] device_add+0x475/0xb50 [ 257.537829][T14551] wiphy_register+0x1ba6/0x28d0 [ 257.537868][T14551] ? __pfx_wiphy_register+0x10/0x10 [ 257.537888][T14551] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 257.537922][T14551] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 257.537954][T14551] ieee80211_register_hw+0x3484/0x4100 [ 257.537997][T14551] ? ieee80211_register_hw+0x1461/0x4100 [ 257.538035][T14551] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 257.538067][T14551] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 257.538107][T14551] ? __hrtimer_setup+0x187/0x210 [ 257.538126][T14551] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 257.538149][T14551] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 257.538213][T14551] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 257.538260][T14551] ? trace_kmalloc+0x1f/0xd0 [ 257.538293][T14551] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 257.538323][T14551] ? kstrndup+0xbf/0x160 [ 257.538358][T14551] hwsim_new_radio_nl+0xea4/0x1b10 [ 257.538393][T14551] ? __pfx___nla_validate_parse+0x10/0x10 [ 257.538443][T14551] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 257.538508][T14551] ? __nla_parse+0x40/0x60 [ 257.538536][T14551] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 257.538576][T14551] genl_family_rcv_msg_doit+0x212/0x300 [ 257.538615][T14551] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 257.538661][T14551] ? bpf_lsm_capable+0x9/0x20 [ 257.538689][T14551] ? security_capable+0x7e/0x2e0 [ 257.538729][T14551] genl_rcv_msg+0x60e/0x790 [ 257.538766][T14551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.538794][T14551] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 257.538843][T14551] netlink_rcv_skb+0x208/0x470 [ 257.538864][T14551] ? __lock_acquire+0xab9/0xd20 [ 257.538910][T14551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.538960][T14551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.539008][T14551] ? down_read+0x1ad/0x2e0 [ 257.539038][T14551] genl_rcv+0x28/0x40 [ 257.539065][T14551] netlink_unicast+0x82f/0x9e0 [ 257.539111][T14551] ? __pfx_netlink_unicast+0x10/0x10 [ 257.539165][T14551] ? netlink_sendmsg+0x642/0xb30 [ 257.539186][T14551] ? skb_put+0x11b/0x210 [ 257.539217][T14551] netlink_sendmsg+0x805/0xb30 [ 257.539254][T14551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.539288][T14551] ? aa_sock_msg_perm+0xf1/0x1d0 [ 257.539314][T14551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.539337][T14551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.539362][T14551] __sock_sendmsg+0x21c/0x270 [ 257.539400][T14551] ____sys_sendmsg+0x505/0x830 [ 257.539435][T14551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.539475][T14551] ? import_iovec+0x74/0xa0 [ 257.539509][T14551] ___sys_sendmsg+0x21f/0x2a0 [ 257.539540][T14551] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.539615][T14551] ? __fget_files+0x2a/0x420 [ 257.539633][T14551] ? __fget_files+0x3a0/0x420 [ 257.539666][T14551] __x64_sys_sendmsg+0x19b/0x260 [ 257.539697][T14551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.539739][T14551] ? rcu_is_watching+0x15/0xb0 [ 257.539768][T14551] ? do_syscall_64+0xbe/0x3b0 [ 257.539796][T14551] do_syscall_64+0xfa/0x3b0 [ 257.539820][T14551] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.539842][T14551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.539864][T14551] ? clear_bhb_loop+0x60/0xb0 [ 257.539891][T14551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.539913][T14551] RIP: 0033:0x7f268dd8eba9 [ 257.539933][T14551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.539953][T14551] RSP: 002b:00007f268ecc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.539976][T14551] RAX: ffffffffffffffda RBX: 00007f268dfd6090 RCX: 00007f268dd8eba9 [ 257.539992][T14551] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 257.540006][T14551] RBP: 00007f268de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 257.540019][T14551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.540032][T14551] R13: 00007f268dfd6128 R14: 00007f268dfd6090 R15: 00007ffe5acce2f8 [ 257.540067][T14551] [ 257.547158][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2463'. [ 257.912450][T14560] netlink: 'syz.1.2464': attribute type 1 has an invalid length. [ 258.183910][T14565] bond11: (slave bridge4): making interface the new active one [ 258.192507][T14565] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 259.583632][T14594] syzkaller1: entered promiscuous mode [ 259.618500][T14594] syzkaller1: entered allmulticast mode [ 259.666307][T14601] tipc: Enabling of bearer rejected, failed to enable media [ 259.685760][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2474'. [ 259.723399][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 259.798402][T14606] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 259.811509][T14606] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 259.825868][T14609] netlink: 'syz.0.2476': attribute type 12 has an invalid length. [ 259.836346][T14606] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2475'. [ 259.944482][T14615] netlink: 'syz.4.2478': attribute type 10 has an invalid length. [ 260.004753][T14620] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 260.044791][T14623] netlink: 'syz.1.2477': attribute type 1 has an invalid length. [ 260.176880][T14627] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.189743][T14632] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 260.289682][T14632] hsr0 speed is unknown, defaulting to 1000 [ 260.375968][T14638] syzkaller1: entered promiscuous mode [ 260.381930][T14638] syzkaller1: entered allmulticast mode [ 260.446121][T14644] netem: change failed [ 261.272022][T14694] netem: change failed [ 261.283706][T14695] netlink: 'syz.4.2504': attribute type 4 has an invalid length. [ 261.332404][T14697] hsr0 speed is unknown, defaulting to 1000 [ 261.701987][T14719] syzkaller1: entered promiscuous mode [ 261.709555][T14719] syzkaller1: entered allmulticast mode [ 261.844681][T14726] netlink: 'syz.2.2515': attribute type 7 has an invalid length. [ 261.939150][T14730] netlink: zone id is out of range [ 261.961654][T14730] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 262.380890][T14726] __nla_validate_parse: 13 callbacks suppressed [ 262.380912][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 262.567485][T14757] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2525'. [ 262.598051][T14757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2525'. [ 262.662182][T14764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2527'. [ 262.728785][T14763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2526'. [ 262.770887][T14767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.037658][T14790] lo speed is unknown, defaulting to 1000 [ 263.046832][T14790] lo speed is unknown, defaulting to 1000 [ 263.053639][T14790] lo speed is unknown, defaulting to 1000 [ 263.172902][T14799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2536'. [ 263.212772][T14799] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2536'. [ 263.228303][T14798] delete_channel: no stack [ 263.538911][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2546'. [ 263.632494][T14823] netlink: 'syz.2.2547': attribute type 9 has an invalid length. [ 263.670394][T14790] infiniband syz0: set active [ 263.676437][ T7562] lo speed is unknown, defaulting to 1000 [ 263.682396][T14790] infiniband syz0: added lo [ 263.720979][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 263.727633][T14790] RDS/IB: syz0: added [ 263.730236][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2549'. [ 263.734981][T14790] smc: adding ib device syz0 with port count 1 [ 263.747125][T14829] netlink: 'syz.3.2549': attribute type 10 has an invalid length. [ 263.781531][T14790] smc: ib device syz0 port 1 has pnetid [ 263.811971][ T7545] lo speed is unknown, defaulting to 1000 [ 263.827032][T14790] lo speed is unknown, defaulting to 1000 [ 264.415270][T14790] lo speed is unknown, defaulting to 1000 [ 264.657956][T14868] netlink: 'syz.0.2561': attribute type 21 has an invalid length. [ 264.686299][T14868] netlink: 'syz.0.2561': attribute type 22 has an invalid length. [ 264.737611][T14868] netlink: 'syz.0.2561': attribute type 23 has an invalid length. [ 264.755678][T14868] netlink: 'syz.0.2561': attribute type 25 has an invalid length. [ 264.765660][T14868] netlink: 'syz.0.2561': attribute type 26 has an invalid length. [ 264.926660][T14790] lo speed is unknown, defaulting to 1000 [ 264.998104][T14891] hsr_slave_1: left promiscuous mode [ 265.469730][T14790] lo speed is unknown, defaulting to 1000 [ 265.990600][T14790] lo speed is unknown, defaulting to 1000 [ 266.297806][T14961] netlink: 'syz.3.2591': attribute type 11 has an invalid length. [ 266.607172][T14969] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 266.831707][T14984] netlink: 'syz.3.2603': attribute type 10 has an invalid length. [ 266.969177][T14991] netlink: 'syz.2.2601': attribute type 11 has an invalid length. [ 267.296724][T15019] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 267.323710][T15019] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 267.615311][T15045] __nla_validate_parse: 13 callbacks suppressed [ 267.615333][T15045] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2623'. [ 267.704752][T15047] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2625'. [ 267.826418][T15053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2627'. [ 267.838360][T15055] netlink: 'syz.3.2628': attribute type 3 has an invalid length. [ 267.849185][T15055] netlink: 'syz.3.2628': attribute type 1 has an invalid length. [ 268.025782][T15053] can: request_module (can-proto-0) failed. [ 268.234542][T15080] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2635'. [ 269.045847][T15139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2652'. [ 269.152166][T15151] syzkaller1: left promiscuous mode [ 269.170833][T15151] syzkaller1: left allmulticast mode [ 269.180247][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2653'. [ 269.386128][T15153] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 269.396889][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 269.430529][T15146] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2653'. [ 269.439930][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 269.440118][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 269.458347][ T1093] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.475308][ T1093] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.500301][ T1093] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.618286][T15169] netlink: 'syz.0.2661': attribute type 6 has an invalid length. [ 269.681067][T15163] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 270.413465][T15228] netlink: 'syz.1.2678': attribute type 1 has an invalid length. [ 270.435788][T15228] netlink: 'syz.1.2678': attribute type 2 has an invalid length. [ 270.471492][T15238] xt_policy: neither incoming nor outgoing policy selected [ 270.759689][T15257] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 271.055301][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880564a0c00: rx timeout, send abort [ 271.084637][T15276] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20004 [ 271.556840][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805696f400: rx timeout, send abort [ 271.565419][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880564a0c00: abort rx timeout. Force session deactivation [ 271.952758][T15301] netlink: 'syz.0.2698': attribute type 12 has an invalid length. [ 271.961012][T15301] netlink: 'syz.0.2698': attribute type 12 has an invalid length. [ 272.065083][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805696f400: abort rx timeout. Force session deactivation [ 272.370869][T15321] syzkaller1: entered promiscuous mode [ 272.390697][T15321] syzkaller1: entered allmulticast mode [ 272.410638][T15321] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 272.714793][T15342] __nla_validate_parse: 14 callbacks suppressed [ 272.714812][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2710'. [ 272.924794][T15358] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2714'. [ 273.102703][T15367] netlink: 'syz.3.2717': attribute type 21 has an invalid length. [ 273.116926][T15367] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2717'. [ 273.243547][T15378] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2722'. [ 273.299661][T15380] netlink: 'syz.4.2722': attribute type 1 has an invalid length. [ 273.326708][T15384] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2723'. [ 273.653645][T15408] openvswitch: netlink: Unknown key attributes 2 [ 273.714523][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2731'. [ 273.852960][T15423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2734'. [ 273.875139][T15423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2734'. [ 274.022194][T15433] : entered promiscuous mode [ 274.031771][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2737'. [ 274.054643][T15438] netlink: 'syz.3.2740': attribute type 1 has an invalid length. [ 274.074663][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 274.087692][T15438] netlink: 'syz.3.2740': attribute type 1 has an invalid length. [ 274.274271][T15455] netlink: 'syz.4.2746': attribute type 11 has an invalid length. [ 275.312762][T15515] netlink: 'syz.3.2762': attribute type 7 has an invalid length. [ 275.546936][T15527] netlink: 'syz.2.2766': attribute type 3 has an invalid length. [ 275.631727][T15531] netlink: 'syz.1.2768': attribute type 3 has an invalid length. [ 275.779526][T15544] veth0: entered promiscuous mode [ 275.909455][T15544] veth0: left promiscuous mode [ 275.960325][T15548] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 276.014638][T15561] netlink: 'syz.0.2777': attribute type 8 has an invalid length. [ 276.433414][T15594] tipc: Enabled bearer , priority 0 [ 276.448089][T15576] syzkaller0: entered promiscuous mode [ 276.453778][T15576] syzkaller0: entered allmulticast mode [ 276.508963][T15576] tipc: Resetting bearer [ 276.581793][T15574] tipc: Resetting bearer [ 276.603971][T15615] netlink: 'syz.0.2790': attribute type 2 has an invalid length. [ 276.629769][T15574] tipc: Disabling bearer [ 276.654626][T15616] erspan0: entered promiscuous mode [ 276.661248][T15616] gretap0: entered promiscuous mode [ 276.668517][T15616] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 276.680183][T15616] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 277.201050][T15638] IPVS: persistence engine module ip_vs_pe_À not found [ 277.239726][T15643] netlink: 'syz.3.2802': attribute type 1 has an invalid length. [ 277.941268][T15685] netlink: 'syz.4.2815': attribute type 1 has an invalid length. [ 278.004872][T15688] __nla_validate_parse: 15 callbacks suppressed [ 278.004895][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2816'. [ 278.203655][T15702] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2820'. [ 278.244404][T15709] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:0 [ 278.268307][T15702] vlan3: entered allmulticast mode [ 278.277252][T15702] gretap0: entered allmulticast mode [ 278.313835][T15717] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 278.476952][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2825'. [ 278.624229][T15736] netlink: 'syz.0.2829': attribute type 1 has an invalid length. [ 278.660731][T15736] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2829'. [ 278.672302][T15738] netlink: 'syz.2.2830': attribute type 13 has an invalid length. [ 278.689562][T15736] netlink: 'syz.0.2829': attribute type 1 has an invalid length. [ 278.711142][T15736] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2829'. [ 278.863122][T15752] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2834'. [ 278.882559][T15752] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2834'. [ 278.935228][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2834'. [ 279.176320][T15773] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2842'. [ 279.186325][T15773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2842'. [ 280.402601][T15838] gre2: entered promiscuous mode [ 280.425510][T15838] gre2: entered allmulticast mode [ 280.600011][T15852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.660048][T15852] openvswitch: netlink: Missing key (keys=40, expected=80) [ 280.771753][T15861] smc: removing ib device syz0 [ 281.003318][T15879] validate_nla: 1 callbacks suppressed [ 281.003337][T15879] netlink: 'syz.1.2876': attribute type 1 has an invalid length. [ 281.154366][T15868] vlan0 (unregistering): left allmulticast mode [ 281.161748][T15868] veth0_vlan (unregistering): left allmulticast mode [ 281.168839][T15868] vlan0 (unregistering): left promiscuous mode [ 282.106415][T15908] netlink: 'syz.2.2885': attribute type 11 has an invalid length. [ 282.971197][T15933] hsr0 speed is unknown, defaulting to 1000 [ 283.113675][T15951] __nla_validate_parse: 8 callbacks suppressed [ 283.113694][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2898'. [ 283.906138][T15988] netlink: 'syz.2.2908': attribute type 4 has an invalid length. [ 284.006883][T15989] netlink: 'syz.2.2908': attribute type 4 has an invalid length. [ 286.798350][T15996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.002458][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2914'. [ 287.077871][T16012] delete_channel: no stack [ 287.261018][T16030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2917'. [ 287.389765][T16035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2916'. [ 287.399506][T16036] IPv6: Can't replace route, no match found [ 287.842106][T16052] netlink: 'syz.0.2922': attribute type 2 has an invalid length. [ 287.861258][T16052] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2922'. [ 287.897846][T16050] netlink: 'syz.0.2922': attribute type 5 has an invalid length. [ 287.972341][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.986280][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.994225][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.006513][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.010814][T16062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2924'. [ 288.013733][T12032] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.044431][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.052201][T16050] netlink: 'syz.0.2922': attribute type 1 has an invalid length. [ 288.081460][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.089444][T16064] syzkaller1: entered promiscuous mode [ 288.095326][T16064] syzkaller1: entered allmulticast mode [ 288.097079][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.110532][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.120039][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.122546][T16058] sch_tbf: burst 0 is lower than device wlan1 mtu (1514) ! [ 288.128115][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.214485][T12032] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.274508][T16058] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2924'. [ 288.292050][T16058] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2924'. [ 288.354324][T12032] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.394666][T16060] hsr0 speed is unknown, defaulting to 1000 [ 288.476212][T12032] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.719174][T16092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2935'. [ 288.764874][T16096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2936'. [ 289.023997][T12032] bond5 (unregistering): (slave gretap2): Releasing active interface [ 289.075280][T12032] dvmrp1 (unregistering): left allmulticast mode [ 289.112931][T12032] team0: Port device geneve0 removed [ 289.426427][T12032] bond9 (unregistering): (slave bridge6): Releasing active interface [ 289.542613][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'. [ 289.610515][T12032] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 289.621097][T12032] bond0 (unregistering): Released all slaves [ 289.635784][T12032] bond1 (unregistering): Released all slaves [ 289.652573][T12032] bond2 (unregistering): Released all slaves [ 289.666410][T12032] bond3 (unregistering): Released all slaves [ 289.757450][T12032] bond4 (unregistering): Released all slaves [ 289.772725][T12032] bond5 (unregistering): Released all slaves [ 289.859699][T12032] bond6 (unregistering): Released all slaves [ 289.873573][T12032] bond7 (unregistering): Released all slaves [ 289.889416][T12032] bond8 (unregistering): Released all slaves [ 289.903419][T12032] bond9 (unregistering): Released all slaves [ 289.995108][T12032] bond10 (unregistering): Released all slaves [ 290.062305][T16106] netlink: 'syz.4.2940': attribute type 1 has an invalid length. [ 290.104082][T16106] netlink: 'syz.4.2940': attribute type 2 has an invalid length. [ 290.143682][T16060] chnl_net:caif_netlink_parms(): no params data found [ 290.176723][ T5873] Bluetooth: hci1: command tx timeout [ 290.354147][T16118] syzkaller1: left promiscuous mode [ 290.363075][T16118] syzkaller1: left allmulticast mode [ 290.369887][T16123] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2946'. [ 290.457151][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.464579][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.471947][T16060] bridge_slave_0: entered allmulticast mode [ 290.479661][T16060] bridge_slave_0: entered promiscuous mode [ 290.490130][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.497512][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.504659][T16060] bridge_slave_1: entered allmulticast mode [ 290.512553][T16060] bridge_slave_1: entered promiscuous mode [ 290.544403][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.557006][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.592791][T16060] team0: Port device team_slave_0 added [ 290.602485][T16060] team0: Port device team_slave_1 added [ 290.631877][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.639700][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.666178][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.678401][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.686128][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.714033][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.762447][T16060] hsr_slave_0: entered promiscuous mode [ 290.769060][T16060] hsr_slave_1: entered promiscuous mode [ 290.775120][T16060] debugfs: 'hsr0' already exists in 'hsr' [ 290.781558][T16060] Cannot create hsr debugfs directory [ 291.186955][T16060] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 291.197442][T16060] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 291.208426][T16060] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 291.218625][T16060] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 291.297672][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.319065][T16060] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.333019][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.340217][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.353066][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.360225][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.550770][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.597380][T16060] veth0_vlan: entered promiscuous mode [ 291.609450][T16060] veth1_vlan: entered promiscuous mode [ 291.638554][T16060] veth0_macvtap: entered promiscuous mode [ 291.648679][T16060] veth1_macvtap: entered promiscuous mode [ 291.667727][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.683446][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.697372][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.708334][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.717930][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.728893][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.763237][T12032] : left promiscuous mode [ 291.819666][T12032] tipc: Left network mode [ 291.820834][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.837860][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.883346][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.891576][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.102836][T12032] hsr_slave_0: left promiscuous mode [ 292.109326][T12032] hsr_slave_1: left promiscuous mode [ 292.115175][T12032] batman_adv: batadv0: Removing interface: dummy0 [ 292.245757][ T5873] Bluetooth: hci1: command tx timeout [ 292.810529][T12032] IPVS: stop unused estimator thread 0... [ 294.325491][ T5873] Bluetooth: hci1: command tx timeout [ 296.405569][ T5873] Bluetooth: hci1: command tx timeout [ 312.178311][T16149] bond0: (slave geneve2): Releasing active interface [ 312.271437][T16151] team0: Mode changed to "broadcast" [ 312.351206][T16155] openvswitch: netlink: IP tunnel dst address not specified [ 312.913500][T16176] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2958'. [ 313.056076][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.068708][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.083784][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.101356][T16192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2962'. [ 313.113351][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.130963][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.179244][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.193595][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 313.205243][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.328789][T16188] hsr0 speed is unknown, defaulting to 1000 [ 313.344980][T16205] netlink: 'syz.3.2966': attribute type 2 has an invalid length. [ 313.393084][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.423948][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 313.441029][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.594176][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.612439][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 313.623653][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.779702][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.803296][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 313.814308][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.854377][T16234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2974'. [ 313.973434][T16232] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.997144][T16232] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.011367][T16232] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 314.023156][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'. [ 314.044253][T16243] macsec0: entered promiscuous mode [ 314.051553][T16243] macsec0: entered allmulticast mode [ 314.058443][T16243] veth1_macvtap: entered allmulticast mode [ 314.064423][T16243] macsec0: left promiscuous mode [ 314.074191][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'. [ 314.077426][T16243] macsec0: left allmulticast mode [ 314.089474][T16243] veth1_macvtap: left allmulticast mode [ 314.184635][T16232] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.199723][T16232] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.211108][T16232] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 314.453783][T16232] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.464671][T16232] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.474977][T16232] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 314.492070][T16262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2983'. [ 314.528048][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2983'. [ 314.758366][T16188] chnl_net:caif_netlink_parms(): no params data found [ 314.922303][T16283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2990'. [ 314.957261][T16283] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2990'. [ 314.981333][T16287] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2988'. [ 315.205854][ T5873] Bluetooth: hci0: command tx timeout [ 315.238995][ T36] dvmrp1 (unregistering): left allmulticast mode [ 315.670917][ T36] bond1 (unregistering): Released all slaves [ 315.697510][ T36] bond0 (unregistering): Released all slaves [ 315.793500][ T36] bond2 (unregistering): Released all slaves [ 315.886095][ T36] bond3 (unregistering): Released all slaves [ 316.039193][T16289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.061168][T16289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.076237][T16289] bond0 (unregistering): Released all slaves [ 316.117933][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f71c00: rx timeout, send abort [ 316.126782][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056f71c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 316.142725][ T36] tipc: Disabling bearer [ 316.161588][ T36] tipc: Disabling bearer [ 316.187305][ T36] tipc: Disabling bearer [ 316.202851][ T36] tipc: Left network mode [ 316.435734][ T1093] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.447232][ T1093] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.456376][ T1093] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.566439][T16188] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.586781][T16188] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.594059][T16188] bridge_slave_0: entered allmulticast mode [ 316.602179][T16188] bridge_slave_0: entered promiscuous mode [ 316.636974][T16323] tipc: Enabled bearer , priority 0 [ 316.663982][T16188] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.673233][T16188] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.681461][T16331] sctp: [Deprecated]: syz.2.3003 (pid 16331) Use of int in max_burst socket option deprecated. [ 316.681461][T16331] Use struct sctp_assoc_value instead [ 316.690387][T16188] bridge_slave_1: entered allmulticast mode [ 316.709673][T16188] bridge_slave_1: entered promiscuous mode [ 316.729388][ T1093] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.738407][ T1093] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.746969][ T1093] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.767335][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.785566][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.804108][ T49] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.942079][ T3484] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.950651][ T3484] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 316.959096][ T3484] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.995250][T16188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.010201][T16188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.049456][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.078465][T16343] netlink: 'syz.1.3006': attribute type 1 has an invalid length. [ 317.180487][T16347] vlan4: entered allmulticast mode [ 317.186671][T16347] hsr0: entered allmulticast mode [ 317.191801][T16347] hsr_slave_0: entered allmulticast mode [ 317.197796][T16347] hsr_slave_1: entered allmulticast mode [ 317.235295][T16188] team0: Port device team_slave_0 added [ 317.286128][ T5873] Bluetooth: hci0: command tx timeout [ 317.320321][T16347] 8021q: VLANs not supported on ip6_vti0 [ 317.370071][T16188] team0: Port device team_slave_1 added [ 317.454360][T16188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.477825][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.544778][T16188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.579128][T16360] netlink: 'syz.0.3011': attribute type 29 has an invalid length. [ 317.589850][T16363] netlink: 'syz.0.3011': attribute type 29 has an invalid length. [ 317.628950][T16188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.642939][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.669578][T16188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.683722][ T10] tipc: Node number set to 1215779620 [ 317.717466][ T36] hsr_slave_0: left promiscuous mode [ 317.724222][ T36] hsr_slave_1: left promiscuous mode [ 317.736366][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.743892][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.760157][ T36] veth0_macvtap: left promiscuous mode [ 317.768353][ T36] veth1_vlan: left promiscuous mode [ 317.921727][ T36] pim6reg (unregistering): left allmulticast mode [ 317.980482][ T36] pim6reg527 (unregistering): left allmulticast mode [ 318.398158][T16393] __nla_validate_parse: 8 callbacks suppressed [ 318.398178][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3018'. [ 318.544175][ T36] team0 (unregistering): Port device team_slave_0 removed [ 319.012709][T16188] hsr_slave_0: entered promiscuous mode [ 319.019600][T16188] hsr_slave_1: entered promiscuous mode [ 319.044761][T16401] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.069749][T16403] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.131022][T16404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.314601][T16412] 8021q: adding VLAN 0 to HW filter on device bond10 [ 319.365454][ T5873] Bluetooth: hci0: command tx timeout [ 319.615091][ T36] IPVS: stop unused estimator thread 0... [ 319.616875][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 319.910671][T16447] sctp: [Deprecated]: syz.0.3033 (pid 16447) Use of int in maxseg socket option. [ 319.910671][T16447] Use struct sctp_assoc_value instead [ 319.950401][T16447] sctp: [Deprecated]: syz.0.3033 (pid 16447) Use of int in maxseg socket option. [ 319.950401][T16447] Use struct sctp_assoc_value instead [ 319.953249][T16444] hsr0 speed is unknown, defaulting to 1000 [ 319.991486][T16447] sctp: [Deprecated]: syz.0.3033 (pid 16447) Use of int in maxseg socket option. [ 319.991486][T16447] Use struct sctp_assoc_value instead [ 320.489088][T16188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.519700][T16476] netlink: 'syz.2.3039': attribute type 9 has an invalid length. [ 320.529320][T16476] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.3039'. [ 320.540956][T16188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.583314][T16188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 320.621258][T16188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.770051][T16492] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3044'. [ 320.791451][T16494] netlink: 'syz.3.3043': attribute type 1 has an invalid length. [ 320.801712][T16494] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 320.912075][T16188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.952803][T16188] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.012010][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.019274][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.061835][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.069141][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.192638][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3049'. [ 321.220900][T16512] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3051'. [ 321.224075][T16513] netlink: 'syz.2.3049': attribute type 30 has an invalid length. [ 321.248529][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3049'. [ 321.358174][T16519] Bluetooth: MGMT ver 1.23 [ 321.457847][ T5873] Bluetooth: hci0: command tx timeout [ 321.654364][T16532] tipc: Enabling of bearer rejected, already enabled [ 321.736156][T16542] netlink: 'syz.1.3060': attribute type 10 has an invalid length. [ 321.753526][T16188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.768113][T16534] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3059'. [ 321.809766][T16542] bond0: (slave ÿ): Enslaving as an active interface with an up link [ 321.977863][T16558] tipc: Started in network mode [ 321.988182][T16558] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 322.008391][T16558] tipc: Enabled bearer , priority 12 [ 322.027982][T16558] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.040447][T16558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3063'. [ 322.133657][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 322.313806][T16188] veth0_vlan: entered promiscuous mode [ 322.349841][T16188] veth1_vlan: entered promiscuous mode [ 322.442450][T16188] veth0_macvtap: entered promiscuous mode [ 322.513225][T16188] veth1_macvtap: entered promiscuous mode [ 322.637335][T16590] netlink: 'syz.1.3072': attribute type 10 has an invalid length. [ 322.727238][T16590] team0: Port device dummy0 added [ 323.145792][ T10] tipc: Node number set to 10070698 [ 324.125863][T16188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.161751][T16188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.209180][T12034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.261122][T12034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.273431][T12034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.319034][T12034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.479170][T16613] __nla_validate_parse: 3 callbacks suppressed [ 324.479190][T16613] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3080'. [ 324.508935][T12029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.547248][T12029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.642019][T12034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.651144][T12034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.746150][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3087'. [ 324.870391][T16648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2951'. [ 324.917947][T16648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.396414][T16661] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3093'. [ 325.421020][T16663] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3093'. [ 325.709705][T16675] sctp: [Deprecated]: syz.2.3099 (pid 16675) Use of int in maxseg socket option. [ 325.709705][T16675] Use struct sctp_assoc_value instead [ 325.761889][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.796519][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.805934][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.817660][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.828083][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.867606][T16683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3100'. [ 325.915260][T16677] hsr0 speed is unknown, defaulting to 1000 [ 325.939328][T16683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3100'. [ 325.986464][T16688] netlink: 'syz.0.3100': attribute type 21 has an invalid length. [ 325.995151][T16690] netlink: 'syz.0.3100': attribute type 21 has an invalid length. [ 326.056008][T16688] netlink: 'syz.0.3100': attribute type 6 has an invalid length. [ 326.075752][T16688] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3100'. [ 326.084968][T16690] netlink: 'syz.0.3100': attribute type 6 has an invalid length. [ 326.095422][T16690] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3100'. [ 326.112337][T16694] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3101'. [ 326.177371][T16701] delete_channel: no stack [ 326.428416][T16677] chnl_net:caif_netlink_parms(): no params data found [ 326.588981][T16677] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.605156][T16677] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.619861][T16677] bridge_slave_0: entered allmulticast mode [ 326.657553][T16677] bridge_slave_0: entered promiscuous mode [ 326.676977][T16723] tipc: Enabling of bearer rejected, failed to enable media [ 326.734896][T16723] veth3: entered allmulticast mode [ 326.751302][T16677] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.795548][T16677] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.806757][T16677] bridge_slave_1: entered allmulticast mode [ 326.841438][T16677] bridge_slave_1: entered promiscuous mode [ 326.997910][T16677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.037561][T16677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.143013][T16677] team0: Port device team_slave_0 added [ 327.163245][T16677] team0: Port device team_slave_1 added [ 327.237285][T16677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.249363][T16677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.297367][T16677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.328336][T16677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.341738][T16677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.397703][T16677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.549645][T16677] hsr_slave_0: entered promiscuous mode [ 327.558264][T16677] hsr_slave_1: entered promiscuous mode [ 327.564664][T16677] debugfs: 'hsr0' already exists in 'hsr' [ 327.591562][T16677] Cannot create hsr debugfs directory [ 327.927209][ T5880] Bluetooth: hci3: command tx timeout [ 328.223170][T16787] dummy0: left promiscuous mode [ 328.466046][T16787] vlan0: left allmulticast mode [ 328.471146][T16787] vlan0: left promiscuous mode [ 328.476885][T16787] macvtap1: left promiscuous mode [ 328.482213][T16787] macvtap1: left allmulticast mode [ 328.506190][T16787] veth3: left promiscuous mode [ 328.516964][T16787] team1: left promiscuous mode [ 328.522028][T16787] team1: left allmulticast mode [ 328.624641][T16794] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 328.644077][T16794] tipc: Enabled bearer , priority 10 [ 328.704978][T12029] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.737378][T12029] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 328.757564][T12029] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 328.822684][T16795] tipc: Enabling of bearer rejected, already enabled [ 328.841015][T12029] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.865630][T12029] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 328.891462][T12029] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 328.901737][T12029] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.920896][T12029] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 328.953804][T12029] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 328.973729][T16812] erspan0: entered allmulticast mode [ 329.038194][T12029] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.057192][T12029] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.076250][T12029] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.092419][T16823] batadv1: entered allmulticast mode [ 329.433320][T16859] netlink: 'syz.1.3148': attribute type 6 has an invalid length. [ 329.486496][T16859] netlink: 'syz.1.3148': attribute type 6 has an invalid length. [ 329.602681][T16870] lo: entered allmulticast mode [ 329.613055][T16870] lo: left allmulticast mode [ 329.632732][T16872] __nla_validate_parse: 13 callbacks suppressed [ 329.632753][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3152'. [ 329.694280][T16874] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3153'. [ 329.762034][T16877] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3154'. [ 330.006191][T16872] netlink: 'syz.0.3152': attribute type 1 has an invalid length. [ 330.006384][ T5880] Bluetooth: hci3: command tx timeout [ 330.013957][T16872] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3152'. [ 330.294473][T16880] bridge0: port 1(macsec0) entered disabled state [ 330.513240][T16880] veth1_macvtap: left allmulticast mode [ 330.789061][T16677] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.839478][ T9] hsr0 speed is unknown, defaulting to 1000 [ 330.847738][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.863339][ T9] syz1: Port: 1 Link DOWN [ 330.885497][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.904617][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 330.915979][ T1093] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.936230][ T1093] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.976365][ T1093] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 330.994226][T16677] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.021961][T16905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3159'. [ 331.037115][T16677] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.059898][T16900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3159'. [ 331.085212][ T1093] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.094516][ T1093] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.103845][ T1093] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 331.114526][T16900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3159'. [ 331.145226][T16910] Bluetooth: MGMT ver 1.23 [ 331.149867][T16677] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.414305][T16677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.462836][T16677] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.498675][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.505886][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.523327][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.530570][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.702341][T16941] netlink: 'syz.1.3172': attribute type 10 has an invalid length. [ 331.741635][T16941] veth0_vlan: left promiscuous mode [ 331.756859][T16941] veth0_vlan: entered promiscuous mode [ 331.769312][T16941] team0: Device veth0_vlan failed to register rx_handler [ 332.073786][T16957] netlink: 'syz.1.3177': attribute type 1 has an invalid length. [ 332.087170][ T5880] Bluetooth: hci3: command tx timeout [ 332.157035][T16957] netlink: 'syz.1.3177': attribute type 1 has an invalid length. [ 332.271993][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3179'. [ 332.300515][T16677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.350549][T16967] netlink: 'syz.4.3179': attribute type 1 has an invalid length. [ 332.539704][T16677] veth0_vlan: entered promiscuous mode [ 332.589692][T16677] veth1_vlan: entered promiscuous mode [ 332.636280][T16977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3183'. [ 332.683418][T16677] veth0_macvtap: entered promiscuous mode [ 332.749037][T16677] veth1_macvtap: entered promiscuous mode [ 332.810135][T16677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.843740][T16677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.914631][ T3484] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.937404][ T3484] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.952946][ T3484] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.000001][T16993] nbd: nbd0 already in use [ 333.059771][ T3484] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.065673][T16993] nbd: nbd0 already in use [ 333.073133][T16993] nbd: nbd0 already in use [ 333.107771][T16993] nbd: nbd0 already in use [ 333.119706][T16993] nbd: nbd0 already in use [ 333.127378][T16993] nbd: nbd0 already in use [ 333.132142][T16993] nbd: nbd0 already in use [ 333.220270][T16993] nbd: nbd0 already in use [ 333.250184][T16993] nbd: nbd0 already in use [ 333.268370][T16993] nbd: nbd0 already in use [ 333.304386][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3192'. [ 333.314143][T16993] nbd: nbd0 already in use [ 333.340825][T17011] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 333.370105][T17009] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.414861][T17007] hsr0 speed is unknown, defaulting to 1000 [ 333.484285][T16993] nbd: nbd0 already in use [ 333.489254][T16993] nbd: nbd0 already in use [ 333.493940][T16993] nbd: nbd0 already in use [ 333.498651][T12029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.519393][T12029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.816790][T16993] nbd: nbd0 already in use [ 333.861420][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.882001][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.080773][T17036] IPv6: NLM_F_REPLACE set, but no existing node found! [ 334.089506][T17035] syzkaller0: entered allmulticast mode [ 334.112052][T17035] dummy0: mtu less than device minimum [ 334.175509][ T5880] Bluetooth: hci3: command tx timeout [ 334.218748][T12628] IPVS: starting estimator thread 0... [ 334.375665][T17041] IPVS: using max 30 ests per chain, 72000 per kthread [ 334.488163][T17045] can: request_module (can-proto-0) failed. [ 334.585638][T17055] openvswitch: netlink: Flow key attr not present in new flow. [ 334.780210][T17061] __nla_validate_parse: 4 callbacks suppressed [ 334.780230][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3207'. [ 334.819512][ T5873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.832292][ T5873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.845638][ T5873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.858254][ T5873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.867569][ T5873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.043834][T17062] hsr0 speed is unknown, defaulting to 1000 [ 335.136853][T17071] netlink: 'syz.2.3211': attribute type 4 has an invalid length. [ 335.170429][T17073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3212'. [ 335.256323][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3212'. [ 335.294375][T17082] netlink: 'syz.0.3212': attribute type 30 has an invalid length. [ 335.328897][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'. [ 335.590868][T17062] chnl_net:caif_netlink_parms(): no params data found [ 335.977285][T17062] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.995890][T17062] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.003232][T17062] bridge_slave_0: entered allmulticast mode [ 336.020568][T17062] bridge_slave_0: entered promiscuous mode [ 336.038103][T17062] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.045749][T17062] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.053296][T17062] bridge_slave_1: entered allmulticast mode [ 336.061817][T17127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3226'. [ 336.063079][T17062] bridge_slave_1: entered promiscuous mode [ 336.143659][T17128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.168603][T17132] netlink: 'syz.3.3227': attribute type 24 has an invalid length. [ 336.182556][T17132] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3227'. [ 336.226084][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3227'. [ 336.233429][T17062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.269152][T17132] vlan2: entered allmulticast mode [ 336.274450][T17132] hsr0: entered allmulticast mode [ 336.279732][T17132] hsr_slave_0: entered allmulticast mode [ 336.287929][T17132] hsr_slave_1: entered allmulticast mode [ 336.297773][T17062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.387420][T17137] IPVS: sync thread started: state = MASTER, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 336.393831][T17062] team0: Port device team_slave_0 added [ 336.442841][T17062] team0: Port device team_slave_1 added [ 336.504193][T17062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.511491][T17062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.543732][T17142] Bluetooth: MGMT ver 1.23 [ 336.549463][T17062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.567001][T17062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.575943][T17062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.603267][T17062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.696469][T17062] hsr_slave_0: entered promiscuous mode [ 336.703446][T17062] hsr_slave_1: entered promiscuous mode [ 336.710056][T17062] debugfs: 'hsr0' already exists in 'hsr' [ 336.716476][T17062] Cannot create hsr debugfs directory [ 336.723420][T17147] pim6reg1: entered promiscuous mode [ 336.729835][T17147] pim6reg1: entered allmulticast mode [ 336.973174][ T5880] Bluetooth: hci5: command tx timeout [ 336.980437][ T1117] tipc: Subscription rejected, illegal request [ 337.004612][T17154] bridge0: port 3(veth0_to_bridge) entered blocking state [ 337.020297][T17154] bridge0: port 3(veth0_to_bridge) entered disabled state [ 337.034662][T17155] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3234'. [ 337.045746][T17154] veth0_to_bridge: entered allmulticast mode [ 337.059531][T17154] veth0_to_bridge: entered promiscuous mode [ 337.069496][T17154] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 337.083419][T17154] bridge0: port 3(veth0_to_bridge) entered blocking state [ 337.090712][T17154] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 337.271370][T17158] tls_set_device_offload_rx: netdev not found [ 338.119357][T17062] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 338.164477][T17062] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 338.237298][T17062] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 338.289170][T17062] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.424350][T17216] netlink: 'syz.4.3245': attribute type 1 has an invalid length. [ 338.447003][T17210] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3246'. [ 338.515546][T17216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.608684][T17216] bond1: (slave gretap1): making interface the new active one [ 338.644234][T17216] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 338.771356][T17236] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3250'. [ 338.794820][T17062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.837416][T17062] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.854259][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.861487][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.944111][T17243] netlink: 'syz.2.3251': attribute type 1 has an invalid length. [ 338.987527][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.994745][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.057560][ T5880] Bluetooth: hci5: command tx timeout [ 339.270463][T17254] bridge0: port 3(veth0_to_bridge) entered disabled state [ 339.277990][T17254] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.506099][T17268] tun0: tun_chr_ioctl cmd 1074025675 [ 339.512234][T17268] tun0: persist disabled [ 339.549529][T17062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.789568][T17062] veth0_vlan: entered promiscuous mode [ 339.818807][T17062] veth1_vlan: entered promiscuous mode [ 339.865654][T17288] openvswitch: netlink: Message has 4 unknown bytes. [ 339.881611][T17062] veth0_macvtap: entered promiscuous mode [ 339.899517][T17062] veth1_macvtap: entered promiscuous mode [ 339.944178][T17062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.971820][T17293] __nla_validate_parse: 2 callbacks suppressed [ 339.971841][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3263'. [ 339.982872][T17062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.027559][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.039760][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.081662][T12029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.094390][T12029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.095003][T17290] delete_channel: no stack [ 340.131452][T17298] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3264'. [ 340.254880][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.280281][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.331589][T17302] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3266'. [ 340.341928][T17302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3266'. [ 340.347362][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.360232][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.052960][T17320] tipc: Enabled bearer , priority 0 [ 341.086294][T17322] syzkaller0: entered promiscuous mode [ 341.091813][T17322] syzkaller0: entered allmulticast mode [ 341.126704][ T5880] Bluetooth: hci5: command tx timeout [ 341.151531][T17320] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 341.355748][T17314] tipc: Resetting bearer [ 341.441487][T17314] tipc: Disabling bearer [ 341.533105][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.548086][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.556924][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.567846][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.578526][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.858419][T17338] hsr0 speed is unknown, defaulting to 1000 [ 341.961182][T17361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3284'. [ 342.050953][T17370] netlink: 'syz.3.3286': attribute type 1 has an invalid length. [ 342.056705][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3287'. [ 342.069446][T17372] netlink: 'syz.4.3287': attribute type 30 has an invalid length. [ 342.077354][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3287'. [ 342.288422][T17383] netlink: 'syz.1.3291': attribute type 1 has an invalid length. [ 342.296454][T17383] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3291'. [ 342.353085][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3292'. [ 342.367327][T17389] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3290'. [ 342.388804][T17387] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20002 [ 342.490792][T17392] tipc: Resetting bearer [ 342.901231][T17409] netlink: 'syz.3.3299': attribute type 11 has an invalid length. [ 342.911020][ T3484] dvmrp0 (unregistering): left allmulticast mode [ 342.933732][ T3484] bond9 (unregistering): (slave geneve2): Releasing backup interface [ 343.197030][T17392] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 343.203093][T17392] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 343.206361][ T5873] Bluetooth: hci5: command tx timeout [ 343.277596][ T3484] bond0 (unregistering): Released all slaves [ 343.294979][ T3484] bond1 (unregistering): Released all slaves [ 343.310995][ T3484] bond2 (unregistering): Released all slaves [ 343.414666][ T3484] bond3 (unregistering): Released all slaves [ 343.431575][ T3484] bond4 (unregistering): Released all slaves [ 343.535021][ T3484] bond5 (unregistering): Released all slaves [ 343.552040][ T3484] bond6 (unregistering): (slave bond7): Releasing backup interface [ 343.561448][ T3484] bond6 (unregistering): Released all slaves [ 343.684434][ T3484] bond7 (unregistering): Released all slaves [ 343.691888][ T5873] Bluetooth: hci2: command tx timeout [ 343.702392][ T3484] bond8 (unregistering): Released all slaves [ 343.719782][ T3484] bond9 (unregistering): Released all slaves [ 343.824694][ T3484] bond10 (unregistering): Released all slaves [ 343.863164][T17412] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 343.891035][T17338] chnl_net:caif_netlink_parms(): no params data found [ 344.099193][ T3484] tipc: Left network mode [ 344.178102][T17392] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 344.187726][T17392] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 344.307283][T17392] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 344.329910][T17392] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 344.350880][T17338] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.360294][T17338] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.372025][T17338] bridge_slave_0: entered allmulticast mode [ 344.381007][T17338] bridge_slave_0: entered promiscuous mode [ 344.390178][T17338] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.397509][T17338] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.404959][T17338] bridge_slave_1: entered allmulticast mode [ 344.413753][T17338] bridge_slave_1: entered promiscuous mode [ 344.529203][T17437] openvswitch: netlink: Flow actions attr not present in new flow. [ 344.581507][T17338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.597678][T17338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.670945][T17338] team0: Port device team_slave_0 added [ 344.690953][T17338] team0: Port device team_slave_1 added [ 344.758078][T17338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.765284][T17338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.793942][T17338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.807634][T17444] netlink: 'syz.4.3310': attribute type 10 has an invalid length. [ 344.808557][T17338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.826537][T17338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.853160][T17338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.872767][T17444] bond0: (slave wlan1): Opening slave failed [ 344.974783][T17454] netlink: 'syz.3.3313': attribute type 64 has an invalid length. [ 344.983149][T17454] __nla_validate_parse: 5 callbacks suppressed [ 344.983164][T17454] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3313'. [ 345.012603][T17338] hsr_slave_0: entered promiscuous mode [ 345.014156][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 345.023081][T17455] netlink: 'syz.3.3313': attribute type 64 has an invalid length. [ 345.037265][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 345.039000][T17455] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3313'. [ 345.057177][T17338] hsr_slave_1: entered promiscuous mode [ 345.063499][T17338] debugfs: 'hsr0' already exists in 'hsr' [ 345.069350][T17338] Cannot create hsr debugfs directory [ 345.075694][T17451] bridge_slave_1: left allmulticast mode [ 345.086275][T17451] bridge_slave_1: left promiscuous mode [ 345.092277][T17451] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.108748][T17451] bridge_slave_0: left allmulticast mode [ 345.114428][T17451] bridge_slave_0: left promiscuous mode [ 345.120634][T17451] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.611383][T17338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 345.623766][T17338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.634210][T17338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 345.645113][T17338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 345.751965][T17338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.775240][T17338] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.782481][ T5873] Bluetooth: hci2: command 0x041b tx timeout [ 345.794204][T17392] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 345.804310][T17392] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 345.815390][T12034] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.822600][T12034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.838836][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.846041][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.071718][T17338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.121106][T17338] veth0_vlan: entered promiscuous mode [ 346.137010][T17338] veth1_vlan: entered promiscuous mode [ 346.182644][T17338] veth0_macvtap: entered promiscuous mode [ 346.193781][T17338] veth1_macvtap: entered promiscuous mode [ 346.222998][T17338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.242836][T17338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.260560][ T1093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.269698][ T1093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.281054][ T1093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.292986][ T1093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.491603][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.205599][T12628] page_pool_release_retry() stalled pool shutdown: id 90, 1 inflight 60 sec [ 439.932451][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 493.047318][ T31] INFO: task kworker/u8:8:3484 blocked for more than 143 seconds. [ 493.055253][ T31] Not tainted syzkaller #0 [ 493.060315][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.069073][ T31] task:kworker/u8:8 state:D stack:22376 pid:3484 tgid:3484 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 493.081474][ T31] Workqueue: netns cleanup_net [ 493.086386][ T31] Call Trace: [ 493.089720][ T31] [ 493.092663][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.097246][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.102316][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.107907][ T31] ? __pfx___schedule+0x10/0x10 [ 493.112925][ T31] ? schedule+0x91/0x360 [ 493.117287][ T31] schedule+0x165/0x360 [ 493.121487][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.127005][ T31] __mutex_lock+0x7e6/0x1350 [ 493.131619][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.155602][ T31] ? rfkill_unregister+0xc8/0x220 [ 493.160688][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.184340][ T31] ? __pfx_device_del+0x10/0x10 [ 493.189421][ T31] rfkill_unregister+0xc8/0x220 [ 493.194360][ T31] wiphy_unregister+0x238/0xae0 [ 493.199718][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 493.206584][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 493.211992][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 493.217433][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.222655][ T31] ? kfree+0x18e/0x440 [ 493.227227][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 493.232734][ T31] mac80211_hwsim_del_radio+0x275/0x460 [ 493.238376][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 493.244481][ T31] hwsim_exit_net+0x584/0x640 [ 493.249246][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 493.254475][ T31] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 493.260652][ T31] ops_undo_list+0x49a/0x990 [ 493.265588][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 493.270717][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 493.275946][ T31] cleanup_net+0x4c5/0x800 [ 493.280382][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 493.285597][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.290838][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 493.296640][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 493.302371][ T31] process_scheduled_works+0xae1/0x17b0 [ 493.308016][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 493.314105][ T31] worker_thread+0x8a0/0xda0 [ 493.318765][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 493.325122][ T31] ? __kthread_parkme+0x7b/0x200 [ 493.330325][ T31] kthread+0x70e/0x8a0 [ 493.334434][ T31] ? __pfx_worker_thread+0x10/0x10 [ 493.339640][ T31] ? __pfx_kthread+0x10/0x10 [ 493.344336][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.349653][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.354873][ T31] ? __pfx_kthread+0x10/0x10 [ 493.359508][ T31] ret_from_fork+0x436/0x7d0 [ 493.364098][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.369304][ T31] ? __switch_to_asm+0x39/0x70 [ 493.374076][ T31] ? __switch_to_asm+0x33/0x70 [ 493.378865][ T31] ? __pfx_kthread+0x10/0x10 [ 493.383461][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.388278][ T31] [ 493.391360][ T31] INFO: task kworker/0:11:7542 blocked for more than 143 seconds. [ 493.399247][ T31] Not tainted syzkaller #0 [ 493.404188][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.412910][ T31] task:kworker/0:11 state:D stack:24360 pid:7542 tgid:7542 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 493.425035][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 493.431783][ T31] Call Trace: [ 493.435078][ T31] [ 493.438373][ T31] __schedule+0x1798/0x4cc0 [ 493.442939][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 493.448528][ T31] ? __pfx___schedule+0x10/0x10 [ 493.453406][ T31] ? schedule+0x91/0x360 [ 493.457734][ T31] schedule+0x165/0x360 [ 493.461926][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.467461][ T31] __mutex_lock+0x7e6/0x1350 [ 493.472082][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.476914][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 493.483218][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.488289][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 493.494013][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 493.499782][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 493.505957][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 493.511701][ T31] process_scheduled_works+0xae1/0x17b0 [ 493.517346][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 493.523363][ T31] worker_thread+0x8a0/0xda0 [ 493.528262][ T31] kthread+0x70e/0x8a0 [ 493.532363][ T31] ? __pfx_worker_thread+0x10/0x10 [ 493.537542][ T31] ? __pfx_kthread+0x10/0x10 [ 493.542156][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.547527][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.552725][ T31] ? __pfx_kthread+0x10/0x10 [ 493.557402][ T31] ret_from_fork+0x436/0x7d0 [ 493.562018][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.567247][ T31] ? __switch_to_asm+0x39/0x70 [ 493.572048][ T31] ? __switch_to_asm+0x33/0x70 [ 493.576879][ T31] ? __pfx_kthread+0x10/0x10 [ 493.581500][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.586401][ T31] [ 493.589499][ T31] INFO: task syz-executor:17338 blocked for more than 143 seconds. [ 493.597428][ T31] Not tainted syzkaller #0 [ 493.602389][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.611158][ T31] task:syz-executor state:D stack:21832 pid:17338 tgid:17338 ppid:1 task_flags:0x400140 flags:0x00004004 [ 493.623141][ T31] Call Trace: [ 493.626463][ T31] [ 493.629415][ T31] __schedule+0x1798/0x4cc0 [ 493.633932][ T31] ? kasan_save_free_info+0x46/0x50 [ 493.639158][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.644022][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.649041][ T31] ? __pfx___schedule+0x10/0x10 [ 493.653922][ T31] ? schedule+0x91/0x360 [ 493.658321][ T31] schedule+0x165/0x360 [ 493.662478][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.668034][ T31] __mutex_lock+0x7e6/0x1350 [ 493.672651][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.677467][ T31] ? misc_open+0x51/0x330 [ 493.681824][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.686943][ T31] misc_open+0x51/0x330 [ 493.691159][ T31] chrdev_open+0x4cc/0x5e0 [ 493.695666][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 493.700659][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 493.707092][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 493.712041][ T31] do_dentry_open+0x953/0x13f0 [ 493.716911][ T31] vfs_open+0x3b/0x340 [ 493.721013][ T31] ? path_openat+0x2ecd/0x3830 [ 493.725877][ T31] path_openat+0x2ee5/0x3830 [ 493.730491][ T31] ? arch_stack_walk+0xfc/0x150 [ 493.735426][ T31] ? stack_depot_save_flags+0x40/0x860 [ 493.740972][ T31] ? __pfx_path_openat+0x10/0x10 [ 493.745985][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.752081][ T31] do_filp_open+0x1fa/0x410 [ 493.756719][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.761603][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 493.767048][ T31] ? _raw_spin_unlock+0x28/0x50 [ 493.771926][ T31] ? alloc_fd+0x64c/0x6c0 [ 493.776342][ T31] do_sys_openat2+0x121/0x1c0 [ 493.781053][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 493.786370][ T31] ? fput_close_sync+0x119/0x200 [ 493.791332][ T31] ? rcu_is_watching+0x15/0xb0 [ 493.796130][ T31] __x64_sys_openat+0x138/0x170 [ 493.801030][ T31] do_syscall_64+0xfa/0x3b0 [ 493.805589][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.811709][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 493.817941][ T31] ? clear_bhb_loop+0x60/0xb0 [ 493.822643][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.828594][ T31] RIP: 0033:0x7f72c258d510 [ 493.833030][ T31] RSP: 002b:00007ffe202993a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 493.841529][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f72c258d510 [ 493.849733][ T31] RDX: 0000000000000002 RSI: 00007f72c26128cd RDI: 00000000ffffff9c [ 493.857804][ T31] RBP: 00007f72c26128cd R08: 0000000000000000 R09: 0000000000000000 [ 493.865843][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 493.873837][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 493.882022][ T31] [ 493.885081][ T31] INFO: task syz.2.3280:17350 blocked for more than 144 seconds. [ 493.897223][ T31] Not tainted syzkaller #0 [ 493.902185][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.914940][ T31] task:syz.2.3280 state:D stack:25096 pid:17350 tgid:17350 ppid:16060 task_flags:0x400040 flags:0x00004006 [ 493.927831][ T31] Call Trace: [ 493.931175][ T31] [ 493.934107][ T31] __schedule+0x1798/0x4cc0 [ 493.938916][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.943809][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.950225][ T31] ? __pfx___schedule+0x10/0x10 [ 493.955131][ T31] ? schedule+0x91/0x360 [ 493.959563][ T31] schedule+0x165/0x360 [ 493.963734][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.969299][ T31] __mutex_lock+0x7e6/0x1350 [ 493.973960][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.978815][ T31] ? rfkill_unregister+0xc8/0x220 [ 493.983863][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.989012][ T31] ? __pfx_device_del+0x10/0x10 [ 493.993883][ T31] rfkill_unregister+0xc8/0x220 [ 493.998890][ T31] nfc_unregister_device+0x96/0x2a0 [ 494.004138][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 494.010234][ T31] virtual_ncidev_close+0x56/0x90 [ 494.015595][ T31] __fput+0x449/0xa70 [ 494.019617][ T31] task_work_run+0x1d1/0x260 [ 494.024234][ T31] ? __pfx_task_work_run+0x10/0x10 [ 494.029605][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 494.035152][ T31] exit_to_user_mode_loop+0xec/0x110 [ 494.040835][ T31] do_syscall_64+0x2bd/0x3b0 [ 494.045506][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.050731][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.056957][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.061664][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.068404][ T31] RIP: 0033:0x7f164af8eba9 [ 494.072909][ T31] RSP: 002b:00007ffc79e4b618 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 494.081515][ T31] RAX: 0000000000000000 RBX: 00007f164b1d7da0 RCX: 00007f164af8eba9 [ 494.090651][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 494.099339][ T31] RBP: 00007f164b1d7da0 R08: 00000000000001fc R09: 0000001e79e4b90f [ 494.107808][ T31] R10: 00007f164b1d7cb0 R11: 0000000000000246 R12: 0000000000053a26 [ 494.118301][ T31] R13: 00007ffc79e4b710 R14: ffffffffffffffff R15: 00007ffc79e4b730 [ 494.126512][ T31] [ 494.129561][ T31] INFO: task syz.1.3293:17390 blocked for more than 144 seconds. [ 494.137462][ T31] Not tainted syzkaller #0 [ 494.142521][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.151256][ T31] task:syz.1.3293 state:D stack:28008 pid:17390 tgid:17388 ppid:17062 task_flags:0x400040 flags:0x00004004 [ 494.163270][ T31] Call Trace: [ 494.166647][ T31] [ 494.169631][ T31] __schedule+0x1798/0x4cc0 [ 494.174166][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.179228][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.184117][ T31] ? __pfx___schedule+0x10/0x10 [ 494.189104][ T31] ? schedule+0x91/0x360 [ 494.193390][ T31] schedule+0x165/0x360 [ 494.197689][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.203195][ T31] __mutex_lock+0x7e6/0x1350 [ 494.208832][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.213633][ T31] ? rfkill_fop_open+0x12d/0x820 [ 494.220163][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.225241][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 494.230830][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 494.236367][ T31] rfkill_fop_open+0x12d/0x820 [ 494.241184][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 494.248503][ T31] misc_open+0x2bc/0x330 [ 494.252818][ T31] chrdev_open+0x4cc/0x5e0 [ 494.257316][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 494.262292][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 494.268781][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 494.273750][ T31] do_dentry_open+0x953/0x13f0 [ 494.278776][ T31] vfs_open+0x3b/0x340 [ 494.282875][ T31] ? path_openat+0x2ecd/0x3830 [ 494.287712][ T31] path_openat+0x2ee5/0x3830 [ 494.292311][ T31] ? arch_stack_walk+0xfc/0x150 [ 494.297341][ T31] ? stack_depot_save_flags+0x40/0x860 [ 494.302871][ T31] ? __pfx_path_openat+0x10/0x10 [ 494.307884][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.314067][ T31] do_filp_open+0x1fa/0x410 [ 494.318736][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.323641][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 494.329091][ T31] ? _raw_spin_unlock+0x28/0x50 [ 494.333975][ T31] ? alloc_fd+0x64c/0x6c0 [ 494.338521][ T31] do_sys_openat2+0x121/0x1c0 [ 494.343232][ T31] ? __se_sys_futex+0x36f/0x400 [ 494.348272][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 494.353503][ T31] ? rcu_is_watching+0x15/0xb0 [ 494.358364][ T31] __x64_sys_openat+0x138/0x170 [ 494.363227][ T31] do_syscall_64+0xfa/0x3b0 [ 494.367792][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.373007][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.379179][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.383897][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.391170][ T31] RIP: 0033:0x7f5a6678eba9 [ 494.396044][ T31] RSP: 002b:00007f5a67539038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 494.404514][ T31] RAX: ffffffffffffffda RBX: 00007f5a669d5fa0 RCX: 00007f5a6678eba9 [ 494.412688][ T31] RDX: 0000000000002002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 494.420833][ T31] RBP: 00007f5a66811e19 R08: 0000000000000000 R09: 0000000000000000 [ 494.429323][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.437368][ T31] R13: 00007f5a669d6038 R14: 00007f5a669d5fa0 R15: 00007fff5bb38848 [ 494.445535][ T31] [ 494.448592][ T31] INFO: task syz.1.3293:17392 blocked for more than 144 seconds. [ 494.456602][ T31] Not tainted syzkaller #0 [ 494.461557][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.470431][ T31] task:syz.1.3293 state:D stack:25048 pid:17392 tgid:17388 ppid:17062 task_flags:0x400040 flags:0x00004006 [ 494.482492][ T31] Call Trace: [ 494.486179][ T31] [ 494.489138][ T31] __schedule+0x1798/0x4cc0 [ 494.493672][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.498665][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.503557][ T31] ? __pfx___schedule+0x10/0x10 [ 494.508493][ T31] ? schedule+0x91/0x360 [ 494.512825][ T31] schedule+0x165/0x360 [ 494.517346][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.522815][ T31] __mutex_lock+0x7e6/0x1350 [ 494.527492][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.532294][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 494.537630][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.542664][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.548250][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 494.554175][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 494.560560][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 494.566480][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 494.571630][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 494.578025][ T31] rfkill_set_block+0x1d2/0x440 [ 494.582942][ T31] rfkill_fop_write+0x44b/0x570 [ 494.587844][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 494.593253][ T31] ? security_file_permission+0x40/0x290 [ 494.598923][ T31] ? rw_verify_area+0x255/0x4d0 [ 494.603798][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.609027][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 494.614451][ T31] vfs_write+0x27b/0xb30 [ 494.618772][ T31] ? __pfx_vfs_write+0x10/0x10 [ 494.623599][ T31] ? __fget_files+0x2a/0x420 [ 494.628252][ T31] ? __fget_files+0x2a/0x420 [ 494.632944][ T31] ? __fget_files+0x3a0/0x420 [ 494.637976][ T31] ? __fget_files+0x2a/0x420 [ 494.642617][ T31] ksys_write+0x145/0x250 [ 494.647354][ T31] ? __pfx_ksys_write+0x10/0x10 [ 494.652228][ T31] ? rcu_is_watching+0x15/0xb0 [ 494.657059][ T31] ? do_syscall_64+0xbe/0x3b0 [ 494.661758][ T31] do_syscall_64+0xfa/0x3b0 [ 494.666756][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.671972][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.678098][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.682782][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.688739][ T31] RIP: 0033:0x7f5a6678eba9 [ 494.693174][ T31] RSP: 002b:00007f5a649d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 494.701854][ T31] RAX: ffffffffffffffda RBX: 00007f5a669d6180 RCX: 00007f5a6678eba9 [ 494.709864][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 494.717894][ T31] RBP: 00007f5a66811e19 R08: 0000000000000000 R09: 0000000000000000 [ 494.726325][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.734440][ T31] R13: 00007f5a669d6218 R14: 00007f5a669d6180 R15: 00007fff5bb38848 [ 494.742484][ T31] [ 494.745591][ T31] INFO: task syz.3.3314:17459 blocked for more than 145 seconds. [ 494.753334][ T31] Not tainted syzkaller #0 [ 494.758689][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.767414][ T31] task:syz.3.3314 state:D stack:28328 pid:17459 tgid:17458 ppid:16677 task_flags:0x400040 flags:0x00004004 [ 494.779437][ T31] Call Trace: [ 494.782737][ T31] [ 494.786085][ T31] __schedule+0x1798/0x4cc0 [ 494.790620][ T31] ? kasan_save_free_info+0x46/0x50 [ 494.795854][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.800762][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.806114][ T31] ? __pfx___schedule+0x10/0x10 [ 494.811026][ T31] ? schedule+0x91/0x360 [ 494.815670][ T31] schedule+0x165/0x360 [ 494.819862][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.825373][ T31] __mutex_lock+0x7e6/0x1350 [ 494.829988][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.834754][ T31] ? misc_open+0x51/0x330 [ 494.839153][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.844189][ T31] misc_open+0x51/0x330 [ 494.848743][ T31] chrdev_open+0x4cc/0x5e0 [ 494.853217][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 494.858288][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 494.864639][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 494.869634][ T31] do_dentry_open+0x953/0x13f0 [ 494.874409][ T31] vfs_open+0x3b/0x340 [ 494.878784][ T31] ? path_openat+0x2ecd/0x3830 [ 494.883576][ T31] path_openat+0x2ee5/0x3830 [ 494.888279][ T31] ? arch_stack_walk+0xfc/0x150 [ 494.893181][ T31] ? stack_depot_save_flags+0x40/0x860 [ 494.898711][ T31] ? __pfx_path_openat+0x10/0x10 [ 494.903670][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.910194][ T31] do_filp_open+0x1fa/0x410 [ 494.914743][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.919646][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 494.924698][ T31] ? _raw_spin_unlock+0x28/0x50 [ 494.929686][ T31] ? alloc_fd+0x64c/0x6c0 [ 494.934056][ T31] do_sys_openat2+0x121/0x1c0 [ 494.939115][ T31] ? __se_sys_futex+0x36f/0x400 [ 494.943992][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 494.949245][ T31] ? rcu_is_watching+0x15/0xb0 [ 494.954014][ T31] __x64_sys_openat+0x138/0x170 [ 494.958955][ T31] do_syscall_64+0xfa/0x3b0 [ 494.963492][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.969272][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.975488][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.980202][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.986214][ T31] RIP: 0033:0x7f5201f8eba9 [ 494.990674][ T31] RSP: 002b:00007f5202d7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 494.999345][ T31] RAX: ffffffffffffffda RBX: 00007f52021d5fa0 RCX: 00007f5201f8eba9 [ 495.007380][ T31] RDX: 0000000000000000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 495.015398][ T31] RBP: 00007f5202011e19 R08: 0000000000000000 R09: 0000000000000000 [ 495.023380][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.031629][ T31] R13: 00007f52021d6038 R14: 00007f52021d5fa0 R15: 00007ffee6bdba58 [ 495.039675][ T31] [ 495.042725][ T31] INFO: task syz.3.3314:17460 blocked for more than 145 seconds. [ 495.051036][ T31] Not tainted syzkaller #0 [ 495.056330][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.065056][ T31] task:syz.3.3314 state:D stack:27976 pid:17460 tgid:17458 ppid:16677 task_flags:0x400040 flags:0x00004004 [ 495.077274][ T31] Call Trace: [ 495.080570][ T31] [ 495.083528][ T31] __schedule+0x1798/0x4cc0 [ 495.088302][ T31] ? kasan_save_free_info+0x46/0x50 [ 495.093500][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.098398][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.103275][ T31] ? __pfx___schedule+0x10/0x10 [ 495.108240][ T31] ? schedule+0x91/0x360 [ 495.112503][ T31] schedule+0x165/0x360 [ 495.116886][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.122341][ T31] __mutex_lock+0x7e6/0x1350 [ 495.128936][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.133740][ T31] ? misc_open+0x51/0x330 [ 495.140965][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.146224][ T31] misc_open+0x51/0x330 [ 495.150434][ T31] chrdev_open+0x4cc/0x5e0 [ 495.154868][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.159904][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 495.166326][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.171367][ T31] do_dentry_open+0x953/0x13f0 [ 495.176450][ T31] vfs_open+0x3b/0x340 [ 495.180551][ T31] ? path_openat+0x2ecd/0x3830 [ 495.185466][ T31] path_openat+0x2ee5/0x3830 [ 495.190118][ T31] ? arch_stack_walk+0xfc/0x150 [ 495.195020][ T31] ? stack_depot_save_flags+0x40/0x860 [ 495.200585][ T31] ? __pfx_path_openat+0x10/0x10 [ 495.205679][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.211828][ T31] do_filp_open+0x1fa/0x410 [ 495.217541][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.222435][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 495.227533][ T31] ? _raw_spin_unlock+0x28/0x50 [ 495.232385][ T31] ? alloc_fd+0x64c/0x6c0 [ 495.236826][ T31] do_sys_openat2+0x121/0x1c0 [ 495.241517][ T31] ? __se_sys_futex+0x36f/0x400 [ 495.246592][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.251813][ T31] ? __fget_files+0x2a/0x420 [ 495.256536][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 495.261761][ T31] ? __fget_files+0x2a/0x420 [ 495.266398][ T31] __x64_sys_openat+0x138/0x170 [ 495.271266][ T31] do_syscall_64+0xfa/0x3b0 [ 495.275823][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.281053][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.287263][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.291940][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.297966][ T31] RIP: 0033:0x7f5201f8eba9 [ 495.302392][ T31] RSP: 002b:00007f5202d5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.310920][ T31] RAX: ffffffffffffffda RBX: 00007f52021d6090 RCX: 00007f5201f8eba9 [ 495.318975][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 495.327096][ T31] RBP: 00007f5202011e19 R08: 0000000000000000 R09: 0000000000000000 [ 495.335099][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.343238][ T31] R13: 00007f52021d6128 R14: 00007f52021d6090 R15: 00007ffee6bdba58 [ 495.351280][ T31] [ 495.354364][ T31] INFO: task syz.4.3319:17489 blocked for more than 145 seconds. [ 495.362366][ T31] Not tainted syzkaller #0 [ 495.367367][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.376174][ T31] task:syz.4.3319 state:D stack:27808 pid:17489 tgid:17487 ppid:16188 task_flags:0x400040 flags:0x00004004 [ 495.388200][ T31] Call Trace: [ 495.391489][ T31] [ 495.394431][ T31] __schedule+0x1798/0x4cc0 [ 495.399025][ T31] ? kasan_save_free_info+0x46/0x50 [ 495.404232][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.409158][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.414043][ T31] ? __pfx___schedule+0x10/0x10 [ 495.419037][ T31] ? schedule+0x91/0x360 [ 495.423312][ T31] schedule+0x165/0x360 [ 495.427542][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.433053][ T31] __mutex_lock+0x7e6/0x1350 [ 495.437713][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.442717][ T31] ? misc_open+0x51/0x330 [ 495.447153][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.452217][ T31] misc_open+0x51/0x330 [ 495.456520][ T31] chrdev_open+0x4cc/0x5e0 [ 495.460980][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.466172][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 495.472551][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.477574][ T31] do_dentry_open+0x953/0x13f0 [ 495.482449][ T31] vfs_open+0x3b/0x340 [ 495.486617][ T31] ? path_openat+0x2ecd/0x3830 [ 495.491402][ T31] path_openat+0x2ee5/0x3830 [ 495.496117][ T31] ? arch_stack_walk+0xfc/0x150 [ 495.501010][ T31] ? stack_depot_save_flags+0x40/0x860 [ 495.506562][ T31] ? __pfx_path_openat+0x10/0x10 [ 495.511523][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.517705][ T31] do_filp_open+0x1fa/0x410 [ 495.522262][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.527369][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 495.532444][ T31] ? _raw_spin_unlock+0x28/0x50 [ 495.537443][ T31] ? alloc_fd+0x64c/0x6c0 [ 495.541810][ T31] do_sys_openat2+0x121/0x1c0 [ 495.546544][ T31] ? __se_sys_futex+0x36f/0x400 [ 495.551416][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.556689][ T31] ? rcu_is_watching+0x15/0xb0 [ 495.561471][ T31] __x64_sys_openat+0x138/0x170 [ 495.566374][ T31] do_syscall_64+0xfa/0x3b0 [ 495.570900][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.576431][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.582521][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.587448][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.593372][ T31] RIP: 0033:0x7f522f98eba9 [ 495.597854][ T31] RSP: 002b:00007f52307d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.606767][ T31] RAX: ffffffffffffffda RBX: 00007f522fbd6090 RCX: 00007f522f98eba9 [ 495.614770][ T31] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 495.622905][ T31] RBP: 00007f522fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 495.630974][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.639068][ T31] R13: 00007f522fbd6128 R14: 00007f522fbd6090 R15: 00007ffe664d2498 [ 495.647111][ T31] [ 495.650176][ T31] [ 495.650176][ T31] Showing all locks held in the system: [ 495.658004][ T31] 1 lock held by khungtaskd/31: [ 495.662865][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 495.672807][ T31] 4 locks held by kworker/u8:8/3484: [ 495.678141][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 495.689392][ T31] #1: ffffc9000b847bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 495.700022][ T31] #2: ffffffff8f52d0d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 495.709369][ T31] #3: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 495.719534][ T31] 2 locks held by getty/5625: [ 495.724240][ T31] #0: ffff8880303c30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 495.734052][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 495.744329][ T31] 3 locks held by kworker/0:11/7542: [ 495.749667][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 495.760717][ T31] #1: ffffc9001c027bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 495.774387][ T31] #2: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 495.785853][ T31] 2 locks held by kworker/u8:22/12029: [ 495.791326][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 495.801431][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 495.810418][ T31] 1 lock held by syz-executor/17338: [ 495.815785][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 495.824279][ T31] 2 locks held by syz.2.3280/17350: [ 495.829538][ T31] #0: ffff888026b9b100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 495.839357][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 495.849696][ T31] 2 locks held by syz.1.3293/17390: [ 495.854918][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 495.863609][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 495.873696][ T31] 2 locks held by syz.1.3293/17392: [ 495.878948][ T31] #0: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 495.889091][ T31] #1: ffff888026b9b100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 495.898846][ T31] 1 lock held by syz.3.3314/17459: [ 495.903982][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 495.912628][ T31] 1 lock held by syz.3.3314/17460: [ 495.917779][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 495.926816][ T31] 1 lock held by syz.4.3319/17489: [ 495.931978][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 495.940506][ T31] 1 lock held by syz-executor/17495: [ 495.945841][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 495.954350][ T31] 1 lock held by syz-executor/17497: [ 495.959708][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 495.968261][ T31] 1 lock held by syz-executor/17499: [ 495.973574][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 495.982136][ T31] 1 lock held by syz-executor/17501: [ 495.987516][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 495.996160][ T31] 1 lock held by syz-executor/17503: [ 496.001477][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.010874][ T31] 1 lock held by syz-executor/17505: [ 496.017620][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.026332][ T31] 1 lock held by syz-executor/17507: [ 496.031631][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.040304][ T31] 1 lock held by syz-executor/17509: [ 496.045661][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.054179][ T31] 1 lock held by syz-executor/17511: [ 496.059510][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.068053][ T31] 1 lock held by syz-executor/17513: [ 496.073343][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.081866][ T31] 1 lock held by syz-executor/17515: [ 496.087811][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.096390][ T31] 1 lock held by syz-executor/17517: [ 496.101691][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.110196][ T31] 1 lock held by syz-executor/17519: [ 496.115524][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.124025][ T31] 1 lock held by syz-executor/17521: [ 496.129377][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.137950][ T31] [ 496.140297][ T31] ============================================= [ 496.140297][ T31] [ 496.148945][ T31] NMI backtrace for cpu 1 [ 496.148965][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 496.148981][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.148991][ T31] Call Trace: [ 496.148996][ T31] [ 496.149003][ T31] dump_stack_lvl+0x189/0x250 [ 496.149027][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.149046][ T31] ? __pfx__printk+0x10/0x10 [ 496.149076][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 496.149101][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 496.149124][ T31] ? __pfx__printk+0x10/0x10 [ 496.149160][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.149184][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 496.149206][ T31] watchdog+0xf93/0xfe0 [ 496.149230][ T31] ? watchdog+0x1de/0xfe0 [ 496.149253][ T31] kthread+0x70e/0x8a0 [ 496.149273][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.149291][ T31] ? __pfx_kthread+0x10/0x10 [ 496.149310][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.149332][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.149345][ T31] ? __pfx_kthread+0x10/0x10 [ 496.149362][ T31] ret_from_fork+0x436/0x7d0 [ 496.149379][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.149397][ T31] ? __switch_to_asm+0x39/0x70 [ 496.149414][ T31] ? __switch_to_asm+0x33/0x70 [ 496.149431][ T31] ? __pfx_kthread+0x10/0x10 [ 496.149449][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.149478][ T31] [ 496.149483][ T31] Sending NMI from CPU 1 to CPUs 0: [ 496.295095][ C0] NMI backtrace for cpu 0 [ 496.295111][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 496.295130][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.295141][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 496.295163][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 f9 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 496.295178][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 496.295199][ C0] RAX: 2436e76c307bc400 RBX: ffffffff819693f8 RCX: 2436e76c307bc400 [ 496.295212][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b9ce8 RDI: ffffffff8be33c00 [ 496.295224][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 496.295236][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa3a730 [ 496.295248][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 496.295265][ C0] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 496.295280][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.295292][ C0] CR2: 000055845f171fb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 496.295307][ C0] Call Trace: [ 496.295313][ C0] [ 496.295320][ C0] default_idle+0x13/0x20 [ 496.295339][ C0] default_idle_call+0x74/0xb0 [ 496.295360][ C0] do_idle+0x1e8/0x510 [ 496.295375][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 496.295397][ C0] ? __pfx_do_idle+0x10/0x10 [ 496.295417][ C0] ? do_idle+0x4ed/0x510 [ 496.295434][ C0] cpu_startup_entry+0x44/0x60 [ 496.295451][ C0] rest_init+0x2de/0x300 [ 496.295473][ C0] start_kernel+0x3a9/0x410 [ 496.295493][ C0] x86_64_start_reservations+0x24/0x30 [ 496.295517][ C0] x86_64_start_kernel+0x143/0x1c0 [ 496.295539][ C0] common_startup_64+0x13e/0x147 [ 496.295570][ C0] [ 496.296236][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 496.296256][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 496.296282][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 496.296296][ T31] Call Trace: [ 496.296307][ T31] [ 496.296317][ T31] dump_stack_lvl+0x99/0x250 [ 496.296347][ T31] ? __asan_memcpy+0x40/0x70 [ 496.296376][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.296403][ T31] ? __pfx__printk+0x10/0x10 [ 496.296451][ T31] vpanic+0x281/0x750 [ 496.296482][ T31] ? __pfx_vpanic+0x10/0x10 [ 496.296507][ T31] ? preempt_schedule+0xae/0xc0 [ 496.296532][ T31] ? preempt_schedule_common+0x83/0xd0 [ 496.296560][ T31] panic+0xb9/0xc0 [ 496.296586][ T31] ? __pfx_panic+0x10/0x10 [ 496.296614][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 496.296656][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 496.296693][ T31] watchdog+0xfd2/0xfe0 [ 496.296731][ T31] ? watchdog+0x1de/0xfe0 [ 496.296769][ T31] kthread+0x70e/0x8a0 [ 496.296802][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.296833][ T31] ? __pfx_kthread+0x10/0x10 [ 496.296864][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.296899][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.296920][ T31] ? __pfx_kthread+0x10/0x10 [ 496.296959][ T31] ret_from_fork+0x436/0x7d0 [ 496.296988][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.297017][ T31] ? __switch_to_asm+0x39/0x70 [ 496.297047][ T31] ? __switch_to_asm+0x33/0x70 [ 496.297075][ T31] ? __pfx_kthread+0x10/0x10 [ 496.297105][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.297154][ T31] [ 496.637541][ T31] Kernel Offset: disabled [ 496.641876][ T31] Rebooting in 86400 seconds..