last executing test programs: 27.564603411s ago: executing program 2 (id=3014): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) unshare(0x26020480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=@newtclass={0x24, 0x28, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x11, 0x7}, {0xf, 0xd}, {0xa, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x84044}, 0x80) 27.33150473s ago: executing program 2 (id=3016): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) 27.092573454s ago: executing program 2 (id=3019): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, r2, 0x10d80}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x5, 0x0, 0x0, 0x80}]}}]}]}, 0x34}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x21, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "d2"}]}]}}}}}}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063119d000000000007000000200000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 26.907476656s ago: executing program 2 (id=3020): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000100)=0x32020, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x6, r4}, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="10008950e0dabcc251870000e2ff0000"], 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001cc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001d00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbbaed275b000008000300", @ANYRES32=r7, @ANYBLOB="1c002f80"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4050884) 26.328638157s ago: executing program 2 (id=3027): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48885, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000480)="b0f5606c3f2bb874b026bc639b5767db7e37b5aee564345c41e196461c86be4b7b5f5f0c950302e577dedb7233205a32663471244292ad1de16abefcdd3534c073017c2a76e6a82d0203ad72582c0c99f3e526c37c279b66b4bce5deda6c227db8315f29ade538d5e0261ff13561bca30ffa575ab25ced37ef3177ff8f7ce5990335215a38592ab64f2dd972b1d5c02b2e03b97f7fae1e55457e160fbd864ff3c084fecce49d7fa9bde97d823fef0583beb969f899cce3ed25b8395e6a8ce6f8e13ae8c4d311d7ebe16ba2c36056db4de0a7093cab226fc51a3c0c432b1730b59c050d", 0xe3}, {&(0x7f0000000580)="451c0963ca11b934e0ef948d9c3e7da0034ddd555869ec7e0f480e32f21cd83a724ccefdaaf54d974c76897a11de5f28c8aedbc5025e7f4f4ad8e34281eea7f8e6b0acfda9b26307bcee1d5edb24a1e00b1db6665543a0ff80a7bd32704dab96049eb2751120cacc3607b8b144ba70c2f42679fb6692e89e2f2ab4a5963ff3d62745", 0x82}, {&(0x7f0000000640)="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", 0x595}], 0x3}, 0x4048081) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x28, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 25.470447755s ago: executing program 2 (id=3035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800900010068617368000000002c00028008000640e80000ff08000140000000030800044020000003080003400000000408000240000000120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@lld, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0xa00}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) 24.4447723s ago: executing program 4 (id=3046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x84}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x2, 0x4) 24.127288335s ago: executing program 4 (id=3051): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x4044000) r1 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r1, &(0x7f0000000240)="11df3306442435feef4376790cadc9c87a0f8d16e4e0b84d03df43f01a51f976f9691f7ec269e3e913a4f730cba88ec760d2bd1af220edfda5cbfbd8e00b22668960c19b6c284de249b574a012cfed207bee998b0ae67e4c4d9e08879fa55599983b320b72eb03e0", 0x68, 0x10, &(0x7f00000002c0)={0xa, 0x4e20, 0x133, @loopback, 0x5}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/13, 0xd}, {&(0x7f0000000100)=""/22, 0x16}], 0x2, &(0x7f0000000180)=""/69, 0x45}, 0x22) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000114a7", @ANYRES8], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x4044000) (async) socket$igmp6(0xa, 0x3, 0x2) (async) sendto$inet6(r1, &(0x7f0000000240)="11df3306442435feef4376790cadc9c87a0f8d16e4e0b84d03df43f01a51f976f9691f7ec269e3e913a4f730cba88ec760d2bd1af220edfda5cbfbd8e00b22668960c19b6c284de249b574a012cfed207bee998b0ae67e4c4d9e08879fa55599983b320b72eb03e0", 0x68, 0x10, &(0x7f00000002c0)={0xa, 0x4e20, 0x133, @loopback, 0x5}, 0x1c) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/13, 0xd}, {&(0x7f0000000100)=""/22, 0x16}], 0x2, &(0x7f0000000180)=""/69, 0x45}, 0x22) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) (async) 23.983266425s ago: executing program 4 (id=3052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000240)={0x7, 'virt_wifi0\x00', {0x6}, 0x5}) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56747, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x38) (async) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 23.890511064s ago: executing program 0 (id=3053): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x208001}, 0x8) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7109016802"], 0x5) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x100000}, 0x10}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fefaffff270000000e0001006e657464657673696d000000ac0d0a445450d6a5822bce0f0002006e657464657673696d3000001c005100736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x208001}, 0x8) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async) write$nci(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7109016802"], 0x5) (async) shutdown(r1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x100000}, 0x10}, 0x94) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fefaffff270000000e0001006e657464657673696d000000ac0d0a445450d6a5822bce0f0002006e657464657673696d3000001c005100736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}}, 0x0) (async) 23.493169125s ago: executing program 0 (id=3056): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x0, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6f390000}, 0x48) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x48, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x499}, @md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x8c, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 23.359055238s ago: executing program 4 (id=3057): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, 0x0, 0x3c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0xc, 0x2, 0x7f, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8000, 0x8, 0x3, 0xc2}}) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000100)=@delqdisc={0x34, 0x25, 0x4, 0x7c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0x9}, {0x0, 0x3}, {0x9, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xb5, 0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x34}}, 0x0) 22.782821064s ago: executing program 0 (id=3061): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000300)) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xea60}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000016c0)=ANY=[@ANYBLOB="440000000300000080958c53d5b6b15d731a5bf74d8d2f910eda", @ANYRES16=r4, @ANYBLOB="050029bd7000fbdbdf252e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000050018013300000008003500000000000a004f0021187b6195830000"], 0x44}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d080214000000020003a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000fdbccf137789dd5e3df5fc6047a353000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400d0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) bind$inet(r1, &(0x7f0000001540)={0x2, 0x4e21, @multicast2}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x80, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x9, 0x2, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000011000b052abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0008040600020000140035"], 0x34}}, 0x20004004) getsockopt$IP_VS_SO_GET_SERVICES(r9, 0x0, 0x482, &(0x7f0000001580)=""/195, &(0x7f0000001680)=0xc3) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000300)='blkio.bfq.io_service_time_recursive\x00', 0x24) r11 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x2010, r0, 0x107f8000) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r11, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/226, 0xe2}], 0x4}, 0x5}], 0x1, 0x2, 0x0) 22.526035691s ago: executing program 0 (id=3062): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, &(0x7f00000002c0)=0xc, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000001840), 0x4) write$cgroup_int(r3, &(0x7f0000000000)=0x6, 0x12) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x40000000, 0x4, 0x76}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', r6, 0x7, 0x20, 0x0, 0x0, {{0x42, 0x4, 0x2, 0x6, 0x108, 0x65, 0x0, 0x5, 0x29, 0x0, @broadcast, @loopback, {[@noop, @noop, @timestamp_addr={0x44, 0x1c, 0xd2, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@empty, 0x200}, {@local, 0x2}]}, @timestamp_addr={0x44, 0x54, 0x56, 0x1, 0x3, [{@empty, 0x10}, {@private=0xa010100, 0x2}, {@private=0xa010100, 0x1}, {@broadcast, 0x401}, {@empty, 0x2}, {@broadcast, 0x8001}, {@multicast1, 0xfffffff9}, {@loopback, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0x77, 0x3, 0x0, [{@multicast2, 0x800}, {@local, 0x10000}, {@local, 0x5}, {@remote, 0x1}, {@loopback, 0x200}, {@local, 0x1}, {@private=0xa010101, 0x6}]}, @rr={0x7, 0x1b, 0x2b, [@empty, @multicast1, @remote, @multicast1, @remote, @remote]}, @noop, @cipso={0x86, 0x29, 0x3, [{0x6, 0xb, "dc06553cdae7392181"}, {0x6, 0xb, "6c9059630ce1307af0"}, {0x0, 0x7, "5528aa1d8a"}, {0x6, 0x6, "90f884d5"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x1, 0x8000, 0x86ab, 0x0, {{0x6, 0x4, 0x1, 0x12, 0x18, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @empty, {[@end]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) r10 = socket(0x11, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r10, &(0x7f0000000180)={0x11, 0x0, r12}, 0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x20, 0x40, 0x375, 0xfffffffd, {{0x40, 0x4, 0x1, 0xb, 0x100, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, {[@cipso={0x86, 0x86, 0x2, [{0x7, 0x12, "8649d6bf7f488229407c11c7befd8443"}, {0x2, 0x12, "5fd654cc0000b9ae7640d7d644217abc"}, {0x6, 0x12, "41bf7377dcecfe3035dd6724c133219d"}, {0x0, 0xe, "ac78b5df808aeba66846a8f4"}, {0x2, 0x10, "9595a419bec26aebf9a03cda8a3b"}, {0x7, 0x6, "8f31092b"}, {0x1, 0x2}, {0x5, 0x10, "44bdea4128de55aa87328d8fd2fa"}, {0x7, 0xc, "15b363be3df5a6b025b5"}, {0x7, 0x8, "81cf3105d3e9"}]}, @noop, @end, @timestamp={0x44, 0x14, 0xc9, 0x0, 0x2, [0x1000, 0x4, 0x5, 0x7]}, @cipso={0x86, 0x2c, 0x0, [{0x1, 0xe, "70b20b0419583480b9d621f6"}, {0x0, 0xb, "557ec75f23f199fc57"}, {0x7, 0x3, "82"}, {0x7, 0xa, "436b5f42ffc12d68"}]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0xc, 0x0, [{0x5, 0x6, "463de973"}]}, @rr={0x7, 0xf, 0x92, [@multicast2, @rand_addr=0x64010102, @rand_addr=0x64010101]}, @noop]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x10000}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000002c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002c80)=ANY=[@ANYBLOB='@%\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="1400020076657468315f746f5f687372000000001400020064766d7270310000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="3c0001801400020000000000000000000000000000000000140002006d6163767461703000000000000000000800030002000000080003000600000028000180080003000300000008000100", @ANYRES32=r8, @ANYBLOB="140002006d6163767461703000000000000000000400018014000280080002000700000008000200240000003000018008000100", @ANYRES32=r9, @ANYBLOB="080003000100000014000200766972745f776966693000000000000008000100", @ANYRES32=r12, @ANYBLOB="14000180080003000300000008000100", @ANYRES32=r13, @ANYBLOB="580001800800030003000000140002006d6163736563300000000000000000000800030001000000140002006e657464657673696d30000000000000140002007369743000000000000000000000000008000100", @ANYRES32=r15, @ANYBLOB="fc9fdc2c9426f0acf9f56f33b60f439924e3a659e4cc320f6b38f4f99a23c4f4ba85d5f753b3f0"], 0x2540}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4008850) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) 22.444753283s ago: executing program 4 (id=3063): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff, 0xffffffff}, 0x14}}, 0x0) 20.806680303s ago: executing program 4 (id=3065): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795c3238d7219c2d3020933c9c39c6d0cbc957ec3f682cac392c2a627a0c386f59681fdfd5ea467e2db933c4ae7a5aafaa8c86de5dfdc5ed01a788fc636bf7a8062bebeff2374", 0x85}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) sendmsg$alg(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="40e527077000090000000400000005000a000100000005000a0000001000080001004130ffa4ab24789b185101", @ANYRES32=r3, @ANYBLOB="080004000000000005000a002700000008000400000000000800040000000000080004000000000008000100", @ANYRES32=r3, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x44080) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x68, r9, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xf, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x20008080) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) writev(r10, &(0x7f0000000800)=[{&(0x7f0000000780)="8496c89888a723879f0ac14e6da4e824c9a71e67b23e7c69416ebdd41a4120deb6ab0a975de1731c2b746d96e60cce84f67521a19e03711e46fd4550b2af5442805b20220ecbd455daff443d3fbceb5deb9979c281173fcdffc6729f", 0x5c}, {&(0x7f0000000680)="c275230346b2d09dc5a913592ef969165bf5ea43705bb15c2d38944371401bcab1b73d526dde9998131eefe014587af82221dec8", 0x34}], 0x2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}}, 0x40000) 20.61544032s ago: executing program 0 (id=3067): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/297], 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1, 0x7}, 0x1c) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x4, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x4}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 20.395503971s ago: executing program 0 (id=3070): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) read(r0, &(0x7f0000000180)=""/115, 0x73) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 15.887443086s ago: executing program 1 (id=3097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) (async) r5 = socket(0x10, 0x3, 0x2) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000000)='\"', 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) 15.857092777s ago: executing program 1 (id=3098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0xa, 0x0, 0xff, 0x15, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2, 0x7, 0x1, 0x5, 0x1}}) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) syz_emit_ethernet(0x86, &(0x7f0000000980)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0x1c, 0xfc, 0x1, 0x0, [{@rand_addr, 0x4e210000}, {@remote, 0x2}, {@local, 0x3ff}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=r7}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@updpolicy={0x4dc, 0x19, 0x0, 0x70bd25, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@multicast2, 0x4e22, 0x5, 0x4e21, 0x4, 0x2, 0x0, 0x80, 0x5e, r1, r3}, {0x6, 0xf8, 0xa, 0xa2, 0x1, 0x5, 0x1, 0x8}, {0xb, 0xfffffffffffffffc, 0x2, 0xe7a2}, 0x5, 0x6e6bb0, 0x0, 0x0, 0x3}, [@algo_auth={0xd7, 0x1, {{'mcryptd(xcbc-aes-ce)\x00'}, 0x478, "1c3e2a9d557865fe6184ef22688f85bbf9141b7908d571e4962f74373c737b6ab7b73c0fc476f1464b3260f6e2ecd45fede982e3c080a212f7f57746d7b243164f7b4a499bd9f6de7a135932ff97ab4c3e4ba87fbf6db046f71822eb490a745cc979334f167c9a2e61cf284980a04489580add3202ec56288e9f4e20d0883b220e48dcc1c8e692f8b28f8aa8ee9af7"}}, @policy={0xac, 0x7, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e22, 0x0, 0x4e21, 0x401, 0x2, 0x20, 0x80, 0x87, 0x0, r4}, {0x4, 0x40, 0x8, 0x0, 0x8c6, 0x4, 0x1, 0x1}, {0x3, 0x0, 0x5, 0xaf5}, 0x3, 0x6e6bba, 0x0, 0x0, 0x2, 0x2}}, @tmpl={0x184, 0x5, [{{@in=@multicast1, 0x4d3, 0x2b}, 0xa, @in=@remote, 0x34ff, 0x2, 0xe59c4336d136bd7e, 0x3, 0x3, 0x2, 0x6}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in6=@loopback, 0x3506, 0x3, 0x3, 0x1, 0x6d7a9069, 0x1, 0x5}, {{@in6=@private1, 0x4d5, 0xff}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3506, 0x0, 0x0, 0xa, 0x5f, 0x8, 0x835d}, {{@in=@remote, 0x4d2, 0xff}, 0x2, @in=@rand_addr=0x64010100, 0x3500, 0x7, 0x1, 0xf2, 0x10000, 0x7f, 0x7}, {{@in=@private=0xa010102, 0x4d6, 0x32}, 0xa, @in=@broadcast, 0x3503, 0x3, 0x3, 0x4, 0x5, 0x4, 0x40}, {{@in=@multicast2, 0x4d6, 0x33}, 0xa, @in6=@empty, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x6}]}, @address_filter={0x28, 0x1a, {@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x2, 0x8, 0x2}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd2a, 0x5}}, @sa={0xe4, 0x6, {{@in6=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x5, 0x4e24, 0x0, 0xa, 0x20, 0x60, 0x88, 0x0, r7}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001, 0x3c}, @in6=@remote, {0xc0, 0x5, 0x10000, 0xffffffffffff8000, 0x1c, 0x5629, 0xbe6, 0x2}, {0x80000001, 0x1d, 0x3, 0x2}, {0x95b, 0x0, 0xdde}, 0x70bd2a, 0x0, 0xa, 0x3, 0x2, 0x47}}]}, 0x4dc}}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46212}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}, @IFLA_MTU={0x8, 0x4, 0x40000500}]}, 0x4c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg$inet(r11, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) (async) r14 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r14) write(r14, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r13, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x958}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24008004) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r13, 0xdc0131ac48c32d50, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040840}, 0x40008c1) 15.851752879s ago: executing program 3 (id=3099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000b14010000e0ffffffffffff070001"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendto$packet(r3, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 15.69146336s ago: executing program 1 (id=3100): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x80) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @remote}], 0x20) 15.649203308s ago: executing program 3 (id=3101): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x4, 0x2, 0x9, 0xefeb, 0x8, 0x6, 0x1, 0x9}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x60}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x10, 0x2, 0x17f9, 0x7, 0x8, 0xc4, 0x1, 0x5, 0x9, 0x8, 0x3f4d3730, 0x8, 0x3, 0x4, 0x1, 0x7, [0x8000, 0x8]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008000400010001000800"], 0x58}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r5], 0x44}}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r8, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 15.621583176s ago: executing program 1 (id=3102): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000a8880000200012800b00010065727370616e0000100002807062530a040012000600100000000000"], 0x40}}, 0x0) 15.499559513s ago: executing program 1 (id=3103): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0xfffffffc, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x48000) r3 = socket(0x5, 0x3, 0xffffffff) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES64=r7, @ANYBLOB="14000200fe"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15.499180215s ago: executing program 3 (id=3104): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="ffc300000000000024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}}, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000002, 0x8032, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$MAP_CREATE_RINGBUF(0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000002a4e68af0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0xd, 0x1, @remote, 0xfffffff8}}, 0x401, 0x2}, &(0x7f0000000180)=0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000001c0)={r6, 0x7}, 0x8) 15.364513156s ago: executing program 3 (id=3105): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x1c0, 0x1c0, 0xd8, 0xffffffff, 0xffffffff, 0x358, 0x358, 0x358, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28}, {0x10cf4f0dc76a84e8, 0x3}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xff, 0xa4ac, 0x5, 0x5c, 0x7, 0x8, 0xbe2, 0x5]}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xffffff00, 0xffffff00, 'syz_tun\x00', 'caif0\x00', {}, {}, 0x2e, 0x2, 0x22}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0x5, 0x7]}}, @common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xd}}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffff00, 'pim6reg0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x0, 0x2, 0x64}, 0x0, 0x170, 0x198, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@loopback, [0x0, 0x0, 0xff000000, 0xffffff00], @ipv6=@mcast1, [0xff, 0x0, 0xff000000], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffffff, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 0xffffffff, 0x4, 0x0, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x214, 0x1101}, 0xb12b5648711b60c8, 0x1821, 0x4e24, 0x4e24, 0x4e20, 0x4e23}}, @common=@unspec=@devgroup={{0x38}, {0x2, 0x5, 0x7, 0x5, 0x2afb}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x23, 0xfa, 0xfff7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900), 0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x28, &(0x7f0000000700)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x983aa61668912a27}, @generic={0x2, 0x1, 0x3, 0x1, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xd1}], &(0x7f0000000840)='GPL\x00', 0x3ff, 0x4e, &(0x7f0000000880)=""/78, 0x40f00, 0xd, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000940)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x2, 0xffffffff, 0x308df63c}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000a80)={0x2, 0x6, @status={[0x9, 0xfffffffffffffff8, 0x5, 0xfffffffffffffffb, 0x2, 0x2]}, [0xf771, 0x0, 0x0, 0x3, 0x5, 0x8000, 0x7fff, 0x6, 0x1000, 0x7, 0x8, 0x4, 0x6, 0x9, 0x6, 0x6, 0x4, 0xe, 0x2, 0x2, 0xe, 0x7, 0x9, 0x9, 0x2, 0xae, 0xffffffffffffffff, 0xe98, 0x2, 0x0, 0x3, 0x344, 0x100, 0x3, 0x0, 0x787, 0x9, 0x80000001, 0x5, 0x3, 0xd61, 0x80000000, 0x6, 0x2e, 0x4, 0xa890, 0xeb2e, 0x7, 0x9, 0x9, 0xffff, 0x4, 0x2, 0x3d3, 0x1, 0x3, 0xc, 0x3, 0x7, 0x80, 0x8, 0x100, 0xc6c8, 0x6]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r4, 0x0, 0x71, 0xc9, &(0x7f00000014c0)="139756f1e43aa0ac0c603ab84592ffb4ed1ddd2761e6baaae8b3533da0785f6ccdc0a8bc67fe4feaf3fdb58d41ae12892194f2aed824467de1b067213470f14e7e62e25919d0437546276a8c6f86d191815f7dc32c06ba930011f3083a145ddceada3df04086a55904798ca180a8fb1149", &(0x7f0000001540)=""/201, 0xf24f60e, 0x0, 0xf, 0x2d, &(0x7f0000001640)="03e2c619f6d3f479278e300d872bb8", &(0x7f0000001680)="cb7fb83850d980023396b132edde8fbf685c2f29113240b8cb210a34fb3c6a3316b70dff657a728a801dee7c76", 0x4, 0x0, 0xfffffff2}, 0x50) r5 = accept4(0xffffffffffffffff, &(0x7f0000001780)=@pptp, &(0x7f0000001800)=0x80, 0x800) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001740), r5) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001840)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000001880)={'b', ' *:* ', 'w\x00'}, 0x8) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000018c0)={0x0, 0x3}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001a80)={r8, &(0x7f0000001900)="82aef7dcc322a04f62a239d1c1393794aaa5c6465d7d1a685a1a6c49dc2bb004b344a3aff43f24b24253912f954bf081eed58e122970be244c5c47ec4519afd895009c5c13f8090191c2654841f4f2b49bd37e323820f5a049406becc98f7822ec45836c318caa763d25", &(0x7f0000001980)=""/196}, 0x20) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000001ac0)={0x0, 0x2, [0x9, 0x352, 0xf28, 0x8c1, 0x9, 0x2]}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000001b00)=0x1, &(0x7f0000001b40)=0x4) write$cgroup_pressure(r5, &(0x7f0000001b80)={'full', 0x20, 0x100000000, 0x20, 0x8}, 0x2f) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x1, 0x4) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c00), r5) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001cc0)={'ip6tnl0\x00', &(0x7f0000001c40)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x5, 0x4, @private2, @empty, 0x700, 0xff00, 0x81, 0x7}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000001dc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x78, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x73e}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xc}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x78}}, 0x880) r11 = socket(0x15, 0x3, 0x7fffffff) sendmsg$DEVLINK_CMD_PORT_SET(r11, &(0x7f0000001f80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e40)={0xcc, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xcc}}, 0xc000) getsockopt$inet6_int(r5, 0x29, 0x3c, &(0x7f0000001fc0), &(0x7f0000002000)=0x4) r12 = getpid() ioctl$sock_SIOCSPGRP(r11, 0x8902, &(0x7f0000002040)=r12) connect$unix(r11, &(0x7f0000002080)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f0000002100)={@null, @bcast, 0x2, 0x44}) 15.314825442s ago: executing program 3 (id=3106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x14}}, 0x54}}, 0x0) 15.237891255s ago: executing program 1 (id=3107): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r3 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b67882710531e284ae80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f460976f2c0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a776", 0xd1}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f0000005740)="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", 0x452}, {&(0x7f0000006780)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0x416}], 0x7}}], 0x1, 0x40040) (async, rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (rerun: 32) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x18}, @void, @llc={@llc={0x8e, 0xf0, "8c"}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 15.213213821s ago: executing program 3 (id=3108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001500)="a76e3ba7f87ed94e8b20c3d2ebc535d9439d", 0x12}], 0x1}}], 0x1, 0x4040894) (async) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) (async, rerun: 64) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="4a895703cd17bcedc1666306831c5c5864ffa418ac198f0265d77afca35e38f139b2cf0be1badc10d8cec9dd66449d939643effb514ece9c54c3a48cb71e9dacb4d9daf0705c904f94c08f6c446468930f4ca4313b2d50287be8b9ca790b1161d1131312cb2be667de8247d6f019f3f303c5d97f7e581a1bc5c1c5e16dba7bb3857c21d6de441f58c8548c1657cbab43f1d0535cdc45b1a4024dae285e8a9cc4548a40eaf9679353bf28382bd9a5c5e78ef8920da23b70977b487a0fcd11d9478dfd4d79be5eed791f01fa456cc8c08dbb35a090622d8369f5004bb9197ebc47ad0cb54d5c542242510f9d882928786a87b08daf2acb81b17ab509ec15c585d2006b36c21f6e81046ae16898ef797e0544581fcec801e889686f1b80fbd12a373099966e76f03d9b9e097806d23f8f7102282ad4f721ded9bfdbf406ffb3e6a6467dd909b66112e29d073a37fb6e077ad638cb8f28bfe888fe6c009ad37d368ad0c4a34a70c1a795110e63c41bdca93473f3b74127e35634cc05d5bdd55c5f5f658617d5dc911ef5d5b117d6dec9849636850ff9bf25ffd0fe09b81c653be1ce231c96dfd5514e7967c5ac79fedc4dae746bdb11725be5650a825c178356db68d31e155b20114105a3e902555f329448ca577a1a3be792d396e10c84fcc52c43f25efd40730b23db6f4cca8ab196b5a201184f4b7b4cec7ef64a325ff3fbcbc51dc46466209b4781ecbc943e33a20a9b2a290434279b09ee3911e2ce54ffbb634db216096f9b6d7cd1b093d05d0f03f7df64e2670c9336c7bf27d0da73d81498bf0572661225ab62f0f4b2bce327927c1d4b923cc3db422354e389c81749dd51042d3c98a7e5acaaef627283b630d59a8a75dc506400c40d6c8c0a062254cde2e643fe99fb03f42f0396e23b0273f0f5a354826824ab2d72b8793dcff47c75387011767f554f7594918d76fc80cecef01ac74dd10d257ac962209026850f3e1ec2877ea63c59c3c4e751594c31774ade2eac9e94b33b2d06c668cb700fdbe61ac4ec2d595f5a3f5b2722f7644fa8081d1445bada8624b025291d7528144d5a092d410249b20f9faba62f760c05b9e25abdafd107a29033c3ca67cb62500ce9979878a2c293151528ef33574e96148c7798ee427936f205627c1d6aad4e1956b10495b23ebb2fd687d75cb0f9faec439c494cb59c3293d62617f9e0c88168f993e8540db1ab44dfad05bd7c7841954f21a923fc049a8f6e141a0ae26e55e167063421e35340a19c6316e593dc46b2c5d00b1118f5badadcb30af89ce2efe81937727c5d38c9368ecb79f3b1393dfbf74b713ca09f3e3ed774019227497ab6599fb4be12be93b4ba8cd7c5e5ab022e43b11179c9a58a938e8fc9bd0f2ea990d6af6545827b25d23002b8de3faa3994711d9fd4e5ec7e5f2b3e64df3e5d9f31762c39aa25902bd49e17ebd597730461fbcf75095375a49775a92e0246f963e021b678d30bf218e495d6acccbc2b94e555b4ef1392dea925e9ab0afcb85314c3577fd5962fb6845ace74af46a71b4304bc58c953e02e8aa7adccd209bca4f5c6b16161aeb3d5377a15c3e2ac38136b8b0424bdec89354cb53319bee78cd078fcf99dd3c02d6b9f070c40c5adda3f7d58d8476b1688f0e776695b8ae6b807b55a4a84d67d772a1b663ccca7bdb47f098265378205b921140c5ae3ae03bbc8821a4cfb79add44884ebe9c7d67415de7a4f51e315910f77be57c12718e1cc0700d0112af51013c4a87ec39226abf811a19a857a04e7ada6265345e87bf5ad3327afcde22e16543b3cf4f4bdccdbdcbf2b6e2291f4877b32b5a69e00387bfb1c824380bd57f3af90cf685b5cfb874f7870adbf50621768bf2d45eb5c3f783dcc067b001aa01c6cf239e98010cd016108fb1de06cc59070b5db347ff892246fbb699e0ee999cc9c923e2a5354fb4816c15dd8206f1033b556666b3ddf2aae0e892055239d9c5faf1c4b61de224d153623e40574918b1639635ea46a895d2f5a2958d409dddc1e55441fbdfe40b83ae0b3f3f8f694d18b19a9bef18c54c6888636e803154d8c8fb66566f4ba5fa02a7bfd5ed23cf61f75b26fd7f3ff03d1b9e26ac0e2568604f9e550185abad80dacbe12bac5a01c3b0d06cd9f8532ce8ac28ee8fabbd1f8f6622077dcb41ebedc2c2eeb2e1efa3f1ecfb5937a1368f54ff4255676840dd65006460ee6703275c51d27fe4bc6f5923720983a235df824190ab6f908475d2496e5928e915d48a33a7e2277617898a0ee8609eb526528e5f00c5f003972491a16ea209c8a794b6acd2997731d656d83f2ec41412ab3d48256424279a27f8e99431c25ce3afb42eaace7daa26e760912b02f3e5842340ce81f05694ae63c854928bacdbdbe2d1919d0044b9e2d142cd330bc4cdfeccd89d14974ded579a559584384615123d3b56f00ff9bf1c2ec28d23a15c5031a990d79462cfbf4fa576f10b74ce05276e433c4b1acf95fc29929c29c8de9ccc781b644bec6b3736c054a7699b3372133dc52da8b3e42976a5ff354fdb08335843698cdc198f5b1067b1a73ecf317397e64db3f6965d29fa6c76822685f7e0566a8984b57912527ce5df0eaa24ae441b9e7f01ed0121c58938dc1620c448bb9e1d746c499e8b249262e5bc7b642c245e04623f4c0cccc8a6e5c043da2921cd642287984e6c94619b79d23c576a27d10a9850fcf09a6bab32761cff1b0abdb521426588162e9b4e11e6e90aa2e1d227842c245daea800e6567c6a94ada996fa8f23d25ab3d3fbfb53d3bfec69fcd4f8a0a3f21851960363bad9a156a8bf8dac7bc61b3df1e0f88bc46e589c432e9321165f8bc5a8e7c4fdff96ee9fa27f1b03ff6e16d90f40bd55234cc7606e0f2d10889c5c26e7f9e79a76c63991b02b35df613c030186211742a9b80ad7fe4b415e9293f9638f83d95548442723ae89f62ef2c7e68acf94ccf9281fc4d6d1b4db097602080a5f715a3dfec6f792cf7a81884c6ebb57ae05ffa16146586b8c42dbc686e009522f0c8d4e168206d79966bd53d59483c73e8e522420f7c325444e8a10346749e3fa20dc892e0ac305ae50fdca06ea1aa29dac09fc2fa848565d643396db05cca93008560155ab60e7f31380974dd6aa735e7498148d7b1e1bf35fa35fa213da8f3d4d4b3dc1aabbff1b2e00e793ddec178c85cd9d8ba3b335887b0c715c3fe4b5fc7f8b2f63250f73af47142744572e1db60f8c7361c7fb811b5f4af6e6c10fb3d9440aa0367609fa6c32dd1bdd613970be35d74f34cc5bbdc9f630480c9c82f3118fe033617c353e795a9b7308336b8dc65f3328fabf4532a87c9f1d9d35f431959f2ab922cabbfeafa051a771916653f6bab8910e437e613e02fca4c6019c640b822f6657607b983694862409f06ce57bae67ada5d83945a6caea554a13488a6d8bb85c80a779e9bb4c2ed07abdec0f6d0c83497efd096d3a5ca5095885ebf7b3cf7183350bce692aa62fc1b45f620647bb2cf8744b57dc5c1f47de9bb005e6802b3d3efa4dcee835252d178239bc28fbd1bee6a7a3d70359330f1b7ff4daecb1f820f00398a2ce4046202db3c1b80ae497bd9d065c2fb265716e984378b4ccb5b6f5d2ffcc5c992aa259ca1ac92bb387c53f5e73e65263e7312b7dbfdf799b06c1999218d613046d57a2bc1e27ca84d41a0bb4a1ba08786d0c8ba1c293f914659b5d32cfd95ef7a1b3709e8ba41f037242e44df5fa2b1a0dccb0ea43ddb85e5dde552f5747e52e8c73d25dd0c903229522c4d91e523879d377f318b7f353ec6954f3aff1dd0bd7cface9dd2d209e181f2a74e07c557e4bae9645a4d282c84b70c74a8210669fd8e7cbe4e17813dd8a0da360d2c99d675abbf66ca6a1cdb18112c509338a7b22e14309732d732f873474e25f5e36bd730336cf35517ecc2da649c85adce16aa98554470d16058aa77898bbe450a85bff003273ed0b23806af8034aa91348774412d5f608bc7efdec13414dcb735e0de85ff8de01fbedf5585900d2f301092fd57d91f828cf5babf70610d45f1545dc0bab7f69c90efbf2edc6f46f397ed9a13da7cf7123d008f0a1af23f20ebefabb5a7a46ecaa675f8b57e8478cf31ac40fe4874cdae89e4b8d4e7684252d89fbb2f5bf24bcbbeefa53cc24a2856636454390a1d47efafb4c23712a4b9c8dfe6f370fa4446eba7703215233a749e3a7ab28542dfbf03db73648e6bf06395858d59ec7dddbe460aae30487e91c2d19c8334525adef322a66a70ea32d2f8a72bf1bb3b0d9bc2d6ebd40bba9e4c02d3ee005a0a72e5f65afb01f6adb8ab2cd11d9c9fad7e3e1f950659bf1826b380a4f296c76c529a65235a15a9596a2a330431d5e905390321dc4a47c84e47c3e8e8cc5b11cf62d7515e584359a1e442abfc9aab4d0233eb0911398c43688a8fe41d462bde8aa4be1af978cc0b40dc25ea20c3fdb0953a3293e197748cdcd576619c4fe8b5754851c90b6b5207b3eefbd86eb67012663dbc87858a86dc51855381dc746501eb76316d778da06c4d8a03ebe3a07f05dcbfdbe6020bd8f4547e6b598cf4dc7be2ea167c4fd362b2224d4869b97d991c64251faacea7184ee97349d5b68af90bacd5441ae423173f6271d1be106381a7bcf0925d25ae26a0afb1c82232a648c178b8076a5fa8bedeec3c90f450dbb3573fc45c2d7b65c420d4f323069d3cfafc6dac879698b801ea8dd18b6d3c171200308e76f0c16a977bc73cd88818196a9b54b47c3f3c9595e8ddcb38334202cecba7764505340680c858cab156e658785bda719237baf1164e2927ccebcf8dccfcebacb0d3bac011cf7c544b71f1c399931ea886524d10e95319d12fc63b74d532e9c94aa78d43fc2b097e496e69405d3e147a45454cb292987330d126bba36dcefe664cce49bcd0f782d03a93e059b7ee23039ae30e47be8c457ca092238659e022c5cc1830a6c6179a65be9865d9f2ce34b25fed3551b69bae554528679e2110d9d4c85302ad99272174b8bbb2da37810cda715eb2536a91011999b9bbbdfff212d0dbd40126b12f2ecb8d389a1e845f25c30cb2986cc85aa5614c10837afa40061cddcf14297bd2861106dec71a0b34a79afe612394633ea6b8f71495b3db408728bf37de889768d6dd2642a627f928c6a86df2bedf3352e5f56a5ed424770d613331aa5d6e71bb40bfef383d69f3ef570156093ee4f31500513e50abf5e576dd6571d59910f8d21f75e2fe2913c6348a2c23ec8bcfeef8c5b4cb4ca254496e78a0beadcfdb96afdf9f0f5ccb7abe6746cb718dab6ea7f0ba8080d0ce12ec9985978f76b885a85adc2e3115db7450644c75cd80062c7f34cd0b7824d621607759ba8eb17289d3920f1356319e980c989d794016dd05987cc8a17a947a8dc0398de5cec6dd1eadf685de957ca4d1394fc67482fd22498f6aacc8e7f25ebac952073e12f526e1427ee49e6df9e5c895df631e5b4041e6e88b3508b8c3ce597830e2ce3aad12ecb696e5ef7970cd9c1e3be94506ac746f7ce8438a356507027149d0ebd6e95783ff084609fc079ace20e5bae9cac9625f58ff8ccb2c2b50506a237ecdf21774d560ba51d9d956691590392a5aa5ad6a2ff9d69d58a82401f7de6daacf3257f20c9847c3760ab1a41ab024df0ad8789fe629c0d7ab8adeea9777a914f79e2b4dbc3e234505f1729467a60b410ceadc87a2d8c12c0cf46c8ab0a7392e971d5ac3035788b2177ae165336074f29effda63042146c2e13a12d50b67", 0xffc}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c28c8dc0d", 0x13}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) (async, rerun: 64) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="4d5391710110effc88e019a6ba4d674fc6", 0x11}, {&(0x7f0000000300)="b1654a3780949d32bbc9ab69344a67c89a8ddc51e5599f4c9d16737798e292d6c2209a2600a9795e7b1562de1a25add854a83219b1b9bcbf96ad9c55f4d97288a34b0b90e1a54ed6ff92db4373fc9ab4d998bdcf94c60bfa155c74566d84e2a5f85100c7ca5debd3ce7d147f6def8c864425b483", 0x74}, {&(0x7f0000000440)="b81d70d43d92e591dbdd948eb749a2a9452c77c9e3b78c539a5884548d7d6e61442501fadde6dfce4383d604eb08ff2e2665cf22e48939f41767cef52201eca7f70658ff2aeff189e14b80ce8ba618217ac7b21dc906795af58157481461258293ad14368df8f79765a452672bc0d83f263dc7f34235a9dd6809a0a50e9e9bb54459bdb0e809afbd2a04c403ae568a3dca0eb67577e1481e882abd5e2ed03f8de4", 0xa1}], 0x3, 0x0, 0x0, 0x4008084}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x61}, {0x6}]}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) (async) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000100)) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r5) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) (async) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0xffe0}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) 5.132900033s ago: executing program 32 (id=3070): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) read(r0, &(0x7f0000000180)=""/115, 0x73) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000014001901000000000000000028001100fa"], 0x28}}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 5.092447502s ago: executing program 33 (id=3065): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795c3238d7219c2d3020933c9c39c6d0cbc957ec3f682cac392c2a627a0c386f59681fdfd5ea467e2db933c4ae7a5aafaa8c86de5dfdc5ed01a788fc636bf7a8062bebeff2374", 0x85}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) sendmsg$alg(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x90}, 0x2000) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000001}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="40e527077000090000000400000005000a000100000005000a0000001000080001004130ffa4ab24789b185101", @ANYRES32=r3, @ANYBLOB="080004000000000005000a002700000008000400000000000800040000000000080004000000000008000100", @ANYRES32=r3, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x44080) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x68, r9, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xf, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x20008080) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) writev(r10, &(0x7f0000000800)=[{&(0x7f0000000780)="8496c89888a723879f0ac14e6da4e824c9a71e67b23e7c69416ebdd41a4120deb6ab0a975de1731c2b746d96e60cce84f67521a19e03711e46fd4550b2af5442805b20220ecbd455daff443d3fbceb5deb9979c281173fcdffc6729f", 0x5c}, {&(0x7f0000000680)="c275230346b2d09dc5a913592ef969165bf5ea43705bb15c2d38944371401bcab1b73d526dde9998131eefe014587af82221dec8", 0x34}], 0x2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x24}}, 0x40000) 59.75464ms ago: executing program 34 (id=3107): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r3 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b67882710531e284ae80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f460976f2c0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a776", 0xd1}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f0000005740)="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", 0x452}, {&(0x7f0000006780)="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", 0x1000}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0x416}], 0x7}}], 0x1, 0x40040) (async, rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (rerun: 32) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x18}, @void, @llc={@llc={0x8e, 0xf0, "8c"}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 0s ago: executing program 35 (id=3108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001500)="a76e3ba7f87ed94e8b20c3d2ebc535d9439d", 0x12}], 0x1}}], 0x1, 0x4040894) (async) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) (async, rerun: 64) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0xffc}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c28c8dc0d", 0x13}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) (async, rerun: 64) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="4d5391710110effc88e019a6ba4d674fc6", 0x11}, {&(0x7f0000000300)="b1654a3780949d32bbc9ab69344a67c89a8ddc51e5599f4c9d16737798e292d6c2209a2600a9795e7b1562de1a25add854a83219b1b9bcbf96ad9c55f4d97288a34b0b90e1a54ed6ff92db4373fc9ab4d998bdcf94c60bfa155c74566d84e2a5f85100c7ca5debd3ce7d147f6def8c864425b483", 0x74}, {&(0x7f0000000440)="b81d70d43d92e591dbdd948eb749a2a9452c77c9e3b78c539a5884548d7d6e61442501fadde6dfce4383d604eb08ff2e2665cf22e48939f41767cef52201eca7f70658ff2aeff189e14b80ce8ba618217ac7b21dc906795af58157481461258293ad14368df8f79765a452672bc0d83f263dc7f34235a9dd6809a0a50e9e9bb54459bdb0e809afbd2a04c403ae568a3dca0eb67577e1481e882abd5e2ed03f8de4", 0xa1}], 0x3, 0x0, 0x0, 0x4008084}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x61}, {0x6}]}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) (async) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000100)) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r5) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) (async) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0xffe0}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) kernel console output (not intermixed with test programs): 255.471898][T11689] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 255.480379][T11689] bond5: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 255.498905][T11689] bond5: left promiscuous mode [ 255.546411][T11691] tipc: Enabled bearer , priority 0 [ 255.601904][T11690] tipc: Disabling bearer [ 255.779723][T11714] bridge_slave_0: invalid flags given to default FDB implementation [ 255.836866][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.902329][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1557'. [ 255.927814][T11720] netlink: 'syz.2.1557': attribute type 1 has an invalid length. [ 255.942136][T11720] netlink: 'syz.2.1557': attribute type 2 has an invalid length. [ 256.230819][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'. [ 256.249299][T11739] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1564'. [ 256.568285][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1570'. [ 256.574938][T11760] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1569'. [ 257.255030][T11795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.397041][T11807] netlink: 'syz.0.1584': attribute type 58 has an invalid length. [ 257.407817][T11807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1584'. [ 257.459306][T11800] dvmrp1: entered allmulticast mode [ 257.694150][T11810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1583'. [ 257.957587][T11827] IPVS: sed: FWM 3 0x00000003 - no destination available [ 258.497982][T11850] netlink: 'syz.1.1598': attribute type 1 has an invalid length. [ 258.516713][T11850] netlink: 'syz.1.1598': attribute type 4 has an invalid length. [ 258.540790][T11850] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1598'. [ 258.947296][T11872] tipc: Enabling of bearer rejected, failed to enable media [ 258.971562][T11881] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1606'. [ 259.026857][T11872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.061372][T11872] bond0: (slave rose0): Enslaving as an active interface with an up link [ 259.464074][T11907] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1303 [ 259.497627][T11907] netlink: 'syz.2.1612': attribute type 1 has an invalid length. [ 259.523412][T11907] batadv0: mtu less than device minimum [ 259.787085][T11917] netlink: 'syz.2.1614': attribute type 28 has an invalid length. [ 259.807586][T11917] netlink: 'syz.2.1614': attribute type 3 has an invalid length. [ 259.877347][T11927] tipc: Enabling of bearer rejected, failed to enable media [ 260.238290][T11936] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.245658][T11936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.253283][T11936] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.260673][T11936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.292070][T11936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.442902][T11936] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.498348][T11953] netlink: 'syz.0.1623': attribute type 5 has an invalid length. [ 260.566443][T11953] netlink: 'syz.0.1623': attribute type 10 has an invalid length. [ 260.901652][T11977] __nla_validate_parse: 6 callbacks suppressed [ 260.901672][T11977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1628'. [ 261.279950][T11998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1634'. [ 261.290040][T11998] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1634'. [ 261.322589][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1634'. [ 261.479174][T12006] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1636'. [ 261.737015][T12027] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1640'. [ 262.289102][T12048] dvmrp0: entered allmulticast mode [ 262.340343][T12056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.465184][T12060] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1646'. [ 262.535902][T12060] openvswitch: netlink: Missing valid actions attribute. [ 262.573333][T12060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.842838][T12071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1649'. [ 263.249345][T12095] batadv_slave_1: entered promiscuous mode [ 263.285661][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1660'. [ 263.297816][T12095] batman_adv: batadv0: Adding interface: macsec5 [ 263.330465][T12095] batman_adv: batadv0: The MTU of interface macsec5 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.380704][T12095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.418669][T12095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.442048][T12095] batman_adv: batadv0: Interface activated: macsec5 [ 263.519641][T12118] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1660'. [ 263.520045][T12103] dummy0: entered promiscuous mode [ 263.539593][T12103] dummy0: left promiscuous mode [ 264.008946][T12118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.031327][T12118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.059080][T12118] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 264.079954][T12118] bond0 (unregistering): Released all slaves [ 264.385849][ T5993] IPVS: starting estimator thread 0... [ 264.414533][T12143] !€ÿ: renamed from bond_slave_0 [ 264.482862][T12151] IPVS: using max 29 ests per chain, 69600 per kthread [ 264.646060][T12169] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 265.023333][T12189] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 265.327163][T12210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.659788][T12231] tipc: Enabled bearer , priority 10 [ 265.780030][T12226] syzkaller0: entered promiscuous mode [ 265.786678][T12226] syzkaller0: entered allmulticast mode [ 265.900976][T12242] netlink: zone id is out of range [ 265.907120][T12242] netlink: zone id is out of range [ 265.915697][T12242] netlink: zone id is out of range [ 265.920843][T12242] netlink: zone id is out of range [ 265.928245][T12242] netlink: zone id is out of range [ 265.971469][T12242] netlink: zone id is out of range [ 265.971675][T12245] __nla_validate_parse: 2 callbacks suppressed [ 265.971688][T12245] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1695'. [ 266.089308][ T123] block nbd0: Possible stuck request ffff888025410000: control (read@0,1024B). Runtime 90 seconds [ 266.100241][ T123] block nbd0: Possible stuck request ffff8880254101c0: control (read@1024,1024B). Runtime 90 seconds [ 266.112581][ T123] block nbd0: Possible stuck request ffff888025410380: control (read@2048,1024B). Runtime 90 seconds [ 266.123678][ T123] block nbd0: Possible stuck request ffff888025410540: control (read@3072,1024B). Runtime 90 seconds [ 267.964466][T12226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1688'. [ 268.272352][T12285] macvtap2: entered promiscuous mode [ 268.295221][T12285] macvtap2: entered allmulticast mode [ 268.317679][T12285] bond0: entered allmulticast mode [ 268.345927][T12285] bond0: entered promiscuous mode [ 268.367117][T12285] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 268.383495][T12285] team0: Device macvtap2 failed to register rx_handler [ 268.409304][T12285] bond0: left allmulticast mode [ 268.467070][T12285] bond0: left promiscuous mode [ 268.548792][T12309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1711'. [ 268.556961][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1711'. [ 268.801922][T12320] netlink: 'syz.1.1714': attribute type 1 has an invalid length. [ 268.813993][T12318] macvlan0: left allmulticast mode [ 268.827068][T12318] vlan2: left allmulticast mode [ 268.845954][T12318] hsr0: left allmulticast mode [ 268.855298][T12318] hsr_slave_0: left allmulticast mode [ 268.872624][T12318] hsr_slave_1: left allmulticast mode [ 268.908982][T12318] bond1: left allmulticast mode [ 268.915177][T12318] bond5: left allmulticast mode [ 268.922149][T12318] veth5: left allmulticast mode [ 268.935582][T12318] ip6gre2: left allmulticast mode [ 269.197165][T12339] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1719'. [ 269.324172][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 269.334569][T12348] net_ratelimit: 1 callbacks suppressed [ 269.334590][T12348] openvswitch: netlink: IP tunnel TTL not specified. [ 269.466820][T12357] netlink: 'syz.1.1725': attribute type 1 has an invalid length. [ 269.513305][T12357] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1725'. [ 269.541990][T12360] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1725'. [ 269.581375][T12360] xt_socket: unknown flags 0xd0 [ 269.827559][T12381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1732'. [ 269.908407][T12385] openvswitch: netlink: Actions may not be safe on all matching packets [ 269.968722][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1735'. [ 270.100095][T12392] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.141709][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.196720][T12398] netlink: 'syz.3.1737': attribute type 16 has an invalid length. [ 271.009581][T12449] netlink: 'syz.4.1752': attribute type 2 has an invalid length. [ 271.038225][T12449] netlink: 'syz.4.1752': attribute type 2 has an invalid length. [ 271.041490][T12454] sch_fq: defrate 0 ignored. [ 271.249766][T12466] netlink: 'syz.2.1757': attribute type 30 has an invalid length. [ 271.293167][T12466] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 271.321244][T12466] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 271.498150][T12475] __nla_validate_parse: 1 callbacks suppressed [ 271.498171][T12475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1760'. [ 271.550236][T12475] tipc: Enabling of bearer rejected, failed to enable media [ 271.797390][T12492] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 271.850946][T12492] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 271.873201][T12495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1767'. [ 271.907339][T12495] netlink: 'syz.1.1767': attribute type 7 has an invalid length. [ 271.921565][T12499] netlink: 'syz.0.1769': attribute type 12 has an invalid length. [ 271.933238][T12495] netlink: 'syz.1.1767': attribute type 8 has an invalid length. [ 271.981467][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1767'. [ 272.051168][T12495] gretap0: entered promiscuous mode [ 272.128555][T12495] batadv_slave_1: entered promiscuous mode [ 272.158811][T12495] gretap0: left promiscuous mode [ 272.168226][T12495] batadv_slave_1: left promiscuous mode [ 272.176052][T12517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1771'. [ 272.200746][T12518] veth0: entered promiscuous mode [ 272.212902][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 272.407172][T12524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1775'. [ 272.510487][T12521] netlink: 'syz.0.1773': attribute type 2 has an invalid length. [ 272.822046][T12536] bond4: entered promiscuous mode [ 272.832973][T12536] bond4: entered allmulticast mode [ 272.849605][T12536] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.931854][T12555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1784'. [ 272.932298][T12553] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 272.970930][ T2967] syzkaller0: tun_net_xmit 76 [ 272.980572][ T2967] syzkaller0: tun_net_xmit 48 [ 272.986358][T12534] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 272.992322][T12534] syzkaller0: Linktype set failed because interface is up [ 273.000323][ T5937] syzkaller0: tun_net_xmit 76 [ 273.490856][T12582] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1792'. [ 274.911939][T12573] tipc: Enabled bearer , priority 0 [ 274.925518][T12570] syzkaller0: entered promiscuous mode [ 274.932238][T12570] syzkaller0: entered allmulticast mode [ 275.003928][T12584] tipc: Resetting bearer [ 275.063277][T12564] tipc: Resetting bearer [ 275.181633][T12564] tipc: Disabling bearer [ 275.267131][T12608] netlink: 'syz.3.1799': attribute type 1 has an invalid length. [ 275.427309][T12608] bond9: entered promiscuous mode [ 275.434260][T12608] 8021q: adding VLAN 0 to HW filter on device bond9 [ 275.490664][T12611] veth1: entered allmulticast mode [ 275.563275][T12612] 8021q: adding VLAN 0 to HW filter on device bond10 [ 275.572671][T12612] bond9: (slave bond10): making interface the new active one [ 275.580351][T12612] bond10: entered promiscuous mode [ 275.588900][T12612] bond9: (slave bond10): Enslaving as an active interface with an up link [ 276.609244][T12682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1818'. [ 276.646061][T12682] netlink: 'syz.1.1818': attribute type 7 has an invalid length. [ 276.660727][T12682] netlink: 'syz.1.1818': attribute type 8 has an invalid length. [ 276.714241][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1818'. [ 276.784276][T12688] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.911040][T12694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1822'. [ 277.025095][T12702] netlink: 'syz.4.1826': attribute type 21 has an invalid length. [ 277.033208][T12702] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1826'. [ 277.069443][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1826'. [ 277.082416][T12699] netlink: 'syz.2.1824': attribute type 18 has an invalid length. [ 277.084056][T12704] netlink: 'syz.2.1824': attribute type 18 has an invalid length. [ 277.109069][T12702] netem: change failed [ 277.407090][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1829'. [ 277.585579][T12716] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.594212][T12716] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.637156][T12720] netlink: 'syz.3.1830': attribute type 4 has an invalid length. [ 277.688848][T12727] netlink: 'syz.3.1830': attribute type 4 has an invalid length. [ 277.761968][T12729] tipc: Enabled bearer , priority 0 [ 277.802208][T12728] tipc: Disabling bearer [ 277.827899][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1834'. [ 277.933857][T12736] ipvlan3: entered promiscuous mode [ 278.002864][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1835'. [ 278.031476][T12741] netlink: 'syz.0.1836': attribute type 2 has an invalid length. [ 278.126415][T12745] netlink: 'syz.0.1836': attribute type 2 has an invalid length. [ 278.335071][T12756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1840'. [ 278.485976][T12763] gretap2: entered promiscuous mode [ 278.668491][T12774] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1844'. [ 279.165953][T12796] bridge0: port 3(syz_tun) entered blocking state [ 279.172971][T12796] bridge0: port 3(syz_tun) entered disabled state [ 279.179834][T12796] syz_tun: entered allmulticast mode [ 279.227775][T12796] syz_tun: entered promiscuous mode [ 279.237225][T12799] syzkaller0: entered promiscuous mode [ 279.242866][T12799] syzkaller0: entered allmulticast mode [ 279.606053][T12825] block nbd1: Unsupported socket: shutdown callout must be supported. [ 279.868889][T12843] 8021q: VLANs not supported on ip6tnl0 [ 279.891928][T12831] syz.2.1859 (12831) used greatest stack depth: 17064 bytes left [ 280.221710][T12859] team0: Device veth1_macvtap failed to register rx_handler [ 281.634369][T12939] __nla_validate_parse: 13 callbacks suppressed [ 281.634390][T12939] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.1889'. [ 281.717895][T12949] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1891'. [ 281.735656][T12950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1892'. [ 282.105801][T12953] syzkaller1: entered allmulticast mode [ 282.195607][T12967] veth1_to_bond: entered allmulticast mode [ 282.216942][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1901'. [ 282.342028][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1901'. [ 282.408793][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1901'. [ 282.506586][T12966] veth1_to_bond: left allmulticast mode [ 282.809727][T12995] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 282.850805][T12994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1906'. [ 282.961787][T13008] openvswitch: netlink: IPv4 tun info is not correct [ 282.988243][T13007] openvswitch: netlink: IPv4 tun info is not correct [ 283.004221][T13010] netlink: 'syz.4.1910': attribute type 11 has an invalid length. [ 283.017519][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'. [ 283.034999][T13010] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1910'. [ 283.225407][T13021] openvswitch: netlink: IPv4 tun info is not correct [ 283.382127][T13029] tipc: Enabled bearer , priority 0 [ 283.427344][T13026] tipc: Resetting bearer [ 283.594242][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'. [ 283.640628][T13025] tipc: Disabling bearer [ 283.651501][T13044] validate_nla: 1 callbacks suppressed [ 283.651520][T13044] netlink: 'syz.0.1922': attribute type 6 has an invalid length. [ 284.020341][T13064] nbd: must specify at least one socket [ 284.208479][T13077] netlink: 'syz.0.1928': attribute type 33 has an invalid length. [ 284.400680][T13089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.352045][T13149] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 285.873369][T13179] netlink: 'syz.1.1957': attribute type 30 has an invalid length. [ 285.976992][T13175] netlink: 'syz.2.1954': attribute type 33 has an invalid length. [ 286.088394][T13182] netlink: 'syz.0.1955': attribute type 5 has an invalid length. [ 286.396126][T13207] netlink: 'syz.2.1961': attribute type 1 has an invalid length. [ 286.495375][T13207] 8021q: adding VLAN 0 to HW filter on device bond5 [ 286.526556][T13208] bond5: (slave gretap1): making interface the new active one [ 286.537017][T13208] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 286.808644][T13227] netlink: 'syz.0.1967': attribute type 1 has an invalid length. [ 286.829885][T13227] __nla_validate_parse: 39 callbacks suppressed [ 286.829905][T13227] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1967'. [ 286.866223][T13227] netlink: 'syz.0.1967': attribute type 1 has an invalid length. [ 286.875228][T13229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1967'. [ 287.077435][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 287.118752][T13236] bond6: entered promiscuous mode [ 287.135963][T13236] bond6: entered allmulticast mode [ 287.154645][T13236] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.277619][T13247] netlink: 'syz.2.1972': attribute type 1 has an invalid length. [ 287.328497][T13247] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1972'. [ 287.495488][T13254] ipvlan3: entered promiscuous mode [ 287.565372][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1978'. [ 287.901775][T13251] infiniband syz2: set down [ 287.929198][T13251] infiniband syz2: added bond_slave_0 [ 287.940683][T13251] syz2: rxe_create_cq: returned err = -12 [ 287.990232][T13251] infiniband syz2: Couldn't create ib_mad CQ [ 288.013428][T13251] infiniband syz2: Couldn't open port 1 [ 288.062156][T13269] syz.4.1979: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 288.129596][T13251] RDS/IB: syz2: added [ 288.141567][T13269] CPU: 0 UID: 0 PID: 13269 Comm: syz.4.1979 Not tainted syzkaller #0 PREEMPT(full) [ 288.141616][T13269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.141628][T13269] Call Trace: [ 288.141636][T13269] [ 288.141645][T13269] dump_stack_lvl+0x189/0x250 [ 288.141674][T13269] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 288.141703][T13269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.141725][T13269] ? __pfx__printk+0x10/0x10 [ 288.141751][T13269] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.141773][T13269] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.141802][T13269] warn_alloc+0x214/0x310 [ 288.141842][T13269] ? __pfx_warn_alloc+0x10/0x10 [ 288.141880][T13269] ? __get_vm_area_node+0x28f/0x300 [ 288.141906][T13269] ? nf_tables_newset+0x132b/0x2530 [ 288.141935][T13269] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 288.141990][T13269] ? alloc_pages_mpol+0x3cd/0x4a0 [ 288.142019][T13269] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.142050][T13269] ? rcu_is_watching+0x15/0xb0 [ 288.142071][T13269] ? nf_tables_newset+0x132b/0x2530 [ 288.142094][T13269] ? nf_tables_newset+0x132b/0x2530 [ 288.142117][T13269] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 288.142143][T13269] ? nf_tables_newset+0x132b/0x2530 [ 288.142168][T13269] ? nft_table_lookup+0x211/0x230 [ 288.142189][T13269] ? nft_set_lookup+0x128/0x150 [ 288.142213][T13269] ? nft_hash_privsize+0xaf/0xf0 [ 288.142237][T13269] nf_tables_newset+0x132b/0x2530 [ 288.142286][T13269] ? __pfx_nf_tables_newset+0x10/0x10 [ 288.142335][T13269] ? __nla_parse+0x40/0x60 [ 288.142360][T13269] nfnetlink_rcv+0x112f/0x2520 [ 288.142419][T13269] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 288.142459][T13269] ? ref_tracker_free+0x63a/0x7d0 [ 288.142501][T13269] ? __netlink_deliver_tap+0x807/0x850 [ 288.142519][T13269] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.142553][T13269] netlink_unicast+0x82f/0x9e0 [ 288.142590][T13269] ? __pfx_netlink_unicast+0x10/0x10 [ 288.142626][T13269] ? netlink_sendmsg+0x642/0xb30 [ 288.142644][T13269] ? skb_put+0x11b/0x210 [ 288.142669][T13269] netlink_sendmsg+0x805/0xb30 [ 288.142700][T13269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.142724][T13269] ? aa_sock_msg_perm+0xf1/0x1d0 [ 288.142745][T13269] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.142765][T13269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.142786][T13269] __sock_sendmsg+0x21c/0x270 [ 288.142818][T13269] ____sys_sendmsg+0x505/0x830 [ 288.142846][T13269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.142877][T13269] ? import_iovec+0x74/0xa0 [ 288.142903][T13269] ___sys_sendmsg+0x21f/0x2a0 [ 288.142928][T13269] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.142990][T13269] ? __fget_files+0x2a/0x420 [ 288.143008][T13269] ? __fget_files+0x3a0/0x420 [ 288.143044][T13269] __x64_sys_sendmsg+0x19b/0x260 [ 288.143070][T13269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.143108][T13269] ? rcu_is_watching+0x15/0xb0 [ 288.143134][T13269] ? do_syscall_64+0xbe/0x3b0 [ 288.143159][T13269] do_syscall_64+0xfa/0x3b0 [ 288.143178][T13269] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.143197][T13269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.143214][T13269] ? clear_bhb_loop+0x60/0xb0 [ 288.143237][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.143257][T13269] RIP: 0033:0x7fc0c6d8eba9 [ 288.143272][T13269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.143288][T13269] RSP: 002b:00007fc0c4fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.143310][T13269] RAX: ffffffffffffffda RBX: 00007fc0c6fd6090 RCX: 00007fc0c6d8eba9 [ 288.143322][T13269] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 288.143335][T13269] RBP: 00007fc0c6e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 288.143347][T13269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.143358][T13269] R13: 00007fc0c6fd6128 R14: 00007fc0c6fd6090 R15: 00007ffe15ce5bd8 [ 288.143389][T13269] [ 288.163394][T13251] smc: adding ib device syz2 with port count 1 [ 288.181975][T13269] Mem-Info: [ 288.410335][T13274] syzkaller0: entered promiscuous mode [ 288.419802][T13251] smc: ib device syz2 port 1 has pnetid [ 288.447192][T13274] syzkaller0: entered allmulticast mode [ 288.485049][T13269] active_anon:6328 inactive_anon:0 isolated_anon:0 [ 288.485049][T13269] active_file:3409 inactive_file:39939 isolated_file:0 [ 288.485049][T13269] unevictable:768 dirty:32 writeback:0 [ 288.485049][T13269] slab_reclaimable:11147 slab_unreclaimable:108739 [ 288.485049][T13269] mapped:30478 shmem:1365 pagetables:1408 [ 288.485049][T13269] sec_pagetables:0 bounce:0 [ 288.485049][T13269] kernel_misc_reclaimable:0 [ 288.485049][T13269] free:1314162 free_pcp:10968 free_cma:0 [ 288.633306][T13286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1982'. [ 288.662893][T13269] Node 0 active_anon:25412kB inactive_anon:0kB active_file:13636kB inactive_file:159556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121912kB dirty:128kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14004kB pagetables:5368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 288.721746][T13269] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 288.809859][T13295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1985'. [ 288.836050][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1985'. [ 288.865889][T13269] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.912702][T13269] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 288.928242][T13269] Node 0 DMA32 free:1358040kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25364kB inactive_anon:0kB active_file:13636kB inactive_file:157968kB unevictable:1536kB writepending:128kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:25188kB local_pcp:11876kB free_cma:0kB [ 288.990679][T13269] lowmem_reserve[]: 0 0 1 1 1 [ 288.997194][T13269] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 289.041736][T13269] lowmem_reserve[]: 0 0 0 0 0 [ 289.051190][T13269] Node 1 Normal free:3882888kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19392kB local_pcp:10496kB free_cma:0kB [ 289.128746][T13269] lowmem_reserve[]: 0 0 0 0 0 [ 289.134525][T13269] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 289.159821][T13269] Node 0 DMA32: 626*4kB (UME) 472*8kB (M) 179*16kB (UME) 117*32kB (UM) 93*64kB (UM) 46*128kB (UME) 37*256kB (UME) 35*512kB (UME) 21*1024kB (UM) 7*2048kB (UME) 310*4096kB (UM) = 1357720kB [ 289.190430][T13269] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 289.222267][T13269] Node 1 Normal: 208*4kB (U) 63*8kB (UME) 49*16kB (UME) 86*32kB (UME) 34*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 944*4096kB (M) = 3882888kB [ 289.247690][T13269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.257431][T13269] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.267404][T13269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.277195][T13269] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.286848][T13269] 44759 total pagecache pages [ 289.291565][T13269] 0 pages in swap cache [ 289.295832][T13269] Free swap = 124996kB [ 289.300080][T13269] Total swap = 124996kB [ 289.304398][T13269] 2097051 pages RAM [ 289.308347][T13269] 0 pages HighMem/MovableOnly [ 289.313401][T13269] 425671 pages reserved [ 289.317582][T13269] 0 pages cma reserved [ 289.812234][T13308] netlink: 'syz.3.1988': attribute type 16 has an invalid length. [ 289.820415][T13308] netlink: 'syz.3.1988': attribute type 3 has an invalid length. [ 289.832494][T13308] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1988'. [ 290.837633][T13295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1985'. [ 291.225236][T13322] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 291.431734][T13322] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.480484][T13326] openvswitch: netlink: Key type 87 is out of range max 32 [ 291.679302][T13335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.710196][T13335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.038132][T13349] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 292.046140][T13349] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 292.469076][T13350] macvtap1: entered promiscuous mode [ 292.474515][T13350] macvtap1: entered allmulticast mode [ 292.480413][T13350] bond0: entered allmulticast mode [ 292.486084][T13350] bond0: entered promiscuous mode [ 292.492152][T13350] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 292.602977][T13350] team0: Device macvtap1 failed to register rx_handler [ 292.628516][T13350] bond0: left allmulticast mode [ 292.636744][T13350] bond0: left promiscuous mode [ 292.652302][T13357] netlink: 'syz.0.2003': attribute type 1 has an invalid length. [ 292.664782][T13358] netlink: 'syz.0.2003': attribute type 1 has an invalid length. [ 292.752223][T13357] bond7: entered promiscuous mode [ 292.760777][T13357] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.778513][T13356] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 292.859775][T13366] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:0 [ 292.968333][T13367] tls_set_device_offload: netdev not found [ 293.015463][T13371] __nla_validate_parse: 3 callbacks suppressed [ 293.015497][T13371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2006'. [ 293.045815][T13370] netlink: 184884 bytes leftover after parsing attributes in process `syz.0.2007'. [ 293.112010][T13374] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2008'. [ 293.415668][T13388] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.423060][T13388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.430678][T13388] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.437901][T13388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.470960][T13388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.514873][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2013'. [ 293.551592][T13391] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.581190][T13390] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2013'. [ 294.089873][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2018'. [ 294.124857][T13407] netlink: 'syz.0.2019': attribute type 1 has an invalid length. [ 294.251777][T13413] bond8: (slave geneve3): making interface the new active one [ 294.261823][T13413] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 294.275603][T13411] tipc: Enabling of bearer rejected, failed to enable media [ 294.286075][ T3002] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 294.327897][T13415] macsec1: entered promiscuous mode [ 294.378735][T13415] macsec1: entered allmulticast mode [ 294.533495][T13428] netlink: 'syz.4.2024': attribute type 2 has an invalid length. [ 294.756803][ T3002] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 294.796526][ T3002] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 294.840418][ T3002] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 295.431363][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 295.524565][T13473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2037'. [ 295.661337][T13483] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.2040'. [ 295.717145][T13483] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.2040'. [ 295.787952][T13489] netlink: 'syz.0.2041': attribute type 1 has an invalid length. [ 295.970034][T13489] 8021q: adding VLAN 0 to HW filter on device bond9 [ 296.141923][T13506] netlink: 'syz.4.2044': attribute type 3 has an invalid length. [ 296.157791][T13494] 8021q: adding VLAN 0 to HW filter on device bond9 [ 296.158801][ T123] block nbd0: Possible stuck request ffff888025410000: control (read@0,1024B). Runtime 120 seconds [ 296.175507][ T123] block nbd0: Possible stuck request ffff8880254101c0: control (read@1024,1024B). Runtime 120 seconds [ 296.186929][ T123] block nbd0: Possible stuck request ffff888025410380: control (read@2048,1024B). Runtime 120 seconds [ 296.198503][ T123] block nbd0: Possible stuck request ffff888025410540: control (read@3072,1024B). Runtime 120 seconds [ 296.210558][T13494] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 296.279738][T13494] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 296.381439][T13496] veth9: entered promiscuous mode [ 296.393385][T13496] bond9: (slave veth9): Enslaving as an active interface with a down link [ 296.416261][T13489] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.361106][T13575] __nla_validate_parse: 6 callbacks suppressed [ 298.361126][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'. [ 298.437079][T13583] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2064'. [ 298.753422][T13597] netlink: 'syz.3.2067': attribute type 10 has an invalid length. [ 298.761278][T13597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2067'. [ 298.806033][T13597] batadv0: entered promiscuous mode [ 298.811370][T13597] batadv0: entered allmulticast mode [ 298.824730][T13605] openvswitch: netlink: IPv4 tun info is not correct [ 298.853575][T13597] bridge0: port 4(batadv0) entered blocking state [ 298.873346][T13597] bridge0: port 4(batadv0) entered disabled state [ 298.884264][T13597] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 298.930907][T13609] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2072'. [ 299.254411][T13621] xt_policy: too many policy elements [ 299.638646][T13640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.825688][T13644] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2082'. [ 299.864717][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2082'. [ 299.894929][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2082'. [ 299.949964][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.974738][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.025875][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.055707][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.095053][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'. [ 300.116349][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2085'. [ 300.177990][T13658] netlink: 'syz.0.2086': attribute type 22 has an invalid length. [ 300.192782][T13659] netlink: 'syz.2.2087': attribute type 1 has an invalid length. [ 300.224152][T13658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'. [ 300.252710][T13658] netlink: 'syz.0.2086': attribute type 22 has an invalid length. [ 300.432406][T13665] batadv0: entered allmulticast mode [ 300.553888][T13671] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 300.831482][T13691] netlink: zone id is out of range [ 300.851715][T13691] netlink: zone id is out of range [ 300.868915][T13691] netlink: zone id is out of range [ 300.875014][T13691] netlink: zone id is out of range [ 300.894642][T13691] netlink: zone id is out of range [ 300.899801][T13691] netlink: zone id is out of range [ 301.182959][T13713] netlink: 'syz.4.2104': attribute type 21 has an invalid length. [ 301.258362][T13711] syzkaller0: entered promiscuous mode [ 301.272482][T13711] syzkaller0: entered allmulticast mode [ 301.282933][T13664] batadv0: left allmulticast mode [ 301.468055][T13730] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 301.490045][T13730] sctp: [Deprecated]: syz.0.2109 (pid 13730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.490045][T13730] Use struct sctp_sack_info instead [ 303.126663][T13732] team0: Device vti0 is of different type [ 303.448123][T13757] tipc: Enabled bearer , priority 0 [ 303.496311][T13757] syzkaller0: entered promiscuous mode [ 303.501902][T13760] netlink: 'syz.1.2118': attribute type 2 has an invalid length. [ 303.502681][ T5885] Bluetooth: hci4: command tx timeout [ 303.525499][T13757] syzkaller0: entered allmulticast mode [ 303.544838][T13760] __nla_validate_parse: 6 callbacks suppressed [ 303.544864][T13760] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2118'. [ 303.560766][T13760] nbd: must specify a device to reconfigure [ 303.627640][T13757] tipc: Resetting bearer [ 303.645593][T13756] tipc: Resetting bearer [ 303.788825][T13756] tipc: Disabling bearer [ 303.806609][T13780] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2123'. [ 303.818785][T13777] netlink: 'syz.3.2121': attribute type 10 has an invalid length. [ 303.853446][T13777] bond0: (slave wlan1): Opening slave failed [ 303.949953][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'. [ 303.972597][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'. [ 304.411134][T13807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2132'. [ 304.645144][T13815] netlink: 'syz.1.2134': attribute type 1 has an invalid length. [ 304.688487][T13815] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2134'. [ 304.703647][T13815] net_ratelimit: 1 callbacks suppressed [ 304.703666][T13815] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 304.748097][T13815] openvswitch: netlink: Message has 6332 unknown bytes. [ 304.805745][T13832] tipc: Can't bind to reserved service type 2 [ 304.850410][T13832] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 304.899224][T13835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2141'. [ 305.296156][T13858] netlink: 'syz.2.2148': attribute type 33 has an invalid length. [ 305.305432][T13858] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2148'. [ 305.605137][T13874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2151'. [ 305.617511][T13876] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2152'. [ 306.294247][T13903] xt_socket: unknown flags 0xd0 [ 308.269049][T13946] netlink: 'syz.3.2169': attribute type 1 has an invalid length. [ 308.459189][T13946] 8021q: adding VLAN 0 to HW filter on device bond11 [ 308.509649][T13947] bond11: (slave wlan0): Opening slave failed [ 308.563734][T13966] __nla_validate_parse: 2 callbacks suppressed [ 308.563753][T13966] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2173'. [ 308.637887][T13952] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 308.703376][T13953] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 308.827803][T13980] netlink: 'syz.4.2177': attribute type 1 has an invalid length. [ 308.901698][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2177'. [ 308.974991][T13980] 8021q: adding VLAN 0 to HW filter on device bond7 [ 309.012850][T13995] netlink: 'syz.3.2180': attribute type 8 has an invalid length. [ 309.180159][T13984] bond7 (unregistering): Released all slaves [ 309.290771][T13980] 8021q: adding VLAN 0 to HW filter on device bond7 [ 309.303418][T13997] tc_dump_action: action bad kind [ 309.347672][T13991] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 309.359564][T13991] bond7: (slave macvlan5): Enslaving as a backup interface with a down link [ 310.112976][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'. [ 310.175348][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2196'. [ 310.566038][T14070] tipc: Enabled bearer , priority 0 [ 310.582361][T14070] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 310.600192][T14070] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 310.668403][T14070] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 310.678375][T14070] tipc: Resetting bearer [ 310.886215][T14084] IPv6: sit2: Disabled Multicast RS [ 311.030197][T14096] netlink: 'syz.1.2208': attribute type 1 has an invalid length. [ 311.127163][T14096] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.165801][T14104] bond6: (slave gretap1): making interface the new active one [ 311.178850][T14104] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 311.317343][T14115] bond0: Error: Cannot enslave bond to itself. [ 311.460813][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'. [ 311.536888][T14121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.618088][T14121] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 311.662876][ T979] tipc: Node number set to 3032027987 [ 311.872314][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 311.934988][T14142] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2219'. [ 311.964182][T14145] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2216'. [ 311.997377][T14147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2220'. [ 312.007539][T14147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2220'. [ 312.126053][T14147] netlink: 'syz.1.2220': attribute type 1 has an invalid length. [ 313.640966][T14225] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 313.808776][T14230] netlink: 'syz.2.2244': attribute type 1 has an invalid length. [ 313.965233][T14236] __nla_validate_parse: 5 callbacks suppressed [ 313.965253][T14236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2247'. [ 314.354016][T14263] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2253'. [ 315.326035][T14330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2270'. [ 315.419135][T14334] netlink: 'syz.2.2271': attribute type 1 has an invalid length. [ 315.558097][T14334] 8021q: adding VLAN 0 to HW filter on device bond6 [ 315.610274][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'. [ 315.620740][T14330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2270'. [ 315.639884][T14330] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2270'. [ 315.656114][T14350] netlink: 'syz.1.2275': attribute type 10 has an invalid length. [ 315.700966][T14350] netlink: 'syz.1.2275': attribute type 4 has an invalid length. [ 315.977095][T14363] netlink: 'syz.4.2276': attribute type 1 has an invalid length. [ 315.983426][T14360] netlink: 'syz.2.2277': attribute type 3 has an invalid length. [ 316.025956][T14366] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.033282][T14366] IPv6: NLM_F_CREATE should be set when creating new route [ 316.069698][T14367] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2276'. [ 316.549362][ T30] audit: type=1804 audit(1757747269.033:7): pid=14392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2285" name="/newroot/468/cgroup.controllers" dev="tmpfs" ino=2407 res=1 errno=0 [ 316.568951][T14395] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2286'. [ 316.609929][ T30] audit: type=1800 audit(1757747269.033:8): pid=14392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2285" name="cgroup.controllers" dev="tmpfs" ino=2407 res=0 errno=0 [ 316.847796][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2290'. [ 317.039365][T14413] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2292'. [ 317.208361][T14424] netlink: 'syz.1.2296': attribute type 4 has an invalid length. [ 317.279833][T14424] netlink: 'syz.1.2296': attribute type 4 has an invalid length. [ 317.924796][T14449] tipc: Enabling of bearer rejected, already enabled [ 318.188130][T14454] dvmrp0: entered allmulticast mode [ 318.604413][T14483] netlink: 'syz.0.2311': attribute type 1 has an invalid length. [ 318.646087][T14483] nbd: error processing sock list [ 318.683141][T14483] block nbd2: shutting down sockets [ 318.893000][T14495] tipc: Enabled bearer , priority 0 [ 318.925307][T14495] syzkaller0: entered promiscuous mode [ 318.936925][T14495] syzkaller0: entered allmulticast mode [ 318.951729][T14499] netlink: 'syz.1.2319': attribute type 1 has an invalid length. [ 318.990229][T14495] tipc: Resetting bearer [ 319.031895][T14494] tipc: Resetting bearer [ 319.154244][T14494] tipc: Disabling bearer [ 319.330454][T14506] syzkaller0: entered promiscuous mode [ 319.366954][T14506] syzkaller0: entered allmulticast mode [ 319.611906][T14519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.665354][T14520] netlink: 'syz.4.2324': attribute type 4 has an invalid length. [ 321.588237][T14548] netlink: 'syz.4.2334': attribute type 1 has an invalid length. [ 321.600789][T14548] __nla_validate_parse: 5 callbacks suppressed [ 321.600805][T14548] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2334'. [ 321.918463][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2338'. [ 321.990511][T14572] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2341'. [ 322.569878][T14599] netlink: 'syz.3.2348': attribute type 1 has an invalid length. [ 322.776856][T14618] netlink: 'syz.1.2353': attribute type 8 has an invalid length. [ 322.816625][T14616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2351'. [ 323.137985][T14637] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2355'. [ 323.175380][T14637] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2355'. [ 323.455626][T14657] netlink: 'syz.3.2361': attribute type 1 has an invalid length. [ 323.596520][T14666] netlink: 264 bytes leftover after parsing attributes in process `syz.1.2365'. [ 323.616717][T14661] gretap2: entered promiscuous mode [ 323.845509][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'. [ 324.019678][T14681] wg2: entered promiscuous mode [ 324.027474][T14681] wg2: entered allmulticast mode [ 325.178253][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'. [ 325.187554][T14721] bridge_slave_1: left allmulticast mode [ 325.199083][T14721] bridge_slave_1: left promiscuous mode [ 325.213357][T14721] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.228488][T14721] bridge_slave_0: left allmulticast mode [ 325.238540][T14721] bridge_slave_0: left promiscuous mode [ 325.247466][T14721] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.380028][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2382'. [ 325.512760][T14729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.520795][T14729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.552724][T14729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.561462][T14729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.587101][T14731] netlink: 'syz.0.2383': attribute type 1 has an invalid length. [ 325.603328][T14729] batman_adv: batadv0: Interface deactivated: macsec5 [ 325.643446][T14729] batman_adv: batadv0: Removing interface: macsec5 [ 325.758506][T14731] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 326.127957][T14763] Unsupported ieee802154 address type: 0 [ 326.234423][ T123] block nbd0: Possible stuck request ffff888025410000: control (read@0,1024B). Runtime 150 seconds [ 326.245357][ T123] block nbd0: Possible stuck request ffff8880254101c0: control (read@1024,1024B). Runtime 150 seconds [ 326.256664][ T123] block nbd0: Possible stuck request ffff888025410380: control (read@2048,1024B). Runtime 150 seconds [ 326.270679][ T123] block nbd0: Possible stuck request ffff888025410540: control (read@3072,1024B). Runtime 150 seconds [ 326.624047][T14785] __nla_validate_parse: 4 callbacks suppressed [ 326.624067][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2399'. [ 326.727767][T14790] netlink: 'syz.1.2402': attribute type 29 has an invalid length. [ 326.741083][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2402'. [ 327.061805][T14804] batadv1: entered allmulticast mode [ 327.279219][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2409'. [ 327.874026][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2418'. [ 327.924148][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2418'. [ 328.006206][T14849] team_slave_0: entered promiscuous mode [ 328.053511][T14858] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2420'. [ 328.091720][T14858] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2420'. [ 328.143651][T14867] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 328.296824][T14870] ip6gre1: entered allmulticast mode [ 328.303502][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2423'. [ 328.372217][T14873] tipc: Enabled bearer , priority 0 [ 328.418776][T14873] tipc: Resetting bearer [ 328.588869][T14873] tipc: Disabling bearer [ 328.624163][T14884] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2429'. [ 328.658906][T14884] netlink: 352 bytes leftover after parsing attributes in process `syz.1.2429'. [ 329.432194][T14930] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 330.178065][T14962] netlink: 'syz.2.2453': attribute type 11 has an invalid length. [ 330.209923][T14963] bridge_slave_1: left allmulticast mode [ 330.216304][T14963] bridge_slave_1: left promiscuous mode [ 330.257289][T14963] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.301060][T14963] bridge_slave_0: left allmulticast mode [ 330.337173][T14963] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.774167][T14994] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 331.099739][T15012] netlink: 'syz.4.2469': attribute type 1 has an invalid length. [ 331.215351][T15012] 8021q: adding VLAN 0 to HW filter on device bond9 [ 331.231501][T15020] sctp: [Deprecated]: syz.1.2473 (pid 15020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.231501][T15020] Use struct sctp_sack_info instead [ 331.463864][T15028] block nbd2: server does not support multiple connections per device. [ 331.481784][T15028] block nbd2: shutting down sockets [ 331.500762][T15033] xfrm2: entered promiscuous mode [ 331.523684][T15033] xfrm2: entered allmulticast mode [ 331.998044][T15061] netlink: 'syz.0.2480': attribute type 1 has an invalid length. [ 332.111497][T15063] delete_channel: no stack [ 332.178320][T15067] netlink: 'syz.4.2488': attribute type 1 has an invalid length. [ 332.403180][T15067] 8021q: adding VLAN 0 to HW filter on device bond10 [ 332.635179][T15094] gre0: entered promiscuous mode [ 332.649700][T15101] netlink: 'syz.1.2494': attribute type 1 has an invalid length. [ 332.671519][T15097] __nla_validate_parse: 17 callbacks suppressed [ 332.671537][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2496'. [ 332.768983][T15101] 8021q: adding VLAN 0 to HW filter on device bond7 [ 333.141475][T15094] bond7: (slave veth7): Enslaving as an active interface with a down link [ 333.236302][T15110] veth9: entered promiscuous mode [ 333.247041][T15116] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2499'. [ 333.259297][T15110] bond7: (slave veth9): Enslaving as an active interface with a down link [ 333.346350][T15101] vlan2: entered allmulticast mode [ 333.362074][T15120] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 333.379152][T15101] bond7: entered allmulticast mode [ 333.390255][T15101] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 333.517421][T15127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2503'. [ 333.690633][T15136] netlink: 'syz.3.2506': attribute type 1 has an invalid length. [ 333.807798][T15136] 8021q: adding VLAN 0 to HW filter on device bond13 [ 333.819398][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2507'. [ 334.031469][T15153] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 334.329301][T15157] bond14: entered allmulticast mode [ 334.347105][T15157] 8021q: adding VLAN 0 to HW filter on device bond14 [ 334.355119][T15157] bridge0: port 4(bond14) entered blocking state [ 334.361811][T15157] bridge0: port 4(bond14) entered disabled state [ 334.374673][T15157] bond14: entered promiscuous mode [ 334.382713][T15157] bridge0: port 4(bond14) entered blocking state [ 334.389260][T15157] bridge0: port 4(bond14) entered forwarding state [ 334.404359][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2511'. [ 334.499799][ T2952] bridge0: port 4(bond14) entered disabled state [ 335.078630][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 335.304965][T15177] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2518'. [ 335.351440][T15177] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2518'. [ 335.380376][T15177] netem: invalid attributes len -24 [ 335.392506][T15177] netem: change failed [ 336.031849][T15211] netlink: 'syz.4.2525': attribute type 11 has an invalid length. [ 336.045977][T15209] netlink: 'syz.0.2526': attribute type 4 has an invalid length. [ 336.057207][T15211] netlink: 'syz.4.2525': attribute type 4 has an invalid length. [ 336.081574][T15211] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2525'. [ 336.119821][T15214] netlink: 'syz.2.2527': attribute type 1 has an invalid length. [ 336.214828][T15214] 8021q: adding VLAN 0 to HW filter on device bond7 [ 336.334778][T15216] bond7: (slave geneve2): making interface the new active one [ 336.396410][T15216] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 336.421983][T15224] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2530'. [ 336.918957][T15255] tipc: Enabling of bearer rejected, failed to enable media [ 337.259191][T15268] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 338.134398][T15286] netlink: 'syz.1.2550': attribute type 33 has an invalid length. [ 338.145251][T15286] __nla_validate_parse: 3 callbacks suppressed [ 338.145270][T15286] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2550'. [ 339.971784][T15310] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.2556'. [ 340.535757][T15342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2568'. [ 340.749353][T15359] warn_alloc: 1 callbacks suppressed [ 340.749371][T15359] syz.2.2573: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 340.799401][T15362] IPVS: Error joining to the multicast group [ 340.807960][T15359] CPU: 1 UID: 0 PID: 15359 Comm: syz.2.2573 Not tainted syzkaller #0 PREEMPT(full) [ 340.807989][T15359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.808005][T15359] Call Trace: [ 340.808012][T15359] [ 340.808022][T15359] dump_stack_lvl+0x189/0x250 [ 340.808053][T15359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.808079][T15359] ? __pfx__printk+0x10/0x10 [ 340.808106][T15359] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 340.808131][T15359] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 340.808156][T15359] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 340.808183][T15359] warn_alloc+0x214/0x310 [ 340.808215][T15359] ? stack_depot_save_flags+0x40/0x860 [ 340.808248][T15359] ? __pfx_warn_alloc+0x10/0x10 [ 340.808280][T15359] ? kasan_save_track+0x4f/0x80 [ 340.808305][T15359] ? xskq_create+0x56/0x170 [ 340.808323][T15359] ? xsk_init_queue+0xb0/0x110 [ 340.808350][T15359] ? xsk_setsockopt+0x4dc/0x8d0 [ 340.808376][T15359] ? do_sock_setsockopt+0x179/0x1b0 [ 340.808399][T15359] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 340.808421][T15359] ? do_syscall_64+0xfa/0x3b0 [ 340.808441][T15359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.808469][T15359] __vmalloc_node_range_noprof+0x125/0x12f0 [ 340.808532][T15359] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 340.808562][T15359] ? xskq_create+0x56/0x170 [ 340.808583][T15359] ? __kasan_kmalloc+0x93/0xb0 [ 340.808614][T15359] vmalloc_user_noprof+0xad/0xf0 [ 340.808643][T15359] ? xskq_create+0xbf/0x170 [ 340.808662][T15359] xskq_create+0xbf/0x170 [ 340.808685][T15359] xsk_init_queue+0xb0/0x110 [ 340.808725][T15359] xsk_setsockopt+0x4dc/0x8d0 [ 340.808758][T15359] ? __pfx_xsk_setsockopt+0x10/0x10 [ 340.808787][T15359] ? __pfx_aa_sk_perm+0x10/0x10 [ 340.808823][T15359] ? aa_sock_opt_perm+0xff/0x1b0 [ 340.808846][T15359] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 340.808868][T15359] ? __pfx_xsk_setsockopt+0x10/0x10 [ 340.808899][T15359] do_sock_setsockopt+0x179/0x1b0 [ 340.808929][T15359] __x64_sys_setsockopt+0x13f/0x1b0 [ 340.808959][T15359] do_syscall_64+0xfa/0x3b0 [ 340.808982][T15359] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.809002][T15359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.809022][T15359] ? clear_bhb_loop+0x60/0xb0 [ 340.809046][T15359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.809070][T15359] RIP: 0033:0x7f2207f8eba9 [ 340.809088][T15359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.809105][T15359] RSP: 002b:00007f2208e33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 340.809126][T15359] RAX: ffffffffffffffda RBX: 00007f22081d5fa0 RCX: 00007f2207f8eba9 [ 340.809142][T15359] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 340.809154][T15359] RBP: 00007f2208011e19 R08: 0000000000000004 R09: 0000000000000000 [ 340.809166][T15359] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.809179][T15359] R13: 00007f22081d6038 R14: 00007f22081d5fa0 R15: 00007ffef960e3b8 [ 340.809212][T15359] [ 340.809547][T15359] Mem-Info: [ 340.851835][T15365] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2574'. [ 340.887424][T15359] active_anon:6401 inactive_anon:0 isolated_anon:0 [ 340.887424][T15359] active_file:3518 inactive_file:39959 isolated_file:0 [ 340.887424][T15359] unevictable:768 dirty:218 writeback:0 [ 340.887424][T15359] slab_reclaimable:11290 slab_unreclaimable:111854 [ 340.887424][T15359] mapped:29544 shmem:1367 pagetables:1355 [ 340.887424][T15359] sec_pagetables:0 bounce:0 [ 340.887424][T15359] kernel_misc_reclaimable:0 [ 340.887424][T15359] free:1301465 free_pcp:21755 free_cma:0 [ 340.894033][T15360] nbd: socks must be embedded in a SOCK_ITEM attr [ 340.942873][T15359] Node 0 active_anon:25704kB inactive_anon:0kB active_file:14072kB inactive_file:159636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118176kB dirty:872kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14808kB pagetables:5256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 341.213786][T15359] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 341.285540][T15375] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2576'. [ 341.325356][T15359] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 341.374751][T15378] pim6reg: left allmulticast mode [ 341.380229][T15359] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 341.409751][T15359] Node 0 DMA32 free:1312276kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25316kB inactive_anon:0kB active_file:14072kB inactive_file:158048kB unevictable:1536kB writepending:872kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:59536kB local_pcp:15164kB free_cma:0kB [ 341.561630][T15359] lowmem_reserve[]: 0 0 1 1 1 [ 341.579053][T15359] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 341.658079][T15359] lowmem_reserve[]: 0 0 0 0 0 [ 341.695549][T15359] Node 1 Normal free:3882888kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19392kB local_pcp:10496kB free_cma:0kB [ 341.803295][T15359] lowmem_reserve[]: 0 0 0 0 0 [ 341.812874][T15359] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 341.827603][T15359] Node 0 DMA32: 985*4kB (UM) 96*8kB (UM) 29*16kB (UM) 767*32kB (UME) 49*64kB (UME) 24*128kB (UME) 10*256kB (UM) 6*512kB (UME) 1*1024kB (E) 4*2048kB (UM) 308*4096kB (UM) = 1312340kB [ 341.868379][T15359] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 341.873412][T15403] netlink: 'syz.0.2585': attribute type 1 has an invalid length. [ 341.944368][T15359] Node 1 Normal: 208*4kB (U) 63*8kB (UME) 49*16kB (UME) 86*32kB (UME) 34*64kB (UME) 6*128kB (UME) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 944*4096kB (M) = 3882888kB [ 341.979526][T15359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.012245][T15359] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 342.024008][T15413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2586'. [ 342.037726][T15359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.072036][T15403] 8021q: adding VLAN 0 to HW filter on device bond11 [ 342.086767][T15359] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 342.108191][T15415] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 342.160263][T15359] 44840 total pagecache pages [ 342.178082][T15415] netlink: 'syz.3.2586': attribute type 11 has an invalid length. [ 342.186239][T15359] 0 pages in swap cache [ 342.197828][T15359] Free swap = 124996kB [ 342.202196][T15359] Total swap = 124996kB [ 342.207363][T15359] 2097051 pages RAM [ 342.212322][T15359] 0 pages HighMem/MovableOnly [ 342.216623][T15415] netlink: 'syz.3.2586': attribute type 11 has an invalid length. [ 342.224087][T15359] 425671 pages reserved [ 342.229177][T15359] 0 pages cma reserved [ 342.245511][T15415] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2586'. [ 342.294197][T15421] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 342.398147][T15430] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2588'. [ 342.768779][T15444] netlink: 'syz.1.2594': attribute type 4 has an invalid length. [ 342.817588][T15444] tipc: Enabled bearer , priority 0 [ 342.896251][T15452] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 342.946160][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2596'. [ 343.125721][T15461] netlink: 'syz.4.2599': attribute type 1 has an invalid length. [ 343.251333][T15467] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2601'. [ 343.260954][T15467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2601'. [ 343.270239][T15467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2601'. [ 343.281255][T15467] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2601'. [ 343.325084][T15461] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.435767][T15467] vlan3: entered allmulticast mode [ 343.454887][T15467] gretap0: entered allmulticast mode [ 343.850325][T15496] netlink: 'syz.1.2609': attribute type 16 has an invalid length. [ 343.870393][T15496] netlink: 'syz.1.2609': attribute type 17 has an invalid length. [ 343.937927][ T5937] tipc: Node number set to 393738951 [ 344.530975][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 344.593660][T15538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2621'. [ 344.788605][T15551] netlink: 'syz.1.2624': attribute type 1 has an invalid length. [ 344.814909][T15551] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2624'. [ 344.829097][T15551] netlink: 'syz.1.2624': attribute type 1 has an invalid length. [ 344.981370][T15556] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2626'. [ 345.012142][T15556] nbd: illegal input index -8454144 [ 345.053723][T15557] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2626'. [ 345.120206][T15563] netlink: 'syz.2.2628': attribute type 10 has an invalid length. [ 345.142791][T15557] nbd: illegal input index -8454144 [ 345.151921][T15563] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2628'. [ 345.478762][T15579] netlink: 'syz.4.2632': attribute type 1 has an invalid length. [ 345.563018][T15580] FAULT_INJECTION: forcing a failure. [ 345.563018][T15580] name failslab, interval 1, probability 0, space 0, times 0 [ 345.620623][T15580] CPU: 1 UID: 0 PID: 15580 Comm: syz.4.2632 Not tainted syzkaller #0 PREEMPT(full) [ 345.620652][T15580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.620663][T15580] Call Trace: [ 345.620671][T15580] [ 345.620679][T15580] dump_stack_lvl+0x189/0x250 [ 345.620709][T15580] ? __pfx____ratelimit+0x10/0x10 [ 345.620729][T15580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.620753][T15580] ? __pfx__printk+0x10/0x10 [ 345.620786][T15580] ? __pfx___might_resched+0x10/0x10 [ 345.620812][T15580] should_fail_ex+0x414/0x560 [ 345.620844][T15580] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 345.620863][T15580] should_failslab+0xa8/0x100 [ 345.620893][T15580] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 345.620910][T15580] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 345.620936][T15580] ? alloc_inode+0x67/0x1b0 [ 345.620962][T15580] ? __pfx_simple_start_creating+0x10/0x10 [ 345.620985][T15580] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 345.621002][T15580] alloc_inode+0x67/0x1b0 [ 345.621032][T15580] new_inode+0x22/0x170 [ 345.621065][T15580] __debugfs_create_file+0x14d/0x4f0 [ 345.621101][T15580] debugfs_create_file_full+0x3f/0x60 [ 345.621134][T15580] ref_tracker_dir_debugfs+0x14e/0x270 [ 345.621155][T15580] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 345.621211][T15580] ? rcu_is_watching+0x15/0xb0 [ 345.621230][T15580] ? alloc_netdev_mqs+0xa3/0x11b0 [ 345.621263][T15580] ? __raw_spin_lock_init+0x45/0x100 [ 345.621291][T15580] alloc_netdev_mqs+0x26f/0x11b0 [ 345.621316][T15580] ? __pfx_geneve_setup+0x10/0x10 [ 345.621349][T15580] rtnl_create_link+0x31f/0xd10 [ 345.621385][T15580] rtnl_newlink_create+0x25c/0xb00 [ 345.621415][T15580] ? __mutex_lock+0x5bb/0x1350 [ 345.621442][T15580] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 345.621471][T15580] ? __pfx___mutex_lock+0x10/0x10 [ 345.621503][T15580] ? ns_capable+0x8a/0xf0 [ 345.621527][T15580] rtnl_newlink+0x16d6/0x1c70 [ 345.621550][T15580] ? netlink_sendmsg+0x805/0xb30 [ 345.621585][T15580] ? __pfx_rtnl_newlink+0x10/0x10 [ 345.621633][T15580] ? kasan_quarantine_put+0xdd/0x220 [ 345.621661][T15580] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.621687][T15580] ? nlmon_xmit+0xb0/0x100 [ 345.621707][T15580] ? kmem_cache_free+0x18f/0x400 [ 345.621742][T15580] ? __local_bh_enable_ip+0x12d/0x1c0 [ 345.621761][T15580] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.621782][T15580] ? __local_bh_enable_ip+0x12d/0x1c0 [ 345.621802][T15580] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 345.621827][T15580] ? __dev_queue_xmit+0x27b/0x3b50 [ 345.621854][T15580] ? __dev_queue_xmit+0x27b/0x3b50 [ 345.621878][T15580] ? __dev_queue_xmit+0x27b/0x3b50 [ 345.621906][T15580] ? __dev_queue_xmit+0x1d79/0x3b50 [ 345.621939][T15580] ? __lock_acquire+0xab9/0xd20 [ 345.621997][T15580] ? __pfx_rtnl_newlink+0x10/0x10 [ 345.622018][T15580] rtnetlink_rcv_msg+0x7cc/0xb70 [ 345.622044][T15580] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 345.622064][T15580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 345.622083][T15580] ? ref_tracker_free+0x63a/0x7d0 [ 345.622103][T15580] ? __asan_memcpy+0x40/0x70 [ 345.622125][T15580] ? __pfx_ref_tracker_free+0x10/0x10 [ 345.622158][T15580] netlink_rcv_skb+0x208/0x470 [ 345.622195][T15580] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 345.622219][T15580] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.622259][T15580] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.622289][T15580] netlink_unicast+0x82f/0x9e0 [ 345.622329][T15580] ? __pfx_netlink_unicast+0x10/0x10 [ 345.622361][T15580] ? netlink_sendmsg+0x642/0xb30 [ 345.622379][T15580] ? skb_put+0x11b/0x210 [ 345.622404][T15580] netlink_sendmsg+0x805/0xb30 [ 345.622429][T15580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.622451][T15580] ? aa_sock_msg_perm+0xf1/0x1d0 [ 345.622470][T15580] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 345.622491][T15580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.622512][T15580] __sock_sendmsg+0x21c/0x270 [ 345.622545][T15580] ____sys_sendmsg+0x505/0x830 [ 345.622572][T15580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.622603][T15580] ? import_iovec+0x74/0xa0 [ 345.622630][T15580] ___sys_sendmsg+0x21f/0x2a0 [ 345.622654][T15580] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.622722][T15580] ? __fget_files+0x2a/0x420 [ 345.622738][T15580] ? __fget_files+0x3a0/0x420 [ 345.622768][T15580] __x64_sys_sendmsg+0x19b/0x260 [ 345.622802][T15580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.622838][T15580] ? __pfx_ksys_write+0x10/0x10 [ 345.622877][T15580] ? do_syscall_64+0xbe/0x3b0 [ 345.622907][T15580] do_syscall_64+0xfa/0x3b0 [ 345.622926][T15580] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.622946][T15580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.622965][T15580] ? clear_bhb_loop+0x60/0xb0 [ 345.622990][T15580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.623009][T15580] RIP: 0033:0x7fc0c6d8eba9 [ 345.623027][T15580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.623044][T15580] RSP: 002b:00007fc0c4fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.623065][T15580] RAX: ffffffffffffffda RBX: 00007fc0c6fd6090 RCX: 00007fc0c6d8eba9 [ 345.623079][T15580] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 345.623092][T15580] RBP: 00007fc0c4fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 345.623105][T15580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.623116][T15580] R13: 00007fc0c6fd6128 R14: 00007fc0c6fd6090 R15: 00007ffe15ce5bd8 [ 345.623149][T15580] [ 346.169447][T15580] debugfs: out of free dentries, can not create file 'netdev@ffff88807b3ba610' [ 346.219788][T15579] 8021q: adding VLAN 0 to HW filter on device bond12 [ 347.344268][T15617] netlink: 'syz.3.2642': attribute type 1 has an invalid length. [ 347.559537][T15621] openvswitch: netlink: Missing key (keys=40, expected=80) [ 348.646294][T15678] netlink: 'syz.4.2659': attribute type 1 has an invalid length. [ 348.673450][T15678] __nla_validate_parse: 10 callbacks suppressed [ 348.673470][T15678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2659'. [ 348.799557][ T2967] tipc: Subscription rejected, illegal request [ 348.938637][T15680] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2662'. [ 348.960891][T15680] nbd: illegal input index -8454144 [ 349.027773][T15701] 8021q: VLANs not supported on ipvlan0 [ 349.238767][T15707] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2668'. [ 350.160216][T15750] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2680'. [ 350.310504][T15745] team_slave_0: left promiscuous mode [ 350.339955][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2684'. [ 350.376825][T15745] wg1: left promiscuous mode [ 350.381461][T15745] wg1: left allmulticast mode [ 350.396031][T15745] bridge_slave_0: left promiscuous mode [ 350.416533][T15745] veth0_to_team: left promiscuous mode [ 350.422040][T15745] veth0_to_team: left allmulticast mode [ 350.431110][T15745] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 350.795983][T15785] delete_channel: no stack [ 350.814610][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2692'. [ 350.866724][T15789] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2692'. [ 351.459495][T15823] netlink: 'syz.4.2703': attribute type 1 has an invalid length. [ 351.533535][T15823] 8021q: adding VLAN 0 to HW filter on device bond13 [ 351.549438][T15823] netlink: 'syz.4.2703': attribute type 1 has an invalid length. [ 351.821168][T15839] netlink: 'syz.1.2706': attribute type 1 has an invalid length. [ 351.839349][T15839] netlink: 'syz.1.2706': attribute type 1 has an invalid length. [ 352.084094][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 352.105529][T15851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 352.152092][T15854] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2713'. [ 352.307709][T15864] veth0: entered promiscuous mode [ 352.318435][T15864] netlink: 'syz.0.2715': attribute type 1 has an invalid length. [ 352.330697][T15863] veth0: left promiscuous mode [ 352.398271][T15865] geneve3: entered promiscuous mode [ 352.407472][T15865] geneve3: entered allmulticast mode [ 352.732061][T15880] netlink: 'syz.1.2717': attribute type 8 has an invalid length. [ 352.766209][T15884] netlink: 'syz.4.2720': attribute type 64 has an invalid length. [ 352.887583][T15889] netlink: 'syz.0.2721': attribute type 4 has an invalid length. [ 353.570702][T15917] netlink: 'syz.4.2728': attribute type 1 has an invalid length. [ 353.602668][T15923] netlink: 'syz.2.2731': attribute type 142 has an invalid length. [ 353.907741][T15939] __nla_validate_parse: 8 callbacks suppressed [ 353.907762][T15939] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2734'. [ 353.963099][T15941] tipc: Enabled bearer , priority 0 [ 353.974882][T15941] syzkaller0: entered promiscuous mode [ 353.980818][T15941] syzkaller0: entered allmulticast mode [ 354.141389][T15942] tipc: Resetting bearer [ 354.246307][T15942] tipc: Disabling bearer [ 354.360468][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2741'. [ 354.524129][T15967] netlink: 'syz.2.2744': attribute type 1 has an invalid length. [ 354.614486][T15972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2744'. [ 354.676670][T15967] 8021q: adding VLAN 0 to HW filter on device bond9 [ 354.686325][T15971] tipc: Enabled bearer , priority 0 [ 354.695668][T15975] syzkaller0: entered promiscuous mode [ 354.701461][T15975] syzkaller0: entered allmulticast mode [ 354.702849][T15978] netlink: 'syz.1.2745': attribute type 9 has an invalid length. [ 354.716006][T15967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2744'. [ 354.719384][T15966] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 354.756335][T15976] veth5: entered promiscuous mode [ 354.765662][T15976] bond9: (slave veth5): Enslaving as an active interface with a down link [ 354.772030][T15972] netlink: 'syz.2.2744': attribute type 1 has an invalid length. [ 354.785188][T15966] tipc: Resetting bearer [ 354.795972][T15964] tipc: Resetting bearer [ 354.818728][T15964] tipc: Disabling bearer [ 354.830291][T15967] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2744'. [ 355.041421][T15984] tipc: Resetting bearer [ 355.216936][T15996] syzkaller0: entered promiscuous mode [ 355.259271][T15996] syzkaller0: entered allmulticast mode [ 355.275362][T15998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2752'. [ 355.288053][T16001] netlink: 'syz.3.2753': attribute type 1 has an invalid length. [ 355.302230][T16000] tipc: Enabled bearer , priority 0 [ 355.338867][T16004] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2754'. [ 355.351826][T16001] 8021q: adding VLAN 0 to HW filter on device bond15 [ 355.361763][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2754'. [ 355.364472][T15996] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 355.549801][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2757'. [ 355.609055][T16018] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2757'. [ 355.609462][T16017] netlink: 'syz.0.2751': attribute type 21 has an invalid length. [ 355.908360][T16016] 8021q: adding VLAN 0 to HW filter on device bond16 [ 355.957794][T15995] tipc: Resetting bearer [ 356.004275][T15995] tipc: Disabling bearer [ 356.313119][ T123] block nbd0: Possible stuck request ffff888025410000: control (read@0,1024B). Runtime 180 seconds [ 356.324318][ T123] block nbd0: Possible stuck request ffff8880254101c0: control (read@1024,1024B). Runtime 180 seconds [ 356.336206][ T123] block nbd0: Possible stuck request ffff888025410380: control (read@2048,1024B). Runtime 180 seconds [ 356.347325][ T123] block nbd0: Possible stuck request ffff888025410540: control (read@3072,1024B). Runtime 180 seconds [ 357.004854][T16077] tipc: Enabled bearer , priority 0 [ 357.066866][T16077] syzkaller0: entered promiscuous mode [ 357.084187][T16077] syzkaller0: entered allmulticast mode [ 357.167388][T16077] tipc: Resetting bearer [ 357.201397][T16077] bond0: (slave dummy0): Releasing backup interface [ 357.285743][T16077] bond0: (slave batadv0): Releasing backup interface [ 357.380312][T16077] bridge_slave_0: left allmulticast mode [ 357.412342][T16077] bridge_slave_0: left promiscuous mode [ 357.447370][T16077] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.494363][T16077] bridge_slave_1: left allmulticast mode [ 357.511071][T16077] bridge_slave_1: left promiscuous mode [ 357.536885][T16077] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.601239][T16077] bond0: (slave bond_slave_0): Releasing backup interface [ 357.695847][T16077] bond0: (slave bond_slave_1): Releasing backup interface [ 357.780787][T16077] team0: Port device team_slave_0 removed [ 357.828359][T16077] team0: Port device team_slave_1 removed [ 357.856334][T16077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.883106][T16077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.900133][T16077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.923175][T16077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.970128][T16077] bond3: (slave veth3): Releasing active interface [ 358.044142][T16077] bond5: (slave gretap1): Releasing active interface [ 358.085289][T16077] bond7: (slave geneve2): Releasing active interface [ 358.149826][T16077] bond9: (slave veth5): Releasing active interface [ 358.233605][T16074] tipc: Resetting bearer [ 358.262889][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.280000][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.288807][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.306373][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.315162][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.360734][ T5885] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.378536][T16074] tipc: Disabling bearer [ 358.386815][ T5885] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.397369][ T5885] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.407299][ T5885] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.419825][ T5885] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.600911][ T5869] syz_tun (unregistering): left allmulticast mode [ 358.618190][ T5869] syz_tun (unregistering): left promiscuous mode [ 358.625604][ T5869] bridge0: port 3(syz_tun) entered disabled state [ 358.653767][T16133] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 358.698805][T16118] IPv6: sit2: Disabled Multicast RS [ 358.708587][T16118] sit2: entered allmulticast mode [ 359.023784][ T2967] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 359.037706][ T2967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.050013][ T2967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.075184][T16156] netem: unknown loss type 0 [ 359.080167][T16156] netem: change failed [ 359.195541][ T2967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.229514][ T2967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.257455][T16159] __nla_validate_parse: 11 callbacks suppressed [ 359.257473][T16159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2786'. [ 359.667865][ T2967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.691103][ T2967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.730095][T16176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2794'. [ 359.739704][T16176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2794'. [ 359.785475][T16178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.011065][ T2967] bond0: (slave netdevsim0): Releasing backup interface [ 360.047307][ T2967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.078077][ T2967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.279765][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'. [ 360.462788][ T5885] Bluetooth: hci4: command tx timeout [ 360.736229][T16222] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 360.780183][T16214] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2803'. [ 360.805719][T16214] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2803'. [ 360.975214][T16117] chnl_net:caif_netlink_parms(): no params data found [ 361.212916][T16245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2808'. [ 361.289463][T16236] bridge0: port 3(batadv1) entered blocking state [ 361.296710][T16236] bridge0: port 3(batadv1) entered disabled state [ 361.303889][T16236] batadv1: entered allmulticast mode [ 361.311392][T16236] batadv1: entered promiscuous mode [ 361.451271][T13457] udevd[13457]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 361.566330][ T2967] bond14: left promiscuous mode [ 361.574677][ T2967] bridge0: port 4(bond14) entered disabled state [ 361.597632][ T2967] bridge_slave_1: left allmulticast mode [ 361.619809][ T2967] bridge_slave_1: left promiscuous mode [ 361.626325][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.644931][ T2967] bridge_slave_0: left allmulticast mode [ 361.654904][ T2967] bridge_slave_0: left promiscuous mode [ 361.660680][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.768549][ T2952] batman_adv: batadv1: IGMP Querier appeared [ 361.774926][ T2952] batman_adv: batadv1: MLD Querier appeared [ 361.885519][T16272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2813'. [ 362.152063][ T2967] gretap0 (unregistering): left promiscuous mode [ 362.239286][ T2967] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 362.272259][ T2967] team0: Port device geneve0 removed [ 362.545629][ T5885] Bluetooth: hci4: command tx timeout [ 362.554779][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.569439][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.579839][ T2967] bond0 (unregistering): Released all slaves [ 362.723297][ T2967] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 362.734328][ T2967] bond1 (unregistering): Released all slaves [ 362.842716][ T2967] bond2 (unregistering): Released all slaves [ 362.856592][ T2967] bond3 (unregistering): Released all slaves [ 362.981038][ T2967] bond4 (unregistering): Released all slaves [ 363.096252][ T2967] bond5 (unregistering): Released all slaves [ 363.206187][ T2967] bond6 (unregistering): Released all slaves [ 363.316817][ T2967] bond7 (unregistering): Released all slaves [ 363.329976][ T2967] bond8 (unregistering): Released all slaves [ 363.446040][ T2967] bond9 (unregistering): (slave bond10): Releasing backup interface [ 363.454275][ T2967] bond10 (unregistering): left promiscuous mode [ 363.461175][ T2967] bond9 (unregistering): Released all slaves [ 363.565725][ T2967] bond10 (unregistering): Released all slaves [ 363.673971][ T2967] bond11 (unregistering): Released all slaves [ 363.688871][ T2967] bond12 (unregistering): Released all slaves [ 363.796282][ T2967] bond13 (unregistering): Released all slaves [ 363.899306][ T2967] bond14 (unregistering): Released all slaves [ 364.009699][ T2967] bond15 (unregistering): Released all slaves [ 364.117707][ T2967] bond16 (unregistering): Released all slaves [ 364.154027][T16279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.338636][T16289] tipc: Enabled bearer , priority 10 [ 364.359176][T16285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2816'. [ 364.433075][T16117] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.444809][T16117] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.469254][T16117] bridge_slave_0: entered allmulticast mode [ 364.492967][T16117] bridge_slave_0: entered promiscuous mode [ 364.530790][T16117] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.552702][T16117] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.563574][T16117] bridge_slave_1: entered allmulticast mode [ 364.594926][T16117] bridge_slave_1: entered promiscuous mode [ 364.625759][ T5885] Bluetooth: hci4: command tx timeout [ 364.754554][T16117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.798756][T16117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.967778][T16117] team0: Port device team_slave_0 added [ 364.986802][T16117] team0: Port device team_slave_1 added [ 365.140236][T16117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.174712][T16117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.205951][T16325] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2827'. [ 365.220662][T16117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.248126][T16325] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2827'. [ 365.310936][T16117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.355047][T16117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.389400][T16117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.607424][T16117] hsr_slave_0: entered promiscuous mode [ 365.634139][T16117] hsr_slave_1: entered promiscuous mode [ 365.658352][T16117] debugfs: 'hsr0' already exists in 'hsr' [ 365.680910][T16117] Cannot create hsr debugfs directory [ 365.948700][ T2967] tipc: Disabling bearer [ 365.972935][ T2967] tipc: Left network mode [ 366.310747][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2839'. [ 366.362759][T16375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2839'. [ 366.506480][T16375] bridge0: port 4(vlan0) entered blocking state [ 366.519337][T16375] bridge0: port 4(vlan0) entered disabled state [ 366.544853][T16375] vlan0: entered allmulticast mode [ 366.555627][T16375] bridge0: entered allmulticast mode [ 366.582272][T16375] vlan0: left allmulticast mode [ 366.589681][T16375] bridge0: left allmulticast mode [ 366.597704][T16389] netlink: 'syz.4.2841': attribute type 11 has an invalid length. [ 366.705419][ T5885] Bluetooth: hci4: command tx timeout [ 366.739134][T16392] validate_nla: 7 callbacks suppressed [ 366.739153][T16392] netlink: 'syz.2.2843': attribute type 1 has an invalid length. [ 366.753265][T16392] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2843'. [ 367.424254][T16423] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2851'. [ 367.444685][T16421] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2851'. [ 367.462868][T16423] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 367.463397][T16421] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2851'. [ 367.498293][ T3030] tipc: Subscription rejected, illegal request [ 367.507456][T16423] openvswitch: netlink: Message has 6332 unknown bytes. [ 367.691398][ T2967] dummy0: left promiscuous mode [ 367.753340][ T2967] hsr_slave_0: left promiscuous mode [ 367.770076][ T2967] hsr_slave_1: left promiscuous mode [ 367.813614][ T2967] batadv_slave_1: left promiscuous mode [ 367.824255][ T2967] team_slave_0: left promiscuous mode [ 367.837585][ T2967] veth0_macvtap: left promiscuous mode [ 367.847053][ T2967] veth1_vlan: left promiscuous mode [ 367.853765][ T2967] veth0_vlan: left promiscuous mode [ 368.245289][T16464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2857'. [ 368.949590][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 369.397180][T16444] tipc: Enabling of bearer rejected, failed to enable media [ 369.601901][T16117] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.653901][T16117] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.690258][T16117] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.709867][T16479] __nla_validate_parse: 1 callbacks suppressed [ 369.709885][T16479] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2861'. [ 369.767679][T16117] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.773825][T16489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.786669][T16488] netlink: 'syz.2.2864': attribute type 11 has an invalid length. [ 369.800313][T16488] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2864'. [ 369.800689][T16490] batadv_slave_0: entered allmulticast mode [ 369.838444][T16479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2861'. [ 369.866570][T16479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.898774][T16487] batadv_slave_0: left allmulticast mode [ 370.124697][T16504] netlink: 'syz.0.2866': attribute type 15 has an invalid length. [ 370.142963][T16504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2866'. [ 370.285275][ T2967] IPVS: stop unused estimator thread 0... [ 370.305658][T16117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.315761][T16514] bond0: Device is already in use. [ 370.383913][T16117] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.413862][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.421090][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.518551][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.525798][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.564865][T16525] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2871'. [ 370.776212][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2873'. [ 370.804237][T16534] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2875'. [ 370.823238][T16534] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2875'. [ 371.121997][T16544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'. [ 371.148780][T16534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.189940][T16534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.466911][T16556] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 371.731497][T16534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.762460][T16534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.873676][ T12] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [1, 1] type 2 family 0 port 20002 - 0 [ 371.882188][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 371.954797][T16569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2886'. [ 371.971095][T16534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.994288][T16534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.023009][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 372.100069][T16569] xfrm1: entered promiscuous mode [ 372.118484][T16569] xfrm1: entered allmulticast mode [ 372.140679][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 372.180929][T16534] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.192919][T16534] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.291831][T16581] netlink: 'syz.4.2888': attribute type 26 has an invalid length. [ 372.483698][T16117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.490820][ T2952] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.500356][ T2952] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.531095][ T2952] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.548737][ T2952] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.596188][ T2952] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.624220][ T2952] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.655636][ T2952] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.702633][ T2952] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.880426][T16117] veth0_vlan: entered promiscuous mode [ 373.007111][T16117] veth1_vlan: entered promiscuous mode [ 373.205165][T16117] veth0_macvtap: entered promiscuous mode [ 373.220439][T16597] netlink: 'syz.2.2895': attribute type 12 has an invalid length. [ 373.246498][T16117] veth1_macvtap: entered promiscuous mode [ 373.336344][T16117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.398985][T16117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.461746][ T3002] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.479075][ T3002] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.503942][T16609] netlink: 'syz.2.2898': attribute type 6 has an invalid length. [ 373.526033][ T3002] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.537930][ T3002] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.745185][T16616] netlink: 'syz.2.2899': attribute type 2 has an invalid length. [ 373.771609][T16612] veth11: entered promiscuous mode [ 374.087940][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.134656][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.179527][T16625] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 374.716694][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.748292][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.837490][T16657] __nla_validate_parse: 5 callbacks suppressed [ 374.837509][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 374.885077][T16657] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2911'. [ 374.896325][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 375.466755][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2919'. [ 375.518258][T16688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2919'. [ 375.955479][T16690] pim6reg: entered allmulticast mode [ 376.047253][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.060600][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.071834][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.081315][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.089827][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.227876][T16719] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2927'. [ 376.709904][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2933'. [ 376.738938][T16739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2933'. [ 377.177900][T16753] netlink: 'syz.0.2936': attribute type 39 has an invalid length. [ 377.359048][T16761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2938'. [ 377.455426][T16755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.581513][T16767] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2940'. [ 377.800541][T16707] chnl_net:caif_netlink_parms(): no params data found [ 377.919759][T16779] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 377.942843][T16779] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 378.142709][ T5885] Bluetooth: hci1: command tx timeout [ 378.183004][T16786] syzkaller0: create flow: hash 1638334001 index 1 [ 378.310277][T16797] Bluetooth: MGMT ver 1.23 [ 378.426144][T16799] nbd: socks must be embedded in a SOCK_ITEM attr [ 378.454657][T16781] syzkaller0: delete flow: hash 1638334001 index 1 [ 379.020745][T16814] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 380.226866][ T5885] Bluetooth: hci1: command 0x041b tx timeout [ 380.388625][T16707] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.395916][T16707] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.403690][T16707] bridge_slave_0: entered allmulticast mode [ 380.410814][T16707] bridge_slave_0: entered promiscuous mode [ 380.430447][T16707] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.452876][T16707] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.463456][T16707] bridge_slave_1: entered allmulticast mode [ 380.471558][T16707] bridge_slave_1: entered promiscuous mode [ 380.550912][T16819] __nla_validate_parse: 5 callbacks suppressed [ 380.550932][T16819] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2956'. [ 380.639048][T16707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.705852][T16707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.860746][T16707] team0: Port device team_slave_0 added [ 380.906514][T16707] team0: Port device team_slave_1 added [ 381.071056][T16848] netlink: 'syz.0.2963': attribute type 8 has an invalid length. [ 381.127178][T16846] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 381.143525][T16846] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 381.154229][T16707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.161210][T16707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.300380][T16707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.351425][T16707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.375167][T16707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.461684][T16707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.620674][T16879] netlink: 'syz.0.2971': attribute type 1 has an invalid length. [ 381.684914][T16885] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 381.720930][T16879] 8021q: adding VLAN 0 to HW filter on device bond13 [ 381.731355][T16871] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2968'. [ 381.777708][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2972'. [ 381.871001][T16884] veth11: entered promiscuous mode [ 381.888092][T16884] bond13: (slave veth11): Enslaving as an active interface with an up link [ 381.945254][T16893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2974'. [ 381.969376][T16707] hsr_slave_0: entered promiscuous mode [ 381.982081][T16707] hsr_slave_1: entered promiscuous mode [ 382.009793][T16707] debugfs: 'hsr0' already exists in 'hsr' [ 382.020334][T16707] Cannot create hsr debugfs directory [ 382.174261][T16904] netlink: 'syz.4.2977': attribute type 8 has an invalid length. [ 382.288770][T16908] bridge_slave_0: invalid flags given to default FDB implementation [ 382.306579][ T5885] Bluetooth: hci1: command 0x041b tx timeout [ 382.519004][T16920] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2982'. [ 382.612757][T16927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2981'. [ 382.697628][T16707] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.719941][T16707] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.855440][T16920] netlink: 'syz.4.2982': attribute type 3 has an invalid length. [ 382.879612][T16707] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.898958][T16707] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.974911][T16935] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2984'. [ 383.019505][T16937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 383.028992][T16937] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 383.037900][T16937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.119764][T16707] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.165407][T16707] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.224661][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2988'. [ 383.270331][T16943] netlink: 'syz.3.2988': attribute type 1 has an invalid length. [ 383.289773][T16943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2988'. [ 383.338386][T16707] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.375005][T16707] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.445985][T16952] netlink: 'syz.0.2990': attribute type 12 has an invalid length. [ 383.567634][T16955] veth7: entered allmulticast mode [ 383.922935][T16707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 384.051813][T16707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.096785][T16707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 384.143428][T16707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 384.382917][ T5876] Bluetooth: hci1: command 0x041b tx timeout [ 384.554983][T16707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.637829][T16707] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.697944][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.705169][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.168480][T17019] erspan0: entered promiscuous mode [ 385.204108][T17019] macvtap1: entered promiscuous mode [ 385.243965][T17019] macvtap1: entered allmulticast mode [ 385.253938][T17019] erspan0: entered allmulticast mode [ 385.501961][T17020] erspan0: left allmulticast mode [ 385.535921][T17020] erspan0: left promiscuous mode [ 385.570317][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.577529][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.586965][T17025] sctp: [Deprecated]: syz.0.3008 (pid 17025) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.586965][T17025] Use struct sctp_sack_info instead [ 385.657595][T17032] tipc: Enabled bearer , priority 0 [ 385.667542][T17032] syzkaller0: entered promiscuous mode [ 385.674488][T17032] syzkaller0: entered allmulticast mode [ 385.765337][T17032] tipc: Resetting bearer [ 385.813434][T17031] tipc: Resetting bearer [ 385.863539][T17031] tipc: Disabling bearer [ 386.386988][ T123] block nbd0: Possible stuck request ffff888025410000: control (read@0,1024B). Runtime 210 seconds [ 386.398064][ T123] block nbd0: Possible stuck request ffff8880254101c0: control (read@1024,1024B). Runtime 210 seconds [ 386.409543][ T123] block nbd0: Possible stuck request ffff888025410380: control (read@2048,1024B). Runtime 210 seconds [ 386.421103][ T123] block nbd0: Possible stuck request ffff888025410540: control (read@3072,1024B). Runtime 210 seconds [ 386.462649][ T5876] Bluetooth: hci1: command 0x041b tx timeout [ 386.569301][T16707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.732475][T16707] veth0_vlan: entered promiscuous mode [ 386.777369][T16707] veth1_vlan: entered promiscuous mode [ 386.919986][T16707] veth0_macvtap: entered promiscuous mode [ 386.963868][T16707] veth1_macvtap: entered promiscuous mode [ 387.049842][T16707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.095769][T17089] netlink: 'syz.4.3023': attribute type 26 has an invalid length. [ 387.138959][T16707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.194014][ T2967] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.289787][ T2967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.309233][ T2967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.387975][T17103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.475534][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.627390][T17119] __nla_validate_parse: 2 callbacks suppressed [ 387.627408][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3027'. [ 387.762815][T17124] openvswitch: netlink: Message has 4 unknown bytes. [ 387.802991][T17124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.882135][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.912070][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.061619][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.102767][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.124177][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 388.345100][T17148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.373849][T17148] batadv_slave_0: entered promiscuous mode [ 388.543010][ T5876] Bluetooth: hci1: command 0x041b tx timeout [ 388.673332][T17164] netlink: 'syz.4.3041': attribute type 58 has an invalid length. [ 388.753252][T17164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3041'. [ 388.810448][T17167] netlink: 'syz.4.3041': attribute type 58 has an invalid length. [ 388.833847][T17167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3041'. [ 388.963885][T17175] netlink: 'syz.0.3044': attribute type 10 has an invalid length. [ 388.995388][T17175] batman_adv: batadv0: Adding interface: team0 [ 389.001579][T17175] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.094422][T17175] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 389.400299][ T36] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.447088][ T36] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.583895][T17197] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 389.596160][ T36] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.612663][T17197] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 389.620699][ T36] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.623165][T17197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 389.646502][T17197] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.654280][T17197] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.791137][T17206] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3052'. [ 389.843290][ T36] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.854674][ T36] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.960491][ T36] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.966926][T17204] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.004899][ T36] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.225138][T17224] netlink: 'syz.0.3056': attribute type 10 has an invalid length. [ 390.698353][T17231] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3059'. [ 390.702275][ T36] tipc: Resetting bearer [ 391.176928][ T36] tipc: Disabling bearer [ 391.265853][ T36] dvmrp1 (unregistering): left allmulticast mode [ 391.292295][ T36] dvmrp0 (unregistering): left allmulticast mode [ 391.676323][ T36] bond0 (unregistering): Released all slaves [ 391.745606][ T5876] Bluetooth: hci3: command tx timeout [ 391.810059][ T36] bond1 (unregistering): Released all slaves [ 391.924857][ T36] bond2 (unregistering): Released all slaves [ 392.039923][ T36] bond3 (unregistering): Released all slaves [ 392.161927][ T36] bond4 (unregistering): Released all slaves [ 392.278721][ T36] bond5 (unregistering): Released all slaves [ 392.399188][ T36] bond6 (unregistering): Released all slaves [ 392.510381][ T36] bond7 (unregistering): Released all slaves [ 392.523237][ T36] bond8 (unregistering): Released all slaves [ 392.645594][ T36] bond9 (unregistering): Released all slaves [ 392.911009][T17262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.924087][ T36] tipc: Disabling bearer [ 392.964605][ T36] tipc: Left network mode [ 393.010513][T17267] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3067'. [ 393.056789][T17267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3067'. [ 393.123838][ T36] IPVS: stopping backup sync thread 8185 ... [ 393.508191][T17196] chnl_net:caif_netlink_parms(): no params data found [ 393.676116][T17196] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.685163][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.693381][T17196] bridge_slave_0: entered allmulticast mode [ 393.710777][T17196] bridge_slave_0: entered promiscuous mode [ 393.729312][T17196] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.737238][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.745548][T17196] bridge_slave_1: entered allmulticast mode [ 393.753636][T17196] bridge_slave_1: entered promiscuous mode [ 393.816030][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.823430][ T5876] Bluetooth: hci3: command tx timeout [ 393.829549][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.878688][T17304] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 393.888829][T17304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3075'. [ 393.899232][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 393.922937][T17196] team0: Port device team_slave_0 added [ 393.979148][T17196] team0: Port device team_slave_1 added [ 394.011726][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.019190][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.053034][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.083083][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.091168][T17281] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 394.097588][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.097624][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.142252][T17281] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 394.187029][T17196] hsr_slave_0: entered promiscuous mode [ 394.193881][T17196] hsr_slave_1: entered promiscuous mode [ 394.200240][T17196] debugfs: 'hsr0' already exists in 'hsr' [ 394.206874][T17196] Cannot create hsr debugfs directory [ 394.225991][T17281] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 394.234405][T17281] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 394.298864][T17281] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 394.306940][T17281] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 395.791736][T17266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.806608][T17307] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 395.815940][T17307] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3076'. [ 395.825406][T17307] nbd: couldn't find device at index 1048576 [ 395.838652][T17196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 395.901471][T17196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.918690][T17196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.928913][T17196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.986938][T17312] block nbd3: server does not support multiple connections per device. [ 395.996565][T17312] block nbd3: shutting down sockets [ 396.146867][T17196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.179529][T17196] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.200731][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.207962][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.239027][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.246218][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.295745][T17330] ipvlan2: entered promiscuous mode [ 396.530515][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.600746][T17196] veth0_vlan: entered promiscuous mode [ 396.617109][T17196] veth1_vlan: entered promiscuous mode [ 396.660517][T17196] veth0_macvtap: entered promiscuous mode [ 396.678993][T17196] veth1_macvtap: entered promiscuous mode [ 396.719250][T17345] netlink: 'syz.3.3086': attribute type 2 has an invalid length. [ 396.729954][T17345] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3086'. [ 396.741891][T17345] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 396.752147][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.769808][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.803666][ T3002] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.838189][ T3002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.865737][ T3002] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.882932][ T3002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.031515][T17356] netlink: 'syz.3.3089': attribute type 3 has an invalid length. [ 397.421862][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3096'. [ 397.445430][T17376] bond1: entered promiscuous mode [ 397.450673][T17376] bond1: entered allmulticast mode [ 397.456413][T17376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.578594][T17376] bond1 (unregistering): Released all slaves [ 397.739519][T17387] netlink: 'syz.3.3099': attribute type 1 has an invalid length. [ 397.751853][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3099'. [ 397.765520][T17387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3099'. [ 397.804278][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3099'. [ 397.816302][T17387] netlink: 'syz.3.3099': attribute type 5 has an invalid length. [ 397.837426][T17387] geneve2: entered promiscuous mode [ 397.843211][T17387] geneve2: entered allmulticast mode [ 397.851058][ T2967] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 397.870168][ T2967] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 397.881451][ T2967] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 397.891816][ T2967] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 398.154092][T17410] __nla_validate_parse: 4 callbacks suppressed [ 398.154109][T17410] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3103'. [ 401.333788][ T5237] udevd[5237]: worker [6017] /devices/virtual/block/nbd0 timeout; kill it [ 401.343439][ T5237] udevd[5237]: seq 14536 '/devices/virtual/block/nbd0' killed [ 416.469602][ T123] block nbd0: Possible stuck request ffff888025410000: control (read@0,1024B). Runtime 240 seconds [ 416.480588][ T123] block nbd0: Possible stuck request ffff8880254101c0: control (read@1024,1024B). Runtime 240 seconds [ 416.492053][ T123] block nbd0: Possible stuck request ffff888025410380: control (read@2048,1024B). Runtime 240 seconds [ 416.503518][ T123] block nbd0: Possible stuck request ffff888025410540: control (read@3072,1024B). Runtime 240 seconds [ 446.544306][ T123] block nbd0: Possible stuck request ffff888025410000: control (read@0,1024B). Runtime 270 seconds [ 446.555112][ T123] block nbd0: Possible stuck request ffff8880254101c0: control (read@1024,1024B). Runtime 270 seconds [ 446.566164][ T123] block nbd0: Possible stuck request ffff888025410380: control (read@2048,1024B). Runtime 270 seconds [ 446.577498][ T123] block nbd0: Possible stuck request ffff888025410540: control (read@3072,1024B). Runtime 270 seconds [ 476.633557][ T123] block nbd0: Possible stuck request ffff888025410000: control (read@0,1024B). Runtime 300 seconds [ 476.644578][ T123] block nbd0: Possible stuck request ffff8880254101c0: control (read@1024,1024B). Runtime 300 seconds [ 476.655613][ T123] block nbd0: Possible stuck request ffff888025410380: control (read@2048,1024B). Runtime 300 seconds [ 476.667026][ T123] block nbd0: Possible stuck request ffff888025410540: control (read@3072,1024B). Runtime 300 seconds [ 506.707992][ T123] block nbd0: Possible stuck request ffff888025410000: control (read@0,1024B). Runtime 330 seconds [ 506.719445][ T123] block nbd0: Possible stuck request ffff8880254101c0: control (read@1024,1024B). Runtime 330 seconds [ 506.730576][ T123] block nbd0: Possible stuck request ffff888025410380: control (read@2048,1024B). Runtime 330 seconds [ 506.741679][ T123] block nbd0: Possible stuck request ffff888025410540: control (read@3072,1024B). Runtime 330 seconds [ 536.783258][ T123] block nbd0: Possible stuck request ffff888025410000: control (read@0,1024B). Runtime 360 seconds [ 536.794332][ T123] block nbd0: Possible stuck request ffff8880254101c0: control (read@1024,1024B). Runtime 360 seconds [ 536.805677][ T123] block nbd0: Possible stuck request ffff888025410380: control (read@2048,1024B). Runtime 360 seconds [ 536.817233][ T123] block nbd0: Possible stuck request ffff888025410540: control (read@3072,1024B). Runtime 360 seconds [ 547.023579][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 547.031261][ T31] Not tainted syzkaller #0 [ 547.036385][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.045204][ T31] task:kworker/u8:2 state:D stack:22192 pid:36 tgid:36 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 547.057390][ T31] Workqueue: netns cleanup_net [ 547.062211][ T31] Call Trace: [ 547.065645][ T31] [ 547.068591][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 547.073321][ T31] ? __lock_acquire+0xab9/0xd20 [ 547.078557][ T31] ? __lock_acquire+0xab9/0xd20 [ 547.083632][ T31] ? __pfx___schedule+0x10/0x10 [ 547.088512][ T31] ? schedule+0x91/0x360 [ 547.093136][ T31] schedule+0x165/0x360 [ 547.097317][ T31] schedule_preempt_disabled+0x13/0x30 [ 547.154009][ T31] __mutex_lock+0x7e6/0x1350 [ 547.162682][ T31] ? __mutex_lock+0x5bb/0x1350 [ 547.167486][ T31] ? rfkill_unregister+0xc8/0x220 [ 547.185446][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 547.190528][ T31] ? __pfx_device_del+0x10/0x10 [ 547.196796][ T31] rfkill_unregister+0xc8/0x220 [ 547.201783][ T31] wiphy_unregister+0x238/0xae0 [ 547.206989][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 547.214900][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 547.220385][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 547.225867][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.231108][ T31] ? kfree+0x18e/0x440 [ 547.235465][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 547.240966][ T31] mac80211_hwsim_del_radio+0x275/0x460 [ 547.246687][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 547.252828][ T31] hwsim_exit_net+0x584/0x640 [ 547.257504][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 547.263297][ T31] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 547.269121][ T31] ops_undo_list+0x49a/0x990 [ 547.273798][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 547.278928][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 547.284296][ T31] cleanup_net+0x4c5/0x800 [ 547.288730][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 547.293764][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.298978][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 547.304861][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 547.310590][ T31] process_scheduled_works+0xae1/0x17b0 [ 547.316515][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 547.322976][ T31] worker_thread+0x8a0/0xda0 [ 547.327608][ T31] kthread+0x70e/0x8a0 [ 547.331708][ T31] ? __pfx_worker_thread+0x10/0x10 [ 547.336892][ T31] ? __pfx_kthread+0x10/0x10 [ 547.341546][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.346949][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.352159][ T31] ? __pfx_kthread+0x10/0x10 [ 547.356818][ T31] ret_from_fork+0x436/0x7d0 [ 547.361417][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 547.366698][ T31] ? __switch_to_asm+0x39/0x70 [ 547.371482][ T31] ? __switch_to_asm+0x33/0x70 [ 547.376309][ T31] ? __pfx_kthread+0x10/0x10 [ 547.380917][ T31] ret_from_fork_asm+0x1a/0x30 [ 547.385879][ T31] [ 547.388996][ T31] INFO: task kworker/0:3:5873 blocked for more than 143 seconds. [ 547.396756][ T31] Not tainted syzkaller #0 [ 547.401717][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.410547][ T31] task:kworker/0:3 state:D stack:24616 pid:5873 tgid:5873 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 547.422812][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 547.429488][ T31] Call Trace: [ 547.432826][ T31] [ 547.435782][ T31] __schedule+0x1798/0x4cc0 [ 547.440322][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 547.445869][ T31] ? __pfx___schedule+0x10/0x10 [ 547.450735][ T31] ? schedule+0x91/0x360 [ 547.455066][ T31] schedule+0x165/0x360 [ 547.459248][ T31] schedule_preempt_disabled+0x13/0x30 [ 547.464860][ T31] __mutex_lock+0x7e6/0x1350 [ 547.469473][ T31] ? __mutex_lock+0x5bb/0x1350 [ 547.474326][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 547.480587][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 547.485806][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 547.491532][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 547.497326][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 547.503547][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 547.509297][ T31] process_scheduled_works+0xae1/0x17b0 [ 547.515251][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 547.521273][ T31] worker_thread+0x8a0/0xda0 [ 547.526002][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 547.532650][ T31] ? __kthread_parkme+0x7b/0x200 [ 547.537643][ T31] kthread+0x70e/0x8a0 [ 547.541739][ T31] ? __pfx_worker_thread+0x10/0x10 [ 547.547016][ T31] ? __pfx_kthread+0x10/0x10 [ 547.551643][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.556920][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 547.562141][ T31] ? __pfx_kthread+0x10/0x10 [ 547.566884][ T31] ret_from_fork+0x436/0x7d0 [ 547.571519][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 547.576698][ T31] ? __switch_to_asm+0x39/0x70 [ 547.581477][ T31] ? __switch_to_asm+0x33/0x70 [ 547.586746][ T31] ? __pfx_kthread+0x10/0x10 [ 547.591354][ T31] ret_from_fork_asm+0x1a/0x30 [ 547.598650][ T31] [ 547.601806][ T31] INFO: task udevd:6017 blocked for more than 143 seconds. [ 547.616741][ T31] Not tainted syzkaller #0 [ 547.621884][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.633470][ T31] task:udevd state:D stack:21928 pid:6017 tgid:6017 ppid:5237 task_flags:0x400140 flags:0x00004006 [ 547.645683][ T31] Call Trace: [ 547.648996][ T31] [ 547.651933][ T31] __schedule+0x1798/0x4cc0 [ 547.656608][ T31] ? __pfx___schedule+0x10/0x10 [ 547.661476][ T31] ? schedule+0x91/0x360 [ 547.666526][ T31] schedule+0x165/0x360 [ 547.670697][ T31] io_schedule+0x80/0xd0 [ 547.675123][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 547.680458][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 547.686338][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 547.691904][ T31] ? __filemap_get_folio+0x6f0/0xaf0 [ 547.697411][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 547.702885][ T31] do_read_cache_folio+0x1aa/0x590 [ 547.708019][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 547.713664][ T31] read_part_sector+0xb6/0x2b0 [ 547.718454][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 547.723907][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 547.729460][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 547.735702][ T31] bdev_disk_changed+0x75f/0x14b0 [ 547.740770][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 547.746404][ T31] ? wait_on_inode+0xc0/0x230 [ 547.751264][ T31] blkdev_get_whole+0x380/0x510 [ 547.756583][ T31] bdev_open+0x31e/0xd30 [ 547.761034][ T31] blkdev_open+0x457/0x600 [ 547.765584][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 547.770537][ T31] do_dentry_open+0x953/0x13f0 [ 547.775522][ T31] vfs_open+0x3b/0x340 [ 547.779624][ T31] ? path_openat+0x2ecd/0x3830 [ 547.784469][ T31] path_openat+0x2ee5/0x3830 [ 547.789070][ T31] ? arch_stack_walk+0xfc/0x150 [ 547.794086][ T31] ? stack_depot_save_flags+0x40/0x860 [ 547.799588][ T31] ? __pfx_path_openat+0x10/0x10 [ 547.804601][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.810685][ T31] do_filp_open+0x1fa/0x410 [ 547.815405][ T31] ? __lock_acquire+0xab9/0xd20 [ 547.820279][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 547.825496][ T31] ? _raw_spin_unlock+0x28/0x50 [ 547.830363][ T31] ? alloc_fd+0x64c/0x6c0 [ 547.834872][ T31] do_sys_openat2+0x121/0x1c0 [ 547.839583][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 547.845133][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 547.850353][ T31] ? rcu_is_watching+0x15/0xb0 [ 547.855318][ T31] __x64_sys_openat+0x138/0x170 [ 547.860185][ T31] do_syscall_64+0xfa/0x3b0 [ 547.864909][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.870987][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.877358][ T31] ? clear_bhb_loop+0x60/0xb0 [ 547.882052][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.888033][ T31] RIP: 0033:0x7ffbefca7407 [ 547.892601][ T31] RSP: 002b:00007fffa7bf7cc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 547.901023][ T31] RAX: ffffffffffffffda RBX: 00007ffbf03e0880 RCX: 00007ffbefca7407 [ 547.909325][ T31] RDX: 00000000000a0800 RSI: 000055a9b68f14f0 RDI: ffffffffffffff9c [ 547.917516][ T31] RBP: 000055a9b68d0910 R08: 0000000000000000 R09: 0000000000000000 [ 547.925608][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a9b68edf10 [ 547.933693][ T31] R13: 000055a9b68de190 R14: 0000000000000000 R15: 000055a9b68edf10 [ 547.941668][ T31] [ 547.944821][ T31] INFO: task syz-executor:17196 blocked for more than 144 seconds. [ 547.952887][ T31] Not tainted syzkaller #0 [ 547.957849][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.966741][ T31] task:syz-executor state:D stack:21032 pid:17196 tgid:17196 ppid:1 task_flags:0x400140 flags:0x00004004 [ 547.978920][ T31] Call Trace: [ 547.982205][ T31] [ 547.985354][ T31] __schedule+0x1798/0x4cc0 [ 547.989889][ T31] ? __lock_acquire+0xab9/0xd20 [ 547.994966][ T31] ? __lock_acquire+0xab9/0xd20 [ 548.000006][ T31] ? __pfx___schedule+0x10/0x10 [ 548.004969][ T31] ? schedule+0x91/0x360 [ 548.009221][ T31] schedule+0x165/0x360 [ 548.013509][ T31] schedule_preempt_disabled+0x13/0x30 [ 548.018975][ T31] __mutex_lock+0x7e6/0x1350 [ 548.023634][ T31] ? __mutex_lock+0x5bb/0x1350 [ 548.028429][ T31] ? rfkill_fop_open+0x12d/0x820 [ 548.033520][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 548.038563][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 548.043942][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 548.049323][ T31] rfkill_fop_open+0x12d/0x820 [ 548.054254][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 548.059573][ T31] misc_open+0x2bc/0x330 [ 548.064156][ T31] chrdev_open+0x4cc/0x5e0 [ 548.068602][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 548.073680][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 548.080026][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 548.085199][ T31] do_dentry_open+0x953/0x13f0 [ 548.089993][ T31] vfs_open+0x3b/0x340 [ 548.094182][ T31] ? path_openat+0x2ecd/0x3830 [ 548.098957][ T31] path_openat+0x2ee5/0x3830 [ 548.103625][ T31] ? arch_stack_walk+0xfc/0x150 [ 548.108495][ T31] ? stack_depot_save_flags+0x40/0x860 [ 548.114104][ T31] ? __pfx_path_openat+0x10/0x10 [ 548.119057][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.125315][ T31] do_filp_open+0x1fa/0x410 [ 548.129839][ T31] ? __lock_acquire+0xab9/0xd20 [ 548.134842][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 548.139889][ T31] ? _raw_spin_unlock+0x28/0x50 [ 548.144865][ T31] ? alloc_fd+0x64c/0x6c0 [ 548.149211][ T31] do_sys_openat2+0x121/0x1c0 [ 548.154074][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 548.159276][ T31] ? fput_close_sync+0x119/0x200 [ 548.164286][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 548.169600][ T31] __x64_sys_openat+0x138/0x170 [ 548.174705][ T31] do_syscall_64+0xfa/0x3b0 [ 548.179252][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.185416][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 548.191586][ T31] ? clear_bhb_loop+0x60/0xb0 [ 548.196516][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.202492][ T31] RIP: 0033:0x7fe148d8d510 [ 548.206912][ T31] RSP: 002b:00007ffe61daed60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 548.215465][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe148d8d510 [ 548.223671][ T31] RDX: 0000000000000002 RSI: 00007fe148e128cd RDI: 00000000ffffff9c [ 548.231661][ T31] RBP: 00007fe148e128cd R08: 0000000000000000 R09: 0000000000000000 [ 548.239762][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 548.247891][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 548.256120][ T31] [ 548.259191][ T31] INFO: task syz.4.3065:17254 blocked for more than 144 seconds. [ 548.267107][ T31] Not tainted syzkaller #0 [ 548.272080][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.280912][ T31] task:syz.4.3065 state:D stack:25096 pid:17254 tgid:17254 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 548.292988][ T31] Call Trace: [ 548.296260][ T31] [ 548.299178][ T31] __schedule+0x1798/0x4cc0 [ 548.304194][ T31] ? __lock_acquire+0xab9/0xd20 [ 548.309157][ T31] ? __lock_acquire+0xab9/0xd20 [ 548.314152][ T31] ? __pfx___schedule+0x10/0x10 [ 548.319031][ T31] ? schedule+0x91/0x360 [ 548.323338][ T31] schedule+0x165/0x360 [ 548.327534][ T31] schedule_preempt_disabled+0x13/0x30 [ 548.333160][ T31] __mutex_lock+0x7e6/0x1350 [ 548.337770][ T31] ? __mutex_lock+0x5bb/0x1350 [ 548.342585][ T31] ? rfkill_unregister+0xc8/0x220 [ 548.347708][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 548.352873][ T31] ? __pfx_device_del+0x10/0x10 [ 548.357741][ T31] rfkill_unregister+0xc8/0x220 [ 548.362631][ T31] nfc_unregister_device+0x96/0x2a0 [ 548.367843][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 548.373666][ T31] virtual_ncidev_close+0x56/0x90 [ 548.378681][ T31] __fput+0x449/0xa70 [ 548.382764][ T31] task_work_run+0x1d1/0x260 [ 548.387368][ T31] ? __pfx_task_work_run+0x10/0x10 [ 548.392626][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 548.398129][ T31] exit_to_user_mode_loop+0xec/0x110 [ 548.403465][ T31] do_syscall_64+0x2bd/0x3b0 [ 548.408061][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.414395][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 548.420562][ T31] ? clear_bhb_loop+0x60/0xb0 [ 548.425403][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.431306][ T31] RIP: 0033:0x7fc0c6d8eba9 [ 548.435886][ T31] RSP: 002b:00007ffe15ce5d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 548.444353][ T31] RAX: 0000000000000000 RBX: 00007fc0c6fd7da0 RCX: 00007fc0c6d8eba9 [ 548.452486][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 548.460470][ T31] RBP: 00007fc0c6fd7da0 R08: 0000000000000208 R09: 0000001d15ce602f [ 548.468738][ T31] R10: 00007fc0c6fd7cb0 R11: 0000000000000246 R12: 0000000000060176 [ 548.477974][ T31] R13: 00007fc0c6fd5fa0 R14: ffffffffffffffff R15: 00007ffe15ce5e50 [ 548.486066][ T31] [ 548.489124][ T31] INFO: task syz.0.3070:17281 blocked for more than 144 seconds. [ 548.497039][ T31] Not tainted syzkaller #0 [ 548.501998][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.510759][ T31] task:syz.0.3070 state:D stack:25224 pid:17281 tgid:17280 ppid:5867 task_flags:0x400140 flags:0x00004006 [ 548.522917][ T31] Call Trace: [ 548.526197][ T31] [ 548.529215][ T31] __schedule+0x1798/0x4cc0 [ 548.533852][ T31] ? __lock_acquire+0xab9/0xd20 [ 548.538744][ T31] ? __lock_acquire+0xab9/0xd20 [ 548.543757][ T31] ? __pfx___schedule+0x10/0x10 [ 548.548610][ T31] ? schedule+0x91/0x360 [ 548.552923][ T31] schedule+0x165/0x360 [ 548.557085][ T31] schedule_preempt_disabled+0x13/0x30 [ 548.562735][ T31] __mutex_lock+0x7e6/0x1350 [ 548.567353][ T31] ? __mutex_lock+0x5bb/0x1350 [ 548.572141][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 548.577493][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 548.582909][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.588285][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 548.594372][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 548.600726][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 548.606602][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 548.611725][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 548.617509][ T31] rfkill_set_block+0x1d2/0x440 [ 548.623128][ T31] rfkill_fop_write+0x44b/0x570 [ 548.628010][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 548.633642][ T31] ? security_file_permission+0x40/0x290 [ 548.639294][ T31] ? rw_verify_area+0x255/0x4d0 [ 548.644258][ T31] ? __lock_acquire+0xab9/0xd20 [ 548.649118][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 548.654580][ T31] vfs_write+0x27b/0xb30 [ 548.658840][ T31] ? __pfx_vfs_write+0x10/0x10 [ 548.663741][ T31] ? __fget_files+0x2a/0x420 [ 548.668343][ T31] ? __fget_files+0x2a/0x420 [ 548.672975][ T31] ? __fget_files+0x3a0/0x420 [ 548.677651][ T31] ? __fget_files+0x2a/0x420 [ 548.682242][ T31] ksys_write+0x145/0x250 [ 548.686743][ T31] ? __pfx_ksys_write+0x10/0x10 [ 548.691612][ T31] ? rcu_is_watching+0x15/0xb0 [ 548.696426][ T31] ? do_syscall_64+0xbe/0x3b0 [ 548.701110][ T31] do_syscall_64+0xfa/0x3b0 [ 548.705741][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.710968][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.717078][ T31] ? clear_bhb_loop+0x60/0xb0 [ 548.721743][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.727749][ T31] RIP: 0033:0x7f494a78eba9 [ 548.732170][ T31] RSP: 002b:00007f494b6bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 548.740617][ T31] RAX: ffffffffffffffda RBX: 00007f494a9d5fa0 RCX: 00007f494a78eba9 [ 548.748783][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 548.756984][ T31] RBP: 00007f494a811e19 R08: 0000000000000000 R09: 0000000000000000 [ 548.765211][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.773307][ T31] R13: 00007f494a9d6038 R14: 00007f494a9d5fa0 R15: 00007ffd4224d788 [ 548.781301][ T31] [ 548.784502][ T31] INFO: task syz.1.3107:17416 blocked for more than 145 seconds. [ 548.792260][ T31] Not tainted syzkaller #0 [ 548.797295][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.806150][ T31] task:syz.1.3107 state:D stack:25320 pid:17416 tgid:17415 ppid:16707 task_flags:0x400140 flags:0x00004004 [ 548.818163][ T31] Call Trace: [ 548.821553][ T31] [ 548.824628][ T31] __schedule+0x1798/0x4cc0 [ 548.829153][ T31] ? kasan_save_free_info+0x46/0x50 [ 548.834457][ T31] ? __lock_acquire+0xab9/0xd20 [ 548.839339][ T31] ? __lock_acquire+0xab9/0xd20 [ 548.844343][ T31] ? __pfx___schedule+0x10/0x10 [ 548.849224][ T31] ? schedule+0x91/0x360 [ 548.854275][ T31] schedule+0x165/0x360 [ 548.858454][ T31] schedule_preempt_disabled+0x13/0x30 [ 548.864490][ T31] __mutex_lock+0x7e6/0x1350 [ 548.869155][ T31] ? __mutex_lock+0x5bb/0x1350 [ 548.874209][ T31] ? misc_open+0x51/0x330 [ 548.878578][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 548.883803][ T31] misc_open+0x51/0x330 [ 548.887976][ T31] chrdev_open+0x4cc/0x5e0 [ 548.892714][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 548.897782][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 548.904580][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 548.909566][ T31] do_dentry_open+0x953/0x13f0 [ 548.914410][ T31] vfs_open+0x3b/0x340 [ 548.918499][ T31] ? path_openat+0x2ecd/0x3830 [ 548.923671][ T31] path_openat+0x2ee5/0x3830 [ 548.928277][ T31] ? arch_stack_walk+0xfc/0x150 [ 548.933225][ T31] ? stack_depot_save_flags+0x40/0x860 [ 548.938802][ T31] ? __pfx_path_openat+0x10/0x10 [ 548.944108][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.950191][ T31] do_filp_open+0x1fa/0x410 [ 548.955149][ T31] ? __lock_acquire+0xab9/0xd20 [ 548.960033][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 548.965188][ T31] ? _raw_spin_unlock+0x28/0x50 [ 548.970081][ T31] ? alloc_fd+0x64c/0x6c0 [ 548.974790][ T31] do_sys_openat2+0x121/0x1c0 [ 548.979487][ T31] ? __se_sys_futex+0x36f/0x400 [ 548.984816][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 548.990045][ T31] ? rcu_is_watching+0x15/0xb0 [ 548.994968][ T31] __x64_sys_openat+0x138/0x170 [ 548.999885][ T31] do_syscall_64+0xfa/0x3b0 [ 549.004590][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.009803][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.016232][ T31] ? clear_bhb_loop+0x60/0xb0 [ 549.020939][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.027154][ T31] RIP: 0033:0x7fd08f18eba9 [ 549.031576][ T31] RSP: 002b:00007fd08ff8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 549.040166][ T31] RAX: ffffffffffffffda RBX: 00007fd08f3d5fa0 RCX: 00007fd08f18eba9 [ 549.048279][ T31] RDX: 0000000000020702 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 549.056333][ T31] RBP: 00007fd08f211e19 R08: 0000000000000000 R09: 0000000000000000 [ 549.064480][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.073099][ T31] R13: 00007fd08f3d6038 R14: 00007fd08f3d5fa0 R15: 00007fff3b9e1ac8 [ 549.081624][ T31] [ 549.084775][ T31] INFO: task syz.3.3108:17421 blocked for more than 145 seconds. [ 549.092627][ T31] Not tainted syzkaller #0 [ 549.097572][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.106517][ T31] task:syz.3.3108 state:D stack:28328 pid:17421 tgid:17419 ppid:16117 task_flags:0x400040 flags:0x00004004 [ 549.118687][ T31] Call Trace: [ 549.121984][ T31] [ 549.124995][ T31] __schedule+0x1798/0x4cc0 [ 549.129555][ T31] ? kasan_save_free_info+0x46/0x50 [ 549.134903][ T31] ? __lock_acquire+0xab9/0xd20 [ 549.139774][ T31] ? __lock_acquire+0xab9/0xd20 [ 549.144977][ T31] ? __pfx___schedule+0x10/0x10 [ 549.149848][ T31] ? schedule+0x91/0x360 [ 549.154205][ T31] schedule+0x165/0x360 [ 549.158369][ T31] schedule_preempt_disabled+0x13/0x30 [ 549.163895][ T31] __mutex_lock+0x7e6/0x1350 [ 549.168491][ T31] ? __mutex_lock+0x5bb/0x1350 [ 549.173389][ T31] ? misc_open+0x51/0x330 [ 549.177738][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 549.183125][ T31] misc_open+0x51/0x330 [ 549.187307][ T31] chrdev_open+0x4cc/0x5e0 [ 549.191711][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 549.196758][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 549.203179][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 549.208153][ T31] do_dentry_open+0x953/0x13f0 [ 549.213077][ T31] vfs_open+0x3b/0x340 [ 549.217160][ T31] ? path_openat+0x2ecd/0x3830 [ 549.221959][ T31] path_openat+0x2ee5/0x3830 [ 549.226755][ T31] ? arch_stack_walk+0xfc/0x150 [ 549.231623][ T31] ? stack_depot_save_flags+0x40/0x860 [ 549.237220][ T31] ? __pfx_path_openat+0x10/0x10 [ 549.242192][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.248354][ T31] do_filp_open+0x1fa/0x410 [ 549.252970][ T31] ? __lock_acquire+0xab9/0xd20 [ 549.257846][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 549.263204][ T31] ? _raw_spin_unlock+0x28/0x50 [ 549.268073][ T31] ? alloc_fd+0x64c/0x6c0 [ 549.272548][ T31] do_sys_openat2+0x121/0x1c0 [ 549.277247][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 549.282520][ T31] ? exc_page_fault+0x76/0xf0 [ 549.287217][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 549.292813][ T31] __x64_sys_openat+0x138/0x170 [ 549.297727][ T31] do_syscall_64+0xfa/0x3b0 [ 549.302244][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.307583][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.313749][ T31] ? clear_bhb_loop+0x60/0xb0 [ 549.318416][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.324384][ T31] RIP: 0033:0x7fca8ad8eba9 [ 549.328800][ T31] RSP: 002b:00007fca8bbc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 549.337397][ T31] RAX: ffffffffffffffda RBX: 00007fca8afd5fa0 RCX: 00007fca8ad8eba9 [ 549.346138][ T31] RDX: 0000000000004000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 549.356165][ T31] RBP: 00007fca8ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 549.364202][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.372179][ T31] R13: 00007fca8afd6038 R14: 00007fca8afd5fa0 R15: 00007ffe917fa748 [ 549.380355][ T31] [ 549.383788][ T31] [ 549.383788][ T31] Showing all locks held in the system: [ 549.391515][ T31] 1 lock held by khungtaskd/31: [ 549.396470][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 549.406692][ T31] 4 locks held by kworker/u8:2/36: [ 549.411900][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 549.423193][ T31] #1: ffffc90000ac7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 549.433842][ T31] #2: ffffffff8f52d0d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 549.443291][ T31] #3: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 549.453703][ T31] 2 locks held by kworker/u8:3/49: [ 549.458815][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 549.468978][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 549.477968][ T31] 2 locks held by getty/5627: [ 549.482968][ T31] #0: ffff88814e1b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 549.492894][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 549.503126][ T31] 3 locks held by kworker/0:3/5873: [ 549.508327][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 549.519629][ T31] #1: ffffc9000409fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 549.533260][ T31] #2: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 549.545316][ T31] 1 lock held by udevd/6017: [ 549.549922][ T31] #0: ffff888024b7e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 549.559263][ T31] 2 locks held by syz-executor/17196: [ 549.564673][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.573767][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 549.587558][ T31] 2 locks held by syz.4.3065/17254: [ 549.594027][ T31] #0: ffff888058758100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 549.604041][ T31] #1: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 549.614308][ T31] 2 locks held by syz.0.3070/17281: [ 549.619500][ T31] #0: ffffffff8f813dc8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 549.630241][ T31] #1: ffff888058758100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 549.640043][ T31] 1 lock held by syz.1.3107/17416: [ 549.645209][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.653820][ T31] 1 lock held by syz.3.3108/17421: [ 549.658933][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.668082][ T31] 1 lock held by syz-executor/17427: [ 549.673935][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.682488][ T31] 1 lock held by syz-executor/17428: [ 549.687805][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.696658][ T31] 1 lock held by syz-executor/17431: [ 549.701945][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.710788][ T31] 1 lock held by syz-executor/17432: [ 549.716201][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.724859][ T31] 1 lock held by syz-executor/17434: [ 549.730154][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.739234][ T31] 1 lock held by syz-executor/17437: [ 549.744654][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.753181][ T31] 1 lock held by syz-executor/17438: [ 549.758464][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.767207][ T31] 1 lock held by syz-executor/17441: [ 549.772598][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.781081][ T31] 1 lock held by syz-executor/17442: [ 549.786739][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.795848][ T31] 1 lock held by syz-executor/17445: [ 549.801139][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.809654][ T31] 1 lock held by syz-executor/17448: [ 549.814969][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.824351][ T31] 1 lock held by syz-executor/17449: [ 549.829643][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.838237][ T31] 1 lock held by syz-executor/17452: [ 549.843644][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.852130][ T31] 1 lock held by syz-executor/17453: [ 549.857675][ T31] #0: ffffffff8e9c2588 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 549.866348][ T31] [ 549.868675][ T31] ============================================= [ 549.868675][ T31] [ 549.877143][ T31] NMI backtrace for cpu 1 [ 549.877166][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 549.877183][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.877192][ T31] Call Trace: [ 549.877199][ T31] [ 549.877206][ T31] dump_stack_lvl+0x189/0x250 [ 549.877233][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.877253][ T31] ? __pfx__printk+0x10/0x10 [ 549.877288][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 549.877316][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 549.877342][ T31] ? __pfx__printk+0x10/0x10 [ 549.877370][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 549.877402][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 549.877430][ T31] watchdog+0xf93/0xfe0 [ 549.877460][ T31] ? watchdog+0x1de/0xfe0 [ 549.877491][ T31] kthread+0x70e/0x8a0 [ 549.877517][ T31] ? __pfx_watchdog+0x10/0x10 [ 549.877541][ T31] ? __pfx_kthread+0x10/0x10 [ 549.877565][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 549.877593][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.877611][ T31] ? __pfx_kthread+0x10/0x10 [ 549.877636][ T31] ret_from_fork+0x436/0x7d0 [ 549.877659][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 549.877685][ T31] ? __switch_to_asm+0x39/0x70 [ 549.877708][ T31] ? __switch_to_asm+0x33/0x70 [ 549.877732][ T31] ? __pfx_kthread+0x10/0x10 [ 549.877756][ T31] ret_from_fork_asm+0x1a/0x30 [ 549.877795][ T31] [ 549.877802][ T31] Sending NMI from CPU 1 to CPUs 0: [ 550.025062][ C0] NMI backtrace for cpu 0 [ 550.025081][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 550.025100][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 550.025112][ C0] Workqueue: bat_events batadv_nc_worker [ 550.025142][ C0] RIP: 0010:__lock_acquire+0x50c/0xd20 [ 550.025163][ C0] Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 64 fd 0a 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 10 73 49 93 eb 40 83 3d cb 8c [ 550.025178][ C0] RSP: 0018:ffffc900001278f0 EFLAGS: 00000003 [ 550.025193][ C0] RAX: 0000000000000773 RBX: 0000000000000001 RCX: 0000000000000002 [ 550.025204][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88801ce98000 [ 550.025215][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b47b612 [ 550.025226][ C0] R10: dffffc0000000000 R11: ffffffff8b47b540 R12: 00000000ffffff05 [ 550.025238][ C0] R13: 0000000000000001 R14: ffff88801ce98b40 R15: ffff88801ce98b38 [ 550.025250][ C0] FS: 0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 550.025265][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.025277][ C0] CR2: 000056101e2424d8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 550.025292][ C0] Call Trace: [ 550.025298][ C0] [ 550.025309][ C0] ? batadv_nc_worker+0xd2/0x610 [ 550.025332][ C0] lock_acquire+0x120/0x360 [ 550.025355][ C0] ? batadv_nc_worker+0xd2/0x610 [ 550.025387][ C0] ? batadv_nc_worker+0xd2/0x610 [ 550.025411][ C0] ? batadv_nc_worker+0xd2/0x610 [ 550.025434][ C0] batadv_nc_worker+0xef/0x610 [ 550.025458][ C0] ? batadv_nc_worker+0xd2/0x610 [ 550.025482][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 550.025501][ C0] process_scheduled_works+0xae1/0x17b0 [ 550.025528][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.025551][ C0] worker_thread+0x8a0/0xda0 [ 550.025578][ C0] kthread+0x70e/0x8a0 [ 550.025600][ C0] ? __pfx_worker_thread+0x10/0x10 [ 550.025616][ C0] ? __pfx_kthread+0x10/0x10 [ 550.025637][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 550.025662][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.025677][ C0] ? __pfx_kthread+0x10/0x10 [ 550.025698][ C0] ret_from_fork+0x436/0x7d0 [ 550.025717][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 550.025736][ C0] ? __switch_to_asm+0x39/0x70 [ 550.025758][ C0] ? __switch_to_asm+0x33/0x70 [ 550.025779][ C0] ? __pfx_kthread+0x10/0x10 [ 550.025799][ C0] ret_from_fork_asm+0x1a/0x30 [ 550.025827][ C0] [ 550.026563][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 550.279931][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 550.289032][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 550.299075][ T31] Call Trace: [ 550.302350][ T31] [ 550.305270][ T31] dump_stack_lvl+0x99/0x250 [ 550.309854][ T31] ? __asan_memcpy+0x40/0x70 [ 550.314435][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.319631][ T31] ? __pfx__printk+0x10/0x10 [ 550.324225][ T31] vpanic+0x281/0x750 [ 550.328202][ T31] ? __pfx_vpanic+0x10/0x10 [ 550.332690][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 550.338233][ T31] ? preempt_schedule+0xae/0xc0 [ 550.343108][ T31] ? preempt_schedule_common+0x83/0xd0 [ 550.348615][ T31] panic+0xb9/0xc0 [ 550.352332][ T31] ? __pfx_panic+0x10/0x10 [ 550.356745][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 550.362116][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 550.368268][ T31] watchdog+0xfd2/0xfe0 [ 550.372423][ T31] ? watchdog+0x1de/0xfe0 [ 550.376751][ T31] kthread+0x70e/0x8a0 [ 550.380814][ T31] ? __pfx_watchdog+0x10/0x10 [ 550.385657][ T31] ? __pfx_kthread+0x10/0x10 [ 550.390241][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 550.395433][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.400615][ T31] ? __pfx_kthread+0x10/0x10 [ 550.405200][ T31] ret_from_fork+0x436/0x7d0 [ 550.409784][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 550.414892][ T31] ? __switch_to_asm+0x39/0x70 [ 550.419645][ T31] ? __switch_to_asm+0x33/0x70 [ 550.424397][ T31] ? __pfx_kthread+0x10/0x10 [ 550.428979][ T31] ret_from_fork_asm+0x1a/0x30 [ 550.433745][ T31] [ 550.437131][ T31] Kernel Offset: disabled [ 550.441461][ T31] Rebooting in 86400 seconds..