last executing test programs: 28.311990361s ago: executing program 3 (id=2485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x800, 0x70bd29, 0x0, {0x29}, [@ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 28.281349957s ago: executing program 3 (id=2487): r0 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x50cc40663fcd8d98}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x50cc40663fcd8d98}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x228, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2fb4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6ea}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff1a5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x94b}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa89f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}}}}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x121a575f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x40010}, 0x40) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x228, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2fb4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6ea}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff1a5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x94b}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa89f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}}}}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x121a575f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x40010}, 0x40) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000180)={&(0x7f0000000080)="3440eb6214ff07e4a7bfe38273b7b780ab27b0140b8860562b75a526a49234881db6f394b4dd0fd6eaa23d464e8acef6714eae3613e98fe3ce1f106a93155bad73b06d85ed77fdca252e4f2ac2282fd07f6f5465fb0d0b617325772867a14d398db3769f2552fb4b899d9355f02b90824e676e649ba26aa35987b7df327cdd16a2bfa24b9bf787445288875fe770ecf9475593b1b6895db764a20492a2267254453d185567d768aeae93477fc9a3f38cd8bd05fcbcb92603d71d2817d838d34ec2ca9bbddbf880c43cb8ff708b17281fb519ba2d67d6dd2fadeafe275ea21364ec24c5c3802db35db9e4b912e00338d2dd3065f6", 0xf4}, 0x1, 0x0, 0x0, 0x40040c1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$l2tp(0x2, 0x2, 0x73) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000680)={r3, 0xd, 0x4, 0x2}) 28.254824396s ago: executing program 3 (id=2491): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x11, 0x6, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r5, 0x50) sendmsg$inet(r5, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYRESOCT=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x40080b1}, 0x0) 27.413800457s ago: executing program 3 (id=2508): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) 27.080813566s ago: executing program 3 (id=2513): recvfrom(0xffffffffffffffff, &(0x7f0000001240)=""/4096, 0x1000, 0x40000020, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @local, 'veth1_to_hsr\x00'}}, 0x80) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x3, 'team_slave_0\x00', {0x1000}, 0xa7}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x700}]}}]}, 0x48}}, 0x0) 26.944629032s ago: executing program 0 (id=2517): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000100000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000004000000ffffff000000000004015745021f9b9b6244239306a687a542000000feffffffffffffff000000000000000000000000000000000000000000000000090000000000000000b90200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x1c080) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 26.888602911s ago: executing program 3 (id=2518): socket(0x11, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000480)="a37508bc837681f114fd6a0d1a8135ea1034721c2e203d9e1ba9725c8e6f1d54c7cf96e3f1a145e551a0ec3fbf8d25a497a601f2dcd535e2f193a8222ddf97615f2e9ce43da9079ae70208533f5f2b96d4f9dc561e9da7d80422fd8c1c73fd6165c1332f9c82d7b97e8ed603b7436e301f96133ac1c80e9eb524bd4d58ab2f8306633f75b02f4fcd8b69158adcf4d5745576fa59efe6d95f0b2ad26c4cf92164ad073a568f98ab550b3f110a8ab69fe78f24e523b2eee7261b90b58096b5447fd761857f3cbaa9d23bda0598d7556dd24419b611d0bf2e0200aef69ebd93d281492e9904ca7dffc7b1cd571451ba56db4cdbda4b6eee36c6ed1178a4e8e141e6ba5a27887e6a534ec0424f8f27cbbe242116e6afc5d2e6a625c2e16c8e6147b836f70095530a89892f6afa88b67dadd089e1", 0x132, 0x20040000, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0xfffffffffffffe18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x32, 0x2, 0x0, 0x0, "740d1bceec5c177e0344c70d86e4bd1bb2bb93de75e45a4e74f3a3f94fbb7ac99711b1d93cf002f598bdfddf8a74cd9a4879539a6593f29b884852ad6ba69664"}}, 0x80}}, 0x40090) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) unshare(0x28000600) r9 = socket(0x10, 0x3, 0x0) preadv(r9, 0x0, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="610304080106789b21db02060912c90e1aba6bad8a1932148548fcee"], 0x1c) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2d7f3b232df5f93b}, 0xc) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYRES8=r1], 0x3c}}, 0x0) 26.81844844s ago: executing program 0 (id=2520): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcffffff4f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000000000006001100010000006e1cef41469583de0e9f508a36caa383e426b93f2564909566e756c32ce8204aa46b574e4d0238f7c538f3ed6d115b9934cd751d"], 0x4c}}, 0x20000011) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240)={0xf7, 0x9, 0x5, 0x80, 0x0, 0x3, 0xd, 0x4, 0x0, 0x5, 0x3, 0x6, 0x81, 0x8}, 0xe) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000000c0), 0x4) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0x401) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="dd14", 0x2}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="20000000000000008400000008000000ff01000000000000fa221ae2558a26c61a4000000000000000011800000000000000840000000000"], 0x38}], 0x1, 0x0) listen(r4, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) bind$l2tp6(r3, &(0x7f0000000380)={0xa, 0x0, 0x5, @private2, 0x6, 0x1}, 0x20) shutdown(r4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000010f995d5344e3f4a31e0182138e49024ea118000626f6e64000000000b002417000000000000000000000000000042caef28909e25b7b22330617235fbbd0d8aebcd4d9a93b366acda8d20d40c657dc3301a2573ab68e09c0e0f29c7d9fe340282bd8be11074ad6ec7eb40a40167502b262ab97b493be766bc723386de5e174adb758cda61456f156e91000000"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 26.634123177s ago: executing program 0 (id=2524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f0000059c3700c105d0000000002000000000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000aa56681faaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 26.579874924s ago: executing program 0 (id=2525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fecf75e3c02abdb1480000001000090c08000000", @ANYRES32=0x0, @ANYBLOB="810005000086040028001280d3fe01006272696467650000180002800c002300000000001000000005002a000100000000001a0010000000"], 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x22f0}, 0x1, 0x0, 0x0, 0x44008}, 0x48000) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000002700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000002580)={0x15c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "f443fabedf1cf6f1c25476abbd870bde0e5cecb7c0c5742f815b43e8cbe44aae"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x96}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x48c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x11}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x20048014) 26.423387883s ago: executing program 0 (id=2526): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r3, 0xffff, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x9a6b}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x9a6b}, &(0x7f0000000080)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) 26.2923717s ago: executing program 0 (id=2527): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x6a}, @call={0x85, 0x0, 0x0, 0x35}]}, &(0x7f0000000100)='GPL\x00', 0xa8000000, 0x3e, &(0x7f0000000140)=""/62, 0x41100, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x10, 0x6, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000280)=[{0x4, 0x4, 0xe, 0x3}, {0x5, 0x5, 0x9, 0xb}, {0x2, 0x1, 0xc, 0x2}, {0x5, 0x3, 0x1, 0xa}], 0x10, 0x3}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000380)) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) sendto$inet(r1, &(0x7f0000000440)='!', 0x1, 0x4048845, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) 25.300228668s ago: executing program 1 (id=2534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x1e, 0xffffffffffffffff, &(0x7f0000000000)) (async) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 25.172383868s ago: executing program 1 (id=2535): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x1f, 0x0, 0x1, 0x20, 0x6, @local}, 0x14) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = accept$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x380e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2c1e2082c92b3658993aaed890e3980379db937fc9a1e05540ab6a73ab02c16c4dae076a7a4d0e4b986bdb10ee529074f12ce5e49f1d682c", 0x38}], 0x1) 25.080703581s ago: executing program 1 (id=2536): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x12, 0x4000ffc, 0x54}, 0x2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r2}, 0x14) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 24.907793848s ago: executing program 1 (id=2539): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000002c0)=""/54, &(0x7f0000000380)=0x36) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x88, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008080}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r4, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x12, 0x4e}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44000084) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002200010a"], 0x20}}, 0x0) 24.87376667s ago: executing program 1 (id=2541): r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x206}]}, &(0x7f0000000100)=0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x34, 0x0, &(0x7f0000000040)=0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 23.984731217s ago: executing program 1 (id=2550): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x240040c0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@un=@abs, &(0x7f0000000180)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001700010029bdf000fcdbdf25090000df"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001700010029bdf000fcdbdf25090000df"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) connect$nfc_llcp(r5, &(0x7f0000000280)={0x27, r7, 0x0, 0x7, 0x7, 0x6, "f30238760135d77a9237b9f4c889dc5da48c140fb9a1d18e3222e99847068fbaa2a1cb5bfe5ba11e5205489a9782901fc07b815eee38ff6431446213cf525f", 0x39}, 0x60) sendto$inet6(r4, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000140)={0xa, 0x4e1c, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000001840), 0x4) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f0000000000)=""/224, &(0x7f0000000100)=0xe0) (async) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f0000000000)=""/224, &(0x7f0000000100)=0xe0) socket(0x2d, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 22.969668358s ago: executing program 4 (id=2555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000140)=@raw=[@ringbuf_query, @map_fd={0x18, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffff801}, @jmp={0x5, 0x1, 0x6, 0x3, 0x3, 0xfffffffffffffffc, 0x4}, @call={0x85, 0x0, 0x0, 0xc5}], &(0x7f00000000c0)='GPL\x00', 0x7, 0xb0, &(0x7f0000000200)=""/176, 0x40f00, 0x72, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x9, 0x81, 0x2304}, 0x10, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000380)=[{0x0, 0x5, 0x0, 0x5}, {0x4, 0x4, 0xe, 0x8}, {0x4, 0x1, 0x7, 0x9}, {0x1, 0x3, 0x9, 0x2}, {0x5, 0x4, 0xe, 0x1}, {0x2, 0x5, 0x5, 0xc}, {0x5, 0x3, 0x5, 0x4}, {0x2, 0x4, 0xb, 0x6}, {0x5, 0x4, 0x9, 0x2}, {0x2, 0x1, 0xd}], 0x10, 0x4}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000002a00000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x18, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x98}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @generic={0x4, 0x3, 0xe, 0x7, 0x6}, @ldst={0x3, 0x3, 0x3, 0xb, 0x5, 0x50}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x72, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001640)={0x5, 0xb, 0xfff, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001680)=[0x1, 0xffffffffffffffff], &(0x7f00000016c0)=[{0x2, 0x2, 0x6, 0x9}, {0x3, 0x4, 0xe, 0x3}, {0x4, 0x1, 0x8, 0x8}, {0x1, 0x2, 0xf, 0x8}, {0x3, 0x4, 0xb, 0x8}, {0x0, 0x3, 0x5, 0x7}, {0x5, 0x1, 0x2, 0x5}, {0x5, 0x2, 0xe, 0x1}, {0x3, 0x4, 0x5, 0xc}], 0x10, 0xfffffff7}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=@newlink={0xe0, 0x10, 0x49920d862a92153b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}, @IFLA_MAP={0x24, 0xe, {0x800, 0xfffffffffffffffc, 0x7, 0x1, 0x9, 0xd}}, @IFLA_LINKMODE={0x5, 0x11, 0x3}, @IFLA_MAP={0x24, 0xe, {0xfffffbfffffffff7, 0x7, 0x0, 0xcfd, 0x2}}, @IFLA_PHYS_PORT_ID={0x1e, 0x22, "84939cce6de56988d1062088955cf3734017d8445abeb1cd417d"}, @IFLA_IFALIASn={0x4}]}, 0xe0}}, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @remote, 0x6}, 0x1c) 22.880712713s ago: executing program 4 (id=2556): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8) shutdown(r3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x260, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1c8, 0x206, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0x1ba, 0x410}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x8d, 0x7fff, 0x1, 'snmp_trap\x00', 'syz1\x00', {0xfff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) bind$ax25(r3, &(0x7f0000000140)={{0x3, @null, 0x3}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRESOCT=r1], 0x4c}}, 0x0) 22.876638766s ago: executing program 4 (id=2557): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'macvlan1\x00', {0xb}}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x190, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x29, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x93, 0x6, 'netbios-ns\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) 22.824669306s ago: executing program 4 (id=2558): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@ipv4_deladdr={0x28, 0x15, 0x1, 0x70bd2c, 0x25dfdbfe, {0x2, 0x38, 0x84, 0xc8, r1}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x28}}, 0x0) 22.736630146s ago: executing program 4 (id=2559): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) (async, rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) (rerun: 32) sendmsg$netlink(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20, 0x50}, 0x40880) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x110, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xff, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @nested={0x10, 0x33, 0x0, 0x1, [@nested={0xc, 0xd1, 0x0, 0x1, [@typed={0x8, 0x12d, 0x0, 0x0, @uid=r3}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}, @generic]}, 0x110}], 0x1, 0x0, 0x0, 0x1}, 0x44800) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 20.900016687s ago: executing program 4 (id=2563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x15, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6}]}) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x80800000, 0x9, 0x100000000}) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x1407, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004851}, 0x20040004) 16.216031174s ago: executing program 2 (id=2594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)=ANY=[@ANYBLOB='..', @ANYRES16=r0]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x300, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x300, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000003c0)=0x5, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000140e9ff00010500030000000000080002400000000d0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r9}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r9}, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="0300008578e12a44236609fb31afc0cad6b978b975ad01a9a782d4cc228c266c1e204f36269d5f1f4296401bd870da2d8f3ebbca06481ea1", @ANYRES16=r2, @ANYBLOB="010028bd700001dcdf2505000000050007000200000008000380040001000500060008000000080009000000000008000500030000000800050062000000"], 0x44}}, 0x40) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="0300008578e12a44236609fb31afc0cad6b978b975ad01a9a782d4cc228c266c1e204f36269d5f1f4296401bd870da2d8f3ebbca06481ea1", @ANYRES16=r2, @ANYBLOB="010028bd700001dcdf2505000000050007000200000008000380040001000500060008000000080009000000000008000500030000000800050062000000"], 0x44}}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xc, 0x8, 0x3}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r10, &(0x7f00000000c0), &(0x7f0000000000)=@udp6=r11}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r10, &(0x7f00000000c0), &(0x7f0000000000)=@udp6=r11}, 0x20) recvmmsg(r11, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/8, 0x8}], 0x1}}], 0x2, 0x10001, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000004c0)=0x2, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x9d4, 0x40, 0x107, 0xfffffffe, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x14, 0x80, 0x0, 0x0, @ipv6=@private1}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9a0, 0x136, 0x0, 0x1, [@nested={0x99c, 0x34, 0x0, 0x1, [@nested={0x998, 0x16, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4888}, @typed={0x8, 0x38, 0x0, 0x0, @fd}, @typed={0x8, 0x13a, 0x0, 0x0, @u32=0x2}, @nested={0x23a, 0xec, 0x0, 0x1, [@typed={0xb, 0xff, 0x0, 0x0, @str='target\x00'}, @generic="b6122fcb2f5501e90d5fbb395320ecb06254bf570c51ab7b49ad24153231082129cfd9dcddb4c5c397466c8f6d2a793a8e6cd63609d73d3689e783488ba6ab5ea33c801e629ebd2e63886dfd10f2ad30d0562b67f49a4303ed35146e3f54bb703c23e4586cd6ee9663ddbe5e74bb3d2dd6e842d7a8d3a1af707675379b2a148fccea72cb79a1d8acacbe481ad899c036c09bc7497cb66a4e6423a9320d20f9359ef70f95914a9501436241fb48f545cff7317ff149e76d1c60e60a1abf5ded0ed2b593c7ba5f0cc281d5ddc1d25bf45370221b4cd40f6cbc692f7e3c9cb9003443c32fb4726c6a2b1969bc25ac", @generic="cee90a8e12cc38bc38408d48019b998c217b8898c645fdb3d34a0f7d53f3e07367aed84a524ff83d602d8622e74a0a7fde", @typed={0x4, 0xda, 0x0, 0x0, @binary}, @typed={0x5, 0x3c, 0x0, 0x0, @str='%'}, @generic="57da4cc409ada01df1fd1252d7a54b595f04abdfe9520cbc486f4b8647bf97d85bd9da00b903b3", @generic="98ebd7c52baaf962713506e358df2d5fa3a03334b4633540e4c50ed03f8d69d28cca4b158b3b874b3bed49975d8a17d89a0ecb60209e415306b9229d9af0aa95c58ced9378a85bb96af3786f038135ad4df18ceea39e23b4194c4a9455f47b8e9533dc711279bb9eae2eea87051e6c511aa42893b16bfd0b8626722fb04389dc4ed5b46a1ad17a15242f305d353c5e0c3ca24aefb8e1f673c40692d2726868d70745f38f55a476710fce0cbf66", @generic="c11c3400a7a41993fe603f893c739870cdf646ba2c3298a695711dab69fae6e5909d0af2d225b3f75e8a334f"]}, @nested={0x95, 0x7a, 0x0, 0x1, [@typed={0x8, 0x102, 0x0, 0x0, @u32=0xc}, @generic="cfc6e5c6d74c01951beaa5bac7a70d3fe2e6b07fa458508dedec833e621187545733fb60bc1eb051f855eb67c8d41aaa2c023df5452772199d2ccdc36c3b5d8f2975b079db307121dc904eab1ff5d20a73604ac732e4eb98e723cc3d7ee81c1b96a12fc4fcca8d14a688575115ca8c558a604386a0088b3314d0d4373e8037ba835a44a5c2fbae93bb"]}, @nested={0x6a8, 0x9f, 0x0, 0x1, [@nested={0x6a1, 0xf8, 0x0, 0x1, [@typed={0x5, 0xa6, 0x0, 0x0, @str='\x00'}, @nested={0xd8, 0x83, 0x0, 0x1, [@generic="f84431bf2e1ec27aac7ae60c43494e4027b867c793a3e42538f59d1d6eecc4e19681bfa4768a835d009b30b521999e0f5425e4597b2ff50a0b633578cab2bd9fd613b01ee2916a814e9a5fd55f6ff29e8f06eddca93d74c636580c23b97c4818e0bd5f9883c130e234217032f571638b18bda09d8eee84fc821588f813cbb7982e445601eda8827747344e36f17b90371cfc52323544cf30f4872378fede64073683d4d083e243f8dd22ba8cb23c39f29de78032182e5b16d83ea9e913368453c7dc3dad0bdc0a5296e6ee1ee68e14f806f64786"]}, @nested={0x97, 0xd5, 0x0, 0x1, [@typed={0x6, 0xb6, 0x0, 0x0, @str='*\x00'}, @generic="72e3219108c36f94501dadc4c30176b3da8470aaa207a1e407a1eb240e4a0359d38d7279e6c25f83346f399cc7a51edac26f137a3adeaa7d29261701823222f935e18faeac17796345aed0415c460e29540bd2bed026ccbe36422ac9504e3f8bb8c873588bd1e9bde3b87e453b659118295cd665f3876fab27", @generic="8eed2fefae29257d7825", @nested={0x4, 0xa}, @nested={0x4, 0x48}]}, @typed={0x8, 0x130, 0x0, 0x0, @fd=r6}, @typed={0xbe, 0x14f, 0x0, 0x0, @binary="946b4a2bc0ae47711fb05b6f4613961c1f2a28c3ed606e40ec4c5432cd480cab35df8ace543903034f04f1a8d356f304193be4373220fcc208c0c62b8d5b5f29525c5b10b18e6d87ec9d8ae4cbee3b9fc960a827568efc33ddd95176ca2675044f6c5ee7130cb3bf096052ad54ac0a582e4805f3b9c2264df55f00440175130bba679e5e384e56633ae78d28e8486f4497ef68c6b2b12488c32046a72110ae07b227b10fde23379c7c36770b3a6efa0f7c5e4d3375ed3f971433"}, @nested={0xdd, 0x23, 0x0, 0x1, [@nested={0x4, 0x3c}, @generic="ae2e46f7061a34c9c42da90cb67d525408e8769d9270003e058b54be54b1cec6abbf442f9f0542324f0d355d916f47a0def0ee4b7f5fd9fa01903d569c2d60e21f7a669113e78704b334aa0eaf244503e86653b803ec61119f0e99dd62021588883af4ca9529c5cfa9253a5e0b152bb94374c0e625ce6210302fad34a054edd449f93a28d67d82b26f6eb8f7bcbf009537e647135ea43da66323102b77b07df9fbd1a698744bb34af491a99dbfc6e3b84911365f1a01afd8564d4b7e441d5f04d0", @nested={0x4, 0xda}, @typed={0x4, 0x92}, @nested={0x4, 0x5d}, @nested={0x4, 0xf2}, @nested={0x4, 0x59}]}, @generic="920cec2d999c03bbd6", @typed={0xd6, 0xb4, 0x0, 0x0, @binary="56fd18893c227bd5a6acdfbc39508c44160d87c8095997957c27e71d4a7e97e0265fb967d43a284d9c15c5d86a68e83180ec7fc1aad9077ee17171b7c75b3290f41d55a0f8b5afd33c24e22e41cd84cbf8c95d8d4efe6d47e75b7dc18bf65cc841e36e53e7f8ee13ab07df626f5acac59af7606003354569a996981d9019cf8e98e0baaa1f6ed524329c452bed495298029bf9cbea81fc4ad6974147a1a64f0dcc8ed4f1e7df7a51d2fc8ba75d0f02a9a9a78ff6accc8bbd61fac6e2b09ef2976e6631291854ef516d6e8a081ae1e9609219"}, @nested={0x299, 0x8d, 0x0, 0x1, [@typed={0xc, 0x140, 0x0, 0x0, @u64=0x4ca8}, @nested={0x4, 0x14e}, @generic="79d6a4db95604eb4df5e9c48d733c7e70a99c2fa080cf7ad73bff70c1eb81a2b346009a26340fdb649f1abc8894ac753f782901623ae4f33d64b1da90c1dd5b2349c4cebf3f8a98258074e75e78ba6808b89db9cab9ba7f4019e2571cf95e26d4658d88a4d7b2c53f9bdb1778660c0f3da039225d252b6f4c5e8dc5f2b67b95d71ea081b3725c04223afacfabd7d1f22434d7a9d480500ad08d529dc3688a63d8d57eb76649d0f5472bcf1146bc006174acb8a6cd8a300ab2a543b38f7caedb78d3eafdd4afc7ccbf6c5c6e638774995", @generic="8e2b2531be4f3a3665cb13c7ae7d05f98c09caf2b92a3ee6cead1ee47702cc4a850634275dcbe4df06171d3d7c1121fe14779979e12fe5a2c6abddaabe9e8694aeae1fb80a29747bb086cb9fadf82f5450a62bc678d84c407ce480e863e433c8598e23ec5966e70cf46acf0a6e2ec2604bbb33781fdd84d93d2c952768bf20c9e587f6b47f5b8099da1bbee637905ee0d8b534d7ca6fd645d2518ccf33fa8b6fe611158486eb8e3ad85f", @generic="8bbb2af1df3a26f01c1285f12503d22145a26bf49bf9cf994aa1911d6b74447b54d34297f2e9fdb65cdc124ebf64ca74c15950b5d4f2eb0dc1baa34c922c", @generic="130d6ddb2b8af8993eff43175a3a488253d9a73daaffb1115f6f5c7e56076265aea58a49d545a094746dd2aaf701110016079486d5b474b574147e0ff5bf8ac71099d85af71b07d81cb6dc91bf7a4c7ebacba6a46e46466dec479c8d8e8e48b035f5fae0d7380df97be1e93b8fe5819659c16e", @generic="32b80e8513ad118e2304cc7a379d33a5bf020de528820e8ade21c5f5dc6598929952c219f4859765a03f63fc5f46d6ab94def7c9710ee3a5f0d15358e9e5ace14b8a67e3638a6bb70393032ed2260fcbce779757c32326f7a2c1"]}]}]}]}]}]}]}, 0x9d4}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) (async) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x9d4, 0x40, 0x107, 0xfffffffe, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x14, 0x80, 0x0, 0x0, @ipv6=@private1}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9a0, 0x136, 0x0, 0x1, [@nested={0x99c, 0x34, 0x0, 0x1, [@nested={0x998, 0x16, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4888}, @typed={0x8, 0x38, 0x0, 0x0, @fd}, @typed={0x8, 0x13a, 0x0, 0x0, @u32=0x2}, @nested={0x23a, 0xec, 0x0, 0x1, [@typed={0xb, 0xff, 0x0, 0x0, @str='target\x00'}, @generic="b6122fcb2f5501e90d5fbb395320ecb06254bf570c51ab7b49ad24153231082129cfd9dcddb4c5c397466c8f6d2a793a8e6cd63609d73d3689e783488ba6ab5ea33c801e629ebd2e63886dfd10f2ad30d0562b67f49a4303ed35146e3f54bb703c23e4586cd6ee9663ddbe5e74bb3d2dd6e842d7a8d3a1af707675379b2a148fccea72cb79a1d8acacbe481ad899c036c09bc7497cb66a4e6423a9320d20f9359ef70f95914a9501436241fb48f545cff7317ff149e76d1c60e60a1abf5ded0ed2b593c7ba5f0cc281d5ddc1d25bf45370221b4cd40f6cbc692f7e3c9cb9003443c32fb4726c6a2b1969bc25ac", @generic="cee90a8e12cc38bc38408d48019b998c217b8898c645fdb3d34a0f7d53f3e07367aed84a524ff83d602d8622e74a0a7fde", @typed={0x4, 0xda, 0x0, 0x0, @binary}, @typed={0x5, 0x3c, 0x0, 0x0, @str='%'}, @generic="57da4cc409ada01df1fd1252d7a54b595f04abdfe9520cbc486f4b8647bf97d85bd9da00b903b3", @generic="98ebd7c52baaf962713506e358df2d5fa3a03334b4633540e4c50ed03f8d69d28cca4b158b3b874b3bed49975d8a17d89a0ecb60209e415306b9229d9af0aa95c58ced9378a85bb96af3786f038135ad4df18ceea39e23b4194c4a9455f47b8e9533dc711279bb9eae2eea87051e6c511aa42893b16bfd0b8626722fb04389dc4ed5b46a1ad17a15242f305d353c5e0c3ca24aefb8e1f673c40692d2726868d70745f38f55a476710fce0cbf66", @generic="c11c3400a7a41993fe603f893c739870cdf646ba2c3298a695711dab69fae6e5909d0af2d225b3f75e8a334f"]}, @nested={0x95, 0x7a, 0x0, 0x1, [@typed={0x8, 0x102, 0x0, 0x0, @u32=0xc}, @generic="cfc6e5c6d74c01951beaa5bac7a70d3fe2e6b07fa458508dedec833e621187545733fb60bc1eb051f855eb67c8d41aaa2c023df5452772199d2ccdc36c3b5d8f2975b079db307121dc904eab1ff5d20a73604ac732e4eb98e723cc3d7ee81c1b96a12fc4fcca8d14a688575115ca8c558a604386a0088b3314d0d4373e8037ba835a44a5c2fbae93bb"]}, @nested={0x6a8, 0x9f, 0x0, 0x1, [@nested={0x6a1, 0xf8, 0x0, 0x1, [@typed={0x5, 0xa6, 0x0, 0x0, @str='\x00'}, @nested={0xd8, 0x83, 0x0, 0x1, [@generic="f84431bf2e1ec27aac7ae60c43494e4027b867c793a3e42538f59d1d6eecc4e19681bfa4768a835d009b30b521999e0f5425e4597b2ff50a0b633578cab2bd9fd613b01ee2916a814e9a5fd55f6ff29e8f06eddca93d74c636580c23b97c4818e0bd5f9883c130e234217032f571638b18bda09d8eee84fc821588f813cbb7982e445601eda8827747344e36f17b90371cfc52323544cf30f4872378fede64073683d4d083e243f8dd22ba8cb23c39f29de78032182e5b16d83ea9e913368453c7dc3dad0bdc0a5296e6ee1ee68e14f806f64786"]}, @nested={0x97, 0xd5, 0x0, 0x1, [@typed={0x6, 0xb6, 0x0, 0x0, @str='*\x00'}, @generic="72e3219108c36f94501dadc4c30176b3da8470aaa207a1e407a1eb240e4a0359d38d7279e6c25f83346f399cc7a51edac26f137a3adeaa7d29261701823222f935e18faeac17796345aed0415c460e29540bd2bed026ccbe36422ac9504e3f8bb8c873588bd1e9bde3b87e453b659118295cd665f3876fab27", @generic="8eed2fefae29257d7825", @nested={0x4, 0xa}, @nested={0x4, 0x48}]}, @typed={0x8, 0x130, 0x0, 0x0, @fd=r6}, @typed={0xbe, 0x14f, 0x0, 0x0, @binary="946b4a2bc0ae47711fb05b6f4613961c1f2a28c3ed606e40ec4c5432cd480cab35df8ace543903034f04f1a8d356f304193be4373220fcc208c0c62b8d5b5f29525c5b10b18e6d87ec9d8ae4cbee3b9fc960a827568efc33ddd95176ca2675044f6c5ee7130cb3bf096052ad54ac0a582e4805f3b9c2264df55f00440175130bba679e5e384e56633ae78d28e8486f4497ef68c6b2b12488c32046a72110ae07b227b10fde23379c7c36770b3a6efa0f7c5e4d3375ed3f971433"}, @nested={0xdd, 0x23, 0x0, 0x1, [@nested={0x4, 0x3c}, @generic="ae2e46f7061a34c9c42da90cb67d525408e8769d9270003e058b54be54b1cec6abbf442f9f0542324f0d355d916f47a0def0ee4b7f5fd9fa01903d569c2d60e21f7a669113e78704b334aa0eaf244503e86653b803ec61119f0e99dd62021588883af4ca9529c5cfa9253a5e0b152bb94374c0e625ce6210302fad34a054edd449f93a28d67d82b26f6eb8f7bcbf009537e647135ea43da66323102b77b07df9fbd1a698744bb34af491a99dbfc6e3b84911365f1a01afd8564d4b7e441d5f04d0", @nested={0x4, 0xda}, @typed={0x4, 0x92}, @nested={0x4, 0x5d}, @nested={0x4, 0xf2}, @nested={0x4, 0x59}]}, @generic="920cec2d999c03bbd6", @typed={0xd6, 0xb4, 0x0, 0x0, @binary="56fd18893c227bd5a6acdfbc39508c44160d87c8095997957c27e71d4a7e97e0265fb967d43a284d9c15c5d86a68e83180ec7fc1aad9077ee17171b7c75b3290f41d55a0f8b5afd33c24e22e41cd84cbf8c95d8d4efe6d47e75b7dc18bf65cc841e36e53e7f8ee13ab07df626f5acac59af7606003354569a996981d9019cf8e98e0baaa1f6ed524329c452bed495298029bf9cbea81fc4ad6974147a1a64f0dcc8ed4f1e7df7a51d2fc8ba75d0f02a9a9a78ff6accc8bbd61fac6e2b09ef2976e6631291854ef516d6e8a081ae1e9609219"}, @nested={0x299, 0x8d, 0x0, 0x1, [@typed={0xc, 0x140, 0x0, 0x0, @u64=0x4ca8}, @nested={0x4, 0x14e}, @generic="79d6a4db95604eb4df5e9c48d733c7e70a99c2fa080cf7ad73bff70c1eb81a2b346009a26340fdb649f1abc8894ac753f782901623ae4f33d64b1da90c1dd5b2349c4cebf3f8a98258074e75e78ba6808b89db9cab9ba7f4019e2571cf95e26d4658d88a4d7b2c53f9bdb1778660c0f3da039225d252b6f4c5e8dc5f2b67b95d71ea081b3725c04223afacfabd7d1f22434d7a9d480500ad08d529dc3688a63d8d57eb76649d0f5472bcf1146bc006174acb8a6cd8a300ab2a543b38f7caedb78d3eafdd4afc7ccbf6c5c6e638774995", @generic="8e2b2531be4f3a3665cb13c7ae7d05f98c09caf2b92a3ee6cead1ee47702cc4a850634275dcbe4df06171d3d7c1121fe14779979e12fe5a2c6abddaabe9e8694aeae1fb80a29747bb086cb9fadf82f5450a62bc678d84c407ce480e863e433c8598e23ec5966e70cf46acf0a6e2ec2604bbb33781fdd84d93d2c952768bf20c9e587f6b47f5b8099da1bbee637905ee0d8b534d7ca6fd645d2518ccf33fa8b6fe611158486eb8e3ad85f", @generic="8bbb2af1df3a26f01c1285f12503d22145a26bf49bf9cf994aa1911d6b74447b54d34297f2e9fdb65cdc124ebf64ca74c15950b5d4f2eb0dc1baa34c922c", @generic="130d6ddb2b8af8993eff43175a3a488253d9a73daaffb1115f6f5c7e56076265aea58a49d545a094746dd2aaf701110016079486d5b474b574147e0ff5bf8ac71099d85af71b07d81cb6dc91bf7a4c7ebacba6a46e46466dec479c8d8e8e48b035f5fae0d7380df97be1e93b8fe5819659c16e", @generic="32b80e8513ad118e2304cc7a379d33a5bf020de528820e8ade21c5f5dc6598929952c219f4859765a03f63fc5f46d6ab94def7c9710ee3a5f0d15358e9e5ace14b8a67e3638a6bb70393032ed2260fcbce779757c32326f7a2c1"]}]}]}]}]}]}]}, 0x9d4}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 15.300730577s ago: executing program 2 (id=2595): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r6, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) r7 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 15.295550194s ago: executing program 2 (id=2596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r3, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x7c, 0xa8, @random="97b8021e572467bbe9db98507c95cb97f3f0e6fc0760e6296a5cd247ef775a5ae5d9f840779699a6841a6a717633ea4b135bc53bdc7cca158363c4c915e11808aca4ec1ef5db6466cbe42936dc1ef7a88d1419a9967685f98f6bb294393411a3869c3ed84a428c6cfe1c8209e5246da84b24ea338ed57c21"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, 0x0, 0x0) (async) close(r6) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x300}, 0x1c}}, 0x0) 15.251328952s ago: executing program 2 (id=2597): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2, 0x0}, 0x8) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) 15.168414441s ago: executing program 2 (id=2598): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendto$rxrpc(r2, &(0x7f00000003c0)="e3710f00215cfcab9a47c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b703d94a3c2d0f4fdf0765a30bb000000", 0x30, 0x4004, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0xd19, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x24}}, 0x840) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000005c0)={0x0, "0dc121ca63e4409c6a8c39e691f61e39"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001a00)={r8, 0x9, 0x1, [0x5, 0xfffffffffffffffe, 0x0, 0x8, 0x10001], [0x7, 0x14e, 0x6, 0x8, 0x0, 0xffffffff, 0x667a, 0x5, 0xfffffffffffffffa, 0xf, 0xfffffffffffffff8, 0xe, 0xffffffffffffffac, 0x203c, 0x101, 0x9, 0x0, 0x9, 0xb, 0xfffffffffffffffe, 0x3, 0x7d, 0xaac, 0x6, 0x2, 0x0, 0x5, 0x0, 0x4141, 0xbb, 0x9, 0xf, 0x6, 0x3, 0xa, 0x2, 0x7fff, 0x8, 0x8, 0x100000000000000, 0x80, 0x7ee, 0x4c, 0x7fffffff, 0x8, 0xffffffffffff8001, 0x3, 0x2, 0x1000, 0x40, 0x6, 0xfffffffffffffffd, 0xf, 0x9, 0x4, 0x7fffffff, 0xffffffffffffffff, 0x8b, 0x1, 0x3, 0x4, 0xfe, 0x2, 0x8, 0x6, 0xd, 0x6, 0x1, 0x1, 0x0, 0x9, 0x9, 0x200, 0x1, 0x1, 0x401, 0x6, 0x1, 0xfa05, 0x1ff, 0x6, 0x7, 0x1, 0xfffffffffffff286, 0x8000, 0x4, 0x7, 0x9, 0x401, 0xf, 0x9, 0x7, 0x0, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x9, 0x3, 0x7, 0x4f, 0x1, 0x40, 0x0, 0x6, 0x236, 0x10001, 0x1, 0x0, 0x4, 0x400, 0x6, 0x80000001, 0x8, 0xfffffffffffffff9, 0x5, 0x2588, 0x8000, 0x80000000]}) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000480)=""/102, 0x66}], 0x2}, 0x2041) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) accept4(r1, 0x0, 0x0, 0x80800) (async) sendto$rxrpc(r2, &(0x7f00000003c0)="e3710f00215cfcab9a47c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b703d94a3c2d0f4fdf0765a30bb000000", 0x30, 0x4004, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c"], 0x28}}, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0xd19, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x24}}, 0x840) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000005c0)={0x0, "0dc121ca63e4409c6a8c39e691f61e39"}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001a00)={r8, 0x9, 0x1, [0x5, 0xfffffffffffffffe, 0x0, 0x8, 0x10001], [0x7, 0x14e, 0x6, 0x8, 0x0, 0xffffffff, 0x667a, 0x5, 0xfffffffffffffffa, 0xf, 0xfffffffffffffff8, 0xe, 0xffffffffffffffac, 0x203c, 0x101, 0x9, 0x0, 0x9, 0xb, 0xfffffffffffffffe, 0x3, 0x7d, 0xaac, 0x6, 0x2, 0x0, 0x5, 0x0, 0x4141, 0xbb, 0x9, 0xf, 0x6, 0x3, 0xa, 0x2, 0x7fff, 0x8, 0x8, 0x100000000000000, 0x80, 0x7ee, 0x4c, 0x7fffffff, 0x8, 0xffffffffffff8001, 0x3, 0x2, 0x1000, 0x40, 0x6, 0xfffffffffffffffd, 0xf, 0x9, 0x4, 0x7fffffff, 0xffffffffffffffff, 0x8b, 0x1, 0x3, 0x4, 0xfe, 0x2, 0x8, 0x6, 0xd, 0x6, 0x1, 0x1, 0x0, 0x9, 0x9, 0x200, 0x1, 0x1, 0x401, 0x6, 0x1, 0xfa05, 0x1ff, 0x6, 0x7, 0x1, 0xfffffffffffff286, 0x8000, 0x4, 0x7, 0x9, 0x401, 0xf, 0x9, 0x7, 0x0, 0x4, 0x2, 0x8d, 0x4, 0x3, 0x9, 0x3, 0x7, 0x4f, 0x1, 0x40, 0x0, 0x6, 0x236, 0x10001, 0x1, 0x0, 0x4, 0x400, 0x6, 0x80000001, 0x8, 0xfffffffffffffff9, 0x5, 0x2588, 0x8000, 0x80000000]}) (async) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000480)=""/102, 0x66}], 0x2}, 0x2041) (async) 15.159206472s ago: executing program 2 (id=2599): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x2b, @loopback, 0x4e20, 0x4, 'lblcr\x00', 0x13, 0x9, 0x35}, 0x2c) r2 = socket(0x23, 0x80805, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000540)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x9, 0x1, 0x2, 0x4104, 0xa7b8]}, &(0x7f0000000300)=0x78) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000090000b0c7caaf15009500"/29], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x6a4, 0x2c, 0x100, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x674, 0x2, [@TCA_BASIC_EMATCHES={0x4c8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0xaa}, {{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3ff, 0x8, 0x8ffd}, {0x0, 0x3, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xe, 0x3, 0x1}, {0xfffffff0, 0x6, 0x651c, 0x7}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}, @TCA_EMATCH_TREE_LIST={0x160, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x5}, {{0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0xf040, 0x4, 0xa5}, [@TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="191b13"]}, @TCA_EM_META_RVALUE={0x30, 0x3, [@TCF_META_TYPE_VAR="1f87c0e8a137d2", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="778146884cb35d32", @TCF_META_TYPE_VAR="63048db0ff6be320", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="2d5949c85078e9", @TCF_META_TYPE_VAR="c416"]}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_VAR="58545f5733f9fd3d6a35", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='X', @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x1}, {0x4, 0x3, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x8}, {{0x3, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x4b06}, {{0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x7}, {{0x3, 0x1}, {0x4, 0x1}}}}, @TCF_EM_CONTAINER={0x98, 0x1, 0x0, 0x0, {{0x4e7, 0x0, 0x40}, "496f4e1b1bd5cb0bf9776023620f5948a475b53792f8ea235c92cc4f38707cdb5795187515a7037f5b58a62441485ed416c617aa9dab61aba453a0e77a8d24ec029a0d634b17c2b24c872bba7451aa7258cb594e4055ba739b253c3a235c447805c6a4cbe938bc1a8883cccb2d6738ea91f8811989893a0e199af925c686049524168f272bb8273bcd"}}]}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_META={0x58, 0x3ffc, 0x0, 0x0, {{0xb59, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="4b3af8ff", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="5584", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="5b2a1854ca7da7e34ee7", @TCF_META_TYPE_VAR="c168c92724bd58ea0481"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x4, 0x1}, {0x442, 0x9}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x40}, {0x8, 0x5}}}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x1}, {0x7, 0x5, 0x2, "4a21d9ef6a"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x178, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x54, 0x3, 0x0, 0x0, {{0xe17a, 0x0, 0x6}, "eb46b806a309efcdcee00658a243fd10f5ba01b0b19c9d10e3756647881a9c95751d8a3ac540639cc1907722773795e056aafb098c147830e8aab3f380869e7e3c0a0115aaa10e"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x4, 0x2, 0x3}, {0x358, 0x5, 0x1, "114e4469ad"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xe0, 0x3, 0x0, 0x0, {{0x87}, "c6317a53a8d277526f1519e9c4ba0aa43631eb7853840c949cf0c44e01405d3d3b96db6268f8a96339d92bd49d92385da257d53572135f02812f664d457d1c8aed15efdc48afd3964ced6d8708a94a6ba211acc74b382ba3f6cc704de0a971a05f555099162a34cf780054eb66b3582869116680b4b44734e9427bc677ea9ac9462146c638d57561b07a984b70d73a569285e276cf769b4f3ebab7cbc739d3692c429a7b63c1f2ec67cb5f264f18254781e672776986a4662d6aaa71a4fcd1a687d753c7e8a288344a68997d57afc0181bfbd8e5"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x800}, {{0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x100, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x1}, {0xffffffff, 0x1, 0xd, 0x0, 0x0, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x10}, {0x1400, 0x17a543b, 0x4, 0x3}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x3}, {0xbd8, 0x0, 0x7, 0xfff}}}, @TCF_EM_META={0x7c, 0x1, 0x0, 0x0, {{0x6}, [@TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="d879", @TCF_META_TYPE_VAR="4c540bbc", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xde, 0x2}, {0x900, 0x2, 0x2}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='Q', @TCF_META_TYPE_VAR="df1d9381b7237b4cdd", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="9808c3b4d569"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xe}, {0x6, 0xbf, 0x2}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="fd8f73b1937de6711230", @TCF_META_TYPE_VAR="15686932", @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR='oAMn', @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3bc6, 0x8, 0x1ff}, {0x9, 0x4, 0x4}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x7f}, {0x6, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x5}, {0xffffffffffffffff, 0x5, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_BASIC_EMATCHES={0x1a8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x190, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x5}, {0x3, 0x4, 0x7, 0x4, 0x0, 0x2, 0x2}}}, @TCF_EM_META={0xe4, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_VAR="ef", @TCF_META_TYPE_VAR='I', @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="cf4f", @TCF_META_TYPE_VAR="46a6", @TCF_META_TYPE_VAR="1db5631d9c567a06", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="4b8b1be2"]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x40000000, @TCF_META_TYPE_VAR="245ba9", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="88a305669e01"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x0, 0x2}, {0x4, 0xeb, 0x2}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="f40aa281ba", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="e24e1649417637b9"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x40, 0xf9}, {0x197b, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x66, 0x0, 0x1}, {0x4000, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x43, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="16b2ef2862", @TCF_META_TYPE_VAR="52df67", @TCF_META_TYPE_VAR="0b6133e7", @TCF_META_TYPE_VAR="d91aa4"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xd, 0x1}, {0x8, 0x48}}}]}}, @TCF_EM_IPT={0x4c, 0x1, 0x0, 0x0, {{0xf000, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7fff}, {0x9, 0xffffffff, 0x5, 0x8}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x499, 0x8, 0x400}, {0x0, 0x3, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1}, {0xcedd, 0x1, 0x5, 0x1, 0x3, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x7}, {0x3, 0x5}}}]}]}]}}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0105fffffffffff6008082ce41000c00fdff0c000000ffff4eb17dff0010805500"], 0x0, 0x26}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r4, @ANYRES32=r11, @ANYBLOB="08006b001400000008006b00f0000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c814}, 0x4004000) r12 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x80, 0x0}, 0x4000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 11.136102613s ago: executing program 32 (id=2527): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x6a}, @call={0x85, 0x0, 0x0, 0x35}]}, &(0x7f0000000100)='GPL\x00', 0xa8000000, 0x3e, &(0x7f0000000140)=""/62, 0x41100, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x10, 0x6, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000280)=[{0x4, 0x4, 0xe, 0x3}, {0x5, 0x5, 0x9, 0xb}, {0x2, 0x1, 0xc, 0x2}, {0x5, 0x3, 0x1, 0xa}], 0x10, 0x3}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000380)) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) sendto$inet(r1, &(0x7f0000000440)='!', 0x1, 0x4048845, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) 11.104648742s ago: executing program 33 (id=2518): socket(0x11, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000480)="a37508bc837681f114fd6a0d1a8135ea1034721c2e203d9e1ba9725c8e6f1d54c7cf96e3f1a145e551a0ec3fbf8d25a497a601f2dcd535e2f193a8222ddf97615f2e9ce43da9079ae70208533f5f2b96d4f9dc561e9da7d80422fd8c1c73fd6165c1332f9c82d7b97e8ed603b7436e301f96133ac1c80e9eb524bd4d58ab2f8306633f75b02f4fcd8b69158adcf4d5745576fa59efe6d95f0b2ad26c4cf92164ad073a568f98ab550b3f110a8ab69fe78f24e523b2eee7261b90b58096b5447fd761857f3cbaa9d23bda0598d7556dd24419b611d0bf2e0200aef69ebd93d281492e9904ca7dffc7b1cd571451ba56db4cdbda4b6eee36c6ed1178a4e8e141e6ba5a27887e6a534ec0424f8f27cbbe242116e6afc5d2e6a625c2e16c8e6147b836f70095530a89892f6afa88b67dadd089e1", 0x132, 0x20040000, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0xfffffffffffffe18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000000)=0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x32, 0x2, 0x0, 0x0, "740d1bceec5c177e0344c70d86e4bd1bb2bb93de75e45a4e74f3a3f94fbb7ac99711b1d93cf002f598bdfddf8a74cd9a4879539a6593f29b884852ad6ba69664"}}, 0x80}}, 0x40090) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) unshare(0x28000600) r9 = socket(0x10, 0x3, 0x0) preadv(r9, 0x0, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="610304080106789b21db02060912c90e1aba6bad8a1932148548fcee"], 0x1c) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2d7f3b232df5f93b}, 0xc) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYRES8=r1], 0x3c}}, 0x0) 8.066410366s ago: executing program 34 (id=2550): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x240040c0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@un=@abs, &(0x7f0000000180)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001700010029bdf000fcdbdf25090000df"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001700010029bdf000fcdbdf25090000df"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) connect$nfc_llcp(r5, &(0x7f0000000280)={0x27, r7, 0x0, 0x7, 0x7, 0x6, "f30238760135d77a9237b9f4c889dc5da48c140fb9a1d18e3222e99847068fbaa2a1cb5bfe5ba11e5205489a9782901fc07b815eee38ff6431446213cf525f", 0x39}, 0x60) sendto$inet6(r4, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000140)={0xa, 0x4e1c, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r10, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000001840), 0x4) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f0000000000)=""/224, &(0x7f0000000100)=0xe0) (async) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f0000000000)=""/224, &(0x7f0000000100)=0xe0) socket(0x2d, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 5.039522152s ago: executing program 35 (id=2563): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x15, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6}]}) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x80800000, 0x9, 0x100000000}) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x1407, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004851}, 0x20040004) 0s ago: executing program 36 (id=2599): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x2b, @loopback, 0x4e20, 0x4, 'lblcr\x00', 0x13, 0x9, 0x35}, 0x2c) r2 = socket(0x23, 0x80805, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000540)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x9, 0x1, 0x2, 0x4104, 0xa7b8]}, &(0x7f0000000300)=0x78) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000090000b0c7caaf15009500"/29], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x6a4, 0x2c, 0x100, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x674, 0x2, [@TCA_BASIC_EMATCHES={0x4c8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0xaa}, {{0x3, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3ff, 0x8, 0x8ffd}, {0x0, 0x3, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xe, 0x3, 0x1}, {0xfffffff0, 0x6, 0x651c, 0x7}}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}, @TCA_EMATCH_TREE_LIST={0x160, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x5}, {{0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0xf040, 0x4, 0xa5}, [@TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="191b13"]}, @TCA_EM_META_RVALUE={0x30, 0x3, [@TCF_META_TYPE_VAR="1f87c0e8a137d2", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="778146884cb35d32", @TCF_META_TYPE_VAR="63048db0ff6be320", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="2d5949c85078e9", @TCF_META_TYPE_VAR="c416"]}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_VAR="58545f5733f9fd3d6a35", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='X', @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x1}, {0x4, 0x3, 0x2}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x8}, {{0x3, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x6, 0x7, 0x4b06}, {{0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x7}, {{0x3, 0x1}, {0x4, 0x1}}}}, @TCF_EM_CONTAINER={0x98, 0x1, 0x0, 0x0, {{0x4e7, 0x0, 0x40}, "496f4e1b1bd5cb0bf9776023620f5948a475b53792f8ea235c92cc4f38707cdb5795187515a7037f5b58a62441485ed416c617aa9dab61aba453a0e77a8d24ec029a0d634b17c2b24c872bba7451aa7258cb594e4055ba739b253c3a235c447805c6a4cbe938bc1a8883cccb2d6738ea91f8811989893a0e199af925c686049524168f272bb8273bcd"}}]}, @TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_META={0x58, 0x3ffc, 0x0, 0x0, {{0xb59, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="4b3af8ff", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="5584", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="5b2a1854ca7da7e34ee7", @TCF_META_TYPE_VAR="c168c92724bd58ea0481"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x4, 0x1}, {0x442, 0x9}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x40}, {0x8, 0x5}}}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x1}, {0x7, 0x5, 0x2, "4a21d9ef6a"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x178, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x54, 0x3, 0x0, 0x0, {{0xe17a, 0x0, 0x6}, "eb46b806a309efcdcee00658a243fd10f5ba01b0b19c9d10e3756647881a9c95751d8a3ac540639cc1907722773795e056aafb098c147830e8aab3f380869e7e3c0a0115aaa10e"}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x4, 0x2, 0x3}, {0x358, 0x5, 0x1, "114e4469ad"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xe0, 0x3, 0x0, 0x0, {{0x87}, "c6317a53a8d277526f1519e9c4ba0aa43631eb7853840c949cf0c44e01405d3d3b96db6268f8a96339d92bd49d92385da257d53572135f02812f664d457d1c8aed15efdc48afd3964ced6d8708a94a6ba211acc74b382ba3f6cc704de0a971a05f555099162a34cf780054eb66b3582869116680b4b44734e9427bc677ea9ac9462146c638d57561b07a984b70d73a569285e276cf769b4f3ebab7cbc739d3692c429a7b63c1f2ec67cb5f264f18254781e672776986a4662d6aaa71a4fcd1a687d753c7e8a288344a68997d57afc0181bfbd8e5"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x800}, {{0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x100, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x1}, {0xffffffff, 0x1, 0xd, 0x0, 0x0, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x10}, {0x1400, 0x17a543b, 0x4, 0x3}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x3}, {0xbd8, 0x0, 0x7, 0xfff}}}, @TCF_EM_META={0x7c, 0x1, 0x0, 0x0, {{0x6}, [@TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="d879", @TCF_META_TYPE_VAR="4c540bbc", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xde, 0x2}, {0x900, 0x2, 0x2}}}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='Q', @TCF_META_TYPE_VAR="df1d9381b7237b4cdd", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="9808c3b4d569"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0xe}, {0x6, 0xbf, 0x2}}}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="fd8f73b1937de6711230", @TCF_META_TYPE_VAR="15686932", @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR='oAMn', @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3bc6, 0x8, 0x1ff}, {0x9, 0x4, 0x4}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x7f}, {0x6, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2, 0x8, 0x5}, {0xffffffffffffffff, 0x5, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_BASIC_EMATCHES={0x1a8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x190, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x5}, {0x3, 0x4, 0x7, 0x4, 0x0, 0x2, 0x2}}}, @TCF_EM_META={0xe4, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_VAR="ef", @TCF_META_TYPE_VAR='I', @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="cf4f", @TCF_META_TYPE_VAR="46a6", @TCF_META_TYPE_VAR="1db5631d9c567a06", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="4b8b1be2"]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x40000000, @TCF_META_TYPE_VAR="245ba9", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="88a305669e01"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x0, 0x2}, {0x4, 0xeb, 0x2}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="f40aa281ba", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="e24e1649417637b9"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x40, 0xf9}, {0x197b, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x66, 0x0, 0x1}, {0x4000, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x43, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="16b2ef2862", @TCF_META_TYPE_VAR="52df67", @TCF_META_TYPE_VAR="0b6133e7", @TCF_META_TYPE_VAR="d91aa4"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xd, 0x1}, {0x8, 0x48}}}]}}, @TCF_EM_IPT={0x4c, 0x1, 0x0, 0x0, {{0xf000, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x7fff}, {0x9, 0xffffffff, 0x5, 0x8}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x499, 0x8, 0x400}, {0x0, 0x3, 0x5}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1}, {0xcedd, 0x1, 0x5, 0x1, 0x3, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x7}, {0x3, 0x5}}}]}]}]}}]}, 0x6a4}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0105fffffffffff6008082ce41000c00fdff0c000000ffff4eb17dff0010805500"], 0x0, 0x26}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYRES32=r4, @ANYRES32=r11, @ANYBLOB="08006b001400000008006b00f0000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4c814}, 0x4004000) r12 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x80, 0x0}, 0x4000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): a_validate_parse: 12 callbacks suppressed [ 130.091127][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 130.640273][ T7537] xt_TCPMSS: Only works on TCP SYN packets [ 131.010657][ T7560] netlink: 32 bytes leftover after parsing attributes in process `syz.2.467'. [ 131.067442][ T7563] netlink: 32 bytes leftover after parsing attributes in process `syz.2.467'. [ 131.109397][ T7556] tipc: Enabled bearer , priority 0 [ 131.508908][ T7556] syzkaller0: entered promiscuous mode [ 131.564994][ T7576] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.469'. [ 131.624478][ T7556] syzkaller0: entered allmulticast mode [ 131.669795][ T7556] tipc: Resetting bearer [ 131.772571][ T7585] netlink: 'syz.4.471': attribute type 21 has an invalid length. [ 131.810808][ T7585] netlink: 'syz.4.471': attribute type 22 has an invalid length. [ 131.846241][ T7585] netlink: 'syz.4.471': attribute type 23 has an invalid length. [ 131.919524][ T7585] netlink: 'syz.4.471': attribute type 25 has an invalid length. [ 131.938032][ T36] tipc: Resetting bearer [ 132.002616][ T7585] netlink: 'syz.4.471': attribute type 26 has an invalid length. [ 132.063582][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.471'. [ 132.103331][ T7555] tipc: Resetting bearer [ 132.218162][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 132.303185][ T7599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.475'. [ 132.316923][ T7601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.474'. [ 133.728485][ T7555] tipc: Disabling bearer [ 133.744861][ T5906] tipc: Node number set to 3758096386 [ 134.050705][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 134.646462][ T7682] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.491'. [ 134.720167][ T7684] syzkaller1: entered promiscuous mode [ 134.729771][ T7684] syzkaller1: entered allmulticast mode [ 134.981995][ T7701] netlink: 'syz.4.495': attribute type 16 has an invalid length. [ 135.016055][ T7701] netlink: 'syz.4.495': attribute type 17 has an invalid length. [ 135.123233][ T7705] __nla_validate_parse: 2 callbacks suppressed [ 135.123252][ T7705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.497'. [ 135.145498][ T7707] netlink: 'syz.1.498': attribute type 83 has an invalid length. [ 135.178655][ T7701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.552656][ T7726] syz.1.501: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.672686][ T7726] CPU: 0 UID: 0 PID: 7726 Comm: syz.1.501 Not tainted syzkaller #0 PREEMPT(full) [ 135.672716][ T7726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.672739][ T7726] Call Trace: [ 135.672748][ T7726] [ 135.672758][ T7726] dump_stack_lvl+0x189/0x250 [ 135.672798][ T7726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.672828][ T7726] ? __pfx__printk+0x10/0x10 [ 135.672853][ T7726] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 135.672883][ T7726] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 135.672916][ T7726] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 135.672949][ T7726] warn_alloc+0x214/0x310 [ 135.672983][ T7726] ? stack_depot_save_flags+0x40/0x860 [ 135.673022][ T7726] ? __pfx_warn_alloc+0x10/0x10 [ 135.673057][ T7726] ? kasan_save_track+0x3e/0x80 [ 135.673085][ T7726] ? __kasan_kmalloc+0x93/0xb0 [ 135.673119][ T7726] ? xsk_setsockopt+0x4dc/0x8d0 [ 135.673145][ T7726] ? do_sock_setsockopt+0x17c/0x1b0 [ 135.673168][ T7726] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 135.673189][ T7726] ? do_syscall_64+0xfa/0xfa0 [ 135.673218][ T7726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.673250][ T7726] __vmalloc_node_range_noprof+0x125/0x12d0 [ 135.673317][ T7726] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.673355][ T7726] ? __kasan_kmalloc+0x93/0xb0 [ 135.673406][ T7726] vmalloc_user_noprof+0xad/0xf0 [ 135.673440][ T7726] ? xskq_create+0xbf/0x170 [ 135.673471][ T7726] xskq_create+0xbf/0x170 [ 135.673505][ T7726] xsk_init_queue+0xb0/0x110 [ 135.673538][ T7726] xsk_setsockopt+0x4dc/0x8d0 [ 135.673569][ T7726] ? __pfx_xsk_setsockopt+0x10/0x10 [ 135.673601][ T7726] ? __pfx_aa_sk_perm+0x10/0x10 [ 135.673634][ T7726] ? aa_sock_opt_perm+0xff/0x1b0 [ 135.673671][ T7726] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 135.673692][ T7726] ? __pfx_xsk_setsockopt+0x10/0x10 [ 135.673722][ T7726] do_sock_setsockopt+0x17c/0x1b0 [ 135.673750][ T7726] __x64_sys_setsockopt+0x13f/0x1b0 [ 135.673780][ T7726] do_syscall_64+0xfa/0xfa0 [ 135.673811][ T7726] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.673843][ T7726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.673864][ T7726] ? clear_bhb_loop+0x60/0xb0 [ 135.673891][ T7726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.673912][ T7726] RIP: 0033:0x7f875838f749 [ 135.673941][ T7726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.673960][ T7726] RSP: 002b:00007f87592ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.673983][ T7726] RAX: ffffffffffffffda RBX: 00007f87585e5fa0 RCX: 00007f875838f749 [ 135.673999][ T7726] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 135.674012][ T7726] RBP: 00007f8758413f91 R08: 0000000000000004 R09: 0000000000000000 [ 135.674025][ T7726] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.674038][ T7726] R13: 00007f87585e6038 R14: 00007f87585e5fa0 R15: 00007ffe2c338248 [ 135.674075][ T7726] [ 135.674090][ T7726] Mem-Info: [ 135.888622][ T7744] netlink: 32 bytes leftover after parsing attributes in process `syz.3.504'. [ 135.930019][ T7726] active_anon:5608 inactive_anon:0 isolated_anon:0 [ 135.930019][ T7726] active_file:2508 inactive_file:39891 isolated_file:0 [ 135.930019][ T7726] unevictable:768 dirty:62 writeback:0 [ 135.930019][ T7726] slab_reclaimable:10741 slab_unreclaimable:98101 [ 135.930019][ T7726] mapped:30315 shmem:1361 pagetables:1246 [ 135.930019][ T7726] sec_pagetables:0 bounce:0 [ 135.930019][ T7726] kernel_misc_reclaimable:0 [ 135.930019][ T7726] free:1332382 free_pcp:14399 free_cma:0 [ 136.042592][ T7726] Node 0 active_anon:22432kB inactive_anon:0kB active_file:10032kB inactive_file:159364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121260kB dirty:244kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12560kB pagetables:4852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 136.149667][ T7726] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 136.249714][ T7726] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.340065][ T7726] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 136.369768][ T7726] Node 0 DMA32 free:1424980kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22040kB inactive_anon:0kB active_file:10032kB inactive_file:159372kB unevictable:1536kB writepending:244kB zspages:0kB present:3129332kB managed:2565140kB mlocked:0kB bounce:0kB free_pcp:37584kB local_pcp:21128kB free_cma:0kB [ 136.430695][ T7726] lowmem_reserve[]: 0 0 0 0 0 [ 136.453594][ T7726] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.539494][ T7726] lowmem_reserve[]: 0 0 0 0 0 [ 136.576321][ T7726] Node 1 Normal free:3888912kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20832kB local_pcp:8000kB free_cma:0kB [ 136.650621][ T7726] lowmem_reserve[]: 0 0 0 0 0 [ 136.656547][ T7726] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 136.709607][ T7726] Node 0 DMA32: 309*4kB (UME) 163*8kB (UME) 160*16kB (UM) 204*32kB (UM) 32*64kB (UME) 21*128kB (M) 8*256kB (M) 6*512kB (M) 7*1024kB (UME) 4*2048kB (M) 339*4096kB (M) = 1425388kB [ 136.762183][ T7726] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 136.798946][ T1166] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.813054][ T7726] Node 1 Normal: 180*4kB (UME) 44*8kB (UME) 40*16kB (UME) 65*32kB (UME) 25*64kB (UME) 10*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3888912kB [ 136.840740][ T1166] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.873787][ T1166] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.900638][ T7726] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.901354][ T1166] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.920595][ T7726] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.962834][ T7726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.991968][ T7726] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.012123][ T7726] 43758 total pagecache pages [ 137.027681][ T7726] 0 pages in swap cache [ 137.056122][ T7726] Free swap = 124996kB [ 137.071839][ T7726] Total swap = 124996kB [ 137.102270][ T7726] 2097051 pages RAM [ 137.106169][ T7726] 0 pages HighMem/MovableOnly [ 137.121578][ T7726] 424124 pages reserved [ 137.125814][ T7726] 0 pages cma reserved [ 137.303999][ T7791] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.581579][ T7817] netlink: 36 bytes leftover after parsing attributes in process `syz.1.526'. [ 137.696152][ T7822] netlink: 24 bytes leftover after parsing attributes in process `syz.1.526'. [ 138.041959][ T7800] infiniband syz1: set active [ 138.067364][ T7800] infiniband syz1: added veth0_to_batadv [ 138.115662][ T7800] syz1: rxe_create_cq: returned err = -12 [ 138.146226][ T7800] infiniband syz1: Couldn't create ib_mad CQ [ 138.172528][ T7800] infiniband syz1: Couldn't open port 1 [ 138.286963][ T7800] RDS/IB: syz1: added [ 138.343266][ T7800] smc: adding ib device syz1 with port count 1 [ 138.371422][ T7800] smc: ib device syz1 port 1 has no pnetid [ 138.427310][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.435042][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.629908][ T7874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.538'. [ 138.975050][ T7885] netlink: 'syz.4.542': attribute type 39 has an invalid length. [ 139.109110][ T7890] netlink: 'syz.0.543': attribute type 13 has an invalid length. [ 139.167588][ T7895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.331461][ T7900] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 139.357300][ T7900] netlink: 'syz.2.545': attribute type 11 has an invalid length. [ 139.366119][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'. [ 139.376742][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'. [ 139.386474][ T7900] netlink: 224 bytes leftover after parsing attributes in process `syz.2.545'. [ 139.416633][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'. [ 139.429178][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'. [ 139.534853][ T5200] udevd[5200]: worker [6088] terminated by signal 33 (Unknown signal 33) [ 139.575298][ T5200] udevd[5200]: worker [6088] failed while handling '/devices/virtual/block/loop0' [ 139.672385][ T7911] pim6reg: entered allmulticast mode [ 139.694728][ T7913] netlink: 'syz.4.550': attribute type 6 has an invalid length. [ 139.702936][ T7911] netlink: 'syz.4.550': attribute type 6 has an invalid length. [ 139.886068][ T7926] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 139.923647][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.100299][ T7934] vlan2: entered promiscuous mode [ 140.135966][ T7934] vlan2: entered allmulticast mode [ 140.160523][ T7934] hsr_slave_1: entered allmulticast mode [ 140.461789][ T7949] netlink: 'syz.1.561': attribute type 29 has an invalid length. [ 140.496440][ T7949] __nla_validate_parse: 4 callbacks suppressed [ 140.496458][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.561'. [ 140.525664][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 140.814856][ T7969] netlink: 52 bytes leftover after parsing attributes in process `syz.2.565'. [ 140.842134][ T7970] netlink: 256 bytes leftover after parsing attributes in process `syz.1.567'. [ 140.853709][ T7967] gre1: entered promiscuous mode [ 140.872591][ T7971] netlink: 'syz.1.567': attribute type 32 has an invalid length. [ 140.897097][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 140.909151][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.916934][ T7973] IPv6: NLM_F_CREATE should be set when creating new route [ 140.924257][ T7973] IPv6: NLM_F_CREATE should be set when creating new route [ 140.934618][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.967076][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.981709][ T7971] bond2: option coupled_control: invalid value (238) [ 140.984845][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.998377][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.999116][ T7971] bond2 (unregistering): Released all slaves [ 141.006099][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.019969][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.034174][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.045551][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.091284][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.109305][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.117283][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.181825][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.220812][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.260882][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.292355][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.389335][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.437340][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.480762][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.489392][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.528022][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.572634][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.580290][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.640943][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.664147][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.674014][ T7973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.258909][ T8014] : renamed from hsr0 (while UP) [ 143.093757][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 143.108188][ T8058] block nbd0: Unsupported socket: should be TCP or UNIX. [ 143.283534][ T8063] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 143.294304][ T8063] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 143.320439][ T8063] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 143.429067][ T8076] tipc: Can't bind to reserved service type 0 [ 143.719047][ T8084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.599'. [ 143.850803][ T8089] team0: Device gtp0 is up. Set it down before adding it as a team port [ 143.948978][ T8091] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.956847][ T8091] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.972715][ T8091] bridge0: entered promiscuous mode [ 144.175199][ T8105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.604'. [ 144.204254][ T8112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.604'. [ 144.323474][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 144.716820][ T8135] syzkaller0: entered promiscuous mode [ 144.747173][ T8135] syzkaller0: entered allmulticast mode [ 144.930269][ T8158] netlink: 'syz.4.620': attribute type 1 has an invalid length. [ 144.941538][ T8158] netlink: 'syz.4.620': attribute type 1 has an invalid length. [ 144.949328][ T8158] netlink: 'syz.4.620': attribute type 1 has an invalid length. [ 144.959395][ T8158] netlink: 'syz.4.620': attribute type 2 has an invalid length. [ 145.085659][ T8152] bond2: left allmulticast mode [ 145.270766][ T8168] veth0_to_bond: entered promiscuous mode [ 145.583834][ T8170] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 145.608420][ T8170] __nla_validate_parse: 7 callbacks suppressed [ 145.608441][ T8170] netlink: 232 bytes leftover after parsing attributes in process `syz.0.623'. [ 145.760864][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 145.843602][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 145.970174][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.632'. [ 146.011695][ T8196] netlink: 16 bytes leftover after parsing attributes in process `syz.2.632'. [ 146.305105][ T5920] IPVS: starting estimator thread 0... [ 146.333630][ T5837] Bluetooth: hci1: command tx timeout [ 146.369545][ T8219] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 146.430599][ T8215] IPVS: using max 27 ests per chain, 64800 per kthread [ 146.442104][ T8219] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 146.460139][ T8219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.519634][ T8224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 146.666542][ T8230] lo: Caught tx_queue_len zero misconfig [ 146.686734][ T8228] netlink: 256 bytes leftover after parsing attributes in process `syz.1.642'. [ 147.153342][ T8256] netlink: 284 bytes leftover after parsing attributes in process `syz.3.650'. [ 147.181988][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.651'. [ 147.202164][ T8256] netlink: 284 bytes leftover after parsing attributes in process `syz.3.650'. [ 147.253909][ T8264] netlink: 'syz.2.652': attribute type 4 has an invalid length. [ 147.262869][ T8263] netlink: 'syz.2.652': attribute type 4 has an invalid length. [ 147.799340][ T8298] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 147.828772][ T8300] netlink: zone id is out of range [ 147.838891][ T8300] netlink: zone id is out of range [ 147.845817][ T8300] netlink: zone id is out of range [ 147.852409][ T8300] netlink: zone id is out of range [ 147.857627][ T8300] netlink: zone id is out of range [ 147.864226][ T8300] netlink: zone id is out of range [ 147.869487][ T8300] netlink: zone id is out of range [ 147.887935][ T8300] netlink: zone id is out of range [ 148.981701][ T8363] netlink: 'syz.1.679': attribute type 13 has an invalid length. [ 148.989513][ T8363] netlink: 'syz.1.679': attribute type 17 has an invalid length. [ 150.231504][ T8423] vlan0: entered promiscuous mode [ 150.249188][ T8423] vlan0: entered allmulticast mode [ 150.274339][ T8423] veth0_vlan: entered allmulticast mode [ 151.127103][ T8470] __nla_validate_parse: 38 callbacks suppressed [ 151.127123][ T8470] netlink: 88 bytes leftover after parsing attributes in process `syz.2.701'. [ 151.265393][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 151.265393][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 151.266895][ T8475] validate_nla: 1 callbacks suppressed [ 151.266914][ T8475] netlink: 'syz.1.703': attribute type 6 has an invalid length. [ 151.504576][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.706'. [ 151.611795][ T5906] net_ratelimit: 51 callbacks suppressed [ 151.611814][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.687455][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'. [ 151.755243][ T8503] netlink: 56 bytes leftover after parsing attributes in process `syz.0.712'. [ 152.004130][ T8518] netlink: 'syz.4.711': attribute type 3 has an invalid length. [ 152.499192][ T8516] bond1: entered allmulticast mode [ 152.505592][ T8516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.513395][ T8518] netlink: 'syz.4.711': attribute type 3 has an invalid length. [ 152.672759][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.053427][ T8546] netlink: 'syz.0.720': attribute type 4 has an invalid length. [ 153.082374][ T8546] netlink: 'syz.0.720': attribute type 4 has an invalid length. [ 153.282891][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.290821][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.413675][ T8551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.431411][ T8551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.603625][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.614402][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.640579][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.660482][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.690880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.699777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.709307][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.725315][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'. [ 153.765444][ T8576] bond2: Invalid ad_actor_system MAC address. [ 153.774574][ T8576] bond2: option ad_actor_system: invalid value (1) [ 153.783262][ T8576] bond2 (unregistering): Released all slaves [ 153.929258][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 153.929271][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 153.936430][ T8587] netlink: 52 bytes leftover after parsing attributes in process `syz.0.730'. [ 153.957412][ T8587] ip6tnl0: Caught tx_queue_len zero misconfig [ 154.224213][ T8601] workqueue: name exceeds WQ_NAME_LEN. Truncating to: “&˜%àï÷åQÍ0@æjÛÈÊ«–Óéôð} [ 154.260827][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.413554][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.730814][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.773258][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.107879][ T8654] vlan1: entered allmulticast mode [ 156.120573][ T8654] veth0_vlan: entered allmulticast mode [ 156.185224][ T8662] __nla_validate_parse: 7 callbacks suppressed [ 156.185245][ T8662] netlink: 9 bytes leftover after parsing attributes in process `syz.4.753'. [ 156.221297][ T8659] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 156.342895][ T8674] netlink: 'syz.1.755': attribute type 10 has an invalid length. [ 156.356025][ T8674] syz_tun: entered promiscuous mode [ 156.395819][ T8674] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 156.499870][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 156.523390][ T8679] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 156.524949][ T8671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.617274][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 156.677035][ T8691] netlink: 72 bytes leftover after parsing attributes in process `syz.1.760'. [ 156.717931][ T8695] vcan0: entered allmulticast mode [ 156.810979][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.898932][ T8708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.907668][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.943313][ T8691] bond2 (unregistering): Released all slaves [ 156.971881][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.060638][ T8714] x_tables: duplicate underflow at hook 1 [ 157.094143][ T8720] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 157.112243][ T8720] netlink: 'syz.2.767': attribute type 1 has an invalid length. [ 157.243960][ T8731] bond4: (slave gretap1): making interface the new active one [ 157.256067][ T8731] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 157.278722][ T8720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'. [ 157.293990][ T8725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.306424][ T8725] bond4: (slave bond5): Enslaving as a backup interface with an up link [ 157.336631][ T8720] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.534234][ T8739] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 157.850866][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.877460][ T8762] pimreg3: entered allmulticast mode [ 158.063199][ T8775] netlink: 40 bytes leftover after parsing attributes in process `syz.4.783'. [ 158.073381][ T8774] block nbd2: not configured, cannot reconfigure [ 158.113534][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 158.251092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.302728][ T8783] netlink: 'syz.2.785': attribute type 1 has an invalid length. [ 158.408758][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.789'. [ 158.423986][ T8783] 8021q: adding VLAN 0 to HW filter on device bond6 [ 158.485291][ T8802] netlink: 'syz.3.790': attribute type 64 has an invalid length. [ 158.510072][ T8802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.790'. [ 158.511681][ T8801] netlink: 'syz.3.790': attribute type 64 has an invalid length. [ 158.544610][ T8805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.789'. [ 158.578341][ T8794] bond6: (slave veth7): Enslaving as an active interface with a down link [ 158.618274][ T8798] veth9: entered promiscuous mode [ 158.628594][ T8798] bond6: (slave veth9): Enslaving as an active interface with a down link [ 158.672894][ T8783] vlan2: entered allmulticast mode [ 158.678349][ T8783] bond6: entered allmulticast mode [ 158.688018][ T8783] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 158.895782][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.207746][ T8842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.893520][ T8840] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 159.931210][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.945240][ T8888] netlink: 'syz.1.812': attribute type 1 has an invalid length. [ 160.020770][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.109719][ T8898] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 160.119151][ T8900] netlink: 'syz.0.816': attribute type 3 has an invalid length. [ 160.617110][ T8906] infiniband syû: set down [ 160.621769][ T8906] infiniband syû: added bond_slave_0 [ 160.671349][ T8906] RDS/IB: syû: added [ 160.675884][ T8906] smc: adding ib device syû with port count 1 [ 160.682217][ T8906] smc: ib device syû port 1 has no pnetid [ 160.806024][ T8931] netlink: 'syz.3.827': attribute type 4 has an invalid length. [ 160.993579][ T8940] vcan0 (unregistering): left allmulticast mode [ 161.213165][ T5837] Bluetooth: hci0: command 0x0c20 tx timeout [ 161.665786][ T8968] ip6tnl2: entered promiscuous mode [ 161.833181][ T8982] __nla_validate_parse: 8 callbacks suppressed [ 161.833201][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 161.906112][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 162.007020][ T8987] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 162.015545][ T8986] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 162.058817][ T8990] netlink: 'syz.0.843': attribute type 4 has an invalid length. [ 162.105802][ T8998] netlink: 'syz.3.846': attribute type 2 has an invalid length. [ 162.134143][ T8998] netlink: 'syz.3.846': attribute type 1 has an invalid length. [ 162.281483][ T9005] net_ratelimit: 1 callbacks suppressed [ 162.281502][ T9005] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 162.308359][ T9006] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 162.372624][ T9010] netlink: 5 bytes leftover after parsing attributes in process `syz.1.850'. [ 162.389111][ T9012] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 162.399559][ T9010] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 162.666513][ T9029] xt_recent: Unsupported userspace flags (000000b1) [ 162.762456][ T9032] netlink: 32 bytes leftover after parsing attributes in process `syz.3.857'. [ 163.329597][ T9053] netlink: 72 bytes leftover after parsing attributes in process `syz.0.863'. [ 163.513126][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 163.547224][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 163.847913][ T9074] netlink: 'syz.4.869': attribute type 1 has an invalid length. [ 163.905140][ T9074] netlink: 228 bytes leftover after parsing attributes in process `syz.4.869'. [ 163.911674][ T9076] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.871'. [ 163.941757][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 163.998487][ T9081] syzkaller1: entered promiscuous mode [ 164.020517][ T9081] syzkaller1: entered allmulticast mode [ 164.057984][ T9088] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 164.082795][ T9084] IPv6: sit2: Disabled Multicast RS [ 164.104771][ T9084] sit2: entered allmulticast mode [ 164.232869][ T9081] IPv6: sit2: Disabled Multicast RS [ 164.248676][ T9081] sit2: entered allmulticast mode [ 164.319736][ T9092] netlink: 'syz.3.873': attribute type 13 has an invalid length. [ 164.346705][ T9092] gretap0: refused to change device tx_queue_len [ 164.355039][ T9092] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 164.843937][ T9123] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 164.852228][ T9123] netlink: 'syz.3.880': attribute type 7 has an invalid length. [ 164.860036][ T9123] netlink: 'syz.3.880': attribute type 8 has an invalid length. [ 164.868917][ T9123] NCSI netlink: No device for ifindex 65584 [ 165.232414][ T9149] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.240208][ T9149] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.258453][ T9149] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.462444][ T9164] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20001 [ 165.583152][ T9173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.646472][ T9149] infiniband syz2: set down [ 165.651810][ T5947] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.670432][ T9149] infiniband syz2: added ip6_vti0 [ 165.851800][ T9177] veth5: entered promiscuous mode [ 165.857247][ T9149] RDS/IB: syz2: added [ 165.862794][ T9149] smc: adding ib device syz2 with port count 1 [ 165.869104][ T9149] smc: ib device syz2 port 1 has no pnetid [ 165.882271][ T9177] veth5: entered allmulticast mode [ 165.888955][ T5906] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.899046][ T9149] ip6_vti0 speed is unknown, defaulting to 1000 [ 166.502718][ T9216] team0: Device gtp0 is up. Set it down before adding it as a team port [ 166.559940][ T9149] ip6_vti0 speed is unknown, defaulting to 1000 [ 166.717478][ T9229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.779457][ T9227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.789485][ T9227] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 166.827542][ T9227] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 166.864570][ T9232] __nla_validate_parse: 8 callbacks suppressed [ 166.864602][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.915'. [ 166.930618][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'. [ 166.961929][ T9229] gretap2: entered promiscuous mode [ 166.988800][ T9229] bond2: (slave gretap2): making interface the new active one [ 167.012035][ T9229] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 167.055682][ T9237] macvlan2: entered promiscuous mode [ 167.062272][ T9237] macvlan2: entered allmulticast mode [ 167.068666][ T9237] bond2: entered promiscuous mode [ 167.075085][ T9237] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.085012][ T9237] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 167.098961][ T9237] bond2: left promiscuous mode [ 167.134197][ T9149] ip6_vti0 speed is unknown, defaulting to 1000 [ 167.213437][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.221978][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.230301][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.260678][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.496909][ T9255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.921'. [ 167.787799][ T9271] validate_nla: 2 callbacks suppressed [ 167.787820][ T9271] netlink: 'syz.2.924': attribute type 13 has an invalid length. [ 167.852081][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.863335][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.872842][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.886461][ T9273] netlink: 'syz.4.928': attribute type 1 has an invalid length. [ 167.895495][ T9273] netlink: 'syz.4.928': attribute type 2 has an invalid length. [ 167.946665][ T9275] Bluetooth: MGMT ver 1.23 [ 168.003983][ T9149] ip6_vti0 speed is unknown, defaulting to 1000 [ 168.007669][ T9273] xt_hashlimit: size too large, truncated to 1048576 [ 168.065915][ T9282] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 168.080895][ T9283] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20000 [ 168.254712][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.263869][ T9291] bond0: Caught tx_queue_len zero misconfig [ 168.450579][ T9149] ip6_vti0 speed is unknown, defaulting to 1000 [ 168.509444][ T9305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.545545][ T9305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.716256][ T9315] ip6gre1: entered allmulticast mode [ 168.761500][ T9317] netlink: 'syz.4.941': attribute type 6 has an invalid length. [ 168.887115][ T9325] netlink: 'syz.1.943': attribute type 3 has an invalid length. [ 168.905397][ T9326] Unsupported ieee802154 address type: 0 [ 168.923423][ T9329] netlink: 'syz.0.944': attribute type 10 has an invalid length. [ 168.940757][ T9329] bridge_slave_1: left allmulticast mode [ 168.952421][ T9329] bridge_slave_1: left promiscuous mode [ 168.970145][ T9329] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.007602][ T9329] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 169.161273][ T9341] SET target dimension over the limit! [ 169.263836][ T9346] vlan4: entered allmulticast mode [ 169.291015][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.305699][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 169.681702][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'. [ 169.699487][ T9373] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.959'. [ 169.743016][ T9375] netlink: 540 bytes leftover after parsing attributes in process `syz.3.960'. [ 169.764165][ T9373] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.959'. [ 169.831418][ T9380] netlink: 240 bytes leftover after parsing attributes in process `syz.2.961'. [ 169.871630][ T9380] netlink: 32 bytes leftover after parsing attributes in process `syz.2.961'. [ 169.937334][ T9382] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 169.953237][ T9382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.330873][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.412901][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 170.445293][ T9415] netlink: 'syz.4.970': attribute type 18 has an invalid length. [ 170.488738][ T9415] netlink: 'syz.4.970': attribute type 18 has an invalid length. [ 170.607045][ T9420] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.614376][ T9420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.622030][ T9420] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.629233][ T9420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.638682][ T9420] bridge0: left promiscuous mode [ 170.644986][ T9420] bridge0: entered allmulticast mode [ 170.687614][ T9423] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 170.703496][ T9423] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 171.772207][ T9472] bridge3: entered promiscuous mode [ 171.846744][ T9472] bridge3: entered allmulticast mode [ 172.059702][ T9500] netlink: 'syz.2.991': attribute type 2 has an invalid length. [ 172.105100][ T9500] sctp: [Deprecated]: syz.2.991 (pid 9500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.105100][ T9500] Use struct sctp_sack_info instead [ 172.333441][ T9510] __nla_validate_parse: 7 callbacks suppressed [ 172.333462][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.995'. [ 172.499239][ T9524] Cannot find del_set index 0 as target [ 172.633700][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 172.643272][ T9532] team0: Caught tx_queue_len zero misconfig [ 172.702095][ T9527] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.726432][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 172.754014][ T9534] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1002'. [ 172.759189][ T9539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1004'. [ 172.815613][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1005'. [ 172.971385][ T6271] net_ratelimit: 6 callbacks suppressed [ 172.971405][ T6271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.985181][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.994400][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.003919][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.012112][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.042107][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.402849][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 173.405762][ T9570] netlink: 'syz.2.1010': attribute type 5 has an invalid length. [ 173.435161][ T30] audit: type=1800 audit(1764740937.030:8): pid=9573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1015" name="hugetlb.2MB.rsvd.usage_in_bytes" dev="tmpfs" ino=1074 res=0 errno=0 [ 173.458866][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.481740][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1014'. [ 173.686155][ T9585] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1017'. [ 173.695738][ T9585] 8021q: VLANs not supported on sit0 [ 173.711394][ T9587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1019'. [ 174.113796][ T9604] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 174.178155][ T9606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.187562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.220688][ T9606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.335474][ T9616] lo: Caught tx_queue_len zero misconfig [ 174.654772][ T9635] netlink: 'syz.0.1034': attribute type 3 has an invalid length. [ 174.684788][ T9635] block nbd0: not configured, cannot reconfigure [ 174.709707][ T9639] IPVS: length: 8 != 1152 [ 174.916763][ T9646] xt_hashlimit: size too large, truncated to 1048576 [ 174.974893][ T9652] netlink: 'syz.2.1039': attribute type 23 has an invalid length. [ 175.085402][ T9656] netlink: 'syz.3.1043': attribute type 7 has an invalid length. [ 175.140562][ T9656] netlink: 'syz.3.1043': attribute type 8 has an invalid length. [ 175.179110][ T9656] team0: entered promiscuous mode [ 175.219876][ T9656] C: entered promiscuous mode [ 175.246348][ T9656] team_slave_1: entered promiscuous mode [ 175.289937][ T9656] team0: left promiscuous mode [ 175.297209][ T9656] C: left promiscuous mode [ 175.308244][ T9656] team_slave_1: left promiscuous mode [ 175.329076][ T9668] Cannot find set identified by id 0 to match [ 175.755683][ T9693] netlink: 'syz.3.1054': attribute type 10 has an invalid length. [ 175.868017][ T9698] netlink: 'syz.1.1055': attribute type 11 has an invalid length. [ 175.932850][ T9692] syzkaller0: entered promiscuous mode [ 175.946728][ T9692] syzkaller0: entered allmulticast mode [ 177.799451][ T9750] __nla_validate_parse: 7 callbacks suppressed [ 177.799475][ T9750] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1073'. [ 177.948097][ T9760] netlink: 'syz.0.1077': attribute type 10 has an invalid length. [ 177.955722][ T9759] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 177.966589][ T9760] bridge0: port 2(team0) entered blocking state [ 177.981531][ T9760] bridge0: port 2(team0) entered disabled state [ 178.007673][ T9760] team0: entered allmulticast mode [ 178.034959][ T9760] team_slave_0: entered allmulticast mode [ 178.056040][ T9760] team_slave_1: entered allmulticast mode [ 178.140116][ T9760] team0: entered promiscuous mode [ 178.163990][ T9760] team_slave_0: entered promiscuous mode [ 178.188485][ T9760] team_slave_1: entered promiscuous mode [ 178.476889][ T9791] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1083'. [ 178.652975][ T5906] net_ratelimit: 8 callbacks suppressed [ 178.652995][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.731088][ T6273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.740652][ T1166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.750131][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.759228][ T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.768285][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.777149][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.803999][ T9805] netlink: 'syz.0.1087': attribute type 4 has an invalid length. [ 178.853033][ T9807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1088'. [ 178.862556][ T9808] netlink: 'syz.0.1087': attribute type 4 has an invalid length. [ 178.887066][ T9811] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1089'. [ 178.903170][ T9812] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1090'. [ 179.454237][ T9837] tipc: Enabled bearer , priority 0 [ 179.480122][ T9844] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 179.511754][ T9841] syzkaller0: entered promiscuous mode [ 179.538819][ T9841] syzkaller0: entered allmulticast mode [ 179.700528][ T9841] tipc: Resetting bearer [ 179.754773][ T9841] tipc: Disabling bearer [ 179.846404][ T9860] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1106'. [ 180.136748][ T9871] netlink: 'syz.1.1110': attribute type 12 has an invalid length. [ 180.145071][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 180.166372][ T6271] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.166530][ T9871] netlink: 'syz.1.1110': attribute type 12 has an invalid length. [ 180.184165][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'. [ 180.195517][ T6271] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.211769][ T6271] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.243179][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.565786][ T9892] syzkaller1: entered promiscuous mode [ 180.589001][ T9892] syzkaller1: entered allmulticast mode [ 180.734497][ T9892] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 180.769599][ T9912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1124'. [ 180.792793][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 180.816952][ T9912] netlink: 'syz.4.1124': attribute type 20 has an invalid length. [ 180.868065][ T9912] netlink: 'syz.4.1124': attribute type 20 has an invalid length. [ 180.918915][ T9922] netlink: 'syz.0.1126': attribute type 15 has an invalid length. [ 181.035079][ T9924] : entered promiscuous mode [ 181.082975][ T9930] netlink: 'syz.4.1129': attribute type 1 has an invalid length. [ 181.433223][ T9954] netlink: 'syz.4.1135': attribute type 10 has an invalid length. [ 181.520039][ T9954] veth0_virt_wifi: entered allmulticast mode [ 181.592355][ T9954] team0: Port device veth0_virt_wifi added [ 181.907534][ T9983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.281632][ T9954] syz.4.1135 (9954) used greatest stack depth: 18616 bytes left [ 182.451157][ T9996] netlink: 'syz.2.1146': attribute type 2 has an invalid length. [ 182.667988][T10017] openvswitch: netlink: Actions may not be safe on all matching packets [ 183.074510][T10040] wg1: entered promiscuous mode [ 183.079711][T10040] wg1: entered allmulticast mode [ 183.207112][T10047] __nla_validate_parse: 46 callbacks suppressed [ 183.207134][T10047] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1159'. [ 183.458634][T10066] xt_connbytes: Forcing CT accounting to be enabled [ 183.751186][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880597e6800: rx timeout, send abort [ 184.260701][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880597e6800: abort rx timeout. Force session deactivation [ 185.069932][T10090] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1173'. [ 185.096144][T10090] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1173'. [ 185.124108][T10090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1173'. [ 185.151849][T10088] netlink: 'syz.1.1170': attribute type 4 has an invalid length. [ 185.420896][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1177'. [ 185.453134][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 185.631271][T10120] TCP: TCP_TX_DELAY enabled [ 185.714536][T10128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1186'. [ 185.736100][T10131] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1187'. [ 185.876953][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1190'. [ 185.896190][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1190'. [ 185.957425][T10145] v: renamed from vlan0 [ 186.039653][T10157] xt_socket: unknown flags 0xe4 [ 186.577527][T10193] tunl0: Caught tx_queue_len zero misconfig [ 186.867010][T10204] netlink: 'syz.1.1210': attribute type 1 has an invalid length. [ 187.667877][T10235] 8021q: adding VLAN 0 to HW filter on device bond9 [ 187.926483][T10266] sctp: [Deprecated]: syz.1.1229 (pid 10266) Use of int in maxseg socket option. [ 187.926483][T10266] Use struct sctp_assoc_value instead [ 188.067478][T10279] Unsupported ieee802154 address type: 0 [ 188.089996][T10281] netlink: 'syz.0.1232': attribute type 1 has an invalid length. [ 188.231939][T10281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.321807][T10288] bond3: (slave ip6erspan0): making interface the new active one [ 188.370596][T10288] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 188.404422][T10298] netlink: 'syz.2.1235': attribute type 4 has an invalid length. [ 188.454067][T10296] sctp: [Deprecated]: syz.1.1234 (pid 10296) Use of int in maxseg socket option. [ 188.454067][T10296] Use struct sctp_assoc_value instead [ 188.731206][T10318] __nla_validate_parse: 11 callbacks suppressed [ 188.731226][T10318] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1242'. [ 188.845343][T10326] bond0: entered promiscuous mode [ 188.852923][T10326] bond_slave_0: entered promiscuous mode [ 188.860732][T10326] bond_slave_1: entered promiscuous mode [ 189.064595][ T9] IPVS: starting estimator thread 0... [ 189.148286][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 189.157540][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1255'. [ 189.168988][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1255'. [ 189.178892][T10343] IPVS: using max 24 ests per chain, 57600 per kthread [ 189.187155][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'. [ 189.198742][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1254'. [ 189.212976][T10351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1255'. [ 189.222428][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1255'. [ 189.365564][T10361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1259'. [ 189.377646][T10361] veth0: entered promiscuous mode [ 189.526662][T10360] veth0: left promiscuous mode [ 189.772504][T10377] blkio.reset_stats is deprecated [ 189.868891][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1266'. [ 189.888608][T10391] netlink: 'syz.2.1267': attribute type 1 has an invalid length. [ 189.935580][T10391] 8021q: adding VLAN 0 to HW filter on device bond10 [ 189.981059][ T30] audit: type=1107 audit(1764740953.570:9): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 190.008291][T10391] netlink: 'syz.2.1267': attribute type 4 has an invalid length. [ 190.155584][T10391] netlink: 'syz.2.1267': attribute type 4 has an invalid length. [ 190.245347][T10391] veth13: entered promiscuous mode [ 190.294664][T10415] SET target dimension over the limit! [ 190.605018][T10436] netlink: 'syz.1.1279': attribute type 21 has an invalid length. [ 190.631911][T10437] batadv1: entered allmulticast mode [ 190.866118][T10448] netlink: 'syz.2.1282': attribute type 39 has an invalid length. [ 190.976126][T10456] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.293480][T10455] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 192.550019][T10474] x_tables: duplicate underflow at hook 3 [ 192.926234][T10502] netlink: 'syz.4.1303': attribute type 1 has an invalid length. [ 192.938484][T10502] netlink: 'syz.4.1303': attribute type 4 has an invalid length. [ 192.959842][T10502] netlink: 'syz.4.1303': attribute type 1 has an invalid length. [ 192.978992][T10502] netlink: 'syz.4.1303': attribute type 4 has an invalid length. [ 193.010125][T10504] ksmbd: Unknown IPC event: 3, ignore. [ 193.070159][T10508] veth0_to_bridge: entered allmulticast mode [ 193.125352][T10508] bond0: (slave bond_slave_1): Releasing backup interface [ 193.257666][T10506] veth0_to_bridge: left allmulticast mode [ 193.453133][T10529] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 193.833714][T10561] __nla_validate_parse: 18 callbacks suppressed [ 193.833734][T10561] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1321'. [ 193.962130][T10570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1325'. [ 194.409771][T10604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1337'. [ 194.421008][T10605] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1336'. [ 194.465270][T10607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1337'. [ 194.593184][T10616] delete_channel: no stack [ 194.621880][T10618] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1341'. [ 194.658454][T10620] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1342'. [ 194.715670][T10623] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1343'. [ 194.771350][T10633] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 194.827873][T10629] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 194.888210][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1345'. [ 194.943698][T10629] bond3 (unregistering): Released all slaves [ 195.545531][T10685] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1356'. [ 195.561402][T10688] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 195.772883][T10697] netlink: 'syz.2.1359': attribute type 1 has an invalid length. [ 197.031000][T10763] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 197.111981][T10763] bond3: entered promiscuous mode [ 197.117961][T10763] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.128099][T10774] bond3: entered allmulticast mode [ 197.190290][T10778] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 197.206061][T10778] netlink: 'syz.3.1380': attribute type 1 has an invalid length. [ 197.243335][T10763] bond3: (slave bridge4): making interface the new active one [ 197.261858][T10763] bridge4: entered promiscuous mode [ 197.271742][T10763] bridge4: entered allmulticast mode [ 197.279396][T10763] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 198.333918][T10828] unsupported nla_type 33542 [ 198.381367][T10816] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 198.405200][T10816] netlink: 'syz.4.1392': attribute type 3 has an invalid length. [ 198.438091][T10816] netlink: 'syz.4.1392': attribute type 7 has an invalid length. [ 198.469276][T10816] netlink: 'syz.4.1392': attribute type 8 has an invalid length. [ 198.496450][T10816] NCSI netlink: No device for ifindex 131092 [ 198.792607][T10855] netlink: 'syz.2.1401': attribute type 25 has an invalid length. [ 199.064025][T10875] openvswitch: netlink: Flow actions attr not present in new flow. [ 199.236887][T10885] __nla_validate_parse: 7 callbacks suppressed [ 199.236907][T10885] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1413'. [ 199.305788][T10892] netlink: 1032 bytes leftover after parsing attributes in process `syz.3.1411'. [ 199.469186][T10899] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 199.813358][T10910] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1416'. [ 199.855688][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.981400][T10919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.201862][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1424'. [ 200.221787][T10937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1424'. [ 200.223654][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 200.255972][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 200.308244][T10938] sctp: [Deprecated]: syz.4.1425 (pid 10938) Use of int in max_burst socket option. [ 200.308244][T10938] Use struct sctp_assoc_value instead [ 200.395606][T10947] netlink: 'syz.3.1428': attribute type 1 has an invalid length. [ 200.525965][T10952] bond2: (slave ip6gretap1): making interface the new active one [ 200.535431][T10952] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.545334][T10952] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 200.557218][T10958] openvswitch: netlink: IP tunnel dst address not specified [ 200.559169][T10952] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 200.664120][T10961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.670599][T10956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1431'. [ 200.777692][T10968] sctp: [Deprecated]: syz.4.1434 (pid 10968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.777692][T10968] Use struct sctp_sack_info instead [ 200.795881][T10970] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1435'. [ 200.809514][T10970] 8021q: VLANs not supported on ip6_vti0 [ 200.919211][T10976] netlink: 'syz.3.1438': attribute type 4 has an invalid length. [ 200.930104][T10976] netlink: 'syz.3.1438': attribute type 4 has an invalid length. [ 200.930285][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'. [ 201.045046][T10985] netlink: 'syz.3.1440': attribute type 4 has an invalid length. [ 201.275192][T10994] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 201.293168][T10994] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 201.409236][T11011] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001 [ 201.454353][T11012] batadv_slave_1: entered promiscuous mode [ 201.482208][T11009] batadv_slave_1: left promiscuous mode [ 201.602120][T11021] 8021q: adding VLAN 0 to HW filter on device bond11 [ 201.628640][T11044] netlink: 'syz.3.1452': attribute type 2 has an invalid length. [ 201.705546][T11055] netlink: 'syz.1.1454': attribute type 1 has an invalid length. [ 201.925638][T11064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.653220][T11060] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 203.675343][T11097] netlink: 'syz.4.1470': attribute type 3 has an invalid length. [ 203.683551][T11097] netlink: 'syz.4.1470': attribute type 1 has an invalid length. [ 203.722398][T11084] openvswitch: netlink: nsh attr 8706 is out of range max 3 [ 203.729784][T11084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.975878][T11122] netlink: 'syz.4.1477': attribute type 6 has an invalid length. [ 204.164534][T11132] bridge5: entered promiscuous mode [ 204.170301][T11132] bridge5: entered allmulticast mode [ 204.204094][T11132] bond0: (slave syz_tun): Releasing backup interface [ 204.284215][T11132] bridge_slave_0: left promiscuous mode [ 204.290157][T11132] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.308094][T11141] __nla_validate_parse: 6 callbacks suppressed [ 204.308116][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 204.334849][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 204.699508][T11132] bridge_slave_1: left allmulticast mode [ 204.754397][T11132] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.030631][T11132] bond0: (slave bond_slave_0): Releasing backup interface [ 205.216504][T11132] bond0: (slave bond_slave_1): Releasing backup interface [ 205.290657][T11132] team0: Port device team_slave_0 removed [ 205.348881][T11132] team0: Port device team_slave_1 removed [ 205.426688][T11132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.470852][T11132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.763658][T11132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.796549][T11132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.830896][T11132] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.296318][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 206.303014][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 206.309592][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 206.316102][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.324088][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.331965][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.339996][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.347886][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.355846][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.363689][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.371637][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.379488][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.387625][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.395512][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.403424][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.411280][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.419226][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.427075][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.435019][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.442871][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.450855][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.458717][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.466797][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.474687][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.482647][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.490607][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.498538][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.506376][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.514288][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.522251][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.530171][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.538074][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.546007][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.553852][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.561758][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.569669][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.577698][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.585610][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.593802][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.601684][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.609634][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.617501][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.625418][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.633313][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.641267][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.649360][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.657463][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.665324][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.673232][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.681097][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.689014][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.696855][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.704809][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.712720][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.720915][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.728780][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.737588][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.745496][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.753440][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.761278][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.769177][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.777040][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.784977][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 206.792929][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 206.846621][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1487'. [ 206.856450][T11168] tipc: Enabling of bearer rejected, media not registered [ 207.090931][T11179] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003 [ 207.145281][T11179] block nbd0: not configured, cannot reconfigure [ 207.220596][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'. [ 207.230198][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'. [ 207.242600][T11192] netlink: 'syz.4.1494': attribute type 37 has an invalid length. [ 207.315993][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 207.316253][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 207.415332][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1498'. [ 207.623366][T11211] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.829565][T11221] geneve4: entered promiscuous mode [ 207.850136][ T6271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 207.863006][ T6271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 207.909755][T11224] wireguard1: entered allmulticast mode [ 207.922420][ T6271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 207.931775][ T6271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 208.072264][T11224] syzkaller0: entered promiscuous mode [ 208.078098][T11224] syzkaller0: entered allmulticast mode [ 208.784955][T11273] netlink: 'syz.1.1518': attribute type 1 has an invalid length. [ 208.811137][T11273] netlink: 'syz.1.1518': attribute type 7 has an invalid length. [ 208.833095][T11273] netlink: 'syz.1.1518': attribute type 8 has an invalid length. [ 208.856231][T11273] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1518'. [ 208.877409][T11273] NCSI netlink: No device for ifindex 65584 [ 208.928080][T11279] delete_channel: no stack [ 209.025261][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'. [ 209.117803][T11292] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 209.360495][T11304] __nla_validate_parse: 2 callbacks suppressed [ 209.360515][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1528'. [ 209.528111][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1528'. [ 209.651125][T11322] netlink: 'syz.0.1533': attribute type 2 has an invalid length. [ 209.712431][T11328] ipt_ECN: cannot use operation on non-tcp rule [ 209.813221][T11336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1538'. [ 209.835069][T11336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1538'. [ 209.845190][T11334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1536'. [ 209.865250][T11336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1538'. [ 209.899791][T11336] netlink: 'syz.0.1538': attribute type 4 has an invalid length. [ 209.934763][T11336] netlink: 'syz.0.1538': attribute type 4 has an invalid length. [ 210.439822][ T52] Bluetooth: hci4: link tx timeout [ 210.446908][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.653630][T11373] bond0: Caught tx_queue_len zero misconfig [ 211.170790][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1558'. [ 212.064561][T11409] openvswitch: netlink: IP tunnel dst address not specified [ 212.180734][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 212.182752][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 212.192983][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 212.490585][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 212.877578][T11435] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1566'. [ 213.395395][T11474] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 213.409522][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 213.460034][T11474] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 213.500720][T11474] gretap1: entered promiscuous mode [ 213.526462][T11474] gretap1: entered allmulticast mode [ 213.579823][T11489] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1583'. [ 213.642891][T11493] openvswitch: netlink: IP tunnel dst address not specified [ 213.713371][T11489] openvswitch: netlink: nsh attr 8706 is out of range max 3 [ 213.722274][T11489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.936752][T11505] veth1_to_bond: entered promiscuous mode [ 214.565161][T11551] syzkaller0: entered promiscuous mode [ 214.572452][T11551] syzkaller0: entered allmulticast mode [ 215.258435][T11583] netlink: 'syz.4.1614': attribute type 12 has an invalid length. [ 215.283888][T11583] __nla_validate_parse: 2 callbacks suppressed [ 215.283909][T11583] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1614'. [ 215.504460][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1618'. [ 215.530826][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1618'. [ 215.576628][ T52] block nbd0: Receive control failed (result -107) [ 215.819158][T11609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1623'. [ 215.854138][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1623'. [ 215.916500][T11613] IPVS: Unknown mcast interface: vcan0 [ 215.928474][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 215.932989][T11615] syzkaller0: entered promiscuous mode [ 215.943656][T11615] syzkaller0: entered allmulticast mode [ 216.056623][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1627'. [ 216.089715][T11621] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1627'. [ 216.118601][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1627'. [ 216.284898][T11632] netlink: 'syz.0.1631': attribute type 4 has an invalid length. [ 216.300843][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 216.391214][T11637] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 216.645680][T11662] bridge_slave_0: invalid flags given to default FDB implementation [ 216.870998][T11668] bond4: entered promiscuous mode [ 216.880632][T11668] bond4: entered allmulticast mode [ 216.903111][T11668] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.935362][T11678] ÿÿÿÿÿÿ¤lòo¾k‰÷: renamed from lo [ 217.035538][T11668] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 217.114632][T11690] netlink: 'syz.2.1645': attribute type 8 has an invalid length. [ 217.188301][T11668] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 217.237387][T11640] netlink: 'syz.1.1632': attribute type 10 has an invalid length. [ 217.303497][T11668] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 217.500701][T11668] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 217.812158][T11657] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 217.875481][T11657] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 217.925652][T11657] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 217.940579][T11657] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 218.068943][T11718] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 218.336959][T11684] ip6_vti0 speed is unknown, defaulting to 1000 [ 235.695382][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 261.294620][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.769280][T11775] ip6gre0: Master is either lo or non-ether device [ 272.806060][T11778] __nla_validate_parse: 6 callbacks suppressed [ 272.806081][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 273.112133][T11802] netlink: 'syz.2.1678': attribute type 4 has an invalid length. [ 273.120681][T11802] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1678'. [ 273.152255][T11800] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 273.197432][T11801] ip6tnl0: Caught tx_queue_len zero misconfig [ 273.328381][T11814] netlink: 'syz.2.1683': attribute type 27 has an invalid length. [ 273.568127][T11831] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1689'. [ 273.577222][T11831] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 273.646479][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1690'. [ 273.712802][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'. [ 274.013330][T11852] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1697'. [ 274.273095][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1703'. [ 274.383089][T11873] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.1705'. [ 274.414369][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.591207][T11885] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 274.954654][T11906] netlink: 808 bytes leftover after parsing attributes in process `syz.1.1714'. [ 274.971858][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 275.046555][T11912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.130547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.293119][T11931] : entered promiscuous mode [ 275.443272][T11935] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 275.454078][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.462076][T11935] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 275.504355][T11935] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 275.526024][T11943] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 275.540501][T11943] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1725'. [ 275.786871][T11943] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 275.845516][T11943] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 275.871433][T11943] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 275.886737][T11943] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 275.909615][T11943] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 275.973362][T11943] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 276.143678][T11966] ip6tnl1: entered promiscuous mode [ 276.148972][T11966] ip6tnl1: entered allmulticast mode [ 276.180493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.188978][T11968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.190770][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.378041][T11982] pim6reg: entered allmulticast mode [ 276.477933][T11992] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 276.490069][T11992] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 276.495762][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.103498][T12050] __nla_validate_parse: 37 callbacks suppressed [ 278.103515][T12050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1753'. [ 278.213839][T12056] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1756'. [ 278.297977][T12061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1757'. [ 278.308579][T12061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1757'. [ 278.319840][T12061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1757'. [ 278.344089][T12065] wireguard1: entered allmulticast mode [ 278.356840][T12061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1757'. [ 278.367326][T12061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1757'. [ 278.376778][T12061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1757'. [ 278.388148][T12061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1757'. [ 278.398989][T12061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1757'. [ 278.578054][T12071] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 278.599063][T12071] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 278.854982][T12091] validate_nla: 27 callbacks suppressed [ 278.855002][T12091] netlink: 'syz.0.1768': attribute type 1 has an invalid length. [ 279.221783][ T5947] net_ratelimit: 7983 callbacks suppressed [ 279.221804][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.290439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.594779][T12121] Bluetooth: MGMT ver 1.23 [ 279.608646][T12121] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 279.618340][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.095710][T12150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 280.331058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.545498][T12174] netlink: 'syz.0.1791': attribute type 32 has an invalid length. [ 280.654069][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.680586][T12174] bond6: option coupled_control: invalid value (52) [ 280.689737][T12174] bond6 (unregistering): Released all slaves [ 280.778778][T12188] syzkaller0: entered promiscuous mode [ 280.785010][T12188] syzkaller0: entered allmulticast mode [ 280.969287][T12204] netlink: 'syz.2.1799': attribute type 1 has an invalid length. [ 281.087360][T12204] openvswitch: netlink: Flow key attr not present in new flow. [ 281.116984][T12210] bond12: (slave gretap3): making interface the new active one [ 281.126136][T12210] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 281.238312][T12215] IPv6: sit1: Disabled Multicast RS [ 281.259117][T12215] sit1: entered allmulticast mode [ 281.370440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.548939][T12239] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 281.577521][T12229] syz.3.1804 (12229) used greatest stack depth: 17832 bytes left [ 281.592495][T12235] netlink: 'syz.0.1810': attribute type 4 has an invalid length. [ 281.608048][T12238] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 281.694491][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.152413][T12272] netlink: 'syz.4.1818': attribute type 12 has an invalid length. [ 282.251426][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.410417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.846613][T12292] netlink: 'syz.2.1822': attribute type 11 has an invalid length. [ 282.881229][T12292] netlink: 'syz.2.1822': attribute type 4 has an invalid length. [ 283.645767][T12330] __nla_validate_parse: 43 callbacks suppressed [ 283.645789][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1834'. [ 283.691759][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1836'. [ 283.695439][ C1] vxcan1: j1939_session_tx_dat: 0xffff88806b71a000: queue data error: -100 [ 283.746436][T12342] netlink: 'syz.0.1836': attribute type 1 has an invalid length. [ 283.821789][T12346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1838'. [ 283.856014][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1838'. [ 283.942762][T12348] net veth1_virt_wifi .: renamed from virt_wifi0 [ 283.990979][T12351] netlink: 'syz.2.1837': attribute type 33 has an invalid length. [ 283.996697][T12353] netlink: 'syz.1.1841': attribute type 83 has an invalid length. [ 284.009502][T12353] netlink: 'syz.1.1841': attribute type 13 has an invalid length. [ 284.034269][T12353] syz_tun: left promiscuous mode [ 284.061002][T12357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1840'. [ 284.195333][T12359] netlink: 'syz.2.1843': attribute type 83 has an invalid length. [ 284.257075][T12364] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 284.319331][T12353] gretap1: left promiscuous mode [ 284.326224][T12353] gretap1: left allmulticast mode [ 284.349377][T12353] vlan2: left promiscuous mode [ 284.355361][T12353] vlan2: left allmulticast mode [ 284.361101][T12353] hsr_slave_1: left allmulticast mode [ 284.377875][T12353] gretap2: left promiscuous mode [ 284.390203][T12353] bridge3: left promiscuous mode [ 284.395871][T12353] bridge3: left allmulticast mode [ 284.406157][T12353] bond3: left promiscuous mode [ 284.412196][T12353] bridge4: left promiscuous mode [ 284.417798][T12353] bond3: left allmulticast mode [ 284.422937][T12353] bridge4: left allmulticast mode [ 284.437093][T12353] bridge5: left promiscuous mode [ 284.443257][T12353] bridge5: left allmulticast mode [ 284.451237][T12353] wireguard1: left allmulticast mode [ 284.619976][T12379] veth1_macvtap: left promiscuous mode [ 284.636696][T12379] macsec0: entered promiscuous mode [ 284.642679][T12379] macsec0: entered allmulticast mode [ 284.683560][T12379] tipc: Started in network mode [ 284.688507][T12379] tipc: Node identity 080211, cluster identity 4711 [ 284.725454][T12379] tipc: Enabled bearer , priority 0 [ 284.778296][T12388] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 284.795819][T12386] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 284.814297][T11040] net_ratelimit: 2 callbacks suppressed [ 284.814320][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.840013][T12386] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 284.871002][T12379] veth1_macvtap: entered promiscuous mode [ 284.877146][T12379] veth1_macvtap: entered allmulticast mode [ 284.893716][T12379] macsec0: left promiscuous mode [ 284.917800][T12379] macsec0: left allmulticast mode [ 284.927687][T12379] veth1_macvtap: left allmulticast mode [ 284.985713][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.205631][T12391] syzkaller1: entered promiscuous mode [ 285.211554][T12391] syzkaller1: entered allmulticast mode [ 285.237680][T12404] netlink: 'syz.3.1858': attribute type 2 has an invalid length. [ 285.282372][T12404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1858'. [ 285.309361][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.326534][T12409] ip6tnl0: entered promiscuous mode [ 285.340881][T12409] ip6tnl0: entered allmulticast mode [ 285.596457][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 285.599020][T12430] smc: removing ib device syz2 [ 285.843089][T11040] tipc: Node number set to 134353152 [ 285.855585][T11041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.879548][T12446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1870'. [ 285.928046][T12449] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20004 [ 286.010507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.894009][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.959458][T12498] netlink: 'syz.0.1880': attribute type 10 has an invalid length. [ 287.050975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.940235][T11041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.058908][T12548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1891'. [ 288.144385][T12556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1892'. [ 288.170030][T12554] netlink: 'syz.0.1893': attribute type 5 has an invalid length. [ 288.332055][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.369338][ T6273] bond0: (slave bridge_slave_1): interface is now up [ 288.376559][T12560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.380756][ T6273] bond0: (slave wlan1): interface is now up [ 288.423831][T12560] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 288.566277][T12566] IPVS: ip_vs_edit_dest(): server weight less than zero [ 288.575499][ T5947] IPVS: starting estimator thread 0... [ 288.690462][T12567] IPVS: using max 27 ests per chain, 64800 per kthread [ 288.917195][T12583] __nla_validate_parse: 1 callbacks suppressed [ 288.917240][T12583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1899'. [ 289.033088][T12585] netlink: 'syz.3.1900': attribute type 1 has an invalid length. [ 289.042350][T12586] netlink: 'syz.3.1900': attribute type 1 has an invalid length. [ 289.045796][T12577] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.050814][T12585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.081370][T12577] bridge_slave_1: left allmulticast mode [ 289.087081][T12577] bridge_slave_1: left promiscuous mode [ 289.093595][T12577] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.125024][T12577] bond0: (slave bond_slave_0): Releasing backup interface [ 289.134167][T12577] bond_slave_0: left promiscuous mode [ 289.145558][T12577] bond0: (slave bond_slave_1): Releasing backup interface [ 289.154235][T12577] bond_slave_1: left promiscuous mode [ 289.169636][T12577] team0: Port device team_slave_0 removed [ 289.196497][T12577] team0: Port device team_slave_1 removed [ 289.208841][T12577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.224210][T12577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.242968][T12577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.257587][T12577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.456231][T12599] netlink: 696 bytes leftover after parsing attributes in process `syz.4.1902'. [ 289.729104][T12612] netlink: 'syz.2.1908': attribute type 4 has an invalid length. [ 289.955271][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 289.975302][T12630] SET target dimension over the limit! [ 290.314823][T12653] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1922'. [ 290.327369][T12654] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1922'. [ 290.440421][T12660] tipc: Enabled bearer , priority 0 [ 290.451844][T12659] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1924'. [ 290.462580][T12660] +: renamed from syzkaller0 [ 290.476924][T12660] tipc: Disabling bearer [ 290.837838][T12690] netlink: 'syz.4.1931': attribute type 4 has an invalid length. [ 290.846900][T12690] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1931'. [ 290.863657][T12690] `: renamed from bond0 [ 290.949242][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'. [ 291.099969][T12695] macvtap1: entered promiscuous mode [ 291.107907][T12695] macvtap1: entered allmulticast mode [ 291.303637][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1940'. [ 291.328980][T12716] netlink: 'syz.2.1940': attribute type 5 has an invalid length. [ 291.362120][T12716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1940'. [ 291.694466][T12739] netem: change failed [ 291.706470][T12740] macvtap0: Device is already in use. [ 291.842348][T12748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.957324][T12755] net_ratelimit: 3 callbacks suppressed [ 291.957345][T12755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.307185][T12780] netlink: 'syz.2.1958': attribute type 1 has an invalid length. [ 292.322305][T12780] netlink: 'syz.2.1958': attribute type 2 has an invalid length. [ 292.962515][T12826] netlink: 'syz.2.1968': attribute type 2 has an invalid length. [ 293.074023][T12830] netlink: 'syz.3.1972': attribute type 1 has an invalid length. [ 293.528165][T12856] netlink: 'syz.0.1979': attribute type 3 has an invalid length. [ 294.024158][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 294.088040][T12878] __nla_validate_parse: 10 callbacks suppressed [ 294.088072][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 294.299531][T12899] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1991'. [ 294.344264][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 294.358985][T12897] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1991'. [ 294.400738][T12903] xt_bpf: check failed: parse error [ 294.509675][T12906] netlink: 'syz.4.1992': attribute type 21 has an invalid length. [ 294.598015][T12906] bond0: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 294.616839][T12906] bond0 (unregistering): Released all slaves [ 294.620997][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1994'. [ 294.893488][T12927] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1999'. [ 294.982943][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 295.386249][T12949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2007'. [ 295.473842][T12954] tipc: Enabling of bearer rejected, failed to enable media [ 295.747492][T12970] netlink: 'syz.2.2013': attribute type 25 has an invalid length. [ 295.794706][T12973] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:32789 [ 296.036928][T12989] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2019'. [ 296.401047][T13003] vlan2: entered promiscuous mode [ 296.406393][T13003] vlan2: entered allmulticast mode [ 296.473513][T13003] hsr_slave_1: entered allmulticast mode [ 296.659560][T13024] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 296.721381][T13027] netlink: 'syz.0.2027': attribute type 29 has an invalid length. [ 296.729276][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2027'. [ 296.777849][T13029] syz_tun: entered allmulticast mode [ 296.831020][T13028] syz_tun: left allmulticast mode [ 296.918710][T13035] netlink: 'syz.0.2031': attribute type 1 has an invalid length. [ 296.972139][T13041] xt_hashlimit: overflow, try lower: 3/0 [ 296.991612][T13040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.225743][T13048] netlink: 'syz.2.2038': attribute type 10 has an invalid length. [ 297.252749][T13048] batadv0: entered promiscuous mode [ 297.283395][T13048] batadv0: entered allmulticast mode [ 297.289628][T13048] bridge0: port 3(batadv0) entered blocking state [ 297.331751][T13048] bridge0: port 3(batadv0) entered disabled state [ 297.343036][T13048] bridge0: port 3(batadv0) entered blocking state [ 297.349688][T13048] bridge0: port 3(batadv0) entered forwarding state [ 297.488960][T13069] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 297.642200][T13076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.649703][T13076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.662348][T13076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.675643][T13076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.723336][T13076] bridge0: port 3(batadv0) entered disabled state [ 297.779317][T13076] bridge0: port 3(batadv0) entered disabled state [ 297.837636][T13082] bond13: option xmit_hash_policy: invalid value (64) [ 297.854716][T13082] bond13 (unregistering): Released all slaves [ 297.964525][T13095] netlink: 'syz.0.2050': attribute type 1 has an invalid length. [ 298.005073][T13089] syzkaller1: entered promiscuous mode [ 298.011397][T13089] syzkaller1: entered allmulticast mode [ 298.086216][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.315894][T13109] netlink: 'syz.0.2056': attribute type 10 has an invalid length. [ 298.396104][T13114] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 298.607096][T13121] bond13: option xmit_hash_policy: invalid value (64) [ 298.641222][T13121] bond13 (unregistering): Released all slaves [ 298.789444][T13133] ip6gre2: entered promiscuous mode [ 298.849544][T13142] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 299.073753][T13162] netlink: 'syz.1.2070': attribute type 1 has an invalid length. [ 299.091019][T13162] netlink: 'syz.1.2070': attribute type 2 has an invalid length. [ 299.169863][T13165] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.212704][T13171] __nla_validate_parse: 15 callbacks suppressed [ 299.212727][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2072'. [ 299.235727][T13171] tipc: Enabled bearer , priority 10 [ 299.398975][T13177] tipc: Enabling of bearer rejected, failed to enable media [ 299.545938][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2078'. [ 299.580909][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2078'. [ 299.602912][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2078'. [ 299.663414][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2078'. [ 299.810248][T13206] syzkaller1: entered promiscuous mode [ 299.830493][T13206] syzkaller1: entered allmulticast mode [ 300.022918][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2087'. [ 300.210117][T11649] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.219550][T11649] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.239782][T11649] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.252569][T11649] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.266024][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2092'. [ 300.299638][T13239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2092'. [ 300.351738][T11040] tipc: Node number set to 4024196997 [ 300.489628][T13251] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2096'. [ 300.502258][T13251] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2096'. [ 300.508635][T13254] validate_nla: 1 callbacks suppressed [ 300.508657][T13254] netlink: 'syz.4.2096': attribute type 10 has an invalid length. [ 300.534454][T13254] wlan1: mtu less than device minimum [ 300.539929][T13254] `: (slave wlan1): Error -22 calling dev_set_mtu [ 300.851683][T13216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.999867][T13266] netlink: 'syz.2.2099': attribute type 1 has an invalid length. [ 301.060156][T13263] bond5: entered promiscuous mode [ 301.066052][T13263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.134717][T13266] bond13: entered promiscuous mode [ 301.140249][T13266] bond13: entered allmulticast mode [ 301.146148][T13266] 8021q: adding VLAN 0 to HW filter on device bond13 [ 301.176255][T13278] syzkaller0: entered promiscuous mode [ 301.183228][T13278] syzkaller0: entered allmulticast mode [ 301.372630][T13263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.400387][T13263] bond5: (slave gtp0): The slave device specified does not support setting the MAC address [ 301.420897][ T182] IPVS: starting estimator thread 0... [ 301.446269][T13263] bond5: (slave gtp0): Error -95 calling set_mac_address [ 301.546613][T13284] IPVS: using max 33 ests per chain, 79200 per kthread [ 301.689008][T13294] openvswitch: netlink: IP tunnel dst address not specified [ 301.707158][T13298] tipc: Failed to remove unknown binding: 66,1,1/134353152:4246250051/4246250053 [ 301.829154][T13295] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.937356][T13307] can: request_module (can-proto-0) failed. [ 301.972866][T13295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.990128][T13295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.058146][T13295] vlan0: left promiscuous mode [ 302.154950][T13295] vlan2: left promiscuous mode [ 302.159884][T13295] bridge0: left promiscuous mode [ 302.181275][T13295] bond1: left promiscuous mode [ 302.192965][T13295] ip6tnl2: left promiscuous mode [ 302.207346][T13295] gretap1: left promiscuous mode [ 302.227991][T13295] ip6gre2: left promiscuous mode [ 302.245303][T13304] IPv6: sit1: Disabled Multicast RS [ 302.258359][T13304] sit1: entered allmulticast mode [ 302.302716][T11646] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.303285][ T5947] syz1: Port: 1 Link DOWN [ 302.311827][T11646] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.347367][T11646] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.357007][T11646] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.397668][T11646] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.416882][T11646] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.437379][T11646] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.465070][T11646] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.605653][T13345] veth0: Caught tx_queue_len zero misconfig [ 302.712907][T13361] netlink: 'syz.4.2125': attribute type 1 has an invalid length. [ 302.761578][T13361] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 302.962926][T13378] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 303.674317][T13413] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 303.720995][T13420] vlan0: entered promiscuous mode [ 303.788189][T13423] tipc: Enabled bearer , priority 0 [ 303.845383][T13420] syzkaller0: entered promiscuous mode [ 303.862784][T13420] syzkaller0: entered allmulticast mode [ 303.919869][T13410] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 304.021741][T13410] tipc: Resetting bearer [ 304.042113][T13410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.076239][T13408] tipc: Resetting bearer [ 304.116363][T13408] tipc: Disabling bearer [ 304.443660][T13463] netlink: 'syz.2.2153': attribute type 10 has an invalid length. [ 304.649543][T13472] netlink: 'syz.3.2158': attribute type 2 has an invalid length. [ 304.809050][T13484] __nla_validate_parse: 11 callbacks suppressed [ 304.809066][T13484] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2161'. [ 305.472201][T13492] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 305.612059][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2165'. [ 305.806076][T13529] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2170'. [ 305.820185][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2170'. [ 305.829479][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2170'. [ 305.861708][T13535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2172'. [ 305.877845][T13538] sctp: [Deprecated]: syz.1.2170 (pid 13538) Use of int in maxseg socket option. [ 305.877845][T13538] Use struct sctp_assoc_value instead [ 305.894597][T13537] ipt_REJECT: TCP_RESET invalid for non-tcp [ 306.194164][T13548] pim6reg: entered allmulticast mode [ 306.216540][T13548] pim6reg: left allmulticast mode [ 306.354613][T13554] sch_fq: defrate 0 ignored. [ 306.427207][T13560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2181'. [ 306.459505][T13560] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.2181'. [ 306.526759][T13562] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 306.628105][T13570] netlink: 'syz.2.2184': attribute type 58 has an invalid length. [ 306.667499][T13570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2184'. [ 306.694704][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2184'. [ 307.206682][T13602] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.538348][T11657] nci: nci_rsp_packet: unsupported rsp opcode 0xf1e [ 307.921342][T13633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.388741][T13648] netlink: 'syz.3.2207': attribute type 1 has an invalid length. [ 309.085925][T13663] netlink: 'syz.0.2211': attribute type 12 has an invalid length. [ 309.094983][T13663] netlink: 'syz.0.2211': attribute type 29 has an invalid length. [ 309.126906][T13663] netlink: 'syz.0.2211': attribute type 1 has an invalid length. [ 309.149053][T13671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.967230][T13697] __nla_validate_parse: 6 callbacks suppressed [ 309.967252][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2225'. [ 309.987003][T13698] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20004 [ 310.000757][T13695] netlink: 'syz.1.2223': attribute type 11 has an invalid length. [ 310.015515][T13697] xfrm2: entered promiscuous mode [ 310.030581][T13695] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2223'. [ 310.050827][T13703] netlink: 'syz.3.2225': attribute type 1 has an invalid length. [ 310.060991][T13697] xfrm2: entered allmulticast mode [ 310.071642][T13695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2223'. [ 310.153325][T13697] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 310.170973][T13697] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 310.181754][T13697] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 310.317842][T13703] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 310.354704][T13703] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 310.481443][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2231'. [ 310.497264][T13722] geneve2: left promiscuous mode [ 310.504816][T13722] gretap1: left promiscuous mode [ 310.521228][T13722] gretap1: left allmulticast mode [ 310.535136][T13722] bond1: left allmulticast mode [ 310.552264][T13722] veth5: left promiscuous mode [ 310.565022][T13722] veth5: left allmulticast mode [ 310.636354][T13722] geneve4: left promiscuous mode [ 310.682682][T13722] bond4: left promiscuous mode [ 310.699506][T13722] bond4: left allmulticast mode [ 310.771711][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 310.810520][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 310.829144][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 310.838133][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 310.861870][T13744] bridge0: entered allmulticast mode [ 311.005445][T13752] netlink: 'syz.1.2238': attribute type 33 has an invalid length. [ 311.016892][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 311.035639][T13753] ip6gre2: entered promiscuous mode [ 311.196631][T13765] erspan0: entered promiscuous mode [ 311.230973][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 311.355943][T13774] vlan2: entered promiscuous mode [ 311.361848][T13774] bridge0: entered promiscuous mode [ 311.386958][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2245'. [ 311.398412][T13767] tipc: Started in network mode [ 311.403682][T13767] tipc: Node identity 927b8755288f, cluster identity 4711 [ 311.411411][T13767] tipc: Enabled bearer , priority 0 [ 311.422706][T13767] syzkaller0: entered promiscuous mode [ 311.439668][T13767] syzkaller0: entered allmulticast mode [ 311.453418][T13767] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 311.478567][T13767] tipc: Resetting bearer [ 311.487059][T13770] sctp: [Deprecated]: syz.4.2244 (pid 13770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.487059][T13770] Use struct sctp_sack_info instead [ 311.506092][T13766] tipc: Resetting bearer [ 311.526015][T13766] tipc: Disabling bearer [ 311.532836][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2244'. [ 311.777085][T13792] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2249'. [ 312.243080][T13823] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 312.390864][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2260'. [ 312.593874][T13842] ipt_REJECT: TCP_RESET invalid for non-tcp [ 312.604926][T13842] xt_cluster: node mask cannot exceed total number of nodes [ 313.082350][T13874] bridge0: Caught tx_queue_len zero misconfig [ 313.106757][T13870] vlan3: entered allmulticast mode [ 313.134263][T13870] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 313.162072][T13878] xfrm1: entered promiscuous mode [ 313.167387][T13878] xfrm1: entered allmulticast mode [ 313.193928][T13884] tls_set_device_offload: netdev not found [ 313.273530][T13886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.605061][T13913] netlink: 'syz.3.2286': attribute type 3 has an invalid length. [ 313.678368][T13914] netlink: 'syz.2.2287': attribute type 16 has an invalid length. [ 313.694064][T13914] netlink: 'syz.2.2287': attribute type 9 has an invalid length. [ 314.097282][T13935] netlink: 'syz.0.2291': attribute type 21 has an invalid length. [ 314.106203][T13936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.118012][T13935] netlink: 'syz.0.2291': attribute type 22 has an invalid length. [ 314.140014][T13935] netlink: 'syz.0.2291': attribute type 23 has an invalid length. [ 314.168461][T13935] netlink: 'syz.0.2291': attribute type 25 has an invalid length. [ 314.728628][T13966] netlink: 'syz.4.2303': attribute type 1 has an invalid length. [ 314.833946][T13972] macvlan2: entered promiscuous mode [ 314.840020][T13972] macvlan2: entered allmulticast mode [ 314.848092][T13972] bond0: entered promiscuous mode [ 314.854332][T13972] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 314.867043][T13972] bond0: left promiscuous mode [ 315.251985][T13987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.295204][T13987] __nla_validate_parse: 13 callbacks suppressed [ 315.295227][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2306'. [ 315.559521][T13994] geneve0: mtu less than device minimum [ 315.638945][T13994] tunl0: Caught tx_queue_len zero misconfig [ 315.837706][T14014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2314'. [ 315.870454][T14014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2314'. [ 315.976686][T14023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.051977][T14028] xt_cgroup: path and classid specified [ 316.075315][T14028] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2319'. [ 316.328446][T14043] vlan4: entered promiscuous mode [ 316.360130][T14043] bridge0: entered promiscuous mode [ 316.394311][T14045] tipc: Enabled bearer , priority 0 [ 316.404291][T14039] syzkaller0: entered promiscuous mode [ 316.409822][T14039] syzkaller0: entered allmulticast mode [ 316.445593][T14039] tipc: Resetting bearer [ 316.567342][T14037] tipc: Resetting bearer [ 316.615367][T14037] tipc: Disabling bearer [ 316.858172][T14065] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2332'. [ 317.256469][ T12] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 318.038935][T14096] syzkaller0: entered promiscuous mode [ 318.044949][T14096] syzkaller0: entered allmulticast mode [ 318.166127][T14109] x_tables: duplicate underflow at hook 4 [ 318.192477][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 318.207114][T14109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2341'. [ 318.207266][T14110] netlink: 'syz.3.2342': attribute type 1 has an invalid length. [ 318.242116][T14107] vlan0: entered promiscuous mode [ 318.499039][T14130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.506597][T14130] IPv6: NLM_F_CREATE should be set when creating new route [ 318.514030][T14130] IPv6: NLM_F_CREATE should be set when creating new route [ 318.543802][T14130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.608800][T14134] netlink: 'syz.1.2348': attribute type 39 has an invalid length. [ 320.014610][T14110] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 320.026651][T14119] vlan4: entered allmulticast mode [ 320.040251][T14119] veth1: entered allmulticast mode [ 320.336023][T14150] netlink: 'syz.2.2353': attribute type 12 has an invalid length. [ 320.381842][T14150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2353'. [ 320.527672][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'. [ 320.643372][T14167] netlink: 'syz.2.2358': attribute type 7 has an invalid length. [ 320.740171][T14168] netlink: 'syz.2.2358': attribute type 2 has an invalid length. [ 320.809323][T14175] x_tables: unsorted underflow at hook 4 [ 321.039963][T14179] macvlan2: entered promiscuous mode [ 321.066853][T14192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2360'. [ 321.246726][T14188] macvlan3: entered promiscuous mode [ 321.325653][T14202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2364'. [ 321.369157][T14205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2365'. [ 321.488026][T14205] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2365'. [ 321.539402][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'. [ 321.549065][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'. [ 321.808907][T14234] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2374'. [ 321.836286][T14229] tipc: Enabling of bearer rejected, already enabled [ 321.944861][T14242] netlink: 'syz.0.2376': attribute type 13 has an invalid length. [ 321.968518][T14244] syzkaller0: entered promiscuous mode [ 321.984314][T14244] syzkaller0: entered allmulticast mode [ 321.996074][T14242] macvtap0: entered allmulticast mode [ 322.005232][T14242] macvtap0: refused to change device tx_queue_len [ 322.109876][T14257] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2378'. [ 323.377318][T14296] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 323.521907][T14302] gre0: entered promiscuous mode [ 323.530162][T14302] gre0: entered allmulticast mode [ 323.644802][T14312] xt_hashlimit: size too large, truncated to 1048576 [ 323.883278][T14325] IPVS: Unknown mcast interface: vcan0 [ 324.205650][T14347] netlink: 'syz.4.2409': attribute type 29 has an invalid length. [ 324.219017][T14347] netlink: 'syz.4.2409': attribute type 29 has an invalid length. [ 324.228011][T14347] netlink: 'syz.4.2409': attribute type 29 has an invalid length. [ 324.237142][T14347] netlink: 'syz.4.2409': attribute type 29 has an invalid length. [ 324.245513][T14347] netlink: 'syz.4.2409': attribute type 29 has an invalid length. [ 324.254013][T14347] netlink: 'syz.4.2409': attribute type 29 has an invalid length. [ 324.378006][T14353] bond5: entered allmulticast mode [ 324.413389][T14353] ip6gretap1: entered allmulticast mode [ 324.419503][T14353] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 324.465501][T14359] veth9: entered promiscuous mode [ 324.740905][T14375] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 324.825246][T14382] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 325.379875][T14417] bridge_slave_0: entered promiscuous mode [ 325.385466][T14423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.391121][T14423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.399893][T14423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.412241][T14423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.422259][T14423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.439935][T14423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.452704][T14423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.461849][T14423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.515713][T14423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.540199][T14423] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.688556][T14434] __nla_validate_parse: 13 callbacks suppressed [ 325.688580][T14434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2437'. [ 326.259814][T14475] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2451'. [ 326.283427][T14475] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 326.687271][T14501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2460'. [ 326.716426][T14501] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 326.758891][T14501] team1: entered promiscuous mode [ 326.764335][T14501] team1: entered allmulticast mode [ 327.109614][T14521] validate_nla: 3 callbacks suppressed [ 327.109635][T14521] netlink: 'syz.1.2465': attribute type 1 has an invalid length. [ 327.183350][T14528] netlink: 'syz.2.2467': attribute type 3 has an invalid length. [ 327.198980][T14522] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2467'. [ 327.312609][T14521] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 327.436765][T14529] veth9: entered promiscuous mode [ 327.475737][T14529] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 327.518155][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2473'. [ 327.523408][T14551] netlink: 'syz.2.2474': attribute type 15 has an invalid length. [ 327.560481][T14551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2474'. [ 327.711449][T14561] netlink: 'syz.1.2478': attribute type 2 has an invalid length. [ 327.981896][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2482'. [ 329.057988][T14603] team0: Caught tx_queue_len zero misconfig [ 329.195230][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805291b400: rx timeout, send abort [ 329.203976][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805291b400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 329.295136][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2495'. [ 329.336517][T14620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2496'. [ 329.502429][T14627] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 329.670864][T14640] bond0: entered promiscuous mode [ 329.698670][T14640] batadv0: entered promiscuous mode [ 329.709123][T14640] debugfs: 'hsr1' already exists in 'hsr' [ 329.715401][T14640] Cannot create hsr debugfs directory [ 329.721494][T14640] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 329.737830][T14640] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 329.749299][T14640] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 329.766057][T14645] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2502'. [ 329.802607][T14644] bridge0: entered allmulticast mode [ 329.919971][T14657] netlink: 'syz.0.2507': attribute type 1 has an invalid length. [ 330.286296][T14682] SET target dimension over the limit! [ 330.564161][T14701] gretap0: entered promiscuous mode [ 330.574512][T14701] gretap0: left promiscuous mode [ 330.623452][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 330.677349][T14709] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 330.731538][T14717] netlink: 'syz.4.2522': attribute type 1 has an invalid length. [ 330.796607][T14709] bond14: entered promiscuous mode [ 330.803850][T14709] 8021q: adding VLAN 0 to HW filter on device bond14 [ 330.852954][T14717] 8021q: adding VLAN 0 to HW filter on device bond6 [ 330.887722][T14722] bond6: (slave veth13): Enslaving as an active interface with a down link [ 330.902723][T14724] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 330.931685][T14726] bond8: invalid ARP target 0.0.0.0 specified for addition [ 330.939163][T14726] bond8: option arp_ip_target: invalid value (0) [ 330.947470][T14726] bond8 (unregistering): Released all slaves [ 331.283664][T14694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.499477][T14743] __nla_validate_parse: 8 callbacks suppressed [ 331.499499][T14743] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2529'. [ 331.712005][T14755] netlink: 'syz.2.2532': attribute type 1 has an invalid length. [ 331.750261][T14755] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 331.883905][T14730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 331.898948][T14730] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 331.915089][T14730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 331.921127][T14730] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 331.929759][T14730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 331.939296][T14730] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 331.951239][T14730] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.957283][T14730] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 331.970009][T14730] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 331.976191][T14730] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 332.050135][T14765] syzkaller0: entered promiscuous mode [ 332.056354][T14765] syzkaller0: entered allmulticast mode [ 332.221952][T14769] tipc: Enabling of bearer rejected, failed to enable media [ 332.297948][T14771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2537'. [ 332.441937][T14777] tipc: Enabled bearer , priority 0 [ 332.449265][T14777] syzkaller0: entered allmulticast mode [ 332.492572][T14779] tipc: Resetting bearer [ 332.509569][T14779] tipc: Disabling bearer [ 332.743957][T14794] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2545'. [ 332.759867][T14794] bridge0: entered allmulticast mode [ 332.852948][T14798] syzkaller0: entered promiscuous mode [ 332.858595][T14798] syzkaller0: entered allmulticast mode [ 332.868171][T14798] Unsupported ieee802154 address type: 0 [ 332.988768][T14801] syzkaller0: entered promiscuous mode [ 332.995067][T14801] syzkaller0: entered allmulticast mode [ 333.423320][T14807] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2550'. [ 333.432921][T14807] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2550'. [ 333.442481][T14807] netlink: 'syz.1.2550': attribute type 5 has an invalid length. [ 333.450880][T14807] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2550'. [ 334.065213][T14816] netlink: 'syz.4.2552': attribute type 1 has an invalid length. [ 334.093792][T14816] 8021q: adding VLAN 0 to HW filter on device bond7 [ 334.120187][T14816] bond7: (slave veth15): Enslaving as an active interface with a down link [ 334.133394][T14816] bond6: (slave veth0_to_bond): Releasing active interface [ 334.144978][T14816] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 334.173808][T14816] bond7: (slave veth17): Enslaving as an active interface with a down link [ 334.467893][T14828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.749756][T14838] netlink: 'syz.2.2561': attribute type 10 has an invalid length. [ 334.762952][T14838] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 336.401997][T14845] erspan0: entered promiscuous mode [ 336.426612][T14843] erspan0: left promiscuous mode [ 336.595531][T14855] sctp: [Deprecated]: syz.2.2566 (pid 14855) Use of int in max_burst socket option. [ 336.595531][T14855] Use struct sctp_assoc_value instead [ 336.827227][T14862] gre0: entered promiscuous mode [ 336.835009][T14862] gre0: entered allmulticast mode [ 336.846188][T14862] xt_socket: unknown flags 0x50 [ 337.344648][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2574'. [ 337.358660][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2574'. [ 338.760168][T14909] netlink: 'syz.2.2582': attribute type 1 has an invalid length. [ 338.770140][T14909] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 339.843757][T14924] openvswitch: netlink: Message has 251 unknown bytes. [ 339.928705][T14929] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2588'. [ 340.178599][T14941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2592'. [ 341.034998][T14945] v: renamed from veth0_vlan (while UP) [ 341.128874][T14948] !: renamed from dummy0 (while UP) [ 342.174443][T14966] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 379.051897][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 492.972109][ T31] INFO: task syz-executor:5827 blocked for more than 143 seconds. [ 492.980018][ T31] Not tainted syzkaller #0 [ 492.985112][ T31] Blocked by coredump. [ 492.989736][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.999003][ T31] task:syz-executor state:D stack:21112 pid:5827 tgid:5827 ppid:1 task_flags:0x40054c flags:0x00080003 [ 493.011230][ T31] Call Trace: [ 493.014544][ T31] [ 493.017487][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.022068][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.027082][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.040089][ T31] ? __pfx___schedule+0x10/0x10 [ 493.045490][ T31] ? schedule+0x91/0x360 [ 493.049792][ T31] schedule+0x165/0x360 [ 493.075999][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.100330][ T31] __mutex_lock+0x7e6/0x1350 [ 493.105039][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.109858][ T31] ? rfkill_unregister+0xc8/0x220 [ 493.128902][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.134119][ T31] ? __pfx_device_del+0x10/0x10 [ 493.139014][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 493.144313][ T31] rfkill_unregister+0xc8/0x220 [ 493.149215][ T31] hci_unregister_dev+0x374/0x510 [ 493.154866][ T31] vhci_release+0x152/0x1a0 [ 493.159413][ T31] ? __pfx_vhci_release+0x10/0x10 [ 493.164518][ T31] __fput+0x44c/0xa70 [ 493.168534][ T31] task_work_run+0x1d4/0x260 [ 493.173260][ T31] ? __pfx_task_work_run+0x10/0x10 [ 493.178475][ T31] ? do_exit+0x6b0/0x2300 [ 493.182877][ T31] ? kmem_cache_free+0x19b/0x690 [ 493.187835][ T31] do_exit+0x6b5/0x2300 [ 493.192096][ T31] ? do_raw_spin_lock+0x121/0x290 [ 493.197134][ T31] ? __pfx_do_exit+0x10/0x10 [ 493.201835][ T31] do_group_exit+0x21c/0x2d0 [ 493.206459][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.211792][ T31] get_signal+0x1285/0x1340 [ 493.216348][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 493.222003][ T31] ? __pfx___x64_sys_wait4+0x10/0x10 [ 493.227339][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 493.233606][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 493.239075][ T31] exit_to_user_mode_loop+0x72/0x130 [ 493.244429][ T31] do_syscall_64+0x2bd/0xfa0 [ 493.249060][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.254364][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.260516][ T31] ? clear_bhb_loop+0x60/0xb0 [ 493.265246][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.271226][ T31] RIP: 0033:0x7f1fdbb85897 [ 493.275655][ T31] RSP: 002b:00007ffce4fcd610 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 493.284243][ T31] RAX: fffffffffffffe00 RBX: 0000000000000576 RCX: 00007f1fdbb85897 [ 493.292415][ T31] RDX: 0000000040000000 RSI: 00007ffce4fcd67c RDI: 00000000ffffffff [ 493.300479][ T31] RBP: 00007ffce4fcd67c R08: 0000000000000000 R09: 0000000000000000 [ 493.308479][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001d5 [ 493.316520][ T31] R13: 0000555573b0c590 R14: 0000000000050ddc R15: 00007ffce4fcd6d0 [ 493.324566][ T31] [ 493.327638][ T31] INFO: task kworker/0:5:5920 blocked for more than 143 seconds. [ 493.335984][ T31] Not tainted syzkaller #0 [ 493.341050][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.349820][ T31] task:kworker/0:5 state:D stack:24088 pid:5920 tgid:5920 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 493.361902][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 493.368619][ T31] Call Trace: [ 493.371931][ T31] [ 493.374871][ T31] __schedule+0x1798/0x4cc0 [ 493.379397][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 493.384852][ T31] ? __pfx___schedule+0x10/0x10 [ 493.389775][ T31] ? schedule+0x91/0x360 [ 493.394158][ T31] schedule+0x165/0x360 [ 493.398382][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.404147][ T31] __mutex_lock+0x7e6/0x1350 [ 493.408795][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.413867][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 493.420153][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.425266][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 493.431080][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 493.436836][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 493.442988][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 493.448718][ T31] process_scheduled_works+0xae1/0x17b0 [ 493.454347][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 493.460435][ T31] worker_thread+0x8a0/0xda0 [ 493.465060][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 493.471468][ T31] ? __kthread_parkme+0x7b/0x200 [ 493.476509][ T31] kthread+0x711/0x8a0 [ 493.480644][ T31] ? __pfx_worker_thread+0x10/0x10 [ 493.485758][ T31] ? __pfx_kthread+0x10/0x10 [ 493.490412][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.495621][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.500891][ T31] ? __pfx_kthread+0x10/0x10 [ 493.505518][ T31] ret_from_fork+0x4bc/0x870 [ 493.510123][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.515432][ T31] ? __switch_to_asm+0x39/0x70 [ 493.520299][ T31] ? __switch_to_asm+0x33/0x70 [ 493.525182][ T31] ? __pfx_kthread+0x10/0x10 [ 493.529879][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.534846][ T31] [ 493.537942][ T31] INFO: task syz.3.2518:14694 blocked for more than 143 seconds. [ 493.545802][ T31] Not tainted syzkaller #0 [ 493.550796][ T31] Blocked by coredump. [ 493.555403][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.564200][ T31] task:syz.3.2518 state:D stack:25864 pid:14694 tgid:14690 ppid:5827 task_flags:0x40054c flags:0x00080001 [ 493.576247][ T31] Call Trace: [ 493.579568][ T31] [ 493.582600][ T31] __schedule+0x1798/0x4cc0 [ 493.587130][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.592060][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.596922][ T31] ? __pfx___schedule+0x10/0x10 [ 493.601850][ T31] ? schedule+0x91/0x360 [ 493.606110][ T31] schedule+0x165/0x360 [ 493.610472][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.615965][ T31] __mutex_lock+0x7e6/0x1350 [ 493.620708][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.625477][ T31] ? rfkill_unregister+0xc8/0x220 [ 493.630570][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.635602][ T31] ? __pfx_device_del+0x10/0x10 [ 493.640561][ T31] rfkill_unregister+0xc8/0x220 [ 493.645483][ T31] nfc_unregister_device+0x96/0x2a0 [ 493.650751][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 493.656573][ T31] virtual_ncidev_close+0x56/0x90 [ 493.661829][ T31] __fput+0x44c/0xa70 [ 493.665893][ T31] task_work_run+0x1d4/0x260 [ 493.670601][ T31] ? __pfx_task_work_run+0x10/0x10 [ 493.675760][ T31] ? do_exit+0x6b0/0x2300 [ 493.680133][ T31] ? kmem_cache_free+0x19b/0x690 [ 493.685290][ T31] do_exit+0x6b5/0x2300 [ 493.689551][ T31] ? do_raw_spin_lock+0x121/0x290 [ 493.694682][ T31] ? __pfx_do_exit+0x10/0x10 [ 493.699317][ T31] do_group_exit+0x21c/0x2d0 [ 493.703994][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.709220][ T31] get_signal+0x1285/0x1340 [ 493.713801][ T31] arch_do_signal_or_restart+0xa0/0x790 [ 493.719371][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 493.725646][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.731249][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 493.736838][ T31] exit_to_user_mode_loop+0x72/0x130 [ 493.742393][ T31] do_syscall_64+0x2bd/0xfa0 [ 493.747027][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.752301][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.758381][ T31] ? clear_bhb_loop+0x60/0xb0 [ 493.763137][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.769042][ T31] RIP: 0033:0x7f1fdbb8f749 [ 493.773536][ T31] RSP: 002b:00007f1fdcad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.782007][ T31] RAX: 000000000000001c RBX: 00007f1fdbde6090 RCX: 00007f1fdbb8f749 [ 493.789984][ T31] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000b [ 493.798189][ T31] RBP: 00007f1fdbc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 493.806246][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.814278][ T31] R13: 00007f1fdbde6128 R14: 00007f1fdbde6090 R15: 00007ffce4fcd2b8 [ 493.822409][ T31] [ 493.825453][ T31] INFO: task syz.0.2527:14730 blocked for more than 144 seconds. [ 493.835783][ T31] Not tainted syzkaller #0 [ 493.840839][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.849529][ T31] task:syz.0.2527 state:D stack:26888 pid:14730 tgid:14729 ppid:5826 task_flags:0x400040 flags:0x00080003 [ 493.863732][ T31] Call Trace: [ 493.867026][ T31] [ 493.869969][ T31] __schedule+0x1798/0x4cc0 [ 493.874623][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.879515][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.884521][ T31] ? __pfx___schedule+0x10/0x10 [ 493.889395][ T31] ? schedule+0x91/0x360 [ 493.893712][ T31] schedule+0x165/0x360 [ 493.897884][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.903582][ T31] __mutex_lock+0x7e6/0x1350 [ 493.908224][ T31] ? __mutex_lock+0x5bb/0x1350 [ 493.913053][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 493.918359][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.923490][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.928721][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 493.935559][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 493.941989][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 493.947946][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 493.953130][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 493.958876][ T31] rfkill_set_block+0x1d2/0x440 [ 493.963800][ T31] rfkill_fop_write+0x44b/0x570 [ 493.968682][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 493.974122][ T31] ? security_kernfs_init_security+0x230/0x290 [ 493.980364][ T31] ? rw_verify_area+0x255/0x4d0 [ 493.985263][ T31] ? __lock_acquire+0xab9/0xd20 [ 493.990323][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 493.995743][ T31] vfs_write+0x27e/0xb30 [ 494.000016][ T31] ? __pfx_vfs_write+0x10/0x10 [ 494.004877][ T31] ? __fget_files+0x2a/0x420 [ 494.009479][ T31] ? __fget_files+0x2a/0x420 [ 494.014272][ T31] ? __fget_files+0x3a0/0x420 [ 494.018989][ T31] ? __fget_files+0x2a/0x420 [ 494.024346][ T31] ksys_write+0x145/0x250 [ 494.028750][ T31] ? __pfx_ksys_write+0x10/0x10 [ 494.033720][ T31] ? do_syscall_64+0xbe/0xfa0 [ 494.038437][ T31] do_syscall_64+0xfa/0xfa0 [ 494.043311][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.048563][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.054767][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.059481][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.065464][ T31] RIP: 0033:0x7f9b6b58f749 [ 494.069912][ T31] RSP: 002b:00007f9b6c3bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 494.078544][ T31] RAX: ffffffffffffffda RBX: 00007f9b6b7e5fa0 RCX: 00007f9b6b58f749 [ 494.086632][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 494.094843][ T31] RBP: 00007f9b6b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.103030][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.111080][ T31] R13: 00007f9b6b7e6038 R14: 00007f9b6b7e5fa0 R15: 00007ffc775180b8 [ 494.119175][ T31] [ 494.122290][ T31] INFO: task syz.1.2550:14806 blocked for more than 144 seconds. [ 494.130114][ T31] Not tainted syzkaller #0 [ 494.135348][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.144115][ T31] task:syz.1.2550 state:D stack:26504 pid:14806 tgid:14805 ppid:5843 task_flags:0x400040 flags:0x00080002 [ 494.156142][ T31] Call Trace: [ 494.159434][ T31] [ 494.162741][ T31] __schedule+0x1798/0x4cc0 [ 494.167303][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.172295][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.177173][ T31] ? __pfx___schedule+0x10/0x10 [ 494.182108][ T31] ? schedule+0x91/0x360 [ 494.186367][ T31] schedule+0x165/0x360 [ 494.190611][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.196111][ T31] __mutex_lock+0x7e6/0x1350 [ 494.200771][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.205562][ T31] ? rfkill_register+0x37/0x8e0 [ 494.210484][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.215531][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 494.220999][ T31] ? device_initialize+0x24b/0x440 [ 494.226133][ T31] rfkill_register+0x37/0x8e0 [ 494.230893][ T31] nfc_register_device+0x14a/0x320 [ 494.236065][ T31] nci_register_device+0x87f/0x9d0 [ 494.241305][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 494.246977][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 494.252422][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 494.257854][ T31] virtual_ncidev_open+0x129/0x1a0 [ 494.263051][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 494.268701][ T31] misc_open+0x2d5/0x350 [ 494.273007][ T31] chrdev_open+0x4cc/0x5e0 [ 494.277436][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 494.282439][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 494.288790][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 494.293860][ T31] do_dentry_open+0x953/0x13f0 [ 494.298664][ T31] vfs_open+0x3b/0x340 [ 494.302828][ T31] ? path_openat+0x2ecd/0x3830 [ 494.307614][ T31] path_openat+0x2ee5/0x3830 [ 494.312409][ T31] ? __pfx_path_openat+0x10/0x10 [ 494.317374][ T31] do_filp_open+0x1fa/0x410 [ 494.321935][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.326795][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 494.331953][ T31] ? _raw_spin_unlock+0x28/0x50 [ 494.336816][ T31] ? alloc_fd+0x64c/0x6c0 [ 494.341239][ T31] do_sys_openat2+0x121/0x1c0 [ 494.345932][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 494.351242][ T31] ? rcu_is_watching+0x15/0xb0 [ 494.356044][ T31] __x64_sys_openat+0x138/0x170 [ 494.360995][ T31] do_syscall_64+0xfa/0xfa0 [ 494.365544][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.370831][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.376918][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.381655][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.387557][ T31] RIP: 0033:0x7f875838f749 [ 494.392006][ T31] RSP: 002b:00007f87592ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 494.400506][ T31] RAX: ffffffffffffffda RBX: 00007f87585e5fa0 RCX: 00007f875838f749 [ 494.408501][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 494.416638][ T31] RBP: 00007f8758413f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.424683][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.432779][ T31] R13: 00007f87585e6038 R14: 00007f87585e5fa0 R15: 00007ffe2c338248 [ 494.440896][ T31] [ 494.444181][ T31] INFO: task syz.4.2563:14848 blocked for more than 144 seconds. [ 494.452065][ T31] Not tainted syzkaller #0 [ 494.456998][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.465813][ T31] task:syz.4.2563 state:D stack:28296 pid:14848 tgid:14847 ppid:5835 task_flags:0x400040 flags:0x00080002 [ 494.477856][ T31] Call Trace: [ 494.481189][ T31] [ 494.484157][ T31] __schedule+0x1798/0x4cc0 [ 494.488701][ T31] ? security_file_open+0xb1/0x270 [ 494.494161][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.499217][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.504127][ T31] ? __pfx___schedule+0x10/0x10 [ 494.509038][ T31] ? schedule+0x91/0x360 [ 494.513363][ T31] schedule+0x165/0x360 [ 494.517623][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.523141][ T31] __mutex_lock+0x7e6/0x1350 [ 494.527768][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.532592][ T31] ? misc_open+0x51/0x350 [ 494.536965][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.542079][ T31] misc_open+0x51/0x350 [ 494.546278][ T31] chrdev_open+0x4cc/0x5e0 [ 494.550780][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 494.555751][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 494.562204][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 494.567174][ T31] do_dentry_open+0x953/0x13f0 [ 494.572132][ T31] vfs_open+0x3b/0x340 [ 494.576225][ T31] ? path_openat+0x2ecd/0x3830 [ 494.581124][ T31] path_openat+0x2ee5/0x3830 [ 494.585807][ T31] ? __pfx_path_openat+0x10/0x10 [ 494.590898][ T31] do_filp_open+0x1fa/0x410 [ 494.595442][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.600394][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 494.605451][ T31] ? _raw_spin_unlock+0x28/0x50 [ 494.610386][ T31] ? alloc_fd+0x64c/0x6c0 [ 494.614737][ T31] do_sys_openat2+0x121/0x1c0 [ 494.619420][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 494.624697][ T31] ? rcu_is_watching+0x15/0xb0 [ 494.629492][ T31] __x64_sys_openat+0x138/0x170 [ 494.634416][ T31] do_syscall_64+0xfa/0xfa0 [ 494.638936][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.644199][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.650329][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.655056][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.661257][ T31] RIP: 0033:0x7ff33ed8f749 [ 494.665700][ T31] RSP: 002b:00007ff33fc8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 494.674204][ T31] RAX: ffffffffffffffda RBX: 00007ff33efe5fa0 RCX: 00007ff33ed8f749 [ 494.682277][ T31] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 494.690348][ T31] RBP: 00007ff33ee13f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.698545][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.706700][ T31] R13: 00007ff33efe6038 R14: 00007ff33efe5fa0 R15: 00007ffdfc71cf88 [ 494.714776][ T31] [ 494.717819][ T31] INFO: task syz.2.2599:14966 blocked for more than 145 seconds. [ 494.725868][ T31] Not tainted syzkaller #0 [ 494.731284][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.739973][ T31] task:syz.2.2599 state:D stack:26088 pid:14966 tgid:14965 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 494.751993][ T31] Call Trace: [ 494.755277][ T31] [ 494.758212][ T31] __schedule+0x1798/0x4cc0 [ 494.762796][ T31] ? security_file_open+0xb1/0x270 [ 494.767927][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.772844][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.777708][ T31] ? __pfx___schedule+0x10/0x10 [ 494.782614][ T31] ? schedule+0x91/0x360 [ 494.786873][ T31] schedule+0x165/0x360 [ 494.791103][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.796572][ T31] __mutex_lock+0x7e6/0x1350 [ 494.801204][ T31] ? __mutex_lock+0x5bb/0x1350 [ 494.805974][ T31] ? misc_open+0x51/0x350 [ 494.810458][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.815522][ T31] misc_open+0x51/0x350 [ 494.819692][ T31] chrdev_open+0x4cc/0x5e0 [ 494.824174][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 494.829115][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 494.835520][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 494.840491][ T31] do_dentry_open+0x953/0x13f0 [ 494.845273][ T31] vfs_open+0x3b/0x340 [ 494.849343][ T31] ? path_openat+0x2ecd/0x3830 [ 494.854237][ T31] path_openat+0x2ee5/0x3830 [ 494.858879][ T31] ? __pfx_path_openat+0x10/0x10 [ 494.863932][ T31] do_filp_open+0x1fa/0x410 [ 494.868443][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.873339][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 494.878391][ T31] ? _raw_spin_unlock+0x28/0x50 [ 494.883285][ T31] ? alloc_fd+0x64c/0x6c0 [ 494.887635][ T31] do_sys_openat2+0x121/0x1c0 [ 494.894675][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 494.899921][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 494.906197][ T31] __x64_sys_openat+0x138/0x170 [ 494.911399][ T31] do_syscall_64+0xfa/0xfa0 [ 494.915938][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.921435][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.927548][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.932579][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.938484][ T31] RIP: 0033:0x7f90f358f749 [ 494.943049][ T31] RSP: 002b:00007f90f439f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 494.951681][ T31] RAX: ffffffffffffffda RBX: 00007f90f37e5fa0 RCX: 00007f90f358f749 [ 494.959672][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 494.967709][ T31] RBP: 00007f90f3613f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.975807][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.983866][ T31] R13: 00007f90f37e6038 R14: 00007f90f37e5fa0 R15: 00007ffdd1f3cba8 [ 494.991934][ T31] [ 494.994975][ T31] INFO: task syz-executor:14970 blocked for more than 145 seconds. [ 495.002952][ T31] Not tainted syzkaller #0 [ 495.007926][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.016692][ T31] task:syz-executor state:D stack:27112 pid:14970 tgid:14970 ppid:1 task_flags:0x400040 flags:0x00080000 [ 495.028706][ T31] Call Trace: [ 495.032088][ T31] [ 495.035065][ T31] __schedule+0x1798/0x4cc0 [ 495.039620][ T31] ? security_file_open+0xb1/0x270 [ 495.044803][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.049659][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.054578][ T31] ? __pfx___schedule+0x10/0x10 [ 495.059470][ T31] ? schedule+0x91/0x360 [ 495.063785][ T31] schedule+0x165/0x360 [ 495.067963][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.073479][ T31] __mutex_lock+0x7e6/0x1350 [ 495.078176][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.082996][ T31] ? misc_open+0x51/0x350 [ 495.087349][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.092429][ T31] misc_open+0x51/0x350 [ 495.096597][ T31] chrdev_open+0x4cc/0x5e0 [ 495.101043][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.106012][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 495.112397][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.117341][ T31] do_dentry_open+0x953/0x13f0 [ 495.122147][ T31] vfs_open+0x3b/0x340 [ 495.126332][ T31] ? path_openat+0x2ecd/0x3830 [ 495.131245][ T31] path_openat+0x2ee5/0x3830 [ 495.135903][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 495.141457][ T31] ? count_memcg_event_mm+0x21/0x260 [ 495.146813][ T31] ? __pfx_path_openat+0x10/0x10 [ 495.152037][ T31] ? __pfx___up_read+0x10/0x10 [ 495.156927][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 495.162317][ T31] do_filp_open+0x1fa/0x410 [ 495.166853][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.171751][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 495.176798][ T31] ? _raw_spin_unlock+0x28/0x50 [ 495.181695][ T31] ? alloc_fd+0x64c/0x6c0 [ 495.186048][ T31] do_sys_openat2+0x121/0x1c0 [ 495.190790][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.195998][ T31] ? fd_install+0x97/0x540 [ 495.200498][ T31] ? fd_install+0x30d/0x540 [ 495.205030][ T31] __x64_sys_openat+0x138/0x170 [ 495.209905][ T31] do_syscall_64+0xfa/0xfa0 [ 495.214510][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.219740][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.225828][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.230572][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.236487][ T31] RIP: 0033:0x7f29a558df11 [ 495.240980][ T31] RSP: 002b:00007ffe46e77790 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 495.249399][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f29a558df11 [ 495.257547][ T31] RDX: 0000000000000002 RSI: 00007f29a56149b7 RDI: 00000000ffffff9c [ 495.265611][ T31] RBP: 00007f29a56149b7 R08: 0000000000000000 R09: 00007f29a631d6c0 [ 495.273665][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 495.281726][ T31] R13: 0000000000000003 R14: 00007ffe46e77b68 R15: 0000000000000000 [ 495.289750][ T31] [ 495.292947][ T31] INFO: task syz-executor:14971 blocked for more than 145 seconds. [ 495.301018][ T31] Not tainted syzkaller #0 [ 495.305977][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.314807][ T31] task:syz-executor state:D stack:27736 pid:14971 tgid:14971 ppid:1 task_flags:0x400040 flags:0x00080000 [ 495.326799][ T31] Call Trace: [ 495.330353][ T31] [ 495.333303][ T31] __schedule+0x1798/0x4cc0 [ 495.337824][ T31] ? security_file_open+0xb1/0x270 [ 495.343013][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.347890][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.352823][ T31] ? __pfx___schedule+0x10/0x10 [ 495.357705][ T31] ? schedule+0x91/0x360 [ 495.362011][ T31] schedule+0x165/0x360 [ 495.366185][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.371782][ T31] __mutex_lock+0x7e6/0x1350 [ 495.376401][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.381258][ T31] ? misc_open+0x51/0x350 [ 495.385660][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.390780][ T31] misc_open+0x51/0x350 [ 495.395040][ T31] chrdev_open+0x4cc/0x5e0 [ 495.399462][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.404460][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 495.410991][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.415951][ T31] do_dentry_open+0x953/0x13f0 [ 495.420780][ T31] vfs_open+0x3b/0x340 [ 495.424862][ T31] ? path_openat+0x2ecd/0x3830 [ 495.429634][ T31] path_openat+0x2ee5/0x3830 [ 495.434320][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 495.439810][ T31] ? count_memcg_event_mm+0x21/0x260 [ 495.445178][ T31] ? __pfx_path_openat+0x10/0x10 [ 495.450126][ T31] ? __pfx___up_read+0x10/0x10 [ 495.454973][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 495.460317][ T31] do_filp_open+0x1fa/0x410 [ 495.464860][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.469751][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 495.474925][ T31] ? _raw_spin_unlock+0x28/0x50 [ 495.479791][ T31] ? alloc_fd+0x64c/0x6c0 [ 495.484214][ T31] do_sys_openat2+0x121/0x1c0 [ 495.488906][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.494175][ T31] ? fd_install+0x97/0x540 [ 495.498628][ T31] ? fd_install+0x30d/0x540 [ 495.503205][ T31] __x64_sys_openat+0x138/0x170 [ 495.508073][ T31] do_syscall_64+0xfa/0xfa0 [ 495.512637][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.517869][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.524075][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.528762][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.534773][ T31] RIP: 0033:0x7f6b3278df11 [ 495.539226][ T31] RSP: 002b:00007ffe70a58560 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 495.547767][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6b3278df11 [ 495.555808][ T31] RDX: 0000000000000002 RSI: 00007f6b328149b7 RDI: 00000000ffffff9c [ 495.563855][ T31] RBP: 00007f6b328149b7 R08: 0000000000000000 R09: 00007f6b3351d6c0 [ 495.571967][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 495.580401][ T31] R13: 0000000000000003 R14: 00007ffe70a58938 R15: 0000000000000000 [ 495.588406][ T31] [ 495.591507][ T31] INFO: task syz-executor:14973 blocked for more than 145 seconds. [ 495.599398][ T31] Not tainted syzkaller #0 [ 495.604485][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.613280][ T31] task:syz-executor state:D stack:28008 pid:14973 tgid:14973 ppid:1 task_flags:0x400040 flags:0x00080000 [ 495.625386][ T31] Call Trace: [ 495.628687][ T31] [ 495.631677][ T31] __schedule+0x1798/0x4cc0 [ 495.636292][ T31] ? security_file_open+0xb1/0x270 [ 495.641473][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.646351][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.651314][ T31] ? __pfx___schedule+0x10/0x10 [ 495.656193][ T31] ? schedule+0x91/0x360 [ 495.660519][ T31] schedule+0x165/0x360 [ 495.664722][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.670325][ T31] __mutex_lock+0x7e6/0x1350 [ 495.674954][ T31] ? __mutex_lock+0x5bb/0x1350 [ 495.679735][ T31] ? misc_open+0x51/0x350 [ 495.684151][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.689206][ T31] misc_open+0x51/0x350 [ 495.693458][ T31] chrdev_open+0x4cc/0x5e0 [ 495.697888][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.702896][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 495.709237][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 495.714254][ T31] do_dentry_open+0x953/0x13f0 [ 495.719041][ T31] vfs_open+0x3b/0x340 [ 495.723157][ T31] ? path_openat+0x2ecd/0x3830 [ 495.727952][ T31] path_openat+0x2ee5/0x3830 [ 495.732648][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 495.738145][ T31] ? count_memcg_event_mm+0x21/0x260 [ 495.743515][ T31] ? __pfx_path_openat+0x10/0x10 [ 495.748469][ T31] ? __pfx___up_read+0x10/0x10 [ 495.753319][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 495.758641][ T31] do_filp_open+0x1fa/0x410 [ 495.763206][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.768064][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 495.773205][ T31] ? _raw_spin_unlock+0x28/0x50 [ 495.778086][ T31] ? alloc_fd+0x64c/0x6c0 [ 495.782522][ T31] do_sys_openat2+0x121/0x1c0 [ 495.787255][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.792574][ T31] ? fd_install+0x97/0x540 [ 495.797000][ T31] ? fd_install+0x30d/0x540 [ 495.801573][ T31] __x64_sys_openat+0x138/0x170 [ 495.806444][ T31] do_syscall_64+0xfa/0xfa0 [ 495.811070][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.816282][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.822422][ T31] ? clear_bhb_loop+0x60/0xb0 [ 495.827247][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.833397][ T31] RIP: 0033:0x7f1dd318df11 [ 495.837916][ T31] RSP: 002b:00007ffd01961d40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 495.846374][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1dd318df11 [ 495.854463][ T31] RDX: 0000000000000002 RSI: 00007f1dd32149b7 RDI: 00000000ffffff9c [ 495.862486][ T31] RBP: 00007f1dd32149b7 R08: 0000000000000000 R09: 00007f1dd3f1d6c0 [ 495.870550][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 495.878564][ T31] R13: 0000000000000003 R14: 00007ffd01962118 R15: 0000000000000000 [ 495.886650][ T31] [ 495.889682][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 495.898793][ T31] [ 495.898793][ T31] Showing all locks held in the system: [ 495.906723][ T31] 1 lock held by khungtaskd/31: [ 495.911667][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 495.921612][ T31] 2 locks held by getty/5592: [ 495.926288][ T31] #0: ffff88803064a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 495.938547][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 495.948779][ T31] 1 lock held by syz-executor/5827: [ 495.954150][ T31] #0: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 495.964422][ T31] 3 locks held by kworker/0:5/5920: [ 495.969629][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 495.980665][ T31] #1: ffffc90004affba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 495.994277][ T31] #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 496.005793][ T31] 2 locks held by syz.3.2518/14694: [ 496.011135][ T31] #0: ffff888079651100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 496.020965][ T31] #1: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 496.031129][ T31] 2 locks held by syz.0.2527/14730: [ 496.036329][ T31] #0: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 496.046939][ T31] #1: ffff888079651100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 496.056796][ T31] 3 locks held by syz.1.2550/14806: [ 496.062167][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.070786][ T31] #1: ffff88807a675100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 496.080455][ T31] #2: ffffffff8f5ac1c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 496.090474][ T31] 1 lock held by syz.4.2563/14848: [ 496.095582][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.104172][ T31] 1 lock held by syz.2.2599/14966: [ 496.109305][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.117812][ T31] 1 lock held by syz-executor/14970: [ 496.123185][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.131703][ T31] 1 lock held by syz-executor/14971: [ 496.136987][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.145611][ T31] 1 lock held by syz-executor/14973: [ 496.150956][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.159426][ T31] 1 lock held by syz-executor/14975: [ 496.164782][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.173518][ T31] 1 lock held by syz-executor/14977: [ 496.178831][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.187425][ T31] 1 lock held by syz-executor/14980: [ 496.192751][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.201268][ T31] 1 lock held by syz-executor/14981: [ 496.206548][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.215085][ T31] 1 lock held by syz-executor/14983: [ 496.220426][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.228971][ T31] 1 lock held by syz-executor/14985: [ 496.234306][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.242824][ T31] 1 lock held by syz-executor/14987: [ 496.248214][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.256796][ T31] 1 lock held by syz-executor/14990: [ 496.262149][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.270695][ T31] 1 lock held by syz-executor/14991: [ 496.276075][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.284654][ T31] 1 lock held by syz-executor/14993: [ 496.289952][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.298500][ T31] 1 lock held by syz-executor/14995: [ 496.303844][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.312365][ T31] 1 lock held by syz-executor/14997: [ 496.317648][ T31] #0: ffffffff8e7756e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 496.326185][ T31] [ 496.328528][ T31] ============================================= [ 496.328528][ T31] [ 496.337118][ T31] NMI backtrace for cpu 1 [ 496.337138][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 496.337154][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.337163][ T31] Call Trace: [ 496.337170][ T31] [ 496.337176][ T31] dump_stack_lvl+0x189/0x250 [ 496.337203][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.337223][ T31] ? __pfx__printk+0x10/0x10 [ 496.337248][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 496.337268][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 496.337287][ T31] ? __pfx__printk+0x10/0x10 [ 496.337305][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.337341][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 496.337361][ T31] watchdog+0xf60/0xfa0 [ 496.337380][ T31] ? watchdog+0x1e2/0xfa0 [ 496.337399][ T31] kthread+0x711/0x8a0 [ 496.337420][ T31] ? __pfx_watchdog+0x10/0x10 [ 496.337434][ T31] ? __pfx_kthread+0x10/0x10 [ 496.337454][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.337474][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.337493][ T31] ? __pfx_kthread+0x10/0x10 [ 496.337512][ T31] ret_from_fork+0x4bc/0x870 [ 496.337530][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.337550][ T31] ? __switch_to_asm+0x39/0x70 [ 496.337561][ T31] ? __switch_to_asm+0x33/0x70 [ 496.337571][ T31] ? __pfx_kthread+0x10/0x10 [ 496.337592][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.337618][ T31] [ 496.337624][ T31] Sending NMI from CPU 1 to CPUs 0: [ 496.483270][ C0] NMI backtrace for cpu 0 [ 496.483300][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 496.483320][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.483332][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 496.483363][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 81 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 496.483380][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 496.483396][ C0] RAX: 98f8ddf1cf0c7100 RBX: ffffffff81967b47 RCX: 98f8ddf1cf0c7100 [ 496.483410][ C0] RDX: 0000000000000001 RSI: ffffffff8d70ed5a RDI: ffffffff8bbf08e0 [ 496.483422][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 496.483436][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cf470 [ 496.483449][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 496.483461][ C0] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 496.483475][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.483487][ C0] CR2: 000055ac25d10000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 496.483502][ C0] Call Trace: [ 496.483511][ C0] [ 496.483517][ C0] default_idle+0x13/0x20 [ 496.483534][ C0] default_idle_call+0x73/0xb0 [ 496.483555][ C0] do_idle+0x1e7/0x510 [ 496.483574][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.483602][ C0] ? __pfx_do_idle+0x10/0x10 [ 496.483624][ C0] ? do_idle+0x4e7/0x510 [ 496.483645][ C0] cpu_startup_entry+0x44/0x60 [ 496.483664][ C0] rest_init+0x2de/0x300 [ 496.483684][ C0] start_kernel+0x3ae/0x410 [ 496.483708][ C0] x86_64_start_reservations+0x24/0x30 [ 496.483736][ C0] x86_64_start_kernel+0x143/0x1c0 [ 496.483765][ C0] common_startup_64+0x13e/0x147 [ 496.483799][ C0]