last executing test programs: 22.759229658s ago: executing program 4 (id=1052): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x80000010}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x10, 0x10000}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0x70bd28, 0x25dfd3fd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0xf}, {0x4, 0x7}}}, 0xffffffffffffffbd}, 0x1, 0x0, 0x0, 0x44}, 0x20008004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'nr0\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) read$alg(r7, &(0x7f0000000580)=""/110, 0x6e) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 22.321812068s ago: executing program 4 (id=1057): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_PARMS={0x18, 0x1, {0x3, 0x1, 0x0, 0x2, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_PARMS={0x18, 0x1, {0x3, 0x1, 0x0, 0x2, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) (async) 21.802314574s ago: executing program 4 (id=1062): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @loopback, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x48080}, 0x480c4) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) recvmmsg(r4, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/213, 0xd5}], 0x1}, 0xf46b275}], 0x1, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4627, 0xfdfffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r7, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000001780)="9c435a7de4c0ff", 0x7}], 0x1}}], 0x1, 0x4001c00) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 18.934950129s ago: executing program 1 (id=1078): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000014009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 18.730273608s ago: executing program 1 (id=1079): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22eca65c9d}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 18.643539879s ago: executing program 4 (id=1080): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x41, 0x700, 0xeec, 0x1ff, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x68, 0x0, 0x3, 0x2f, 0x0, @loopback, @remote}}}}) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x20, &(0x7f0000000100)=@raw=[@call={0x85, 0x0, 0x0, 0x30}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xcff}}, @alu={0x7, 0x1, 0x8, 0x3, 0xa, 0x1, 0xfffffffffffffffc}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x1, 0x1, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x1000, &(0x7f0000000340)=""/4096, 0x40f00, 0x15, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x6, 0xfff, 0x40}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001340)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001380)=[{0x0, 0x1, 0xc, 0x2}], 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f00000000c0)='kvm_msi_set_irq\x00', r3, 0x0, 0xacc}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000100)="36d1ce1e6d25a81a70ff16f304874ef539d80e29baefbb8c", 0x18}], 0x2) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "32bed0613773c26f", "59be70b0141cba8835b9301f68af0b15", "13921848", "c9f7048e21bb5f9a"}, 0x28) (async) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)='n', 0x1}], 0x1}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x75, r2}) 18.106703282s ago: executing program 4 (id=1081): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000020000010900010073797a31000000005400000003"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/69, 0x45}], 0x2}, 0x0) recvmmsg$unix(r3, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/19, 0x13}], 0x1}}], 0x1, 0x20000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$nl_netfilter(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)={0x284, 0x1, 0x7, 0x101, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x4}, [@typed={0x4c, 0x13c, 0x0, 0x0, @binary="78f4d44a999b4b2060df645ca58b82f656bfc460086196b16646ce1ad9dbcc1c69ee6c404c8949261ff5cff5988271d97315c5b5b2816d1ad61ae5e6489524447747ae4128465a7c"}, @typed={0x4, 0x7c, 0x0, 0x0, @binary}, @generic="0e91cbf1e3f8d3a4e6437c121f5085bc705de0441e5cb081e97fd66e39557d4361d97a76f9637e78a7eee14f5d436e25210bd7cce689bb2a0b71b3bd2f", @nested={0x4, 0xef}, @generic="f835c914274d3b22f04e99c2b0ed90994948190d64eb64968a907942b5fd507fed14ec993f221f23dab37c56d8f4b21d99b867f77da2ab3e9cfe05ed5587882ce8357073b12b55e3c86d8f523b701544b0ffb3a415b49ddf8fe604eb9cd6d62f6d52ff819e61674e55442fde1949eeb6b74fdb3f60f81ce47b567471ed28c879b11577ed651fb076fee6c65dc02ddc3b8441bf7bc95d33dfdf754fbc7f3ff1ee4b0af05c51dbab443e8b35c26765e0081c7f12cbaca98bbb3e5f", @nested={0x28, 0x14b, 0x0, 0x1, [@typed={0xc, 0x91, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x113}, @typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@loopback}]}, @generic="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"]}, 0x284}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="25e200ea3f5b3179d7b52eb343fc", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 18.10622455s ago: executing program 3 (id=1082): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) socket(0x25, 0xa, 0x887) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}}, 0x0) 17.986365314s ago: executing program 1 (id=1083): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x100000001, 0x3}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x3, 0x82d, 0x1, {0x0, 0xea60}, {r1, r2/1000+60000}, {0x3, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x2e, 0x3, 0x0, 0x0, "8b71dfb01b04231893a4f5a7364821e10c838b761d5a09831db90ba741cca5a2d0048694caee774440b69ebe6203491afe28aa046b21210672eb3a6ad092d87c"}}, 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x20000001) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff3}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}]}}]}, 0x3c}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.921075284s ago: executing program 4 (id=1084): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa9880120050018001280450001007769a255e4439189844b65e3be20ce6aa1726567756172640000000400028004001a80"], 0x3c}}, 0x440088c4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[], 0x158}, 0x1, 0xba01, 0x0, 0x4010}, 0x44) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[], 0x158}, 0x1, 0xba01, 0x0, 0x4010}, 0x44) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xc1}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xc1}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000801000000054c39afc7f4eb04c00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000801000000054c39afc7f4eb04c00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r10, &(0x7f0000000240), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r10, &(0x7f0000000240), 0x0}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd6d00aef9f9780dd2fcdbdf250200", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="011026bd7000fcdbdf250200000008000100", @ANYRES32=r15, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="011026bd7000fcdbdf250200000008000100", @ANYRES32=r15, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ecae1f05af020000", @ANYRES16=r3, @ANYBLOB="fc032cbd7000fedbdf2513000900080001002f735435732d9876afca3fd962b535ac5368bf99e6ca83bc", @ANYRES32=r15, @ANYBLOB="040113802c000080120001006269746d61703a69702c6d616300000009000100255e5c7d2a000000060001005d5c000058000080120001006269746d61703a69702c6d6163000000290001005867fcde74d9797a0d009338a5a8eb1e9eb0a02c29e3b31d4affce4eed80ab5ed1b2c56fe1000000120001006269746d61703a69702c6d61630000003c000080120001006269746d61703a69702c6d61630000000400010005000100c900000004000100120001006269746d61703a69702c6d6163000000400000800b0001002f2b5d2a2f5e2f00050001002c0000000e00010077697265677561726400000006000100405d00000400010008000100282de55e04000100e40013804400008005000100260000000a0001005b212a243a2700000500010023000000120001006269746d61703a69702c6d61630000000900010073797a3000000000040001002c0000800e0001007769726567756172640000000a000100252a2e272d2100000b000100295c9c29262d2e00600000800e0001007769726567756172640000000e0001007769726567756172640000000e000100776972656775617264000000060001002a3a0000120001006269746d61703a69702c6d6163000000060001002526000006000100262d0000100000800900010073797a3000000000d000138044000080120001006269746d61703a69702c6d61630000000e0001005c2d272e232629005b2f00000d00010029237d55235b5b3a5b0000000900010073797a3000000000880000800e0001007769726567756172640000000900010073797a3000000000120001006269746d61703a69702c6d61630000000e000100776972656775617264000000040001000e0001007769726567756172640000000d0001002a5e7b2d2626407b250000000e00010077697265677561726400000006000100405b0000070001005b2c250008000100", @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="fc178234319e0ee13d5fe5aa8077b3d2bfaf1981fff28760fdbb0000000000"], 0x2ec}, 0x1, 0x0, 0x0, 0x4008001}, 0x48045) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000002060500000000000000000005000000120003006269746d61703a69702c6d61630095e7deae25ba5794809e00000500010007006e0005000400030000001c0007800c00028008000100640101020c00018008000140000000000500050002000a000500010006000000"], 0x64}}, 0x8080) 17.919272536s ago: executing program 1 (id=1085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="18000000720001070000000000000002070000f70c"], 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x200, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffc}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180"], 0x34}}, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x40, 0x0, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x0) 17.907436206s ago: executing program 3 (id=1086): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x2}]}}}]}, 0x3c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@fallback=r1, r1, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000340)="9f227e2c", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, &(0x7f0000000a80), &(0x7f0000000ac0)=""/68}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='/'], 0x20) r4 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r4, 0x1, 0x48, &(0x7f0000000000)=0x2, 0x4) listen(r4, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) 17.752672367s ago: executing program 1 (id=1087): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x1) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x3, 0xc, 0x0, 0x80ff, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}]}, 0x60}, 0x1, 0x7}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x3}, 0x4}, 0x0, {[0x6, 0x0, 0x2, 0xfffffef9, 0x0, 0x0, 0x1464410e, 0x7]}}, 0x5c) r3 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0xa, &(0x7f0000000040)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) r7 = accept$unix(r0, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) accept4$unix(r7, &(0x7f00000003c0)=@abs, &(0x7f0000000300)=0x6e, 0x800) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000bc0), 0x800) close(0x3) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000200)=0x4) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$inet(r4, &(0x7f0000000080), 0x0, 0xc9100120, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000740)=""/198, 0xc6}, {&(0x7f0000000840)=""/201, 0xc9}], 0x2, &(0x7f0000000940)=""/154, 0x9a}, 0x3}, {{&(0x7f0000000580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000b00)=""/167, 0xa7}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)=""/101, 0x65}], 0x4, &(0x7f0000000cc0)=""/195, 0xc3}, 0x8}, {{&(0x7f0000000dc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000e40)=""/8, 0x8}, {&(0x7f0000000ec0)=""/64, 0x40}, {0x0}, {&(0x7f0000000fc0)=""/75, 0x4b}, {&(0x7f0000001040)=""/16, 0x10}, {&(0x7f0000001080)=""/6, 0x6}, {&(0x7f00000010c0)=""/171, 0xab}, {&(0x7f0000001180)=""/114, 0x72}], 0x8, 0xfffffffffffffffd}, 0x95b}, {{&(0x7f00000012c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001340)=""/2, 0x2}], 0x1, &(0x7f00000013c0)=""/235, 0xeb}, 0xffffffba}, {{0x0, 0x0, &(0x7f0000001900)}, 0x7df7}], 0x5, 0x40000000, &(0x7f0000001b80)={0x0, 0x989680}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) 17.550562846s ago: executing program 1 (id=1088): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x241, 0x0, 0x11) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x14, r7, 0x4, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) clock_gettime(0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 17.497164159s ago: executing program 3 (id=1089): syz_emit_ethernet(0xfa, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x35}, 0x800, 0x0, 0x2, 0x1, 0x8, 0xfffc}, 0x20) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f00000001c0)="f01381ce379ddecb0410c8eaa5b51ec2", 0x10}], 0x1, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8) r5 = socket$netlink(0x10, 0x3, 0x9) splice(r1, 0x0, r5, 0x0, 0x10d00, 0xf) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r11, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @private1, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) shutdown(r11, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff9, @mcast2, 0x40}}, 0x29, 0x4080}, 0x90) setsockopt$sock_int(r10, 0x1, 0x25, &(0x7f0000000300)=0x8, 0x4) setsockopt$sock_int(r10, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r10, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000140)={r9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000080)={r9, 0x9}, &(0x7f00000000c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 17.374510658s ago: executing program 3 (id=1090): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1) syz_emit_ethernet(0x28e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd609907a602582c03cb697a653e336f000000500000000000ff0200000000000000000000000000010102002e"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000000000000000000000010213f5"], 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 16.952705606s ago: executing program 3 (id=1091): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_OKEY={0x8, 0x5, 0xc}]}}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 16.74174894s ago: executing program 3 (id=1092): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x6f1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @random}]}]}}}]}, 0x50}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) 16.401371852s ago: executing program 2 (id=1095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x1c, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008844}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000900)={0x1, 0x3a, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @generic={0x3, 0xcc, "aeb686ad680fc5f9188e78a218b392417fa0155ce4cba3896f26f60e0d8a38959cb9a2426a564a4173895382ee38c5f4eff6d13a135c69f7e8ac616757423fdafecda7d3d2977b86446115dbf020125e6d830834c9df90f28a216d6c4fddf4ab1bbe28caf293586ad237d2b44b4205bf69aed35ea4cb85bbfb18e60109a550be6ce21f604d48d9f75027067f097dad1064636c0c7bbe74332da9efefd794bee2732edd44c50c00d66a50e278cc84d3364d222a137e96e7409989bc509eec82caa4e9500dccfc5313dc1cfd22"}, @enc_lim={0x4, 0x1, 0xf1}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x1}, @generic={0x9, 0xf2, "76739895c248baa55fe91f16cb82b58f34dc84494b0b88cd05f3dbd939fdab8d662cd5a5291d4e39c4108fc8b4a84c5fd4db4cf90b5a63f143d6687fa5b7b798bc754f029ba249684eb0d656becb54e5bf7bb1c32ae87e1de99fc6596cf1e44df2d3e757cdaeacb738510dd6d1a84fd427e671301d49f894bfce125def2f9c0239b4ad580fbe3b5df18e7cf0d8e857753a9f2c83eb82aefab792d9ea491e8bd68d7693ccbe265042946268d1b1c3a732ac1b3307b38ee3600677aec805cce3c296c1d7f21c1ae654f28d7788b46386339d89507ba69843c2ca0fb2e869614681b0bdf1b6f5d08d19c0014ccecbe10bd1d651"}]}, 0x1e0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="635fb97ba8c14188f8ef787eba0b", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.350845074s ago: executing program 2 (id=1096): socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) write$nci(0xffffffffffffffff, &(0x7f0000000080)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x9}, 0x4) (async) write$nci(0xffffffffffffffff, &(0x7f0000000080)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x9}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [], {0x14}}, 0x28}}, 0x200040d0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1807000000000100000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x82, &(0x7f0000000240)=""/130, 0x41100, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}}, 0x16c}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000000c0)=0x7e43, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000000c0)=0x7e43, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) listen(r6, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180)=0x4e5, 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180)=0x4e5, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="28c653e677a54bb12900800010005fba00f6ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="00010000e180000008001b0000000000"], 0x28}}, 0x0) 16.178091036s ago: executing program 0 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000cb619b92c3be9b5200080000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000008000000040000004600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009cc1fffffcfaffffff000000000000000000000022000000"], 0x50) unshare(0x600) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001340)=ANY=[@ANYBLOB=',P\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf2513000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20001000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r7 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "4cecd08fa44b9fa3", "52bac32cae9f17d859b627eaed4735f4ba98da9aa265e83caa5ed4d2419aae7d", "eb54c015", "c9214f7b159c5abc"}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRESDEC=r6, @ANYRESDEC=r5], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r8}, 0x10) (async) r9 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa3bab654a543c9d8, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r10, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20006490"], 0x9e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 16.174615935s ago: executing program 2 (id=1099): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$key(0xf, 0x3, 0x2) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x1) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x3, 0xc, 0x0, 0x80ff, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}]}, 0x60}, 0x1, 0x7}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x3}, 0x4}, 0x0, {[0x6, 0x0, 0x2, 0xfffffef9, 0x0, 0x0, 0x1464410e, 0x7]}}, 0x5c) r3 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0xa, &(0x7f0000000040)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) r7 = accept$unix(r0, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) accept4$unix(r7, &(0x7f00000003c0)=@abs, &(0x7f0000000300)=0x6e, 0x800) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000bc0), 0x800) close(0x3) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000200)=0x4) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$inet(r4, &(0x7f0000000080), 0x0, 0xc9100120, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a40)=[{{&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000740)=""/198, 0xc6}, {&(0x7f0000000840)=""/201, 0xc9}], 0x2, &(0x7f0000000940)=""/154, 0x9a}, 0x3}, {{&(0x7f0000000580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000b00)=""/167, 0xa7}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)=""/101, 0x65}], 0x4, &(0x7f0000000cc0)=""/195, 0xc3}, 0x8}, {{&(0x7f0000000dc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000e40)=""/8, 0x8}, {&(0x7f0000000ec0)=""/64, 0x40}, {0x0}, {&(0x7f0000000fc0)=""/75, 0x4b}, {&(0x7f0000001040)=""/16, 0x10}, {&(0x7f0000001080)=""/6, 0x6}, {&(0x7f00000010c0)=""/171, 0xab}, {&(0x7f0000001180)=""/114, 0x72}], 0x8, 0xfffffffffffffffd}, 0x95b}, {{&(0x7f00000012c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001340)=""/2, 0x2}], 0x1, &(0x7f00000013c0)=""/235, 0xeb}, 0xffffffba}, {{0x0, 0x0, &(0x7f0000001900)}, 0x7df7}], 0x5, 0x40000000, &(0x7f0000001b80)={0x0, 0x989680}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 16.07462872s ago: executing program 0 (id=1100): r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2, 0xf24}, 0x1c) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x24000805) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x0) 16.031942012s ago: executing program 2 (id=1101): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) accept4(r1, 0x0, &(0x7f00000004c0), 0x800) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 15.966251035s ago: executing program 0 (id=1102): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd0, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000005c0)={'ipvlan0\x00', 0x800}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x100000000) close(0x3) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x916}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7ffffffb, 0x2}, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r10}, 0x10) syz_open_procfs$namespace(r3, &(0x7f00000003c0)='ns/pid_for_children\x00') r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x9, 0xff, 0x1000, 0x8, r8, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0xd}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000003900000125bd7000fcdbdf251800000008005500", @ANYRES32=r1, @ANYBLOB="4400cc8008001c00ffffffff08001100", @ANYRES32=r3, @ANYBLOB="04e4e8a8322730000000007b889b39eda4c9843f815a8cade315d496737cd17146d4a033a6183d5e393ec9a17a79a1b5"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) 15.965849891s ago: executing program 2 (id=1103): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2100, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'macvlan1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000002090e703436bd5ac0086c92c211c6244c883c435e8c6ba3efbd267a93df8b042592bcc98d07a44299404c27be214a5a24f3f0712428f8fcdb544f66b96ccadf0b472cb6cb24b782d2d349620958798a539e9614ac827491a62cd51b3526dcf6da7aeaba7449ce5022202b3fc386b519a"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000001f00)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x5, 'macvlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) pipe(0x0) socketpair(0xc, 0x80000, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000001f40)={0x11b8, 0x14, 0x300, 0x70bd2b, 0x25dfdbfd, {0x25, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xc9, 0x1, "241bf2d08717268691bfcec9f0f221bf096ffe21e2bcc8ecb68af12641bc1fca665fa0e018996b346bd360dbd31ce51553bbbbdaf99cfed01977f7b38301a1649a2dc20d5aa7e0283e08a947ce1b66f0187848128001ac06a569b648a45f30c75484a08e9d397766c20d6b7a490edb398a480a52a62b0fce11bb481e5fc26d6ba7008cf2a323f738b156675575391e8febf279c623c71e0532a2533ff9afcc7abd5aae1200a009bbc73da3fcac83498c6d441028308138ce367f2511037ba3a128e2223e17"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "f873345d0d2870eab3bc0dcf2b8166b8457da78f28284dad6038136abdd8c5f15b8493acdc367f0965671f6c03e8c0113e6011a94946883e02df1a26f5118b3c6a28e33f1d869759b53e6f451e9a5eb6f7ec970ace272de89be84b3d6ca026dcd93e4edab059dc02194578f985f5bb59fba0aa9bd0720c8571707d1e3ef5e07a8eddf763b74e018982a78ec928b3851e5c9bc45ac2a3e5cd3daf5895cfe35fb88dfaede6f490a139c1b635724df887df90dc764a8d58d32b1613c8711fdbc5e9218f8096fb399bfc9f4345c90a8b"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x11b8}, 0x1, 0x0, 0x0, 0x800d4}, 0x4040000) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'wg1\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 15.853187003s ago: executing program 0 (id=1104): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800b0001007470726f78790000140002800800034000000016080001400000000a0900010073797a30"], 0xf8}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast}, &(0x7f0000000240)=0xc) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0xe0, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000008000000079ba3f3c5b7d82162f000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0xffffffff}]}, 0x30}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000044000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000030000007b00100000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.846294011s ago: executing program 2 (id=1105): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x17, r1, 0x1, 0xf9}, 0x14) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000001c0), &(0x7f0000000300)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xd50, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x3) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000500)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x814}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x146, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x2, 0x8, "d58838068b91"}]}}, {"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"}}}}}, 0x154) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911084000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) 15.673752996s ago: executing program 0 (id=1106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000030009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 15.586474179s ago: executing program 0 (id=1107): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x40001) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) pwrite64(r2, &(0x7f0000000040)="43572654b114b1a9e187499a3907", 0xe, 0x6) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f00000003c0)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x1000) (async) setsockopt(r0, 0x84, 0x80, &(0x7f0000000100)="00c4594d6e8338ae", 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x3, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x61, 0x2e, 0x5f, 0x30]}}, 0x0, 0x2b, 0x0, 0x1, 0x7}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) 2.527683872s ago: executing program 32 (id=1088): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x241, 0x0, 0x11) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x14, r7, 0x4, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) clock_gettime(0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) 2.499228028s ago: executing program 33 (id=1084): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa9880120050018001280450001007769a255e4439189844b65e3be20ce6aa1726567756172640000000400028004001a80"], 0x3c}}, 0x440088c4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[], 0x158}, 0x1, 0xba01, 0x0, 0x4010}, 0x44) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[], 0x158}, 0x1, 0xba01, 0x0, 0x4010}, 0x44) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xc1}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xc1}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000801000000054c39afc7f4eb04c00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000801000000054c39afc7f4eb04c00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r10, &(0x7f0000000240), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r10, &(0x7f0000000240), 0x0}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd6d00aef9f9780dd2fcdbdf250200", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="011026bd7000fcdbdf250200000008000100", @ANYRES32=r15, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="011026bd7000fcdbdf250200000008000100", @ANYRES32=r15, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="ecae1f05af020000", @ANYRES16=r3, @ANYBLOB="fc032cbd7000fedbdf2513000900080001002f735435732d9876afca3fd962b535ac5368bf99e6ca83bc", @ANYRES32=r15, @ANYBLOB="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", @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="fc178234319e0ee13d5fe5aa8077b3d2bfaf1981fff28760fdbb0000000000"], 0x2ec}, 0x1, 0x0, 0x0, 0x4008001}, 0x48045) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000002060500000000000000000005000000120003006269746d61703a69702c6d61630095e7deae25ba5794809e00000500010007006e0005000400030000001c0007800c00028008000100640101020c00018008000140000000000500050002000a000500010006000000"], 0x64}}, 0x8080) 1.02739647s ago: executing program 34 (id=1092): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x6f1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @random}]}]}}}]}, 0x50}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) 26.210909ms ago: executing program 35 (id=1107): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$packet(0x11, 0x3, 0x300) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x40001) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) pwrite64(r2, &(0x7f0000000040)="43572654b114b1a9e187499a3907", 0xe, 0x6) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f00000003c0)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x1000) (async) setsockopt(r0, 0x84, 0x80, &(0x7f0000000100)="00c4594d6e8338ae", 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x3, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x61, 0x2e, 0x5f, 0x30]}}, 0x0, 0x2b, 0x0, 0x1, 0x7}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) 0s ago: executing program 36 (id=1105): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x17, r1, 0x1, 0xf9}, 0x14) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000001c0), &(0x7f0000000300)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xd50, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r8, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x3) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000500)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x814}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x146, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x2, 0x8, "d58838068b91"}]}}, {"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"}}}}}, 0x154) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911084000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 71.920138][ T5849] cgroup: Unknown subsys name 'net' [ 72.070075][ T5849] cgroup: Unknown subsys name 'cpuset' [ 72.078623][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.478748][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.773045][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.784171][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.789642][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.792469][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.808000][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.815838][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.825852][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.833290][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.840510][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.840975][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.857831][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.857869][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.866688][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.880044][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.887513][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.888489][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.904154][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.906854][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.926992][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.949707][ T5879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.957868][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.965190][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.974690][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.982863][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.990643][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.588272][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 78.747183][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 78.783386][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 78.894225][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.901739][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.909526][ T5872] bridge_slave_0: entered allmulticast mode [ 78.916920][ T5872] bridge_slave_0: entered promiscuous mode [ 78.940748][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 78.963403][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 78.978745][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.985896][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.993211][ T5872] bridge_slave_1: entered allmulticast mode [ 79.000638][ T5872] bridge_slave_1: entered promiscuous mode [ 79.155096][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.164484][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.171784][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.179058][ T5860] bridge_slave_0: entered allmulticast mode [ 79.186008][ T5860] bridge_slave_0: entered promiscuous mode [ 79.218611][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.243248][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.250578][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.258075][ T5860] bridge_slave_1: entered allmulticast mode [ 79.265209][ T5860] bridge_slave_1: entered promiscuous mode [ 79.276857][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.283983][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.291782][ T5863] bridge_slave_0: entered allmulticast mode [ 79.299128][ T5863] bridge_slave_0: entered promiscuous mode [ 79.353102][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.360988][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.368282][ T5863] bridge_slave_1: entered allmulticast mode [ 79.375215][ T5863] bridge_slave_1: entered promiscuous mode [ 79.409884][ T5872] team0: Port device team_slave_0 added [ 79.452254][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.459591][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.466910][ T5871] bridge_slave_0: entered allmulticast mode [ 79.473939][ T5871] bridge_slave_0: entered promiscuous mode [ 79.484171][ T5872] team0: Port device team_slave_1 added [ 79.506819][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.517027][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.524161][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.531546][ T5868] bridge_slave_0: entered allmulticast mode [ 79.538615][ T5868] bridge_slave_0: entered promiscuous mode [ 79.551290][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.563844][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.573185][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.580486][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.587819][ T5871] bridge_slave_1: entered allmulticast mode [ 79.594992][ T5871] bridge_slave_1: entered promiscuous mode [ 79.615305][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.625372][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.632557][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.640091][ T5868] bridge_slave_1: entered allmulticast mode [ 79.647325][ T5868] bridge_slave_1: entered promiscuous mode [ 79.691673][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.698933][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.725721][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.779039][ T5863] team0: Port device team_slave_0 added [ 79.787978][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.809369][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.816769][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.842982][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.866268][ T5863] team0: Port device team_slave_1 added [ 79.874002][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.885830][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.905327][ T5860] team0: Port device team_slave_0 added [ 79.939006][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.967325][ T5860] team0: Port device team_slave_1 added [ 79.997469][ T5867] Bluetooth: hci0: command tx timeout [ 80.003491][ T5867] Bluetooth: hci4: command tx timeout [ 80.037155][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.044128][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.071831][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.084582][ T5868] team0: Port device team_slave_0 added [ 80.090374][ T5879] Bluetooth: hci2: command tx timeout [ 80.096321][ T5879] Bluetooth: hci1: command tx timeout [ 80.097748][ T5868] team0: Port device team_slave_1 added [ 80.102216][ T5867] Bluetooth: hci3: command tx timeout [ 80.116624][ T5871] team0: Port device team_slave_0 added [ 80.152460][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.159592][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.185916][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.210468][ T5871] team0: Port device team_slave_1 added [ 80.235896][ T5872] hsr_slave_0: entered promiscuous mode [ 80.242534][ T5872] hsr_slave_1: entered promiscuous mode [ 80.251648][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.258892][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.286222][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.314172][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.321376][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.347523][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.360676][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.367771][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.394330][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.438173][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.445150][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.471393][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.505105][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.512213][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.538320][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.585576][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.592686][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.619634][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.665451][ T5863] hsr_slave_0: entered promiscuous mode [ 80.671861][ T5863] hsr_slave_1: entered promiscuous mode [ 80.678212][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 80.684023][ T5863] Cannot create hsr debugfs directory [ 80.724656][ T5860] hsr_slave_0: entered promiscuous mode [ 80.731800][ T5860] hsr_slave_1: entered promiscuous mode [ 80.738147][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 80.743890][ T5860] Cannot create hsr debugfs directory [ 80.818888][ T5871] hsr_slave_0: entered promiscuous mode [ 80.825520][ T5871] hsr_slave_1: entered promiscuous mode [ 80.831652][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 80.837459][ T5871] Cannot create hsr debugfs directory [ 80.854464][ T5868] hsr_slave_0: entered promiscuous mode [ 80.860900][ T5868] hsr_slave_1: entered promiscuous mode [ 80.867421][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 80.873144][ T5868] Cannot create hsr debugfs directory [ 81.345073][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.358020][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.399720][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.416428][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.468843][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.483059][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.502299][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.524948][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.587432][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.613088][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.641993][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.675170][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.773878][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.810467][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.823504][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.856945][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.890069][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.903212][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.951201][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.958527][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.006998][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.014155][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.077374][ T51] Bluetooth: hci0: command tx timeout [ 82.082863][ T5867] Bluetooth: hci4: command tx timeout [ 82.088890][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.107662][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.118530][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.130620][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.140988][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.166879][ T5867] Bluetooth: hci3: command tx timeout [ 82.172342][ T5867] Bluetooth: hci2: command tx timeout [ 82.177982][ T51] Bluetooth: hci1: command tx timeout [ 82.239057][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.303602][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.310870][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.320735][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.328040][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.374889][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.440881][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.479319][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.515254][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.522370][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.541090][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.552921][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.560171][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.570964][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.608203][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.615373][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.632369][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.639898][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.669921][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.714787][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.731235][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.738453][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.764075][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.771257][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.932797][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.011784][ T5872] veth0_vlan: entered promiscuous mode [ 83.044578][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.091736][ T5872] veth1_vlan: entered promiscuous mode [ 83.217445][ T5872] veth0_macvtap: entered promiscuous mode [ 83.248332][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.258648][ T5872] veth1_macvtap: entered promiscuous mode [ 83.335567][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.375307][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.421773][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.435491][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.471626][ T5871] veth0_vlan: entered promiscuous mode [ 83.477684][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.490592][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.525419][ T5871] veth1_vlan: entered promiscuous mode [ 83.551567][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.627527][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.646903][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.661965][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.722225][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.725811][ T5871] veth0_macvtap: entered promiscuous mode [ 83.737769][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.744461][ T5871] veth1_macvtap: entered promiscuous mode [ 83.830686][ T5860] veth0_vlan: entered promiscuous mode [ 83.844835][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.849653][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.876594][ T5868] veth0_vlan: entered promiscuous mode [ 83.893363][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.932336][ T5868] veth1_vlan: entered promiscuous mode [ 83.945192][ T5860] veth1_vlan: entered promiscuous mode [ 83.958661][ T5863] veth0_vlan: entered promiscuous mode [ 83.988721][ T2980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.000589][ T2980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.013516][ T2980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.025827][ T5980] syz_tun: entered allmulticast mode [ 84.038769][ T5863] veth1_vlan: entered promiscuous mode [ 84.045426][ T2980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.082827][ T5979] syz_tun: left allmulticast mode [ 84.096005][ T5868] veth0_macvtap: entered promiscuous mode [ 84.125632][ T5868] veth1_macvtap: entered promiscuous mode [ 84.153894][ T5860] veth0_macvtap: entered promiscuous mode [ 84.161630][ T5867] Bluetooth: hci4: command tx timeout [ 84.167476][ T5879] Bluetooth: hci0: command tx timeout [ 84.195815][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.210462][ T5860] veth1_macvtap: entered promiscuous mode [ 84.233025][ T5982] bridge1: entered promiscuous mode [ 84.246005][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.246962][ T5867] Bluetooth: hci2: command tx timeout [ 84.259282][ T5879] Bluetooth: hci1: command tx timeout [ 84.264707][ T5879] Bluetooth: hci3: command tx timeout [ 84.282236][ T5863] veth0_macvtap: entered promiscuous mode [ 84.337675][ T5863] veth1_macvtap: entered promiscuous mode [ 84.347345][ T2924] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.348608][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 84.357167][ T2924] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.392458][ T5986] ip6gretap0: entered promiscuous mode [ 84.401254][ T5986] ip6gretap0: left promiscuous mode [ 84.420271][ T2924] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.434698][ T2924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.443992][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.454582][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.472840][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.505743][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.545966][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.571939][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.579543][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.597340][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.632893][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.647931][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.689065][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.708105][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.728510][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.752767][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.766264][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.775781][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.836296][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.872018][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.018436][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.027112][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.080956][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.089409][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.153547][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.177238][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.296021][ T969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.324261][ T969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.431559][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.437863][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 85.450708][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.615392][ T6014] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.958085][ T6018] syz_tun: entered allmulticast mode [ 85.968181][ T5930] IPVS: starting estimator thread 0... [ 85.999074][ T6016] syz_tun: left allmulticast mode [ 86.070313][ T6022] IPVS: using max 35 ests per chain, 84000 per kthread [ 86.236646][ T5867] Bluetooth: hci4: command tx timeout [ 86.236821][ T5879] Bluetooth: hci0: command tx timeout [ 86.251785][ T6029] netlink: 'syz.2.14': attribute type 13 has an invalid length. [ 86.295913][ T6032] syz_tun: entered allmulticast mode [ 86.300381][ T6029] netlink: 'syz.2.14': attribute type 17 has an invalid length. [ 86.357670][ T5879] Bluetooth: hci2: command tx timeout [ 86.357687][ T5867] Bluetooth: hci3: command tx timeout [ 86.357720][ T5867] Bluetooth: hci1: command tx timeout [ 86.367334][ T6030] syz_tun: left allmulticast mode [ 86.585410][ T6038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.610375][ T6029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.744854][ T1208] cfg80211: failed to load regulatory.db [ 87.084754][ T6051] wg1: entered promiscuous mode [ 87.115658][ T6051] wg1: entered allmulticast mode [ 87.727844][ T6063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19'. [ 87.789805][ T6070] syz_tun: entered allmulticast mode [ 87.855074][ T6068] syz_tun: left allmulticast mode [ 87.994968][ T6077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.23'. [ 88.264202][ T6082] IPVS: Scheduler module ip_vs_sip not found [ 88.272515][ T6086] IPVS: length: 24 != 1272 [ 88.380903][ T6089] bridge0: port 3(syz_tun) entered blocking state [ 88.418559][ T6089] bridge0: port 3(syz_tun) entered disabled state [ 88.444711][ T6089] syz_tun: entered allmulticast mode [ 88.489342][ T6089] syz_tun: entered promiscuous mode [ 88.519394][ T6089] bridge0: port 3(syz_tun) entered blocking state [ 88.526158][ T6089] bridge0: port 3(syz_tun) entered forwarding state [ 88.718987][ T6097] warning: `syz.0.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.818061][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'. [ 88.877594][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 88.888234][ T6097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.28'. [ 88.914547][ T6097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.28'. [ 88.930419][ T6097] netlink: 540 bytes leftover after parsing attributes in process `syz.0.28'. [ 88.978085][ T6085] infiniband syz1: set active [ 89.006185][ T6085] infiniband syz1: added syz_tun [ 89.049933][ T6102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'. [ 89.067032][ T6085] RDS/IB: syz1: added [ 89.071615][ T6085] smc: adding ib device syz1 with port count 1 [ 89.079350][ T6085] smc: ib device syz1 port 1 has no pnetid [ 89.291193][ T6107] Zero length message leads to an empty skb [ 89.490835][ T6113] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET) [ 89.534514][ T6115] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 89.684170][ T5874] Bluetooth: hci2: command 0x0405 tx timeout [ 89.922964][ T6119] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.140157][ T6139] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.181942][ T6127] syzkaller0: entered promiscuous mode [ 90.194298][ T6127] syzkaller0: entered allmulticast mode [ 90.263124][ T6146] __nla_validate_parse: 2 callbacks suppressed [ 90.263142][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 90.589176][ T6119] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.668234][ T6146] bridge_slave_1: left allmulticast mode [ 90.685241][ T6146] bridge_slave_1: left promiscuous mode [ 90.699333][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.733745][ T6146] bridge_slave_0: left allmulticast mode [ 90.739985][ T6146] bridge_slave_0: left promiscuous mode [ 90.749426][ T6146] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.861424][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35'. [ 91.223406][ T6162] netlink: 'syz.0.39': attribute type 2 has an invalid length. [ 91.860804][ T6155] bridge_slave_0: left allmulticast mode [ 91.867144][ T6155] bridge_slave_0: left promiscuous mode [ 91.873041][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.930097][ T6155] bridge_slave_1: left allmulticast mode [ 91.936596][ T6155] bridge_slave_1: left promiscuous mode [ 91.942480][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.955320][ T6155] bond0: (slave bond_slave_0): Releasing backup interface [ 91.975321][ T6155] bond0: (slave bond_slave_1): Releasing backup interface [ 91.984268][ T6165] openvswitch: netlink: Multiple metadata blocks provided [ 91.997653][ T6155] team0: Port device team_slave_0 removed [ 92.013261][ T6155] team0: Port device team_slave_1 removed [ 92.020238][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.029877][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.038844][ T6155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.046505][ T6155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.055534][ T6155] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.088699][ T6119] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.200879][ T6119] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.598920][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.639954][ T2980] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.672092][ T2980] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.712134][ T2980] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.342024][ T6233] IPv6: sit1: Disabled Multicast RS [ 94.345082][ T6235] Bluetooth: MGMT ver 1.23 [ 94.698234][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 94.738525][ T6239] ip6gretap0: entered promiscuous mode [ 94.755960][ T6239] ip6gretap0: left promiscuous mode [ 95.063873][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 95.113577][ T6241] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 95.132564][ T6241] netlink: 'syz.1.60': attribute type 2 has an invalid length. [ 95.313176][ T6248] syz_tun: entered allmulticast mode [ 95.398089][ T6247] syz_tun: left allmulticast mode [ 95.732711][ T6259] openvswitch: netlink: Multiple metadata blocks provided [ 95.852865][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 95.886806][ T6261] ip6gretap0: entered promiscuous mode [ 95.905942][ T6261] ip6gretap0: left promiscuous mode [ 96.509025][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 96.522498][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.73'. [ 96.533005][ T6286] netlink: 'syz.1.73': attribute type 14 has an invalid length. [ 96.541108][ T6286] netlink: 'syz.1.73': attribute type 11 has an invalid length. [ 97.811332][ T6314] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20000 [ 97.861498][ T6314] netlink: 348 bytes leftover after parsing attributes in process `syz.1.81'. [ 97.923817][ T6319] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.81'. [ 98.087318][ T6325] netlink: 'syz.4.84': attribute type 10 has an invalid length. [ 98.140075][ T6318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.178134][ T6318] team0: Port device bond1 added [ 98.234021][ T6325] batman_adv: batadv0: Adding interface: netdevsim0 [ 98.241860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.268236][ T6325] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.314798][ T6325] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 98.785768][ T6356] netlink: 48 bytes leftover after parsing attributes in process `syz.1.89'. [ 98.923763][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 98.958780][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.92'. [ 99.203272][ T6371] netlink: 'syz.0.96': attribute type 10 has an invalid length. [ 99.243711][ T6371] team0: Cannot enslave team device to itself [ 99.311034][ T6376] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.98'. [ 99.624026][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 99.679377][ T6395] ip6gretap0: entered promiscuous mode [ 99.692370][ T6395] ip6gretap0: left promiscuous mode [ 100.094371][ T6422] netlink: 'syz.0.111': attribute type 13 has an invalid length. [ 100.101024][ T6409] bridge0: port 3(syz_tun) entered disabled state [ 100.132066][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.139991][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.293980][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.342486][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.622889][ T2980] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.635680][ T5984] syz1: Port: 1 Link DOWN [ 100.684310][ T6010] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.739305][ T6010] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.821963][ T6010] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.022668][ T6429] netlink: 'syz.4.114': attribute type 13 has an invalid length. [ 101.056114][ T6429] netlink: 'syz.4.114': attribute type 17 has an invalid length. [ 101.077291][ T6429] gretap0: refused to change device tx_queue_len [ 101.083650][ T6429] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 101.187549][ T6437] syz_tun: entered allmulticast mode [ 101.264345][ T6435] syz_tun: left allmulticast mode [ 101.547220][ T6452] __nla_validate_parse: 3 callbacks suppressed [ 101.547238][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 101.659016][ T6452] syz_tun: left allmulticast mode [ 101.684453][ T6452] syz_tun: left promiscuous mode [ 101.702301][ T6452] bridge0: port 3(syz_tun) entered disabled state [ 101.758222][ T6452] bridge_slave_1: left allmulticast mode [ 101.766244][ T6452] bridge_slave_1: left promiscuous mode [ 101.772351][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.797030][ T6452] bridge_slave_0: left allmulticast mode [ 101.805148][ T6452] bridge_slave_0: left promiscuous mode [ 101.822038][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.372552][ T6463] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 102.808555][ T6473] netlink: 48 bytes leftover after parsing attributes in process `syz.3.125'. [ 102.840390][ T6473] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 103.041575][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 103.123837][ T6480] ip6gretap0: entered promiscuous mode [ 103.140231][ T6480] ip6gretap0: left promiscuous mode [ 103.251985][ T6486] netlink: 100 bytes leftover after parsing attributes in process `syz.0.128'. [ 103.303454][ T6487] syz_tun: entered allmulticast mode [ 103.372524][ T6485] syz_tun: left allmulticast mode [ 103.586467][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 103.653953][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 103.803145][ T6510] netlink: 'syz.0.134': attribute type 4 has an invalid length. [ 103.832774][ T6499] bridge_slave_1: left allmulticast mode [ 103.839671][ T6499] bridge_slave_1: left promiscuous mode [ 103.846127][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.859164][ T6499] bridge_slave_0: left allmulticast mode [ 103.869430][ T6499] bridge_slave_0: left promiscuous mode [ 103.877803][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.030052][ T6505] veth1_macvtap: left promiscuous mode [ 104.307173][ T30] audit: type=1107 audit(1758552916.527:2): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 104.449320][ T6524] openvswitch: netlink: Multiple metadata blocks provided [ 104.631722][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 104.666792][ T6531] ip6gretap0: entered promiscuous mode [ 104.693183][ T6531] ip6gretap0: left promiscuous mode [ 104.754553][ T6536] syz_tun: entered allmulticast mode [ 104.829885][ T6535] syz_tun: left allmulticast mode [ 104.940073][ T6541] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 105.088041][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 105.098684][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 105.677376][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 105.732462][ T6585] sctp: [Deprecated]: syz.2.156 (pid 6585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.732462][ T6585] Use struct sctp_sack_info instead [ 105.767970][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.775405][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.834585][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.848235][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.962657][ T6581] veth2: entered promiscuous mode [ 106.010544][ T6583] ip6gretap0: entered promiscuous mode [ 106.034171][ T6583] ip6gretap0: left promiscuous mode [ 106.082235][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.092613][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.123434][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.141721][ T6591] syz_tun: entered allmulticast mode [ 106.147755][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.225623][ T6589] syz_tun: left allmulticast mode [ 107.391051][ T6634] __nla_validate_parse: 7 callbacks suppressed [ 107.391071][ T6634] netlink: 48 bytes leftover after parsing attributes in process `syz.3.170'. [ 107.609251][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 107.672993][ T6641] syz_tun: entered promiscuous mode [ 107.683772][ T6641] syz_tun: left promiscuous mode [ 108.387201][ T6659] vlan2: entered allmulticast mode [ 108.500176][ T6664] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.179'. [ 109.017161][ T6678] netlink: 44 bytes leftover after parsing attributes in process `syz.3.181'. [ 109.446615][ T6675] bridge1: left promiscuous mode [ 109.542056][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.564182][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.591496][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.637451][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.811127][ T6717] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20000 [ 109.832335][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'. [ 109.850938][ T6719] syz_tun: entered allmulticast mode [ 109.880094][ T6718] syz_tun: entered promiscuous mode [ 109.889464][ T6718] syz_tun: left promiscuous mode [ 109.921964][ T6721] batadv_slave_1: entered promiscuous mode [ 109.929007][ T6713] syz_tun: left allmulticast mode [ 109.943751][ T6720] batadv_slave_1: left promiscuous mode [ 110.011996][ T6723] netlink: 'syz.4.196': attribute type 4 has an invalid length. [ 110.069050][ T6723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.152746][ T6730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.160202][ T6730] IPv6: NLM_F_CREATE should be set when creating new route [ 110.167521][ T6730] IPv6: NLM_F_CREATE should be set when creating new route [ 110.313089][ T6738] netlink: 388 bytes leftover after parsing attributes in process `syz.2.200'. [ 110.565592][ T6751] netlink: 'syz.0.203': attribute type 13 has an invalid length. [ 110.589876][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 110.604064][ T6751] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 110.733007][ T6758] syz_tun: entered allmulticast mode [ 110.836311][ T6757] syz_tun: left allmulticast mode [ 110.974989][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 111.438441][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 111.493464][ T6788] openvswitch: netlink: Multiple metadata blocks provided [ 112.344283][ T6804] syz_tun: entered allmulticast mode [ 112.352423][ T6803] syz_tun: left allmulticast mode [ 112.645495][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 113.329675][ T6811] syz_tun: entered promiscuous mode [ 113.349009][ T6811] syz_tun: left promiscuous mode [ 113.590146][ T6818] bridge2: entered allmulticast mode [ 113.854450][ T6835] trusted_key: syz.1.231 sent an empty control message without MSG_MORE. [ 114.015112][ T6835] pim6reg1: entered promiscuous mode [ 114.028975][ T6835] pim6reg1: entered allmulticast mode [ 114.342294][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 114.350658][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.234'. [ 114.399226][ T6859] openvswitch: netlink: Multiple metadata blocks provided [ 114.526561][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'. [ 114.537956][ T6849] Bluetooth: MGMT ver 1.23 [ 114.602891][ T6871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.238'. [ 114.628901][ T6871] netlink: 'syz.2.238': attribute type 1 has an invalid length. [ 114.683860][ T6871] bond2: entered promiscuous mode [ 114.690776][ T6871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.791490][ T6871] bond2: (slave bridge1): making interface the new active one [ 114.813802][ T6871] bridge1: entered promiscuous mode [ 114.821070][ T6871] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 115.170112][ T6889] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 115.212670][ T6887] veth2: entered promiscuous mode [ 115.225051][ T6887] veth2: entered allmulticast mode [ 115.377526][ T6904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 115.409889][ T6902] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 115.429971][ T6904] IPVS: Error connecting to the multicast addr [ 115.438982][ T6907] openvswitch: netlink: Multiple metadata blocks provided [ 115.499350][ T6902] bond0: (slave bond_slave_0): Releasing backup interface [ 115.535426][ T6902] bond0: (slave bond_slave_1): Releasing backup interface [ 115.563777][ T6902] team0: Port device team_slave_0 removed [ 115.588127][ T6902] team0: Port device team_slave_1 removed [ 115.594317][ T6913] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 115.603174][ T6902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.612217][ T6902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.623041][ T6902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.631675][ T6902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.642771][ T6902] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.716402][ T6913] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 115.797997][ T6913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.831228][ T6913] bond0: (slave wlan1): Opening slave failed [ 116.120920][ T6925] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 116.289515][ T6902] syz.1.248 (6902) used greatest stack depth: 15648 bytes left [ 116.331369][ T6931] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.668464][ T6942] tipc: Started in network mode [ 116.678329][ T6942] tipc: Node identity d228b26a1086, cluster identity 4711 [ 116.687748][ T6942] tipc: Enabled bearer , priority 0 [ 116.695761][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 116.706986][ T6942] syzkaller0: entered promiscuous mode [ 116.712478][ T6942] syzkaller0: entered allmulticast mode [ 116.787931][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.259'. [ 116.906631][ T6952] netlink: 2 bytes leftover after parsing attributes in process `syz.1.257'. [ 116.918557][ T6942] tipc: Resetting bearer [ 116.990726][ T6956] netlink: 'syz.2.259': attribute type 13 has an invalid length. [ 116.998899][ T6956] netlink: 'syz.2.259': attribute type 17 has an invalid length. [ 117.011537][ T6940] tipc: Resetting bearer [ 117.027400][ T6940] tipc: Disabling bearer [ 117.079946][ T6956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 117.304513][ T6959] netlink: 'syz.1.260': attribute type 11 has an invalid length. [ 117.354981][ T6961] openvswitch: netlink: Multiple metadata blocks provided [ 117.676600][ T6974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.267'. [ 117.787466][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 117.797262][ T30] audit: type=1804 audit(1758552930.017:3): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.266" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=296 res=1 errno=0 [ 117.821171][ T6986] syz_tun: entered promiscuous mode [ 117.869496][ T6986] syz_tun: left promiscuous mode [ 117.879576][ T30] audit: type=1800 audit(1758552930.017:4): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=296 res=0 errno=0 [ 118.043082][ T6995] openvswitch: netlink: Multiple metadata blocks provided [ 118.609549][ T7007] netlink: 96 bytes leftover after parsing attributes in process `syz.2.277'. [ 118.619816][ T7007] 8021q: VLANs not supported on ip6gre0 [ 118.798641][ T7027] netlink: 'syz.4.284': attribute type 11 has an invalid length. [ 118.881091][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.285'. [ 119.061071][ T7044] openvswitch: netlink: Multiple metadata blocks provided [ 119.170290][ T7035] delete_channel: no stack [ 119.187890][ T7049] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 119.206839][ T7049] netlink: 'syz.2.292': attribute type 2 has an invalid length. [ 119.238728][ T7049] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 119.262640][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'. [ 119.278569][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'. [ 119.295330][ T7050] netlink: 'syz.1.291': attribute type 32 has an invalid length. [ 119.605565][ T7073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.297'. [ 119.746907][ T6689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.858991][ T7089] nbd0: detected capacity change from 0 to 127 [ 119.871393][ T5867] block nbd0: Receive control failed (result -32) [ 119.875412][ T5869] block nbd0: Send control failed (result -32) [ 119.905650][ T5869] block nbd0: Request send failed, requeueing [ 119.915665][ T94] block nbd0: Dead connection, failed to find a fallback [ 119.925829][ T94] block nbd0: shutting down sockets [ 119.932528][ T94] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.944941][ T94] Buffer I/O error on dev nbd0, logical block 0, async page read [ 119.953509][ T5869] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.964716][ T5869] Buffer I/O error on dev nbd0, logical block 1, async page read [ 119.980829][ T5869] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.990245][ T5869] Buffer I/O error on dev nbd0, logical block 2, async page read [ 120.007087][ T5869] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.017996][ T5869] Buffer I/O error on dev nbd0, logical block 3, async page read [ 120.021356][ T7095] openvswitch: netlink: Multiple metadata blocks provided [ 120.025887][ T5869] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.043404][ T5869] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.051712][ T5869] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.060975][ T5869] Buffer I/O error on dev nbd0, logical block 1, async page read [ 120.069271][ T5869] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.078375][ T5869] Buffer I/O error on dev nbd0, logical block 2, async page read [ 120.086510][ T5869] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.095956][ T5869] Buffer I/O error on dev nbd0, logical block 3, async page read [ 120.103967][ T5869] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.113147][ T5869] Buffer I/O error on dev nbd0, logical block 0, async page read [ 120.121095][ T5869] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.130247][ T5869] Buffer I/O error on dev nbd0, logical block 1, async page read [ 120.151006][ T5869] ldm_validate_partition_table(): Disk read failed. [ 120.168744][ T5869] Dev nbd0: unable to read RDB block 0 [ 120.185670][ T5869] nbd0: unable to read partition table [ 120.229233][ T5869] ldm_validate_partition_table(): Disk read failed. [ 120.258908][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 120.270643][ T5869] Dev nbd0: unable to read RDB block 0 [ 120.279701][ T5869] nbd0: unable to read partition table [ 120.306716][ T7107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.305'. [ 120.457731][ T7107] 8021q: VLANs not supported on sit0 [ 120.479755][ T6689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.827735][ T7127] bridge_slave_1: left allmulticast mode [ 120.854571][ T7127] bridge_slave_1: left promiscuous mode [ 120.868909][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.892830][ T7131] netlink: 'syz.2.314': attribute type 11 has an invalid length. [ 120.922456][ T7127] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 120.952167][ T7129] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 121.027142][ T7128] wg0: entered promiscuous mode [ 121.042524][ T7128] wg0: entered allmulticast mode [ 121.219932][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'. [ 121.353948][ T7151] openvswitch: netlink: Multiple metadata blocks provided [ 121.614707][ T7165] netlink: 'syz.1.322': attribute type 74 has an invalid length. [ 121.723327][ T7138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.739335][ T7138] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 121.840045][ T7138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.869371][ T7138] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 121.939593][ T7138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.973823][ T7138] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 122.037936][ T7138] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 122.084492][ T7138] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 122.189185][ T7138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.239441][ T7138] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 122.728114][ T7207] openvswitch: netlink: Multiple metadata blocks provided [ 123.147134][ T7236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.214946][ T7236] __nla_validate_parse: 2 callbacks suppressed [ 123.214964][ T7236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'. [ 123.670432][ T7254] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 123.678378][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 123.687642][ T7254] netlink: 45 bytes leftover after parsing attributes in process `syz.2.342'. [ 124.257613][ T7271] openvswitch: netlink: Multiple metadata blocks provided [ 124.466194][ T7279] tipc: Started in network mode [ 124.471089][ T7279] tipc: Node identity 7a5dd946132e, cluster identity 4711 [ 124.487214][ T7279] tipc: Enabled bearer , priority 0 [ 124.504992][ T7279] syzkaller0: entered promiscuous mode [ 124.511215][ T7279] syzkaller0: entered allmulticast mode [ 124.665527][ T7279] tipc: Resetting bearer [ 124.697081][ T7276] tipc: Resetting bearer [ 124.756850][ T7276] tipc: Disabling bearer [ 125.231693][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.352'. [ 125.400643][ T7319] openvswitch: netlink: Multiple metadata blocks provided [ 125.468884][ T7322] netlink: 'syz.2.355': attribute type 4 has an invalid length. [ 125.510578][ T7321] netlink: 'syz.2.355': attribute type 4 has an invalid length. [ 125.936685][ T7340] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 126.190502][ T7364] netlink: 3 bytes leftover after parsing attributes in process `syz.1.364'. [ 126.298064][ T7365] netlink: 3 bytes leftover after parsing attributes in process `syz.1.364'. [ 126.314173][ T7369] dvmrp0: entered allmulticast mode [ 126.355117][ T7365] 0ªX¹¦À: renamed from caif0 [ 126.385310][ T7365] 0ªX¹¦À: entered allmulticast mode [ 126.411923][ T7365] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 126.509017][ T7364] 1ªX¹¦À: renamed from 60ªX¹¦À [ 126.550572][ T7364] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 126.572621][ T7381] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 127.053497][ T7404] xt_time: unknown flags 0xf4 [ 127.061175][ T7400] macvlan1: entered allmulticast mode [ 127.251257][ T7415] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 127.284496][ T7412] netlink: 'syz.2.375': attribute type 7 has an invalid length. [ 127.296314][ T7412] netlink: 'syz.2.375': attribute type 8 has an invalid length. [ 127.321922][ T7412] netlink: 'syz.2.375': attribute type 13 has an invalid length. [ 127.619871][ T7432] netlink: 132 bytes leftover after parsing attributes in process `syz.4.378'. [ 127.904947][ T7445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.380'. [ 127.930113][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 128.063403][ T7448] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 128.546130][ T7469] sock: sock_timestamping_bind_phc: sock not bind to device [ 128.572817][ T7469] tipc: Can't bind to reserved service type 0 [ 128.911752][ T10] IPVS: starting estimator thread 0... [ 128.992438][ T7486] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 129.003486][ T7486] netlink: 14 bytes leftover after parsing attributes in process `syz.3.389'. [ 129.030226][ T7485] IPVS: using max 27 ests per chain, 64800 per kthread [ 129.153805][ T7486] bond0 (unregistering): Released all slaves [ 129.503393][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'. [ 129.667221][ T7502] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 129.913635][ T7514] netlink: 'syz.2.397': attribute type 4 has an invalid length. [ 129.914485][ T7513] netlink: 'syz.2.397': attribute type 4 has an invalid length. [ 130.149635][ T7530] netlink: 52 bytes leftover after parsing attributes in process `syz.1.402'. [ 130.162296][ T7531] IPv6: sit1: Disabled Multicast RS [ 130.285106][ T7536] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 130.422571][ T7545] netlink: 165 bytes leftover after parsing attributes in process `syz.1.408'. [ 130.479515][ T7547] netlink: 'syz.4.409': attribute type 13 has an invalid length. [ 130.505257][ T7547] netlink: 'syz.4.409': attribute type 17 has an invalid length. [ 130.535330][ T7549] xt_policy: too many policy elements [ 130.646597][ T7547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.650498][ T7554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.411'. [ 130.657433][ T7547] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.674071][ T7547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.689979][ T5983] syz1: Port: 1 Link ACTIVE [ 130.720832][ T7557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.202546][ T7583] syzkaller1: entered promiscuous mode [ 131.214296][ T7583] syzkaller1: entered allmulticast mode [ 131.341431][ T7591] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 131.364631][ T7593] netlink: 52 bytes leftover after parsing attributes in process `syz.2.419'. [ 131.579380][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 131.884338][ T7608] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 131.932569][ T6689] IPVS: starting estimator thread 0... [ 132.068149][ T7613] IPVS: using max 31 ests per chain, 74400 per kthread [ 132.169755][ T7616] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 132.204690][ T7616] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 132.257379][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 132.282371][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 132.378365][ T7625] netlink: 80 bytes leftover after parsing attributes in process `syz.2.429'. [ 132.450554][ T7625] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.613537][ T7625] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.705945][ T7639] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 132.779828][ T7625] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.811169][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.818000][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.112756][ T7625] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.269239][ T2980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.359361][ T2980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.378480][ T2980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.408512][ T2980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.495459][ T7674] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 133.571720][ T2980] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.675088][ T7674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.768953][ T7676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.776123][ T7676] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 133.788121][ T7676] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 133.873666][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.950199][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.074846][ T7695] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 134.176185][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.216037][ T7699] FAULT_INJECTION: forcing a failure. [ 134.216037][ T7699] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 134.266217][ T7699] CPU: 1 UID: 0 PID: 7699 Comm: syz.0.450 Not tainted syzkaller #0 PREEMPT(full) [ 134.266241][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.266258][ T7699] Call Trace: [ 134.266265][ T7699] [ 134.266274][ T7699] dump_stack_lvl+0x189/0x250 [ 134.266308][ T7699] ? __pfx____ratelimit+0x10/0x10 [ 134.266329][ T7699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.266347][ T7699] ? __pfx__printk+0x10/0x10 [ 134.266370][ T7699] ? __might_fault+0xb0/0x130 [ 134.266404][ T7699] should_fail_ex+0x414/0x560 [ 134.266434][ T7699] _copy_from_user+0x2d/0xb0 [ 134.266455][ T7699] do_sys_poll+0x242/0x1070 [ 134.266488][ T7699] ? __lock_acquire+0xab9/0xd20 [ 134.266516][ T7699] ? __pfx_do_sys_poll+0x10/0x10 [ 134.266543][ T7699] ? __lock_acquire+0xab9/0xd20 [ 134.266624][ T7699] ? ktime_get_ts64+0xa2/0x3d0 [ 134.266652][ T7699] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 134.266699][ T7699] ? __pfx_timespec64_add_safe+0x10/0x10 [ 134.266738][ T7699] __se_sys_poll+0x128/0x320 [ 134.266763][ T7699] ? __pfx___se_sys_poll+0x10/0x10 [ 134.266789][ T7699] ? do_syscall_64+0xbe/0x3b0 [ 134.266812][ T7699] do_syscall_64+0xfa/0x3b0 [ 134.266829][ T7699] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.266847][ T7699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.266864][ T7699] ? clear_bhb_loop+0x60/0xb0 [ 134.266885][ T7699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.266901][ T7699] RIP: 0033:0x7fdcbbd8eec9 [ 134.266923][ T7699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.266937][ T7699] RSP: 002b:00007fdcbccbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 134.266958][ T7699] RAX: ffffffffffffffda RBX: 00007fdcbbfe5fa0 RCX: 00007fdcbbd8eec9 [ 134.266971][ T7699] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 134.266982][ T7699] RBP: 00007fdcbccbd090 R08: 0000000000000000 R09: 0000000000000000 [ 134.266992][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.267002][ T7699] R13: 00007fdcbbfe6038 R14: 00007fdcbbfe5fa0 R15: 00007ffc8fc54fe8 [ 134.267031][ T7699] [ 134.565839][ T7702] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 134.592355][ T7707] netlink: 'syz.2.453': attribute type 1 has an invalid length. [ 134.699627][ T7707] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.770290][ T7713] bond3: (slave geneve2): making interface the new active one [ 134.789015][ T7713] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 134.980334][ T7737] pim6reg1: entered promiscuous mode [ 134.999610][ T7737] pim6reg1: entered allmulticast mode [ 135.287086][ T7747] team0: Device ipvlan2 failed to register rx_handler [ 135.352854][ T7761] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 135.529165][ T7766] __nla_validate_parse: 2 callbacks suppressed [ 135.529182][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 135.565452][ T7770] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 135.574693][ T7771] FAULT_INJECTION: forcing a failure. [ 135.574693][ T7771] name failslab, interval 1, probability 0, space 0, times 1 [ 135.598271][ T7771] CPU: 1 UID: 0 PID: 7771 Comm: syz.4.467 Not tainted syzkaller #0 PREEMPT(full) [ 135.598290][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.598297][ T7771] Call Trace: [ 135.598303][ T7771] [ 135.598309][ T7771] dump_stack_lvl+0x189/0x250 [ 135.598328][ T7771] ? __pfx____ratelimit+0x10/0x10 [ 135.598342][ T7771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.598356][ T7771] ? __pfx__printk+0x10/0x10 [ 135.598377][ T7771] ? __pfx___might_resched+0x10/0x10 [ 135.598390][ T7771] ? fs_reclaim_acquire+0x7d/0x100 [ 135.598406][ T7771] should_fail_ex+0x414/0x560 [ 135.598428][ T7771] should_failslab+0xa8/0x100 [ 135.598449][ T7771] __kmalloc_noprof+0xcb/0x4f0 [ 135.598466][ T7771] ? do_sys_poll+0x2ac/0x1070 [ 135.598497][ T7771] do_sys_poll+0x2ac/0x1070 [ 135.598521][ T7771] ? __lock_acquire+0xab9/0xd20 [ 135.598543][ T7771] ? __pfx_do_sys_poll+0x10/0x10 [ 135.598565][ T7771] ? __lock_acquire+0xab9/0xd20 [ 135.598634][ T7771] ? ktime_get_ts64+0xa2/0x3d0 [ 135.598656][ T7771] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 135.598696][ T7771] ? __pfx_timespec64_add_safe+0x10/0x10 [ 135.598727][ T7771] __se_sys_poll+0x128/0x320 [ 135.598749][ T7771] ? __pfx___se_sys_poll+0x10/0x10 [ 135.598768][ T7771] ? rcu_is_watching+0x15/0xb0 [ 135.598788][ T7771] ? do_syscall_64+0xbe/0x3b0 [ 135.598806][ T7771] do_syscall_64+0xfa/0x3b0 [ 135.598821][ T7771] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.598838][ T7771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.598851][ T7771] ? clear_bhb_loop+0x60/0xb0 [ 135.598868][ T7771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.598883][ T7771] RIP: 0033:0x7f7f0e98eec9 [ 135.598898][ T7771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.598910][ T7771] RSP: 002b:00007f7f0f7a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 135.598926][ T7771] RAX: ffffffffffffffda RBX: 00007f7f0ebe5fa0 RCX: 00007f7f0e98eec9 [ 135.598937][ T7771] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 135.598948][ T7771] RBP: 00007f7f0f7a6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.598958][ T7771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.598967][ T7771] R13: 00007f7f0ebe6038 R14: 00007f7f0ebe5fa0 R15: 00007ffca3fcee58 [ 135.598996][ T7771] [ 135.841042][ T7773] netlink: 132 bytes leftover after parsing attributes in process `syz.0.470'. [ 135.968993][ T7770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.985611][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 136.035233][ T7778] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 136.462272][ T7801] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 136.773794][ T7819] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 136.851338][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 136.968509][ T7831] netlink: 44 bytes leftover after parsing attributes in process `syz.2.483'. [ 137.133245][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.151959][ T7829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.252916][ T7829] bond2: left promiscuous mode [ 137.257887][ T7829] bridge1: left promiscuous mode [ 137.382656][ T59] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.419269][ T59] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.440516][ T7843] FAULT_INJECTION: forcing a failure. [ 137.440516][ T7843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.453860][ T7843] CPU: 0 UID: 0 PID: 7843 Comm: syz.0.487 Not tainted syzkaller #0 PREEMPT(full) [ 137.453882][ T7843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.453892][ T7843] Call Trace: [ 137.453899][ T7843] [ 137.453907][ T7843] dump_stack_lvl+0x189/0x250 [ 137.453932][ T7843] ? __pfx____ratelimit+0x10/0x10 [ 137.453950][ T7843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.453970][ T7843] ? __pfx__printk+0x10/0x10 [ 137.453991][ T7843] ? __might_fault+0xb0/0x130 [ 137.454024][ T7843] should_fail_ex+0x414/0x560 [ 137.454053][ T7843] _copy_from_user+0x2d/0xb0 [ 137.454072][ T7843] do_sys_poll+0x242/0x1070 [ 137.454102][ T7843] ? __lock_acquire+0xab9/0xd20 [ 137.454127][ T7843] ? __pfx_do_sys_poll+0x10/0x10 [ 137.454151][ T7843] ? __lock_acquire+0xab9/0xd20 [ 137.454229][ T7843] ? ktime_get_ts64+0xa2/0x3d0 [ 137.454257][ T7843] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 137.454302][ T7843] ? __pfx_timespec64_add_safe+0x10/0x10 [ 137.454332][ T7843] __se_sys_poll+0x128/0x320 [ 137.454353][ T7843] ? __pfx___se_sys_poll+0x10/0x10 [ 137.454378][ T7843] ? rcu_is_watching+0x15/0xb0 [ 137.454399][ T7843] ? do_syscall_64+0xbe/0x3b0 [ 137.454421][ T7843] do_syscall_64+0xfa/0x3b0 [ 137.454437][ T7843] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.454454][ T7843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.454470][ T7843] ? clear_bhb_loop+0x60/0xb0 [ 137.454489][ T7843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.454504][ T7843] RIP: 0033:0x7fdcbbd8eec9 [ 137.454518][ T7843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.454531][ T7843] RSP: 002b:00007fdcbccbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 137.454548][ T7843] RAX: ffffffffffffffda RBX: 00007fdcbbfe5fa0 RCX: 00007fdcbbd8eec9 [ 137.454559][ T7843] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 137.454569][ T7843] RBP: 00007fdcbccbd090 R08: 0000000000000000 R09: 0000000000000000 [ 137.454579][ T7843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.454588][ T7843] R13: 00007fdcbbfe6038 R14: 00007fdcbbfe5fa0 R15: 00007ffc8fc54fe8 [ 137.454618][ T7843] [ 137.482397][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 137.533790][ T59] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.666854][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 137.691332][ T6010] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.855939][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 138.003741][ T7858] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 138.050148][ T7859] netlink: 'syz.2.490': attribute type 4 has an invalid length. [ 138.073869][ T7851] ip6gretap0: entered promiscuous mode [ 138.086834][ T7851] ip6gretap0: left promiscuous mode [ 138.172772][ T7864] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 138.187267][ T7863] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 138.201013][ T7864] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 138.254006][ T7864] netlink: 'syz.3.492': attribute type 10 has an invalid length. [ 138.281328][ T7864] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 138.433667][ T7871] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 138.568224][ T7882] FAULT_INJECTION: forcing a failure. [ 138.568224][ T7882] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 138.592103][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 138.609707][ T7882] CPU: 0 UID: 0 PID: 7882 Comm: syz.2.501 Not tainted syzkaller #0 PREEMPT(full) [ 138.609730][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.609740][ T7882] Call Trace: [ 138.609747][ T7882] [ 138.609755][ T7882] dump_stack_lvl+0x189/0x250 [ 138.609779][ T7882] ? __pfx____ratelimit+0x10/0x10 [ 138.609797][ T7882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.609816][ T7882] ? __pfx__printk+0x10/0x10 [ 138.609839][ T7882] ? fs_reclaim_acquire+0x7d/0x100 [ 138.609865][ T7882] should_fail_ex+0x414/0x560 [ 138.609893][ T7882] prepare_alloc_pages+0x213/0x610 [ 138.609916][ T7882] __alloc_frozen_pages_noprof+0x123/0x370 [ 138.609938][ T7882] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 138.609954][ T7882] ? do_raw_spin_lock+0x121/0x290 [ 138.609977][ T7882] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 138.609994][ T7882] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 138.610016][ T7882] ? policy_nodemask+0x27c/0x720 [ 138.610045][ T7882] alloc_pages_mpol+0x232/0x4a0 [ 138.610081][ T7882] alloc_pages_noprof+0xa9/0x190 [ 138.610105][ T7882] get_free_pages_noprof+0xf/0x80 [ 138.610122][ T7882] __pollwait+0x27b/0x460 [ 138.610145][ T7882] ? __pfx___pollwait+0x10/0x10 [ 138.610166][ T7882] pipe_poll+0x16c/0x470 [ 138.610191][ T7882] ? __pfx_pipe_poll+0x10/0x10 [ 138.610212][ T7882] do_sys_poll+0x8c6/0x1070 [ 138.610251][ T7882] ? __pfx_do_sys_poll+0x10/0x10 [ 138.610279][ T7882] ? __lock_acquire+0xab9/0xd20 [ 138.610300][ T7882] ? __pfx___pollwait+0x10/0x10 [ 138.610325][ T7882] ? __pfx_pollwake+0x10/0x10 [ 138.610349][ T7882] ? __pfx_pollwake+0x10/0x10 [ 138.610374][ T7882] ? __pfx_pollwake+0x10/0x10 [ 138.610398][ T7882] ? __pfx_pollwake+0x10/0x10 [ 138.610422][ T7882] ? __pfx_pollwake+0x10/0x10 [ 138.610446][ T7882] ? __pfx_pollwake+0x10/0x10 [ 138.610471][ T7882] ? __pfx_pollwake+0x10/0x10 [ 138.610496][ T7882] ? __pfx_pollwake+0x10/0x10 [ 138.610520][ T7882] ? __pfx_pollwake+0x10/0x10 [ 138.610541][ T7882] ? ktime_get_ts64+0xa2/0x3d0 [ 138.610567][ T7882] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 138.610615][ T7882] ? __pfx_timespec64_add_safe+0x10/0x10 [ 138.610648][ T7882] __se_sys_poll+0x128/0x320 [ 138.610672][ T7882] ? __pfx___se_sys_poll+0x10/0x10 [ 138.610691][ T7882] ? rcu_is_watching+0x15/0xb0 [ 138.610714][ T7882] ? do_syscall_64+0xbe/0x3b0 [ 138.610736][ T7882] do_syscall_64+0xfa/0x3b0 [ 138.610753][ T7882] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.610770][ T7882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.610786][ T7882] ? clear_bhb_loop+0x60/0xb0 [ 138.610807][ T7882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.610822][ T7882] RIP: 0033:0x7f87db58eec9 [ 138.610838][ T7882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.610851][ T7882] RSP: 002b:00007f87dc3ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 138.610869][ T7882] RAX: ffffffffffffffda RBX: 00007f87db7e5fa0 RCX: 00007f87db58eec9 [ 138.610881][ T7882] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 138.610892][ T7882] RBP: 00007f87dc3ec090 R08: 0000000000000000 R09: 0000000000000000 [ 138.610902][ T7882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.610911][ T7882] R13: 00007f87db7e6038 R14: 00007f87db7e5fa0 R15: 00007ffe9d384cc8 [ 138.610940][ T7882] [ 139.463141][ T7895] syz_tun: entered allmulticast mode [ 139.473267][ T7894] syz_tun: left allmulticast mode [ 139.757123][ T7907] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 140.007543][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 140.037426][ T7918] netlink: 'syz.0.515': attribute type 1 has an invalid length. [ 140.047406][ T7918] netlink: 'syz.0.515': attribute type 2 has an invalid length. [ 140.432073][ T7935] FAULT_INJECTION: forcing a failure. [ 140.432073][ T7935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.447808][ T7936] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 140.474709][ T7936] bridge_slave_0: left promiscuous mode [ 140.495246][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.502849][ T7935] CPU: 0 UID: 0 PID: 7935 Comm: syz.3.520 Not tainted syzkaller #0 PREEMPT(full) [ 140.502869][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 140.502879][ T7935] Call Trace: [ 140.502885][ T7935] [ 140.502893][ T7935] dump_stack_lvl+0x189/0x250 [ 140.502916][ T7935] ? __pfx____ratelimit+0x10/0x10 [ 140.502934][ T7935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.502953][ T7935] ? __pfx__printk+0x10/0x10 [ 140.502987][ T7935] should_fail_ex+0x414/0x560 [ 140.503015][ T7935] _copy_to_user+0x31/0xb0 [ 140.503038][ T7935] simple_read_from_buffer+0xe1/0x170 [ 140.503066][ T7935] proc_fail_nth_read+0x1b3/0x220 [ 140.503089][ T7935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.503118][ T7935] ? rw_verify_area+0x2a6/0x4d0 [ 140.503138][ T7935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.503158][ T7935] vfs_read+0x1fd/0xa30 [ 140.503184][ T7935] ? __pfx_vfs_read+0x10/0x10 [ 140.503213][ T7935] ? __pfx_timespec64_add_safe+0x10/0x10 [ 140.503246][ T7935] ksys_read+0x145/0x250 [ 140.503268][ T7935] ? __pfx_ksys_read+0x10/0x10 [ 140.503286][ T7935] ? rcu_is_watching+0x15/0xb0 [ 140.503308][ T7935] ? do_syscall_64+0xbe/0x3b0 [ 140.503330][ T7935] do_syscall_64+0xfa/0x3b0 [ 140.503346][ T7935] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.503363][ T7935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.503379][ T7935] ? clear_bhb_loop+0x60/0xb0 [ 140.503399][ T7935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.503415][ T7935] RIP: 0033:0x7f46af38d8dc [ 140.503430][ T7935] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 140.503443][ T7935] RSP: 002b:00007f46b02a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 140.503461][ T7935] RAX: ffffffffffffffda RBX: 00007f46af5e5fa0 RCX: 00007f46af38d8dc [ 140.503473][ T7935] RDX: 000000000000000f RSI: 00007f46b02a50a0 RDI: 0000000000000004 [ 140.503483][ T7935] RBP: 00007f46b02a5090 R08: 0000000000000000 R09: 0000000000000000 [ 140.503494][ T7935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.503503][ T7935] R13: 00007f46af5e6038 R14: 00007f46af5e5fa0 R15: 00007ffcc22d06d8 [ 140.503532][ T7935] [ 140.805393][ T7936] bond0: (slave bond_slave_0): Releasing backup interface [ 140.815758][ T7936] bond0: (slave bond_slave_1): Releasing backup interface [ 140.816727][ T7944] netlink: 'syz.0.519': attribute type 10 has an invalid length. [ 140.833406][ T7936] team0: Port device team_slave_0 removed [ 140.847793][ T7936] team0: Port device team_slave_1 removed [ 140.853932][ T7936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.863534][ T7936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.872079][ T7936] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.966490][ T7942] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.522'. [ 140.986667][ T7944] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 140.995528][ T7944] bond0: (slave wlan1): Opening slave failed [ 141.271129][ T7956] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 141.488028][ T7964] tipc: Started in network mode [ 141.495818][ T7964] tipc: Node identity 7ef0c820ef97, cluster identity 4711 [ 141.504484][ T7964] tipc: Enabled bearer , priority 0 [ 141.607737][ T7964] syzkaller0: entered promiscuous mode [ 141.613330][ T7964] syzkaller0: entered allmulticast mode [ 141.675553][ T7964] tipc: Resetting bearer [ 141.712338][ T7961] tipc: Resetting bearer [ 141.742110][ T7961] tipc: Disabling bearer [ 141.933344][ T7979] IPVS: Scheduler module ip_vs_sip not found [ 142.043185][ T7989] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 142.237966][ T7998] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 142.253835][ T7998] netlink: 388 bytes leftover after parsing attributes in process `syz.0.536'. [ 142.281325][ T7999] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 142.404464][ T8004] bond0: (slave bond_slave_0): Releasing backup interface [ 142.427097][ T8006] netlink: 'syz.1.540': attribute type 13 has an invalid length. [ 142.452172][ T8006] netlink: 'syz.1.540': attribute type 17 has an invalid length. [ 142.462288][ T8004] bond0: (slave bond_slave_1): Releasing backup interface [ 142.473339][ T8004] team0: Port device team_slave_0 removed [ 142.490164][ T8004] team0: Port device team_slave_1 removed [ 142.491657][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.542'. [ 142.496545][ T8004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.513419][ T8004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.526682][ T8004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 142.601040][ T8006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.631936][ T8006] 1ªX¹¦À: left allmulticast mode [ 142.637259][ T8006] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 142.847024][ T8029] syzkaller1: entered promiscuous mode [ 142.852747][ T8029] syzkaller1: entered allmulticast mode [ 142.940017][ T8031] netlink: 60 bytes leftover after parsing attributes in process `syz.4.545'. [ 143.012255][ T5869] udevd[5869]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 143.307070][ T8005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.346494][ T8043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.550'. [ 143.485927][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.550'. [ 143.627889][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.550'. [ 143.699964][ T8043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.550'. [ 143.757961][ T8043] netlink: 540 bytes leftover after parsing attributes in process `syz.2.550'. [ 143.907148][ T8072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.550'. [ 144.002761][ T8105] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 144.324039][ T5867] Bluetooth: hci0: command tx timeout [ 144.353722][ T8108] dvmrp0: entered allmulticast mode [ 144.480119][ T5983] IPVS: starting estimator thread 0... [ 144.586211][ T8116] IPVS: using max 31 ests per chain, 74400 per kthread [ 145.168734][ T8152] IPVS: set_ctl: invalid protocol: 34213 172.20.20.19:20003 [ 145.208252][ T8155] IPv6: Can't replace route, no match found [ 145.231983][ T8155] IPv6: Can't replace route, no match found [ 145.238935][ T8155] IPv6: Can't replace route, no match found [ 145.253195][ T8155] IPv6: Can't replace route, no match found [ 145.262953][ T8155] IPv6: Can't replace route, no match found [ 145.269282][ T8155] IPv6: Can't replace route, no match found [ 145.275433][ T8155] IPv6: Can't replace route, no match found [ 145.284931][ T8155] IPv6: Can't replace route, no match found [ 145.293823][ T8155] IPv6: Can't replace route, no match found [ 145.300668][ T8155] IPv6: Can't replace route, no match found [ 145.310653][ T8155] IPv6: Can't replace route, no match found [ 145.315275][ T8158] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 145.317509][ T8155] IPv6: Can't replace route, no match found [ 145.330707][ T8155] IPv6: Can't replace route, no match found [ 145.338444][ T8155] IPv6: Can't replace route, no match found [ 145.345503][ T8155] IPv6: Can't replace route, no match found [ 145.353158][ T8155] IPv6: Can't replace route, no match found [ 145.365776][ T8155] IPv6: Can't replace route, no match found [ 145.372337][ T8155] IPv6: Can't replace route, no match found [ 145.379185][ T8155] IPv6: Can't replace route, no match found [ 145.385311][ T8155] IPv6: Can't replace route, no match found [ 145.392530][ T8155] IPv6: Can't replace route, no match found [ 145.398879][ T8155] IPv6: Can't replace route, no match found [ 145.405166][ T8155] IPv6: Can't replace route, no match found [ 145.411836][ T8155] IPv6: Can't replace route, no match found [ 145.418308][ T8155] IPv6: Can't replace route, no match found [ 145.424485][ T8155] IPv6: Can't replace route, no match found [ 145.468841][ T8155] IPv6: Can't replace route, no match found [ 145.475111][ T8155] IPv6: Can't replace route, no match found [ 145.482201][ T8155] IPv6: Can't replace route, no match found [ 145.492127][ T8155] IPv6: Can't replace route, no match found [ 145.498912][ T8155] IPv6: Can't replace route, no match found [ 145.518734][ T8162] IPVS: set_ctl: invalid protocol: 1 10.1.1.0:20002 [ 145.568356][ T8155] IPv6: Can't replace route, no match found [ 145.574522][ T8155] IPv6: Can't replace route, no match found [ 145.609472][ T8155] IPv6: Can't replace route, no match found [ 145.625816][ T8155] IPv6: Can't replace route, no match found [ 145.633923][ T8155] IPv6: Can't replace route, no match found [ 145.655758][ T8155] IPv6: Can't replace route, no match found [ 145.674754][ T8155] IPv6: Can't replace route, no match found [ 145.693549][ T8155] IPv6: Can't replace route, no match found [ 145.711868][ T8155] IPv6: Can't replace route, no match found [ 145.729020][ T8155] IPv6: Can't replace route, no match found [ 145.740021][ T8155] IPv6: Can't replace route, no match found [ 145.746475][ T8155] IPv6: Can't replace route, no match found [ 145.752657][ T8155] IPv6: Can't replace route, no match found [ 145.760190][ T8155] IPv6: Can't replace route, no match found [ 145.766485][ T8155] IPv6: Can't replace route, no match found [ 145.772741][ T8155] IPv6: Can't replace route, no match found [ 145.779057][ T8155] IPv6: Can't replace route, no match found [ 145.785297][ T8155] IPv6: Can't replace route, no match found [ 145.791597][ T8155] IPv6: Can't replace route, no match found [ 145.798100][ T8155] IPv6: Can't replace route, no match found [ 145.804278][ T8155] IPv6: Can't replace route, no match found [ 145.810684][ T8155] IPv6: Can't replace route, no match found [ 145.817159][ T8155] IPv6: Can't replace route, no match found [ 145.826785][ T8155] IPv6: Can't replace route, no match found [ 145.832935][ T8155] IPv6: Can't replace route, no match found [ 145.904387][ T8155] IPv6: Can't replace route, no match found [ 145.919394][ T8155] IPv6: Can't replace route, no match found [ 145.925696][ T8155] IPv6: Can't replace route, no match found [ 145.932377][ T8155] IPv6: Can't replace route, no match found [ 145.938917][ T8155] IPv6: Can't replace route, no match found [ 145.945202][ T8155] IPv6: Can't replace route, no match found [ 145.964540][ T8155] IPv6: Can't replace route, no match found [ 145.971177][ T8155] IPv6: Can't replace route, no match found [ 145.977933][ T8155] IPv6: Can't replace route, no match found [ 146.273107][ T8174] vlan2: entered promiscuous mode [ 146.281870][ T8174] macvtap0: entered promiscuous mode [ 146.402724][ T8180] IPVS: Scheduler module ip_vs_sip not found [ 146.531548][ T8197] netlink: 'syz.1.581': attribute type 21 has an invalid length. [ 146.539551][ T8197] netlink: 'syz.1.581': attribute type 30 has an invalid length. [ 146.553322][ T8197] __nla_validate_parse: 2 callbacks suppressed [ 146.553335][ T8197] netlink: 25 bytes leftover after parsing attributes in process `syz.1.581'. [ 147.130652][ T8216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.587'. [ 147.710512][ T8234] IPVS: Scheduler module ip_vs_sip not found [ 147.830577][ T8245] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 147.963489][ T8250] netlink: 68 bytes leftover after parsing attributes in process `syz.4.595'. [ 148.149479][ T8257] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 148.282539][ T8261] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 148.295614][ T8261] netlink: 72 bytes leftover after parsing attributes in process `syz.0.598'. [ 148.308667][ T8261] netlink: 97 bytes leftover after parsing attributes in process `syz.0.598'. [ 148.582621][ T8282] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 148.627259][ T8279] IPVS: Scheduler module ip_vs_sip not found [ 148.957987][ T8307] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 149.271594][ T8328] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 149.436667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.525121][ T8334] IPVS: Scheduler module ip_vs_sip not found [ 149.539299][ T8340] syz_tun: refused to change device tx_queue_len [ 149.560196][ T8340] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 149.563850][ T8345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.623'. [ 149.585842][ T8294] infiniband syz0: set down [ 149.590824][ T8294] infiniband syz0: added ipvlan1 [ 149.616656][ T1208] syz1: Port: 1 Link DOWN [ 149.749808][ T8294] RDS/IB: syz0: added [ 149.763445][ T8294] smc: adding ib device syz0 with port count 1 [ 149.771308][ T8294] smc: ib device syz0 port 1 has no pnetid [ 149.780981][ T8353] netlink: 100 bytes leftover after parsing attributes in process `syz.1.624'. [ 149.791159][ T8353] netlink: 100 bytes leftover after parsing attributes in process `syz.1.624'. [ 149.820283][ T8356] dvmrp1: entered allmulticast mode [ 149.828502][ T8353] netlink: 68 bytes leftover after parsing attributes in process `syz.1.624'. [ 149.845211][ T8357] dvmrp0: left allmulticast mode [ 149.850675][ T8357] dvmrp1: left allmulticast mode [ 150.329961][ T8371] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 150.434019][ T8373] geneve2: entered promiscuous mode [ 150.451513][ T8091] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.492030][ T8091] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.517081][ T8091] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.531372][ T8091] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.590333][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.632'. [ 150.747870][ T8381] IPVS: Scheduler module ip_vs_sip not found [ 150.753923][ T8383] IPVS: length: 24 != 8472 [ 150.995576][ T8394] dvmrp0: entered allmulticast mode [ 152.179590][ T8424] !: renamed from dummy0 (while UP) [ 152.339231][ T8429] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 152.443346][ T8431] __nla_validate_parse: 1 callbacks suppressed [ 152.443363][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 152.539808][ T8435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.600687][ T8435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.649'. [ 152.629449][ T8442] sctp: [Deprecated]: syz.4.651 (pid 8442) Use of int in max_burst socket option deprecated. [ 152.629449][ T8442] Use struct sctp_assoc_value instead [ 152.744695][ T8447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.798629][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.652'. [ 153.655251][ T8460] netlink: 76 bytes leftover after parsing attributes in process `syz.0.657'. [ 153.820995][ T8469] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 154.066838][ T8485] netlink: 'syz.3.662': attribute type 12 has an invalid length. [ 154.338575][ T8494] syz.1.667 (8494) used obsolete PPPIOCDETACH ioctl [ 154.483461][ T8503] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.670'. [ 154.573955][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.670'. [ 154.651496][ T8512] netlink: 'syz.0.671': attribute type 8 has an invalid length. [ 154.945903][ T8524] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 155.870829][ T8552] netlink: 44 bytes leftover after parsing attributes in process `syz.3.685'. [ 155.941560][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.684'. [ 156.053620][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 156.296644][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'. [ 156.305774][ T8569] tun0: tun_chr_ioctl cmd 1074025675 [ 156.311553][ T8569] tun0: persist disabled [ 156.318023][ T8573] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 156.378552][ T8569] vlan2: entered promiscuous mode [ 156.383590][ T8569] bridge0: entered promiscuous mode [ 156.411027][ T8576] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 156.438053][ T8561] batman_adv: batadv0: Removing interface: netdevsim0 [ 157.488410][ T8641] ip6gretap1: entered allmulticast mode [ 157.507177][ T8644] __nla_validate_parse: 5 callbacks suppressed [ 157.507192][ T8644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.710'. [ 157.772363][ T8655] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 157.901365][ T8659] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 158.193359][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 158.237104][ T8672] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 158.437261][ T8675] netlink: 48 bytes leftover after parsing attributes in process `syz.4.720'. [ 158.613256][ T8678] IPv6: Can't replace route, no match found [ 158.879934][ T8684] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 159.157492][ T8697] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 159.289485][ T8701] netlink: 'syz.0.727': attribute type 8 has an invalid length. [ 159.586177][ T8716] netlink: 84 bytes leftover after parsing attributes in process `syz.1.730'. [ 159.785683][ T8724] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.849155][ T8726] syzkaller1: entered promiscuous mode [ 159.861192][ T8726] syzkaller1: entered allmulticast mode [ 159.946667][ T8728] IPVS: length: 24 != 8472 [ 160.039515][ T8733] netlink: 60 bytes leftover after parsing attributes in process `syz.1.735'. [ 160.291401][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 160.436400][ T8749] netlink: 332 bytes leftover after parsing attributes in process `syz.0.743'. [ 160.445592][ T8749] netlink: 104 bytes leftover after parsing attributes in process `syz.0.743'. [ 160.454973][ T8749] netlink: 32 bytes leftover after parsing attributes in process `syz.0.743'. [ 160.581803][ T8757] netlink: 36 bytes leftover after parsing attributes in process `syz.3.744'. [ 161.138225][ T8768] IPVS: length: 24 != 11928 [ 161.196317][ C0] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82 [ 163.220565][ T8821] __nla_validate_parse: 1 callbacks suppressed [ 163.220582][ T8821] netlink: 92 bytes leftover after parsing attributes in process `syz.4.763'. [ 163.235744][ T8821] openvswitch: netlink: Flow key attr not present in new flow. [ 163.577212][ T8849] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 163.585399][ T8849] netlink: 'syz.3.770': attribute type 4 has an invalid length. [ 163.683811][ T8849] netlink: 15538 bytes leftover after parsing attributes in process `syz.3.770'. [ 163.977256][ T8882] netlink: 'syz.3.777': attribute type 30 has an invalid length. [ 164.028563][ T8876] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.043231][ T8876] bond2: (slave macvlan2): making interface the new active one [ 164.054895][ T8876] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 164.055827][ T8886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.777'. [ 164.174974][ T8886] netlink: 36 bytes leftover after parsing attributes in process `syz.3.777'. [ 164.198491][ T8892] IPVS: length: 24 != 8472 [ 164.325770][ T8898] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 164.575278][ T8907] netlink: 'syz.0.782': attribute type 13 has an invalid length. [ 164.595787][ T8907] netlink: 'syz.0.782': attribute type 17 has an invalid length. [ 164.613350][ T8909] netlink: 'syz.1.783': attribute type 21 has an invalid length. [ 164.648764][ T8909] netlink: 156 bytes leftover after parsing attributes in process `syz.1.783'. [ 164.731453][ T8909] netlink: 'syz.1.783': attribute type 21 has an invalid length. [ 164.740203][ T8909] netlink: 156 bytes leftover after parsing attributes in process `syz.1.783'. [ 164.758651][ T8907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.799123][ T8907] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.823930][ T8907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.861982][ T8916] bridge2: entered promiscuous mode [ 164.867596][ T8916] bridge2: entered allmulticast mode [ 164.920982][ T8913] netlink: 32 bytes leftover after parsing attributes in process `syz.4.784'. [ 165.307990][ T8927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.438354][ T8931] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 165.480394][ T8931] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 165.523514][ T8948] netlink: 'syz.3.791': attribute type 2 has an invalid length. [ 165.544595][ T8948] netlink: 224 bytes leftover after parsing attributes in process `syz.3.791'. [ 165.603249][ T8949] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 165.865148][ T8960] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 165.867110][ T8963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.796'. [ 165.885644][ T8963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.796'. [ 166.336515][ T8988] netlink: 'syz.3.803': attribute type 12 has an invalid length. [ 166.655992][ T9003] erspan0: entered promiscuous mode [ 166.681865][ T9003] erspan0: left promiscuous mode [ 166.915854][ T9010] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 167.087561][ T9021] tap0: tun_chr_ioctl cmd 1074025677 [ 167.093544][ T9021] tap0: linktype set to 0 [ 168.011288][ T9080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.097272][ T9083] netlink: 'syz.0.831': attribute type 11 has an invalid length. [ 168.469391][ T9117] __nla_validate_parse: 13 callbacks suppressed [ 168.469408][ T9117] netlink: 92 bytes leftover after parsing attributes in process `syz.4.841'. [ 168.484949][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.841'. [ 168.494213][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.841'. [ 168.508373][ T30] audit: type=1107 audit(1758552980.737:5): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 169.065128][ T9146] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.503183][ T9149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.605955][ T9167] netlink: 'syz.4.855': attribute type 1 has an invalid length. [ 169.665432][ T9167] netlink: 'syz.4.855': attribute type 2 has an invalid length. [ 169.935530][ T9177] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 169.978466][ T9181] bridge0: port 1(syz_tun) entered blocking state [ 169.989439][ T9181] bridge0: port 1(syz_tun) entered disabled state [ 170.001823][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.859'. [ 170.029515][ T9181] syz_tun: entered allmulticast mode [ 170.063263][ T9181] syz_tun: entered promiscuous mode [ 170.087959][ T9181] bridge0: port 1(syz_tun) entered blocking state [ 170.094487][ T9181] bridge0: port 1(syz_tun) entered forwarding state [ 170.337224][ T9185] netlink: 277 bytes leftover after parsing attributes in process `syz.4.859'. [ 170.679300][ T9182] team0 (unregistering): Port device team_slave_0 removed [ 170.697099][ T9182] team0 (unregistering): Port device team_slave_1 removed [ 173.077510][ T9266] : entered promiscuous mode [ 173.319130][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 173.328979][ T9273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.331692][ T9272] netlink: 32 bytes leftover after parsing attributes in process `syz.4.870'. [ 173.577223][ T9278] FAULT_INJECTION: forcing a failure. [ 173.577223][ T9278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.595445][ T9278] CPU: 0 UID: 0 PID: 9278 Comm: syz.1.872 Not tainted syzkaller #0 PREEMPT(full) [ 173.595466][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 173.595474][ T9278] Call Trace: [ 173.595480][ T9278] [ 173.595487][ T9278] dump_stack_lvl+0x189/0x250 [ 173.595512][ T9278] ? __pfx____ratelimit+0x10/0x10 [ 173.595530][ T9278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.595548][ T9278] ? __pfx__printk+0x10/0x10 [ 173.595570][ T9278] ? __might_fault+0xb0/0x130 [ 173.595602][ T9278] should_fail_ex+0x414/0x560 [ 173.595629][ T9278] _copy_from_iter+0x1de/0x1790 [ 173.595656][ T9278] ? __lock_acquire+0xab9/0xd20 [ 173.595684][ T9278] ? __pfx__copy_from_iter+0x10/0x10 [ 173.595719][ T9278] tun_get_user+0x219/0x3e20 [ 173.595760][ T9278] ? aa_file_perm+0x44d/0x1550 [ 173.595779][ T9278] ? __pfx_tun_get_user+0x10/0x10 [ 173.595797][ T9278] ? _parse_integer_limit+0x1ae/0x1f0 [ 173.595824][ T9278] ? __lock_acquire+0xab9/0xd20 [ 173.595850][ T9278] ? ref_tracker_alloc+0x318/0x460 [ 173.595865][ T9278] ? __lock_acquire+0xab9/0xd20 [ 173.595888][ T9278] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 173.595910][ T9278] ? tun_get+0x1c/0x2f0 [ 173.595934][ T9278] ? tun_get+0x1c/0x2f0 [ 173.595951][ T9278] ? tun_get+0x1c/0x2f0 [ 173.595974][ T9278] tun_chr_write_iter+0x113/0x200 [ 173.595996][ T9278] vfs_write+0x5c9/0xb30 [ 173.596021][ T9278] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 173.596040][ T9278] ? __pfx_vfs_write+0x10/0x10 [ 173.596072][ T9278] ? __fget_files+0x2a/0x420 [ 173.596095][ T9278] ksys_write+0x145/0x250 [ 173.596117][ T9278] ? __pfx_ksys_write+0x10/0x10 [ 173.596134][ T9278] ? rcu_is_watching+0x15/0xb0 [ 173.596157][ T9278] ? do_syscall_64+0xbe/0x3b0 [ 173.596179][ T9278] do_syscall_64+0xfa/0x3b0 [ 173.596195][ T9278] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.596212][ T9278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.596228][ T9278] ? clear_bhb_loop+0x60/0xb0 [ 173.596246][ T9278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.596260][ T9278] RIP: 0033:0x7f2f0bd8eec9 [ 173.596275][ T9278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.596286][ T9278] RSP: 002b:00007f2f09fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.596302][ T9278] RAX: ffffffffffffffda RBX: 00007f2f0bfe6090 RCX: 00007f2f0bd8eec9 [ 173.596313][ T9278] RDX: 0000000000000019 RSI: 0000200000000140 RDI: 0000000000000003 [ 173.596321][ T9278] RBP: 00007f2f09fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 173.596331][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.596340][ T9278] R13: 00007f2f0bfe6128 R14: 00007f2f0bfe6090 R15: 00007ffc5bd89b68 [ 173.596385][ T9278] [ 174.355206][ T9298] vlan2: entered allmulticast mode [ 174.402912][ T9298] bridge_slave_0: entered allmulticast mode [ 174.410389][ T9296] openvswitch: netlink: IPv4 tun info is not correct [ 175.329642][ T9327] netlink: 'syz.2.884': attribute type 13 has an invalid length. [ 175.340420][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 175.394894][ T9329] team0: Device gtp0 is up. Set it down before adding it as a team port [ 175.445290][ T9327] netlink: 'syz.2.884': attribute type 13 has an invalid length. [ 175.446351][ T9324] block nbd1: server does not support multiple connections per device. [ 175.453856][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 175.472333][ T9324] block nbd1: shutting down sockets [ 175.498086][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.507540][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.525955][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.546986][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.575101][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'. [ 175.721132][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 175.744991][ T9340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.887'. [ 175.761109][ T9340] gretap1: entered promiscuous mode [ 175.912725][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.891'. [ 175.924213][ T9350] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.034991][ T9356] netlink: 'syz.0.893': attribute type 1 has an invalid length. [ 176.075669][ T9356] netlink: 224 bytes leftover after parsing attributes in process `syz.0.893'. [ 176.163922][ T9362] sctp: [Deprecated]: syz.4.895 (pid 9362) Use of int in max_burst socket option. [ 176.163922][ T9362] Use struct sctp_assoc_value instead [ 176.223626][ T9360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.893'. [ 176.234848][ T9360] netem: change failed [ 176.487737][ T9374] netlink: 'syz.2.897': attribute type 1 has an invalid length. [ 176.525751][ T9374] netlink: 224 bytes leftover after parsing attributes in process `syz.2.897'. [ 176.566143][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 176.742714][ T9379] netlink: 'syz.1.898': attribute type 4 has an invalid length. [ 177.078913][ T9396] netlink: 'syz.1.905': attribute type 15 has an invalid length. [ 177.269738][ T8085] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 177.389728][ T8085] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 177.400005][ T8085] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 177.418658][ T8085] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 177.601123][ T9423] netlink: 'syz.2.915': attribute type 29 has an invalid length. [ 177.614526][ T9423] netlink: 'syz.2.915': attribute type 29 has an invalid length. [ 178.895431][ T9459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.400729][ T9489] sctp: [Deprecated]: syz.0.930 (pid 9489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.400729][ T9489] Use struct sctp_sack_info instead [ 179.718440][ T9502] syzkaller1: entered promiscuous mode [ 179.723936][ T9502] syzkaller1: entered allmulticast mode [ 179.745733][ T9508] xt_l2tp: v2 sid > 0xffff: 1114112 [ 179.796026][ T9510] Can't find ip_set type hash:n [ 179.981668][ T9529] netlink: 'syz.0.944': attribute type 29 has an invalid length. [ 180.036796][ T9529] netlink: 'syz.0.944': attribute type 29 has an invalid length. [ 180.246725][ T9548] bond0: (slave wlan1): Opening slave failed [ 180.347252][ T9556] __nla_validate_parse: 5 callbacks suppressed [ 180.347269][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 180.490479][ T9559] ip6gretap0: entered promiscuous mode [ 180.499733][ T9559] macsec1: entered promiscuous mode [ 180.517088][ T9559] ip6gretap0: left promiscuous mode [ 181.031292][ T9588] validate_nla: 31 callbacks suppressed [ 181.031308][ T9588] netlink: 'syz.2.960': attribute type 12 has an invalid length. [ 181.096993][ T9588] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.960'. [ 181.178039][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 181.189982][ T9597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.967'. [ 181.221967][ T9599] macsec1: entered allmulticast mode [ 181.233888][ T9599] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 181.287681][ T9602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.966'. [ 181.529038][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.967'. [ 182.477142][ T9623] ip6gretap0: entered promiscuous mode [ 182.486560][ T9623] macsec2: entered promiscuous mode [ 182.508883][ T9623] ip6gretap0: left promiscuous mode [ 182.526567][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 182.579032][ T9625] netlink: 40 bytes leftover after parsing attributes in process `syz.3.973'. [ 182.592641][ T9625] netlink: 3 bytes leftover after parsing attributes in process `syz.3.973'. [ 182.637224][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.974'. [ 182.863888][ T9636] netlink: 'syz.3.978': attribute type 2 has an invalid length. [ 182.969497][ T9636] þ: entered promiscuous mode [ 183.791449][ T9676] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.801840][ T9676] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 183.998365][ T9687] netlink: 'syz.4.993': attribute type 1 has an invalid length. [ 184.114423][ T9691] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 184.263271][ T9687] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.268281][ T59] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 184.408390][ T9696] veth3: entered promiscuous mode [ 184.426381][ T8081] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 184.456827][ T9696] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 185.087984][ T9737] netlink: 'syz.0.1004': attribute type 1 has an invalid length. [ 185.191972][ T9737] openvswitch: netlink: ct_state flags 7fffffff unsupported [ 185.204228][ T9744] IPv6: NLM_F_REPLACE set, but no existing node found! [ 185.273461][ T9737] vlan2: entered allmulticast mode [ 185.288219][ T9737] bond3: entered allmulticast mode [ 185.342595][ T9748] geneve4: entered promiscuous mode [ 185.368076][ T9750] syzkaller0: entered promiscuous mode [ 185.377793][ T9750] syzkaller0: entered allmulticast mode [ 185.461534][ T9750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.629700][ T9772] __nla_validate_parse: 9 callbacks suppressed [ 185.629715][ T9772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1016'. [ 185.653213][ T9772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1016'. [ 185.794824][ T9777] macvlan2: entered promiscuous mode [ 185.809304][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 185.823672][ T9777] syz_tun: entered promiscuous mode [ 185.860131][ T9777] team0: Port device macvlan2 added [ 185.976472][ T9783] tipc: Started in network mode [ 185.998221][ T9783] tipc: Node identity d214189d939e, cluster identity 4711 [ 186.023822][ T9783] tipc: Enabled bearer , priority 0 [ 186.055933][ T9782] tipc: Resetting bearer [ 186.077089][ T9785] Bluetooth: MGMT ver 1.23 [ 186.110427][ T9782] tipc: Disabling bearer [ 186.487164][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'. [ 186.777417][ T9823] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1029'. [ 186.924189][ T9832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.958154][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1035'. [ 187.208579][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'. [ 187.273214][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 187.832020][ T9861] batadv1: entered allmulticast mode [ 187.839190][ T9861] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 187.859083][ T9863] tap0: tun_chr_ioctl cmd 2147767507 [ 187.863759][ T9861] netlink: 'syz.1.1044': attribute type 1 has an invalid length. [ 187.873636][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1044'. [ 188.006774][ T9856] netlink: 'syz.0.1043': attribute type 1 has an invalid length. [ 188.016250][ T9856] nbd: error processing sock list [ 188.021711][ T9856] block nbd1: shutting down sockets [ 188.093255][ T9869] ip6tnl2: entered promiscuous mode [ 188.101082][ T9869] ip6tnl2: entered allmulticast mode [ 188.121797][ T9869] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 188.128103][ T9879] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 188.335788][ T9892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1052'. [ 188.504772][ T9900] tipc: Enabling of bearer rejected, failed to enable media [ 188.837428][ T9891] syz_tun: left promiscuous mode [ 188.891291][ T9908] netem: change failed [ 188.933661][ T8095] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.973516][ T8095] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 188.994565][ T8095] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.013556][ T8095] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 189.031830][ T9900] syzkaller0: entered promiscuous mode [ 189.041862][ T9900] syzkaller0: entered allmulticast mode [ 189.168985][ T8095] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.191752][ T8095] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 189.196414][ T9929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.213539][ T8095] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.237693][ T8095] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 190.138413][ T9969] netlink: 'syz.0.1070': attribute type 2 has an invalid length. [ 190.906632][ T9992] openvswitch: netlink: Message has 24 unknown bytes. [ 192.136889][T10024] __nla_validate_parse: 1 callbacks suppressed [ 192.136905][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 192.166541][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 192.187120][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 192.196020][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'. [ 192.774631][T10033] netlink: 'syz.4.1081': attribute type 83 has an invalid length. [ 192.968832][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1084'. [ 192.984010][T10042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1084'. [ 193.015962][T10040] openvswitch: netlink: Message has 24 unknown bytes. [ 193.074204][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 193.083404][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1086'. [ 193.106007][T10046] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1084'. [ 193.108695][T10044] netlink: 'syz.3.1086': attribute type 19 has an invalid length. [ 194.243512][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.266992][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.057072][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 195.257268][T10138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.836829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.679204][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.685593][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.119275][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.125718][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 338.236709][ T31] INFO: task kworker/1:4:5930 blocked for more than 143 seconds. [ 338.244486][ T31] Not tainted syzkaller #0 [ 338.249893][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.258899][ T31] task:kworker/1:4 state:D stack:23336 pid:5930 tgid:5930 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 338.271019][ T31] Workqueue: events rfkill_sync_work [ 338.276725][ T31] Call Trace: [ 338.280040][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 338.283017][ T31] __schedule+0x1798/0x4cc0 [ 338.287732][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 338.293333][ T31] ? __pfx___schedule+0x10/0x10 [ 338.298527][ T31] ? schedule+0x91/0x360 [ 338.302833][ T31] schedule+0x165/0x360 [ 338.307159][ T31] schedule_preempt_disabled+0x13/0x30 [ 338.312664][ T31] __mutex_lock+0x7e6/0x1350 [ 338.317656][ T31] ? __mutex_lock+0x5bb/0x1350 [ 338.322474][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 338.327927][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 338.356185][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.361487][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 338.383307][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 338.392084][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 338.398491][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 338.403645][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 338.409979][ T31] rfkill_set_block+0x1cf/0x440 [ 338.414877][ T31] rfkill_sync_work+0x114/0x200 [ 338.420348][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 338.426349][ T31] process_scheduled_works+0xae1/0x17b0 [ 338.431969][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.438606][ T31] worker_thread+0x8a0/0xda0 [ 338.443261][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 338.449843][ T31] ? __kthread_parkme+0x7b/0x200 [ 338.454917][ T31] kthread+0x70e/0x8a0 [ 338.459137][ T31] ? __pfx_worker_thread+0x10/0x10 [ 338.464309][ T31] ? __pfx_kthread+0x10/0x10 [ 338.468978][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.474210][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.479698][ T31] ? __pfx_kthread+0x10/0x10 [ 338.484316][ T31] ret_from_fork+0x439/0x7d0 [ 338.489123][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 338.494260][ T31] ? __switch_to_asm+0x39/0x70 [ 338.499140][ T31] ? __switch_to_asm+0x33/0x70 [ 338.503960][ T31] ? __pfx_kthread+0x10/0x10 [ 338.508679][ T31] ret_from_fork_asm+0x1a/0x30 [ 338.513485][ T31] [ 338.516740][ T31] INFO: task kworker/1:8:6689 blocked for more than 143 seconds. [ 338.524481][ T31] Not tainted syzkaller #0 [ 338.529636][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.538497][ T31] task:kworker/1:8 state:D stack:24840 pid:6689 tgid:6689 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 338.550620][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 338.557539][ T31] Call Trace: [ 338.560887][ T31] [ 338.563869][ T31] __schedule+0x1798/0x4cc0 [ 338.568534][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 338.574890][ T31] ? __pfx___schedule+0x10/0x10 [ 338.579898][ T31] ? schedule+0x91/0x360 [ 338.584284][ T31] schedule+0x165/0x360 [ 338.588528][ T31] schedule_preempt_disabled+0x13/0x30 [ 338.594047][ T31] __mutex_lock+0x7e6/0x1350 [ 338.598840][ T31] ? __mutex_lock+0x5bb/0x1350 [ 338.603655][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 338.610010][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 338.615097][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 338.620909][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 338.626737][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 338.632819][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 338.638831][ T31] process_scheduled_works+0xae1/0x17b0 [ 338.644431][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 338.650574][ T31] worker_thread+0x8a0/0xda0 [ 338.655211][ T31] kthread+0x70e/0x8a0 [ 338.659504][ T31] ? __pfx_worker_thread+0x10/0x10 [ 338.664940][ T31] ? __pfx_kthread+0x10/0x10 [ 338.669654][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.674888][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.680386][ T31] ? __pfx_kthread+0x10/0x10 [ 338.685017][ T31] ret_from_fork+0x439/0x7d0 [ 338.689750][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 338.694891][ T31] ? __switch_to_asm+0x39/0x70 [ 338.699937][ T31] ? __switch_to_asm+0x33/0x70 [ 338.704742][ T31] ? __pfx_kthread+0x10/0x10 [ 338.709412][ T31] ret_from_fork_asm+0x1a/0x30 [ 338.714226][ T31] [ 338.717602][ T31] INFO: task syz.4.1084:10039 blocked for more than 143 seconds. [ 338.725357][ T31] Not tainted syzkaller #0 [ 338.730431][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.739243][ T31] task:syz.4.1084 state:D stack:25096 pid:10039 tgid:10039 ppid:5863 task_flags:0x400040 flags:0x00004006 [ 338.751380][ T31] Call Trace: [ 338.754682][ T31] [ 338.757803][ T31] __schedule+0x1798/0x4cc0 [ 338.762356][ T31] ? validate_chain+0x897/0x2140 [ 338.767420][ T31] ? __lock_acquire+0xab9/0xd20 [ 338.772294][ T31] ? __pfx___schedule+0x10/0x10 [ 338.777344][ T31] ? schedule+0x91/0x360 [ 338.781619][ T31] schedule+0x165/0x360 [ 338.785801][ T31] schedule_timeout+0x9a/0x270 [ 338.790669][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 338.796412][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.801670][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.807118][ T31] ? wait_for_completion+0x267/0x5d0 [ 338.812460][ T31] wait_for_completion+0x2bf/0x5d0 [ 338.817691][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 338.823351][ T31] ? __flush_work+0xd2/0xbc0 [ 338.828066][ T31] ? __flush_work+0xd2/0xbc0 [ 338.833461][ T31] __flush_work+0x9b9/0xbc0 [ 338.838401][ T31] ? __flush_work+0xd2/0xbc0 [ 338.843092][ T31] ? __pfx___flush_work+0x10/0x10 [ 338.848253][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 338.853676][ T31] ? __pfx___cancel_work+0x10/0x10 [ 338.858985][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 338.864673][ T31] __cancel_work_sync+0xbe/0x110 [ 338.869748][ T31] rfkill_unregister+0x92/0x220 [ 338.874637][ T31] nfc_unregister_device+0x96/0x2a0 [ 338.880157][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 338.886013][ T31] virtual_ncidev_close+0x56/0x90 [ 338.891159][ T31] __fput+0x44c/0xa70 [ 338.895175][ T31] task_work_run+0x1d1/0x260 [ 338.900218][ T31] ? __pfx_task_work_run+0x10/0x10 [ 338.905410][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 338.911066][ T31] exit_to_user_mode_loop+0xec/0x110 [ 338.916642][ T31] do_syscall_64+0x2bd/0x3b0 [ 338.921532][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.927773][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.933974][ T31] ? clear_bhb_loop+0x60/0xb0 [ 338.938848][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.944784][ T31] RIP: 0033:0x7f7f0e98eec9 [ 338.949457][ T31] RSP: 002b:00007ffca3fcefb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 338.958615][ T31] RAX: 0000000000000000 RBX: 00007f7f0ebe7da0 RCX: 00007f7f0e98eec9 [ 338.966921][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 338.975055][ T31] RBP: 00007f7f0ebe7da0 R08: 0000000000000000 R09: 00000026a3fcf2af [ 338.983354][ T31] R10: 00007f7f0ebe7cb0 R11: 0000000000000246 R12: 000000000002f4d3 [ 338.991740][ T31] R13: 00007f7f0ebe6180 R14: ffffffffffffffff R15: 00007ffca3fcf0d0 [ 339.000197][ T31] [ 339.003283][ T31] INFO: task syz.1.1088:10058 blocked for more than 144 seconds. [ 339.011351][ T31] Not tainted syzkaller #0 [ 339.016350][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.025104][ T31] task:syz.1.1088 state:D stack:24200 pid:10058 tgid:10057 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 339.037719][ T31] Call Trace: [ 339.041039][ T31] [ 339.043997][ T31] __schedule+0x1798/0x4cc0 [ 339.048858][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.053765][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.058875][ T31] ? __pfx___schedule+0x10/0x10 [ 339.063880][ T31] ? schedule+0x91/0x360 [ 339.068393][ T31] schedule+0x165/0x360 [ 339.072764][ T31] schedule_preempt_disabled+0x13/0x30 [ 339.078572][ T31] __mutex_lock+0x7e6/0x1350 [ 339.083215][ T31] ? __mutex_lock+0x5bb/0x1350 [ 339.088244][ T31] ? rfkill_fop_open+0x12d/0x820 [ 339.093245][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 339.098659][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 339.104002][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 339.109497][ T31] rfkill_fop_open+0x12d/0x820 [ 339.114329][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 339.120246][ T31] misc_open+0x2b9/0x330 [ 339.124622][ T31] chrdev_open+0x4c9/0x5e0 [ 339.129557][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 339.134571][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 339.141528][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 339.146589][ T31] do_dentry_open+0x950/0x13f0 [ 339.151374][ T31] vfs_open+0x3b/0x340 [ 339.155600][ T31] ? path_openat+0x2ecd/0x3830 [ 339.160843][ T31] path_openat+0x2ee5/0x3830 [ 339.165484][ T31] ? arch_stack_walk+0xfc/0x150 [ 339.170471][ T31] ? stack_depot_save_flags+0x40/0x860 [ 339.176000][ T31] ? __pfx_path_openat+0x10/0x10 [ 339.181319][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.187601][ T31] do_filp_open+0x1fa/0x410 [ 339.192227][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.197533][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 339.202644][ T31] ? _raw_spin_unlock+0x28/0x50 [ 339.207647][ T31] ? alloc_fd+0x64c/0x6c0 [ 339.212018][ T31] do_sys_openat2+0x121/0x1c0 [ 339.216925][ T31] ? __se_sys_futex+0x36f/0x400 [ 339.221835][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 339.227144][ T31] ? rcu_is_watching+0x15/0xb0 [ 339.231933][ T31] __x64_sys_openat+0x138/0x170 [ 339.237103][ T31] do_syscall_64+0xfa/0x3b0 [ 339.241651][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.246965][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.253085][ T31] ? clear_bhb_loop+0x60/0xb0 [ 339.258056][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.263985][ T31] RIP: 0033:0x7f2f0bd8eec9 [ 339.268654][ T31] RSP: 002b:00007f2f09ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 339.277463][ T31] RAX: ffffffffffffffda RBX: 00007f2f0bfe5fa0 RCX: 00007f2f0bd8eec9 [ 339.285498][ T31] RDX: 0000000000000801 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 339.293821][ T31] RBP: 00007f2f0be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 339.301871][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.310015][ T31] R13: 00007f2f0bfe6038 R14: 00007f2f0bfe5fa0 R15: 00007ffc5bd89b68 [ 339.318305][ T31] [ 339.321459][ T31] INFO: task syz.3.1092:10072 blocked for more than 144 seconds. [ 339.329328][ T31] Not tainted syzkaller #0 [ 339.334401][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.343241][ T31] task:syz.3.1092 state:D stack:26024 pid:10072 tgid:10071 ppid:5872 task_flags:0x400040 flags:0x00004004 [ 339.355445][ T31] Call Trace: [ 339.358867][ T31] [ 339.361809][ T31] __schedule+0x1798/0x4cc0 [ 339.366698][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.371600][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.376522][ T31] ? __pfx___schedule+0x10/0x10 [ 339.381407][ T31] ? schedule+0x91/0x360 [ 339.385688][ T31] schedule+0x165/0x360 [ 339.390032][ T31] schedule_preempt_disabled+0x13/0x30 [ 339.395572][ T31] __mutex_lock+0x7e6/0x1350 [ 339.400401][ T31] ? __mutex_lock+0x5bb/0x1350 [ 339.405194][ T31] ? misc_open+0x51/0x330 [ 339.409736][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 339.414844][ T31] misc_open+0x51/0x330 [ 339.419110][ T31] chrdev_open+0x4c9/0x5e0 [ 339.423552][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 339.428643][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 339.435019][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 339.440105][ T31] do_dentry_open+0x950/0x13f0 [ 339.444938][ T31] vfs_open+0x3b/0x340 [ 339.449218][ T31] ? path_openat+0x2ecd/0x3830 [ 339.454026][ T31] path_openat+0x2ee5/0x3830 [ 339.458743][ T31] ? arch_stack_walk+0xfc/0x150 [ 339.463720][ T31] ? stack_depot_save_flags+0x40/0x860 [ 339.469293][ T31] ? __pfx_path_openat+0x10/0x10 [ 339.474251][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.480534][ T31] do_filp_open+0x1fa/0x410 [ 339.485066][ T31] ? __lock_acquire+0xab9/0xd20 [ 339.490108][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 339.495192][ T31] ? _raw_spin_unlock+0x28/0x50 [ 339.500135][ T31] ? alloc_fd+0x64c/0x6c0 [ 339.504505][ T31] do_sys_openat2+0x121/0x1c0 [ 339.509499][ T31] ? __se_sys_futex+0x36f/0x400 [ 339.514397][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 339.521266][ T31] ? rcu_is_watching+0x15/0xb0 [ 339.526143][ T31] __x64_sys_openat+0x138/0x170 [ 339.531112][ T31] do_syscall_64+0xfa/0x3b0 [ 339.535657][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.541117][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.547255][ T31] ? clear_bhb_loop+0x60/0xb0 [ 339.551976][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.557967][ T31] RIP: 0033:0x7f46af38eec9 [ 339.562401][ T31] RSP: 002b:00007f46b02a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 339.570945][ T31] RAX: ffffffffffffffda RBX: 00007f46af5e5fa0 RCX: 00007f46af38eec9 [ 339.579024][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 339.587102][ T31] RBP: 00007f46af411f91 R08: 0000000000000000 R09: 0000000000000000 [ 339.595128][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.603231][ T31] R13: 00007f46af5e6038 R14: 00007f46af5e5fa0 R15: 00007ffcc22d06d8 [ 339.611468][ T31] [ 339.614570][ T31] [ 339.614570][ T31] Showing all locks held in the system: [ 339.622481][ T31] 1 lock held by khungtaskd/31: [ 339.627413][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 339.637366][ T31] 2 locks held by getty/5621: [ 339.642046][ T31] #0: ffff88814dc060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 339.651901][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 339.662124][ T31] 4 locks held by kworker/1:4/5930: [ 339.667365][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.678430][ T31] #1: ffffc9000445fbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.690970][ T31] #2: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 339.701074][ T31] #3: ffff88807e3a1100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 339.710880][ T31] 3 locks held by kworker/1:8/6689: [ 339.716200][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.727317][ T31] #1: ffffc9000bdf7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 339.740899][ T31] #2: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 339.752469][ T31] 5 locks held by kworker/u8:14/8081: [ 339.757934][ T31] 1 lock held by syz.4.1084/10039: [ 339.763076][ T31] #0: ffff88807e3a1100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 339.772992][ T31] 2 locks held by syz.1.1088/10058: [ 339.778262][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.786788][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 339.797055][ T31] 1 lock held by syz.3.1092/10072: [ 339.802278][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.811052][ T31] 1 lock held by syz.2.1105/10121: [ 339.816222][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.824818][ T31] 1 lock held by syz.0.1107/10137: [ 339.830056][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.838724][ T31] 1 lock held by syz-executor/10159: [ 339.844026][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.852643][ T31] 1 lock held by syz-executor/10160: [ 339.857963][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.866516][ T31] 1 lock held by syz-executor/10162: [ 339.871882][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.880456][ T31] 1 lock held by syz-executor/10165: [ 339.885843][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.894438][ T31] 1 lock held by syz-executor/10166: [ 339.899808][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.908414][ T31] 1 lock held by syz-executor/10175: [ 339.913716][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.922328][ T31] 1 lock held by syz-executor/10176: [ 339.927687][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.936247][ T31] 1 lock held by syz-executor/10178: [ 339.941582][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.950154][ T31] 1 lock held by syz-executor/10181: [ 339.955460][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.964091][ T31] 1 lock held by syz-executor/10182: [ 339.969428][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.978010][ T31] 1 lock held by syz-executor/10190: [ 339.983387][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 339.991962][ T31] 1 lock held by syz-executor/10191: [ 339.997430][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.005940][ T31] 1 lock held by syz-executor/10193: [ 340.011354][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.020037][ T31] 1 lock held by syz-executor/10196: [ 340.025352][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.033897][ T31] 1 lock held by syz-executor/10197: [ 340.039363][ T31] #0: ffffffff8e9c2648 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 340.048237][ T31] [ 340.050693][ T31] ============================================= [ 340.050693][ T31] [ 340.059194][ T31] NMI backtrace for cpu 1 [ 340.059214][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 340.059229][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.059238][ T31] Call Trace: [ 340.059244][ T31] [ 340.059251][ T31] dump_stack_lvl+0x189/0x250 [ 340.059276][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.059294][ T31] ? __pfx__printk+0x10/0x10 [ 340.059326][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 340.059349][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 340.059371][ T31] ? __pfx__printk+0x10/0x10 [ 340.059391][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 340.059415][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 340.059438][ T31] watchdog+0xf93/0xfe0 [ 340.059461][ T31] ? watchdog+0x1de/0xfe0 [ 340.059485][ T31] kthread+0x70e/0x8a0 [ 340.059509][ T31] ? __pfx_watchdog+0x10/0x10 [ 340.059528][ T31] ? __pfx_kthread+0x10/0x10 [ 340.059549][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.059566][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.059582][ T31] ? __pfx_kthread+0x10/0x10 [ 340.059600][ T31] ret_from_fork+0x439/0x7d0 [ 340.059621][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 340.059645][ T31] ? __switch_to_asm+0x39/0x70 [ 340.059664][ T31] ? __switch_to_asm+0x33/0x70 [ 340.059682][ T31] ? __pfx_kthread+0x10/0x10 [ 340.059703][ T31] ret_from_fork_asm+0x1a/0x30 [ 340.059739][ T31] [ 340.059746][ T31] Sending NMI from CPU 1 to CPUs 0: [ 340.205927][ C0] NMI backtrace for cpu 0 [ 340.205949][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 340.205968][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.205978][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 340.206002][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 29 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 340.206017][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 340.206032][ C0] RAX: 036c2caf060be100 RBX: ffffffff819683f8 RCX: 036c2caf060be100 [ 340.206048][ C0] RDX: 0000000000000001 RSI: ffffffff8d9ba56b RDI: ffffffff8be33f00 [ 340.206057][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 340.206066][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa39030 [ 340.206075][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 340.206084][ C0] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 340.206095][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.206103][ C0] CR2: 00005598ff6aa000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 340.206116][ C0] Call Trace: [ 340.206126][ C0] [ 340.206133][ C0] default_idle+0x13/0x20 [ 340.206152][ C0] default_idle_call+0x74/0xb0 [ 340.206173][ C0] do_idle+0x1e8/0x510 [ 340.206199][ C0] ? __pfx_do_idle+0x10/0x10 [ 340.206222][ C0] cpu_startup_entry+0x44/0x60 [ 340.206237][ C0] rest_init+0x2de/0x300 [ 340.206256][ C0] start_kernel+0x3a9/0x410 [ 340.206278][ C0] x86_64_start_reservations+0x24/0x30 [ 340.206298][ C0] x86_64_start_kernel+0x143/0x1c0 [ 340.206317][ C0] common_startup_64+0x13e/0x147 [ 340.206344][ C0] [ 340.206943][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 340.206958][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 340.206978][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.206988][ T31] Call Trace: [ 340.206997][ T31] [ 340.207005][ T31] dump_stack_lvl+0x99/0x250 [ 340.207029][ T31] ? __asan_memcpy+0x40/0x70 [ 340.207050][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.207069][ T31] ? __pfx__printk+0x10/0x10 [ 340.207103][ T31] vpanic+0x281/0x750 [ 340.207125][ T31] ? __pfx_vpanic+0x10/0x10 [ 340.207143][ T31] ? preempt_schedule+0xae/0xc0 [ 340.207162][ T31] ? preempt_schedule_common+0x83/0xd0 [ 340.207185][ T31] panic+0xb9/0xc0 [ 340.207203][ T31] ? __pfx_panic+0x10/0x10 [ 340.207223][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 340.207252][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 340.207278][ T31] watchdog+0xfd2/0xfe0 [ 340.207307][ T31] ? watchdog+0x1de/0xfe0 [ 340.207333][ T31] kthread+0x70e/0x8a0 [ 340.207358][ T31] ? __pfx_watchdog+0x10/0x10 [ 340.207378][ T31] ? __pfx_kthread+0x10/0x10 [ 340.207400][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.207417][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.207433][ T31] ? __pfx_kthread+0x10/0x10 [ 340.207453][ T31] ret_from_fork+0x439/0x7d0 [ 340.207475][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 340.207497][ T31] ? __switch_to_asm+0x39/0x70 [ 340.207516][ T31] ? __switch_to_asm+0x33/0x70 [ 340.207535][ T31] ? __pfx_kthread+0x10/0x10 [ 340.207555][ T31] ret_from_fork_asm+0x1a/0x30 [ 340.207590][ T31] [ 340.539633][ T31] Kernel Offset: disabled [ 340.543968][ T31] Rebooting in 86400 seconds..