last executing test programs: 19.484281615s ago: executing program 4 (id=2242): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r3, 0x25, 0x2, @val=@target_btf_id=0xffffffffffffffff}, 0x14) close(r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x62, 0x62, 0xb, [@restrict={0x2, 0x0, 0x0, 0xb, 0x4}, @datasec={0xa, 0x4, 0x0, 0xf, 0x2, [{0x5, 0x45701e2a, 0x8}, {0x3, 0xa, 0x3}, {0x2, 0xfffffff8, 0x4}, {0x4, 0x3, 0x9bf}], "9328"}, @float={0xb, 0x0, 0x0, 0x10, 0x2}, @typedef={0x5}]}, {0x0, [0x2e, 0x61, 0x61, 0x2e, 0x0, 0x30, 0x30, 0x30, 0x0]}}, &(0x7f0000000340)=""/125, 0x87, 0x7d, 0x1, 0x400, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x4, 0x0}, 0x8) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x63, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0x7, &(0x7f0000000040)=@raw=[@alu={0x4, 0x1, 0x8, 0xb, 0x4, 0x10, 0x8}, @generic={0x7f, 0x4, 0x6, 0x1, 0x80000001}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x9b8c, 0x0, 0x0, 0x40f00, 0x4c, '\x00', r5, @fallback=0x1c, r6, 0x8, &(0x7f0000000480)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x0, 0x3, 0x210}, 0x10, r7, r0, 0x3, &(0x7f0000000600)=[r8, 0x1], &(0x7f0000000640)=[{0x0, 0x1, 0x2, 0x6}, {0x0, 0x2, 0x2, 0xb}, {0x5, 0x2, 0xf, 0xa}]}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r10, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000000e40)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xf8a, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x14, "3a8e5098562c748b9ab7915a54cdb8f7103d4d2bb2caeef27ad240db8cb5561035aed344a0b9a5c4fd1717c5e65f49267146b72d21f957447af93c23b6f8156d14039f73f24d945f70460f4225d1bb837637f1da52927745bdb8155b4d10fd503bb5869328f07915a482aee9d89aca16151db0ad20abac56c9a5fadd619bf05975a7b1c3538db5f48fc9e1b3eee7108b86152dc71d541e09c1d71bf4b3bc00d60f4434b7b5"}, {0x1f, 0x15, "945d8f426aec60ec51c54583360b9d384b8b58efd985c6944dd1fdaf7aa3b648aedaf9ddd6cc7cd69e5bef73abec4dac273985d1f7abd73391bf4cd2033623031da0b5ac6035d7967d59b4f600e4460b9a5c3c267cc8e4b84e747a045b5074d399776a9f933b852998949923db5ab11ab4ce5a7598ac82816503d1720f61fe73c9b705e6724915c0878a0e4bac233ae87206ad2d40f35b42d801b5f6aa2e3e6069b6b9f07fe2b2788645be7669"}, {0x27, 0x0, "18d72f"}, {0xe, 0x1c, "babef68a598fff568b3802161928f01b3816976b117a4c7d08136c3a7d2b6c2a0242af7c47779ea558947e0fc69f8fc91c5411d043bb88df0f912b0fdcd6a0de935c533dbddb96966580dcda90a3be8e11d3fcab20588168c1a818d2e1e5b7f0744b07c7c9680b57a8827ec50e02717335479b4bb1c38485b34aa5be46bfc56ef89699c8ce9f684712e94b5f0243e547ec224b746e892a9be9c75e9a381e274eb051ed957217392b4a977befb6921850924ae436e59e9253faa17e9b6e96c71af523e178c6581ebfb3874aecf2ee797c9c6f0313794a6c8b6d35fa4ec1470b45896e07923f"}, {0x1, 0x1a7, "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"}]}}}}}}, 0x0) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r11, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r11, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r11) 19.24409243s ago: executing program 3 (id=2244): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$alg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)}, 0x40009) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="012f7d96bc124ce0af13b85bcf04e629566f4496dfbb67931991344b608ce6494e9d49ede24f4574adafdfe2e78e12fac3699179ac9b2473055f8b846618bdc313694608781ff2a7b0ced9099fddc64b3fd94716c362121ab50472b815c5e1e3632b663867209ece2247e1bc328d233f91448a5b35ef7fb3d5f4220cdad55e1d71589c84cbc1021e9c8c31", 0x8b}, {&(0x7f0000000280)="4fb218dfafacc4e037582d79eddeaf4ab425494b0b74c2d452e1fc81bb108baeadd05d04ab0449cce3db684f3910e02cec3fbd7916ffa5b76dc1147fc996f6c5e0d2c95b838a137b2ac809297a0dd10c330e41bc8a50eb080f8b4b44", 0x5c}], 0x2, &(0x7f0000000300)=[{0x48, 0x107, 0x2, "53eb6e3bd25ba187644d3d069fb124b237b57af459f452d008e41a63f8634c841ca7bbbdf1158acedd8c146528820b1099e4"}, {0x18, 0x114, 0x7, "17b2"}, {0x20, 0x10c, 0x1, "906d604e12e71b4892fac3236ce1"}, {0x10, 0x84, 0x2}, {0x1010, 0x0, 0x3, "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"}, {0xc8, 0x10f, 0x3, "d490685b876456281bc19e6a5b2095d129e8e6a3c5474311971bd20c3a6ed56f1f2009cb7f9d01e27316e461317ba0c26c127c853648ca9ce66945aa06cb97b0a2c692017d079a75986895877900af06d3de4e3c459493f4053bd568cb63b79c44f3fe67f48248b99ea611f62405b2c3630d4ac440e21a5534f5718702c27a7a3d14a1ae62ec26af49531a1013af526836bff77f719059bae96ac5a5864333a1f13a4d7a32f871dc1c817e901658282475664b0868af"}, {0x20, 0x118, 0xd879, "520e1cc04284d1b301"}, {0x110, 0x116, 0x7, "d3471fb1e40cf45006330d27e84844fd8705f2497d66e2ba46679583c50d4a7a72550d32538cf4fa409f55c22c0b31e6e3bd782f70653d6099e4f11cd8ab5f46b86560058a1ca2e796f47ad0a1e6f919cdf93e700ef755c9915a83193cdf07e9de7ade3eb39e3cc0c5c7f306e1594899f09420db92af6d816c71c2713afd19e3daf824da9c15ff3aacb8d0e9d6a15da886ada70f31f1ea96aba79014116b7993ed717f64cd423f94e720c163e8cc899d10978cf9cebf57d02fdeeb5908c471f03940ca791a4f98f142f161094b38974e3325d84f8467029f579757df2b61b00df63870b30d589eda6bd713e9ef68e7880d4fdade70726d903c"}], 0x1298}, 0x84) 19.203894738s ago: executing program 4 (id=2245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xe9}}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @long}, 0x8) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x9e9c6482de834993, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) 18.82813567s ago: executing program 3 (id=2248): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000300)="8c", 0x1}], 0x1}}], 0x2, 0x4004851) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7000000000000006111900000000000c6000000ffff00009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) 18.785580955s ago: executing program 4 (id=2251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1d}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1c}, {0x6, 0x11, 0x5}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000814}, 0x4040491) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x12}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc431}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40802}, 0x8085) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'syz_tun\x00', 0x20}) (async) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000380)) (async) r3 = accept$unix(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) getsockname$unix(r3, &(0x7f0000000480), &(0x7f0000000500)=0x6e) (async) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000580)={0x428, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x82, 0x3, "fa48ccf858275459322e1a694c1d53b40d26ba4f5aebaef7be9f76c59dad84febc727156096c9fda01c7d7c041f2320328b33473ac7e66ac85312f63a1f54d84f281467edfe652041c1ce87274a9b7e6c1a5c27d0558bf9cbbcdb2ae5ee8ccf4eaa860c1d48e7c98a8f5c3a4f280d1cd8f9d2d69345e76a9117f198e3c7d"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "02e88de70b2d40b7ca23daad2a77132b02d16fcceaa8a1f0eceb7314"}}, @TIPC_NLA_NODE_ID={0x3f, 0x3, "354bd81e9d4db60ea938d3915491d74ea8dbe244f8e5826942903cbb1fc50df155bdfe4f7261958809c6a46d1d5375f928f5f0ed672be6e4619b58"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x56}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd0, 0x3, "4b13ad20b1e3c8fd6b355b9f5202d1348f946913b3b2c20d475e74c264df5c897ba07e66a8ed2e2bf6f9ca0eb663e79e87794891d8296728d54cbb05e1f0ba472e8bab103cdbc6374b922636d73a33a787d0a41fa5976150b772ed2f2eb7db5a7110a95756658d0f6a238f9409ee7a7d8aeb8632fc49286a029131e95c3a908149537fbbeaf5ddc8c1fbbdbb44ff698316ffc130064af75fb52a00c904f539963404dbdf0a47926701b2be88bbb367022844a9d2395c9fde9da23c8f774bd4a682806dda2c9b6b12a338af38"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xff, @local, 0x800}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x400, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc046}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}]}]}, 0x428}}, 0x40000) r4 = socket(0x2b, 0x6, 0x9) accept4$x25(r4, &(0x7f0000000a40)={0x9, @remote}, &(0x7f0000000a80)=0x12, 0x80000) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000ac0)) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup(r5, &(0x7f0000000b40)='syz1\x00', 0x200002, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000b80)=0x5cd, 0x4) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000bc0), r0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000c00)={0x8, {{0xa, 0x4e21, 0x5, @mcast1, 0x200}}}, 0x88) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000d00)={r6, r0, 0x1, 0x28, &(0x7f0000000cc0)="d588ca29185f0c25975cf10844bc9a1024d3872f85a607bae1c90037218fab3c3360a55dd3e99a0f", 0x0, 0x9, 0x0, 0x3, 0x8, 0x3, 0x2, 'syz0\x00'}) (async) sendto$packet(r4, &(0x7f0000000dc0)="205cf184cd88a8639431da1a9d43cedcea1ea6f66ceead0b86790c0429fc7a917d0d24e02ee5c86927bd65cd198eeae28a665a528fb0186fd648d7d16fe5a21a4e4820336b72b106404010161d167c6a87641b2fb660f1e5c42e4d9c5f8c69c1368ea0f3f84c587e2f828ef5db31b23c595a5d327a443a823b6de84891696a703130aa8ba72e7288ee456d7c9c0ffa880779938568010bd21c863ae1a929494cfa4b73d1b775a7aba47812f8cb879467ad7e2463d90488c7f08a84", 0xbb, 0x0, 0x0, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r7, 0x29, 0x3d, &(0x7f0000000e80)=""/218, &(0x7f0000000f80)=0xda) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000001180)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f0000001000)={0x120, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4008040}, 0xc000) recvfrom(r4, &(0x7f00000011c0)=""/144, 0x90, 0x10000, &(0x7f0000001280)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @multicast2}, 0x1, 0x3, 0x0, 0x3}}, 0x80) (async) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000001300)=@req={0xfff, 0x81, 0x6, 0x2}, 0x10) (async) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000001340)={0x1, 0x4, 0xe, 0x100, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001380)=0x0) connect$nfc_llcp(r4, &(0x7f00000013c0)={0x27, r8, 0xffffffffffffffff, 0x1, 0x0, 0x3, "a092132742e8bc2a0fb483711966acb52dd9ccda2538350b3cc4952991834a8707175250c2cef18517d0bdeba61c2a7a7c6b7c3435dadb2cd59ab39bd5c415", 0x6}, 0x60) 18.688118491s ago: executing program 3 (id=2252): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4110, 0x100e}], 0x1}, 0x0) 18.655208294s ago: executing program 4 (id=2254): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) 18.564125754s ago: executing program 3 (id=2256): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @broadcast}}, 0xa946, 0x1}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000200)) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x8884) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000480)={0x5, 0x7, 0x8180, 0x9}, 0x8) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000500)={r2, 0x3}, 0x8) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'pim6reg1\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000580)=0x7f, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000005c0), 0x4) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r9) close(r8) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x88, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8005}, 0x4000) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r13, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000a40), &(0x7f0000000a80)=0x10) 18.480813737s ago: executing program 3 (id=2258): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}, @typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r3, &(0x7f00000007c0), &(0x7f00000002c0)=@tcp6, 0x1}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000000, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) 18.432103925s ago: executing program 4 (id=2259): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delrng={0x10, 0x14, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4001885}, 0x800) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 18.31346926s ago: executing program 4 (id=2262): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x3f39, 0x4a3, 0xdb1, 0x7, 0xa6]}, &(0x7f0000000300)=0x54) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x5d) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x2, {0x0, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 18.235685176s ago: executing program 3 (id=2263): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4c748059412a46224b9b5111e496105d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "610aebf8db7a9a954aeef689f8354f5f"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x54}}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x12}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x20, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x23}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) poll(&(0x7f0000000480)=[{r3}], 0x1, 0xffff) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a0100"], 0x100}, 0x0) (async) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x64) 17.92344507s ago: executing program 1 (id=2265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r8 = socket(0x1, 0x803, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000040)="2a000000010000", 0x7) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 17.443149832s ago: executing program 1 (id=2270): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0xd, 0x200480e0, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local}, {0x4e23, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "e9244fc04a5d0a5861b55cff0be058f92dd99fe94244772f1a3261a4ab6f3147", "884500b0eb3131ec456a044e02e6881290c9693bd22477c82be30f283d636d287e466735805180bfea2717a15f784528", "fcf488347f2d1dd087860b227e14439a37fdb701c157ed71f60f7825", {"a28056b94c337bfd564b2b5e1db09cb2", "6ad47b01d4e7faa74106e6d168638e87"}}}}}}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25050000000800090022305e876f751bac04000000"], 0x24}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 17.38575833s ago: executing program 1 (id=2272): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000021401002abd700002dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xb0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x81}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @empty}}}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000010000000000000009000100626f6e64000000000c00028008001c000200000022291cde800a8572614f780700000000000000db741a3a296bee823a7bdf2997b9dc1f5f719a114b8d0fb9dab21f023af0ca42ba9b9ad5e843d713febb322566043b00f1d1efc5290a7b342ca77c54a41a54a3f84bb70a2bf4fa611e15420ed367c1e6aa596ff5ce51dc7653ff474ad019147aa1ed0f14079bc9b8a6aff1b929c13f3158608584124f988c2d040000000000000019c23a2f9325f001c3e8e5cb865684d6d2"], 0x3c}}, 0x4008000) 17.256028909s ago: executing program 1 (id=2274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000002}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5b1ca2a75e09d102f103f9af346004f172146d1d5f472d0cc40dfe2deda9da1fce063c5b03614cd098f76692582df4c42d1333272666b38bf34ed9f239cac72cfce046e4c70b6a367f2518bd11793ef6cc32523e1eec0a49139f0363d6bcb475030545d2cc96e9c74c987fd6f5308f0255c163cd37a2afc5092f01ed02d2e38868b9983adaababa02a2946abd771408f4072a4ed86bda6818be74dd30557daea3d74504034f23acc3e7e30fd7eb29228579bc98e256d1da74f958731039c09376e76f8282bd78437"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x24040080) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000956b00000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.150288271s ago: executing program 1 (id=2275): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r3, 0x1}], 0x1, 0x8001) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x18) socket$nl_audit(0x10, 0x3, 0x9) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) (async, rerun: 64) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (rerun: 64) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) (async, rerun: 32) write$cgroup_subtree(r4, &(0x7f0000000040), 0xfffffc3f) (async, rerun: 32) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0xb7, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="e6ff000000009091b2e29f4fcda2b09d6368535fbb756061db030000000000000000", @ANYRES32=r8, @ANYBLOB="08000500010000001400040074756e6c3000000000000000000000001c00e700d45db24352fd6875313d9a7de85759f58b6d3335d4ff7169"], 0x54}}, 0x0) 17.0488771s ago: executing program 1 (id=2276): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x0, 0x0, 0x8000, 0x4}, 0x48) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) preadv(r0, 0x0, 0x0, 0x5b3d2934, 0xfffffffa) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x3, {0x1, 0x33, 0xf7, 0x3}}, 0x7) socket(0xa, 0x3, 0x0) gettid() 16.733455253s ago: executing program 0 (id=2277): syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0xff, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x73}}}}}}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) (rerun: 32) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff}, 0x1c) 16.69448355s ago: executing program 0 (id=2278): socket(0x2, 0x80805, 0x0) socket(0x840000000002, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) ioctl$sock_SIOCINQ(r0, 0x5411, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f00000005c0)={{'\x00', 0x2}, {0x80000001}, 0x0, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="811a7e5633b76f3a0e697f6134dc2d4136d508975286494d495591ff416f1843286f9392d12b3a5eb9c16e96f754ff80cec573d6aff958c91ca415b8af855601d475a63b3af33c727e234ac39e5dbee905dcaefd01b809172f0a6d14224a7eadb02b70524065050de869b8", 0x6b, 0x0, &(0x7f0000000300)={0x2, 0x160, {0x0, 0xc, 0x95, "2a3c327b50ce42af51706b3aaaf78950717db943ca55d065a4754ed549bc00d5ba1ed4d92cae16065d2a2632c3bfc2bcdd60351cc8c4eb072bc22ff12feae1329343b3be7733da744f920602c62ef09633d8db113e5a0902fef91722ff69746d6921902dcae8eab4a61d1c467ba9ec99f704cff14ea47b4c1dbdded765414752d813874a98907a606aa387dc5248f221841a1dbfae", 0xbe, "2e4e48ed4a41b4b3f7af8ed74c0d948d1ca1697014f3d6efb00712306711543a2bb73bdbbc31b29f25a06f2db31cf97733469463b12bd5c8a9940f2fd7c4b3dc0bf1f5d701774435c6f7fd24d1783eb09c83145180b34992bb023c70dd49fe8242b77e35a7ca1952d3afbb1ab9bcded69947092c59b7a0d96d85335a5a68ffd0f17d99d3c6f6a346fc80f0dd182db61a09b6c9a2fad1e515cf86f0d859d61fe63697c022d7f8cc9e594238bc39fb6b411dc363e48842ab2a52c614b39508"}, 0xb5, "65fbf14fbcbb5a80494da8265554d24af5eb18eb927cfe5294bfde8641ea98f554d7c22a6875edf13d0e4d169802f161b42d60bd3952107019922bc198b4b741af124de204b9807b8b6f4e474cc8686c032bbb5f5861f4f359985cf5db8b4eff9ef84ba7ac35afc24b35375ca565f31c7217b387e0a34ffa5bf1ce844b9675bdd2d0b1a149d51c50643030f285166c55fca1ccf92768f95eb41c2ab4930c86a82ffeb7f07fc2e91e9b5255c3b92a92541341f9ee4d"}, 0x221}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB="08000400b9080000"], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r4], 0x44}}, 0x2000800) 16.54398221s ago: executing program 0 (id=2279): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x36, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB=';\x00\x00\x00\x00\x00\x00)'], 0x8) (async, rerun: 32) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 64) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x80) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) (rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x40, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004090}, 0x20040010) (async, rerun: 64) getsockopt$sock_int(r3, 0x1, 0x10, 0x0, &(0x7f0000000240)) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)={0x524, 0x12, 0x400, 0x70bd27, 0x25dfdbfc, {0x2b, 0x55, 0x7, 0x6, {0x4e21, 0x4e23, [0x8, 0x8d, 0x6, 0x200], [0x1000, 0xb45, 0x400, 0x7f], 0x0, [0x81, 0x9]}, 0x3ff, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "225d7892910634f14a4888a2587dae90ec5754874fd786"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "ad31185328e9dd86376934bad936bf7c80037d8aa8b862ba5c8dbecc04ab1cffc1fec7728f3567a875a3f6a555d66281b8349dce6bc3ab961db352802267a06c81ffc47976d357857ef9e1bfec3362bd561ad1ad9fea4fa414f0133dc5798043aa2559cbd5ee6776f469000ede51a43a803352fae72b2054daae3ab697c1f702d6db8f55139411f8a634865fbf7dbbe08fbbe5dbdd3eb6c8e325ac8fb9c77ef7c3baa52347642070c2cef155c8386a79e4bae4d241e9a0506a2970b7807bb2d79c8f6f38a8a8c0577d4963a4ab1bf8c06ae1215c65ebd54bfb478e12e67dde95ae417f2d88"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "99bb66eab1b39dcdb9f80b89fd4f954f4e483fc0ed511f4811222a45ea3d04f8a97fa0b295834a7171a61f1cd96d87ffbe390bda1358e878f6557594ed4585478d51941eeabb9339055e68e4761f066dc0d60f2ab3cc3ad6673c672f29875750be3f10307aaea2d03bf9fc05dcf94ab39062609ce20271e16f07b2d7122db3e74d60349d95d0ca9b85747be483aa0d8b8e74ec4d861e68eeffbe"}, @INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "635ddb517979c1e1596715a425444a052c0d64ed2056970fc0b29942fe774e711c4ef4cf94cecc0961cc010f52235160d65461f21af65abf424aff65de8639b3116fd1a85ee31fa57a9fa815f62c90684eaea87099fafea27e69f84580dd3c8dbbfd8c2cf6209fce84c6413918a1236c8678072b9ad7553efbeacda2577a44686f79b59fa03dfe8fd0c6aa6c284a7b9ca6173a23e6cd58b1465e6cf3af58bce9167e1a6b76b0fe98ccffee01e2468859cfabac8fb52bd3b6967df1faeaab1151b6497868a7615d272dbcc3b707"}, @INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "f5ddabc7f6f925d7833d452d058cc721dc1ce57ffb8a276a6c33a0ec80ebf87d335f93983d2bbbdc245927a0b2e065d66d06bbbb375ac3"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "f0cafe48d2783e3b582cbe9a221f260af1607022433b2844aeab013e56ef8a8b3696cf377ab92898df4f337703bc24603f28f89b734e4855a66d6a533f8dc1ef4bd266d37f3a7275b80fb0a1"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "6a890054dfda80bc1fc129a689cb46827c84f0b1c6c215e8e7b2fce6927834bfe2810f55bc287fe48b1d0d80ebfce8eb2c8c3b30ad3737788702e972ad2047c20ffb8ec8eeb5173134b7eff6e6cfd0945caf19b72f2b20e4ea6b024be0221435965e4352f88caea206ee497ffa5f99f50966bac7aa6f4a5801aef40ba90f0c37dbcd79281d389d1842b0f0c545eb3e98a23435045e765100bc57b2b9e779d2801767eef2cd9d9c949f524360956189f08f893a41912373c1f393524a4ae68b00fa78f775487a3555329a93"}, @INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}]}, 0x524}, 0x1, 0x0, 0x0, 0x24000}, 0x20004001) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001600010a0000000000000000dd93"], 0x20}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 16.534786023s ago: executing program 0 (id=2280): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r1, @ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="7ae5c0848f9ced4b43f673aea67b25ffaefe13da116e5d26ff8fd089c53a1738fdb6c54b88aced8daa86b69c0d3157434d1256141f3e35963aa5ecededd780e2d1ef883ba6cb652b887ca615912ba81214afe30d356608a3be2c", @ANYRES8, @ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES64=r0], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x69b1f5e5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4236c85a}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x3c, 0xe2, 0x1}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 16.328045921s ago: executing program 0 (id=2282): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x800}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000010) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x800}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000010) (async) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) (async) 16.194574524s ago: executing program 0 (id=2284): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2, 0xb, 0x7, 0x5, 0x4, 0x4, 0x7}, 0x9c) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r5}, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) r6 = socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) getsockname$l2tp(r7, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$nl_route(0x10, 0x3, 0x0) socket(0x2c, 0x5, 0xfffffc01) 15.957634362s ago: executing program 2 (id=2285): r0 = socket$isdn_base(0x22, 0x3, 0x0) accept(r0, 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0x9}) 15.864802611s ago: executing program 2 (id=2286): r0 = socket(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f00000001c0)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100, 0x1}, 0xe) (async) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000500000000de25000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x107}) (async) getpeername(r1, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237788bb71f36b177a80fb78c7699c74e891a0c7"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @bcast, @netrom={'nr', 0x0}, 0x2, 'syz1\x00', @default, 0x5, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, 0x0, 0x80) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000140)) 15.847683109s ago: executing program 2 (id=2287): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYRES32=r0], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @private=0xa010101}}, 0x1e) 15.774091354s ago: executing program 2 (id=2288): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014c3ff0000120800030043000040a80019000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f6d7f3ef48286112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaac99eddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb06000000588a6364", 0xd8}], 0x1}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x1, 0x9, 0x4, @mcast1, @remote, 0x8000, 0x20, 0x3, 0xfffffe10}}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x9, r2, 0x40}, {&(0x7f0000000280)=""/67, 0x43}, &(0x7f0000000300), 0x24}, 0xa0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, 'K/'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xe3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044004}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1f) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@generic={0x25, "704678b7a795613729ae34d3eedba02dbb6f6da37ca8ba715a7d1b31433bff7a59e6fe936fda8a9843c0e8053b3fe83f326d937a87829ab6105b09ba3210292a30dc921bcf5b629cb0d82d8cd53204a44adbe32d6cb42007b631ac89daf2f0a2805554a34b1507a8cd86f8f01c82f516c479945706ee56a8a64ae4382689"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="5f342be74bb5bb1e92b4f83a702862f523664f4029821fde2e4bae5fc12024b8fd40519e066f28f6adb9af6b0ed5df766c948658d0", 0x35}], 0x1, &(0x7f0000000280)}, 0x4c040) 15.552995942s ago: executing program 2 (id=2289): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) (async, rerun: 64) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 64) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d8, 0x13, 0x100, 0x70bd27, 0x25dfdbff, {0xa, 0x6, 0xe, 0x79, {0x4e20, 0x4e20, [0x3, 0xf, 0x88a, 0x91], [0xfffffff8, 0xfffffff4, 0xfffffff8, 0x8001], 0x0, [0x4]}, 0x0, 0x6da0}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "de4ae87dc54db9fe990f2f007658b77195fe711403b6ea53a320037ed540b0f970122d229755ff69fe60f395e8165632fcbd4794ea564d7c3b7fbb27dd313c7506e3536c1d7059a2ef50f1582ba7c29c68e1be6d7955e0d11477f3a18bed46572c5bcc9b8b801a4c5dbff2c02d1b782b6b1f7318cbc60ea94679a4136cdd869214dd36da6a4610fa47e6ce28817b64cc655dff4f807198335adcc740fb22236d13e4c4afd748d2f38e"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "e4dacc6a0826fe9724113bd2056b37c2961849b7b1e2f75be4cdcecb5bc11728152ab3a307da688f904ca9f90235edda1fac29bd64cd50331d3cb1f49e4ed9772db6c04c5f"}, @INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "186cabbdacfbbfff2c03692fb2da4ab7a93f51c4b79d5a85552a24c55c08b33e4e62e8a241bdd95a00a603ab566227373d67f66057792fee7979ff79e72f1bddbe411f9f0a207936aa73666b0dc8b5118eb7499716223eb86c9685"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "c9f488130fe3546fe38e73899d0cdb4f586643d95629176421a7432257d7d67465acf3ed2cb3fdd84caa"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000081}, 0x20050041) 15.545020725s ago: executing program 2 (id=2290): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2, 0x10, 0x5, 0x8, 0x41, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x7, 0x8, 0x7fffffff}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x7, 0xb}, {0x3, 0xf}, {0xfff1, 0xa}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r5, r5, 0x2f, 0x20, 0x4}, 0x20) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xc, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x4008040, &(0x7f00000000c0)={0x11, 0xe56930649afa540, r10, 0x1, 0xd8}, 0x14) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.500711404s ago: executing program 32 (id=2263): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "4c748059412a46224b9b5111e496105d"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "610aebf8db7a9a954aeef689f8354f5f"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x54}}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x0, 0x0, 0x168, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x12}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x20, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x23}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) poll(&(0x7f0000000480)=[{r3}], 0x1, 0xffff) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a0100"], 0x100}, 0x0) (async) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x64) 2.462639326s ago: executing program 33 (id=2262): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x3f39, 0x4a3, 0xdb1, 0x7, 0xa6]}, &(0x7f0000000300)=0x54) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r4, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x5d) connect$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x2, {0x0, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 1.436419254s ago: executing program 34 (id=2276): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x0, 0x0, 0x8000, 0x4}, 0x48) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) preadv(r0, 0x0, 0x0, 0x5b3d2934, 0xfffffffa) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x3, {0x1, 0x33, 0xf7, 0x3}}, 0x7) socket(0xa, 0x3, 0x0) gettid() 1.006672164s ago: executing program 35 (id=2284): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @local}}, 0x2, 0xb, 0x7, 0x5, 0x4, 0x4, 0x7}, 0x9c) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r5}, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) r6 = socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket(0x15, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x4884) getsockname$l2tp(r7, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$nl_route(0x10, 0x3, 0x0) socket(0x2c, 0x5, 0xfffffc01) 0s ago: executing program 36 (id=2290): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2, 0x10, 0x5, 0x8, 0x41, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x7, 0x8, 0x7fffffff}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x7, 0xb}, {0x3, 0xf}, {0xfff1, 0xa}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r5, r5, 0x2f, 0x20, 0x4}, 0x20) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xc, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x4008040, &(0x7f00000000c0)={0x11, 0xe56930649afa540, r10, 0x1, 0xd8}, 0x14) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.1.33'. [ 97.971769][ T6056] netlink: 'syz.2.35': attribute type 64 has an invalid length. [ 98.036544][ T6058] tipc: Enabling of bearer rejected, failed to enable media [ 98.156327][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.589711][ T6087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.098988][ T6106] vlan1: entered allmulticast mode [ 99.124443][ T6106] veth0_vlan: entered allmulticast mode [ 99.500927][ T6115] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 100.360200][ T6149] __nla_validate_parse: 7 callbacks suppressed [ 100.360219][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.4.63'. [ 100.529397][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 100.842749][ T6176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.851957][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 100.906255][ T6176] bond0: (slave rose0): Enslaving as an active interface with an up link [ 101.088636][ T6178] hsr_slave_1 (unregistering): left promiscuous mode [ 101.126969][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.71'. [ 101.157103][ T6190] C: renamed from team_slave_0 (while UP) [ 101.183326][ T6190] netlink: 'syz.2.73': attribute type 1 has an invalid length. [ 101.214822][ T6178] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 101.244624][ T6190] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 101.380358][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 102.205121][ T6242] netlink: 'syz.3.83': attribute type 10 has an invalid length. [ 102.245510][ T6242] netlink: 'syz.3.83': attribute type 10 has an invalid length. [ 102.269080][ T6247] netlink: 'syz.4.82': attribute type 1 has an invalid length. [ 102.571477][ T6255] warning: `syz.0.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.617080][ T6255] netlink: 'syz.0.86': attribute type 3 has an invalid length. [ 102.969623][ T6280] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 103.360615][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 103.551917][ T6301] lo: entered promiscuous mode [ 103.581446][ T6301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.906619][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 104.183501][ T6319] hsr_slave_0 (unregistering): left promiscuous mode [ 104.216299][ T6335] openvswitch: netlink: IP tunnel TTL not specified. [ 105.043612][ T6363] netlink: 220 bytes leftover after parsing attributes in process `syz.1.114'. [ 105.068509][ T6363] netlink: 220 bytes leftover after parsing attributes in process `syz.1.114'. [ 105.196154][ T6366] bond1: ARP target 1.0.0.0 is already present [ 105.211502][ T6366] bond1: option arp_ip_target: invalid value (1) [ 105.237503][ T6366] bond1 (unregistering): Released all slaves [ 105.468727][ T6375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.582524][ T6381] xt_l2tp: missing protocol rule (udp|l2tpip) [ 105.844656][ T6400] netlink: 'syz.2.123': attribute type 1 has an invalid length. [ 105.874557][ T6400] netlink: 96 bytes leftover after parsing attributes in process `syz.2.123'. [ 105.914679][ T6400] netlink: 1 bytes leftover after parsing attributes in process `syz.2.123'. [ 106.091602][ T6405] netlink: 7 bytes leftover after parsing attributes in process `syz.2.123'. [ 106.159665][ T6405] erspan0: entered promiscuous mode [ 106.317589][ T6418] bond1: Unable to set up delay as MII monitoring is disabled [ 106.356585][ T6418] bond1 (unregistering): Released all slaves [ 106.575224][ T6435] netlink: 28 bytes leftover after parsing attributes in process `syz.1.129'. [ 106.651735][ T6437] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.129'. [ 106.694444][ T6437] openvswitch: netlink: Missing key (keys=40, expected=100) [ 106.737073][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.748781][ T6435] bridge_slave_1: left allmulticast mode [ 106.798621][ T6435] bridge_slave_1: left promiscuous mode [ 106.846545][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.116330][ T6454] bond1: option resend_igmp: invalid value (32767) [ 107.123101][ T6454] bond1: option resend_igmp: allowed values 0 - 255 [ 107.146970][ T6454] bond1 (unregistering): Released all slaves [ 107.243278][ T6470] netlink: 'syz.3.136': attribute type 2 has an invalid length. [ 107.279311][ T6470] netlink: 'syz.3.136': attribute type 8 has an invalid length. [ 107.288833][ T6470] netlink: 132 bytes leftover after parsing attributes in process `syz.3.136'. [ 107.532592][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 107.572423][ T6482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 107.611680][ T6482] netlink: 'syz.0.139': attribute type 6 has an invalid length. [ 107.765183][ T6493] netlink: 'syz.1.143': attribute type 11 has an invalid length. [ 107.775037][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 107.781218][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.797485][ T6493] netlink: 224 bytes leftover after parsing attributes in process `syz.1.143'. [ 107.864407][ T6499] bond0: entered promiscuous mode [ 107.879952][ T6499] bond_slave_0: entered promiscuous mode [ 107.898691][ T6499] bond_slave_1: entered promiscuous mode [ 107.918936][ T6499] batadv0: entered promiscuous mode [ 107.926740][ T6499] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 107.937556][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.023334][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.049455][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.655290][ T6537] bridge0: entered allmulticast mode [ 109.000402][ T6548] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 109.407031][ T6558] trusted_key: syz.0.161 sent an empty control message without MSG_MORE. [ 109.487208][ T6571] geneve2: entered promiscuous mode [ 109.504436][ T6571] geneve2: entered allmulticast mode [ 109.525834][ T1102] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 109.570186][ T1102] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 109.606612][ T1102] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 109.668152][ T1102] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 109.854960][ T6588] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 109.998748][ T6587] bridge1: entered promiscuous mode [ 110.033315][ T6587] bridge1: entered allmulticast mode [ 110.061003][ T6587] team0: Port device bridge1 added [ 110.086670][ T6591] tipc: Enabled bearer , priority 0 [ 110.118705][ T6596] bridge0: port 3(team0) entered blocking state [ 110.154529][ T6596] bridge0: port 3(team0) entered disabled state [ 110.181692][ T6596] team0: entered allmulticast mode [ 110.190440][ T6596] team_slave_0: entered allmulticast mode [ 110.222681][ T6596] team_slave_1: entered allmulticast mode [ 110.245501][ T6596] team0: entered promiscuous mode [ 110.257021][ T6596] team_slave_0: entered promiscuous mode [ 110.272765][ T6596] team_slave_1: entered promiscuous mode [ 110.301074][ T6596] bridge0: port 3(team0) entered blocking state [ 110.307731][ T6596] bridge0: port 3(team0) entered forwarding state [ 110.330149][ T6590] tipc: Disabling bearer [ 110.566752][ T6628] xt_TCPMSS: Only works on TCP SYN packets [ 110.858171][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.861963][ T6637] delete_channel: no stack [ 110.872405][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.882217][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.911423][ T6647] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 111.082280][ T6655] __nla_validate_parse: 8 callbacks suppressed [ 111.082310][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 111.384787][ T6672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.471563][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 111.577239][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.768431][ T6684] delete_channel: no stack [ 111.903450][ T6693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.912063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.454559][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.633907][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.660748][ T6726] netlink: 'syz.1.213': attribute type 6 has an invalid length. [ 112.694659][ T6729] netlink: 'syz.1.213': attribute type 6 has an invalid length. [ 112.715702][ T6729] netlink: 'syz.1.213': attribute type 6 has an invalid length. [ 112.723982][ T6729] netlink: 'syz.1.213': attribute type 6 has an invalid length. [ 112.753023][ T6731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.212'. [ 113.148584][ T6758] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 3, id = 0 [ 113.620918][ T6777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.226'. [ 113.647302][ T6777] bond0: entered promiscuous mode [ 113.652491][ T6777] bond_slave_0: entered promiscuous mode [ 113.678606][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.709958][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 113.758819][ T6777] bond_slave_1: entered promiscuous mode [ 113.794572][ T6777] ip6gretap0: entered promiscuous mode [ 113.805973][ T6777] debugfs: 'hsr1' already exists in 'hsr' [ 113.854355][ T6777] Cannot create hsr debugfs directory [ 113.862755][ T6777] hsr1: entered promiscuous mode [ 113.920131][ T6791] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.230'. [ 114.147273][ T6799] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.232'. [ 114.563505][ T6818] netlink: 9 bytes leftover after parsing attributes in process `syz.0.237'. [ 115.349566][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 115.497869][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 115.580557][ T6850] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 115.614296][ T6850] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 115.760564][ T6861] ksmbd: Unknown IPC event: 3, ignore. [ 115.831016][ T6851] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 115.982609][ T3660] net_ratelimit: 3 callbacks suppressed [ 115.982632][ T3660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.011370][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.023167][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.146252][ T6871] __nla_validate_parse: 1 callbacks suppressed [ 116.146272][ T6871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.253'. [ 116.163437][ T6871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.253'. [ 116.173216][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.253'. [ 116.483167][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 116.579355][ T6891] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 116.617456][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.657188][ T6891] netlink: 148 bytes leftover after parsing attributes in process `syz.0.257'. [ 116.691398][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 116.715684][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 116.751197][ T6899] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.259'. [ 116.794436][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.090117][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 117.815995][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.080192][ T6891] netlink: 148 bytes leftover after parsing attributes in process `syz.0.257'. [ 118.374000][ T6927] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 118.558182][ T6941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.603718][ T6941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.632771][ T6941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.641654][ T6948] v: renamed from vlan0 [ 118.645429][ T6947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.660310][ T6943] netlink: 'syz.0.270': attribute type 1 has an invalid length. [ 118.724600][ T6945] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 119.324170][ T6984] xt_SECMARK: invalid mode: 9 [ 119.718088][ T6990] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 119.744520][ T6990] syzkaller1: Refused to change device type [ 120.105659][ T7021] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 120.515804][ T7047] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 120.527235][ T7049] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 120.843623][ T7060] netlink: 'syz.3.301': attribute type 15 has an invalid length. [ 120.886890][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 120.899580][ T7060] netlink: 'syz.3.301': attribute type 15 has an invalid length. [ 120.911382][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 120.944454][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 120.986129][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 121.100290][ T13] net_ratelimit: 81 callbacks suppressed [ 121.100311][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.118427][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.127912][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.136564][ T108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.147076][ T7065] tipc: Started in network mode [ 121.156387][ T7065] tipc: Node identity 2a9b269d7d22, cluster identity 4711 [ 121.164004][ T7065] tipc: Enabled bearer , priority 0 [ 121.172709][ T7065] syzkaller0: entered promiscuous mode [ 121.178988][ T7065] syzkaller0: entered allmulticast mode [ 121.199840][ T7065] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 121.231214][ T7065] tipc: Resetting bearer [ 121.241552][ T7064] tipc: Resetting bearer [ 121.333594][ T7064] tipc: Disabling bearer [ 121.581729][ T7087] __nla_validate_parse: 12 callbacks suppressed [ 121.581751][ T7087] netlink: 300 bytes leftover after parsing attributes in process `syz.4.309'. [ 121.760961][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 121.974621][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.987705][ T7095] netlink: 'syz.1.311': attribute type 7 has an invalid length. [ 122.077599][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 122.081427][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 122.102572][ T7106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.314'. [ 122.193700][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 122.247770][ T7113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.377577][ T108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.444068][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.320'. [ 122.496327][ T7113] bridge0: port 2(ipvlan2) entered blocking state [ 122.502962][ T7113] bridge0: port 2(ipvlan2) entered disabled state [ 122.523067][ T7113] ipvlan2: entered allmulticast mode [ 122.534661][ T7113] bridge0: entered allmulticast mode [ 122.547611][ T7113] ipvlan2: left allmulticast mode [ 122.554145][ T7113] bridge0: left allmulticast mode [ 123.035708][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.193662][ T7148] netlink: 32 bytes leftover after parsing attributes in process `syz.2.325'. [ 123.231525][ T7144] ip6gre0: Master is either lo or non-ether device [ 124.054847][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.232650][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.859089][ T7154] veth0: entered promiscuous mode [ 124.961337][ T7159] veth0: left promiscuous mode [ 125.174501][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 125.216569][ T7184] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20002 [ 125.328378][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 125.431606][ T7200] netlink: 'syz.1.337': attribute type 10 has an invalid length. [ 125.461378][ T7185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.610434][ T7196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.659610][ T7196] bond1: (slave bond0): making interface the new active one [ 125.677040][ T7196] bond1: (slave bond0): Enslaving as an active interface with an up link [ 125.704876][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.729949][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.737419][ T7200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.751697][ T7211] IPVS: length: 92 != 24 [ 125.765091][ T7200] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 125.775433][ T7185] bridge0: port 2(syz_tun) entered blocking state [ 125.782120][ T7185] bridge0: port 2(syz_tun) entered disabled state [ 125.790736][ T7215] netlink: 'syz.2.343': attribute type 2 has an invalid length. [ 125.800613][ T7215] netlink: 'syz.2.343': attribute type 8 has an invalid length. [ 125.804426][ T7185] syz_tun: entered allmulticast mode [ 125.835667][ T7185] syz_tun: entered promiscuous mode [ 125.865980][ T7185] bridge0: port 2(syz_tun) entered blocking state [ 125.872592][ T7185] bridge0: port 2(syz_tun) entered forwarding state [ 126.135645][ T5949] net_ratelimit: 3 callbacks suppressed [ 126.135666][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.180213][ T7220] bridge3: entered promiscuous mode [ 126.186194][ T7220] bridge3: entered allmulticast mode [ 126.214089][ T7220] team0: Port device bridge3 added [ 126.279538][ T7216] syzkaller1: entered promiscuous mode [ 126.377573][ T7216] syzkaller1: entered allmulticast mode [ 126.421582][ T7229] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 126.727463][ T7237] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 126.853225][ T7247] tipc: Enabling not permitted [ 126.862878][ T3660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.869197][ T7247] tipc: Enabling of bearer rejected, failed to enable media [ 126.882028][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.891049][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.952395][ T7247] __nla_validate_parse: 7 callbacks suppressed [ 126.952417][ T7247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.351'. [ 127.048054][ T7256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.131221][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 127.182340][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.192656][ T7263] netlink: 5 bytes leftover after parsing attributes in process `syz.0.354'. [ 127.242902][ T7263] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 127.260283][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.289445][ T7263] 0ªî{X¹¦: entered allmulticast mode [ 127.296424][ T7263] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 127.461450][ T7274] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 127.497143][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.359'. [ 127.507099][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 127.579828][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.359'. [ 127.597945][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 127.607796][ T7277] raw_sendmsg: syz.1.360 forgot to set AF_INET. Fix it! [ 127.675260][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.359'. [ 127.707377][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 127.737096][ T5838] Bluetooth: hci4: command tx timeout [ 127.804892][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.359'. [ 127.931077][ T7294] x_tables: duplicate underflow at hook 1 [ 127.941675][ T7297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.986037][ T7294] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 128.056090][ T7293] delete_channel: no stack [ 128.261143][ T7307] IPv6: sit1: Disabled Multicast RS [ 128.502849][ T7307] syzkaller0: entered promiscuous mode [ 128.520515][ T7307] syzkaller0: entered allmulticast mode [ 129.004389][ T7342] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 130.133552][ T7348] netlink: 'syz.3.379': attribute type 3 has an invalid length. [ 130.165214][ T7343] syzkaller1: entered promiscuous mode [ 130.170745][ T7343] syzkaller1: entered allmulticast mode [ 130.358432][ T7360] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 130.550039][ T7361] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 130.587619][ T7361] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 130.600594][ T7361] bond1: (slave xfrm1): making interface the new active one [ 130.610634][ T7361] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 130.782880][ T7382] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 130.840030][ T7386] syz_tun: entered allmulticast mode [ 131.335201][ T5949] net_ratelimit: 4 callbacks suppressed [ 131.335230][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.349569][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.409348][ T7408] netlink: 'syz.1.400': attribute type 83 has an invalid length. [ 132.017298][ T7428] __nla_validate_parse: 13 callbacks suppressed [ 132.017319][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.404'. [ 132.049798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.065766][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.070591][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.1.404'. [ 132.086261][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.105060][ T7438] netlink: 'syz.2.406': attribute type 12 has an invalid length. [ 132.114494][ T7438] netlink: 'syz.2.406': attribute type 29 has an invalid length. [ 132.134611][ T7438] netlink: 148 bytes leftover after parsing attributes in process `syz.2.406'. [ 132.175692][ T7438] netlink: 59 bytes leftover after parsing attributes in process `syz.2.406'. [ 132.375698][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.867219][ T1102] nci: nci_ntf_packet: unsupported ntf opcode 0xf2e [ 133.259199][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.274403][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.380176][ T7507] xt_bpf: check failed: parse error [ 133.410196][ T7510] netlink: 'syz.3.422': attribute type 10 has an invalid length. [ 133.424746][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.458111][ T7510] bridge0: port 3(team0) entered blocking state [ 133.466523][ T7510] bridge0: port 3(team0) entered disabled state [ 133.473519][ T7510] team0: entered allmulticast mode [ 133.480785][ T7510] team_slave_0: entered allmulticast mode [ 133.489103][ T7510] team_slave_1: entered allmulticast mode [ 133.538994][ T7510] team0: entered promiscuous mode [ 133.545516][ T7510] team_slave_0: entered promiscuous mode [ 133.571265][ T7510] team_slave_1: entered promiscuous mode [ 133.596762][ T7510] bridge0: port 3(team0) entered blocking state [ 133.603251][ T7510] bridge0: port 3(team0) entered forwarding state [ 133.701519][ T7523] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 133.917601][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.429'. [ 134.148626][ T7541] Bluetooth: MGMT ver 1.23 [ 134.257687][ T7553] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 134.375419][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.454605][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.299465][ T7589] syzkaller0: entered promiscuous mode [ 135.317182][ T7589] syzkaller0: entered allmulticast mode [ 135.469823][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 135.517454][ T7604] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 135.649918][ T7608] netlink: 'syz.3.451': attribute type 1 has an invalid length. [ 135.747314][ T7613] netlink: 'syz.1.452': attribute type 24 has an invalid length. [ 135.783854][ T7608] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.801350][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 135.841422][ T7616] netlink: 'syz.2.454': attribute type 64 has an invalid length. [ 135.874454][ T7616] netlink: 5 bytes leftover after parsing attributes in process `syz.2.454'. [ 136.046100][ T7627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.455'. [ 136.169700][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.458'. [ 136.276263][ T7641] pim6reg1: entered promiscuous mode [ 136.281712][ T7641] pim6reg1: entered allmulticast mode [ 136.536992][ T5828] net_ratelimit: 4 callbacks suppressed [ 136.537011][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.043295][ T7688] tipc: Enabled bearer , priority 0 [ 137.045163][ T7689] __nla_validate_parse: 6 callbacks suppressed [ 137.045209][ T7689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.470'. [ 137.398354][ T7707] wg1 speed is unknown, defaulting to 1000 [ 137.405934][ T7707] wg1 speed is unknown, defaulting to 1000 [ 137.415415][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.462531][ T7707] wg1 speed is unknown, defaulting to 1000 [ 137.504044][ T7707] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 137.569752][ T7707] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 137.587171][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.662054][ T7707] wg1 speed is unknown, defaulting to 1000 [ 137.672825][ T7707] wg1 speed is unknown, defaulting to 1000 [ 137.688289][ T7707] wg1 speed is unknown, defaulting to 1000 [ 137.710471][ T7707] wg1 speed is unknown, defaulting to 1000 [ 137.727108][ T7707] wg1 speed is unknown, defaulting to 1000 [ 138.038543][ T7740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.486'. [ 138.055510][ T5949] tipc: Node number set to 1554831334 [ 138.174695][ T7735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.487'. [ 138.390023][ T7750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.493'. [ 138.558573][ T7753] netlink: 68 bytes leftover after parsing attributes in process `syz.0.494'. [ 138.614975][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.054080][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'. [ 139.532936][ T7797] netlink: 40 bytes leftover after parsing attributes in process `syz.3.505'. [ 139.655098][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.677730][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.508'. [ 140.025601][ T7807] bond2 (unregistering): Released all slaves [ 140.271841][ T7823] netlink: 144 bytes leftover after parsing attributes in process `syz.4.513'. [ 140.293740][ T7823] netlink: 24 bytes leftover after parsing attributes in process `syz.4.513'. [ 140.460304][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.483540][ T7832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.557035][ T7832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.861069][ T7840] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 141.150524][ T7868] syzkaller0: entered promiscuous mode [ 141.157309][ T7868] syzkaller0: entered allmulticast mode [ 170.369888][ T7900] __nla_validate_parse: 1 callbacks suppressed [ 170.369908][ T7900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.536'. [ 170.407003][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.537'. [ 170.414459][ T7900] netlink: 32 bytes leftover after parsing attributes in process `syz.0.536'. [ 170.701338][ T7920] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 170.815279][ T7920] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.839681][ T7923] bond3: (slave geneve2): making interface the new active one [ 170.849579][ T7923] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 170.883779][ T7929] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 170.912952][ T7926] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 170.920621][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 170.936927][ T7926] bond2 (unregistering): Released all slaves [ 171.059881][ T7936] bond2: (slave geneve3): making interface the new active one [ 171.069954][ T7936] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 171.079202][ T6227] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 171.101143][ T6227] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 171.144400][ T6227] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 171.153264][ T6227] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 171.371136][ T7949] block nbd0: Unsupported socket: should be TCP or UNIX. [ 171.528701][ T7956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.553'. [ 171.852811][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 171.889273][ T7982] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 171.902968][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 172.078120][ T7990] netlink: 'syz.1.562': attribute type 11 has an invalid length. [ 172.151611][ T7990] netlink: 'syz.1.562': attribute type 11 has an invalid length. [ 172.174756][ T7990] netlink: 224 bytes leftover after parsing attributes in process `syz.1.562'. [ 172.248455][ T8000] netlink: 348 bytes leftover after parsing attributes in process `syz.4.565'. [ 172.403711][ T7999] netlink: 'syz.0.564': attribute type 1 has an invalid length. [ 172.422372][ T7999] netlink: 224 bytes leftover after parsing attributes in process `syz.0.564'. [ 172.590438][ T30] audit: type=1804 audit(1765421387.966:2): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.568" name="/newroot/103/cgroup.controllers" dev="tmpfs" ino=539 res=1 errno=0 [ 172.643285][ T30] audit: type=1800 audit(1765421387.976:3): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.568" name="cgroup.controllers" dev="tmpfs" ino=539 res=0 errno=0 [ 172.935098][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.275734][ T5887] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 173.466288][ T8046] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 173.495505][ T3660] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 173.576439][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.975456][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.055227][ T5955] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 174.144507][ T8071] tipc: Enabling of bearer rejected, failed to enable media [ 174.199964][ T8071] xt_recent: Unsupported userspace flags (000000b1) [ 174.226389][ T149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.258890][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.273574][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.435185][ T8075] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 174.535692][ T1316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 174.564687][ T1316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 174.854503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.860167][ T8094] bond1: option mode: unable to set because the bond device has slaves [ 174.869074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.981945][ T8098] bond1: option mode: unable to set because the bond device has slaves [ 175.015114][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.238939][ T8107] tipc: Enabling of bearer rejected, failed to enable media [ 175.258637][ T916] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 176.430802][ T8152] __nla_validate_parse: 4 callbacks suppressed [ 176.430821][ T8152] netlink: 64 bytes leftover after parsing attributes in process `syz.4.603'. [ 176.494303][ T8152] block nbd0: not configured, cannot reconfigure [ 176.517309][ T8151] netlink: 64 bytes leftover after parsing attributes in process `syz.4.603'. [ 176.542054][ T8151] block nbd0: not configured, cannot reconfigure [ 177.062561][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 177.147681][ T8177] netlink: 'syz.0.612': attribute type 33 has an invalid length. [ 177.183022][ T8177] netlink: 152 bytes leftover after parsing attributes in process `syz.0.612'. [ 177.197430][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 177.684505][ T8197] bond0: entered promiscuous mode [ 177.690835][ T8197] bond_slave_0: entered promiscuous mode [ 177.697857][ T8197] bond_slave_1: entered promiscuous mode [ 178.134657][ T916] net_ratelimit: 5 callbacks suppressed [ 178.134681][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.303036][ T8202] netlink: 'syz.1.619': attribute type 2 has an invalid length. [ 178.355640][ T8202] 9: entered promiscuous mode [ 178.534876][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 178.757746][ T8223] block nbd2: not configured, cannot reconfigure [ 178.767252][ T8223] netlink: 'syz.2.624': attribute type 1 has an invalid length. [ 178.779304][ T8223] netlink: 'syz.2.624': attribute type 1 has an invalid length. [ 179.180015][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.631'. [ 179.192015][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.211452][ T8238] xt_TPROXY: Can be used only with -p tcp or -p udp [ 179.661264][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.682104][ T8257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.637'. [ 179.711501][ T8261] netlink: 'syz.0.639': attribute type 6 has an invalid length. [ 179.767240][ T8262] openvswitch: netlink: Flow actions attr not present in new flow. [ 179.800235][ T8262] netlink: 'syz.0.639': attribute type 6 has an invalid length. [ 179.858694][ T8268] netlink: 24 bytes leftover after parsing attributes in process `syz.4.641'. [ 179.872860][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'. [ 180.083580][ T8278] netlink: 132 bytes leftover after parsing attributes in process `syz.4.646'. [ 180.223290][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.366791][ T8290] tipc: Enabling of bearer rejected, failed to enable media [ 180.412052][ T8298] netlink: 'syz.2.651': attribute type 4 has an invalid length. [ 180.678985][ T8310] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 180.977265][ T8311] bond2: (slave bridge3): making interface the new active one [ 181.036077][ T8311] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 181.052821][ T8325] netlink: 'syz.4.659': attribute type 1 has an invalid length. [ 181.259493][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.533206][ T8057] Set syz1 is full, maxelem 65536 reached [ 181.626035][ T8344] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 181.652545][ T8342] ip6gre2: entered allmulticast mode [ 181.693255][ T8344] __nla_validate_parse: 2 callbacks suppressed [ 181.693272][ T8344] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.664'. [ 181.750387][ T8353] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 181.764865][ T8348] xt_hashlimit: size too large, truncated to 1048576 [ 181.778633][ T8353] netlink: 224 bytes leftover after parsing attributes in process `syz.3.668'. [ 181.803099][ T8356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.805320][ T8348] xt_hashlimit: invalid rate [ 181.812542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.922953][ T8353] syzkaller0: entered promiscuous mode [ 181.929404][ T8353] syzkaller0: entered allmulticast mode [ 181.961201][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 181.996593][ T1316] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.005693][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.671'. [ 182.036408][ T1316] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.060108][ T1102] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd7 [ 182.081009][ T1316] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.101468][ T1316] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.248959][ T8374] syzkaller0: entered promiscuous mode [ 182.254953][ T8374] syzkaller0: entered allmulticast mode [ 182.266069][ T8374] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 182.737226][ T8379] Bluetooth: MGMT ver 1.23 [ 183.250302][ T8394] netlink: 56 bytes leftover after parsing attributes in process `syz.2.679'. [ 183.338074][ T24] net_ratelimit: 5 callbacks suppressed [ 183.338091][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.816575][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.329926][ T8381] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 184.348582][ T8392] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 184.374799][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.971282][ T8439] openvswitch: netlink: Message has 536 unknown bytes. [ 184.978717][ T8439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.991914][ T8439] validate_nla: 1 callbacks suppressed [ 184.991932][ T8439] netlink: 'syz.0.688': attribute type 21 has an invalid length. [ 185.009967][ T8439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.688'. [ 185.057521][ T8439] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 185.069411][ T8439] bond3 (unregistering): Released all slaves [ 185.113382][ T8443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.122085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.277276][ T8446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.286250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.418416][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.694867][ T8468] sctp: [Deprecated]: syz.1.697 (pid 8468) Use of int in max_burst socket option deprecated. [ 185.694867][ T8468] Use struct sctp_assoc_value instead [ 185.914712][ T8468] sctp: [Deprecated]: syz.1.697 (pid 8468) Use of int in max_burst socket option deprecated. [ 185.914712][ T8468] Use struct sctp_assoc_value instead [ 185.967375][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 186.047747][ T8486] Unsupported ieee802154 address type: 0 [ 186.284681][ T8494] bridge0: port 3(team0) entered disabled state [ 186.366865][ T8505] netlink: 'syz.2.705': attribute type 1 has an invalid length. [ 186.377565][ T8505] netlink: 'syz.2.705': attribute type 4 has an invalid length. [ 186.384361][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 186.419716][ T8505] netlink: 9422 bytes leftover after parsing attributes in process `syz.2.705'. [ 186.487062][ T8494] team0 (unregistering): left allmulticast mode [ 186.493509][ T8494] team_slave_0: left allmulticast mode [ 186.499293][ T8494] team_slave_1: left allmulticast mode [ 186.504976][ T8494] team0 (unregistering): left promiscuous mode [ 186.511336][ T8494] team_slave_0: left promiscuous mode [ 186.517282][ T8494] team_slave_1: left promiscuous mode [ 186.525757][ T8494] bridge0: port 3(team0) entered disabled state [ 186.556587][ T8494] team0 (unregistering): Port device team_slave_0 removed [ 186.588305][ T8494] team0 (unregistering): Port device team_slave_1 removed [ 186.597115][ T8515] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 186.615405][ T8494] team0 (unregistering): Port device bridge1 removed [ 186.638674][ T8494] team0 (unregistering): Port device bridge3 removed [ 186.741715][ T8523] tipc: Enabling of bearer rejected, already enabled [ 186.756011][ T8523] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 186.804773][ T8523] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 186.829752][ T8526] netlink: 'syz.1.709': attribute type 17 has an invalid length. [ 186.838038][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'. [ 186.847342][ T8526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.709'. [ 186.901619][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'. [ 187.043612][ T8530] hsr_slave_0 (unregistering): left promiscuous mode [ 187.140709][ T8538] netlink: 'syz.2.714': attribute type 21 has an invalid length. [ 187.289663][ T8538] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 187.312445][ T8538] bond3 (unregistering): Released all slaves [ 187.489815][ T8560] tipc: Started in network mode [ 187.532557][ T8560] tipc: Node identity 72e2618dee49, cluster identity 4711 [ 187.577075][ T8560] tipc: Enabled bearer , priority 0 [ 187.602153][ T8548] syzkaller0: entered promiscuous mode [ 187.610709][ T8548] syzkaller0: entered allmulticast mode [ 187.704003][ T8548] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 187.738400][ T8576] netlink: 56 bytes leftover after parsing attributes in process `syz.1.723'. [ 187.783114][ T8548] tipc: Resetting bearer [ 187.790819][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 187.809250][ T8580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.724'. [ 187.831640][ T8546] tipc: Resetting bearer [ 187.866755][ T8546] tipc: Disabling bearer [ 187.897286][ T8582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.725'. [ 187.952805][ T8582] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 187.989136][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 188.280604][ T8590] bond1: (slave bond0): Releasing active interface [ 188.305944][ T8608] netlink: 124 bytes leftover after parsing attributes in process `syz.3.728'. [ 188.392081][ T8590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.394542][ T8612] netlink: 48 bytes leftover after parsing attributes in process `syz.0.729'. [ 188.413000][ T8590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.425523][ T8590] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 188.435599][ T8590] bridge0: port 2(syz_tun) entered disabled state [ 188.442559][ T8590] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.453707][ T8590] bond0 (unregistering): Released all slaves [ 188.475449][ T8594] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 188.483807][ T8598] syzkaller0: entered promiscuous mode [ 188.490130][ T8598] syzkaller0: entered allmulticast mode [ 188.505563][ T8603] tipc: Enabled bearer , priority 0 [ 188.534803][ T24] net_ratelimit: 3 callbacks suppressed [ 188.534823][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.549471][ T8614] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 188.561052][ T8601] IPVS: stopping master sync thread 8614 ... [ 188.571187][ T8587] tipc: Resetting bearer [ 188.588414][ T8601] siw: device registration error -23 [ 188.613308][ T8587] tipc: Disabling bearer [ 188.626897][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 188.775322][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.202513][ T8640] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 189.306134][ T8640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.391256][ T8657] netlink: 'syz.4.742': attribute type 1 has an invalid length. [ 189.577570][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.795152][ T8675] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 189.914957][ T8675] bond0: entered promiscuous mode [ 189.921818][ T8675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.119451][ T8688] wg1 speed is unknown, defaulting to 1000 [ 190.614570][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.654852][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.817429][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.840459][ T8772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.943241][ T5984] IPVS: starting estimator thread 0... [ 192.017435][ T8780] 0ªî{X¹¦: left allmulticast mode [ 192.064408][ T8783] IPVS: using max 26 ests per chain, 62400 per kthread [ 192.318834][ T8799] __nla_validate_parse: 5 callbacks suppressed [ 192.318856][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.776'. [ 192.446113][ T8810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.781'. [ 192.690878][ T8827] vlan2: entered promiscuous mode [ 192.717263][ T8827] vlan2: entered allmulticast mode [ 192.719546][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.722790][ T8827] hsr_slave_1: entered allmulticast mode [ 192.844582][ T8835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.189502][ T8851] netlink: 'syz.2.794': attribute type 1 has an invalid length. [ 193.215743][ T8851] netlink: 224 bytes leftover after parsing attributes in process `syz.2.794'. [ 193.415532][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.736179][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.786565][ T8873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.796427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.961008][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.796'. [ 194.171736][ T8883] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 194.183609][ T8883] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.242120][ T8890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.804'. [ 194.268059][ T8891] netlink: 240 bytes leftover after parsing attributes in process `syz.1.805'. [ 194.290732][ T8890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 194.302290][ T8882] netlink: 'syz.1.805': attribute type 24 has an invalid length. [ 194.318166][ T8885] netlink: 'syz.3.804': attribute type 4 has an invalid length. [ 194.352279][ T8885] netlink: 240 bytes leftover after parsing attributes in process `syz.3.804'. [ 194.388383][ T8890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.804'. [ 194.555553][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.809'. [ 194.702650][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.784109][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.794794][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.803497][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.860396][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.862314][ T8915] bridge0: left allmulticast mode [ 194.895782][ T8921] xt_l2tp: v2 sid > 0xffff: 1114112 [ 195.407611][ T8943] netlink: 'syz.3.819': attribute type 8 has an invalid length. [ 195.815472][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.859537][ T8976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.905208][ T8974] syzkaller1: entered promiscuous mode [ 195.915875][ T8974] syzkaller1: entered allmulticast mode [ 195.933992][ T8974] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 195.948302][ T8979] syzkaller1: entered promiscuous mode [ 195.954062][ T8979] syzkaller1: entered allmulticast mode [ 196.000949][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.013013][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.854801][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.962196][ T9035] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.104034][ T9035] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.316901][ T9035] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.417986][ T9064] __nla_validate_parse: 12 callbacks suppressed [ 197.418008][ T9064] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.854'. [ 197.442968][ T9045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.446225][ T9064] netlink: 32 bytes leftover after parsing attributes in process `syz.0.854'. [ 197.452225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.627485][ T9035] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.768745][ T9035] Failed to register nexthop notifier [ 197.783250][ T9077] netlink: 68 bytes leftover after parsing attributes in process `syz.3.859'. [ 197.849741][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 197.919728][ T9079] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 197.938511][ T9083] netlink: 'syz.2.862': attribute type 33 has an invalid length. [ 198.013792][ T9083] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 198.178256][ T9083] bond3 (unregistering): Released all slaves [ 198.641661][ T9124] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.874'. [ 198.791806][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 198.795541][ T9126] netlink: 25 bytes leftover after parsing attributes in process `syz.2.875'. [ 198.868217][ T9132] netlink: 'syz.4.878': attribute type 2 has an invalid length. [ 198.905312][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 198.927129][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'. [ 198.985405][ C0] net_ratelimit: 4 callbacks suppressed [ 198.985424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.054390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.086833][ T9151] netlink: 'syz.0.882': attribute type 1 has an invalid length. [ 199.216477][ T9165] netlink: 'syz.4.885': attribute type 9 has an invalid length. [ 199.226878][ T9150] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.241130][ T9150] bond4: (slave bond5): making interface the new active one [ 199.250353][ T9150] bond4: (slave bond5): Enslaving as an active interface with an up link [ 199.261449][ T9157] vlan0: entered promiscuous mode [ 199.300964][ T9157] vlan0: entered allmulticast mode [ 199.308821][ T9157] veth0_vlan: entered allmulticast mode [ 199.615198][ T9185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.641271][ T9187] netlink: 'syz.2.894': attribute type 1 has an invalid length. [ 199.735701][ T9187] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.772342][ T9187] vlan0: entered allmulticast mode [ 199.779617][ T9187] veth1: entered allmulticast mode [ 199.793045][ T9187] bond3: (slave vlan0): Enslaving as an active interface with a down link [ 199.822943][ T9192] tipc: Enabling of bearer rejected, failed to enable media [ 199.894528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.989062][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 200.021399][ T9202] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 200.098612][ T9202] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.158426][ T9208] bond4: (slave veth3): Enslaving as an active interface with a down link [ 200.193699][ T9202] bond4: (slave veth0_to_bond): making interface the new active one [ 200.222627][ T9202] veth0_to_bond: entered promiscuous mode [ 200.231387][ T9202] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 200.307881][ T9208] bond4: (slave veth5): Enslaving as an active interface with a down link [ 200.519348][ T9222] netlink: 'syz.0.905': attribute type 1 has an invalid length. [ 200.540277][ T9226] openvswitch: netlink: IP tunnel dst address not specified [ 200.569270][ T9222] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 200.899094][ T9241] vlan4: entered promiscuous mode [ 200.930234][ T9241] bridge0: entered promiscuous mode [ 201.067097][ T9250] xt_recent: Unsupported userspace flags (000000b1) [ 201.094466][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 201.542433][ T9270] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 201.558292][ T9270] bond6 (unregistering): Released all slaves [ 201.847327][ T9290] ipt_REJECT: TCP_RESET invalid for non-tcp [ 202.055450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.064557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.073274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.082377][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.091174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.422246][ T9317] IPVS: stopping master sync thread 6758 ... [ 202.496988][ T9321] netlink: 'syz.4.933': attribute type 4 has an invalid length. [ 202.537552][ T9321] __nla_validate_parse: 6 callbacks suppressed [ 202.537574][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 202.740549][ T9336] netlink: 52 bytes leftover after parsing attributes in process `syz.1.940'. [ 202.887982][ T9340] bridge0: port 3(ipvlan2) entered blocking state [ 202.911466][ T9340] bridge0: port 3(ipvlan2) entered disabled state [ 202.954131][ T9340] ipvlan2: entered allmulticast mode [ 202.972503][ T9340] bridge0: entered allmulticast mode [ 203.006751][ T9340] ipvlan2: left allmulticast mode [ 203.011945][ T9340] bridge0: left allmulticast mode [ 203.061182][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.946'. [ 203.900933][ T9398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'. [ 204.757890][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 205.075208][ T9454] tipc: Enabling of bearer rejected, failed to enable media [ 205.130315][ T9462] netlink: 'syz.3.978': attribute type 3 has an invalid length. [ 205.151042][ T9462] netlink: 766 bytes leftover after parsing attributes in process `syz.3.978'. [ 205.254894][ C1] net_ratelimit: 3 callbacks suppressed [ 205.254914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.269373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.278131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.286859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.295556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.304282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.743429][ T9501] netlink: 'syz.1.987': attribute type 11 has an invalid length. [ 205.747627][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 205.754751][ T9501] netlink: 224 bytes leftover after parsing attributes in process `syz.1.987'. [ 205.773775][ T9503] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.988'. [ 206.030569][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 206.093382][ T9519] openvswitch: netlink: Message has 592 unknown bytes. [ 206.101077][ T9519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.223147][ T9527] xt_policy: output policy not valid in PREROUTING and INPUT [ 206.513752][ T9549] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 207.569672][ T9610] syz_tun (unregistering): left allmulticast mode [ 207.858292][ T9635] __nla_validate_parse: 5 callbacks suppressed [ 207.858314][ T9635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1030'. [ 207.967624][ T9642] sctp: [Deprecated]: syz.1.1031 (pid 9642) Use of int in maxseg socket option. [ 207.967624][ T9642] Use struct sctp_assoc_value instead [ 208.116883][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 208.196567][ T9655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1036'. [ 208.281494][ T9655] netlink: 'syz.0.1036': attribute type 2 has an invalid length. [ 208.289656][ T9655] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1036'. [ 208.291413][ T9662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1037'. [ 208.454863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.520308][ T9673] netlink: 'syz.4.1041': attribute type 8 has an invalid length. [ 208.550207][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 208.623760][ T9675] bond6: Unable to set up delay as MII monitoring is disabled [ 208.659482][ T9687] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1043'. [ 208.669914][ T9686] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1043'. [ 208.675765][ T9675] bond6 (unregistering): Released all slaves [ 208.712053][ T9673] bond0: entered promiscuous mode [ 208.726925][ T9673] bond_slave_0: entered promiscuous mode [ 208.733704][ T9673] bond_slave_1: entered promiscuous mode [ 208.748400][ T9673] ip6gretap0: entered promiscuous mode [ 208.756293][ T9673] gretap0: entered promiscuous mode [ 208.762631][ T9673] debugfs: 'hsr1' already exists in 'hsr' [ 208.770519][ T9673] Cannot create hsr debugfs directory [ 208.805559][ T9673] hsr1: entered promiscuous mode [ 209.138293][ T9708] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1053'. [ 209.190886][ T9714] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1051'. [ 209.522705][ T9738] netlink: 'syz.3.1059': attribute type 20 has an invalid length. [ 209.532562][ T9738] netlink: 'syz.3.1059': attribute type 20 has an invalid length. [ 209.799107][ T9748] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 209.878229][ T9751] netlink: 'syz.2.1062': attribute type 1 has an invalid length. [ 209.908236][ T9752] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 210.406483][ T9777] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .ù‹qMÿ¡s…%ˆâ#\„¸\có Ó¡“·ãp‡ë[ [ 210.703409][ T9780] erspan0: entered allmulticast mode [ 210.791464][ T9781] tipc: Enabling of bearer rejected, already enabled [ 210.806105][ T9793] net_ratelimit: 9 callbacks suppressed [ 210.806127][ T9793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.845318][ T9781] tipc: Resetting bearer [ 210.919805][ T9798] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 210.929958][ T9806] netlink: 'syz.3.1074': attribute type 63 has an invalid length. [ 210.952351][ T9796] kthread_run failed with err -4 [ 210.970453][ T9790] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 211.093915][ T9797] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.149035][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.240268][ T10] wg1 speed is unknown, defaulting to 1000 [ 211.241823][ T9816] syzkaller1: entered promiscuous mode [ 211.278499][ T9816] syzkaller1: entered allmulticast mode [ 211.316663][ T9819] block nbd0: Unsupported socket: should be TCP or UNIX. [ 211.373855][ T9828] netlink: 'syz.0.1080': attribute type 1 has an invalid length. [ 211.574834][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.583682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.592501][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.601190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.879372][ T1316] veth0_to_bond: left promiscuous mode [ 212.057107][ T9854] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 212.137499][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 212.143607][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 212.154069][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 212.187601][ T9849] 8021q: VLANs not supported on rose0 [ 212.298267][ T9862] gre0: entered allmulticast mode [ 212.362736][ T9862] openvswitch: netlink: EtherType 50a is less than min 600 [ 212.452818][ T9864] smc: net device gre0 applied user defined pnetid SYZ1 [ 212.472926][ T9864] smc: net device gre0 erased user defined pnetid SYZ1 [ 212.618307][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.742158][ T9884] gtp0: entered promiscuous mode [ 212.758166][ T9884] gtp0: entered allmulticast mode [ 212.815941][ T9890] nbd: nbd64 already in use [ 212.816729][ T9889] bridge0: port 4(vlan2) entered blocking state [ 212.838200][ T9889] bridge0: port 4(vlan2) entered disabled state [ 212.870912][ T9884] netlink: 'syz.0.1093': attribute type 2 has an invalid length. [ 212.871335][ T9889] vlan2: entered allmulticast mode [ 212.916368][ T9889] bridge0: entered allmulticast mode [ 212.980371][ T9889] vlan2: left allmulticast mode [ 212.988663][ T9901] netlink: 'syz.1.1098': attribute type 18 has an invalid length. [ 213.011425][ T9889] bridge0: left allmulticast mode [ 213.168161][ T7895] udevd[7895]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 213.317610][ T9912] __nla_validate_parse: 25 callbacks suppressed [ 213.317640][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1101'. [ 213.358295][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1101'. [ 213.370227][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1101'. [ 213.381308][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1101'. [ 213.497694][ T9912] sch_fq: defrate 0 ignored. [ 213.505326][ T9922] sch_fq: defrate 0 ignored. [ 213.731081][ T9940] syzkaller0: entered promiscuous mode [ 213.757041][ T9940] syzkaller0: entered allmulticast mode [ 213.769100][ T9945] ip6t_rpfilter: unknown options [ 213.799556][ T9947] pim6reg: entered allmulticast mode [ 213.839398][ T9949] C: renamed from team_slave_0 (while UP) [ 213.861252][ T9949] netlink: 'syz.1.1111': attribute type 1 has an invalid length. [ 213.870198][ T9949] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 213.890738][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 213.905532][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 213.923665][ T9942] bond4: option miimon: invalid value (18446744073709551585) [ 213.931616][ T9942] bond4: option miimon: allowed values 0 - 2147483647 [ 213.940969][ T9942] bond4 (unregistering): Released all slaves [ 213.963338][ T9956] netlink: 'syz.0.1113': attribute type 4 has an invalid length. [ 214.201733][ T9960] syzkaller1: entered promiscuous mode [ 214.207893][ T9960] syzkaller1: entered allmulticast mode [ 214.238521][ T3660] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 214.303140][ T9960] erspan0: left allmulticast mode [ 214.774857][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.783550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.953519][T10008] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.963969][T10008] IPv6: NLM_F_REPLACE set, but no existing node found! [ 215.517825][T10028] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1136'. [ 215.576559][T10035] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1137'. [ 215.586050][T10035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1137'. [ 215.595235][T10035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1137'. [ 215.787241][T10039] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.800448][T10039] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.017740][T10039] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.035779][T10039] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.061279][T10061] netlink: 'syz.0.1145': attribute type 9 has an invalid length. [ 216.061804][T10062] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 216.070492][T10061] netlink: 'syz.0.1145': attribute type 11 has an invalid length. [ 216.070519][T10061] netlink: 'syz.0.1145': attribute type 12 has an invalid length. [ 216.144033][T10062] bond4: entered promiscuous mode [ 216.162747][T10062] bond4: entered allmulticast mode [ 216.174878][T10062] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.180881][T10066] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 216.205700][T10064] macvlan2: entered promiscuous mode [ 216.211225][T10064] macvlan2: entered allmulticast mode [ 216.241775][T10064] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.285857][T10066] 8021q: adding VLAN 0 to HW filter on device bond7 [ 216.302649][T10068] gtp0: entered promiscuous mode [ 216.376789][T10039] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.397627][T10039] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.505328][T10081] netlink: 'syz.1.1151': attribute type 11 has an invalid length. [ 216.507828][T10039] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.525181][T10039] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.677764][T10094] netlink: 'syz.1.1154': attribute type 1 has an invalid length. [ 216.805769][T10098] macvlan5: entered promiscuous mode [ 216.811234][T10098] macvlan5: entered allmulticast mode [ 216.818972][T10098] bond3: entered promiscuous mode [ 216.829034][T10098] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 216.843397][T10098] bond3: left promiscuous mode [ 216.893786][T10107] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 216.958968][ T5925] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.975165][ T5925] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.050985][ T5925] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.070666][ T5925] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.143997][ T149] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.168719][ T149] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.227788][ T60] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.243373][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.482249][T10134] unsupported nlmsg_type 40 [ 217.894852][ C1] net_ratelimit: 5 callbacks suppressed [ 217.894903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.909328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.918189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.927002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.506468][T10198] __nla_validate_parse: 11 callbacks suppressed [ 218.506488][T10198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 218.822043][T10214] netlink: 'syz.4.1191': attribute type 2 has an invalid length. [ 218.869669][T10214] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1191'. [ 219.046579][T10224] xt_cgroup: invalid path, errno=-2 [ 219.069510][T10221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.082251][T10221] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.228887][T10221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.245683][T10221] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.260033][T10240] openvswitch: netlink: Message has 8 unknown bytes. [ 219.310349][T10239] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1201'. [ 219.321413][T10239] xt_hashlimit: overflow, try lower: 3/0 [ 219.384096][T10221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.396121][T10221] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.440648][T10236] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 219.526806][T10221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.557382][T10221] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.569584][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 219.583264][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 219.593502][T10247] openvswitch: netlink: Missing key (keys=40, expected=80) [ 219.598090][T10249] netlink: 'syz.2.1204': attribute type 1 has an invalid length. [ 219.673641][T10249] bond6: (slave geneve2): making interface the new active one [ 219.693183][T10249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.712472][T10249] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 219.761905][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 219.920480][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 219.955496][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 219.986579][ T36] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 220.071125][T10263] netlink: 'syz.3.1208': attribute type 2 has an invalid length. [ 220.116348][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.129629][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.172860][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.182875][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.283633][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.298578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.323247][ T5955] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.340564][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.421193][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.441447][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.571753][T10312] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1217'. [ 220.885541][T10325] netlink: 'syz.4.1222': attribute type 21 has an invalid length. [ 220.893870][T10325] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1222'. [ 221.255699][ T3517] wlan0: Trigger new scan to find an IBSS to join [ 222.742135][T10360] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 222.778191][T10361] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1230'. [ 222.802309][T10365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1232'. [ 222.917506][T10373] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1231'. [ 223.053791][T10375] veth0_to_bond: entered allmulticast mode [ 223.248654][T10389] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 223.295241][T10390] netlink: 'syz.1.1240': attribute type 1 has an invalid length. [ 223.392333][T10389] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.509576][T10398] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.518741][T10398] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 223.539193][T10398] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 223.730568][T10415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 223.791878][T10415] xfrm1: entered promiscuous mode [ 223.797418][T10415] xfrm1: entered allmulticast mode [ 223.860393][T10423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1251'. [ 223.954500][T10428] netlink: 'syz.4.1253': attribute type 12 has an invalid length. [ 223.964814][T10428] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1253'. [ 224.214976][ C1] net_ratelimit: 7 callbacks suppressed [ 224.214997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.229588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.238574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.247332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.256038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.268505][T10441] x_tables: duplicate underflow at hook 3 [ 224.319167][ T5925] wlan0: Trigger new scan to find an IBSS to join [ 224.507531][T10457] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1265'. [ 224.548001][T10453] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1263'. [ 225.113544][T10495] xt_ecn: cannot match TCP bits for non-tcp packets [ 225.142978][T10503] netlink: 'syz.2.1274': attribute type 1 has an invalid length. [ 225.162772][T10502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 225.172816][T10503] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1274'. [ 225.182784][T10503] NCSI netlink: No device for ifindex 0 [ 225.310982][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 225.435297][T10512] netlink: 'syz.1.1278': attribute type 1 has an invalid length. [ 225.453480][T10512] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1278'. [ 225.466651][T10512] netlink: 'syz.1.1278': attribute type 1 has an invalid length. [ 225.475314][T10512] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1278'. [ 225.697437][T10531] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 225.756852][T10531] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 225.786415][T10531] gretap1: entered promiscuous mode [ 225.820048][T10531] gretap1: entered allmulticast mode [ 225.947451][T10548] netlink: 'syz.2.1286': attribute type 5 has an invalid length. [ 226.207708][T10560] bond1: option mode: unable to set because the bond device is up [ 226.219359][T10560] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 226.225745][T10555] netlink: 'syz.2.1291': attribute type 22 has an invalid length. [ 226.312766][T10560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.371574][T10560] bond1: (slave lo): making interface the new active one [ 226.405020][T10560] bond1: (slave lo): Enslaving as an active interface with an up link [ 226.446268][T10560] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 226.605839][T10578] netlink: 'syz.1.1299': attribute type 1 has an invalid length. [ 226.768456][T10583] bond5: (slave bridge2): making interface the new active one [ 226.800486][T10583] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 227.359661][ T5925] wlan0: Trigger new scan to find an IBSS to join [ 227.414873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.423592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.432483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.441481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.749454][T10630] gtp0: entered promiscuous mode [ 227.755727][T10630] gtp0: entered allmulticast mode [ 228.173399][T10654] geneve3: entered promiscuous mode [ 228.179819][T10654] geneve3: entered allmulticast mode [ 228.278900][ T36] wlan0: Creating new IBSS network, BSSID 1a:43:f6:df:0b:d6 [ 228.679064][T10690] validate_nla: 1 callbacks suppressed [ 228.679084][T10690] netlink: 'syz.0.1336': attribute type 4 has an invalid length. [ 228.735642][T10691] __nla_validate_parse: 13 callbacks suppressed [ 228.735662][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'. [ 228.861465][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 228.901383][T10699] netlink: 'syz.3.1338': attribute type 21 has an invalid length. [ 229.328758][T10726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1348'. [ 229.462199][T10733] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20003 [ 229.547697][T10739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1352'. [ 229.791878][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1355'. [ 229.885725][T10753] can: request_module (can-proto-3) failed. [ 229.897107][ T5887] net_ratelimit: 39 callbacks suppressed [ 229.897128][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.047584][T10768] netlink: 'syz.4.1360': attribute type 8 has an invalid length. [ 230.063408][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 230.313934][T10776] can: request_module (can-proto-0) failed. [ 230.536575][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.558688][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.615266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.624482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.633349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.642287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.651263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.674439][T10795] lo: entered promiscuous mode [ 230.689138][T10795] tunl0: entered promiscuous mode [ 230.695304][T10795] gre0: entered promiscuous mode [ 230.700663][T10795] gre0: left allmulticast mode [ 230.715683][T10795] gretap0: entered promiscuous mode [ 230.739601][T10795] erspan0: entered promiscuous mode [ 230.751102][T10795] ip_vti0: entered promiscuous mode [ 230.796311][ T149] bond1: (slave lo): link status definitely down, disabling slave [ 230.835185][ T149] bond1: now running without any active interface! [ 231.026757][T10810] can: request_module (can-proto-0) failed. [ 231.374111][T10830] wg1 speed is unknown, defaulting to 1000 [ 232.022875][T10861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.200595][T10865] tipc: Started in network mode [ 232.221110][T10865] tipc: Node identity 6e7641f0521a, cluster identity 4711 [ 232.242769][T10865] tipc: Enabled bearer , priority 0 [ 232.282823][T10867] syzkaller0: entered promiscuous mode [ 232.332743][T10867] syzkaller0: entered allmulticast mode [ 232.402835][T10880] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1392'. [ 232.415178][T10871] tipc: Resetting bearer [ 232.436065][T10880] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 232.447715][T10871] tipc: Disabling bearer [ 232.526151][T10888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.535675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.598936][T10891] netlink: 'syz.4.1394': attribute type 12 has an invalid length. [ 232.661574][T10891] bond3: option primary_reselect: invalid value (255) [ 232.671650][T10891] bond3 (unregistering): Released all slaves [ 232.948619][T10909] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1401'. [ 233.051603][T10916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.063506][T10916] netlink: 'syz.3.1403': attribute type 10 has an invalid length. [ 233.072303][T10916] bridge_slave_1: left allmulticast mode [ 233.078160][T10916] bridge_slave_1: left promiscuous mode [ 233.086514][T10916] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.109842][T10916] bridge_slave_1: entered promiscuous mode [ 233.118323][T10916] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 233.169088][T10921] netlink: 'syz.1.1404': attribute type 1 has an invalid length. [ 233.178157][T10922] netlink: 'syz.1.1404': attribute type 1 has an invalid length. [ 233.239561][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1405'. [ 233.295796][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 233.306817][T10920] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 233.322147][T10920] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 233.333234][T10920] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 233.555964][T10939] pim6reg527: entered allmulticast mode [ 233.971263][T10960] __nla_validate_parse: 6 callbacks suppressed [ 233.971282][T10960] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1415'. [ 234.025180][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 234.042942][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 234.197885][T10972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1419'. [ 234.210162][T10973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1420'. [ 235.118296][T11023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1429'. [ 235.387478][T11044] netlink: 'syz.2.1435': attribute type 1 has an invalid length. [ 235.437878][T11043] netlink: 'syz.0.1433': attribute type 1 has an invalid length. [ 235.510059][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1436'. [ 235.549220][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'. [ 235.659582][ T5984] net_ratelimit: 6 callbacks suppressed [ 235.659605][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.791424][T11047] bond8: (slave veth5): Enslaving as an active interface with a down link [ 235.810120][T11037] 8021q: adding VLAN 0 to HW filter on device bond8 [ 235.860367][T11061] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.1439'. [ 235.940486][T11061] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 236.095535][T11073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.263432][T11082] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1445'. [ 236.720825][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.761597][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.809036][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.822780][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.831638][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.847115][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.885253][T11117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.992350][T11130] bridge3: entered promiscuous mode [ 237.006853][T11130] bridge3: entered allmulticast mode [ 237.562123][T11170] netlink: 'syz.1.1473': attribute type 21 has an invalid length. [ 238.050436][T11198] netlink: 'syz.4.1481': attribute type 33 has an invalid length. [ 238.790318][T11237] netlink: 'syz.0.1489': attribute type 4 has an invalid length. [ 239.916676][T11289] __nla_validate_parse: 8 callbacks suppressed [ 239.916697][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1510'. [ 240.035883][T11299] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1513'. [ 240.062056][T11300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1513'. [ 240.248304][T11307] netlink: 'syz.2.1514': attribute type 4 has an invalid length. [ 240.252474][T11305] netlink: 'syz.3.1515': attribute type 1 has an invalid length. [ 240.297200][T11305] netlink: 'syz.3.1515': attribute type 1 has an invalid length. [ 240.384884][T11312] nbd0: detected capacity change from 0 to 63 [ 240.472983][ T5832] block nbd0: Receive control failed (result -104) [ 240.532562][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 240.558009][T11316] syzkaller0: entered promiscuous mode [ 240.564790][T11316] syzkaller0: entered allmulticast mode [ 240.575744][T11322] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1520'. [ 240.598768][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1521'. [ 242.378408][T11349] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1529'. [ 242.415800][T11349] netlink: 'syz.2.1529': attribute type 1 has an invalid length. [ 242.478855][T11355] netlink: 'syz.4.1531': attribute type 3 has an invalid length. [ 242.522612][T11355] netlink: 'syz.4.1531': attribute type 1 has an invalid length. [ 242.551883][T11355] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1531'. [ 242.672046][T11363] syzkaller0: entered promiscuous mode [ 242.688041][T11363] syzkaller0: entered allmulticast mode [ 242.703784][T11355] tipc: Started in network mode [ 242.709361][T11355] tipc: Node identity 8e79a0b9d4d5, cluster identity 4711 [ 242.717901][T11355] tipc: Enabled bearer , priority 0 [ 242.791125][T11364] syzkaller0: entered promiscuous mode [ 242.798231][T11364] syzkaller0: entered allmulticast mode [ 242.801951][T11370] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1535'. [ 242.805146][T11364] tipc: Resetting bearer [ 242.820308][T11370] block nbd0: reconnected socket [ 243.533027][ T5832] block nbd0: Receive control failed (result -32) [ 244.483614][T11383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 244.500866][T11383] netlink: 'syz.0.1537': attribute type 5 has an invalid length. [ 246.016062][ T13] tipc: Resetting bearer [ 246.035517][T10296] tipc: Node number set to 1521262777 [ 246.050255][T11383] geneve4: entered promiscuous mode [ 246.058841][T11383] geneve4: entered allmulticast mode [ 246.076277][T11390] __nla_validate_parse: 1 callbacks suppressed [ 246.076301][T11390] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1538'. [ 246.185682][T11354] tipc: Resetting bearer [ 246.222951][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 246.233925][T11354] tipc: Disabling bearer [ 246.247753][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 246.247800][T11397] net_ratelimit: 10 callbacks suppressed [ 246.247813][T11397] openvswitch: netlink: Unknown nsh attribute 0 [ 246.257497][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1541'. [ 246.262767][ T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 246.286742][T11397] openvswitch: netlink: Unknown nsh attribute 0 [ 246.316704][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 246.345449][ T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 246.770503][T11425] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1550'. [ 246.775465][T11430] netlink: 'syz.3.1549': attribute type 2 has an invalid length. [ 246.783010][T11425] 8021q: VLANs not supported on gre0 [ 246.904891][T11436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1553'. [ 246.920394][T11438] x_tables: unsorted underflow at hook 4 [ 246.937482][T11436] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1553'. [ 246.946291][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1554'. [ 246.956274][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1554'. [ 247.040903][T11442] C: renamed from lo [ 247.209998][T11450] can: request_module (can-proto-4) failed. [ 247.220363][T11456] sctp: [Deprecated]: syz.1.1560 (pid 11456) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.220363][T11456] Use struct sctp_sack_info instead [ 247.408465][T11465] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 247.501935][T11473] netlink: 'syz.2.1565': attribute type 21 has an invalid length. [ 247.808333][T11497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 247.870632][T11497] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1572'. [ 247.895511][T11504] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 248.497828][T11536] pimreg: entered allmulticast mode [ 248.566032][T11536] pimreg: left allmulticast mode [ 248.569603][T11543] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 248.737979][T11543] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.838713][T11540] bond5: (slave veth5): Enslaving as an active interface with a down link [ 249.517056][T11595] vlan0: entered allmulticast mode [ 249.522326][T11595] erspan0: entered allmulticast mode [ 249.540753][T11600] netlink: 'syz.4.1610': attribute type 29 has an invalid length. [ 249.561684][T11600] netlink: 'syz.4.1610': attribute type 29 has an invalid length. [ 249.927506][T11621] netlink: 'syz.0.1615': attribute type 2 has an invalid length. [ 250.550871][T11653] netlink: 'syz.4.1620': attribute type 6 has an invalid length. [ 250.641533][T11657] netlink: 'syz.4.1620': attribute type 6 has an invalid length. [ 250.827126][T11668] nbd: illegal input index 2958377 [ 250.887239][T11672] netlink: 'syz.4.1626': attribute type 1 has an invalid length. [ 251.271955][T11687] __nla_validate_parse: 12 callbacks suppressed [ 251.271975][T11687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1633'. [ 251.385445][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1634'. [ 251.437926][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'. [ 251.450871][T11697] netlink: 'syz.1.1636': attribute type 1 has an invalid length. [ 251.601078][T11697] bond7: entered promiscuous mode [ 251.608927][T11697] 8021q: adding VLAN 0 to HW filter on device bond7 [ 251.699822][T11700] bond7: (slave bridge3): making interface the new active one [ 251.717958][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 251.724639][T11700] bridge3: entered promiscuous mode [ 251.742422][T11700] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 251.836656][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 251.851782][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 252.048691][T11721] syzkaller0: entered promiscuous mode [ 252.061172][T11721] syzkaller0: entered allmulticast mode [ 252.143736][T11736] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1649'. [ 253.394655][T11807] syzkaller1: entered promiscuous mode [ 253.400500][T11807] syzkaller1: entered allmulticast mode [ 253.526852][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1672'. [ 253.568837][T11816] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 253.792730][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 254.354519][T11862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1684'. [ 255.219719][T11914] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 255.264699][T11914] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 255.544893][T11925] validate_nla: 4 callbacks suppressed [ 255.544917][T11925] netlink: 'syz.2.1701': attribute type 39 has an invalid length. [ 256.039988][T11944] syz.4.1704 (11944) used greatest stack depth: 16680 bytes left [ 256.113185][T11952] netlink: 'syz.0.1708': attribute type 1 has an invalid length. [ 256.113321][T11953] x_tables: unsorted entry at hook 3 [ 256.139504][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.240954][T11963] bond9: (slave geneve5): making interface the new active one [ 256.250726][T11963] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 256.268864][T11958] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.287267][ T13] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 256.309177][T11966] x_tables: duplicate underflow at hook 1 [ 256.346908][ T13] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 256.382701][T11966] dvmrp0: entered allmulticast mode [ 256.415246][ T13] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 256.496801][ T13] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 256.949897][T11995] __nla_validate_parse: 6 callbacks suppressed [ 256.949918][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 257.189545][T11995] bond0 (unregistering): left promiscuous mode [ 257.198147][T11995] bond_slave_0: left promiscuous mode [ 257.204052][T11995] bond_slave_1: left promiscuous mode [ 257.238163][T11995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.259617][T12014] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1730'. [ 257.276098][T11995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.291199][T11995] bond0 (unregistering): Released all slaves [ 257.301742][T12014] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1730'. [ 257.312979][T12014] netlink: 'syz.2.1730': attribute type 6 has an invalid length. [ 257.336312][T12019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1730'. [ 257.346261][T12014] netlink: 'syz.2.1730': attribute type 5 has an invalid length. [ 257.354033][T12014] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1730'. [ 257.550779][T12028] tipc: Enabled bearer , priority 10 [ 257.562741][T12026] tipc: Enabling of bearer rejected, already enabled [ 257.679358][T12036] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1736'. [ 257.748543][T12037] netlink: 'syz.1.1738': attribute type 11 has an invalid length. [ 257.775335][T12037] netlink: 184408 bytes leftover after parsing attributes in process `syz.1.1738'. [ 258.116982][T12060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1745'. [ 258.207914][T12066] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.278593][T12067] netlink: zone id is out of range [ 258.314820][T12067] netlink: zone id is out of range [ 258.328549][T12067] netlink: zone id is out of range [ 258.354056][ T8695] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 258.356953][T12067] netlink: zone id is out of range [ 258.400947][T12067] netlink: zone id is out of range [ 258.410449][T12075] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1749'. [ 258.416952][T12067] netlink: zone id is out of range [ 258.425895][T12067] netlink: zone id is out of range [ 258.431513][T12067] netlink: set zone limit has 4 unknown bytes [ 258.612677][T12087] IPVS: length: 214 != 8 [ 258.617421][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'. [ 258.676319][T10302] tipc: Node number set to 2628477325 [ 258.996076][T12110] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 259.143604][T12111] bond8: (slave gretap1): making interface the new active one [ 259.167899][T12111] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 259.237082][T12119] netlink: 'syz.4.1764': attribute type 9 has an invalid length. [ 261.046971][T12217] bridge_slave_1: left allmulticast mode [ 261.059523][T12217] bridge_slave_1: left promiscuous mode [ 261.066519][T12217] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.076918][T12217] bridge_slave_0: left allmulticast mode [ 261.083191][T12217] bridge_slave_0: left promiscuous mode [ 261.089480][T12217] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.342334][T10296] IPVS: starting estimator thread 0... [ 261.464604][T12235] IPVS: using max 30 ests per chain, 72000 per kthread [ 261.487032][T12229] team0 (unregistering): Port device team_slave_0 removed [ 261.508491][T12229] team0 (unregistering): Port device team_slave_1 removed [ 261.643963][ T1316] tipc: Subscription rejected, illegal request [ 262.008598][T12276] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 262.043377][T12265] IPVS: persistence engine module ip_vs_pe_À not found [ 262.061726][T12276] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 262.087767][T12269] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 262.156521][T12279] pim6reg527: entered allmulticast mode [ 262.285454][T12289] __nla_validate_parse: 7 callbacks suppressed [ 262.285476][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'. [ 262.315821][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1815'. [ 262.487099][T12301] ip6erspan0: entered promiscuous mode [ 262.515152][T12301] ip6erspan0: entered allmulticast mode [ 262.600769][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 262.720056][T12315] netlink: 'syz.1.1823': attribute type 8 has an invalid length. [ 262.728239][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1823'. [ 262.739710][T12315] netlink: 'syz.1.1823': attribute type 8 has an invalid length. [ 262.763359][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1823'. [ 262.780345][T12315] netlink: 'syz.1.1823': attribute type 10 has an invalid length. [ 262.797663][T12318] netlink: 'syz.3.1824': attribute type 4 has an invalid length. [ 262.808283][T12318] netlink: 'syz.3.1824': attribute type 1 has an invalid length. [ 262.854351][T12318] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1824'. [ 263.000629][T12327] sctp: [Deprecated]: syz.1.1828 (pid 12327) Use of int in max_burst socket option. [ 263.000629][T12327] Use struct sctp_assoc_value instead [ 263.602387][T12369] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1837'. [ 263.928495][T12373] netlink: 'syz.0.1840': attribute type 9 has an invalid length. [ 264.067309][T12381] netlink: 'syz.0.1844': attribute type 2 has an invalid length. [ 264.169628][T12384] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 264.223051][T12388] netlink: 'syz.1.1846': attribute type 3 has an invalid length. [ 264.256498][T12394] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1846'. [ 264.263580][T12388] netlink: 758 bytes leftover after parsing attributes in process `syz.1.1846'. [ 264.360397][T12396] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 264.507422][T12407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1849'. [ 264.948733][T12431] xt_NFQUEUE: number of total queues is 0 [ 265.152467][T12441] TCP: TCP_TX_DELAY enabled [ 265.410367][T12452] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 265.792924][T10302] IPVS: starting estimator thread 0... [ 265.884248][T12483] IPVS: using max 25 ests per chain, 60000 per kthread [ 265.969127][T12488] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 266.266469][T12499] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 266.544021][T12515] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 266.801227][T12530] 8021q: adding VLAN 0 to HW filter on device bond10 [ 267.508139][T12571] __nla_validate_parse: 74 callbacks suppressed [ 267.508161][T12571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1896'. [ 267.626402][T12573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1897'. [ 267.959219][T12585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1900'. [ 268.234927][T12601] netlink: 'syz.4.1906': attribute type 11 has an invalid length. [ 268.247792][T12601] netlink: 'syz.4.1906': attribute type 11 has an invalid length. [ 268.265863][T12601] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1906'. [ 268.426265][T12601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.768850][T12623] Driver unsupported XDP return value 0 on prog (id 556) dev N/A, expect packet loss! [ 268.914906][T12629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'. [ 269.330816][T12661] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1923'. [ 269.472833][T12664] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1924'. [ 269.606762][T12671] validate_nla: 2 callbacks suppressed [ 269.606781][T12671] netlink: 'syz.1.1928': attribute type 2 has an invalid length. [ 269.637906][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 270.025543][T12688] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1934'. [ 270.206773][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 270.232964][T12697] syz_tun: left allmulticast mode [ 270.249250][T12697] syz_tun: left promiscuous mode [ 270.266471][T12697] bridge0: port 2(syz_tun) entered disabled state [ 270.331246][T12697] bridge_slave_0: left allmulticast mode [ 270.358528][T12697] bridge_slave_0: left promiscuous mode [ 270.374203][T12697] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.399887][T12703] netlink: 'syz.4.1940': attribute type 2 has an invalid length. [ 270.500768][T12705] netlink: 'syz.3.1941': attribute type 11 has an invalid length. [ 270.871630][ T11] block nbd0: Possible stuck request ffff88802549e000: control (read@0,1024B). Runtime 30 seconds [ 270.888821][ T11] block nbd0: Possible stuck request ffff88802549e1c0: control (read@1024,1024B). Runtime 30 seconds [ 270.901427][ T11] block nbd0: Possible stuck request ffff88802549e380: control (read@2048,1024B). Runtime 30 seconds [ 270.913875][T12720] block nbd0: Dead connection, failed to find a fallback [ 270.924809][T12720] block nbd0: shutting down sockets [ 270.930581][T12720] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.941388][ T11] block nbd0: Possible stuck request ffff88802549e540: control (read@3072,1024B). Runtime 30 seconds [ 270.951395][T12722] netlink: 'syz.4.1947': attribute type 4 has an invalid length. [ 270.953138][T12720] Buffer I/O error on dev nbd0, logical block 1, async page read [ 270.969167][T12720] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.978935][T12720] Buffer I/O error on dev nbd0, logical block 0, async page read [ 270.987349][T12720] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.997536][T12720] Buffer I/O error on dev nbd0, logical block 3, async page read [ 271.006291][T12720] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.016102][T12720] Buffer I/O error on dev nbd0, logical block 2, async page read [ 271.026803][ T7895] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.038463][ T7895] Buffer I/O error on dev nbd0, logical block 0, async page read [ 271.047475][ T7895] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.058167][ T7895] Buffer I/O error on dev nbd0, logical block 1, async page read [ 271.074870][ T7895] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.084069][ T7895] Buffer I/O error on dev nbd0, logical block 2, async page read [ 271.114925][ T7895] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.135305][ T7895] Buffer I/O error on dev nbd0, logical block 3, async page read [ 271.145071][ T7895] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.157368][ T7895] Buffer I/O error on dev nbd0, logical block 0, async page read [ 271.166393][ T7895] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.178731][ T7895] Buffer I/O error on dev nbd0, logical block 1, async page read [ 271.193163][ T7895] ldm_validate_partition_table(): Disk read failed. [ 271.203142][ T7895] Dev nbd0: unable to read RDB block 0 [ 271.212158][ T7895] nbd0: unable to read partition table [ 271.241219][ T7895] ldm_validate_partition_table(): Disk read failed. [ 271.263851][ T7895] Dev nbd0: unable to read RDB block 0 [ 271.284903][ T7895] nbd0: unable to read partition table [ 271.676492][T12739] netlink: 'syz.0.1952': attribute type 1 has an invalid length. [ 272.013080][T12748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.020411][T12748] IPv6: NLM_F_CREATE should be set when creating new route [ 272.027770][T12748] IPv6: NLM_F_CREATE should be set when creating new route [ 272.035399][T12748] IPv6: NLM_F_CREATE should be set when creating new route [ 272.046903][T12747] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.084092][T12748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.139538][T12747] bridge_slave_1 (unregistering): left allmulticast mode [ 272.166085][T12747] bridge_slave_1 (unregistering): left promiscuous mode [ 272.185880][T12747] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.327958][ T3517] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.346745][ T3517] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.467385][ T3517] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.487822][ T3517] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.537930][ T3517] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.561154][ T3517] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.590590][ T3517] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.600848][ T3517] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.847558][T12764] netlink: 'syz.1.1961': attribute type 1 has an invalid length. [ 272.858191][T12771] __nla_validate_parse: 9 callbacks suppressed [ 272.858214][T12771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1964'. [ 272.901151][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1961'. [ 272.904196][T12771] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1964'. [ 272.920614][T12771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1964'. [ 272.989760][T12764] 8021q: adding VLAN 0 to HW filter on device bond10 [ 273.083833][T12764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.193864][T12787] openvswitch: netlink: Flow key attr not present in new flow. [ 273.202475][T12788] openvswitch: netlink: Flow key attr not present in new flow. [ 273.258665][T12789] bond11: option miimon: invalid value (18446744073709551585) [ 273.266769][T12789] bond11: option miimon: allowed values 0 - 2147483647 [ 273.279747][T12789] bond11 (unregistering): Released all slaves [ 273.687077][T12820] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1980'. [ 273.734078][T12813] netlink: zone id is out of range [ 273.741513][T12813] netlink: zone id is out of range [ 273.747436][T12813] netlink: zone id is out of range [ 273.752900][T12813] netlink: zone id is out of range [ 273.758814][T12813] netlink: zone id is out of range [ 273.765995][T12813] netlink: zone id is out of range [ 273.771599][T12813] netlink: zone id is out of range [ 273.797418][T12814] geneve3: entered promiscuous mode [ 273.802688][T12814] geneve3: entered allmulticast mode [ 274.070969][T12837] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1984'. [ 274.337670][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1988'. [ 274.527758][T12867] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1992'. [ 274.600965][T12872] netlink: 'syz.3.1992': attribute type 11 has an invalid length. [ 274.628589][T12872] netlink: 'syz.3.1992': attribute type 4 has an invalid length. [ 274.647576][T12872] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.1992'. [ 275.035349][T12892] netlink: 'syz.4.1999': attribute type 2 has an invalid length. [ 275.151033][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2003'. [ 275.396062][T12918] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 275.404832][T12918] netlink: 'syz.0.2009': attribute type 3 has an invalid length. [ 275.412809][T12918] netlink: 'syz.0.2009': attribute type 7 has an invalid length. [ 275.421936][T12918] netlink: 'syz.0.2009': attribute type 8 has an invalid length. [ 275.433968][T12918] NCSI netlink: No device for ifindex 131092 [ 275.541544][T12922] syzkaller0: entered promiscuous mode [ 275.552580][T12922] syzkaller0: entered allmulticast mode [ 277.419871][T12945] gtp1: entered promiscuous mode [ 277.885469][T12981] __nla_validate_parse: 4 callbacks suppressed [ 277.885491][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2030'. [ 277.909944][T12984] netlink: 'syz.1.2026': attribute type 7 has an invalid length. [ 278.570774][T13024] syzkaller0: entered promiscuous mode [ 278.585008][T13024] syzkaller0: entered allmulticast mode [ 278.602077][T13027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2041'. [ 278.687556][T13034] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2039'. [ 278.699002][T13025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2039'. [ 279.035432][T13049] net_ratelimit: 48 callbacks suppressed [ 279.035454][T13049] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 279.197476][T13064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2046'. [ 279.321266][T13069] netlink: 'syz.2.2052': attribute type 6 has an invalid length. [ 279.430841][T13069] netlink: 'syz.2.2052': attribute type 6 has an invalid length. [ 279.458422][T13069] netlink: 'syz.2.2052': attribute type 6 has an invalid length. [ 279.585565][T13081] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2056'. [ 279.612095][T13081] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 279.750066][T13088] bond11: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 279.771211][T13088] bond11 (unregistering): Released all slaves [ 279.778928][T13094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.796050][T13092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2060'. [ 279.820924][T13057] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 279.936743][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'. [ 280.100048][T13107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2065'. [ 280.126237][T13107] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2065'. [ 280.390379][T13120] syzkaller1: entered promiscuous mode [ 280.400844][T13120] syzkaller1: entered allmulticast mode [ 280.595648][T13120] bond6 (unregistering): Released all slaves [ 281.979316][T13208] validate_nla: 1 callbacks suppressed [ 281.979336][T13208] netlink: 'syz.1.2095': attribute type 19 has an invalid length. [ 281.993628][T13206] netlink: 'syz.1.2095': attribute type 19 has an invalid length. [ 282.003847][T13208] netlink: 'syz.1.2095': attribute type 19 has an invalid length. [ 282.013340][T13206] netlink: 'syz.1.2095': attribute type 19 has an invalid length. [ 282.189241][T13219] syzkaller1: entered promiscuous mode [ 282.196453][T13219] syzkaller1: entered allmulticast mode [ 282.818633][T13258] netlink: 'syz.2.2114': attribute type 1 has an invalid length. [ 282.938587][T13264] : entered promiscuous mode [ 283.010076][T13271] __nla_validate_parse: 14 callbacks suppressed [ 283.010098][T13271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2119'. [ 283.087726][T13275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2121'. [ 283.182933][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2123'. [ 283.233291][T13282] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 283.249074][T13280] netlink: 'syz.0.2123': attribute type 1 has an invalid length. [ 283.487981][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 283.502098][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 283.846767][T13309] Bluetooth: MGMT ver 1.23 [ 284.052746][T13322] sctp: [Deprecated]: syz.4.2137 (pid 13322) Use of int in max_burst socket option deprecated. [ 284.052746][T13322] Use struct sctp_assoc_value instead [ 284.097818][T13325] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 284.126512][T13332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2138'. [ 284.161378][ T5838] Bluetooth: hci4: link tx timeout [ 284.168346][ T5838] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.187403][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2139'. [ 284.635404][T13355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2148'. [ 285.712554][T13395] vlan2: entered promiscuous mode [ 285.718848][T13395] bridge0: entered promiscuous mode [ 285.813299][T13406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.904940][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 285.904944][ T5832] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 285.932108][T13413] netlink: 'syz.2.2162': attribute type 11 has an invalid length. [ 285.974475][T13413] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2162'. [ 286.068291][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'. [ 286.207532][T13416] bond0 (unregistering): Released all slaves [ 286.228179][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 286.457733][T13438] gtp1: entered promiscuous mode [ 286.466997][T13438] gtp1: entered allmulticast mode [ 286.476302][T13442] netlink: 'syz.1.2171': attribute type 13 has an invalid length. [ 286.496216][T13442] veth0_macvtap: left promiscuous mode [ 286.496551][T13440] x_tables: duplicate underflow at hook 1 [ 286.509234][T13442] macvtap0: entered allmulticast mode [ 286.531939][T13442] macvtap0: refused to change device tx_queue_len [ 286.544876][T13438] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 286.828002][T13458] netlink: 'syz.1.2178': attribute type 1 has an invalid length. [ 287.166297][T13475] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 287.306212][T13487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.333313][T13487] netlink: 'syz.4.2188': attribute type 1 has an invalid length. [ 287.387916][T13487] bond0: entered promiscuous mode [ 287.393602][T13487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.422617][T13488] bond0: (slave bridge6): making interface the new active one [ 287.430735][T13488] bridge6: entered promiscuous mode [ 287.438849][T13488] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 287.768314][T13515] netlink: 'syz.3.2198': attribute type 9 has an invalid length. [ 287.796665][T13515] netlink: 'syz.3.2198': attribute type 11 has an invalid length. [ 287.807407][T13515] netlink: 'syz.3.2198': attribute type 12 has an invalid length. [ 288.130437][T13538] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 288.232234][T13544] veth0_to_bridge: entered promiscuous mode [ 288.240387][T13544] __nla_validate_parse: 11 callbacks suppressed [ 288.240408][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2210'. [ 288.265184][T13544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2210'. [ 288.347482][ T8687] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 288.357634][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2210'. [ 288.367731][ T8687] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 288.379894][T13544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2210'. [ 288.390388][ T8687] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 288.402737][ T8687] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 288.462559][T13553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2213'. [ 288.470233][T13542] veth0_to_bridge: left promiscuous mode [ 288.494914][T13553] vxcan0: entered allmulticast mode [ 288.837680][T13569] : renamed from bridge_slave_0 (while UP) [ 289.007886][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2223'. [ 289.220636][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2228'. [ 289.319716][T13609] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2231'. [ 289.319868][T13606] tls_set_device_offload_rx: netdev not found [ 289.365476][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2228'. [ 289.386362][ T8687] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 289.580736][T13625] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2233'. [ 289.774066][T13635] netlink: 'syz.1.2235': attribute type 1 has an invalid length. [ 290.063025][T13643] netlink: 'syz.4.2239': attribute type 25 has an invalid length. [ 290.339031][T13663] ip6tnl0: entered promiscuous mode [ 290.358222][T13663] ip6tnl0: entered allmulticast mode [ 290.546891][T13675] bridge0: port 3(team0) entered disabled state [ 290.751687][T13675] tipc: Resetting bearer [ 290.777120][T13675] tipc: Resetting bearer [ 290.850766][ T8686] tipc: Resetting bearer [ 291.215555][T13710] netlink: 'syz.1.2255': attribute type 2 has an invalid length. [ 291.246691][T13710] netlink: 'syz.1.2255': attribute type 2 has an invalid length. [ 291.325811][T13718] openvswitch: netlink: Multiple metadata blocks provided [ 291.493971][T13726] veth1_to_bond: entered allmulticast mode [ 291.622684][T13726] bond0: (slave bond_slave_1): Releasing backup interface [ 291.656247][T13726] bond_slave_1 (unregistering): left promiscuous mode [ 291.690246][T13726] veth1_to_bond (unregistering): left allmulticast mode [ 291.822480][T13743] tipc: Enabling of bearer rejected, failed to enable media [ 291.851552][T13746] netlink: 'syz.1.2265': attribute type 1 has an invalid length. [ 291.926468][T13746] 8021q: adding VLAN 0 to HW filter on device bond11 [ 291.974899][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 292.003764][T13752] 8021q: adding VLAN 0 to HW filter on device bond11 [ 292.011195][T13752] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 292.022771][T13752] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 292.071135][T13746] veth9: entered promiscuous mode [ 292.083578][T13746] bond11: (slave veth9): Enslaving as an active interface with a down link [ 292.102726][T13756] vlan2: entered allmulticast mode [ 292.124244][T13756] bond11: entered allmulticast mode [ 292.361232][T13740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.382250][T13740] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 292.418233][T13740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 292.427736][T13740] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 292.439940][T13740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.446680][T13740] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 292.460560][T13740] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 292.467297][T13740] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 292.499110][T13740] tipc: Resetting bearer [ 293.323400][T13815] __nla_validate_parse: 9 callbacks suppressed [ 293.323420][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2281'. [ 293.530509][T13826] wg1 speed is unknown, defaulting to 1000 [ 293.599817][T13828] wg1 speed is unknown, defaulting to 1000 [ 293.932061][T13845] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2287'. [ 293.996098][T13847] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 294.006036][T13847] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 294.058786][T13847] netlink: 'syz.2.2288': attribute type 10 has an invalid length. [ 294.071949][T13847] dummy0: entered promiscuous mode [ 294.079215][T13847] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 317.577488][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 379.018360][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 414.854441][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.457052][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 451.336029][ T31] INFO: task syz-executor:5834 blocked for more than 143 seconds. [ 451.345622][ T31] Not tainted syzkaller #0 [ 451.350616][ T31] Blocked by coredump. [ 451.355586][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.364645][ T31] task:syz-executor state:D stack:20840 pid:5834 tgid:5834 ppid:1 task_flags:0x40054c flags:0x00080003 [ 451.377056][ T31] Call Trace: [ 451.380333][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 451.383363][ T31] __schedule+0x14bc/0x5000 [ 451.388722][ T31] ? __pfx___schedule+0x10/0x10 [ 451.393741][ T31] ? schedule+0x91/0x360 [ 451.398953][ T31] schedule+0x165/0x360 [ 451.403265][ T31] schedule_preempt_disabled+0x13/0x30 [ 451.414589][ T31] __mutex_lock+0x7e6/0x1350 [ 451.419384][ T31] ? __mutex_lock+0x5bb/0x1350 [ 451.470178][ T31] ? rfkill_unregister+0xc8/0x220 [ 451.475582][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 451.480719][ T31] ? __pfx_device_del+0x10/0x10 [ 451.486221][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 451.491457][ T31] ? __cancel_work_sync+0x5c/0x110 [ 451.498695][ T31] rfkill_unregister+0xc8/0x220 [ 451.504076][ T31] hci_unregister_dev+0x374/0x510 [ 451.509242][ T31] vhci_release+0x152/0x1a0 [ 451.513797][ T31] ? __pfx_vhci_release+0x10/0x10 [ 451.519109][ T31] __fput+0x44c/0xa70 [ 451.523125][ T31] task_work_run+0x1d4/0x260 [ 451.527746][ T31] ? __pfx_task_work_run+0x10/0x10 [ 451.532864][ T31] ? kmem_cache_free+0x197/0x620 [ 451.537873][ T31] ? do_exit+0x6c0/0x2310 [ 451.542203][ T31] do_exit+0x6c5/0x2310 [ 451.546732][ T31] ? do_raw_spin_lock+0x121/0x290 [ 451.551774][ T31] ? __pfx_do_exit+0x10/0x10 [ 451.556661][ T31] ? cgroup1_freezing+0x20/0x350 [ 451.561639][ T31] do_group_exit+0x21c/0x2d0 [ 451.566850][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 451.572332][ T31] get_signal+0x1285/0x1340 [ 451.577421][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 451.583090][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 451.589539][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 451.595287][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 451.600580][ T31] ? rcu_is_watching+0x15/0xb0 [ 451.605720][ T31] do_syscall_64+0x2e3/0xf80 [ 451.610402][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.616745][ T31] ? clear_bhb_loop+0x60/0xb0 [ 451.621604][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.627768][ T31] RIP: 0033:0x7f865d585897 [ 451.632179][ T31] RSP: 002b:00007ffea67a25f0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 451.640877][ T31] RAX: fffffffffffffe00 RBX: 000000000000051d RCX: 00007f865d585897 [ 451.649135][ T31] RDX: 0000000040000000 RSI: 00007ffea67a265c RDI: 00000000ffffffff [ 451.657963][ T31] RBP: 00007ffea67a265c R08: 0000000000000000 R09: 0000000000000000 [ 451.666452][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000001b6 [ 451.675194][ T31] R13: 000055556f695590 R14: 00000000000472e8 R15: 00007ffea67a26b0 [ 451.683184][ T31] [ 451.686596][ T31] INFO: task kworker/1:13:10300 blocked for more than 143 seconds. [ 451.694916][ T31] Not tainted syzkaller #0 [ 451.699852][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.708801][ T31] task:kworker/1:13 state:D stack:24368 pid:10300 tgid:10300 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 451.721067][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 451.728290][ T31] Call Trace: [ 451.731568][ T31] [ 451.735000][ T31] __schedule+0x14bc/0x5000 [ 451.739632][ T31] ? __pfx___schedule+0x10/0x10 [ 451.744771][ T31] ? schedule+0x91/0x360 [ 451.749015][ T31] schedule+0x165/0x360 [ 451.753427][ T31] schedule_preempt_disabled+0x13/0x30 [ 451.759245][ T31] __mutex_lock+0x7e6/0x1350 [ 451.763855][ T31] ? __mutex_lock+0x5bb/0x1350 [ 451.769046][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 451.775616][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 451.780750][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 451.786977][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 451.792795][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 451.799344][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 451.805331][ T31] process_scheduled_works+0xad1/0x1770 [ 451.811075][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 451.817183][ T31] worker_thread+0x8a0/0xda0 [ 451.821784][ T31] ? __kthread_parkme+0x7b/0x200 [ 451.826839][ T31] kthread+0x711/0x8a0 [ 451.830925][ T31] ? __pfx_worker_thread+0x10/0x10 [ 451.836498][ T31] ? __pfx_kthread+0x10/0x10 [ 451.841185][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.846712][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 451.851910][ T31] ? __pfx_kthread+0x10/0x10 [ 451.856957][ T31] ret_from_fork+0x599/0xb30 [ 451.861603][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 451.867094][ T31] ? __switch_to_asm+0x39/0x70 [ 451.871947][ T31] ? __switch_to_asm+0x33/0x70 [ 451.876999][ T31] ? __pfx_kthread+0x10/0x10 [ 451.881591][ T31] ret_from_fork_asm+0x1a/0x30 [ 451.886645][ T31] [ 451.889687][ T31] INFO: task syz.4.2262:13740 blocked for more than 143 seconds. [ 451.898165][ T31] Not tainted syzkaller #0 [ 451.903125][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 451.912097][ T31] task:syz.4.2262 state:D stack:24872 pid:13740 tgid:13727 ppid:5839 task_flags:0x400040 flags:0x00080002 [ 451.924519][ T31] Call Trace: [ 451.927822][ T31] [ 451.930798][ T31] __schedule+0x14bc/0x5000 [ 451.935601][ T31] ? __pfx___schedule+0x10/0x10 [ 451.940890][ T31] ? schedule+0x91/0x360 [ 451.945424][ T31] schedule+0x165/0x360 [ 451.949578][ T31] schedule_preempt_disabled+0x13/0x30 [ 451.955303][ T31] __mutex_lock+0x7e6/0x1350 [ 451.959983][ T31] ? __mutex_lock+0x5bb/0x1350 [ 451.965111][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 451.970403][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 451.975950][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 451.981195][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 451.987535][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 451.993985][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 452.000004][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 452.005403][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 452.011122][ T31] rfkill_set_block+0x1d2/0x440 [ 452.016441][ T31] rfkill_fop_write+0x44b/0x570 [ 452.021487][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 452.027148][ T31] ? security_kernfs_init_security+0x270/0x290 [ 452.033566][ T31] ? rw_verify_area+0x255/0x4d0 [ 452.038708][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 452.044475][ T31] vfs_write+0x27e/0xb30 [ 452.048837][ T31] ? __pfx_vfs_write+0x10/0x10 [ 452.053785][ T31] ? __fget_files+0x2a/0x420 [ 452.058671][ T31] ? __fget_files+0x2a/0x420 [ 452.063280][ T31] ? __fget_files+0x3a0/0x420 [ 452.068467][ T31] ? __fget_files+0x2a/0x420 [ 452.073096][ T31] ksys_write+0x145/0x250 [ 452.077740][ T31] ? __pfx_ksys_write+0x10/0x10 [ 452.082682][ T31] ? do_syscall_64+0xbe/0xf80 [ 452.087841][ T31] do_syscall_64+0xfa/0xf80 [ 452.092458][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.098970][ T31] ? clear_bhb_loop+0x60/0xb0 [ 452.103662][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.109820][ T31] RIP: 0033:0x7f123f78f749 [ 452.114300][ T31] RSP: 002b:00007f1240641038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.122715][ T31] RAX: ffffffffffffffda RBX: 00007f123f9e6090 RCX: 00007f123f78f749 [ 452.130871][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 452.139416][ T31] RBP: 00007f123f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 452.147786][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.156150][ T31] R13: 00007f123f9e6128 R14: 00007f123f9e6090 R15: 00007fff2746d688 [ 452.164586][ T31] [ 452.167649][ T31] INFO: task syz.3.2263:13730 blocked for more than 144 seconds. [ 452.178348][ T31] Not tainted syzkaller #0 [ 452.183283][ T31] Blocked by coredump. [ 452.188125][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.197076][ T31] task:syz.3.2263 state:D stack:25640 pid:13730 tgid:13729 ppid:5834 task_flags:0x40044c flags:0x00080001 [ 452.209259][ T31] Call Trace: [ 452.212552][ T31] [ 452.215981][ T31] __schedule+0x14bc/0x5000 [ 452.220521][ T31] ? __pfx___schedule+0x10/0x10 [ 452.225744][ T31] ? schedule+0x91/0x360 [ 452.230007][ T31] schedule+0x165/0x360 [ 452.235824][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.241374][ T31] __mutex_lock+0x7e6/0x1350 [ 452.246417][ T31] ? __mutex_lock+0x5bb/0x1350 [ 452.251211][ T31] ? rfkill_unregister+0xc8/0x220 [ 452.256516][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.261587][ T31] ? __pfx_device_del+0x10/0x10 [ 452.266820][ T31] ? __cancel_work_sync+0x5c/0x110 [ 452.272132][ T31] rfkill_unregister+0xc8/0x220 [ 452.277920][ T31] nfc_unregister_device+0x96/0x2a0 [ 452.283127][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 452.289428][ T31] virtual_ncidev_close+0x56/0x90 [ 452.295242][ T31] __fput+0x44c/0xa70 [ 452.299287][ T31] task_work_run+0x1d4/0x260 [ 452.304000][ T31] ? __pfx_task_work_run+0x10/0x10 [ 452.309423][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 452.314842][ T31] do_exit+0x6c5/0x2310 [ 452.319047][ T31] ? cgroup1_freezing+0x20/0x350 [ 452.323989][ T31] ? __pfx_do_exit+0x10/0x10 [ 452.328920][ T31] ? cgroup1_freezing+0x20/0x350 [ 452.333871][ T31] ? cgroup1_freezing+0x20/0x350 [ 452.339099][ T31] do_group_exit+0x21c/0x2d0 [ 452.343689][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 452.349551][ T31] get_signal+0x1285/0x1340 [ 452.354568][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 452.360135][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 452.366583][ T31] ? do_sys_openat2+0x15a/0x200 [ 452.371626][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 452.377777][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 452.383074][ T31] ? rcu_is_watching+0x15/0xb0 [ 452.388160][ T31] do_syscall_64+0x2e3/0xf80 [ 452.392862][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.399225][ T31] ? clear_bhb_loop+0x60/0xb0 [ 452.403989][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.410312][ T31] RIP: 0033:0x7f865d58f749 [ 452.414756][ T31] RSP: 002b:00007f865e49b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 452.423174][ T31] RAX: 0000000000000003 RBX: 00007f865d7e5fa0 RCX: 00007f865d58f749 [ 452.431189][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 452.439434][ T31] RBP: 00007f865d613f91 R08: 0000000000000000 R09: 0000000000000000 [ 452.447829][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.458894][ T31] R13: 00007f865d7e6038 R14: 00007f865d7e5fa0 R15: 00007ffea67a2298 [ 452.467365][ T31] [ 452.470414][ T31] INFO: task syz.1.2276:13785 blocked for more than 144 seconds. [ 452.478432][ T31] Not tainted syzkaller #0 [ 452.483394][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.492369][ T31] task:syz.1.2276 state:D stack:25768 pid:13785 tgid:13784 ppid:5844 task_flags:0x400040 flags:0x00080002 [ 452.504773][ T31] Call Trace: [ 452.508061][ T31] [ 452.511098][ T31] __schedule+0x14bc/0x5000 [ 452.515981][ T31] ? __pfx___schedule+0x10/0x10 [ 452.520851][ T31] ? schedule+0x91/0x360 [ 452.525395][ T31] schedule+0x165/0x360 [ 452.529575][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.535576][ T31] __mutex_lock+0x7e6/0x1350 [ 452.540203][ T31] ? __mutex_lock+0x5bb/0x1350 [ 452.545374][ T31] ? rfkill_register+0x37/0x8e0 [ 452.550227][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.555531][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 452.560966][ T31] ? device_initialize+0x24b/0x440 [ 452.566467][ T31] rfkill_register+0x37/0x8e0 [ 452.571151][ T31] nfc_register_device+0x14a/0x320 [ 452.576647][ T31] nci_register_device+0x87f/0x9d0 [ 452.581912][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 452.587962][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 452.593259][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 452.598931][ T31] virtual_ncidev_open+0x129/0x1a0 [ 452.604132][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 452.609901][ T31] misc_open+0x2d5/0x350 [ 452.614785][ T31] chrdev_open+0x4cc/0x5e0 [ 452.619246][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 452.624526][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 452.630874][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 452.636097][ T31] do_dentry_open+0x7ce/0x1420 [ 452.641029][ T31] vfs_open+0x3b/0x340 [ 452.645527][ T31] ? path_openat+0x33f3/0x3dd0 [ 452.650325][ T31] path_openat+0x340e/0x3dd0 [ 452.655202][ T31] ? do_sys_openat2+0xbc/0x200 [ 452.659963][ T31] ? __x64_sys_openat+0x138/0x170 [ 452.665274][ T31] ? __pfx_path_openat+0x10/0x10 [ 452.670213][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 452.675760][ T31] do_filp_open+0x1fa/0x410 [ 452.680379][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 452.685694][ T31] ? _raw_spin_unlock+0x28/0x50 [ 452.690588][ T31] ? alloc_fd+0x64c/0x6c0 [ 452.695419][ T31] do_sys_openat2+0x121/0x200 [ 452.700099][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 452.705642][ T31] ? rcu_is_watching+0x15/0xb0 [ 452.710428][ T31] __x64_sys_openat+0x138/0x170 [ 452.715544][ T31] do_syscall_64+0xfa/0xf80 [ 452.720231][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.726476][ T31] ? clear_bhb_loop+0x60/0xb0 [ 452.731177][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.737099][ T31] RIP: 0033:0x7fd932f8f749 [ 452.741509][ T31] RSP: 002b:00007fd9311f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 452.750417][ T31] RAX: ffffffffffffffda RBX: 00007fd9331e5fa0 RCX: 00007fd932f8f749 [ 452.758691][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 452.767401][ T31] RBP: 00007fd933013f91 R08: 0000000000000000 R09: 0000000000000000 [ 452.775903][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.784601][ T31] R13: 00007fd9331e6038 R14: 00007fd9331e5fa0 R15: 00007ffc8e0d2bc8 [ 452.792741][ T31] [ 452.796246][ T31] INFO: task syz.0.2284:13830 blocked for more than 144 seconds. [ 452.804682][ T31] Not tainted syzkaller #0 [ 452.809643][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 452.818870][ T31] task:syz.0.2284 state:D stack:25912 pid:13830 tgid:13829 ppid:5826 task_flags:0x400140 flags:0x00080002 [ 452.831078][ T31] Call Trace: [ 452.834686][ T31] [ 452.837636][ T31] __schedule+0x14bc/0x5000 [ 452.842348][ T31] ? __pfx___schedule+0x10/0x10 [ 452.847591][ T31] ? schedule+0x91/0x360 [ 452.852018][ T31] schedule+0x165/0x360 [ 452.856643][ T31] schedule_preempt_disabled+0x13/0x30 [ 452.862201][ T31] __mutex_lock+0x7e6/0x1350 [ 452.867099][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 452.872041][ T31] ? __mutex_lock+0x5bb/0x1350 [ 452.877189][ T31] ? misc_open+0x51/0x350 [ 452.881526][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 452.886856][ T31] misc_open+0x51/0x350 [ 452.891123][ T31] chrdev_open+0x4cc/0x5e0 [ 452.895850][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 452.900898][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 452.907543][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 452.912756][ T31] do_dentry_open+0x7ce/0x1420 [ 452.918066][ T31] vfs_open+0x3b/0x340 [ 452.922133][ T31] ? path_openat+0x33f3/0x3dd0 [ 452.927272][ T31] path_openat+0x340e/0x3dd0 [ 452.931936][ T31] ? do_sys_openat2+0xbc/0x200 [ 452.937487][ T31] ? __x64_sys_openat+0x138/0x170 [ 452.942638][ T31] ? __pfx_path_openat+0x10/0x10 [ 452.948023][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 452.953059][ T31] do_filp_open+0x1fa/0x410 [ 452.957841][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 452.963144][ T31] ? _raw_spin_unlock+0x28/0x50 [ 452.968312][ T31] ? alloc_fd+0x64c/0x6c0 [ 452.972658][ T31] do_sys_openat2+0x121/0x200 [ 452.977616][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 452.982822][ T31] ? rcu_is_watching+0x15/0xb0 [ 452.987970][ T31] __x64_sys_openat+0x138/0x170 [ 452.992834][ T31] do_syscall_64+0xfa/0xf80 [ 452.997746][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.003982][ T31] ? clear_bhb_loop+0x60/0xb0 [ 453.008915][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.014858][ T31] RIP: 0033:0x7f7da1b8f749 [ 453.019393][ T31] RSP: 002b:00007f7da2ab0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.027897][ T31] RAX: ffffffffffffffda RBX: 00007f7da1de5fa0 RCX: 00007f7da1b8f749 [ 453.036257][ T31] RDX: 0000000000040241 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 453.044644][ T31] RBP: 00007f7da1c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 453.052884][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.061241][ T31] R13: 00007f7da1de6038 R14: 00007f7da1de5fa0 R15: 00007ffe66e90df8 [ 453.069595][ T31] [ 453.072715][ T31] INFO: task syz.2.2290:13852 blocked for more than 145 seconds. [ 453.081449][ T31] Not tainted syzkaller #0 [ 453.086669][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.095610][ T31] task:syz.2.2290 state:D stack:27360 pid:13852 tgid:13851 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 453.108101][ T31] Call Trace: [ 453.111394][ T31] [ 453.114623][ T31] __schedule+0x14bc/0x5000 [ 453.119270][ T31] ? __pfx___schedule+0x10/0x10 [ 453.124603][ T31] ? schedule+0x91/0x360 [ 453.129085][ T31] schedule+0x165/0x360 [ 453.133466][ T31] schedule_preempt_disabled+0x13/0x30 [ 453.139377][ T31] __mutex_lock+0x7e6/0x1350 [ 453.143974][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 453.149276][ T31] ? __mutex_lock+0x5bb/0x1350 [ 453.154092][ T31] ? misc_open+0x51/0x350 [ 453.158447][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 453.163482][ T31] misc_open+0x51/0x350 [ 453.168122][ T31] chrdev_open+0x4cc/0x5e0 [ 453.172548][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 453.178492][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 453.185125][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 453.190157][ T31] do_dentry_open+0x7ce/0x1420 [ 453.195339][ T31] vfs_open+0x3b/0x340 [ 453.199598][ T31] ? path_openat+0x33f3/0x3dd0 [ 453.204778][ T31] path_openat+0x340e/0x3dd0 [ 453.209536][ T31] ? do_sys_openat2+0xbc/0x200 [ 453.214664][ T31] ? __x64_sys_openat+0x138/0x170 [ 453.219693][ T31] ? __pfx_path_openat+0x10/0x10 [ 453.224962][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 453.229950][ T31] do_filp_open+0x1fa/0x410 [ 453.234911][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 453.240008][ T31] ? _raw_spin_unlock+0x28/0x50 [ 453.245443][ T31] ? alloc_fd+0x64c/0x6c0 [ 453.249904][ T31] do_sys_openat2+0x121/0x200 [ 453.255183][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 453.260416][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 453.265936][ T31] __x64_sys_openat+0x138/0x170 [ 453.270815][ T31] do_syscall_64+0xfa/0xf80 [ 453.275848][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.281995][ T31] ? clear_bhb_loop+0x60/0xb0 [ 453.287047][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.293030][ T31] RIP: 0033:0x7fe31178f749 [ 453.297728][ T31] RSP: 002b:00007fe3125fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.306313][ T31] RAX: ffffffffffffffda RBX: 00007fe3119e5fa0 RCX: 00007fe31178f749 [ 453.314323][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 453.322312][ T31] RBP: 00007fe311813f91 R08: 0000000000000000 R09: 0000000000000000 [ 453.330395][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.341942][ T31] R13: 00007fe3119e6038 R14: 00007fe3119e5fa0 R15: 00007fff3f3aebe8 [ 453.350235][ T31] [ 453.353452][ T31] INFO: task syz.2.2290:13853 blocked for more than 145 seconds. [ 453.361779][ T31] Not tainted syzkaller #0 [ 453.367022][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.376147][ T31] task:syz.2.2290 state:D stack:26968 pid:13853 tgid:13851 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 453.388800][ T31] Call Trace: [ 453.392120][ T31] [ 453.395422][ T31] __schedule+0x14bc/0x5000 [ 453.399969][ T31] ? __pfx___schedule+0x10/0x10 [ 453.405098][ T31] ? schedule+0x91/0x360 [ 453.409359][ T31] schedule+0x165/0x360 [ 453.413552][ T31] schedule_preempt_disabled+0x13/0x30 [ 453.419942][ T31] __mutex_lock+0x7e6/0x1350 [ 453.424971][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 453.429976][ T31] ? __mutex_lock+0x5bb/0x1350 [ 453.435087][ T31] ? misc_open+0x51/0x350 [ 453.439511][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 453.444838][ T31] misc_open+0x51/0x350 [ 453.449004][ T31] chrdev_open+0x4cc/0x5e0 [ 453.453427][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 453.458732][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 453.465765][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 453.470831][ T31] do_dentry_open+0x7ce/0x1420 [ 453.476004][ T31] vfs_open+0x3b/0x340 [ 453.480073][ T31] ? path_openat+0x33f3/0x3dd0 [ 453.485199][ T31] path_openat+0x340e/0x3dd0 [ 453.489902][ T31] ? do_sys_openat2+0xbc/0x200 [ 453.495024][ T31] ? __x64_sys_openat+0x138/0x170 [ 453.500047][ T31] ? __pfx_path_openat+0x10/0x10 [ 453.505371][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 453.510421][ T31] do_filp_open+0x1fa/0x410 [ 453.515402][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 453.520614][ T31] ? _raw_spin_unlock+0x28/0x50 [ 453.525812][ T31] ? alloc_fd+0x64c/0x6c0 [ 453.530276][ T31] do_sys_openat2+0x121/0x200 [ 453.535445][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 453.540796][ T31] ? __fget_files+0x3a0/0x420 [ 453.545814][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 453.551023][ T31] __x64_sys_openat+0x138/0x170 [ 453.556187][ T31] do_syscall_64+0xfa/0xf80 [ 453.560714][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.567097][ T31] ? clear_bhb_loop+0x60/0xb0 [ 453.571865][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.578049][ T31] RIP: 0033:0x7fe31178f749 [ 453.582471][ T31] RSP: 002b:00007fe3125d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.591225][ T31] RAX: ffffffffffffffda RBX: 00007fe3119e6090 RCX: 00007fe31178f749 [ 453.599390][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 453.607498][ T31] RBP: 00007fe311813f91 R08: 0000000000000000 R09: 0000000000000000 [ 453.615777][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.623842][ T31] R13: 00007fe3119e6128 R14: 00007fe3119e6090 R15: 00007fff3f3aebe8 [ 453.632404][ T31] [ 453.635726][ T31] INFO: task syz-executor:13858 blocked for more than 145 seconds. [ 453.643648][ T31] Not tainted syzkaller #0 [ 453.649084][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.658245][ T31] task:syz-executor state:D stack:27800 pid:13858 tgid:13858 ppid:1 task_flags:0x400040 flags:0x00080000 [ 453.670519][ T31] Call Trace: [ 453.673803][ T31] [ 453.677053][ T31] __schedule+0x14bc/0x5000 [ 453.681577][ T31] ? __pfx___schedule+0x10/0x10 [ 453.686834][ T31] ? schedule+0x91/0x360 [ 453.691088][ T31] schedule+0x165/0x360 [ 453.695514][ T31] schedule_preempt_disabled+0x13/0x30 [ 453.700977][ T31] __mutex_lock+0x7e6/0x1350 [ 453.705841][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 453.711053][ T31] ? __mutex_lock+0x5bb/0x1350 [ 453.716194][ T31] ? misc_open+0x51/0x350 [ 453.720559][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 453.726218][ T31] misc_open+0x51/0x350 [ 453.730466][ T31] chrdev_open+0x4cc/0x5e0 [ 453.735456][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 453.740501][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 453.747389][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 453.752427][ T31] do_dentry_open+0x7ce/0x1420 [ 453.757669][ T31] vfs_open+0x3b/0x340 [ 453.761769][ T31] ? path_openat+0x33f3/0x3dd0 [ 453.766893][ T31] path_openat+0x340e/0x3dd0 [ 453.771508][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 453.777602][ T31] ? __pfx_path_openat+0x10/0x10 [ 453.782589][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 453.787834][ T31] do_filp_open+0x1fa/0x410 [ 453.792514][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 453.797839][ T31] ? _raw_spin_unlock+0x28/0x50 [ 453.802709][ T31] ? alloc_fd+0x64c/0x6c0 [ 453.807519][ T31] do_sys_openat2+0x121/0x200 [ 453.812202][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 453.817678][ T31] ? fd_install+0x95/0x3d0 [ 453.822095][ T31] ? fd_install+0x307/0x3d0 [ 453.826878][ T31] __x64_sys_openat+0x138/0x170 [ 453.831989][ T31] do_syscall_64+0xfa/0xf80 [ 453.836780][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.842984][ T31] ? clear_bhb_loop+0x60/0xb0 [ 453.848300][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.854575][ T31] RIP: 0033:0x7fdb9f98df11 [ 453.858987][ T31] RSP: 002b:00007fff092aca20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 453.867804][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdb9f98df11 [ 453.876060][ T31] RDX: 0000000000000002 RSI: 00007fdb9fa149b7 RDI: 00000000ffffff9c [ 453.884029][ T31] RBP: 00007fdb9fa149b7 R08: 0000000000000000 R09: 00007fdba071d6c0 [ 453.892187][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 453.900400][ T31] R13: 0000000000000003 R14: 00007fff092acdf8 R15: 0000000000000000 [ 453.908560][ T31] [ 453.911629][ T31] INFO: task syz-executor:13859 blocked for more than 145 seconds. [ 453.919962][ T31] Not tainted syzkaller #0 [ 453.925392][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.934544][ T31] task:syz-executor state:D stack:27800 pid:13859 tgid:13859 ppid:1 task_flags:0x400040 flags:0x00080000 [ 453.946792][ T31] Call Trace: [ 453.950078][ T31] [ 453.953011][ T31] __schedule+0x14bc/0x5000 [ 453.957890][ T31] ? __pfx___schedule+0x10/0x10 [ 453.962773][ T31] ? schedule+0x91/0x360 [ 453.967355][ T31] schedule+0x165/0x360 [ 453.971785][ T31] schedule_preempt_disabled+0x13/0x30 [ 453.977627][ T31] __mutex_lock+0x7e6/0x1350 [ 453.982311][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 453.987591][ T31] ? __mutex_lock+0x5bb/0x1350 [ 453.992381][ T31] ? misc_open+0x51/0x350 [ 453.997119][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 454.002252][ T31] misc_open+0x51/0x350 [ 454.006713][ T31] chrdev_open+0x4cc/0x5e0 [ 454.011149][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 454.016584][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 454.022962][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 454.028330][ T31] do_dentry_open+0x7ce/0x1420 [ 454.033320][ T31] vfs_open+0x3b/0x340 [ 454.037794][ T31] ? path_openat+0x33f3/0x3dd0 [ 454.042655][ T31] path_openat+0x340e/0x3dd0 [ 454.047606][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 454.053201][ T31] ? __pfx_path_openat+0x10/0x10 [ 454.059036][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 454.064528][ T31] do_filp_open+0x1fa/0x410 [ 454.069330][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 454.074753][ T31] ? _raw_spin_unlock+0x28/0x50 [ 454.079696][ T31] ? alloc_fd+0x64c/0x6c0 [ 454.084778][ T31] do_sys_openat2+0x121/0x200 [ 454.089482][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 454.094974][ T31] ? fd_install+0x95/0x3d0 [ 454.099754][ T31] ? fd_install+0x307/0x3d0 [ 454.104604][ T31] __x64_sys_openat+0x138/0x170 [ 454.109458][ T31] do_syscall_64+0xfa/0xf80 [ 454.113954][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.120381][ T31] ? clear_bhb_loop+0x60/0xb0 [ 454.125543][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.131487][ T31] RIP: 0033:0x7fc5a138df11 [ 454.138378][ T31] RSP: 002b:00007ffc5cb1c0c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 454.147238][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc5a138df11 [ 454.155612][ T31] RDX: 0000000000000002 RSI: 00007fc5a14149b7 RDI: 00000000ffffff9c [ 454.163758][ T31] RBP: 00007fc5a14149b7 R08: 0000000000000000 R09: 00007fc5a211d6c0 [ 454.172053][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 454.180317][ T31] R13: 0000000000000003 R14: 00007ffc5cb1c498 R15: 0000000000000000 [ 454.188548][ T31] [ 454.191566][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 454.200637][ T31] [ 454.200637][ T31] Showing all locks held in the system: [ 454.208579][ T31] 1 lock held by khungtaskd/31: [ 454.213521][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 454.223767][ T31] 2 locks held by getty/5587: [ 454.228955][ T31] #0: ffff88814d20b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 454.239000][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 454.249706][ T31] 1 lock held by syz-executor/5834: [ 454.255219][ T31] #0: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 454.265873][ T31] 3 locks held by kworker/1:13/10300: [ 454.271251][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 454.283143][ T31] #1: ffffc90003157b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 454.297659][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 454.309360][ T31] 2 locks held by syz.4.2262/13740: [ 454.314844][ T31] #0: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 454.325235][ T31] #1: ffff888057841100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 454.335460][ T31] 2 locks held by syz.3.2263/13730: [ 454.341218][ T31] #0: ffff888057841100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 454.351236][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 454.361912][ T31] 3 locks held by syz.1.2276/13785: [ 454.367556][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.379686][ T31] #1: ffff88804edc8100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 454.389541][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 454.399820][ T31] 1 lock held by syz.0.2284/13830: [ 454.405266][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.413731][ T31] 1 lock held by syz.2.2290/13852: [ 454.419283][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.428173][ T31] 1 lock held by syz.2.2290/13853: [ 454.433360][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.442210][ T31] 1 lock held by syz-executor/13858: [ 454.447823][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.457778][ T31] 1 lock held by syz-executor/13859: [ 454.463110][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.471899][ T31] 1 lock held by syz-executor/13861: [ 454.477456][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.485978][ T31] 1 lock held by syz-executor/13863: [ 454.491516][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.500246][ T31] 1 lock held by syz-executor/13865: [ 454.505830][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.514830][ T31] 1 lock held by syz-executor/13867: [ 454.520283][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.529368][ T31] 1 lock held by syz-executor/13869: [ 454.535219][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.543890][ T31] 1 lock held by syz-executor/13872: [ 454.549566][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.558412][ T31] 1 lock held by syz-executor/13873: [ 454.563699][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.572622][ T31] 1 lock held by syz-executor/13875: [ 454.578535][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.587866][ T31] 1 lock held by syz-executor/13877: [ 454.593150][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.602146][ T31] 1 lock held by syz-executor/13879: [ 454.607780][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.616571][ T31] 1 lock held by syz-executor/13882: [ 454.622092][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.631020][ T31] 1 lock held by syz-executor/13883: [ 454.636877][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.645724][ T31] 1 lock held by syz-executor/13885: [ 454.651099][ T31] #0: ffffffff8e78ce48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 454.660019][ T31] [ 454.662357][ T31] ============================================= [ 454.662357][ T31] [ 454.671055][ T31] NMI backtrace for cpu 0 [ 454.671069][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 454.671082][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 454.671088][ T31] Call Trace: [ 454.671094][ T31] [ 454.671100][ T31] dump_stack_lvl+0x189/0x250 [ 454.671118][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.671131][ T31] ? __pfx__printk+0x10/0x10 [ 454.671152][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 454.671167][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 454.671179][ T31] ? __pfx__printk+0x10/0x10 [ 454.671196][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 454.671213][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 454.671226][ T31] watchdog+0xf3c/0xf80 [ 454.671250][ T31] ? watchdog+0x1e2/0xf80 [ 454.671267][ T31] kthread+0x711/0x8a0 [ 454.671282][ T31] ? __pfx_watchdog+0x10/0x10 [ 454.671295][ T31] ? __pfx_kthread+0x10/0x10 [ 454.671309][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.671322][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 454.671335][ T31] ? __pfx_kthread+0x10/0x10 [ 454.671348][ T31] ret_from_fork+0x599/0xb30 [ 454.671366][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 454.671387][ T31] ? __switch_to_asm+0x39/0x70 [ 454.671399][ T31] ? __switch_to_asm+0x33/0x70 [ 454.671411][ T31] ? __pfx_kthread+0x10/0x10 [ 454.671424][ T31] ret_from_fork_asm+0x1a/0x30 [ 454.671446][ T31] [ 454.671450][ T31] Sending NMI from CPU 0 to CPUs 1: [ 454.823873][ C1] NMI backtrace for cpu 1 [ 454.823894][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 454.823911][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 454.823920][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 454.823955][ C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 454.823969][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 454.823985][ C1] RAX: 6e88e66119662700 RBX: ffffffff8197438a RCX: 6e88e66119662700 [ 454.823997][ C1] RDX: 0000000000000001 RSI: ffffffff8d76be2c RDI: ffffffff8bbfc660 [ 454.824008][ C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3 [ 454.824019][ C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805a70 [ 454.824036][ C1] R13: 1ffff11003951b70 R14: 0000000000000001 R15: 0000000000000001 [ 454.824047][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 454.824061][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.824072][ C1] CR2: 0000558803863000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 454.824090][ C1] Call Trace: [ 454.824098][ C1] [ 454.824105][ C1] default_idle+0x13/0x20 [ 454.824127][ C1] default_idle_call+0x73/0xb0 [ 454.824151][ C1] do_idle+0x1ea/0x520 [ 454.824167][ C1] ? irqentry_exit+0x5ba/0x660 [ 454.824188][ C1] ? __pfx_do_idle+0x10/0x10 [ 454.824212][ C1] cpu_startup_entry+0x44/0x60 [ 454.824228][ C1] start_secondary+0x101/0x110 [ 454.824249][ C1] common_startup_64+0x13e/0x147 [ 454.824275][ C1]