last executing test programs: 17.996888011s ago: executing program 4 (id=2069): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000440)=""/61, 0x3d, 0x0, &(0x7f0000000640)=""/42, 0x2a}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r0, 0x676b874181c55a22) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYRESHEX=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, r1, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0x5, 0x8}, 0x10, r0}, 0x94) gettid() 17.95783146s ago: executing program 1 (id=2071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @generic={0x5, 0x3, 0x1, 0x2, 0x65}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x13}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @generic={0x5, 0x3, 0x1, 0x2, 0x65}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) 17.877579776s ago: executing program 4 (id=2072): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000002fcff", 0x58}], 0x1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14002000", @ANYRES16=r2, @ANYBLOB="0002000000000000000045000000"], 0x14}, 0x1, 0x0, 0x0, 0x40804}, 0x20040445) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r5, 0x29, 0xcf, &(0x7f0000000180)=0x1, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01032cbd7000dbdbdf25129e1294"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1b4, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb85}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbd9e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x52f7}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3140}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x8085}, 0x4008050) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x124, r7, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x42}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x131}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_KEYS={0x60, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "80ebabbbad"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "82ac7521a43bf0737ef41c81c0"}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_IE={0x4a, 0x2a, [@cf={0x4, 0x6, {0x55, 0x2, 0x2, 0x7}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, 0x48}}, @link_id={0x65, 0x12, {@random="fc16732a20e7", @device_b}}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x5, 0x0, {0x8d2d, 0x7, 0x0, 0x3fc, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x6, 0xe, 0x7}}, @channel_switch={0x25, 0x3, {0x0, 0xfd, 0x4}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x150, 0x0, 0x148, 0x0, 0x148, 0x298, 0x240, 0x240, 0x298, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {0xff}, {}, 0x88, 0x2, 0x10}, 0x0, 0xe8, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x10, 0xf, [0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e22, 0x4e21, 0x4e23, 0x4e24, 0x4e20, 0x4e20, 0x4e22, 0x4e21, 0x4e22, 0x4e24, 0x4e22], [0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0x8, 0x4d3, 0x401, 'snmp\x00', 'syz1\x00', {0x794}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e23, 0x4e22, 0x4e23, 0x4e23, 0x4e22, 0x4e31, 0x4e24, 0x4e24, 0x4e23, 0x4e21, 0x4e20, 0x4e22, 0x4ea0, 0x4622, 0x4e23], [0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1]}}, @common=@set={{0x40}, {{0xffff, [0x4, 0x5, 0x4, 0x0, 0x5, 0x6], 0x1, 0x6}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xe, 0x0, 0x9, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wg0\x00', 0x400}) 17.811093166s ago: executing program 1 (id=2074): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/44}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c", 0xd4d}], 0x1}, 0x0) sendmmsg$inet6(r0, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) connect$bt_sco(r5, &(0x7f0000001000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)=""/4096, 0x2328}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000001800000042a0000000000000", @ANYRES32=r0, @ANYBLOB="0104000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) 17.630751129s ago: executing program 2 (id=2077): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r2, 0x0, 0x0, 0x20004094, 0x0, 0x0) connect(r2, &(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x4, 0x4}}, 0x80) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e24, 0x2c97, @mcast1, 0x7ff}}}, &(0x7f0000000080)=0x84) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'bridge0\x00'}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000f8ffffff7b8a00ff00000000bfa2000000000000079d8a020000f8ffffffb703000008000000b704000000000000850000008200000018220000fde23a83f640280b90eaf163bdf0e858ae480b817af46e975f193fe920cc1f3798586d0c299e62c46f7879c3a436a2bdaa72515bf74358fa0a809d9bb7e2611e9adaccd33a461fc75518293b7f8e51736ef9e6930cf36c18538373", @ANYRES32, @ANYBLOB="000000003243000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x400, 0x12, &(0x7f00000001c0)=""/18, 0x41100, 0x7, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x4, 0x3, 0x605}, 0x10, 0x230e0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x10001}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000003c0)=r6, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x9400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 17.592025003s ago: executing program 4 (id=2078): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000000010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2c, &(0x7f000000cf3d)=""/195}, 0x23) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x6, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x5, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x5, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x400, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x3}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xffff, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x4, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x3, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000049000000080001007063690011000200303030303a30303a31302e30160f00000800030002000010"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xd9}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x40}}, 0x0) sendto$packet(r4, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r8, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x10, 0x80002, 0x0) readv(r8, &(0x7f0000000380)=[{&(0x7f0000000100)=""/114, 0x72}], 0x1) writev(r4, &(0x7f0000000dc0)=[{&(0x7f0000000240)="7f5c9f5a5280f8b71f95aff9a0e94bd95378b102791951a3365247c89a4d33b809c079af611f5a7b370c32de5fa15bba885e228fc56ae8f8b6d38be64b3c8764645a199077c85cce9e3de9d5bca9f96e95c23e4436aa", 0x56}, {&(0x7f0000000500)="996cdaf17f6a6c2512130e26182a3cc15bba00c98e7040c04400ab48e3c2ca0aebcaa701ab4ea02cd868e4fed6d9a6ef65e1ccfd1e0b8162389a8200842ec6b66c41c05d7dee8f8a87ea1a8a2723c386407789f2eea20e54e673af9ebf19ea0f057c0e808ed19eee1e79e006ec2aaa452852a7bf957e447ebdaa4b363d2b81bff4b873a3c2ddbd49c91fe8ed23b716ef8a05550eab747cb018defda6f28a99ad9b5000bc48a9b2d33a270a445d35d11a5a0aefe3122722a9d64c0977f67b45652e7716fa15f06db3e5928214818d86c8b37fcfcc05bcb2c041899a982777f4d7b5462bec3791", 0xe6}, {&(0x7f0000000600)="144240b7a7f0b748215dcc0ddcf2787089d28acd149cb01d28b0bc404b8cf149515354afdc8333d49c2b315b5be917d9f61c53253ef31ae7fceecd961bb4b191515557603afbedc986e6cb2f5f18fd783b6898d8f7333d5344a8a7f2dca298d4016cc24125e657135962e958aae1ab8157989de9168a9c82ab18d73e1a6738224294321b39a6783b22c344dd73486b", 0x8f}, {&(0x7f00000006c0)="4d08d829036d7eefeb3b7bd0c49bb4a9e66f53b1837edb924de0f4c16dfaf2cbd5ca9c195c959b5933d95f012f571168bd8d90a23948c5bfb6ec9e7d461e1ef9032a91e0547b33e4deeb8351ce8adafc3d0e354a70b91d8bea3b3968efbc67e9ca9d316a2eec2f79b66aa1d88f3edbb0639138595e88db1ba6d6c028fc4dc6a652ee98fd7013e87baf4c0694120d2082737419eeef28cf2b29d592efc2449119eea1e2958df44e4b8c51b6d721230cd57cf580f97c780a8cb3377e136b841d37a093e89e5f", 0xc5}, {&(0x7f0000000180)="5e948c2db63b62102541d265c8009188de5201429031", 0x16}, {&(0x7f00000003c0)="42ab920c6a2668880282e6a3073b58612b59574ae1835761bb01e47223ece995de6adad351a407c21ab71937d1529fc36c135a8b3c0800ef6f69428631dc7506645ee33b0a69f51c7404b848ad717cbec36cab6d43094bf7f2f34a1034d4", 0x5e}], 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbd72500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d00020000000800020080c86869249bfa745732648e7ba81e38338eb60cb918a69c34a5cafd6d5b40c78d9dfb6018938528003140f04592981af4b42efcb0eea6c191c82df8079db5e40300"/126, @ANYRES32=r10], 0x84}}, 0x20008004) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006b00)=ANY=[@ANYBLOB="1000000014000100"], 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x40000) 17.533935488s ago: executing program 1 (id=2079): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x3, 0x4, 0x41, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x7800, 0x7, 0x400}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x10, 0x0, 0x25dfdbff, {0x0, 0x0, 0x4a00, r0, 0x0, 0xc940}}, 0x20}, 0x1, 0x0, 0x0, 0x458c4}, 0x4845) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170"], 0x44}}, 0x0) 17.524125697s ago: executing program 3 (id=2081): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a006da8040040000000df2500018000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x85e1165) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)=0x1) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010080000000fedbdf250f002d00180007800800020007"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r8, 0x0) setsockopt$inet6_opts(r8, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@o_path={&(0x7f0000000840)='./file0\x00', 0x0, 0x0, r5}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%-010d \x00'}, 0x20) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x2d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ldst={0x1, 0x1, 0x3, 0xb, 0x4, 0xfffffffffffffff0, 0x7ffffffffffffffa}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x16}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x28, 0xd7, &(0x7f0000000700)=""/215, 0x41000, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x9, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[0x1, r9, r10, r11, r12, r13, 0x1], &(0x7f0000000a40)=[{0x2, 0x3, 0x4, 0x2}], 0x10, 0x7fffffff}, 0x94) 17.415020582s ago: executing program 2 (id=2082): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x630, 0x1b8, 0x0, 0x428, 0x0, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x6, 0x72}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x630, 0x1b8, 0x0, 0x428, 0x0, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x6, 0x72}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) 17.277690275s ago: executing program 1 (id=2084): socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000600) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000006c0)=[@in6={0xa, 0x4e24, 0x5, @local, 0xc000}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24004800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5, r4}, 0x10) r5 = socket$inet(0x2, 0x2, 0x1) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000100)={'batadv_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0xffffffffffffffdd, 0x400000, 0x0, 0xffffffffffffff1b, 0x3b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003}, 0x0, 0x0) vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) write$cgroup_devices(r8, 0x0, 0x8) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}}, 0x24}}, 0x4000) sendmmsg$inet(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) write(r6, 0x0, 0x0) bind$unix(r5, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 17.244507159s ago: executing program 2 (id=2085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x1412, 0x300, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x502, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0xe, 0x0, 0x0, 0xd7}, {0x8, 0x1b, 0x0, 0x0, 0x10000}, {0x8, 0x1e, 0x0, 0x0, 0x31}]}}, @AF_INET6={0x18, 0x2d, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048020}, 0x8024) 16.965176716s ago: executing program 2 (id=2087): bind$inet6(0xffffffffffffffff, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, 0x1404, 0x800, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x60048854) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x738e545224d46410, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0xffffffff}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x3, &(0x7f0000000240)=[{0x3, 0x6, 0x9, 0x80}, {0x2, 0x3d, 0xef, 0x1}, {0xfff, 0x6, 0x3, 0x1872}]}, 0x10) 16.893196497s ago: executing program 0 (id=2088): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0, 0x0, 0x10001}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x2f, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES32=r0, @ANYRES32=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0bac0f0001ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 16.861685545s ago: executing program 3 (id=2089): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x14) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x8de7, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000080000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x3, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x56, &(0x7f0000000280)=""/86, 0x41000, 0x4b, '\x00', r4, 0x25, r1, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xf, 0x5, 0x4d1b}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r5, r6, r7, 0xffffffffffffffff, r8], &(0x7f00000006c0)=[{0x5, 0x4, 0x9, 0x2}, {0x2, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0xa}], 0x10, 0x2}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10}, 0x10}, 0x94) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1a, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0b00000005000000020000000900000001"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000fcffffff180100002020782500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800001c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r14}, 0x10) 16.760891923s ago: executing program 2 (id=2090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x15c, r1, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7b}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x26aa}, @NL80211_ATTR_IE={0x10e, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0xc, 0x1, 0x1, 0x0, {0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0xd3, 0x4}}, @tim={0x5, 0x5c, {0x9, 0xf7, 0x6, "726a1d0419fcc95d7a9c8d308280c76e4a2cf131dee2920211b0231bba05c342c07ef50be34c226cbfc51cdf5c13ad48983db5927f53ce73a051259f9e98f1bceb227b51a2fef24117c98af3b277e7c1ef9f7d2826f5d40c52"}}, @rann={0x7e, 0x15, {{0x0, 0x78}, 0x3, 0x3, @device_a, 0x646b0d65, 0x2, 0x7}}, @challenge={0x10, 0x1, 0x9b}, @random_vendor={0xdd, 0x71, "62783e514d8b4e1f46c60729d9dc8b7b38c50a176085c5198ebe3b77068a32949f7d64035b71a32a823052e98655e75e67167548fbe19ac74d8a425cc232667e913756b032e6bb3a00742b20f9d6ef1276bd253c1e7bd2adf7c13d2cc6674f135a60951cf4d0a1ca25720eec73494ee9bb"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40040}, 0x8010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000001c0)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xdd86}}}}}}}, 0x3e) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x15c, r1, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7b}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x26aa}, @NL80211_ATTR_IE={0x10e, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0xc, 0x1, 0x1, 0x0, {0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800, 0xd3, 0x4}}, @tim={0x5, 0x5c, {0x9, 0xf7, 0x6, "726a1d0419fcc95d7a9c8d308280c76e4a2cf131dee2920211b0231bba05c342c07ef50be34c226cbfc51cdf5c13ad48983db5927f53ce73a051259f9e98f1bceb227b51a2fef24117c98af3b277e7c1ef9f7d2826f5d40c52"}}, @rann={0x7e, 0x15, {{0x0, 0x78}, 0x3, 0x3, @device_a, 0x646b0d65, 0x2, 0x7}}, @challenge={0x10, 0x1, 0x9b}, @random_vendor={0xdd, 0x71, "62783e514d8b4e1f46c60729d9dc8b7b38c50a176085c5198ebe3b77068a32949f7d64035b71a32a823052e98655e75e67167548fbe19ac74d8a425cc232667e913756b032e6bb3a00742b20f9d6ef1276bd253c1e7bd2adf7c13d2cc6674f135a60951cf4d0a1ca25720eec73494ee9bb"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40040}, 0x8010) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000001c0)) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xdd86}}}}}}}, 0x3e) (async) 16.713071103s ago: executing program 0 (id=2091): unshare(0x20000400) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x0, 0xecde, 0x0, 0x20, 0xa, 0x0, 0x0, 0x3c}, {@in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0xffffffff, 0x33}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, {0x3bc7, 0x0, 0x80000000}, {0x0, 0x0, 0xffffffff}, 0x70bd2d, 0x0, 0x2, 0x0, 0x0, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth={0x48, 0x1, {{'rmd128-generic\x00'}}}]}, 0x180}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x3000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="22b48259488dc96af63bb0dad959f1ed1e57aba34b83c83ceca78e0a3f12fd9fbc520a9354f3737b2621ed85b8fde7d57455546e04eab0b049ba2bb6769358391f9d168a6fc79e5fbcc187100ff45b68c8978a83b477da6d733c856f9e746007c242785eed922489f4bfa210bbc754ab25b440ec35905fce6b3e9793aa8f38bc978be6204d2baafde28d9f1de5423d9ade23fb3e0918c352b9b26cf0a8385a0128338763f36513e9a67cd703f0f12c314f656faa6d909c1f3e4eeb04b189c0efb5ff40d313121177e15f32941b245b1a71222da143bd9fc7753b5a6a7f2b0e26c9d269d15238da1c23b36a111822d1f6077ceea284ad0e779fa3ae9b392de931194c25a361b264a1b3083aa8b63ba21f974e5ab19c7f53a5c2077f", @ANYRES64=0x0], 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async) getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000406010400000000000009000700000505fd0000070000000500010007000000a734ab891b6cdf82aebca57b4e0c000150000906000660041a6a26007b79d79a378ff598d85702007379"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 64) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) write$tun(r9, &(0x7f00000002c0)=ANY=[], 0x33) (async) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r10, 0x0, 0x29, 0x0, 0x0) (async) sendfile(r9, r8, 0x0, 0x10000) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r8, 0x6, 0x2, 0x0, &(0x7f0000000300)) 16.609335209s ago: executing program 3 (id=2092): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) (async) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) recvmmsg(r1, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x102, 0x0) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) unshare(0x22020400) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) (async) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) bind$rose(r4, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast]}, 0x40) (async) connect$rose(r4, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x6, [@bcast, @bcast, @bcast, @default, @bcast, @bcast]}, 0x40) 16.604445662s ago: executing program 0 (id=2093): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000200001800d000100756c703a73797a30000000000c18652d33ab76f737911962390002800800030000000000"], 0x34}}, 0xd9f1fec1318552c4) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x180, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7dd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x89}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x18}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf57}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fba9833}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x700000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e3b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x44001}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, 0x1403, 0x8, 0x70bd25, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x100}}, 0x42845) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r6, @ANYBLOB='\b\x00&'], 0x2c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4bfeffff10001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000008002c001200f7ff2ca8a53a130d1c1da481075efb41a204000000"], 0x28}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 16.561920646s ago: executing program 4 (id=2094): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x7, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x80, 0x20, 0x14, 0x4}}) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x503, 0x70bd2e, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}}, 0x20}}, 0x800) (async) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2, 0x2}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0}, 0x94) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) unshare(0x22020400) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwritev(r10, 0x0, 0x0, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r9, 0x100000000) (async) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) 16.445757981s ago: executing program 2 (id=2095): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, 0x0, 0x40}, 0x20000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) epoll_create1(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/14, 0xe) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x2, 0x80805, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="710505cd030606018be8a1976e193c27010466dc77f0b1b54773ee6a19222755d2deac4f088f76bf3c93682f07d04b7bdccfa9d3d690cc68a8388ff2dfc30c6b960d016f65f015a1f19d83de68de15d94d698293bddfc4a2c323752cbeabab060f"], 0x61) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r11, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) 16.404678694s ago: executing program 4 (id=2096): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x303}, "a8a1c7317a794c66", "21ea6d1a28b147a2b5a0c490889f28f4", "d589cb90", "ee368d1c68b11d24"}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000180)={@empty, @multicast, @void, {@generic={0x88f5}}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) r1 = socket(0x400000000010, 0x3, 0x1) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x400007) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000000c0)=0x55e93ff6, 0x4) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}, 0x48) listen(r4, 0x80) accept$netrom(r4, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x80) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x303}, "6f499215521d947a", "056a946a1dc5a3c2746776bd29ca6c13", "b5749516", "0469735f1d456813"}, 0x28) 16.3330353s ago: executing program 0 (id=2097): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="2df766ddef839b2549045568d961b140f2d0caf6c6c2b5f7b8e340bb0424ca9507fdb9c839dbfacdb474e24c448e3b4fea38af5775b62a203f6cf37072030ca2cd7487823e0c2a001926744cd07ed68f75fd3bbc7d1c98fa5832c0096ab5a5b01ab5", 0x62}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="fcd967d3b9751139fc94c48739bbe79d978d5e7b22cfea6537f0025f844b1ab27598dc5f9ffa01ba9139fef02ecb356204cc7176a888c2d9748779bb9e4c139c62e36c1b32f631ba212601b38f190d651a5271c45d836f5432416bdfd60eea39747b5cd73664d7469f5462509a8fca5613efc09d0a79a536978a71b28811026357ea355142347640dfbe22950dddb11f7b24aa89d5c4d8711d8a6947721ac9880cddc0726da0b2f6baf2ae75fd8bbb6666aad06cbc89ccab0990000000", 0xbd}, {&(0x7f0000001880)="ee94405556ed43b182b818a0bac5da4484fc7ec52af535cf188830ec313a4d23c8d3f69206a9f6e69c46f1ad1ac7ae1c975c3290a3f31ddb3090f14361d07e1ba4d9cff131edf9b9f85c901086b43b59eaa3a700051bf6e0dc32e198f40cd57b2e2a793ff82879c60eb1a2d1d754f254c5dc1ace5c5cf1f4b57c120bd626ee95261aea3d7d72e726b77358c52b61544e371bba2705631b8274bf04593a24986c6af6d4758370f36b58450e48120d00000000", 0xb2}], 0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r8, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5000004, 0x6e073, r9, 0x0) (async) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r13, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="02002abd7000fedbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080001ffd2ecc7004e8afed53e6a54343d2bbfea51273b2f1557317b838c114e94c5d312b71f9581296291b9fba7c694749e7e4ced7fc56587c5cc726da1b4b3b20b3cecb6341fc4ed9c329a0de17b8946a32ac5ac523ba8dbe831b8804dccf70d75cbc2cea5dccf7fc1f14b02a32a5cb77ac03b1ee456882fe531e43ad513db9e481d2dcf3c", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) 16.275546492s ago: executing program 1 (id=2098): socket$rds(0x15, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000000000000000300006d02e9ea91ba5c4d950000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000ffffff000000002b0000008500000070000000b7080000000000007b8af8ff00000000b7080000ff00000000bf00000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823000035dd2535da71f0af4e9ce3b0d76e9f94cbef05569fe85fcfc73b67f9ffbc360c411cecd5c46c3ba864502c48cb579644ddf8b3abcc26edbc38d1afd78ee4d85b890b9c70c6afafed8e921dff8f93ae30985c989b273435544c01cb425a33f2050000000000000010dbcef444b854dfa9ff6e1f0b11c45f0200000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2d, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) (async) unshare(0x6a040000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) (async) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)}, 0x0) (async) sendmsg$rds(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000100000005000010000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000", @ANYRESDEC=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) 16.186294332s ago: executing program 0 (id=2099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7338}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000007a80)={0x0, 0x0, 0x0}, 0x10000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200068c0}], 0x1, 0xc0001) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x25dfdbfd, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0x3, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 16.174366413s ago: executing program 3 (id=2100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0a00ff0000000071102b00000000009500000000000000957dc50d9dd4d90f4de107550b00dbd9d6795379d0d76a80fe146691a6b43d3dfea403be4d4567d869f5da867405da0ece7817283f898b716ee0c3"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}], 0x2, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010b28bd7000f8dbdf2503003101720b25c6c94db833e936eec80b3eae2e29c419d8"], 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r6}, 0x20) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x7fffffff, @private2, 0x200}, {0xa, 0x4e22, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x19}, 0x3}, 0xffffffffffffffff, {[0x1, 0x40, 0xfffffffb, 0x1, 0x3, 0x1, 0x80000001, 0x8]}}, 0x5c) (async) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0x7fffffff, @private2, 0x200}, {0xa, 0x4e22, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x19}, 0x3}, 0xffffffffffffffff, {[0x1, 0x40, 0xfffffffb, 0x1, 0x3, 0x1, 0x80000001, 0x8]}}, 0x5c) 16.023881679s ago: executing program 0 (id=2101): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x18}, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) unshare(0x2020400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) recvmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x1}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x3, 0x8, &(0x7f0000000100)="81839c93f294064c", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbdbbce4e738849223860f63b2aebbf305d70000fe080600010800cf5f3e8efd219a37"], 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000500000d000000000a00000005000000060000000200000009000000050000ea06000000010000000c00000001"], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffba, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYRES16=r8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 15.885843866s ago: executing program 3 (id=2102): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) bind$ax25(r1, &(0x7f0000000280)={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000370427bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="610505000000000000000067726574617000000c00028008000700ac1414aa0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r3, 0x7}, 0x80, 0x0}}], 0x1, 0x80) 15.787140517s ago: executing program 4 (id=2103): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x400}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) close(0x4) 15.572116247s ago: executing program 3 (id=2104): socket(0x1, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c0000001600010029bd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="14000600640000000100000001000000018000004e42a6a3c484d6ed23806174a85f94d4e5392c881b00c199cc0307c188559f528933287fa47a0249f0712fc20ebcb5195024efbe53b7a5272ca423e3bf4fc96cb8476a9328cabb3892ee179feb8bca7b10e65a174877cc1aff1e310d945382d25de2cf23bd3e59227546d8f18dd00373472fcc2b087e0c6ecc93c006cb02f21800a3f29082726dacbe85019ff11dfcd8fbd2b06a3d9ce720255354ae3fc259"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'lo\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x1, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x4, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4010804) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r12}, 0x10) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="0900000000000000df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 15.353298809s ago: executing program 1 (id=2105): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000840000000800"], 0x18, 0x48060}], 0x1, 0x200000d0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @rc={0x1f, @any, 0x1}, @generic={0x10, "63cf50c29f31a070563fda8293df"}, @in={0x2, 0x4e22, @local}, 0x6, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)='bridge0\x00', 0xd3, 0xffffffff, 0x9}) 1.151734782s ago: executing program 32 (id=2095): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, 0x0, 0x40}, 0x20000000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) epoll_create1(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/14, 0xe) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x2, 0x80805, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="710505cd030606018be8a1976e193c27010466dc77f0b1b54773ee6a19222755d2deac4f088f76bf3c93682f07d04b7bdccfa9d3d690cc68a8388ff2dfc30c6b960d016f65f015a1f19d83de68de15d94d698293bddfc4a2c323752cbeabab060f"], 0x61) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r11, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) 126.736345ms ago: executing program 33 (id=2101): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x18}, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) unshare(0x2020400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) recvmsg$unix(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r7, 0x0, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0x1}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x3, 0x8, &(0x7f0000000100)="81839c93f294064c", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbdbbce4e738849223860f63b2aebbf305d70000fe080600010800cf5f3e8efd219a37"], 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000500000d000000000a00000005000000060000000200000009000000050000ea06000000010000000c00000001"], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffffba, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYRES16=r8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) 96.319117ms ago: executing program 34 (id=2105): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000840000000800"], 0x18, 0x48060}], 0x1, 0x200000d0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @rc={0x1f, @any, 0x1}, @generic={0x10, "63cf50c29f31a070563fda8293df"}, @in={0x2, 0x4e22, @local}, 0x6, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)='bridge0\x00', 0xd3, 0xffffffff, 0x9}) 50.958022ms ago: executing program 35 (id=2104): socket(0x1, 0x1, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xffffffff}, 0x73) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c0000001600010029bd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="14000600640000000100000001000000018000004e42a6a3c484d6ed23806174a85f94d4e5392c881b00c199cc0307c188559f528933287fa47a0249f0712fc20ebcb5195024efbe53b7a5272ca423e3bf4fc96cb8476a9328cabb3892ee179feb8bca7b10e65a174877cc1aff1e310d945382d25de2cf23bd3e59227546d8f18dd00373472fcc2b087e0c6ecc93c006cb02f21800a3f29082726dacbe85019ff11dfcd8fbd2b06a3d9ce720255354ae3fc259"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'lo\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x1, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x4, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4010804) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r12}, 0x10) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="0900000000000000df2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 0s ago: executing program 36 (id=2103): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x1d}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x400}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) close(0x4) kernel console output (not intermixed with test programs): lting to 1000 [ 129.462124][ T7059] netlink: 88 bytes leftover after parsing attributes in process `syz.0.273'. [ 129.538890][ T7063] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 129.639445][ T7063] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.668451][ T7063] bond0: (slave team0): Enslaving as an active interface with an up link [ 129.745059][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'. [ 130.204911][ T7096] netlink: 'syz.4.279': attribute type 2 has an invalid length. [ 130.267975][ T7091] syzkaller0: entered promiscuous mode [ 130.317442][ T7091] syzkaller0: entered allmulticast mode [ 130.423175][ T7099] netlink: 52 bytes leftover after parsing attributes in process `syz.2.281'. [ 130.705193][ T7120] netlink: 'syz.1.286': attribute type 4 has an invalid length. [ 130.737483][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.286'. [ 130.942492][ T7118] netlink: 44 bytes leftover after parsing attributes in process `syz.4.285'. [ 131.399202][ T7154] vcan0: tx drop: invalid sa for name 0x0080000000000000 [ 131.763309][ T7164] syzkaller0: entered allmulticast mode [ 131.832250][ T7173] sit1: entered allmulticast mode [ 132.037508][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.050014][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.331385][ T7226] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.005351][ T7257] x_tables: ip_tables: CT target: only valid in raw table, not [ 134.288234][ T7265] __nla_validate_parse: 8 callbacks suppressed [ 134.288253][ T7265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.324'. [ 134.629479][ T7276] netlink: 84 bytes leftover after parsing attributes in process `syz.1.326'. [ 134.649376][ T7279] netlink: 'syz.3.325': attribute type 3 has an invalid length. [ 134.716859][ T7284] netlink: 'syz.2.328': attribute type 3 has an invalid length. [ 134.725101][ T7284] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 134.735784][ T7284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.328'. [ 134.747628][ T7284] tipc: Enabling of bearer rejected, failed to enable media [ 134.956644][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 134.973093][ T7294] tipc: Started in network mode [ 134.977700][ T7288] Bluetooth: MGMT ver 1.23 [ 134.979790][ T7294] tipc: Node identity 220fa59fbf36, cluster identity 4711 [ 134.991814][ T7294] tipc: Enabled bearer , priority 0 [ 135.047949][ T7297] erspan0: entered promiscuous mode [ 135.056364][ T7297] erspan0: left promiscuous mode [ 135.077008][ T7294] syzkaller0: entered promiscuous mode [ 135.083180][ T7294] syzkaller0: entered allmulticast mode [ 135.171654][ T7294] tipc: Resetting bearer [ 135.204704][ T7289] tipc: Resetting bearer [ 135.228784][ T7289] tipc: Disabling bearer [ 135.516809][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 136.766908][ T7313] tipc: Started in network mode [ 136.772159][ T7313] tipc: Node identity 3a9179566c49, cluster identity 4711 [ 136.779436][ T7313] tipc: Enabled bearer , priority 0 [ 136.790059][ T7317] syzkaller0: entered allmulticast mode [ 136.823438][ T7322] tipc: Resetting bearer [ 136.854648][ T7338] syzkaller0: entered promiscuous mode [ 136.860368][ T7338] syzkaller0: entered allmulticast mode [ 137.115635][ T7322] tipc: Disabling bearer [ 137.324561][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'. [ 138.311411][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.502244][ T7394] lo speed is unknown, defaulting to 1000 [ 138.935639][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 138.945911][ T7422] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.459445][ T7448] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 139.503963][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 139.788391][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 139.949983][ T7464] lo speed is unknown, defaulting to 1000 [ 139.964628][ T7463] netlink: 64 bytes leftover after parsing attributes in process `syz.4.368'. [ 140.415262][ T7470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.460215][ T7469] lo speed is unknown, defaulting to 1000 [ 140.963553][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 141.192494][ T7515] netlink: 'syz.2.380': attribute type 5 has an invalid length. [ 141.240002][ T7498] NFSD: Failed to start, no listeners configured. [ 141.500355][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 141.527536][ T7523] netlink: 64 bytes leftover after parsing attributes in process `syz.2.382'. [ 141.558062][ T7523] netlink: 64 bytes leftover after parsing attributes in process `syz.2.382'. [ 141.955128][ T7540] bridge3: entered allmulticast mode [ 142.307384][ T7553] ipip0: entered promiscuous mode [ 142.325522][ T7553] ipip0: entered allmulticast mode [ 142.434325][ T7565] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 142.660122][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 143.170507][ T7601] netlink: 68 bytes leftover after parsing attributes in process `syz.2.400'. [ 143.257463][ T7602] lo speed is unknown, defaulting to 1000 [ 144.116104][ T7631] block nbd0: not configured, cannot reconfigure [ 144.378193][ T7642] geneve0: entered allmulticast mode [ 144.755039][ T7660] __nla_validate_parse: 2 callbacks suppressed [ 144.755061][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 144.939345][ T7651] netlink: 'syz.1.414': attribute type 3 has an invalid length. [ 145.130236][ T7675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.419'. [ 145.363700][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 145.438934][ T7690] netlink: 224 bytes leftover after parsing attributes in process `syz.0.425'. [ 145.442697][ T7692] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 145.463722][ T7690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.425'. [ 145.568505][ T7692] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 145.687433][ T7696] netlink: 52 bytes leftover after parsing attributes in process `syz.1.426'. [ 145.845245][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.430'. [ 146.268664][ T5922] IPVS: starting estimator thread 0... [ 146.294701][ T7739] netlink: 252 bytes leftover after parsing attributes in process `syz.2.435'. [ 146.400956][ T7743] IPVS: using max 28 ests per chain, 67200 per kthread [ 146.509712][ T7750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.634209][ T7752] lo speed is unknown, defaulting to 1000 [ 146.855130][ T7770] netlink: 60 bytes leftover after parsing attributes in process `syz.4.444'. [ 147.154149][ T7785] atomic_op ffff888057313998 conn xmit_atomic 0000000000000000 [ 147.268281][ T7785] : entered promiscuous mode [ 147.968150][ T5933] IPVS: starting estimator thread 0... [ 148.004188][ T7832] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 148.064508][ T7834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.077203][ T7820] lo speed is unknown, defaulting to 1000 [ 148.092317][ T7830] IPVS: using max 29 ests per chain, 69600 per kthread [ 148.164939][ T7837] delete_channel: no stack [ 148.422673][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.463'. [ 149.507328][ T7880] lo speed is unknown, defaulting to 1000 [ 150.067465][ T7901] netlink: 'syz.2.476': attribute type 8 has an invalid length. [ 150.078104][ T7901] __nla_validate_parse: 2 callbacks suppressed [ 150.078123][ T7901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.476'. [ 150.295570][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.479'. [ 150.310331][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.479'. [ 150.371890][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.479'. [ 150.381215][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.412987][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.443347][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.480776][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.780145][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.485'. [ 150.846717][ T7936] netlink: 'syz.3.481': attribute type 3 has an invalid length. [ 150.857206][ T7936] netlink: 'syz.3.481': attribute type 3 has an invalid length. [ 150.892475][ T7930] tipc: Enabled bearer , priority 0 [ 150.954673][ T7927] lo speed is unknown, defaulting to 1000 [ 151.163970][ T7929] tipc: Disabling bearer [ 151.372432][ T7962] netlink: 'syz.2.491': attribute type 10 has an invalid length. [ 151.500196][ T7962] veth0_macvtap: left promiscuous mode [ 151.565482][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 151.575867][ T7962] batman_adv: batadv0: Adding interface: macvtap0 [ 151.614852][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 151.622917][ T7962] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.651520][ T7962] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 151.664984][ T7972] netlink: 'syz.4.493': attribute type 13 has an invalid length. [ 151.690758][ T7974] netlink: 'syz.4.493': attribute type 1 has an invalid length. [ 151.749008][ T7972] netlink: 'syz.4.493': attribute type 11 has an invalid length. [ 152.621629][ T8012] lo speed is unknown, defaulting to 1000 [ 152.638402][ T8016] tipc: Cannot configure node identity twice [ 152.671990][ T8019] netlink: 'syz.0.508': attribute type 7 has an invalid length. [ 152.693637][ T8020] lo speed is unknown, defaulting to 1000 [ 152.715037][ T8020] lo speed is unknown, defaulting to 1000 [ 152.744609][ T8020] lo speed is unknown, defaulting to 1000 [ 152.755579][ T8023] tipc: Enabled bearer , priority 0 [ 152.773799][ T8023] syzkaller0: entered promiscuous mode [ 152.779923][ T8023] syzkaller0: entered allmulticast mode [ 152.845655][ T8023] tipc: Resetting bearer [ 153.353954][ T8020] infiniband syz0: set down [ 153.366919][ T8020] infiniband syz0: added lo [ 153.455814][ T10] lo speed is unknown, defaulting to 1000 [ 153.577072][ T8015] tipc: Resetting bearer [ 153.589024][ T8020] RDS/IB: syz0: added [ 153.599225][ T8020] smc: adding ib device syz0 with port count 1 [ 153.605776][ T8020] smc: ib device syz0 port 1 has no pnetid [ 153.640660][ T8015] tipc: Disabling bearer [ 153.659918][ T10] lo speed is unknown, defaulting to 1000 [ 153.669003][ T8020] lo speed is unknown, defaulting to 1000 [ 153.935039][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 154.285657][ T8048] SET target dimension over the limit! [ 154.485713][ T8057] netlink: 'syz.1.520': attribute type 2 has an invalid length. [ 154.520128][ T8057] !: entered promiscuous mode [ 154.536230][ T8020] lo speed is unknown, defaulting to 1000 [ 154.709174][ T8064] syzkaller0: entered promiscuous mode [ 154.721209][ T8064] syzkaller0: entered allmulticast mode [ 154.991209][ T8074] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 155.018281][ T8074] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 155.170571][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.178555][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.296077][ T8084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.527'. [ 155.306197][ T8086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.527'. [ 155.395575][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.411656][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.579502][ T8076] netlink: 'syz.3.524': attribute type 3 has an invalid length. [ 155.594099][ T8020] lo speed is unknown, defaulting to 1000 [ 155.611047][ T6616] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.644248][ T6616] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.680998][ T6616] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.703020][ T6616] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.108301][ T8105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.533'. [ 156.180195][ T8020] lo speed is unknown, defaulting to 1000 [ 156.218647][ T8108] netlink: 'syz.1.534': attribute type 4 has an invalid length. [ 156.265391][ T8108] netlink: 'syz.1.534': attribute type 4 has an invalid length. [ 156.551788][ T8120] netlink: 96 bytes leftover after parsing attributes in process `syz.4.537'. [ 156.590547][ T8125] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.538'. [ 156.621764][ T8020] lo speed is unknown, defaulting to 1000 [ 156.903455][ T8020] lo speed is unknown, defaulting to 1000 [ 157.076492][ T8020] lo speed is unknown, defaulting to 1000 [ 157.267277][ T8020] lo speed is unknown, defaulting to 1000 [ 157.372967][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 157.401358][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 157.410218][ T8131] netlink: 'syz.3.540': attribute type 14 has an invalid length. [ 157.470978][ T8131] netlink: 'syz.3.540': attribute type 12 has an invalid length. [ 157.577668][ T8035] lo speed is unknown, defaulting to 1000 [ 157.634374][ T8123] lo speed is unknown, defaulting to 1000 [ 158.511942][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 158.749701][ T8152] lo speed is unknown, defaulting to 1000 [ 158.795595][ T8152] lo speed is unknown, defaulting to 1000 [ 158.990296][ T8168] gretap1: entered allmulticast mode [ 159.022105][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.551'. [ 159.158681][ T8169] syzkaller0: entered promiscuous mode [ 159.164419][ T8169] syzkaller0: entered allmulticast mode [ 159.175288][ T8169] 0: reclassify loop, rule prio 0, protocol 800 [ 159.713653][ T8189] netlink: 'syz.3.555': attribute type 1 has an invalid length. [ 159.789634][ T8189] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 160.537400][ T8216] netlink: 104 bytes leftover after parsing attributes in process `syz.3.561'. [ 160.674336][ T8221] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.254457][ T8232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.565'. [ 162.451928][ T8254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.571'. [ 162.479224][ T8254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.571'. [ 162.851292][ T8278] openvswitch: netlink: Message has 1 unknown bytes. [ 162.859919][ T8278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.870243][ T8277] lo speed is unknown, defaulting to 1000 [ 162.897416][ T8277] lo speed is unknown, defaulting to 1000 [ 162.985272][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 163.029577][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.580'. [ 163.134844][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'. [ 163.452207][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'. [ 163.475522][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'. [ 163.485484][ T8289] nbd: must specify at least one socket [ 163.494792][ T8287] bridge_slave_1: left allmulticast mode [ 163.500716][ T8287] bridge_slave_1: left promiscuous mode [ 163.512393][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.554753][ T8287] bridge_slave_0: left allmulticast mode [ 163.573399][ T8287] bridge_slave_0: left promiscuous mode [ 163.579276][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.845073][ T8309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.587'. [ 164.294166][ T8328] vlan2: entered allmulticast mode [ 164.326070][ T8328] bridge_slave_0: entered allmulticast mode [ 164.426210][ T8326] lo speed is unknown, defaulting to 1000 [ 164.467684][ T8326] lo speed is unknown, defaulting to 1000 [ 164.700292][ T8317] raw_sendmsg: syz.4.588 forgot to set AF_INET. Fix it! [ 164.837572][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.881910][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.172984][ T6613] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.222749][ T6613] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.232223][ T6613] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.271637][ T6613] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.519379][ T8371] netlink: 'syz.1.599': attribute type 39 has an invalid length. [ 165.901052][ T5842] Bluetooth: hci0: command tx timeout [ 165.949236][ T8393] lo speed is unknown, defaulting to 1000 [ 165.964582][ T8402] IPVS: length: 181 != 8 [ 165.994247][ T8393] lo speed is unknown, defaulting to 1000 [ 166.228641][ T8405] __nla_validate_parse: 3 callbacks suppressed [ 166.228663][ T8405] netlink: 108 bytes leftover after parsing attributes in process `syz.4.610'. [ 166.259370][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 166.594392][ T8412] netlink: 428 bytes leftover after parsing attributes in process `syz.1.612'. [ 166.671784][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 166.681199][ T8418] netlink: 'syz.4.615': attribute type 4 has an invalid length. [ 166.733120][ T892] lo speed is unknown, defaulting to 1000 [ 166.744558][ T892] syz1: Port: 1 Link DOWN [ 166.755344][ T8418] netlink: 'syz.4.615': attribute type 4 has an invalid length. [ 166.799193][ T892] lo speed is unknown, defaulting to 1000 [ 166.812920][ T892] syz1: Port: 1 Link ACTIVE [ 166.845745][ T8426] xt_policy: neither incoming nor outgoing policy selected [ 168.395177][ T8432] bond0: option miimon: invalid value (18446744072730617911) [ 168.402846][ T8285] lo speed is unknown, defaulting to 1000 [ 168.409702][ T8285] syz1: Port: 1 Link DOWN [ 168.414325][ T8432] bond0: option miimon: allowed values 0 - 2147483647 [ 168.435031][ T8439] geneve3: entered promiscuous mode [ 168.464670][ T8445] tipc: Enabled bearer , priority 0 [ 168.483900][ T6634] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.505088][ T6634] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.522362][ T6634] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.534170][ T6634] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.575008][ T8445] tipc: Disabling bearer [ 168.586296][ T8453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.620'. [ 168.619595][ T6634] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.642857][ T6634] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.683722][ T6634] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.715151][ T6634] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.929240][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 169.271538][ T8495] tipc: Enabled bearer , priority 0 [ 169.279169][ T8495] syzkaller0: entered promiscuous mode [ 169.295028][ T8495] syzkaller0: entered allmulticast mode [ 169.403982][ T8502] tipc: Resetting bearer [ 169.441100][ T8495] vlan0: entered promiscuous mode [ 169.483641][ T8494] tipc: Resetting bearer [ 169.551465][ T8494] tipc: Disabling bearer [ 169.758630][ T8526] xt_policy: output policy not valid in PREROUTING and INPUT [ 169.787908][ T8528] xt_policy: output policy not valid in PREROUTING and INPUT [ 169.815752][ T8522] lo speed is unknown, defaulting to 1000 [ 169.832254][ T8522] lo speed is unknown, defaulting to 1000 [ 170.228379][ T8538] netlink: 'syz.3.642': attribute type 2 has an invalid length. [ 170.328790][ T8538] : entered promiscuous mode [ 170.337900][ T8544] netlink: 60 bytes leftover after parsing attributes in process `syz.4.645'. [ 170.388535][ T8544] unsupported nlmsg_type 40 [ 170.597022][ T8556] bond0: Error: Cannot enslave bond to itself. [ 170.796582][ T8554] lo speed is unknown, defaulting to 1000 [ 170.882048][ T8565] syzkaller0: entered promiscuous mode [ 170.887709][ T8565] syzkaller0: entered allmulticast mode [ 170.899136][ T8554] lo speed is unknown, defaulting to 1000 [ 170.911081][ T8564] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 171.007542][ T8568] 8021q: VLANs not supported on ipvlan1 [ 171.328149][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 172.674465][ T5933] IPVS: starting estimator thread 0... [ 172.771568][ T8597] IPVS: using max 29 ests per chain, 69600 per kthread [ 172.850961][ T8605] netlink: 'syz.1.663': attribute type 5 has an invalid length. [ 172.891513][ T8605] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.663'. [ 173.162221][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 173.171190][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 173.235864][ T8625] netlink: 228 bytes leftover after parsing attributes in process `syz.2.667'. [ 173.297697][ T8633] pimreg1: tun_chr_ioctl cmd 1074025677 [ 173.319611][ T8633] pimreg1: linktype set to 804 [ 173.348185][ T8626] pimreg1: tun_chr_ioctl cmd 1076910120 [ 173.909338][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 173.927300][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 173.979496][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 174.014586][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 174.028110][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 174.097668][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.115509][ T8665] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.137293][ T8665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.158303][ T8675] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 174.195153][ T8675] netlink: 'syz.1.678': attribute type 39 has an invalid length. [ 174.466107][ T8696] syzkaller0: create flow: hash 1771094997 index 1 [ 174.645718][ T8707] lo speed is unknown, defaulting to 1000 [ 174.832073][ T1111] syzkaller0: tun_net_xmit 76 [ 174.837575][ T8707] lo speed is unknown, defaulting to 1000 [ 174.847892][ T1111] syzkaller0: tun_net_xmit 48 [ 174.853462][ T8285] syzkaller0: tun_net_xmit 76 [ 174.881956][ T8716] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 174.891743][ T8716] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 174.923519][ T8717] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 175.084870][ T8691] syzkaller0: delete flow: hash 1771094997 index 1 [ 177.155823][ T8758] veth1_macvtap: left promiscuous mode [ 177.399130][ T8771] __nla_validate_parse: 17 callbacks suppressed [ 177.399149][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 177.662681][ T8782] lo speed is unknown, defaulting to 1000 [ 177.671092][ T8782] lo speed is unknown, defaulting to 1000 [ 177.786390][ T8789] syzkaller0: entered promiscuous mode [ 177.792140][ T8789] syzkaller0: entered allmulticast mode [ 178.461401][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.709'. [ 179.239664][ T8801] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 179.258476][ T8804] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 179.357066][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.385136][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.433936][ T8827] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20002 [ 179.514353][ T8812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.653154][ T8833] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 179.693027][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 179.729088][ T8836] macsec1: entered promiscuous mode [ 179.738143][ T8836] macsec1: entered allmulticast mode [ 179.749710][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 179.811884][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 179.850281][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 179.898885][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 180.545915][ T5842] block nbd0: Receive control failed (result -104) [ 180.878051][ T8880] netlink: 64 bytes leftover after parsing attributes in process `syz.3.725'. [ 181.039437][ T8886] x_tables: duplicate underflow at hook 1 [ 181.414284][ T8888] geneve4: entered promiscuous mode [ 181.553013][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.729'. [ 181.735895][ T8900] netlink: 'syz.0.731': attribute type 30 has an invalid length. [ 181.788790][ T8900] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 181.886076][ T8907] lo speed is unknown, defaulting to 1000 [ 181.923922][ T8907] lo speed is unknown, defaulting to 1000 [ 182.220040][ T8921] netlink: 20 bytes leftover after parsing attributes in process `syz.1.736'. [ 182.473437][ T8933] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 182.492336][ T8933] netlink: 224 bytes leftover after parsing attributes in process `syz.0.740'. [ 182.663391][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 183.382697][ T8968] IPVS: set_ctl: invalid protocol: 33 172.20.20.48:20001 [ 183.551183][ T8975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.914762][ T8995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.756'. [ 184.050069][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 184.984245][ T9040] netlink: 1 bytes leftover after parsing attributes in process `syz.2.766'. [ 185.016463][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.768'. [ 185.078594][ T9043] lo speed is unknown, defaulting to 1000 [ 185.086754][ T9043] lo speed is unknown, defaulting to 1000 [ 185.271692][ T9054] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.770'. [ 185.398695][ T9066] IPVS: Unknown mcast interface: vcan0 [ 185.432662][ T9067] netlink: 'syz.4.771': attribute type 10 has an invalid length. [ 185.468060][ T9067] `: Port device dummy0 added [ 186.104036][ T9086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.777'. [ 186.371935][ T9093] lo speed is unknown, defaulting to 1000 [ 186.379632][ T9093] lo speed is unknown, defaulting to 1000 [ 186.421565][ T9096] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20004 [ 187.441659][ T9134] netlink: 52 bytes leftover after parsing attributes in process `syz.4.790'. [ 187.518496][ T9132] tap0: tun_chr_ioctl cmd 2147767521 [ 187.552996][ T9138] netlink: 'syz.2.791': attribute type 11 has an invalid length. [ 187.649480][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 187.668240][ T9143] tipc: Enabling of bearer rejected, failed to enable media [ 187.930702][ T9152] lo speed is unknown, defaulting to 1000 [ 187.990504][ T9160] netlink: 'syz.2.799': attribute type 4 has an invalid length. [ 188.012350][ T9152] lo speed is unknown, defaulting to 1000 [ 188.012387][ T9161] netlink: 'syz.2.799': attribute type 4 has an invalid length. [ 188.074194][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 188.118866][ T9170] ip6tnl1: entered allmulticast mode [ 188.426981][ T9182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.806'. [ 188.441518][ T9182] netlink: 43 bytes leftover after parsing attributes in process `syz.1.806'. [ 188.461045][ T9182] netlink: 'syz.1.806': attribute type 5 has an invalid length. [ 188.469077][ T9182] netlink: 43 bytes leftover after parsing attributes in process `syz.1.806'. [ 188.481032][ T9185] tipc: Started in network mode [ 188.485974][ T9185] tipc: Node identity d25f493d5abe, cluster identity 4711 [ 188.504871][ T9185] tipc: Enabled bearer , priority 0 [ 188.526389][ T9185] syzkaller0: entered promiscuous mode [ 188.544540][ T9185] syzkaller0: entered allmulticast mode [ 188.574410][ T9186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.735163][ T9190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.808'. [ 188.829476][ T9192] netlink: 'syz.1.809': attribute type 3 has an invalid length. [ 188.856651][ T9194] netlink: 'syz.0.811': attribute type 11 has an invalid length. [ 188.866425][ T9192] syz_tun: entered allmulticast mode [ 188.873125][ T9194] netlink: 224 bytes leftover after parsing attributes in process `syz.0.811'. [ 188.884234][ T9192] siw: device registration error -23 [ 188.930074][ T9192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.939415][ T9192] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.978562][ T9192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.036898][ T9191] syz_tun: left allmulticast mode [ 189.212546][ T9203] netlink: 76 bytes leftover after parsing attributes in process `syz.0.812'. [ 189.243135][ T9178] tipc: Resetting bearer [ 189.278654][ T9178] tipc: Disabling bearer [ 189.441855][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 189.662712][ T9226] vlan2: entered promiscuous mode [ 189.667829][ T9226] bond0: entered promiscuous mode [ 189.673716][ T9226] bond_slave_0: entered promiscuous mode [ 189.679711][ T9226] bond_slave_1: entered promiscuous mode [ 189.883232][ T9249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.823'. [ 190.402681][ T9282] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 190.864140][ T9309] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 190.956197][ T9311] netlink: 'syz.0.842': attribute type 1 has an invalid length. [ 190.994832][ T9311] bond1: entered promiscuous mode [ 191.000632][ T9311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.058091][ T9311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.067456][ T9311] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 191.077983][ T9311] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 191.091341][ T9311] bond1: (slave gre1): making interface the new active one [ 191.098658][ T9311] gre1: entered promiscuous mode [ 191.110382][ T9311] bond1: (slave gre1): Enslaving as an active interface with an up link [ 191.329512][ T9329] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 191.363679][ T9326] xt_socket: unknown flags 0xfc [ 191.400046][ T9335] lo speed is unknown, defaulting to 1000 [ 191.414946][ T9335] lo speed is unknown, defaulting to 1000 [ 191.507151][ T9342] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 191.580648][ T9342] bond1: entered promiscuous mode [ 191.591512][ T9342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.645002][ T9377] netlink: 'syz.0.857': attribute type 298 has an invalid length. [ 192.673882][ T9377] __nla_validate_parse: 5 callbacks suppressed [ 192.673905][ T9377] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.857'. [ 192.756440][ T9380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.858'. [ 192.781271][ T9380] netlink: 7 bytes leftover after parsing attributes in process `syz.4.858'. [ 192.810099][ T9369] netlink: set zone limit has 4 unknown bytes [ 193.002666][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 193.447235][ T9421] lo speed is unknown, defaulting to 1000 [ 193.458365][ T9421] lo speed is unknown, defaulting to 1000 [ 193.593326][ T9423] syzkaller0: entered promiscuous mode [ 193.609087][ T9423] syzkaller0: entered allmulticast mode [ 193.671761][ T9426] macsec1: entered promiscuous mode [ 193.693654][ T9426] macsec1: entered allmulticast mode [ 194.197055][ T9435] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 194.209158][ T5933] IPVS: starting estimator thread 0... [ 194.256582][ T9433] lo speed is unknown, defaulting to 1000 [ 194.264549][ T9433] lo speed is unknown, defaulting to 1000 [ 194.310943][ T9441] IPVS: using max 28 ests per chain, 67200 per kthread [ 194.690102][ T9456] x_tables: duplicate underflow at hook 3 [ 194.774230][ T9463] netlink: 'syz.3.877': attribute type 2 has an invalid length. [ 194.844757][ T9463] netlink: 'syz.3.877': attribute type 2 has an invalid length. [ 195.107874][ T9463] lo speed is unknown, defaulting to 1000 [ 195.151046][ T9463] lo speed is unknown, defaulting to 1000 [ 195.257639][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.882'. [ 195.359667][ T9481] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 195.376832][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 195.663857][ T9481] bond2 (unregistering): (slave geneve3): Releasing backup interface [ 195.708688][ T9481] bond2 (unregistering): Released all slaves [ 195.837570][ T9491] bridge0: entered promiscuous mode [ 195.844389][ T9491] bridge0: port 3(macvtap1) entered blocking state [ 195.861982][ T9491] bridge0: port 3(macvtap1) entered disabled state [ 195.881123][ T9491] macvtap1: entered allmulticast mode [ 195.888267][ T9491] bridge0: entered allmulticast mode [ 195.897480][ T9491] macvtap1: left allmulticast mode [ 195.917186][ T9491] bridge0: left allmulticast mode [ 195.932096][ T9491] bridge0: left promiscuous mode [ 196.172420][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 196.457482][ T9507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.889'. [ 196.516362][ T9507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.889'. [ 196.545149][ T9516] netlink: 'syz.2.890': attribute type 39 has an invalid length. [ 196.553188][ T9507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.889'. [ 197.067256][ T9530] gtp0: entered promiscuous mode [ 197.096814][ T9530] gtp0: entered allmulticast mode [ 197.246559][ T9544] IPVS: Scheduler module ip_vs_sip not found [ 197.258098][ T9539] lo speed is unknown, defaulting to 1000 [ 197.267749][ T9539] lo speed is unknown, defaulting to 1000 [ 197.352174][ T9553] netlink: 'syz.4.900': attribute type 49 has an invalid length. [ 198.269559][ T9578] __nla_validate_parse: 152 callbacks suppressed [ 198.269580][ T9578] netlink: 80 bytes leftover after parsing attributes in process `syz.1.906'. [ 198.358416][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 198.429052][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 199.745455][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.074874][ T9583] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 200.257284][ T9602] netlink: 'syz.3.912': attribute type 5 has an invalid length. [ 200.259258][ T9597] Bluetooth: MGMT ver 1.23 [ 200.277473][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.911'. [ 200.286690][ T9599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.911'. [ 200.302033][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 200.337118][ T9597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.913'. [ 200.815933][ T9618] syzkaller0: entered promiscuous mode [ 200.821773][ T9618] syzkaller0: entered allmulticast mode [ 201.133718][ T9634] netlink: 'syz.4.920': attribute type 1 has an invalid length. [ 201.231147][ T9634] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.242804][ T9634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 201.272526][ T9638] bond2: (slave gretap1): making interface the new active one [ 201.285291][ T9638] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 201.480537][ T9655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.921'. [ 201.644670][ T9634] bond2 (unregistering): (slave gretap1): Releasing active interface [ 201.678092][ T9634] bond2 (unregistering): Released all slaves [ 201.822194][ T9638] tipc: Enabling of bearer rejected, failed to enable media [ 201.850476][ T9648] lo speed is unknown, defaulting to 1000 [ 201.862284][ T9648] lo speed is unknown, defaulting to 1000 [ 201.915958][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 202.484204][ T9674] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 202.503654][ T9673] lo speed is unknown, defaulting to 1000 [ 202.516302][ T9673] lo speed is unknown, defaulting to 1000 [ 202.524499][ T9674] tipc: Enabling of bearer rejected, failed to enable media [ 202.557034][ T9680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.788348][ T9685] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 202.815213][ T9685] team0: Port device dummy0 added [ 202.842859][ T9685] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 202.864954][ T9685] team0: Port device dummy0 removed [ 202.886706][ T9685] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 203.366929][ T9703] __nla_validate_parse: 4 callbacks suppressed [ 203.366952][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'. [ 203.441040][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.934'. [ 203.492305][ T9714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.934'. [ 203.559628][ T9709] lo speed is unknown, defaulting to 1000 [ 203.559669][ T4482] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.602275][ T4482] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.611942][ T4482] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.620587][ T4482] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.639630][ T9709] lo speed is unknown, defaulting to 1000 [ 203.719560][ T9718] netlink: 'syz.3.937': attribute type 43 has an invalid length. [ 203.734608][ T9718] x_tables: unsorted entry at hook 3 [ 203.745045][ T9718] netlink: 48 bytes leftover after parsing attributes in process `syz.3.937'. [ 203.759925][ T9718] netlink: 32 bytes leftover after parsing attributes in process `syz.3.937'. [ 204.028100][ T9726] lo speed is unknown, defaulting to 1000 [ 204.142340][ T9726] lo speed is unknown, defaulting to 1000 [ 204.832407][ T9742] netlink: 60 bytes leftover after parsing attributes in process `syz.2.944'. [ 205.719136][ T9777] netlink: 60 bytes leftover after parsing attributes in process `syz.1.952'. [ 205.729496][ T9777] netlink: 60 bytes leftover after parsing attributes in process `syz.1.952'. [ 206.498640][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 206.532580][ T9818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.960'. [ 206.638562][ T9823] tipc: Cannot configure node identity twice [ 206.668888][ T9823] tipc: Cannot configure node identity twice [ 206.917758][ T9844] syz.0.965 (9844) used obsolete PPPIOCDETACH ioctl [ 207.439225][ T9878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.792128][ T9893] openvswitch: netlink: Invalid VLAN frame [ 207.802164][ T9893] netlink: 'syz.0.984': attribute type 3 has an invalid length. [ 208.059823][ T9900] netlink: 'syz.0.986': attribute type 13 has an invalid length. [ 208.070460][ T9900] netlink: 'syz.0.986': attribute type 17 has an invalid length. [ 208.848825][ T9914] syzkaller1: entered promiscuous mode [ 208.862206][ T9914] syzkaller1: entered allmulticast mode [ 209.661581][ T9942] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 209.683569][ T9942] bond2 (unregistering): Released all slaves [ 209.764758][ T9945] __nla_validate_parse: 10 callbacks suppressed [ 209.764781][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.998'. [ 209.837282][ T5842] Bluetooth: hci4: link tx timeout [ 209.845070][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.880854][ T9945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.998'. [ 210.045118][ T9952] netlink: 680 bytes leftover after parsing attributes in process `syz.3.996'. [ 210.141409][ T9963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 210.216218][ T9961] netlink: 'syz.4.1001': attribute type 10 has an invalid length. [ 210.237105][ T9961] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 210.270054][ T9966] netlink: 'syz.1.1002': attribute type 41 has an invalid length. [ 210.473707][ T9973] lo speed is unknown, defaulting to 1000 [ 210.485583][ T9973] lo speed is unknown, defaulting to 1000 [ 210.744787][ T9992] openvswitch: netlink: IP tunnel dst address not specified [ 210.940461][ T9998] batadv1: entered promiscuous mode [ 210.988559][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1011'. [ 211.433998][T10029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1018'. [ 211.504227][T10031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1018'. [ 211.748675][T10040] lo speed is unknown, defaulting to 1000 [ 211.774992][T10040] lo speed is unknown, defaulting to 1000 [ 211.901612][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 212.303273][T10057] netlink: 'syz.0.1025': attribute type 1 has an invalid length. [ 212.444561][T10065] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 212.596286][T10069] vlan2: entered promiscuous mode [ 212.615639][T10069] vlan2: entered allmulticast mode [ 212.649699][T10069] hsr_slave_1: entered allmulticast mode [ 212.876960][T10073] lo speed is unknown, defaulting to 1000 [ 212.922051][T10073] lo speed is unknown, defaulting to 1000 [ 212.928427][T10085] batadv_slave_1: entered promiscuous mode [ 212.937166][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1031'. [ 212.947002][T10085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.103764][T10085] batadv_slave_1 (unregistering): left promiscuous mode [ 213.176693][T10085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.449385][T10106] netlink: 'syz.3.1034': attribute type 39 has an invalid length. [ 213.462763][T10108] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1035'. [ 213.476232][T10107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1031'. [ 213.518888][T10106] hsr_slave_1 (unregistering): left promiscuous mode [ 213.891344][T10117] netlink: 'syz.0.1039': attribute type 14 has an invalid length. [ 213.904343][T10118] SET target dimension over the limit! [ 215.038462][T10163] __nla_validate_parse: 1 callbacks suppressed [ 215.038482][T10163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 215.068892][T10163] openvswitch: netlink: Message has 8 unknown bytes. [ 215.144846][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'. [ 215.306579][T10173] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1056'. [ 215.489405][T10188] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1057'. [ 215.511259][T10180] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1058'. [ 215.631993][T10190] netlink: 'syz.0.1061': attribute type 1 has an invalid length. [ 215.656561][T10195] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.776177][T10190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.793656][T10194] bond2: entered allmulticast mode [ 215.903296][T10209] lo speed is unknown, defaulting to 1000 [ 215.913029][T10209] lo speed is unknown, defaulting to 1000 [ 216.156647][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1066'. [ 216.184187][T10219] netlink: 'syz.1.1065': attribute type 8 has an invalid length. [ 216.262807][T10214] lo speed is unknown, defaulting to 1000 [ 216.282259][T10219] lo speed is unknown, defaulting to 1000 [ 216.432839][T10222] netlink: 'syz.2.1067': attribute type 11 has an invalid length. [ 216.519258][T10214] lo speed is unknown, defaulting to 1000 [ 216.563328][T10224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1068'. [ 216.573514][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1069'. [ 216.583220][T10226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1069'. [ 216.767259][T10235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1071'. [ 216.837483][T10244] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 216.973532][T10244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 217.007261][T10240] lo speed is unknown, defaulting to 1000 [ 217.029551][T10248] bond3: entered allmulticast mode [ 217.048687][T10250] bond3: (slave dummy0): making interface the new active one [ 217.057046][T10250] dummy0: entered allmulticast mode [ 217.064374][T10250] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 217.123620][T10219] lo speed is unknown, defaulting to 1000 [ 217.184978][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 217.185010][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 217.192367][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 217.640836][T10240] lo speed is unknown, defaulting to 1000 [ 217.825561][T10280] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 218.570369][T10291] netlink: 'syz.0.1084': attribute type 1 has an invalid length. [ 218.745739][T10291] bond4: entered promiscuous mode [ 218.780515][T10297] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 218.801538][T10291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.604943][T10334] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 219.793566][T10342] syzkaller1: entered promiscuous mode [ 219.799661][T10342] syzkaller1: entered allmulticast mode [ 219.865438][T10343] tipc: Enabled bearer , priority 0 [ 219.875412][T10343] syzkaller0: entered promiscuous mode [ 219.881390][T10343] syzkaller0: entered allmulticast mode [ 220.015459][T10343] netem: change failed [ 220.042280][T10343] tipc: Resetting bearer [ 220.055567][T10349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.116185][T10340] tipc: Resetting bearer [ 220.139907][T10340] tipc: Disabling bearer [ 220.327187][T10355] lo speed is unknown, defaulting to 1000 [ 220.336152][T10355] lo speed is unknown, defaulting to 1000 [ 220.420136][T10361] syzkaller0: entered promiscuous mode [ 220.426273][T10361] syzkaller0: entered allmulticast mode [ 220.432475][T10357] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 220.473129][T10359] lo speed is unknown, defaulting to 1000 [ 220.521621][T10363] __nla_validate_parse: 8 callbacks suppressed [ 220.521642][T10363] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1104'. [ 220.782111][T10359] lo speed is unknown, defaulting to 1000 [ 221.128882][T10383] xt_hashlimit: max too large, truncated to 1048576 [ 221.195696][T10389] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1113'. [ 221.338058][T10392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1115'. [ 221.437325][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 221.651363][T10393] syzkaller0: entered promiscuous mode [ 221.656917][T10393] syzkaller0: entered allmulticast mode [ 222.891320][T10438] IPVS: length: 116 != 8 [ 223.100701][T10423] bond0: (slave netdevsim0): Releasing backup interface [ 223.171955][T10441] nftables ruleset with unbound chain [ 223.190007][T10445] xt_TPROXY: Can be used only with -p tcp or -p udp [ 223.207216][T10444] xt_TPROXY: Can be used only with -p tcp or -p udp [ 223.356039][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 223.370257][T10454] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 223.388944][T10453] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 223.428443][T10451] : entered promiscuous mode [ 223.445932][T10464] netlink: 'syz.1.1128': attribute type 1 has an invalid length. [ 223.554695][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1128'. [ 223.581511][T10464] bond3: entered promiscuous mode [ 223.587131][T10464] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.587156][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 223.627622][T10475] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1135'. [ 223.650201][T10447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.658001][T10447] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 223.669433][T10447] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 223.681995][T10447] bond3: (slave gre1): Opening slave failed [ 223.695669][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1133'. [ 224.152226][T10518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1145'. [ 224.298660][T10522] pimreg3: entered allmulticast mode [ 224.304774][T10521] tipc: Enabled bearer , priority 0 [ 224.332701][T10521] syzkaller0: entered promiscuous mode [ 224.344613][T10521] syzkaller0: entered allmulticast mode [ 224.375294][T10521] tipc: Resetting bearer [ 224.405456][T10532] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 224.417295][T10520] tipc: Resetting bearer [ 224.451723][T10520] tipc: Disabling bearer [ 224.583905][T10540] netlink: 'syz.1.1153': attribute type 1 has an invalid length. [ 224.627929][T10542] netlink: 'syz.2.1154': attribute type 21 has an invalid length. [ 224.877236][T10554] vlan3: entered promiscuous mode [ 224.892030][T10554] bond0: entered promiscuous mode [ 224.897402][T10554] bond_slave_0: entered promiscuous mode [ 224.904044][T10554] bond_slave_1: entered promiscuous mode [ 224.992790][T10561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.356210][T10585] netlink: 'syz.2.1163': attribute type 9 has an invalid length. [ 225.366120][T10585] netlink: 'syz.2.1163': attribute type 11 has an invalid length. [ 225.374309][T10585] netlink: 'syz.2.1163': attribute type 12 has an invalid length. [ 225.938432][T10612] netlink: 'syz.1.1173': attribute type 5 has an invalid length. [ 225.951055][T10612] __nla_validate_parse: 6 callbacks suppressed [ 225.951074][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 226.100402][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1172'. [ 226.115212][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 226.184984][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1176'. [ 226.196740][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 226.206007][T10629] tc_dump_action: action bad kind [ 226.249405][T10629] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 226.261699][T10629] bond5 (unregistering): Released all slaves [ 226.293485][T10631] netlink: 'syz.0.1177': attribute type 2 has an invalid length. [ 226.301704][T10631] netlink: 'syz.0.1177': attribute type 2 has an invalid length. [ 226.324296][T10631] syzkaller0: entered promiscuous mode [ 226.330251][T10631] syzkaller0: entered allmulticast mode [ 226.597072][T10650] tipc: Enabled bearer , priority 0 [ 226.605605][T10650] syzkaller0: entered promiscuous mode [ 226.611645][T10650] syzkaller0: entered allmulticast mode [ 226.626022][T10651] veth1_macvtap: entered promiscuous mode [ 226.635763][T10650] veth1_macvtap: left promiscuous mode [ 226.641422][T10650] macsec0: entered promiscuous mode [ 226.681208][T10651] tipc: Resetting bearer [ 226.707432][T10651] tipc: Disabling bearer [ 226.720401][T10648] netlink: 'syz.2.1181': attribute type 9 has an invalid length. [ 226.808265][T10661] tipc: Enabled bearer , priority 0 [ 226.816169][T10661] syzkaller0: entered promiscuous mode [ 226.821753][T10661] syzkaller0: entered allmulticast mode [ 226.940154][T10670] tipc: Resetting bearer [ 226.948360][T10661] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 227.032549][T10667] tipc: Resetting bearer [ 227.061620][T10667] tipc: Disabling bearer [ 227.243384][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 227.358138][T10689] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1190'. [ 227.408657][T10689] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1190'. [ 227.420343][T10689] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1190'. [ 227.435190][T10686] lo speed is unknown, defaulting to 1000 [ 227.447853][T10686] lo speed is unknown, defaulting to 1000 [ 227.702222][T10693] team0: entered allmulticast mode [ 227.711272][T10693] team_slave_0: entered allmulticast mode [ 227.733653][T10693] team_slave_1: entered allmulticast mode [ 227.755127][T10693] bond0: entered allmulticast mode [ 227.760417][T10693] bond_slave_0: entered allmulticast mode [ 227.766712][T10693] bond_slave_1: entered allmulticast mode [ 227.772889][T10693] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 227.789584][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'. [ 228.991443][T10773] tipc: Enabled bearer , priority 0 [ 229.007457][T10773] syzkaller0: entered promiscuous mode [ 229.014664][T10773] syzkaller0: entered allmulticast mode [ 229.027282][T10773] tipc: Resetting bearer [ 229.054874][T10772] tipc: Resetting bearer [ 229.078042][T10772] tipc: Disabling bearer [ 229.112784][T10781] tipc: Enabled bearer , priority 0 [ 229.127677][T10781] syzkaller0: entered promiscuous mode [ 229.138771][T10781] syzkaller0: entered allmulticast mode [ 229.279638][T10778] tipc: Resetting bearer [ 229.323021][T10778] tipc: Disabling bearer [ 229.351447][T10792] syzkaller0: entered promiscuous mode [ 229.357154][T10792] syzkaller0: entered allmulticast mode [ 229.447868][T10801] xfrm0: entered promiscuous mode [ 229.453146][T10801] xfrm0: entered allmulticast mode [ 229.682599][T10821] IPv4: Oversized IP packet from 127.202.26.0 [ 229.723075][T10821] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 230.002794][T10828] ieee802154 phy1 wpan1: encryption failed: -22 [ 230.009710][T10828] netlink: 'syz.4.1223': attribute type 11 has an invalid length. [ 230.309490][T10858] validate_nla: 5 callbacks suppressed [ 230.309512][T10858] netlink: 'syz.3.1234': attribute type 4 has an invalid length. [ 230.645100][T10885] x_tables: duplicate underflow at hook 1 [ 230.675481][T10885] No such timeout policy "syz1" [ 230.806470][T10890] tipc: Enabled bearer , priority 0 [ 230.815729][T10890] syzkaller0: entered promiscuous mode [ 230.821775][T10890] syzkaller0: entered allmulticast mode [ 230.864482][T10890] tipc: Resetting bearer [ 230.877659][T10889] tipc: Resetting bearer [ 230.897059][T10889] tipc: Disabling bearer [ 231.034879][T10894] netlink: 'syz.2.1245': attribute type 2 has an invalid length. [ 231.047595][T10894] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 231.255213][T10904] geneve2: entered promiscuous mode [ 231.285421][ T6618] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.324348][ T6618] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.359758][ T6618] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.400399][T10907] syzkaller0: entered promiscuous mode [ 231.414320][T10907] syzkaller0: entered allmulticast mode [ 231.423451][ T6618] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 231.452216][T10916] __nla_validate_parse: 15 callbacks suppressed [ 231.452236][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 231.468138][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 231.473266][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 231.481536][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 231.521148][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 231.557377][T10907] netlink: 'syz.3.1249': attribute type 1 has an invalid length. [ 231.633930][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1249'. [ 231.770739][T10921] lo speed is unknown, defaulting to 1000 [ 231.858403][T10921] lo speed is unknown, defaulting to 1000 [ 232.177266][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1259'. [ 232.287021][T10940] veth1: entered allmulticast mode [ 232.479799][T10943] netlink: 'syz.2.1260': attribute type 1 has an invalid length. [ 232.493799][T10945] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1261'. [ 232.563147][T10943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.964096][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1254'. [ 233.001919][T10961] rdma_rxe: rxe_newlink: failed to add lo [ 233.086134][T10955] lo speed is unknown, defaulting to 1000 [ 233.121122][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 233.173055][T10955] lo speed is unknown, defaulting to 1000 [ 233.859814][T10986] lo speed is unknown, defaulting to 1000 [ 234.031663][T10986] lo speed is unknown, defaulting to 1000 [ 234.448424][T11005] sctp: [Deprecated]: syz.3.1274 (pid 11005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.448424][T11005] Use struct sctp_sack_info instead [ 235.471007][T11027] netlink: 'syz.3.1278': attribute type 2 has an invalid length. [ 235.522002][T11029] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 236.013152][T11051] tipc: Enabled bearer , priority 0 [ 236.056925][T11044] tipc: Disabling bearer [ 236.359810][T11077] netlink: 'syz.4.1292': attribute type 10 has an invalid length. [ 236.382278][T11077] veth0_vlan: left promiscuous mode [ 236.397696][T11077] veth0_vlan: entered promiscuous mode [ 236.409969][T11077] `: Device veth0_vlan failed to register rx_handler [ 236.434202][T11082] netlink: 'syz.4.1292': attribute type 1 has an invalid length. [ 236.472854][T11077] openvswitch: netlink: Missing valid actions attribute. [ 236.480342][T11077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.691941][T11097] __nla_validate_parse: 7 callbacks suppressed [ 236.691960][T11097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 236.764467][T11091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1295'. [ 236.802423][T11091] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1295'. [ 236.833852][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'. [ 237.138437][T11126] netlink: del zone limit has 4 unknown bytes [ 237.176511][T11128] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1308'. [ 237.349312][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 237.361408][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 237.380749][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 237.612976][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 237.652173][T11153] nbd: socks must be embedded in a SOCK_ITEM attr [ 237.662169][T11153] block nbd1: shutting down sockets [ 237.693404][T11151] lo speed is unknown, defaulting to 1000 [ 237.713528][T11151] lo speed is unknown, defaulting to 1000 [ 237.748455][T11152] nbd: socks must be embedded in a SOCK_ITEM attr [ 237.758949][T11152] block nbd1: shutting down sockets [ 238.476308][T11184] openvswitch: netlink: Key type 198 is out of range max 32 [ 238.490624][T11176] ip6tnl1: entered promiscuous mode [ 238.503957][T11176] ip6tnl1: entered allmulticast mode [ 238.735802][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 238.777190][T11196] bond1: (slave vcan0): Releasing backup interface [ 238.789258][T11196] bond1: Destroying bond [ 238.802728][T11196] bond1 (unregistering): Released all slaves [ 239.049377][T11192] lo speed is unknown, defaulting to 1000 [ 239.125640][T11192] lo speed is unknown, defaulting to 1000 [ 239.565076][T11212] netlink: 'syz.1.1332': attribute type 30 has an invalid length. [ 239.979553][T11225] lo speed is unknown, defaulting to 1000 [ 239.987987][T11225] lo speed is unknown, defaulting to 1000 [ 240.657135][T11259] tipc: Enabling of bearer rejected, failed to enable media [ 241.090299][T11271] tap0: tun_chr_ioctl cmd 1074025676 [ 241.096045][T11271] tap0: owner set to 0 [ 241.173907][T11275] netlink: 'syz.0.1344': attribute type 27 has an invalid length. [ 241.188972][T11275] netlink: 'syz.0.1344': attribute type 4 has an invalid length. [ 242.448879][T11289] netlink: 'syz.3.1349': attribute type 39 has an invalid length. [ 243.489887][T11312] SET target dimension over the limit! [ 243.626359][T11312] syzkaller0: entered promiscuous mode [ 243.632414][T11312] syzkaller0: entered allmulticast mode [ 243.771207][T11325] __nla_validate_parse: 2 callbacks suppressed [ 243.771226][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'. [ 245.708745][T11367] ipt_REJECT: ECHOREPLY no longer supported. [ 245.816835][T11383] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1372'. [ 245.912085][T11387] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1372'. [ 246.170509][T11402] tipc: Enabled bearer , priority 0 [ 246.178645][T11402] syzkaller0: entered promiscuous mode [ 246.184810][T11402] syzkaller0: entered allmulticast mode [ 246.242211][T11402] tipc: Resetting bearer [ 246.250504][T11400] tipc: Resetting bearer [ 246.285910][T11400] tipc: Disabling bearer [ 247.102200][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 247.637094][T11454] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1389'. [ 247.758607][T11456] netlink: 'syz.2.1390': attribute type 1 has an invalid length. [ 248.243586][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1392'. [ 248.301037][T11462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1392'. [ 248.353302][T11472] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1394'. [ 248.373751][T11472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1394'. [ 248.419914][T11472] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1394'. [ 248.626676][T11491] netlink: 'syz.1.1399': attribute type 4 has an invalid length. [ 248.627078][T11490] netlink: 'syz.1.1399': attribute type 4 has an invalid length. [ 248.778002][T11498] syzkaller0: entered promiscuous mode [ 248.784383][T11498] syzkaller0: entered allmulticast mode [ 248.990725][T11510] __nla_validate_parse: 1 callbacks suppressed [ 248.990745][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1405'. [ 249.044146][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1405'. [ 249.153252][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'. [ 249.503614][T11523] batadv1: entered promiscuous mode [ 249.510234][T11525] netlink: 'syz.0.1408': attribute type 1 has an invalid length. [ 249.568615][T11525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.653246][T11526] erspan0: entered allmulticast mode [ 249.869345][T11544] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1412'. [ 249.913450][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1414'. [ 249.925553][T11523] lo speed is unknown, defaulting to 1000 [ 249.980997][T11523] lo speed is unknown, defaulting to 1000 [ 250.023561][T11552] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1412'. [ 250.145152][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 250.252439][T11559] gretap1: entered promiscuous mode [ 250.371114][T11544] lo speed is unknown, defaulting to 1000 [ 250.684096][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 250.699949][T11544] lo speed is unknown, defaulting to 1000 [ 250.726494][T11579] vlan3: entered promiscuous mode [ 251.796700][T11600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1427'. [ 251.979237][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'. [ 252.004251][T11607] netlink: 'syz.1.1429': attribute type 3 has an invalid length. [ 252.032053][ T6637] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.040972][T11609] netlink: 'syz.4.1430': attribute type 2 has an invalid length. [ 252.055516][ T6637] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.081880][ T6637] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.110627][ T6637] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.158430][T11608] lo speed is unknown, defaulting to 1000 [ 252.191921][T11620] nbd: illegal input index 65508 [ 252.205454][T11608] lo speed is unknown, defaulting to 1000 [ 252.318828][T11622] lo speed is unknown, defaulting to 1000 [ 252.668713][T11641] lo speed is unknown, defaulting to 1000 [ 252.695956][T11622] lo speed is unknown, defaulting to 1000 [ 253.081830][T11641] lo speed is unknown, defaulting to 1000 [ 253.215399][T11650] tipc: Enabling of bearer rejected, failed to enable media [ 254.350196][T11685] netlink: 'syz.2.1446': attribute type 1 has an invalid length. [ 254.434567][T11685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.446522][T11690] __nla_validate_parse: 8 callbacks suppressed [ 254.446545][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 254.481970][T11685] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1446'. [ 254.521975][T11685] bond3: entered promiscuous mode [ 254.527101][T11685] bond3: entered allmulticast mode [ 254.561271][T11691] bond3: left promiscuous mode [ 254.573698][T11691] bond3: left allmulticast mode [ 254.689030][T11685] bond3 (unregistering): Released all slaves [ 254.818098][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 254.863538][T11699] hsr_slave_0: left promiscuous mode [ 254.912764][T11699] hsr_slave_1: left promiscuous mode [ 255.015864][T11714] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1454'. [ 255.105283][T11716] bridge_slave_0: left allmulticast mode [ 255.129973][T11716] bridge_slave_0: left promiscuous mode [ 255.142853][T11716] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.158419][T11716] bridge_slave_1: left allmulticast mode [ 255.164836][T11716] bridge_slave_1: left promiscuous mode [ 255.171629][T11716] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.210141][T11716] bond0: (slave bond_slave_0): Releasing backup interface [ 255.234880][T11716] bond_slave_0: left promiscuous mode [ 255.247603][T11716] bond0: (slave bond_slave_1): Releasing backup interface [ 255.262507][T11716] bond_slave_1: left promiscuous mode [ 255.271831][T11716] team0: Port device team_slave_0 removed [ 255.280249][T11716] team0: Port device team_slave_1 removed [ 255.287706][T11716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.299324][T11716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.308088][T11716] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 255.402577][T11729] lo speed is unknown, defaulting to 1000 [ 255.410277][T11729] lo speed is unknown, defaulting to 1000 [ 256.224759][T11769] tipc: Enabled bearer , priority 0 [ 256.270834][T11769] syzkaller0: entered promiscuous mode [ 256.276476][T11769] syzkaller0: entered allmulticast mode [ 256.321001][T11769] tipc: Resetting bearer [ 256.452656][T11769] lo speed is unknown, defaulting to 1000 [ 256.479244][T11783] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 256.531041][T11783] netlink: 'syz.0.1472': attribute type 2 has an invalid length. [ 256.537000][T11782] delete_channel: no stack [ 256.546491][T11769] lo speed is unknown, defaulting to 1000 [ 256.559211][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1472'. [ 256.708540][T11790] sctp: [Deprecated]: syz.1.1475 (pid 11790) Use of int in max_burst socket option. [ 256.708540][T11790] Use struct sctp_assoc_value instead [ 256.742436][T11789] delete_channel: no stack [ 256.786980][T11792] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1474'. [ 256.893588][T11794] lo speed is unknown, defaulting to 1000 [ 256.936001][T11798] openvswitch: netlink: IP tunnel dst address not specified [ 257.017515][T11801] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1478'. [ 257.034455][T11796] lo speed is unknown, defaulting to 1000 [ 257.064667][T11801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'. [ 257.313358][ T5933] tipc: Node number set to 2637800863 [ 257.364144][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731051 [ 257.381392][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731050 [ 257.394356][T11767] tipc: Resetting bearer [ 257.405773][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731049 [ 257.442928][T11824] sock: sock_timestamping_bind_phc: sock not bind to device [ 257.452576][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731048 [ 257.461302][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731047 [ 257.473397][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731046 [ 257.500222][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731045 [ 257.541314][T11767] tipc: Disabling bearer [ 257.554220][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731044 [ 257.598643][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731043 [ 257.627382][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'. [ 257.637748][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731042 [ 257.668641][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731041 [ 257.694410][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731040 [ 257.703364][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731039 [ 257.712284][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731038 [ 257.721105][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731037 [ 257.729717][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731036 [ 257.739854][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731035 [ 257.749003][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731034 [ 257.757968][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731033 [ 257.766801][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731032 [ 257.775701][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731031 [ 257.785090][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731030 [ 257.793993][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731029 [ 257.802640][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731028 [ 257.811563][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731027 [ 257.820454][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731026 [ 257.829417][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731025 [ 257.840315][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731024 [ 257.850542][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731023 [ 257.859547][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731022 [ 257.868446][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731021 [ 257.877330][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731020 [ 257.887075][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731019 [ 257.895846][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731018 [ 257.916412][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731017 [ 257.925982][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731016 [ 257.934832][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731015 [ 257.948108][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731014 [ 257.957413][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731013 [ 257.966547][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731012 [ 257.976460][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731011 [ 257.985195][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731010 [ 257.993805][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731009 [ 258.002484][T11794] lo speed is unknown, defaulting to 1000 [ 258.036446][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731008 [ 258.062848][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731007 [ 258.090926][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731006 [ 258.129081][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731005 [ 258.152801][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731004 [ 258.182930][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731003 [ 258.209943][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731002 [ 258.232435][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731001 [ 258.247438][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731000 [ 258.272697][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730999 [ 258.326783][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730998 [ 258.369390][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730997 [ 258.397239][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730996 [ 258.406252][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730995 [ 258.415033][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730994 [ 258.427481][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730993 [ 258.436032][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730992 [ 258.445139][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730991 [ 258.462023][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730990 [ 258.472568][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730989 [ 258.481377][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730988 [ 258.508145][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730987 [ 258.522050][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731051 [ 258.538895][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731050 [ 258.547853][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731049 [ 258.556513][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731048 [ 258.566311][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731047 [ 258.579697][T11847] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1488'. [ 258.592622][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731046 [ 258.604038][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731045 [ 258.624821][T11846] netlink: 'syz.3.1488': attribute type 2 has an invalid length. [ 258.671670][T11796] lo speed is unknown, defaulting to 1000 [ 258.684437][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731044 [ 258.752233][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731043 [ 258.775459][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731042 [ 258.796301][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731041 [ 258.820140][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731040 [ 258.848595][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731039 [ 258.868492][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731038 [ 258.882318][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731037 [ 258.923197][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731036 [ 258.941595][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731035 [ 258.959377][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731034 [ 258.968462][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731033 [ 258.977250][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731032 [ 258.985954][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731031 [ 259.000520][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731030 [ 259.015347][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731029 [ 259.024816][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731028 [ 259.033570][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731027 [ 259.042251][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731026 [ 259.051115][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731025 [ 259.059632][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731024 [ 259.068431][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731023 [ 259.077171][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731022 [ 259.085963][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731021 [ 259.109738][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731020 [ 259.123962][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731019 [ 259.133639][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731018 [ 259.142200][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731017 [ 259.151596][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731016 [ 259.160334][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731015 [ 259.171631][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731014 [ 259.180673][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731013 [ 259.189542][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731012 [ 259.198186][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731011 [ 259.207280][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731010 [ 259.216452][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731009 [ 259.227702][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731008 [ 259.238082][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731007 [ 259.246995][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731006 [ 259.284774][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731005 [ 259.293572][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731004 [ 259.302654][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731003 [ 259.311692][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731002 [ 259.320441][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731001 [ 259.329383][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759731000 [ 259.338371][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730999 [ 259.391410][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730998 [ 259.423647][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730997 [ 259.433172][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730996 [ 259.469143][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730995 [ 259.508435][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730994 [ 259.524465][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730993 [ 259.559552][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730992 [ 259.602224][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730991 [ 259.610727][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730990 [ 259.640864][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730989 [ 259.659615][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730988 [ 259.688832][T11816] tipc: Failed to remove unknown binding: 66,0,0/0:2759730986/2759730987 [ 260.026144][T11886] __nla_validate_parse: 4 callbacks suppressed [ 260.026165][T11886] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1495'. [ 260.155743][T11889] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 260.239859][T11876] tipc: Enabled bearer , priority 0 [ 260.484972][T11887] syzkaller0: entered promiscuous mode [ 260.492323][T11887] syzkaller0: entered allmulticast mode [ 260.503633][T11907] tipc: Resetting bearer [ 260.537922][T11874] tipc: Resetting bearer [ 260.569491][T11874] tipc: Disabling bearer [ 260.584360][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1502'. [ 260.615408][T11910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.664534][T11910] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.714195][T11910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.779782][T11910] bond5: (slave lo): Enslaving as an active interface with an up link [ 260.972272][T11921] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 261.119851][T11911] bond5 (unregistering): (slave lo): Releasing backup interface [ 261.128431][T11911] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 261.146567][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 261.169881][T11911] bond5 (unregistering): Released all slaves [ 261.185950][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.246158][T11919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.254049][T11919] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 261.272288][T11919] bond0: (slave gre0): Error -95 calling set_mac_address [ 261.382327][T11921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.492143][T11925] bond2: (slave gretap1): making interface the new active one [ 261.525092][T11925] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 261.537035][T11944] netlink: 'syz.2.1507': attribute type 1 has an invalid length. [ 261.573975][T11944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1507'. [ 261.825011][T11928] bond2 (unregistering): (slave gretap1): Releasing active interface [ 261.852920][T11928] bond2 (unregistering): Released all slaves [ 262.411432][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1517'. [ 262.450143][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1517'. [ 262.464739][T11982] netlink: 'syz.1.1517': attribute type 5 has an invalid length. [ 262.479871][T11982] netlink: 'syz.1.1517': attribute type 6 has an invalid length. [ 262.502801][T11990] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1518'. [ 262.687468][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 262.709445][T11995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1519'. [ 262.868307][T12004] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 262.915015][T12000] lo speed is unknown, defaulting to 1000 [ 262.979224][T12000] lo speed is unknown, defaulting to 1000 [ 263.459066][T12019] pim6reg1: entered promiscuous mode [ 263.490942][T12019] pim6reg1: entered allmulticast mode [ 263.553849][T12026] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.1523'. [ 263.598614][T12024] bridge5: entered promiscuous mode [ 263.607330][T12024] bridge5: entered allmulticast mode [ 263.799374][T12035] netlink: 'syz.2.1527': attribute type 1 has an invalid length. [ 264.425087][T12048] vlan2: entered allmulticast mode [ 264.446605][T12048] bridge0: port 3(vlan2) entered blocking state [ 264.464854][T12048] bridge0: port 3(vlan2) entered disabled state [ 264.487998][T12048] vlan2: entered promiscuous mode [ 264.539906][T12073] bond7: (slave team0): Device is not bonding slave [ 264.549325][T12073] bond7: option active_slave: invalid value (team0) [ 264.561441][T12073] bond7 (unregistering): Released all slaves [ 265.389654][T12107] lo speed is unknown, defaulting to 1000 [ 265.401685][T12110] __nla_validate_parse: 6 callbacks suppressed [ 265.401711][T12110] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1537'. [ 265.418965][T12107] lo speed is unknown, defaulting to 1000 [ 265.510172][T12112] netlink: 364 bytes leftover after parsing attributes in process `syz.3.1538'. [ 265.777036][T12123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 265.946263][T12127] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 266.225425][T12142] lo speed is unknown, defaulting to 1000 [ 266.233792][T12142] lo speed is unknown, defaulting to 1000 [ 266.364000][T12154] tipc: Can't bind to reserved service type 1 [ 266.498091][T12162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1551'. [ 266.766005][T12168] syzkaller1: entered promiscuous mode [ 266.776162][T12168] syzkaller1: entered allmulticast mode [ 266.941323][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 267.296300][T12194] netlink: 'syz.3.1560': attribute type 3 has an invalid length. [ 267.309987][T12194] siw: device registration error -23 [ 267.909210][ T6618] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.919118][ T6618] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.949156][ T6618] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.982712][ T6618] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.144316][T12231] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1570'. [ 268.161044][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'. [ 268.178072][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1568'. [ 268.316040][T12239] xt_TCPMSS: Only works on TCP SYN packets [ 268.333209][T12239] syzkaller0: entered promiscuous mode [ 268.338859][T12239] syzkaller0: entered allmulticast mode [ 268.420228][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'. [ 268.449374][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1574'. [ 269.116249][T12278] netlink: 'syz.3.1582': attribute type 1 has an invalid length. [ 269.124850][T12278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.315519][T12289] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1587'. [ 269.332365][T12291] tipc: Enabled bearer , priority 0 [ 269.351617][T12291] syzkaller0: entered promiscuous mode [ 269.357159][T12291] syzkaller0: entered allmulticast mode [ 269.444445][T12281] tipc: Resetting bearer [ 269.632774][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1590'. [ 269.658541][T12281] tipc: Disabling bearer [ 269.695298][T12304] hsr_slave_0: left promiscuous mode [ 269.780200][T12299] lo speed is unknown, defaulting to 1000 [ 269.800063][T12299] lo speed is unknown, defaulting to 1000 [ 270.701535][T12329] lo speed is unknown, defaulting to 1000 [ 270.709428][T12329] lo speed is unknown, defaulting to 1000 [ 270.772602][T12325] __nla_validate_parse: 1 callbacks suppressed [ 270.772623][T12325] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1599'. [ 270.780488][T12338] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1600'. [ 270.831774][T12325] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1599'. [ 270.869326][T12342] netlink: 'syz.4.1601': attribute type 10 has an invalid length. [ 270.925728][T12342] `: Port device dummy0 removed [ 270.994045][T12342] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 271.169355][T12347] tipc: Enabled bearer , priority 0 [ 271.201183][T12347] syzkaller0: entered promiscuous mode [ 271.220420][T12347] syzkaller0: entered allmulticast mode [ 271.276360][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'. [ 271.405707][T12347] tipc: Resetting bearer [ 271.412430][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'. [ 271.434388][T12345] tipc: Resetting bearer [ 271.454506][T12345] tipc: Disabling bearer [ 271.465214][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 272.253849][T12396] sctp: [Deprecated]: syz.4.1615 (pid 12396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.253849][T12396] Use struct sctp_sack_info instead [ 272.519812][T12405] lo speed is unknown, defaulting to 1000 [ 272.541099][T12405] lo speed is unknown, defaulting to 1000 [ 272.657189][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x22 [ 272.721120][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'. [ 272.798954][T12417] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1617'. [ 272.845321][T12423] tipc: Enabled bearer , priority 0 [ 272.861988][T12423] syzkaller0: entered promiscuous mode [ 272.899911][T12423] syzkaller0: entered allmulticast mode [ 272.926175][T12425] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 273.021285][T12426] netlink: 'syz.3.1623': attribute type 5 has an invalid length. [ 273.050181][T12423] tipc: Resetting bearer [ 273.094472][T12426] ip6erspan1: entered promiscuous mode [ 273.168350][T12422] tipc: Resetting bearer [ 273.257456][T12422] tipc: Disabling bearer [ 273.766185][T12460] geneve2: entered promiscuous mode [ 273.773667][T12451] syzkaller0: entered allmulticast mode [ 273.779843][ T6637] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.788447][ T6637] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.797336][ T6637] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.807697][ T6637] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.212613][T12484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1638'. [ 274.248130][T12486] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 274.554096][T12502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1641'. [ 275.280296][T12540] geneve0: entered promiscuous mode [ 275.309702][T12539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.328374][ T6620] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 275.351208][ T6620] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 275.360877][ T6620] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 275.371232][ T6620] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 275.406146][T12534] lo speed is unknown, defaulting to 1000 [ 275.426142][T12534] lo speed is unknown, defaulting to 1000 [ 276.073921][T12548] __nla_validate_parse: 2 callbacks suppressed [ 276.073939][T12548] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1659'. [ 276.123941][T12548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1659'. [ 276.154775][T12551] x_tables: duplicate underflow at hook 2 [ 276.176147][T12548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1659'. [ 276.771225][T12578] netlink: 'syz.0.1667': attribute type 3 has an invalid length. [ 276.801700][T12578] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1667'. [ 276.908778][T12577] lo speed is unknown, defaulting to 1000 [ 276.949964][T12574] lo speed is unknown, defaulting to 1000 [ 276.966550][T12574] lo speed is unknown, defaulting to 1000 [ 277.398880][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1673'. [ 277.443154][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1673'. [ 277.502588][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1674'. [ 277.536507][T12601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1674'. [ 277.557779][T12601] tipc: Enabled bearer , priority 0 [ 277.577181][T12601] syzkaller0: entered promiscuous mode [ 277.590901][T12601] syzkaller0: entered allmulticast mode [ 277.633424][T12601] tipc: Resetting bearer [ 277.687425][T12600] tipc: Resetting bearer [ 277.707451][T12600] tipc: Disabling bearer [ 277.720484][T12577] lo speed is unknown, defaulting to 1000 [ 278.062478][T12620] IPVS: length: 132 != 8 [ 278.099361][T12620] pimreg: entered allmulticast mode [ 278.197484][T12620] tipc: Enabled bearer , priority 0 [ 278.216586][T12620] syzkaller0: entered promiscuous mode [ 278.244963][T12620] syzkaller0: entered allmulticast mode [ 278.343614][T12627] openvswitch: netlink: Message has 4 unknown bytes. [ 278.350518][T12620] tipc: Resetting bearer [ 278.361019][T12627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.392078][T12620] pimreg: left allmulticast mode [ 278.426071][T12632] netlink: 'syz.1.1682': attribute type 10 has an invalid length. [ 278.518441][T12638] netlink: 'syz.1.1682': attribute type 10 has an invalid length. [ 278.557053][T12632] team0: Port device dummy0 added [ 278.632751][ T6636] nci: nci_rsp_packet: unknown rsp opcode 0x3 [ 278.651831][T12638] team0: Port device dummy0 removed [ 278.735284][T12638] dummy0: entered promiscuous mode [ 278.762026][T12638] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 278.837021][T12616] tipc: Resetting bearer [ 278.921636][T12616] tipc: Disabling bearer [ 279.144402][T12645] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1683'. [ 279.203758][T12652] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20004 [ 279.300557][T12652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1685'. [ 279.332789][T12655] netlink: 'syz.3.1686': attribute type 11 has an invalid length. [ 279.358996][T12647] lo speed is unknown, defaulting to 1000 [ 279.567204][T12647] lo speed is unknown, defaulting to 1000 [ 280.054028][T12675] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 280.315000][T12679] lo speed is unknown, defaulting to 1000 [ 280.347079][T12679] lo speed is unknown, defaulting to 1000 [ 280.713777][T12701] veth8: entered promiscuous mode [ 280.742595][T12701] veth8: entered allmulticast mode [ 281.162906][T12705] lo speed is unknown, defaulting to 1000 [ 281.211877][T12705] lo speed is unknown, defaulting to 1000 [ 281.318266][T12723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.516172][T12727] __nla_validate_parse: 4 callbacks suppressed [ 281.516195][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1701'. [ 281.765897][T12727] lo speed is unknown, defaulting to 1000 [ 281.785568][T12727] lo speed is unknown, defaulting to 1000 [ 281.797016][T12730] lo speed is unknown, defaulting to 1000 [ 282.151543][T12745] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1707'. [ 282.170971][T12745] netlink: 'syz.0.1707': attribute type 1 has an invalid length. [ 282.192325][T12745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1707'. [ 282.247474][T12730] lo speed is unknown, defaulting to 1000 [ 282.396581][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 283.197466][T12760] netlink: 'syz.1.1711': attribute type 1 has an invalid length. [ 283.427987][T12760] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.452912][T12768] tipc: Enabled bearer , priority 0 [ 283.460023][T12767] veth1_to_team: entered allmulticast mode [ 283.493014][T12760] syzkaller0: entered promiscuous mode [ 283.498697][T12760] syzkaller0: entered allmulticast mode [ 283.506606][T12763] veth1_to_team: left allmulticast mode [ 283.544403][T12760] tipc: Resetting bearer [ 283.555598][T12760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1711'. [ 283.565171][T12760] bond5: entered promiscuous mode [ 283.570270][T12760] bond5: entered allmulticast mode [ 283.588996][T12760] bond0: (slave dummy0): Releasing backup interface [ 283.598412][T12760] dummy0: left promiscuous mode [ 283.609937][T12760] bond5: (slave dummy0): making interface the new active one [ 283.618129][T12760] dummy0: entered promiscuous mode [ 283.624875][T12760] dummy0: entered allmulticast mode [ 283.632975][T12760] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 283.740730][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'. [ 283.750236][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1713'. [ 283.812653][T12762] bond5 (unregistering): (slave dummy0): Releasing active interface [ 283.830955][T12762] dummy0: left promiscuous mode [ 283.836165][T12762] dummy0: left allmulticast mode [ 283.851438][T12762] bond5 (unregistering): Released all slaves [ 283.976944][T12759] tipc: Resetting bearer [ 284.032976][T12759] tipc: Disabling bearer [ 284.056996][T12778] lo speed is unknown, defaulting to 1000 [ 284.076790][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 284.093200][T12778] lo speed is unknown, defaulting to 1000 [ 284.186936][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 284.370657][T12793] syzkaller0: entered promiscuous mode [ 284.384446][T12793] syzkaller0: entered allmulticast mode [ 284.584816][T12796] netlink: 'syz.4.1721': attribute type 58 has an invalid length. [ 284.623197][T12796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1721'. [ 284.726520][T12803] lo speed is unknown, defaulting to 1000 [ 284.735648][T12803] lo speed is unknown, defaulting to 1000 [ 285.233185][T12824] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 285.314296][T12830] netlink: 'syz.2.1729': attribute type 1 has an invalid length. [ 285.429889][T12826] veth5: entered allmulticast mode [ 285.626426][T12831] bond3: (slave bridge6): making interface the new active one [ 285.637710][T12831] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 285.756882][T12838] syzkaller0: entered promiscuous mode [ 285.780993][T12838] syzkaller0: entered allmulticast mode [ 285.905792][T12838] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 285.921220][T12843] lo speed is unknown, defaulting to 1000 [ 285.929123][T12843] lo speed is unknown, defaulting to 1000 [ 286.022004][T12855] syzkaller0: entered promiscuous mode [ 286.025814][T12853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.027580][T12855] syzkaller0: entered allmulticast mode [ 286.162778][T12851] lo speed is unknown, defaulting to 1000 [ 286.451830][T12851] lo speed is unknown, defaulting to 1000 [ 286.545188][T12865] __nla_validate_parse: 3 callbacks suppressed [ 286.545211][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 286.567730][T12865] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1738'. [ 286.612206][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1739'. [ 286.752638][T12868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1739'. [ 287.447999][T12901] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1746'. [ 287.664248][T12908] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1748'. [ 287.873280][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1750'. [ 287.910651][T12921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1750'. [ 287.983968][T12921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1750'. [ 288.163707][T12936] veth0: entered promiscuous mode [ 288.173619][T12932] veth0: left promiscuous mode [ 288.330353][T12944] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 288.393204][T12944] bond2: entered promiscuous mode [ 288.399323][T12944] bond2: entered allmulticast mode [ 288.407808][T12956] smc: removing ib device syz0 [ 288.431733][T12944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.588383][T12951] lo speed is unknown, defaulting to 1000 [ 288.809969][T12962] lo speed is unknown, defaulting to 1000 [ 289.173164][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'. [ 289.386887][T12984] openvswitch: netlink: Message has 8 unknown bytes. [ 289.829170][T13001] pimreg: entered allmulticast mode [ 290.054288][T13006] lo speed is unknown, defaulting to 1000 [ 290.084429][T13004] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.101036][T13004] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.259557][T13004] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.270080][T13004] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.288480][T13013] tipc: Enabled bearer , priority 0 [ 290.329289][T13013] syzkaller0: entered promiscuous mode [ 290.335716][T13013] syzkaller0: entered allmulticast mode [ 290.435554][T13004] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.447837][T13004] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.551429][T13014] tipc: Resetting bearer [ 290.580636][T13004] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.592753][T13004] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.646766][T13012] tipc: Resetting bearer [ 290.683747][T13012] tipc: Disabling bearer [ 290.750197][T13019] tipc: Enabled bearer , priority 0 [ 290.769881][T13019] syzkaller0: entered promiscuous mode [ 290.778796][T13019] syzkaller0: entered allmulticast mode [ 290.838792][T13019] tipc: Resetting bearer [ 290.847714][ T6620] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.863640][ T6620] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.876892][T13018] tipc: Resetting bearer [ 290.893101][T13018] tipc: Disabling bearer [ 290.915263][ T6637] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.930566][ T6637] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.986527][ T6637] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.995028][ T6637] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.049359][ T6620] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.073671][ T6620] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.146009][T13029] netlink: 'syz.0.1778': attribute type 2 has an invalid length. [ 291.216373][T13034] netlink: 'syz.3.1780': attribute type 1 has an invalid length. [ 291.311948][T13034] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 291.666541][T13063] tipc: Enabled bearer , priority 0 [ 291.709744][T13063] syzkaller0: entered promiscuous mode [ 291.716410][T13063] syzkaller0: entered allmulticast mode [ 291.777358][T13061] lo speed is unknown, defaulting to 1000 [ 291.800194][T13063] tipc: Resetting bearer [ 291.807734][T13064] __nla_validate_parse: 5 callbacks suppressed [ 291.807758][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'. [ 291.830838][T13064] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1786'. [ 291.841504][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'. [ 291.864826][T13062] tipc: Resetting bearer [ 291.908313][T13062] tipc: Disabling bearer [ 292.315661][T13098] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 292.334336][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'. [ 292.418937][T13098] bond7: (slave veth7): Enslaving as an active interface with a down link [ 292.462906][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 292.542090][T13098] bond7 (unregistering): (slave veth7): Releasing active interface [ 292.577856][T13098] bond7 (unregistering): Released all slaves [ 292.637664][T13109] macvlan2: entered promiscuous mode [ 292.646028][T13109] bond0: entered promiscuous mode [ 292.651464][T13109] bond_slave_0: entered promiscuous mode [ 292.671357][T13109] bond_slave_1: entered promiscuous mode [ 292.679253][T13109] team0: entered promiscuous mode [ 292.708214][T13109] team_slave_0: entered promiscuous mode [ 292.715053][T13109] team_slave_1: entered promiscuous mode [ 292.722468][T13109] dummy0: entered promiscuous mode [ 292.729167][T13109] macvlan2: entered allmulticast mode [ 292.735058][T13109] bond0: entered allmulticast mode [ 292.740615][T13109] bond_slave_0: entered allmulticast mode [ 292.748284][T13109] bond_slave_1: entered allmulticast mode [ 292.761557][T13109] team0: entered allmulticast mode [ 292.768089][T13109] team_slave_0: entered allmulticast mode [ 292.775198][T13109] team_slave_1: entered allmulticast mode [ 292.790970][T13109] dummy0: entered allmulticast mode [ 292.797879][T13109] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 292.813548][T13117] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1802'. [ 292.827054][T13109] bond0: left allmulticast mode [ 292.841121][T13109] bond_slave_0: left allmulticast mode [ 292.848912][T13109] bond_slave_1: left allmulticast mode [ 292.855393][T13109] team0: left allmulticast mode [ 292.861138][T13109] team_slave_0: left allmulticast mode [ 292.866998][T13109] team_slave_1: left allmulticast mode [ 292.873546][T13109] dummy0: left allmulticast mode [ 292.878849][T13109] bond0: left promiscuous mode [ 292.884000][T13109] bond_slave_0: left promiscuous mode [ 292.897420][T13109] bond_slave_1: left promiscuous mode [ 292.906341][T13109] team0: left promiscuous mode [ 292.913846][T13109] team_slave_0: left promiscuous mode [ 292.920000][T13109] team_slave_1: left promiscuous mode [ 292.928089][T13109] dummy0: left promiscuous mode [ 292.987664][T13119] tipc: Enabled bearer , priority 0 [ 293.019989][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1802'. [ 293.293489][T13136] tipc: Enabling not permitted [ 293.299258][T13136] tipc: Enabling of bearer rejected, failed to enable media [ 293.366984][T13142] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 293.384995][T13106] tipc: Disabling bearer [ 293.444435][T13145] lo speed is unknown, defaulting to 1000 [ 293.451865][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1808'. [ 294.085971][T13175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1816'. [ 294.328366][T13179] netlink: 'syz.0.1817': attribute type 11 has an invalid length. [ 294.357577][T13179] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.1817'. [ 294.609141][T13193] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 295.315902][T13233] netlink: 'syz.3.1832': attribute type 1 has an invalid length. [ 295.365257][T13234] macvtap0: entered promiscuous mode [ 295.371116][T13234] macvtap0: entered allmulticast mode [ 295.847139][T13249] lo speed is unknown, defaulting to 1000 [ 295.960398][T13255] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.012947][T13257] macvlan1: entered promiscuous mode [ 296.047246][T13257] macvlan1: left promiscuous mode [ 296.414100][T13279] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 296.436278][T13279] bridge0: entered allmulticast mode [ 297.172208][T13315] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 297.430332][T13324] __nla_validate_parse: 6 callbacks suppressed [ 297.430358][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 297.464746][ T30] audit: type=1804 audit(1767099575.239:4): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1860" name="/newroot/384/cgroup.controllers" dev="tmpfs" ino=1980 res=1 errno=0 [ 297.476005][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 297.549337][T13337] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 297.563136][ T30] audit: type=1800 audit(1767099575.239:5): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1860" name="cgroup.controllers" dev="tmpfs" ino=1980 res=0 errno=0 [ 297.706342][T13327] lo speed is unknown, defaulting to 1000 [ 297.795542][T13344] netlink: 'syz.4.1862': attribute type 2 has an invalid length. [ 297.950126][T13344] : entered promiscuous mode [ 297.959993][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 298.194512][T13360] netlink: 'syz.1.1865': attribute type 27 has an invalid length. [ 298.233800][T13360] bond0: (slave rose0): Enslaving as an active interface with an up link [ 298.378810][T13365] netlink: 'syz.4.1866': attribute type 6 has an invalid length. [ 298.413610][T13365] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1866'. [ 298.520370][T13369] lo speed is unknown, defaulting to 1000 [ 298.550209][T13378] netlink: 'syz.3.1869': attribute type 11 has an invalid length. [ 298.722655][T13387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1871'. [ 298.742656][T13387] netlink: 'syz.0.1871': attribute type 3 has an invalid length. [ 298.935126][T13391] syzkaller0: entered promiscuous mode [ 298.961111][T13391] syzkaller0: entered allmulticast mode [ 299.002067][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 299.164621][T13404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1877'. [ 299.223136][T13406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1878'. [ 299.415115][T13417] netlink: 'syz.2.1881': attribute type 10 has an invalid length. [ 299.438750][T13417] batadv0: entered allmulticast mode [ 299.460321][T13417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.490509][T13419] netlink: 'syz.2.1881': attribute type 10 has an invalid length. [ 299.520165][T13417] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 299.532107][T13419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1881'. [ 299.554435][T13418] tipc: Enabled bearer , priority 0 [ 299.562405][T13419] batadv0: entered promiscuous mode [ 299.587406][T13419] bond0: (slave batadv0): Releasing backup interface [ 299.600121][T13419] bridge0: port 4(batadv0) entered blocking state [ 299.608943][T13419] bridge0: port 4(batadv0) entered disabled state [ 299.668801][T13413] tipc: Disabling bearer [ 299.763132][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1884'. [ 299.810988][ T6637] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 299.820656][ T6637] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 300.556685][T13431] netlink: 'syz.2.1885': attribute type 6 has an invalid length. [ 300.584017][T13460] batadv0: entered promiscuous mode [ 300.784908][T13466] lo speed is unknown, defaulting to 1000 [ 300.996817][T13474] lo speed is unknown, defaulting to 1000 [ 301.082942][T13482] netlink: 'syz.0.1898': attribute type 11 has an invalid length. [ 301.497060][T13498] bridge0: port 4(batadv0) entered disabled state [ 301.556092][T13498] vlan2: left promiscuous mode [ 301.572228][T13498] bridge0: port 3(vlan2) entered disabled state [ 301.585881][T13498] bridge_slave_1: left allmulticast mode [ 301.593789][T13498] bridge_slave_1: left promiscuous mode [ 301.599671][T13498] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.635668][T13498] bridge_slave_0: left promiscuous mode [ 301.645532][T13498] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.905271][T13520] netlink: 'syz.0.1910': attribute type 1 has an invalid length. [ 301.980263][T13520] erspan1: entered allmulticast mode [ 302.193639][T13532] nbd: socks must be embedded in a SOCK_ITEM attr [ 302.203270][T13532] block nbd2: shutting down sockets [ 302.640014][T13538] delete_channel: no stack [ 302.797523][T13557] __nla_validate_parse: 6 callbacks suppressed [ 302.797546][T13557] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1921'. [ 302.816102][T13557] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1921'. [ 303.652394][T13596] nbd: couldn't find device at index 536870912 [ 303.754890][T13602] lo speed is unknown, defaulting to 1000 [ 303.835770][T13609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1935'. [ 303.901840][T13611] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1935'. [ 304.175104][T13626] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20003 [ 304.304477][T13628] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 304.347475][T13628] bond2 (unregistering): Released all slaves [ 304.772001][ T30] audit: type=1107 audit(1767099582.539:6): pid=13657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='hڛdR-^SmѴ_IIy[Ml KYf~,' [ 304.938589][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'. [ 305.014621][T13671] netlink: 'syz.4.1951': attribute type 10 has an invalid length. [ 305.050703][T13671] 8021q: adding VLAN 0 to HW filter on device ` [ 305.061672][T13671] bond0: (slave `): Enslaving as an active interface with an up link [ 305.415810][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1955'. [ 305.446306][T13690] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 306.542563][T13744] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1966'. [ 306.971947][T13758] xt_bpf: check failed: parse error [ 307.063547][T13762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.919642][T13782] x_tables: duplicate entry at hook 3 [ 307.930333][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1974'. [ 308.006861][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1974'. [ 308.146194][T13791] netlink: 'syz.0.1976': attribute type 11 has an invalid length. [ 308.156423][T13791] netlink: 'syz.0.1976': attribute type 4 has an invalid length. [ 308.165327][T13791] netlink: 'syz.0.1976': attribute type 5 has an invalid length. [ 308.189717][T13791] netlink: 'syz.0.1976': attribute type 6 has an invalid length. [ 308.205927][T13791] netlink: 199748 bytes leftover after parsing attributes in process `syz.0.1976'. [ 309.113844][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1988'. [ 309.189423][T13848] lo speed is unknown, defaulting to 1000 [ 309.606511][T13877] bond3: (slave bridge2): Releasing backup interface [ 309.698791][T13888] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 309.948300][T13899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 311.066045][T13943] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2005'. [ 311.125092][T13943] netlink: Unknown conntrack attr (0) [ 311.290180][T13954] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2007'. [ 311.334129][T13954] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2007'. [ 311.495705][T13965] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 311.751053][T13980] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2011'. [ 311.770698][T13980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2011'. [ 311.879032][T13984] nbd: illegal input index 65508 [ 312.105625][T13990] lo speed is unknown, defaulting to 1000 [ 312.398138][T14001] lo speed is unknown, defaulting to 1000 [ 313.132259][T14035] __nla_validate_parse: 1 callbacks suppressed [ 313.132281][T14035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2020'. [ 313.171554][T14035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2020'. [ 313.228863][T14035] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2020'. [ 313.286997][T14043] netlink: 'syz.3.2021': attribute type 1 has an invalid length. [ 313.334042][T14043] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2021'. [ 313.454628][T14048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2022'. [ 313.468621][T14048] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2022'. [ 313.705045][T14058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2024'. [ 313.849702][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 313.861136][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2025'. [ 313.984579][T14068] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.2026'. [ 315.000089][ T4482] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.021160][ T4482] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.029997][ T4482] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.088093][ T4482] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.104260][ T4482] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.123031][ T4482] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.151549][ T4482] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.160371][ T4482] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.506197][T14115] syzkaller0: entered promiscuous mode [ 315.537466][T14115] syzkaller0: entered allmulticast mode [ 315.683527][T14123] lo speed is unknown, defaulting to 1000 [ 315.745430][T14135] openvswitch: netlink: Message has 8 unknown bytes. [ 316.154539][ T4482] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 316.293437][T14171] netlink: 'syz.3.2049': attribute type 2 has an invalid length. [ 316.343826][T14172] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20002 [ 317.047219][T14191] xfrm0: entered promiscuous mode [ 317.065235][T14191] xfrm0: entered allmulticast mode [ 317.164076][T14195] lo speed is unknown, defaulting to 1000 [ 318.191790][T14258] __nla_validate_parse: 12 callbacks suppressed [ 318.191812][T14258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2079'. [ 318.241188][T14264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2078'. [ 318.254917][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 318.338494][T14264] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 318.339020][T14270] xt_TPROXY: Can be used only with -p tcp or -p udp [ 318.371066][T14264] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2078'. [ 318.392798][T14272] xt_TPROXY: Can be used only with -p tcp or -p udp [ 318.442776][T14280] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2078'. [ 318.554298][T14280] bond2 (unregistering): Released all slaves [ 318.592527][T14283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.632163][T14289] tipc: Enabled bearer , priority 0 [ 318.669005][T14289] tipc: Disabling bearer [ 318.833098][T14296] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2087'. [ 318.851827][T14296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.159403][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2093'. [ 319.177887][T14318] tipc: Enabling of bearer rejected, media not registered [ 319.198896][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2093'. [ 319.512297][ T2980] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 319.564267][T14344] lo speed is unknown, defaulting to 1000 [ 319.585306][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'. [ 319.594963][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2099'. [ 319.607129][T14351] netlink: 'syz.0.2099': attribute type 13 has an invalid length. [ 319.615884][T14351] netlink: 'syz.0.2099': attribute type 12 has an invalid length. [ 319.633112][T14345] lo speed is unknown, defaulting to 1000 [ 320.197515][T14378] lo: entered promiscuous mode [ 320.202539][T14378] lo: entered allmulticast mode [ 320.564844][T14360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 320.571583][T14360] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 320.587182][T14360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 320.593413][T14360] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 320.605935][T14360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 320.613396][T14360] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 320.623241][T14360] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 320.629199][T14360] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 473.661148][ T31] INFO: task kworker/1:6:5922 blocked for more than 143 seconds. [ 473.669143][ T31] Not tainted syzkaller #0 [ 473.674372][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.683414][ T31] task:kworker/1:6 state:D stack:23672 pid:5922 tgid:5922 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 473.695827][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 473.702828][ T31] Call Trace: [ 473.706162][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 473.709216][ T31] __schedule+0x14bc/0x5000 [ 473.714435][ T31] ? __pfx___schedule+0x10/0x10 [ 473.719356][ T31] ? schedule+0x91/0x360 [ 473.725460][ T31] schedule+0x165/0x360 [ 473.729949][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.735737][ T31] __mutex_lock+0x7e6/0x1350 [ 473.740389][ T31] ? __mutex_lock+0x5bb/0x1350 [ 473.745324][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 473.751798][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.756891][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 473.762994][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 473.768767][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 473.828189][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 473.834377][ T31] process_scheduled_works+0xad1/0x1770 [ 473.840117][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.860822][ T31] worker_thread+0x8a0/0xda0 [ 473.865520][ T31] ? __kthread_parkme+0x7b/0x200 [ 473.870701][ T31] kthread+0x711/0x8a0 [ 473.875329][ T31] ? __pfx_worker_thread+0x10/0x10 [ 473.880565][ T31] ? __pfx_kthread+0x10/0x10 [ 473.885242][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.890556][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 473.895923][ T31] ? __pfx_kthread+0x10/0x10 [ 473.900550][ T31] ret_from_fork+0x599/0xb30 [ 473.905289][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 473.910539][ T31] ? __switch_to_asm+0x39/0x70 [ 473.915448][ T31] ? __switch_to_asm+0x33/0x70 [ 473.920288][ T31] ? __pfx_kthread+0x10/0x10 [ 473.924996][ T31] ret_from_fork_asm+0x1a/0x30 [ 473.929859][ T31] [ 473.933016][ T31] INFO: task syz.2.2095:14329 blocked for more than 143 seconds. [ 473.941212][ T31] Not tainted syzkaller #0 [ 473.946342][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.955080][ T31] task:syz.2.2095 state:D stack:24664 pid:14329 tgid:14329 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 473.967219][ T31] Call Trace: [ 473.970567][ T31] [ 473.973599][ T31] __schedule+0x14bc/0x5000 [ 473.978155][ T31] ? __pfx___schedule+0x10/0x10 [ 473.983190][ T31] ? schedule+0x91/0x360 [ 473.987710][ T31] schedule+0x165/0x360 [ 473.992051][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.997548][ T31] __mutex_lock+0x7e6/0x1350 [ 474.002216][ T31] ? __mutex_lock+0x5bb/0x1350 [ 474.007291][ T31] ? rfkill_unregister+0xc8/0x220 [ 474.012448][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 474.017526][ T31] ? __pfx_device_del+0x10/0x10 [ 474.022441][ T31] ? __cancel_work_sync+0x5c/0x110 [ 474.027752][ T31] rfkill_unregister+0xc8/0x220 [ 474.032749][ T31] nfc_unregister_device+0x96/0x300 [ 474.038140][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 474.043923][ T31] virtual_ncidev_close+0x56/0x90 [ 474.049152][ T31] __fput+0x44c/0xa70 [ 474.053213][ T31] task_work_run+0x1d4/0x260 [ 474.057831][ T31] ? __pfx_task_work_run+0x10/0x10 [ 474.063128][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 474.068548][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 474.074165][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 474.079560][ T31] ? rcu_is_watching+0x15/0xb0 [ 474.084388][ T31] do_syscall_64+0x2d0/0xf80 [ 474.088993][ T31] ? rcu_is_watching+0x15/0xb0 [ 474.093828][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.099937][ T31] ? clear_bhb_loop+0x60/0xb0 [ 474.104769][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.110790][ T31] RIP: 0033:0x7fb69e18f749 [ 474.115323][ T31] RSP: 002b:00007ffe97eea848 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 474.123852][ T31] RAX: 0000000000000000 RBX: 00007fb69e3e7da0 RCX: 00007fb69e18f749 [ 474.132067][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 474.140086][ T31] RBP: 00007fb69e3e7da0 R08: 000000000000022c R09: 0000001e97eeab3f [ 474.148109][ T31] R10: 00007fb69e3e7cb0 R11: 0000000000000246 R12: 000000000004e26d [ 474.156189][ T31] R13: 00007fb69e3e6270 R14: ffffffffffffffff R15: 00007ffe97eea960 [ 474.164312][ T31] [ 474.167485][ T31] INFO: task syz.0.2101:14360 blocked for more than 143 seconds. [ 474.175482][ T31] Not tainted syzkaller #0 [ 474.180462][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.189625][ T31] task:syz.0.2101 state:D stack:25832 pid:14360 tgid:14358 ppid:5826 task_flags:0x400140 flags:0x00080002 [ 474.201681][ T31] Call Trace: [ 474.205553][ T31] [ 474.208520][ T31] __schedule+0x14bc/0x5000 [ 474.213176][ T31] ? __pfx___schedule+0x10/0x10 [ 474.218090][ T31] ? schedule+0x91/0x360 [ 474.222445][ T31] schedule+0x165/0x360 [ 474.226620][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.232171][ T31] __mutex_lock+0x7e6/0x1350 [ 474.236810][ T31] ? __mutex_lock+0x5bb/0x1350 [ 474.241641][ T31] ? nfc_dev_down+0x3b/0x290 [ 474.246298][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 474.251370][ T31] ? do_raw_spin_lock+0x121/0x290 [ 474.256445][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 474.262526][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 474.267761][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 474.273593][ T31] nfc_dev_down+0x3b/0x290 [ 474.278028][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 474.283796][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 474.289116][ T31] rfkill_set_block+0x1d2/0x440 [ 474.294093][ T31] rfkill_fop_write+0x44b/0x570 [ 474.298973][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 474.304798][ T31] ? security_kernfs_init_security+0x220/0x290 [ 474.311144][ T31] ? rw_verify_area+0x255/0x4d0 [ 474.316070][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 474.321529][ T31] vfs_write+0x27e/0xb30 [ 474.325825][ T31] ? __pfx_vfs_write+0x10/0x10 [ 474.330821][ T31] ? __fget_files+0x2a/0x420 [ 474.335465][ T31] ? __fget_files+0x2a/0x420 [ 474.340126][ T31] ? __fget_files+0x3a0/0x420 [ 474.345038][ T31] ? __fget_files+0x2a/0x420 [ 474.349659][ T31] ksys_write+0x145/0x250 [ 474.354020][ T31] ? __pfx_ksys_write+0x10/0x10 [ 474.358911][ T31] ? do_syscall_64+0xbe/0xf80 [ 474.363653][ T31] do_syscall_64+0xfa/0xf80 [ 474.368343][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.374449][ T31] ? clear_bhb_loop+0x60/0xb0 [ 474.379147][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.385192][ T31] RIP: 0033:0x7f514778f749 [ 474.389646][ T31] RSP: 002b:00007f5148705038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 474.398250][ T31] RAX: ffffffffffffffda RBX: 00007f51479e5fa0 RCX: 00007f514778f749 [ 474.406425][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 474.414462][ T31] RBP: 00007f5147813f91 R08: 0000000000000000 R09: 0000000000000000 [ 474.422491][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.430505][ T31] R13: 00007f51479e6038 R14: 00007f51479e5fa0 R15: 00007ffdedab5d28 [ 474.438575][ T31] [ 474.441705][ T31] INFO: task syz.4.2103:14370 blocked for more than 144 seconds. [ 474.449555][ T31] Not tainted syzkaller #0 [ 474.458341][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.467080][ T31] task:syz.4.2103 state:D stack:23192 pid:14370 tgid:14369 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 474.479180][ T31] Call Trace: [ 474.482609][ T31] [ 474.485558][ T31] __schedule+0x14bc/0x5000 [ 474.490097][ T31] ? __pfx___schedule+0x10/0x10 [ 474.495104][ T31] ? schedule+0x91/0x360 [ 474.499371][ T31] schedule+0x165/0x360 [ 474.503620][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.509207][ T31] __mutex_lock+0x7e6/0x1350 [ 474.513921][ T31] ? rcu_is_watching+0x15/0xb0 [ 474.518712][ T31] ? __mutex_lock+0x5bb/0x1350 [ 474.523525][ T31] ? rfkill_register+0x37/0x8e0 [ 474.528398][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 474.533560][ T31] ? netdev_run_todo+0xe1b/0xea0 [ 474.538517][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 474.543864][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 474.549228][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 474.555213][ T31] rfkill_register+0x37/0x8e0 [ 474.559911][ T31] wiphy_register+0x246a/0x2d20 [ 474.564841][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 474.570114][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 474.575490][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 474.580633][ T31] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 474.586804][ T31] ieee80211_register_hw+0x34a7/0x4110 [ 474.592316][ T31] ? ieee80211_register_hw+0x13f1/0x4110 [ 474.597973][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 474.603858][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 474.609806][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 474.615800][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 474.622439][ T31] ? __hrtimer_setup+0x181/0x200 [ 474.627430][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 474.633345][ T31] mac80211_hwsim_new_radio+0x2f76/0x5320 [ 474.639136][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 474.645327][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 474.651026][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 474.656266][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 474.661528][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 474.667709][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 474.673328][ T31] ? rcu_is_watching+0x15/0xb0 [ 474.678111][ T31] ? __nla_parse+0x40/0x60 [ 474.682576][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 474.688922][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 474.694527][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 474.701153][ T31] ? bpf_lsm_capable+0x9/0x20 [ 474.705893][ T31] ? security_capable+0x7e/0x2e0 [ 474.710939][ T31] genl_rcv_msg+0x60e/0x790 [ 474.715501][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.720549][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 474.726376][ T31] netlink_rcv_skb+0x208/0x470 [ 474.731295][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.736380][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.741792][ T31] ? down_read+0x274/0x2e0 [ 474.746258][ T31] ? genl_rcv+0xd/0x40 [ 474.750370][ T31] genl_rcv+0x28/0x40 [ 474.754549][ T31] netlink_unicast+0x82f/0x9e0 [ 474.759387][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 474.764866][ T31] ? netlink_sendmsg+0x642/0xb30 [ 474.769944][ T31] ? skb_put+0x11b/0x210 [ 474.774241][ T31] netlink_sendmsg+0x805/0xb30 [ 474.779083][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.784542][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 474.789507][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.794839][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.800247][ T31] __sock_sendmsg+0x21c/0x270 [ 474.804987][ T31] ____sys_sendmsg+0x505/0x820 [ 474.809889][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.815304][ T31] ? import_iovec+0x74/0xa0 [ 474.819867][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 474.824629][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.829852][ T31] ? futex_wait+0x285/0x360 [ 474.834433][ T31] ? __fget_files+0x2a/0x420 [ 474.839088][ T31] ? __fget_files+0x3a0/0x420 [ 474.843927][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 474.849007][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.854527][ T31] ? do_syscall_64+0xbe/0xf80 [ 474.859219][ T31] do_syscall_64+0xfa/0xf80 [ 474.868358][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.874576][ T31] ? clear_bhb_loop+0x60/0xb0 [ 474.879471][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.885435][ T31] RIP: 0033:0x7f3ebc38f749 [ 474.889865][ T31] RSP: 002b:00007f3ebd28d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.898358][ T31] RAX: ffffffffffffffda RBX: 00007f3ebc5e5fa0 RCX: 00007f3ebc38f749 [ 474.906396][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 474.914492][ T31] RBP: 00007f3ebc413f91 R08: 0000000000000000 R09: 0000000000000000 [ 474.922560][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.930557][ T31] R13: 00007f3ebc5e6038 R14: 00007f3ebc5e5fa0 R15: 00007ffe1d0c9298 [ 474.938628][ T31] [ 474.941747][ T31] INFO: task syz.3.2104:14375 blocked for more than 144 seconds. [ 474.949568][ T31] Not tainted syzkaller #0 [ 474.954676][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.963439][ T31] task:syz.3.2104 state:D stack:25448 pid:14375 tgid:14373 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 474.975546][ T31] Call Trace: [ 474.978845][ T31] [ 474.981855][ T31] __schedule+0x14bc/0x5000 [ 474.986423][ T31] ? __pfx___schedule+0x10/0x10 [ 474.991371][ T31] ? schedule+0x91/0x360 [ 474.995659][ T31] schedule+0x165/0x360 [ 474.999835][ T31] schedule_preempt_disabled+0x13/0x30 [ 475.005355][ T31] __mutex_lock+0x7e6/0x1350 [ 475.010002][ T31] ? __mutex_lock+0x5bb/0x1350 [ 475.014819][ T31] ? genl_rcv_msg+0x10d/0x790 [ 475.019510][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 475.024625][ T31] ? stack_trace_save+0x9c/0xe0 [ 475.029529][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 475.034526][ T31] ? radix_tree_lookup+0x240/0x290 [ 475.039717][ T31] genl_rcv_msg+0x10d/0x790 [ 475.044312][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 475.049568][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 475.054894][ T31] netlink_rcv_skb+0x208/0x470 [ 475.059785][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 475.065115][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.070491][ T31] ? down_read+0x274/0x2e0 [ 475.075026][ T31] ? genl_rcv+0xd/0x40 [ 475.079161][ T31] genl_rcv+0x28/0x40 [ 475.083201][ T31] netlink_unicast+0x82f/0x9e0 [ 475.087999][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 475.093445][ T31] ? netlink_sendmsg+0x642/0xb30 [ 475.098442][ T31] ? skb_put+0x11b/0x210 [ 475.102758][ T31] netlink_sendmsg+0x805/0xb30 [ 475.107582][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.113008][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 475.118003][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.123371][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.128692][ T31] __sock_sendmsg+0x21c/0x270 [ 475.133446][ T31] __sys_sendto+0x3bd/0x520 [ 475.137983][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 475.143101][ T31] ? exc_page_fault+0x82/0x100 [ 475.148157][ T31] __x64_sys_sendto+0xde/0x100 [ 475.153068][ T31] do_syscall_64+0xfa/0xf80 [ 475.157638][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.163778][ T31] ? clear_bhb_loop+0x60/0xb0 [ 475.168504][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.174714][ T31] RIP: 0033:0x7efe819915dc [ 475.179148][ T31] RSP: 002b:00007efe7fbf4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 475.187756][ T31] RAX: ffffffffffffffda RBX: 00007efe7fbf4fc0 RCX: 00007efe819915dc [ 475.195893][ T31] RDX: 0000000000000020 RSI: 00007efe7fbf5010 RDI: 0000000000000006 [ 475.204110][ T31] RBP: 0000000000000000 R08: 00007efe7fbf4f14 R09: 000000000000000c [ 475.212271][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 475.220487][ T31] R13: 00007efe7fbf4f68 R14: 00007efe7fbf5010 R15: 0000000000000000 [ 475.228735][ T31] [ 475.231863][ T31] INFO: task syz.3.2104:14378 blocked for more than 144 seconds. [ 475.239791][ T31] Not tainted syzkaller #0 [ 475.245540][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.254365][ T31] task:syz.3.2104 state:D stack:25240 pid:14378 tgid:14373 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 475.266390][ T31] Call Trace: [ 475.269685][ T31] [ 475.272678][ T31] __schedule+0x14bc/0x5000 [ 475.277247][ T31] ? __pfx___schedule+0x10/0x10 [ 475.282216][ T31] ? schedule+0x91/0x360 [ 475.286479][ T31] schedule+0x165/0x360 [ 475.290644][ T31] schedule_preempt_disabled+0x13/0x30 [ 475.296281][ T31] __mutex_lock+0x7e6/0x1350 [ 475.300954][ T31] ? __mutex_lock+0x5bb/0x1350 [ 475.305770][ T31] ? genl_rcv_msg+0x10d/0x790 [ 475.310461][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 475.315530][ T31] ? stack_trace_save+0x9c/0xe0 [ 475.320492][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 475.325569][ T31] ? radix_tree_lookup+0x240/0x290 [ 475.330881][ T31] genl_rcv_msg+0x10d/0x790 [ 475.335453][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 475.340534][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 475.345632][ T31] netlink_rcv_skb+0x208/0x470 [ 475.350436][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 475.355544][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.360950][ T31] ? down_read+0x274/0x2e0 [ 475.365429][ T31] ? genl_rcv+0xd/0x40 [ 475.369548][ T31] genl_rcv+0x28/0x40 [ 475.373632][ T31] netlink_unicast+0x82f/0x9e0 [ 475.378496][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 475.383852][ T31] ? netlink_sendmsg+0x642/0xb30 [ 475.388977][ T31] ? skb_put+0x11b/0x210 [ 475.393717][ T31] netlink_sendmsg+0x805/0xb30 [ 475.398535][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.403928][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 475.408918][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.414457][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.419786][ T31] __sock_sendmsg+0x21c/0x270 [ 475.424597][ T31] __sys_sendto+0x3bd/0x520 [ 475.429184][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 475.434551][ T31] ? fd_install+0x95/0x3d0 [ 475.439014][ T31] ? fd_install+0x307/0x3d0 [ 475.443605][ T31] __x64_sys_sendto+0xde/0x100 [ 475.448476][ T31] do_syscall_64+0xfa/0xf80 [ 475.453188][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.459295][ T31] ? clear_bhb_loop+0x60/0xb0 [ 475.464182][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.470177][ T31] RIP: 0033:0x7efe819915dc [ 475.474658][ T31] RSP: 002b:00007efe7fbd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 475.483574][ T31] RAX: ffffffffffffffda RBX: 00007efe7fbd3fc0 RCX: 00007efe819915dc [ 475.491605][ T31] RDX: 000000000000001c RSI: 00007efe7fbd4010 RDI: 0000000000000009 [ 475.499596][ T31] RBP: 0000000000000000 R08: 00007efe7fbd3f14 R09: 000000000000000c [ 475.507715][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 475.515877][ T31] R13: 00007efe7fbd3f68 R14: 00007efe7fbd4010 R15: 0000000000000000 [ 475.523985][ T31] [ 475.527082][ T31] INFO: task syz.1.2105:14382 blocked for more than 145 seconds. [ 475.534886][ T31] Not tainted syzkaller #0 [ 475.539838][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 475.548569][ T31] task:syz.1.2105 state:D stack:25920 pid:14382 tgid:14381 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 475.560563][ T31] Call Trace: [ 475.563909][ T31] [ 475.566886][ T31] __schedule+0x14bc/0x5000 [ 475.571483][ T31] ? __pfx___schedule+0x10/0x10 [ 475.576458][ T31] ? schedule+0x91/0x360 [ 475.580891][ T31] schedule+0x165/0x360 [ 475.585088][ T31] schedule_preempt_disabled+0x13/0x30 [ 475.590560][ T31] __mutex_lock+0x7e6/0x1350 [ 475.595223][ T31] ? __mutex_lock+0x5bb/0x1350 [ 475.600018][ T31] ? genl_rcv_msg+0x10d/0x790 [ 475.604762][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 475.609848][ T31] ? stack_trace_save+0x9c/0xe0 [ 475.614882][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 475.619864][ T31] ? radix_tree_lookup+0x240/0x290 [ 475.625119][ T31] genl_rcv_msg+0x10d/0x790 [ 475.629648][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 475.634748][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 475.639744][ T31] netlink_rcv_skb+0x208/0x470 [ 475.644694][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 475.649811][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 475.655328][ T31] ? down_read+0x274/0x2e0 [ 475.659767][ T31] ? genl_rcv+0xd/0x40 [ 475.663971][ T31] genl_rcv+0x28/0x40 [ 475.668005][ T31] netlink_unicast+0x82f/0x9e0 [ 475.672967][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 475.678473][ T31] ? netlink_sendmsg+0x642/0xb30 [ 475.683517][ T31] ? skb_put+0x11b/0x210 [ 475.687784][ T31] netlink_sendmsg+0x805/0xb30 [ 475.692611][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.697921][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 475.702905][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 475.708213][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 475.713568][ T31] __sock_sendmsg+0x21c/0x270 [ 475.718290][ T31] __sys_sendto+0x3bd/0x520 [ 475.722962][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 475.728028][ T31] ? exc_page_fault+0x82/0x100 [ 475.732867][ T31] __x64_sys_sendto+0xde/0x100 [ 475.737754][ T31] do_syscall_64+0xfa/0xf80 [ 475.742323][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.748434][ T31] ? clear_bhb_loop+0x60/0xb0 [ 475.753176][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.759118][ T31] RIP: 0033:0x7ff3adb915dc [ 475.763618][ T31] RSP: 002b:00007ff3aea69ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 475.772278][ T31] RAX: ffffffffffffffda RBX: 00007ff3aea69fc0 RCX: 00007ff3adb915dc [ 475.780477][ T31] RDX: 0000000000000024 RSI: 00007ff3aea6a010 RDI: 0000000000000007 [ 475.788680][ T31] RBP: 0000000000000000 R08: 00007ff3aea69f14 R09: 000000000000000c [ 475.796809][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 475.804837][ T31] R13: 00007ff3aea69f68 R14: 00007ff3aea6a010 R15: 0000000000000000 [ 475.812877][ T31] [ 475.816001][ T31] [ 475.816001][ T31] Showing all locks held in the system: [ 475.823781][ T31] 1 lock held by khungtaskd/31: [ 475.828654][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 475.838972][ T31] 2 locks held by getty/5589: [ 475.843949][ T31] #0: ffff88814dcc10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 475.854042][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 475.864230][ T31] 3 locks held by kworker/1:6/5922: [ 475.869438][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 475.880623][ T31] #1: ffffc90004e6fb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 475.894538][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 475.910033][ T31] 2 locks held by kworker/u8:24/6620: [ 475.915583][ T31] #0: ffff88813ff29148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 475.927357][ T31] #1: ffffc9001b2efb80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 475.940327][ T31] 2 locks held by syz.2.2095/14329: [ 475.945703][ T31] #0: ffff888052916100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 475.955542][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 475.965701][ T31] 2 locks held by syz.0.2101/14360: [ 475.970955][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 475.981416][ T31] #1: ffff888052916100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 475.990455][ T31] 3 locks held by syz.4.2103/14370: [ 475.995763][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 476.004081][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 476.013164][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.023169][ T31] 2 locks held by syz.3.2104/14375: [ 476.028380][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 476.036715][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 476.045776][ T31] 2 locks held by syz.3.2104/14378: [ 476.051131][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 476.059371][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 476.068411][ T31] 2 locks held by syz.1.2105/14382: [ 476.073676][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 476.081906][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 476.090981][ T31] 2 locks held by syz-executor/14385: [ 476.096473][ T31] #0: ffff888029c62918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.107088][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.117119][ T31] 2 locks held by syz-executor/14390: [ 476.122565][ T31] #0: ffff8880299b6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.132652][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.142667][ T31] 2 locks held by syz-executor/14391: [ 476.148082][ T31] #0: ffff8880299b4118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.158183][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.168284][ T31] 2 locks held by syz-executor/14392: [ 476.173712][ T31] #0: ffff888029c66918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.183838][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.193960][ T31] 2 locks held by syz-executor/14393: [ 476.199373][ T31] #0: ffff888053feb918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.209472][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.219676][ T31] 2 locks held by syz-executor/14398: [ 476.225397][ T31] #0: ffff8880295e5918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.235905][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.245895][ T31] 2 locks held by syz-executor/14403: [ 476.251778][ T31] #0: ffff88807e826918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.262101][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.272324][ T31] 2 locks held by syz-executor/14404: [ 476.277863][ T31] #0: ffff88807eff7118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.287996][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.298616][ T31] 2 locks held by syz-executor/14405: [ 476.304090][ T31] #0: ffff88807ca49118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.314183][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.324725][ T31] 2 locks held by syz-executor/14406: [ 476.330126][ T31] #0: ffff88807d768118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.340218][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.350210][ T31] 2 locks held by syz-executor/14411: [ 476.355650][ T31] #0: ffff888028c5e118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.365831][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.376052][ T31] 2 locks held by syz-executor/14416: [ 476.381788][ T31] #0: ffff88807b378918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.391981][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.402032][ T31] 2 locks held by syz-executor/14417: [ 476.407475][ T31] #0: ffff888053ded118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.417714][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.427809][ T31] 2 locks held by syz-executor/14418: [ 476.433284][ T31] #0: ffff888055e9d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.443804][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.454004][ T31] 2 locks held by syz-executor/14419: [ 476.459403][ T31] #0: ffff888055e99118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 476.469596][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 476.479655][ T31] [ 476.482058][ T31] ============================================= [ 476.482058][ T31] [ 476.490550][ T31] NMI backtrace for cpu 1 [ 476.490572][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 476.490589][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.490599][ T31] Call Trace: [ 476.490606][ T31] [ 476.490613][ T31] dump_stack_lvl+0x189/0x250 [ 476.490638][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.490687][ T31] ? __pfx__printk+0x10/0x10 [ 476.490730][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 476.490778][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 476.490810][ T31] ? __pfx__printk+0x10/0x10 [ 476.490844][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 476.490879][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 476.490909][ T31] sys_info+0x135/0x170 [ 476.490933][ T31] watchdog+0xf95/0xfe0 [ 476.490968][ T31] ? watchdog+0x20a/0xfe0 [ 476.491003][ T31] kthread+0x711/0x8a0 [ 476.491034][ T31] ? __pfx_watchdog+0x10/0x10 [ 476.491061][ T31] ? __pfx_kthread+0x10/0x10 [ 476.491081][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.491104][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 476.491117][ T31] ? __pfx_kthread+0x10/0x10 [ 476.491137][ T31] ret_from_fork+0x599/0xb30 [ 476.491154][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 476.491175][ T31] ? __switch_to_asm+0x39/0x70 [ 476.491194][ T31] ? __switch_to_asm+0x33/0x70 [ 476.491211][ T31] ? __pfx_kthread+0x10/0x10 [ 476.491231][ T31] ret_from_fork_asm+0x1a/0x30 [ 476.491263][ T31] [ 476.635452][ T31] Sending NMI from CPU 1 to CPUs 0: [ 476.640765][ C0] NMI backtrace for cpu 0 [ 476.640785][ C0] CPU: 0 UID: 0 PID: 6619 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 476.640806][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.640818][ C0] Workqueue: events_unbound toggle_allocation_gate [ 476.640846][ C0] RIP: 0010:debug_object_deactivate+0xca/0x360 [ 476.640876][ C0] Code: e4 eb 0c 4d 8b 6d 00 41 ff c4 4d 85 ed 74 38 49 8d 5d 18 48 89 dd 48 c1 ed 03 42 80 7c 35 00 00 74 08 48 89 df e8 d6 19 8f fd <4c> 39 3b 74 42 4c 89 e8 48 c1 e8 03 42 80 3c 30 00 74 c6 4c 89 ef [ 476.640891][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00000046 [ 476.640906][ C0] RAX: 1ffffffff3358360 RBX: ffff88805377fde0 RCX: dffffc0000000000 [ 476.640919][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000007ae0 [ 476.640931][ C0] RBP: 1ffff1100a6effbc R08: 0000000000000003 R09: 0000000000000004 [ 476.640942][ C0] R10: dffffc0000000000 R11: fffff52000000f5c R12: 0000000000000000 [ 476.640954][ C0] R13: ffff88805377fdc8 R14: dffffc0000000000 R15: ffff88806b438810 [ 476.640967][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 476.640981][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 476.640993][ C0] CR2: 00005573cd44f000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 476.641009][ C0] Call Trace: [ 476.641016][ C0] [ 476.641029][ C0] detach_timer+0x33/0x2c0 [ 476.641050][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 476.641071][ C0] __run_timer_base+0x59b/0x860 [ 476.641104][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 476.641120][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 476.641157][ C0] run_timer_softirq+0xb7/0x180 [ 476.641175][ C0] handle_softirqs+0x27d/0x850 [ 476.641196][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 476.641218][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 476.641239][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 476.641265][ C0] __irq_exit_rcu+0xca/0x1f0 [ 476.641283][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 476.641307][ C0] irq_exit_rcu+0x9/0x30 [ 476.641323][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 476.641341][ C0] [ 476.641346][ C0] [ 476.641353][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 476.641372][ C0] RIP: 0010:smp_call_function_many_cond+0xccf/0x12b0 [ 476.641399][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 4a 9a 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 f5 95 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 d9 95 [ 476.641413][ C0] RSP: 0018:ffffc9001b2df620 EFLAGS: 00000293 [ 476.641427][ C0] RAX: ffffffff81b61c77 RBX: 1ffff110170e8129 RCX: ffff88801c3bbd00 [ 476.641440][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 476.641450][ C0] RBP: ffffc9001b2df7a0 R08: ffffffff8f822077 R09: 1ffffffff1f0440e [ 476.641462][ C0] R10: dffffc0000000000 R11: fffffbfff1f0440f R12: ffff8880b8740948 [ 476.641476][ C0] R13: dffffc0000000000 R14: ffff8880b863bb00 R15: 0000000000000001 [ 476.641493][ C0] ? smp_call_function_many_cond+0xce7/0x12b0 [ 476.641527][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 476.641555][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 476.641580][ C0] ? perf_event_text_poke+0x13d/0x190 [ 476.641605][ C0] ? kmem_cache_alloc_bulk_noprof+0xaa/0x720 [ 476.641626][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 476.641652][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 476.641671][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 476.641692][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 476.641719][ C0] smp_text_poke_batch_finish+0xb44/0x1130 [ 476.641749][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 476.641775][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 476.641808][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 476.641834][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 476.641861][ C0] static_key_enable+0x1a/0x20 [ 476.641884][ C0] toggle_allocation_gate+0xad/0x240 [ 476.641904][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 476.641924][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 476.641948][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 476.641964][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 476.641982][ C0] process_scheduled_works+0xad1/0x1770 [ 476.642017][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 476.642045][ C0] worker_thread+0x8a0/0xda0 [ 476.642080][ C0] kthread+0x711/0x8a0 [ 476.642111][ C0] ? __pfx_worker_thread+0x10/0x10 [ 476.642128][ C0] ? __pfx_kthread+0x10/0x10 [ 476.642151][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.642177][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 476.642193][ C0] ? __pfx_kthread+0x10/0x10 [ 476.642215][ C0] ret_from_fork+0x599/0xb30 [ 476.642234][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 476.642256][ C0] ? __switch_to_asm+0x39/0x70 [ 476.642278][ C0] ? __switch_to_asm+0x33/0x70 [ 476.642299][ C0] ? __pfx_kthread+0x10/0x10 [ 476.642322][ C0] ret_from_fork_asm+0x1a/0x30 [ 476.642355][ C0] [ 477.130301][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 477.137228][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 477.146371][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.156565][ T31] Call Trace: [ 477.159892][ T31] [ 477.162836][ T31] dump_stack_lvl+0x99/0x250 [ 477.167442][ T31] ? __asan_memcpy+0x40/0x70 [ 477.172043][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.177255][ T31] ? __pfx__printk+0x10/0x10 [ 477.181888][ T31] vpanic+0x237/0x6d0 [ 477.185994][ T31] ? __pfx_vpanic+0x10/0x10 [ 477.190703][ T31] ? preempt_schedule_common+0x83/0xd0 [ 477.196313][ T31] panic+0xb9/0xc0 [ 477.200105][ T31] ? __pfx_panic+0x10/0x10 [ 477.204549][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 477.209947][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 477.216686][ T31] watchdog+0xfdf/0xfe0 [ 477.220895][ T31] ? watchdog+0x20a/0xfe0 [ 477.225277][ T31] kthread+0x711/0x8a0 [ 477.229466][ T31] ? __pfx_watchdog+0x10/0x10 [ 477.234274][ T31] ? __pfx_kthread+0x10/0x10 [ 477.239050][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.244293][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 477.249517][ T31] ? __pfx_kthread+0x10/0x10 [ 477.254334][ T31] ret_from_fork+0x599/0xb30 [ 477.258954][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 477.264105][ T31] ? __switch_to_asm+0x39/0x70 [ 477.269160][ T31] ? __switch_to_asm+0x33/0x70 [ 477.273957][ T31] ? __pfx_kthread+0x10/0x10 [ 477.278595][ T31] ret_from_fork_asm+0x1a/0x30 [ 477.283404][ T31] [ 477.287055][ T31] Kernel Offset: disabled [ 477.291396][ T31] Rebooting in 86400 seconds..