last executing test programs: 35.024971873s ago: executing program 1 (id=2450): socket$kcm(0x10, 0x2, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYBLOB="210f5232e8e2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYRES64=r4], &(0x7f0000000780)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffe55) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r8, 0x0, 0x0, 0x400d4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000340)={r9, r9, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r11, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000880)=ANY=[@ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) 34.704458226s ago: executing program 1 (id=2457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) syz_emit_ethernet(0x1012, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002e00090027bd7000000000000400000008001800000000005dd7de8c4bbba2687ba44f7d64f4e85fd78a546194135775e571f86d0d9757512ee4a95d3e031fd5745f58931b65ceacf91cdd95b59233aa6a80a8d4c942c2b96879a8e5fdf79a99b597574027494f53ab91cd33db4f648bf1a4f71039d7a5823eee2c14f6de1494b77d982567695538a955096ef289cbd8657c670bb8b765d8e931806f53f58a1b151849310145f89907c8b0d535ba2c38eeb9dbf09c04865801ef49d2b5736292b199d8e3bcd5666f5d967f1e083be3bb42895a8fa1334b3a"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 34.502701015s ago: executing program 1 (id=2459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000140001060000002bfa00001f5e71469ccca74a77e40ac495e36a836371d15eb9ba1657281e12"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0000090000000000000000000000002986004000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe26, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, 0x1c) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x10, 0x0, 0x0) r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="3202000000249693529ec204000000c46e7bea5c08f941aba26e496992114e468ea198a15ded5e2950da2680e38eff473d0f1e9fc535783c489dc090d768eecef6b110c8015fd8f1548cc2bc02f3c92b04e87dbb439d862736568c6a71f8e0c8511376e9bec7518c574ae6a37745f69ead5eaf6f618037a93295b6a24e2c526c607d442ec0"], 0x20) setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f0000000400)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_deladdr={0x3c, 0x15, 0x10, 0x70bd2c, 0x25dfdbfc, {0x2, 0x3f, 0x0, 0xff, r3}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x839, 0x7, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x800, 0xbf81, 0xf}, 0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, 0x0, 0x48) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x57}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x7c, 0x10, 0x400, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x40, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x12, 0x0, 0x0, 0x5}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2004d018}, 0x0) 34.264318424s ago: executing program 1 (id=2462): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000080014"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008002000ff0f00003eafe79ea49f00a807546cd6f1ceb1d7be05e7ebb54c2a0acb141a25c9f17e783905ba6228c57c91606c86422fa1862c5910f85653443e5e15d24efdf5a8efaf9ca20e3ecbcbe348d7a433"], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d30000000000000080014"], 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000140012800900010076657468000000000400028008002000ff0f00003eafe79ea49f00a807546cd6f1ceb1d7be05e7ebb54c2a0acb141a25c9f17e783905ba6228c57c91606c86422fa1862c5910f85653443e5e15d24efdf5a8efaf9ca20e3ecbcbe348d7a433"], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) 31.816533103s ago: executing program 1 (id=2468): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, 0x1}, 0xe) (async) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="3800000003140100000000000000000009080008004100736977001400330073797a6b616c6c657230000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 31.572879143s ago: executing program 1 (id=2471): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r5}, &(0x7f0000001340), &(0x7f0000001380)='%pI4 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x20000890) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 19.049249587s ago: executing program 0 (id=2610): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x208}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[], 0x0) (async) unshare(0x6a040000) (async) r2 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) (async) r3 = socket$netlink(0x10, 0x3, 0x12) sendmmsg(r3, &(0x7f0000000800), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2062) (async) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r4 = socket(0x1e, 0x5, 0x0) recvmmsg(r4, 0x0, 0x0, 0x20, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0xfffffdd7) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) 17.641172267s ago: executing program 0 (id=2626): r0 = socket$inet(0x2, 0xa, 0xd3) getpeername$l2tp(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000fc0)=ANY=[], 0x17c}}, 0x4000004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf}, {0xd}]}]}}, &(0x7f0000000f40)=""/4077, 0x42, 0xfed, 0x8}, 0x28) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20) 17.596524131s ago: executing program 0 (id=2628): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0xfffffff8, 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x3, 0x0, 0x0, 0xf, 0x1, [], '\r'}]}}, 0x0, 0x2a, 0x0, 0x0, 0xfd22, 0x10000}, 0x28) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg$inet(r3, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f00000000c0)={0xe1f}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {0xffff, 0xa}, {0x4}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x300008c4) 17.160269271s ago: executing program 4 (id=2636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000100), &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7f9}, 0x94) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x12}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24044880}, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1e, 0x4, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="38000000101401002cbd7000fddbdf250800150000000000080001000000000008004a0000000000080003000100000008004b"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x24001850) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3c010000100013040000000000000000fe88000000000000000000000000000120010000000000000000000000000000fffd00004e2400000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000002032000000fc0000000000000000000000000000010000000000000000070000000000000000000000000000000400000000000000000000000000002004000000000000000800000000020000000000000000000001000000010000000800000000000000cc000000000000000000000000000000f8000000000000000000000000000000040000000200000100000000000000004c001200726663343330392863636d286165732929002f0000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}}, 0x844) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)={0x2c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'vxcan1\x00'}}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x29, 0x0, 0x8, 0x800, 0x5, @dev={0xfe, 0x80, '\x00', 0x28}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x0, 0xe7, 0x1}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY={0x8, 0xb, r12}]}}}]}, 0x44}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800b0001007470726f7879000034000280080001400000000a080001400000000a08000240000000100800014000000001080003400000001908000140000000000900010073797a30000000000900020073797a320000"], 0x9c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2c, 0x0, {{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x4}, {0x0, 0x0, 0x0, 0x2}, 0x400000}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@delpolicy={0x128, 0x14, 0x10, 0x70bd29, 0x25dfdbfe, {{@in6=@private0, @in6=@empty, 0x4e22, 0x6, 0x4e22, 0x2, 0x2, 0xa0, 0x80, 0x8, r3, r8}, 0x6e6bb1, 0x2}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd2d, 0x70bd25, 0x70bd2c, 0x5}}, @algo_aead={0xba, 0x12, {{'morus1280-generic\x00'}, 0x370, 0x180, "0d66401a3158a0ec9a8e2b1d8cb12bfafd1fd34d0dee0e07f50d9d59e4a9e196892ea2f64bb748e0932c36582c36388e7ce77ae3a4ee1474d9dde3b28df50e27ba562079b897b9a8750ce434d26befe609e526216427b13e0f7eaf114e554ec01bf35084d1bdddd9f1b8a3e5c78b"}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) 16.972681743s ago: executing program 4 (id=2638): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0xd, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e7}}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x1b, &(0x7f0000000440)=""/27, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@upd={0xe0, 0x12, 0x1, 0x70bd2c, 0x25dfdbff, {{'xts-serpent-avx2\x00'}, '\x00', '\x00', 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0xfa15765c863c5ca6}, 0x20000880) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@allocspi={0x10c, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860a, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x3502, 0xa, 0x0, 0x1}, 0x3, 0xffff}, [@lastused={0xc, 0xf, 0x7ff}, @etimer_thresh={0x8, 0x22, 0x9}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 16.960932465s ago: executing program 4 (id=2639): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2040194}, 0x4000800) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@dev={0xac, 0x14, 0x14, 0x1a}, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000640)="390000001300034700bb60dd330597c9d6b60000010000005600008de3cfb7d411efc42800c600000000000000000000000000000000000000beb76496752421d1b1ff7c6a3b30cf787182320193f2727d9144d69fa4cc63627580651337d2501daf78c3d80bf25b190d439f51e9209e5ed7d18ea4d026cd2d639cfc18044d3c53f50f", 0x83}], 0x2) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390004001300034700bb5be1c3e4feff060000000000190004000400ad0002000000000000060488627df400f93132", 0x2f}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r5, @ANYRES64=r0], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0xc0) (async) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r5, @ANYRES64=r0], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8, 0x101, 0xd66}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0xfffff1aa, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0xfffff1aa, 0x5}}) socket$netlink(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x44810) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000001480)="b094e893c82f5deabde25993fb133c290b21fa894d462dec5fc4d9028eea3ef9cede42b38b7923e5d9bfeca6ef5d237029725a45bbc7ea506f5ad8ce7e93bf56ffed9c7541b910d83c6fe7e981702e544dd5d5da4827414086a04d", 0x5b, 0x50}, 0x1000) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 16.824100631s ago: executing program 3 (id=2641): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=@getstat={0xe0, 0x15, 0x8, 0x70bd27, 0x25dfdbfb, {{'ctr-des3_ede-asm\x00'}, '\x00', '\x00', 0x400, 0x2400}, ["", "", "", "", ""]}, 0xe0}}, 0x24040cc0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)=0x82) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x2000000, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x9, 0x14, 0x0, 0x70bd2a, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x26e6bbb, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x40, 0x0, @in6={0xa, 0x0, 0x0, @local, 0x3}}, @sadb_address={0x5, 0x6, 0xff, 0xa1ca2524ed8fb647, 0x0, @in6={0xa, 0x4e24, 0x0, @empty}}]}, 0xa0}}, 0x0) close(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r9, @ANYBLOB="004100000000000014002b80080001000503153536a58a57b39dab959368cdf031a6450594223d5cbb96a9cedff07ca8a659b96d958898fa37e3fd04888a2f6b9f9a89f9ad21a7c0a22cb97b617e89da91dccdf714a6f168f7422c85088b27ff68f2db615172c688798874d6a0223ff2ccf245578130cff243e92859a01b90e9d5", @ANYRES32=r10, @ANYBLOB="0880c04209000d00"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) 16.823570964s ago: executing program 4 (id=2642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x1}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600894f0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc00040008"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x40, 0x40, 0x107, 0x70bd29, 0x0, {0xfd, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1c, 0x2, 0x0, 0x1, [@nested={0x16, 0x14, 0x0, 0x1, [@typed={0xc, 0xd, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x15}, @generic="2989"]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x4008000) 16.786113777s ago: executing program 4 (id=2643): r0 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x4, 0x1405, 0x4, 0x70bd29, 0x25dfdbfd, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x80000002}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0xfffffffe}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8010}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="0800050006000000100017800400020004000600040002000c00178004000200040006001c001780040004000b0003"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xc, &(0x7f0000000240)=""/206, 0x41100, 0x29, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x50, 0x10, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 16.714942622s ago: executing program 0 (id=2644): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r1, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0xce7c25c243e0211) 16.657080261s ago: executing program 4 (id=2645): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2dbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78ac86d603c1a66db4424a8ba100022db228bb7b5eb51001b2000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6c07c21dbb707f3336336ebb7d68100000011000080a64a6f8911"], 0xe0}], 0x1}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2dbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78ac86d603c1a66db4424a8ba100022db228bb7b5eb51001b2000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6c07c21dbb707f3336336ebb7d68100000011000080a64a6f8911"], 0xe0}], 0x1}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000bc0)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x1, 0x1}, 0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x7, 0x94, 0x9, 0x2, 0x5, 0x9}, {0x20000000, 0xf, 0xb8e, 0x8, 0x7, 0xb}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) 16.649502222s ago: executing program 0 (id=2646): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000003d00)={@random="29109400", @remote, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0x2, 0x6, "3e83b1", 0xd47, 0x11, 0x0, @remote, @local, {[@dstopts={0x0, 0x1, '\x00', [@generic={0x2, 0x7, "f6d05651446e94"}]}, @dstopts={0x62, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}, @dstopts={0x2e, 0x184, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x9, 0x4c, "97bd2d9e29c6ab7d76bd80d750f92fab1f3fb0c7d65f5c9f4534ac2b4da8d371ebd479991051b54c9db1ef51be91f3e91fb827730fb380de180be3068d1f6a94e1578dd788263e665ff8cb0f"}, @hao={0xc9, 0x10, @private2}, @generic={0x8, 0x20, "b7ccde5d50b9d0f5d049badcbaca5b9a60258d70376cdb077ec53f6ab3088164"}, @pad1, @generic={0x1, 0xb96, "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"}]}], {0x4e24, 0x4e22, 0xef, 0x0, @gue={{0x1, 0x0, 0x3, 0x9, 0x100, @void}, "41cc7eaeabc9fd493ad00a8cb83e20781926c841d21a6c65b77ff49a98e037b8aff75c5d6c258a2fdf8e78713f3b8926011bf7fa7a1e8393bf3b526543f8138f1111b2191577f012fa865e2dc7cf1dc74810f862d7797be038a11acc3abd1dd92a876cc25a1269f89d5dc278d162a8c3449a86987de47cb246307eb9fb4e70d3685c0e1a47474021dd8825e4abad80fe3d545c185d642cd976f9869c3a05858f4be4a0add078e5b080bcf5f717de2959f7d6be8d8818bcc7ce3996da824708762248bd8bd0083c46df83fa2a9b6d9cb2be72b67df0ee565c704c4c1f0728f3a66da130"}}}}}}}, 0x0) 16.537786125s ago: executing program 32 (id=2471): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r5}, &(0x7f0000001340), &(0x7f0000001380)='%pI4 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x20000890) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 16.515706501s ago: executing program 3 (id=2648): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[{0x10}, {0x10, 0x1, 0x2}], 0x20}}], 0x2, 0x40800) (async) sendmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[{0x10}, {0x10, 0x1, 0x2}], 0x20}}], 0x2, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback, 0x2f, 0x1, 0xfffffff8, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000002000)) 16.515028779s ago: executing program 0 (id=2649): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071106500000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0af8fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x14, 0x1, 0x10001, &(0x7f0000000700)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e17244ee674de923f60414000080", @ANYRES16=r5, @ANYBLOB="010b28bd7000f8dbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_create1(0x80000) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000426bd7000fcdbdf250100000014000700fc000000000000000000000000000000050002000a00000014000700ff020000000000000000000000ffffffff0002000200000014000700fe8800000000000000000000000000010800080000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r0, r0, 0x31, 0x20, 0x0, @void, @void, @void, @value=r2, r1}, 0x20) 16.340508561s ago: executing program 3 (id=2650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = epoll_create1(0x80000) (async) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) (async) socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa0028000}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468305f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x48000) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x2400}, {}, {0xf, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}]}}]}, 0x40}}, 0x0) 16.147742823s ago: executing program 2 (id=2654): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x194, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x144, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb95006e4b46e32c8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x194}, 0x1, 0x0, 0x0, 0x2}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x40}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xa}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PACKETS={0xc}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) write$tun(0xffffffffffffffff, &(0x7f0000000500)={@val={0x0, 0x892f}, @void, @x25={0x0, 0x7, 0xff, "d6a25e69fb7cc51a98e1a5876421117e0576af19157b0034f794fcfc2652c169f03ffc2e92a712f81d6ff1380cf26df859d788fb75d33ffaeb977b986ca7fde6ca0e920da42499a9149d5f4a7388c8c87a3d06c48d8a3df927a282a79aba40c129b216995edddc4c86825028c5fe8b29b17fa9bbb555ee2000a97fa58514720575e65c8c1786770dbcf1916ce2309637c87af7468b8684ed36055c86530d38480aed79783e37a7e434a3e3755be1c0c1f936fb7f29e425be1abba35ad1c927abb798dc89848c17ad217d7e80c9eaf83ab0c72985435e8451fbf8fcd19126be5563f0bf6478e7770c0f0e871a28ab42"}}, 0xf6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000600)={0x8, 'ipvlan1\x00', {'wg2\x00'}, 0x5}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000640)=0x9, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000680)=""/108, &(0x7f0000000700)=0x6c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x204800, 0x0) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000780)=0x1) r6 = getgid() ioctl$TUNSETGROUP(r5, 0x400454ce, r6) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000007c0)) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000800)=0x3) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000880)=@security={'security\x00', 0xe, 0x4, 0x318, 0xffffffff, 0x100, 0x1b0, 0x1b0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000000840), {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x2]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x14, 0xb, [0x3, 0x9, 0x1e, 0x1f, 0x31, 0x23, 0x3e, 0x29, 0x18, 0x31, 0x2c, 0x9, 0x13, 0x17, 0x22, 0x19], 0x0, 0x2, 0x800}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "417541ff07de992fbf57308f4b116b7bd3231c9b23fc9dda54d0102b9e35"}}, {{@ip={@multicast1, @private=0xa010100, 0xff000000, 0xff000000, 'sit0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xff, 0x2, 0x4b}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x7, 0x2, 0x6, 0x7, 0x8], 0x3, 0x3}, {0x56e, [0x2, 0x9, 0x7, 0x0, 0x1, 0x6], 0x3, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x340, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6ff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x43}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc251}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0ac}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff269}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdfd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd000000}]}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x40, 0xc, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x300040c5) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, r9, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x28, 0x3f7, 0x400, 0x70bd2a, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40055}, 0x68000) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000001380)=0x1, 0x4) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, 0x2, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000e044}, 0x4040040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000014c0)={r0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000001bc0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b80)={&(0x7f0000001680)={0x4dc, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r2}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r2}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r2}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20000}}, {0x8}}}]}}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 16.137173839s ago: executing program 3 (id=2655): socket(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800682a33e4ffff000000000000de2085000000c40000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r1 = socket(0xa, 0x3, 0x3a) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffff00000007, 0x25d4283d975b53f0}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000005800010200000000000000000200000408000340000039d3080001000300001f08000440008000f807000100", @ANYRES32=r2, @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x14, &(0x7f00000002c0)="010000000980ffff", 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc", 0x13}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GETFSUUID(r8, 0x8008662c, &(0x7f00000004c0)) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket$inet6(0xa, 0x3, 0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20048040) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2d}, 0x0, &(0x7f0000000300)={0x3ff, 0x0, 0x0, 0x2, 0x0, 0x100000000}, 0x0, 0x0) 16.089737972s ago: executing program 2 (id=2656): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000780)=ANY=[], 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/108, 0x6c}], 0x1, 0x3f, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000100)=0xfffffffffffffc90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000300000008000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/24, @ANYRES32=r1, @ANYBLOB="a144ad32c873440c5f43d675e106126c735210711d0f63516dc92e6f827058262165ff0c3115dac3ddf703f47b497f38b26859b562fbe3a1275a000000000000000000000000000008"], 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000240)="f5bf144903825c82065ce946d89061b5eb83b9804078a4a730c7df9f681115cd99b59226e4baa90a1865df78cf52251836f77cd4d6aeb384eea607d2c9098cbed416aa2a7b496fa49bebbae79d109d2b67c90978cc0ce75c8578", 0x5a}, {&(0x7f00000002c0)="a56f3132f2c9bac74ba5f443f2b0a0ee93fbd5a4ea67e2563a54e1005bef23e7957fa5f695ee8a222dae4dcfc965d1845a5aa44c03b9d4e8468958d7c7c50fe1c832c787ef9cdf77820f5c76e4000fb1bb9c637db7548b5713b98a02b82c06fbc737fdc8b2ef867abf12", 0x6a}, {&(0x7f0000000340)="207046ba8517f1f68bcd5c48e98cbf5da50618ef91cb73ccbba141150256f3f86bfeec1482bf1f439d60cb48a75ca2b615234066343c44fe3ac951979e23a22889f8a0d0743c789f09a4748f9089528d4eb9b1cb3ff04c6be210f1586f91fe72516eba38995d6ec168d8bc71bc7a835a00e6943f53b720f1c03107", 0x7b}, {&(0x7f0000000400)="1345d3e79ac527424c7b2e0f38d394b902519621218f049fae330e4f80bd542a3d011cc5be7668d156344e7b31415434207fafc07f493a839e81bef07d76fa4c242baa39446aab197729eda61243bfad95d0454ad26ef2c39c4b4410848c1cd42c6f67f9a1c4de231a2aea99ed85157f3f9da9abb543e5ec19f5fe242ded8d38ec0be181386844f01080f60b68e4088ce532d8bb31964a6fdd4bccbb95b9161cbd4a5ef9c26a0a46c2d5474f38ae12a7b87ca213ccfe52639d9addef7b7219d2a7ce53aff6ff3bafb9189e98a601bb2b0f94a958d2d19db44478bc106a8d6e42df21aaefdb10815b285f", 0xea}, {&(0x7f0000000500)="fe4621c75dd9e5a97add7aefc54e892a27c8755d166b9303037884e4dbf3fb286fd2a69fa66cb8a244d03fa82cf4fe615eebcab07e256dcfd414f245b606d7580c7c2840e72b970f2d1b03bd101bec8bcf6cbcfd29f77bcd66a6c0fc6d502995eda82c3feee57285e95fef0b28cadb390d186397fcb29b84264ff31e8c6f2ba50332126a1bf98a264f11aeed7ffb6ff448296283f87291f13f9bbcb3de04dfed60b5142789ea590448c4bbd51090a8c70547854439bd2fceeb214c270951c882ccb6dfcfadd1", 0xc6}, {&(0x7f0000000600)="ff2deae3458e0abdc5049d4349fe5cb68b12c143a0f6df0d3e8d9f627094c4f9552fa724168bad28c1db6eacf475a0792e406b5a9bfc779ecab3401aeafc877a342483b157576a3b3bbfc0d1024d743a042f083d7e00556a1815e040265ceb729477f63549ae33c1cd4168077e292a5ebe549aa812883db4150cbb71af2c568d0497268f8d34c38515c5b8220e49f282c1f60c6eabe2ff16a8c9a850b4554d2184a2138e83aa2ea2d7bb7112d68038ad2cac6a3a3702afcdc71bb42e1dd42b88c5fe272ddbefe9fa2d6f1387e1b8018e2168e23b", 0xd4}], 0x6) setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "696335283bf79057", "5615c6250f36550293b1f5bd2e006a7a1b6ea19e0000000000000800", "0100", "ffffffffe000"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc"}, 0x38) ioctl$FITHAW(r3, 0xc0045878) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x100}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r5, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) socket$inet_udp(0x2, 0x2, 0x0) 15.209294105s ago: executing program 3 (id=2657): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)={0x0}) epoll_create1(0x80000) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000500)={{r1, 0x9e9, 0x40, 0xfffffffffffffffe, 0x7, 0x2, 0x1f9b, 0x8fb, 0x7, 0x4, 0x2, 0x2, 0xa86, 0x1, 0x9}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x84, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_PHYS_SWITCH_ID={0x17, 0x24, "6145dab5d2c87e5d5ed48b0198ab63f8cdc969"}, @IFLA_MTU={0x8, 0x4, 0x200}, @IFLA_PORT_SELF={0x44, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5e}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6fd9b3b35f54d5c31e46e72f00c23720"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b332c0bee88250d591f5d341138d8a62"}]}]}, 0x84}}, 0x0) 15.20698951s ago: executing program 2 (id=2658): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 15.194726325s ago: executing program 3 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000480)={0x2, 0x1, {0x800, @usage=0xfff, 0x0, 0x7, 0x6, 0x5, 0x2, 0x400000000, 0x20, @usage=0xbee, 0x5, 0x8, [0x8, 0x1, 0x4, 0x8, 0x8, 0x5f05]}, {0xe7, @struct={0x4, 0x7ff}, 0x0, 0x3, 0xd, 0x7, 0x1cfc290, 0x2f25, 0x20, @struct={0xb3, 0xfe0}, 0x4, 0x401, [0x4, 0x81, 0xb0c1, 0x1, 0x5, 0x5443]}, {0x8, @struct={0x1000, 0x294}, 0x0, 0x8, 0x6, 0x1, 0x0, 0x2, 0x162, @struct={0x7, 0x4}, 0x9a6, 0x101, [0x58b, 0x8000000000000000, 0x9, 0x5, 0x38, 0x1]}, {0xcd9, 0x6, 0x31b9}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000880)={0x0, 0x4, 0xf2ec}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000cc0)={0x18, 0x4, {0x3ff, @usage=0x8, 0x0, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x8, 0x400, @struct={0x3ff, 0xffffffff}, 0x2, 0x401, [0x1, 0x400, 0x3, 0x7, 0x8, 0x1]}, {0x80000001, @usage=0xa19, r5, 0xfffffffffffffffb, 0x81, 0x1, 0x6, 0x5, 0x8, @struct={0x9, 0xa}, 0xfff, 0x7, [0x7ff, 0x3, 0xffffffff00000001, 0x1, 0x2, 0x2]}, {0x1, @usage=0x3, r6, 0x1, 0x977e, 0x9, 0x1, 0x1710c2db, 0x400, @usage=0x1c7e, 0x9, 0x3, [0x2, 0x0, 0x8, 0x43, 0x8, 0x5]}, {0xff, 0x4, 0x5}}) connect$netrom(r4, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) close(0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180005ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 15.164908936s ago: executing program 2 (id=2660): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x20, 0x0, 0xfffff024}, {0x20, 0x0, 0x80}, {0x6}]}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x400080, 0x4040, 0x20000000, 0x43, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) (async, rerun: 32) r3 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) (async) r5 = socket(0x2, 0x80805, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async, rerun: 32) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 32) sendmsg$802154_dgram(r7, &(0x7f0000000380)={&(0x7f0000000000)={0x24, @short}, 0xb, &(0x7f0000000080)={0x0}}, 0x0) (async, rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) (async) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 15.03651228s ago: executing program 2 (id=2661): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)={0x25c, 0x14, 0x400, 0x70bd2d, 0x25dfdbfe, {0x27, 0xf}, [@INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "65be9a78bc7fe6dad4b6ef73ff3af2a225dba581d8cdbace70fdf08bfdb6c183c20b9f7e8b2f8cf0773a7735137520f2c4694659c058a008"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "921b90d7de989f3242fe1879358863de5a67f2c7"}, @INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "b828920f6422eecd27efe5a6a0328c0c7a8db774c30200ffe62d99ec991749e02445a97e00e45d5fefb8add186ce278e67048ae4c4b970b280f412e8399e20d08639e54829610d270e8c20fc4618f02c7d425088427501f311f95ac6743ef477809bfb98b8a900197a39f521f88c2e9bb3b4451666bc3835d877d83352cecc5f9369f95063d528874d18a78e90e060d920be4b022152bb3fdcaa0673c5d839e540f072832609562e6fcd750cda70bcaf6d74b1fc5098f308dbd8991b0b3fd148c3b1b8fad87fd4fdad1e7f2a0a311d7665eb"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "562c37ff06278f8139f6d2ba29b40795983c356567996618e2afea193472163125976b3b69f21820951e87bd62a05e30c50771293873093f6e1042b99d8c4794ba939d8b974fdf3d4ef4e15c5ccac9bcaa8ab6bb59ade57a67ffae10d112657e970bb345a829af80fd25"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "4994804d4df21aa40aa47ea77a4109ec9a370d2ea01536e3f8308ead7c3b2f60b9abe607ca3eb844c35f2a8e3fe21cdc7a67445856ecca1719da249ef0db9bdb97f41b60eb21a4a050f4e8346bc73d4821ef886b94e6296243d6db17eda89881c361055cd7abe352327b0457cf22ba546ba73e7fe5bd6a62f6166dfdca320260b0c253f23c4159292ccf59d8710d85af3e566cca1d2a2d1d6a9e813337bc1bb5aad402cf5f6a60"}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) 15.035091996s ago: executing program 2 (id=2662): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x40004}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r8}, 0x38) 1.079443309s ago: executing program 33 (id=2649): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071106500000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0af8fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x14, 0x1, 0x10001, &(0x7f0000000700)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x48, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e17244ee674de923f60414000080", @ANYRES16=r5, @ANYBLOB="010b28bd7000f8dbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_create1(0x80000) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000426bd7000fcdbdf250100000014000700fc000000000000000000000000000000050002000a00000014000700ff020000000000000000000000ffffffff0002000200000014000700fe8800000000000000000000000000010800080000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r0, r0, 0x31, 0x20, 0x0, @void, @void, @void, @value=r2, r1}, 0x20) 1.047922634s ago: executing program 34 (id=2645): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2dbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78ac86d603c1a66db4424a8ba100022db228bb7b5eb51001b2000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6c07c21dbb707f3336336ebb7d68100000011000080a64a6f8911"], 0xe0}], 0x1}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44ecff2d5f28732c2dbd9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78ac86d603c1a66db4424a8ba100022db228bb7b5eb51001b2000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6c07c21dbb707f3336336ebb7d68100000011000080a64a6f8911"], 0xe0}], 0x1}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000bc0)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x1, 0x1}, 0x4) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x7, 0x94, 0x9, 0x2, 0x5, 0x9}, {0x20000000, 0xf, 0xb8e, 0x8, 0x7, 0xb}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6fbc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x10c}}, 0x0) 29.950604ms ago: executing program 35 (id=2662): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x40004}], 0x1, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket(0x11, 0x800000003, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="b7eb0100000000180000f8ffffff0200000066fbe212aa7b5a1a"], 0x0, 0x1a, 0x0, 0x0, 0xfc5b, 0x10000}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r8}, 0x38) 0s ago: executing program 36 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000480)={0x2, 0x1, {0x800, @usage=0xfff, 0x0, 0x7, 0x6, 0x5, 0x2, 0x400000000, 0x20, @usage=0xbee, 0x5, 0x8, [0x8, 0x1, 0x4, 0x8, 0x8, 0x5f05]}, {0xe7, @struct={0x4, 0x7ff}, 0x0, 0x3, 0xd, 0x7, 0x1cfc290, 0x2f25, 0x20, @struct={0xb3, 0xfe0}, 0x4, 0x401, [0x4, 0x81, 0xb0c1, 0x1, 0x5, 0x5443]}, {0x8, @struct={0x1000, 0x294}, 0x0, 0x8, 0x6, 0x1, 0x0, 0x2, 0x162, @struct={0x7, 0x4}, 0x9a6, 0x101, [0x58b, 0x8000000000000000, 0x9, 0x5, 0x38, 0x1]}, {0xcd9, 0x6, 0x31b9}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000880)={0x0, 0x4, 0xf2ec}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000cc0)={0x18, 0x4, {0x3ff, @usage=0x8, 0x0, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x8, 0x400, @struct={0x3ff, 0xffffffff}, 0x2, 0x401, [0x1, 0x400, 0x3, 0x7, 0x8, 0x1]}, {0x80000001, @usage=0xa19, r5, 0xfffffffffffffffb, 0x81, 0x1, 0x6, 0x5, 0x8, @struct={0x9, 0xa}, 0xfff, 0x7, [0x7ff, 0x3, 0xffffffff00000001, 0x1, 0x2, 0x2]}, {0x1, @usage=0x3, r6, 0x1, 0x977e, 0x9, 0x1, 0x1710c2db, 0x400, @usage=0x1c7e, 0x9, 0x3, [0x2, 0x0, 0x8, 0x43, 0x8, 0x5]}, {0xff, 0x4, 0x5}}) connect$netrom(r4, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) close(0x4) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180005ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) kernel console output (not intermixed with test programs): 8338][ T9348] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.822115][ T9358] bridge0: port 3(macvtap1) entered blocking state [ 149.835430][ T9358] bridge0: port 3(macvtap1) entered disabled state [ 149.848650][ T9358] macvtap1: entered allmulticast mode [ 149.857079][ T9358] bridge0: entered allmulticast mode [ 149.867075][ T9358] macvtap1: left allmulticast mode [ 149.872373][ T9358] bridge0: left allmulticast mode [ 150.038877][ T6032] IPVS: starting estimator thread 0... [ 150.152710][ T9366] IPVS: using max 24 ests per chain, 57600 per kthread [ 150.175447][ T9370] __nla_validate_parse: 16 callbacks suppressed [ 150.175462][ T9370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.838'. [ 150.222437][ T9370] tipc: Invalid UDP bearer configuration [ 150.234392][ T9370] tipc: Enabling of bearer rejected, failed to enable media [ 150.254321][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.838'. [ 150.332977][ T9375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'. [ 150.349580][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 150.349839][ T9375] macvlan0: entered allmulticast mode [ 150.365043][ T9375] veth1_vlan: entered allmulticast mode [ 150.721525][ T9405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.845'. [ 150.738062][ T9407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.848'. [ 150.871317][ T9413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.849'. [ 151.108283][ T9432] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.115940][ T9432] bridge0: port 1(1x9) entered disabled state [ 151.133625][ T9432] netlink: 'syz.2.853': attribute type 2 has an invalid length. [ 151.141282][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.853'. [ 151.154873][ T9432] netlink: 7 bytes leftover after parsing attributes in process `syz.2.853'. [ 151.561170][ T9461] lo speed is unknown, defaulting to 1000 [ 151.771245][ T9469] xt_CT: No such helper "snmp_trap" [ 151.797354][ T9474] x_tables: duplicate underflow at hook 2 [ 151.870789][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.868'. [ 152.045785][ T9490] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 152.087004][ T9493] netlink: 'syz.2.872': attribute type 11 has an invalid length. [ 152.404374][ T9516] delete_channel: no stack [ 152.421632][ T9515] delete_channel: no stack [ 152.441681][ T9513] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.476338][ T9513] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.188969][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 153.521917][ T5897] net_ratelimit: 13 callbacks suppressed [ 153.521935][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.418492][ T9513] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.555724][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.582615][ T9513] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.626085][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.737363][ T9513] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.766351][ T9513] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.156336][ T9513] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.202339][ T9513] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.234116][ T9546] lo speed is unknown, defaulting to 1000 [ 155.534937][ T9558] lo speed is unknown, defaulting to 1000 [ 155.583811][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.621919][ T3914] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.637667][ T3914] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.678153][ T3914] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.701742][ T3914] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.744332][ T9555] __nla_validate_parse: 4 callbacks suppressed [ 155.744349][ T9555] netlink: 3528 bytes leftover after parsing attributes in process `syz.1.886'. [ 155.754819][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.2.888'. [ 155.772050][ T9574] netlink: 'syz.4.889': attribute type 1 has an invalid length. [ 155.774819][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 155.789836][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.803463][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.868211][ T60] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.881233][ T60] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.892870][ T9568] lo speed is unknown, defaulting to 1000 [ 155.947123][ T9572] lo speed is unknown, defaulting to 1000 [ 155.955339][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.890'. [ 156.316015][ T9573] lo speed is unknown, defaulting to 1000 [ 156.398907][ T9598] netlink: 64 bytes leftover after parsing attributes in process `syz.3.896'. [ 156.624100][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.692423][ T9618] xt_CT: No such helper "pptp" [ 156.731324][ T9626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.776201][ T9626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.901'. [ 156.800369][ T9629] netlink: 584 bytes leftover after parsing attributes in process `syz.3.900'. [ 157.206769][ T9639] netlink: 'syz.2.902': attribute type 10 has an invalid length. [ 157.251310][ T9635] syzkaller0: entered promiscuous mode [ 157.257362][ T9635] syzkaller0: entered allmulticast mode [ 157.321668][ T9639] veth0_macvtap: left promiscuous mode [ 157.346265][ T9639] batman_adv: batadv0: Adding interface: macvtap0 [ 157.354955][ T9639] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.380900][ T9639] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 157.665061][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.673215][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.819250][ T9656] sctp: [Deprecated]: syz.3.906 (pid 9656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.819250][ T9656] Use struct sctp_sack_info instead [ 158.647176][ T9659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.907'. [ 158.661095][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.907'. [ 158.693864][ T9659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.907'. [ 158.717525][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.000984][ T9672] lo speed is unknown, defaulting to 1000 [ 159.098710][ T9680] tipc: New replicast peer: 0.0.0.0 [ 159.108155][ T9680] tipc: Enabled bearer , priority 10 [ 159.138491][ T9687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.143903][ T9680] tipc: New replicast peer: 172.30.1.4 [ 159.145743][ T9687] IPv6: NLM_F_CREATE should be set when creating new route [ 159.161138][ T9687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.168383][ T9687] IPv6: NLM_F_CREATE should be set when creating new route [ 159.474921][ T9706] netlink: 'syz.3.920': attribute type 7 has an invalid length. [ 159.492651][ T9706] netlink: 'syz.3.920': attribute type 8 has an invalid length. [ 159.610078][ T9711] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.642775][ T9711] SET target dimension over the limit! [ 159.744132][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.199071][ T9740] lo speed is unknown, defaulting to 1000 [ 160.224225][ T48] tipc: Node number set to 984059375 [ 160.466384][ T9747] netlink: 'syz.0.931': attribute type 33 has an invalid length. [ 160.681099][ T9756] tipc: Enabling of bearer rejected, failed to enable media [ 160.706965][ T9749] lo speed is unknown, defaulting to 1000 [ 160.713384][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.786979][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.864130][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.076717][ T9776] lo speed is unknown, defaulting to 1000 [ 161.382396][ T9795] pimreg3: entered allmulticast mode [ 161.388970][ T9796] netlink: 'syz.0.945': attribute type 11 has an invalid length. [ 161.484070][ T9800] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 161.530965][ T9800] lo speed is unknown, defaulting to 1000 [ 161.558763][ T9805] trusted_key: syz.4.948 sent an empty control message without MSG_MORE. [ 161.642200][ T9808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.827931][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.012056][ T9827] veth4: entered allmulticast mode [ 162.265135][ T9843] __nla_validate_parse: 7 callbacks suppressed [ 162.265150][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 162.284303][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 162.285450][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 162.318726][ T9842] tipc: Enabled bearer , priority 0 [ 162.339386][ T9842] syzkaller0: entered promiscuous mode [ 162.350423][ T9842] syzkaller0: entered allmulticast mode [ 162.361416][ T9849] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 162.399767][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 162.411963][ T9842] tipc: Resetting bearer [ 162.423792][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'. [ 162.424455][ T9851] netlink: 'syz.3.962': attribute type 30 has an invalid length. [ 162.441764][ T9841] tipc: Resetting bearer [ 162.463760][ T9841] tipc: Disabling bearer [ 162.475673][ T9854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.961'. [ 162.530511][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.539724][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 162.551717][ T50] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.562656][ T9851] netlink: 'syz.3.962': attribute type 30 has an invalid length. [ 162.565052][ T9856] netlink: 'syz.0.964': attribute type 1 has an invalid length. [ 162.579793][ T50] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.589856][ T9856] netlink: 224 bytes leftover after parsing attributes in process `syz.0.964'. [ 162.610124][ T50] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.650919][ T9858] syz_tun: entered allmulticast mode [ 162.707014][ T9857] syz_tun: left allmulticast mode [ 162.784778][ T9872] xt_hashlimit: size too large, truncated to 1048576 [ 162.837016][ T9874] syzkaller0: entered promiscuous mode [ 162.843467][ T9874] syzkaller0: entered allmulticast mode [ 162.866017][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.994326][ T9886] openvswitch: netlink: Flow key attr not present in new flow. [ 163.014043][ T9882] vxlan1: entered promiscuous mode [ 163.044147][ T9882] vxlan1: entered allmulticast mode [ 163.225809][ T9892] netlink: 'syz.2.975': attribute type 10 has an invalid length. [ 163.285625][ T9892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.975'. [ 163.317633][ T9892] batman_adv: batadv0: Adding interface: virt_wifi0 [ 163.324961][ T9892] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.372653][ T9892] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 163.441033][ T9901] netlink: 'syz.0.976': attribute type 1 has an invalid length. [ 163.450379][ T9901] netlink: 228 bytes leftover after parsing attributes in process `syz.0.976'. [ 163.467848][ T9894] : renamed from veth0_to_bond (while UP) [ 163.504057][ T9905] syzkaller1: entered promiscuous mode [ 163.525042][ T9905] syzkaller1: entered allmulticast mode [ 163.743826][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.769099][ T9928] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 163.813334][ T9929] gretap1: entered allmulticast mode [ 163.904665][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.598420][ T9973] syzkaller0: entered promiscuous mode [ 164.608589][ T9973] syzkaller0: entered allmulticast mode [ 165.189692][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.240274][ T9983] team0: No ports can be present during mode change [ 165.728712][ T9994] netlink: 'syz.4.994': attribute type 10 has an invalid length. [ 165.759676][ T9994] macvtap0: left promiscuous mode [ 165.800298][ T9994] batman_adv: batadv0: Adding interface: macvtap0 [ 165.816647][ T9994] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.845393][ T9994] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 165.913328][ T9999] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 166.161606][T10009] tipc: Enabled bearer , priority 0 [ 166.184970][T10007] tipc: Disabling bearer [ 166.225769][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.233933][T10013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.242896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.540812][T10034] netlink: 'syz.0.1006': attribute type 1 has an invalid length. [ 166.768248][T10034] 8021q: adding VLAN 0 to HW filter on device bond5 [ 166.786732][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.797699][T10041] bond5: (slave ip6gretap2): making interface the new active one [ 166.807996][T10041] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 166.846488][T10034] veth7: entered promiscuous mode [ 166.856500][T10034] bond5: (slave veth7): Enslaving as an active interface with a down link [ 166.889612][T10041] erspan0: entered allmulticast mode [ 166.907171][T10041] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 166.960689][T10034] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 167.009359][T10032] lo speed is unknown, defaulting to 1000 [ 167.047192][T10045] IPVS: set_ctl: invalid protocol: 80 224.0.0.2:20003 [ 167.259202][T10053] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 167.263788][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.273227][T10053] batman_adv: batadv0: Adding interface: gretap2 [ 167.291610][T10053] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.336868][T10053] batman_adv: batadv0: Interface activated: gretap2 [ 167.826067][T10078] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 167.858830][T10078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.880772][T10078] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 167.891137][T10078] bond3: (slave batadv1): making interface the new active one [ 167.901918][T10078] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 167.918195][T10078] __nla_validate_parse: 13 callbacks suppressed [ 167.918213][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 168.309658][T10078] bond3 (unregistering): (slave batadv1): Releasing active interface [ 168.337779][T10078] bond3 (unregistering): Released all slaves [ 168.385059][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.432205][T10065] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 168.793568][T10094] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.795691][T10090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1023'. [ 168.812938][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 169.184924][T10102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 169.423885][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.750025][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 169.822866][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.165592][T10139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1037'. [ 170.477295][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.495272][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.184311][T10157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1042'. [ 171.508440][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.826693][T10178] netlink: 'syz.3.1047': attribute type 21 has an invalid length. [ 171.835363][T10178] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1047'. [ 172.489492][T10071] Set syz1 is full, maxelem 65536 reached [ 172.501739][T10168] lo: entered allmulticast mode [ 172.515278][T10178] netlink: 'syz.3.1047': attribute type 5 has an invalid length. [ 172.548077][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.559763][T10178] netlink: 'syz.3.1047': attribute type 6 has an invalid length. [ 172.570513][T10178] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1047'. [ 172.642986][T10168] lo: left allmulticast mode [ 172.873525][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.119261][ T5830] Bluetooth: hci3: link tx timeout [ 173.126197][ T5830] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.583484][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.680172][T10259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1067'. [ 173.724288][T10266] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 173.911178][T10275] net_ratelimit: 1 callbacks suppressed [ 173.911196][T10275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.955725][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1074'. [ 174.120046][T10288] geneve2: entered promiscuous mode [ 174.303508][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.316889][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.327752][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.486596][T10308] lo speed is unknown, defaulting to 1000 [ 174.648603][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.660206][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.944257][T10338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.954757][T10338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.006162][T10324] erspan0: left allmulticast mode [ 175.110372][T10342] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1091'. [ 175.184258][ T5830] Bluetooth: hci3: command 0x0405 tx timeout [ 175.514030][T10324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.550932][T10324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.663871][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.748448][T10324] veth1_vlan: left allmulticast mode [ 175.754570][T10324] macvlan0: left allmulticast mode [ 175.857523][T10324] ipvlan2: left promiscuous mode [ 175.887775][T10324] bond1: left promiscuous mode [ 175.923334][T10324] vlan2: left promiscuous mode [ 175.928493][T10324] bond3: left promiscuous mode [ 175.933704][T10324] gretap1: left promiscuous mode [ 175.939354][T10324] vlan2: left allmulticast mode [ 175.945510][T10324] bond3: left allmulticast mode [ 175.950681][T10324] gretap1: left allmulticast mode [ 175.994813][T10324] vxlan1: left promiscuous mode [ 176.000005][T10324] vxlan1: left allmulticast mode [ 176.020930][T10324] veth7: left promiscuous mode [ 176.110427][ T4102] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.125100][ T4102] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.136777][ T4102] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.166241][ T4102] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.204799][ T4102] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.218374][ T4102] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.237571][ T4102] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.247823][ T4102] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.406114][T10362] netlink: 'syz.3.1098': attribute type 1 has an invalid length. [ 176.440551][T10362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.492696][T10365] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1099'. [ 176.591758][T10371] syzkaller1: entered promiscuous mode [ 176.595770][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 176.617418][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 176.627273][T10371] syzkaller1: entered allmulticast mode [ 176.696280][T10377] geneve2: entered promiscuous mode [ 176.701518][T10377] geneve2: entered allmulticast mode [ 176.710843][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.725998][T10386] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.256864][T10414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1108'. [ 177.485985][T10392] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1105'. [ 177.529683][T10423] lo speed is unknown, defaulting to 1000 [ 177.546565][T10392] ieee802154 phy1 wpan1: encryption failed: -90 [ 178.069128][T10463] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1122'. [ 178.251457][T10469] tap0: tun_chr_ioctl cmd 1074025692 [ 178.361479][T10471] bridge0: port 3(batadv2) entered blocking state [ 178.411625][T10471] bridge0: port 3(batadv2) entered disabled state [ 178.419317][T10471] batadv2: entered allmulticast mode [ 178.426509][T10471] batadv2: entered promiscuous mode [ 178.450512][T10477] netlink: 'syz.0.1125': attribute type 16 has an invalid length. [ 178.471617][T10478] lo speed is unknown, defaulting to 1000 [ 178.853130][ T12] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 178.863149][ T12] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 178.977127][T10501] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1130'. [ 179.096852][T10521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1136'. [ 179.102442][T10522] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 179.117893][T10522] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1134'. [ 179.316427][T10536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1138'. [ 179.355300][T10538] netlink: 'syz.3.1141': attribute type 3 has an invalid length. [ 179.363390][T10538] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1141'. [ 179.372334][T10531] lo speed is unknown, defaulting to 1000 [ 179.509917][T10544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1143'. [ 179.571718][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 179.657826][T10551] tipc: Enabled bearer , priority 0 [ 179.667750][T10554] syzkaller0: entered promiscuous mode [ 179.693887][T10554] syzkaller0: entered allmulticast mode [ 179.827847][ T107] net_ratelimit: 7 callbacks suppressed [ 179.827862][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.856107][T10550] tipc: Resetting bearer [ 180.048481][T10583] netlink: 'syz.2.1153': attribute type 1 has an invalid length. [ 180.056075][T10581] IPVS: set_ctl: invalid protocol: 960 0.32.0.0:15360 [ 180.079664][T10550] tipc: Disabling bearer [ 180.121794][T10583] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 180.339675][T10596] can: request_module (can-proto-5) failed. [ 180.387948][ T5940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.428965][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.440515][T10610] vxcan3: entered allmulticast mode [ 180.489089][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.524735][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.539607][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.549212][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.558825][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.568650][T10625] netlink: 'syz.1.1159': attribute type 13 has an invalid length. [ 180.577254][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.582417][T10615] bridge_slave_1: left allmulticast mode [ 180.593627][T10615] bridge_slave_1: left promiscuous mode [ 180.596349][T10612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.613666][T10615] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.633250][T10613] Cannot find add_set index 2 as target [ 180.786843][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 180.854266][T10639] netlink: 'syz.0.1165': attribute type 3 has an invalid length. [ 180.918441][T10639] siw: device registration error -23 [ 181.021636][T10642] lo speed is unknown, defaulting to 1000 [ 181.136795][T10647] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1168'. [ 181.576021][T10672] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 181.736553][T10681] netlink: 'syz.4.1174': attribute type 27 has an invalid length. [ 181.795641][T10692] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 181.818465][T10695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1177'. [ 182.372432][T10708] bridge_slave_0: entered promiscuous mode [ 182.701046][T10721] pim6reg: entered allmulticast mode [ 182.720666][T10721] pim6reg: left allmulticast mode [ 182.931898][T10737] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1191'. [ 182.957482][T10739] vlan2: entered promiscuous mode [ 182.963539][T10739] vlan2: entered allmulticast mode [ 182.976881][T10739] hsr_slave_1: entered allmulticast mode [ 183.035185][T10746] xt_hashlimit: size too large, truncated to 1048576 [ 183.120454][T10739] lo speed is unknown, defaulting to 1000 [ 183.377235][T10757] syzkaller0: entered promiscuous mode [ 183.396032][T10757] syzkaller0: entered allmulticast mode [ 183.636948][T10767] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 183.660823][T10767] geneve3: entered promiscuous mode [ 183.996974][T10789] tipc: Enabled bearer , priority 0 [ 184.020664][T10781] syzkaller0: entered promiscuous mode [ 184.037679][T10781] syzkaller0: entered allmulticast mode [ 184.077126][T10791] __nla_validate_parse: 3 callbacks suppressed [ 184.077141][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 184.151998][T10780] tipc: Resetting bearer [ 184.204023][T10780] tipc: Disabling bearer [ 184.401854][T10807] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1208'. [ 184.501942][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 184.511961][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 184.519245][T10813] netlink: 'syz.4.1211': attribute type 1 has an invalid length. [ 184.621605][T10813] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.656333][T10814] bond2: (slave ip6gretap2): making interface the new active one [ 184.671966][T10814] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 184.741343][T10813] veth7: entered promiscuous mode [ 184.766321][T10813] bond2: (slave veth7): Enslaving as an active interface with a down link [ 184.777561][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 184.787433][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 184.831790][T10821] erspan0: entered allmulticast mode [ 184.882145][T10821] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 184.964623][ T4102] bond2: (slave erspan0): link status definitely down, disabling slave [ 184.976656][ T4102] ip6gretap2: entered promiscuous mode [ 185.018168][T10840] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1217'. [ 185.035398][ T48] net_ratelimit: 173 callbacks suppressed [ 185.035413][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.104072][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.150790][T10848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.160309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.161751][T10842] lo speed is unknown, defaulting to 1000 [ 185.194719][T10848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.205087][T10844] netlink: 'syz.4.1218': attribute type 8 has an invalid length. [ 185.213029][T10848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.213634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.246809][T10839] lo speed is unknown, defaulting to 1000 [ 185.256439][T10848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.284438][T10848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.293342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.770077][T10860] tipc: Enabled bearer , priority 0 [ 185.848200][T10862] tipc: Resetting bearer [ 186.040737][T10847] tipc: Disabling bearer [ 186.161408][T10877] 8021q: VLANs not supported on ip6tnl0 [ 186.352212][T10894] xt_l2tp: invalid flags combination: 0 [ 186.411941][T10888] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1229'. [ 186.423702][T10888] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1229'. [ 186.433590][T10888] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.440762][T10888] bridge0: port 2(bridge_slave_1) entered listening state [ 186.448211][T10888] bridge0: port 1(1x9) entered blocking state [ 186.454689][T10888] bridge0: port 1(1x9) entered listening state [ 186.481102][T10888] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1229'. [ 186.508388][T10888] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.515681][T10888] bridge0: port 1(1x9) entered disabled state [ 187.243356][T10925] netlink: 'syz.2.1238': attribute type 7 has an invalid length. [ 187.763992][T10949] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.858635][T10951] lo speed is unknown, defaulting to 1000 [ 187.965509][T10949] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.015820][T10965] netlink: 'syz.3.1249': attribute type 21 has an invalid length. [ 188.035363][T10965] netlink: 'syz.3.1249': attribute type 6 has an invalid length. [ 188.082299][T10949] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.194479][T10969] netlink: 'syz.3.1251': attribute type 1 has an invalid length. [ 188.215157][T10949] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.291642][T10969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.307184][T10972] bond4: entered allmulticast mode [ 188.322417][T10974] netlink: 'syz.1.1252': attribute type 30 has an invalid length. [ 188.411768][T10969] bond4: (slave dummy0): making interface the new active one [ 188.436286][T10969] dummy0: entered allmulticast mode [ 188.449653][T10969] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 188.580402][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.089545][T10985] __nla_validate_parse: 89 callbacks suppressed [ 189.089559][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 189.111953][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 189.121722][T10985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.143574][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 189.152893][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 189.173512][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 189.182444][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 189.197952][T10985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.218310][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 189.227789][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 189.246196][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 189.259351][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 189.629587][ T4102] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.651098][ T4102] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.691229][ T4102] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.734366][ T4102] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.753695][ T4102] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.769474][ T4102] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.806976][ T4102] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.850792][T11004] lo speed is unknown, defaulting to 1000 [ 190.014701][T11020] bond3: option mode: invalid value (254) [ 190.024320][T11020] bond3 (unregistering): Released all slaves [ 190.059290][T11025] syzkaller0: entered promiscuous mode [ 190.066175][T11025] syzkaller0: entered allmulticast mode [ 190.170111][T11018] net_ratelimit: 21 callbacks suppressed [ 190.170132][T11018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.229608][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.303654][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.471686][T11040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.678457][T11047] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 191.054343][T11041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.105687][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 191.106501][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 191.122040][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 191.174209][T11070] tipc: Enabling of bearer rejected, media not registered [ 191.263865][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.326830][T11068] lo speed is unknown, defaulting to 1000 [ 191.344885][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.521339][T11081] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 191.581696][T11081] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 191.601344][T11081] erspan1: entered allmulticast mode [ 191.639762][T11084] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 191.652450][T11084] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 191.665300][T11084] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 191.714317][T11088] veth0: entered promiscuous mode [ 191.755089][T11083] veth0: left promiscuous mode [ 191.930432][T11102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.939551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.022068][T11102] syz.1.1284 (11102) used obsolete PPPIOCDETACH ioctl [ 192.311023][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.536619][T11131] bond6: (slave team0): Device is not bonding slave [ 192.545024][T11131] bond6: option active_slave: invalid value (team0) [ 192.615790][T11131] bond6 (unregistering): Released all slaves [ 192.934821][T11150] bond1 (unregistering): Released all slaves [ 193.232077][T11185] netlink: 'syz.2.1308': attribute type 12 has an invalid length. [ 193.276060][T11186] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 193.289302][T11186] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 193.509208][T11203] tipc: Enabled bearer , priority 0 [ 193.661613][T11203] syzkaller0: entered promiscuous mode [ 193.668831][T11203] syzkaller0: entered allmulticast mode [ 193.676161][T11203] tipc: Resetting bearer [ 193.693558][T11215] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 193.778408][T11221] tipc: Enabled bearer , priority 0 [ 193.794266][T11221] syzkaller0: entered promiscuous mode [ 193.799895][T11221] syzkaller0: entered allmulticast mode [ 193.810112][T11221] tipc: Resetting bearer [ 193.863826][T11221] tipc: Disabling bearer [ 193.885789][T11202] tipc: Resetting bearer [ 194.157148][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.111051][T11202] tipc: Disabling bearer [ 195.153924][ T5889] tipc: Node number set to 3847278969 [ 195.243938][T11255] bond4: (slave dummy0): Releasing active interface [ 195.250571][T11255] dummy0: left allmulticast mode [ 195.306619][T11255] bond0: (slave batadv0): Releasing backup interface [ 195.320453][T11255] bridge_slave_0: left allmulticast mode [ 195.327347][T11255] bridge_slave_0: left promiscuous mode [ 195.334184][T11255] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.366688][T11255] bond0: (slave bond_slave_0): Releasing backup interface [ 195.414402][T11255] bond0: (slave bond_slave_1): Releasing backup interface [ 195.430462][ T5889] net_ratelimit: 10 callbacks suppressed [ 195.430477][ T5889] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.437589][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.530053][T11255] `: Port device team_slave_0 removed [ 195.537215][T11263] __nla_validate_parse: 106 callbacks suppressed [ 195.537231][T11263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1329'. [ 195.565656][T11255] `: Port device team_slave_1 removed [ 195.576554][T11255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.603646][T11255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.609265][ T6032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.621496][T11255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.635216][T11255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.704804][T11255] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.811557][T11266] syz_tun: entered allmulticast mode [ 195.875676][T11256] syz_tun: left allmulticast mode [ 195.891088][ T6460] lo speed is unknown, defaulting to 1000 [ 196.217328][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1335'. [ 196.235987][T11294] vlan2: entered promiscuous mode [ 196.241314][T11294] bond0: entered promiscuous mode [ 196.285537][T11295] team0: Port device bridge5 added [ 196.372850][ T5998] ip6gretap2: left promiscuous mode [ 196.447908][T11311] syz_tun: entered allmulticast mode [ 196.456032][T11310] syz_tun: left allmulticast mode [ 196.542981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.787023][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 196.795882][T11334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.843332][T11340] geneve4: entered promiscuous mode [ 196.848663][T11340] geneve4: entered allmulticast mode [ 196.865241][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 196.878828][ T5998] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 58501 - 0 [ 196.893193][ T5998] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 58501 - 0 [ 196.917602][ T5998] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 58501 - 0 [ 196.930932][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 196.931039][ T5998] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 58501 - 0 [ 196.954010][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 196.965397][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 196.976293][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 196.986981][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 196.997380][T11340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 197.168732][T11359] 8021q: VLANs not supported on nlmon0 [ 197.305957][T11367] netlink: 'syz.2.1353': attribute type 30 has an invalid length. [ 197.320929][T11370] netlink: 'syz.0.1354': attribute type 2 has an invalid length. [ 197.423875][T11373] lo speed is unknown, defaulting to 1000 [ 198.011766][T11406] syzkaller0: entered promiscuous mode [ 198.017465][T11406] syzkaller0: entered allmulticast mode [ 199.160409][T11437] netlink: 'syz.1.1366': attribute type 3 has an invalid length. [ 199.271753][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.283726][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.640650][T11414] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 199.653437][T11446] netlink: 'syz.1.1368': attribute type 2 has an invalid length. [ 199.662930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.671159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.832361][T11458] x_tables: duplicate underflow at hook 1 [ 200.043597][T11472] tipc: Failed to remove unknown binding: 66,1,1/9611946:3919397332/3919397334 [ 200.047964][T11462] lo speed is unknown, defaulting to 1000 [ 200.101189][T11472] tipc: Failed to remove unknown binding: 66,1,1/9611946:3919397332/3919397334 [ 200.120570][T11467] lo speed is unknown, defaulting to 1000 [ 200.123583][T11472] tipc: Failed to remove unknown binding: 66,1,1/9611946:3919397332/3919397334 [ 200.390554][T11484] syzkaller0: entered promiscuous mode [ 200.399616][T11484] syzkaller0: entered allmulticast mode [ 200.426423][T11484] pim6reg: entered allmulticast mode [ 200.441672][T11483] pim6reg: left allmulticast mode [ 200.619568][T11491] __nla_validate_parse: 38 callbacks suppressed [ 200.619584][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 200.705581][T11497] netlink: 'syz.4.1383': attribute type 1 has an invalid length. [ 200.735241][T11497] netlink: 'syz.4.1383': attribute type 6 has an invalid length. [ 200.773775][T11497] netlink: 'syz.4.1383': attribute type 3 has an invalid length. [ 201.094831][T11533] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1388'. [ 201.107152][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1388'. [ 201.131773][T11544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1392'. [ 201.183457][ T67] net_ratelimit: 5 callbacks suppressed [ 201.183472][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.407251][T11559] lo speed is unknown, defaulting to 1000 [ 201.629550][T11574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1401'. [ 201.860113][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 201.898695][T11583] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1405'. [ 201.949534][T11585] netlink: 'syz.4.1406': attribute type 29 has an invalid length. [ 201.966260][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 202.034613][T11589] ip6gre0: entered promiscuous mode [ 202.047934][T11589] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 202.411393][T11615] bridge0: port 3(erspan0) entered blocking state [ 202.421834][T11615] bridge0: port 3(erspan0) entered disabled state [ 202.428762][T11615] erspan0: entered allmulticast mode [ 202.436366][T11615] erspan0: entered promiscuous mode [ 202.442345][T11615] bridge0: port 3(erspan0) entered blocking state [ 202.449142][T11615] bridge0: port 3(erspan0) entered forwarding state [ 202.455644][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1416'. [ 202.510788][T11621] erspan0: left allmulticast mode [ 202.519199][T11621] erspan0: left promiscuous mode [ 202.526182][T11621] bridge0: port 3(erspan0) entered disabled state [ 202.782791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.791422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.799898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.808347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.816761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.853168][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1420'. [ 202.896235][T11646] bond5: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 202.914755][T11646] bond5: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 203.104257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.204881][T11664] lo speed is unknown, defaulting to 1000 [ 203.287105][T11667] bridge0: port 3(syz_tun) entered blocking state [ 203.294857][T11667] bridge0: port 3(syz_tun) entered disabled state [ 203.301477][T11667] syz_tun: entered allmulticast mode [ 203.308658][T11667] syz_tun: entered promiscuous mode [ 203.320380][T11667] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 203.340941][T11673] syz_tun: entered allmulticast mode [ 203.347253][T11674] hsr_slave_0: left promiscuous mode [ 203.452321][T11678] pimreg: left allmulticast mode [ 203.532302][T11680] tipc: Enabled bearer , priority 0 [ 203.551456][T11672] syz_tun: left allmulticast mode [ 203.559561][T11680] tipc: Resetting bearer [ 203.642084][T11679] tipc: Disabling bearer [ 203.694020][T11688] 8021q: adding VLAN 0 to HW filter on device bond6 [ 203.785998][T11695] lo speed is unknown, defaulting to 1000 [ 203.870950][T11701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.097365][T11684] lec:lec_atm_close: lec0: Shut down! [ 204.207321][T11717] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 204.240892][T11717] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 204.317187][T11722] sch_fq: defrate 0 ignored. [ 204.347448][T11723] sch_fq: defrate 0 ignored. [ 204.546263][T11743] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 204.577913][T11738] tipc: Enabled bearer , priority 0 [ 204.609182][T11738] syzkaller0: entered promiscuous mode [ 204.634385][T11738] syzkaller0: entered allmulticast mode [ 204.671721][T11738] tipc: Resetting bearer [ 204.696087][T11736] tipc: Resetting bearer [ 204.702094][T11755] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.731858][T11736] tipc: Disabling bearer [ 204.806115][T11755] syzkaller0: entered promiscuous mode [ 204.812995][T11755] syzkaller0: entered allmulticast mode [ 206.260259][T11790] lo speed is unknown, defaulting to 1000 [ 206.365632][T11794] __nla_validate_parse: 28 callbacks suppressed [ 206.365650][T11794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1466'. [ 206.547085][T11803] sctp: [Deprecated]: syz.4.1468 (pid 11803) Use of int in max_burst socket option deprecated. [ 206.547085][T11803] Use struct sctp_assoc_value instead [ 206.591631][T11810] vxcan0: Caught tx_queue_len zero misconfig [ 206.616895][T11810] netem: change failed [ 206.815260][T11821] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1472'. [ 206.825221][T11822] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1472'. [ 207.080325][T11829] netlink: 'syz.1.1474': attribute type 13 has an invalid length. [ 207.184571][T11829] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.192382][T11829] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.372355][T11829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.390803][T11829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.431006][T11841] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1477'. [ 207.477138][T11829] tipc: Resetting bearer [ 207.557180][T11829] batman_adv: batadv0: Interface deactivated: gretap2 [ 207.581481][ T107] lo speed is unknown, defaulting to 1000 [ 207.593408][ T107] syz2: Port: 1 Link DOWN [ 207.630519][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.656320][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.672250][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.684760][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.698297][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.708020][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.735146][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.741000][T11853] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 207.754636][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.764512][T11854] IPVS: fo: FWM 3 0x00000003 - no destination available [ 207.937951][T11874] netlink: 'syz.0.1483': attribute type 25 has an invalid length. [ 208.059396][T11888] netlink: 'syz.1.1488': attribute type 9 has an invalid length. [ 208.239505][T11898] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1492'. [ 208.292268][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'. [ 208.637814][T11925] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 208.688742][T11925] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.726756][T11925] veth5: entered promiscuous mode [ 208.769120][T11925] bond7: (slave veth5): Enslaving as an active interface with a down link [ 208.787895][T11929] erspan0: entered allmulticast mode [ 208.885635][T11929] bond7: (slave erspan0): making interface the new active one [ 208.896462][T11929] erspan0: entered promiscuous mode [ 208.915981][T11929] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 208.957031][T11925] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 209.115554][T11944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1503'. [ 209.221178][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1503'. [ 209.396604][T11958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1508'. [ 209.490229][T11963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.516902][T11963] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.533335][T11963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.564455][T11966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1510'. [ 209.651072][T11971] : entered promiscuous mode [ 209.659062][T11971] netlink: 'syz.3.1511': attribute type 1 has an invalid length. [ 209.705336][T11971] bond8: entered promiscuous mode [ 209.720844][T11971] 8021q: adding VLAN 0 to HW filter on device bond8 [ 209.789786][T11975] 8021q: adding VLAN 0 to HW filter on device bond8 [ 209.815284][T11975] bond8: (slave gre2): The slave device specified does not support setting the MAC address [ 209.832659][T11975] bond8: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 209.855249][T11975] bond8: (slave gre2): Opening slave failed [ 210.116072][T11996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.129859][T11996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.388312][T12007] syz_tun (unregistering): left allmulticast mode [ 210.398703][T12007] syz_tun (unregistering): left promiscuous mode [ 210.406057][T12007] bridge0: port 3(syz_tun) entered disabled state [ 210.975150][T12036] lo speed is unknown, defaulting to 1000 [ 211.084433][T12038] netlink: 'syz.1.1529': attribute type 30 has an invalid length. [ 211.186061][T12045] netlink: 'syz.2.1531': attribute type 1 has an invalid length. [ 212.068769][T12041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.116697][T12041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.476715][T12044] ip6gre0: left promiscuous mode [ 212.482013][T12044] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 212.494844][T12044] batadv1: left promiscuous mode [ 212.500183][T12044] veth4: left promiscuous mode [ 212.515452][T12044] hsr1: left promiscuous mode [ 212.520234][T12044] ip6gre1: left promiscuous mode [ 212.530763][T12044] geneve2: left promiscuous mode [ 212.536460][T12044] vlan2: left promiscuous mode [ 212.541329][T12044] hsr_slave_1: left promiscuous mode [ 212.548346][T12044] geneve3: left promiscuous mode [ 212.553903][T12044] geneve4: left promiscuous mode [ 212.561134][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.593872][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.602301][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.669341][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.790943][T12072] netlink: 'syz.2.1538': attribute type 1 has an invalid length. [ 212.816816][T12073] __nla_validate_parse: 9 callbacks suppressed [ 212.816832][T12073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1538'. [ 212.834638][T12072] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 212.994032][T12092] lo: Caught tx_queue_len zero misconfig [ 212.999213][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 213.192305][T12106] netlink: 'syz.2.1548': attribute type 3 has an invalid length. [ 213.343998][T12116] netlink: 'syz.0.1553': attribute type 2 has an invalid length. [ 213.624657][T12136] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1560'. [ 213.648095][T12130] lo speed is unknown, defaulting to 1000 [ 213.866587][T12142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1562'. [ 213.964181][T12147] delete_channel: no stack [ 214.361743][T12170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.371565][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.427246][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'. [ 214.558483][T12178] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 214.774670][T12194] netlink: 'syz.1.1575': attribute type 5 has an invalid length. [ 214.779155][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 214.790670][T12194] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1575'. [ 214.879416][T12194] lo speed is unknown, defaulting to 1000 [ 215.001807][T12200] lo speed is unknown, defaulting to 1000 [ 215.234364][T12224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.243136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.274852][T12223] netlink: 4168 bytes leftover after parsing attributes in process `syz.0.1582'. [ 215.418784][T12234] netlink: 'syz.3.1584': attribute type 1 has an invalid length. [ 215.429093][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 215.475400][T12236] netlink: 'syz.1.1587': attribute type 13 has an invalid length. [ 215.483642][T12236] macvtap0: entered promiscuous mode [ 215.496465][T12236] macvtap0: refused to change device tx_queue_len [ 216.266860][T12263] syzkaller0: entered promiscuous mode [ 216.279224][T12263] syzkaller0: entered allmulticast mode [ 216.330644][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1596'. [ 216.818174][T12318] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 217.181344][T12329] lo speed is unknown, defaulting to 1000 [ 217.324321][T12338] netlink: 'syz.2.1613': attribute type 10 has an invalid length. [ 217.393964][T12338] dummy0: entered promiscuous mode [ 217.455131][T12338] bridge0: port 3(dummy0) entered blocking state [ 217.469740][T12338] bridge0: port 3(dummy0) entered disabled state [ 217.477014][T12338] dummy0: entered allmulticast mode [ 217.600796][T12355] netlink: 'syz.1.1618': attribute type 21 has an invalid length. [ 217.608976][T12355] netlink: 'syz.1.1618': attribute type 4 has an invalid length. [ 217.634644][T12355] netlink: 'syz.1.1618': attribute type 3 has an invalid length. [ 217.775165][T12360] sctp: [Deprecated]: syz.1.1620 (pid 12360) Use of int in max_burst socket option deprecated. [ 217.775165][T12360] Use struct sctp_assoc_value instead [ 217.947345][T12365] __nla_validate_parse: 6 callbacks suppressed [ 217.947361][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 218.023962][ T30] audit: type=1800 audit(1766805865.708:5): pid=12358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1619" name="memory.events" dev="tmpfs" ino=1835 res=0 errno=0 [ 218.061886][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 218.126729][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 218.143677][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 218.154216][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 218.532017][T12394] syzkaller1: entered promiscuous mode [ 218.554482][T12394] syzkaller1: entered allmulticast mode [ 218.650714][T12404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1635'. [ 218.961874][T12427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.016443][T12431] lo speed is unknown, defaulting to 1000 [ 219.081357][T12428] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 219.245486][T12435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1643'. [ 219.739695][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1654'. [ 220.097158][T12497] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1658'. [ 220.214019][ T1148] erspan0: left promiscuous mode [ 220.458042][T12514] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1665'. [ 220.907014][T12543] netlink: 'syz.0.1670': attribute type 1 has an invalid length. [ 221.012844][T12545] syz_tun: entered allmulticast mode [ 221.040346][T12547] vcan0: entered allmulticast mode [ 221.086972][T12547] syz_tun: left allmulticast mode [ 221.215382][T12552] syzkaller0: entered promiscuous mode [ 221.233100][T12552] syzkaller0: entered allmulticast mode [ 221.449263][T12574] x_tables: duplicate underflow at hook 1 [ 222.685680][T12594] openvswitch: netlink: IP tunnel dst address not specified [ 222.685680][T12588] openvswitch: netlink: IP tunnel dst address not specified [ 222.797883][T12601] tipc: Failed to remove unknown binding: 66,1,1/9611946:3924194256/3924194258 [ 222.849909][T12598] gretap1: entered promiscuous mode [ 222.870154][T12598] batman_adv: batadv0: Adding interface: gretap1 [ 222.882834][T12598] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 222.900805][T12595] tipc: Failed to remove unknown binding: 66,1,1/9611946:3924194256/3924194258 [ 222.906222][T12598] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 222.925275][T12595] tipc: Failed to remove unknown binding: 66,1,1/9611946:3924194256/3924194258 [ 223.763561][T12666] Unsupported ieee802154 address type: 0 [ 223.874244][T12672] __nla_validate_parse: 7 callbacks suppressed [ 223.874256][T12672] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1708'. [ 223.894141][T12672] tunl0: Caught tx_queue_len zero misconfig [ 223.925167][T12675] lo speed is unknown, defaulting to 1000 [ 224.229601][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1713'. [ 224.242631][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1713'. [ 224.365883][T12692] No such timeout policy "syz0" [ 224.396981][T12692] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1714'. [ 224.422911][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 224.460435][T12692] syzkaller0: entered promiscuous mode [ 224.478150][T12692] syzkaller0: entered allmulticast mode [ 224.554061][T12701] syzkaller0: entered promiscuous mode [ 224.561757][T12703] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 224.613385][T12701] syzkaller0: entered allmulticast mode [ 224.657803][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 224.707887][T12703] netlink: 'syz.1.1719': attribute type 1 has an invalid length. [ 224.740291][T12701] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1718'. [ 224.779066][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 225.151990][T12727] netlink: 'syz.0.1729': attribute type 12 has an invalid length. [ 225.163224][T12727] netlink: 'syz.0.1729': attribute type 29 has an invalid length. [ 225.171406][T12727] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1729'. [ 225.233686][T12726] tipc: Enabled bearer , priority 0 [ 225.241116][T12726] syzkaller0: entered promiscuous mode [ 225.266384][T12726] syzkaller0: entered allmulticast mode [ 225.283653][T12740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1731'. [ 225.444062][T12726] tipc: Resetting bearer [ 225.519682][T12728] IPVS: Scheduler module ip_vs_sip not found [ 225.580290][T12724] tipc: Resetting bearer [ 225.612951][T12724] tipc: Disabling bearer [ 226.972208][T12818] netlink: 'syz.2.1745': attribute type 39 has an invalid length. [ 227.238061][T12849] syzkaller1: entered promiscuous mode [ 227.248877][T12849] syzkaller1: entered allmulticast mode [ 227.299045][T12851] nbd: device at index 2 is going down [ 227.305857][T12852] nbd: device at index 2 is going down [ 227.431974][T12860] netlink: 'syz.0.1757': attribute type 10 has an invalid length. [ 227.459299][T12860] team0: Port device dummy0 added [ 227.480179][T12860] netlink: 'syz.0.1757': attribute type 10 has an invalid length. [ 227.515981][T12860] team0: Port device dummy0 removed [ 227.535684][T12860] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 228.087092][T12877] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 228.903468][T12880] __nla_validate_parse: 6 callbacks suppressed [ 228.903485][T12880] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1763'. [ 228.973508][T12870] lo speed is unknown, defaulting to 1000 [ 229.030377][T12884] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.075773][T12884] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.248015][T12898] netlink: 'syz.1.1770': attribute type 1 has an invalid length. [ 229.391742][T12914] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1769'. [ 229.410080][T12898] bond2: entered promiscuous mode [ 229.415555][T12898] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.447607][T12913] tipc: Can't bind to reserved service type 1 [ 229.493671][T12919] syzkaller0: entered promiscuous mode [ 229.499273][T12919] syzkaller0: entered allmulticast mode [ 229.516611][T12914] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1769'. [ 229.537088][T12919] tipc: Enabled bearer , priority 0 [ 229.576127][T12917] tipc: Resetting bearer [ 229.621031][T12917] tipc: Disabling bearer [ 229.663799][T12910] lo speed is unknown, defaulting to 1000 [ 229.778266][T12935] netlink: 'syz.1.1776': attribute type 1 has an invalid length. [ 230.107426][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1779'. [ 230.473859][T12975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1786'. [ 230.491560][T12974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1786'. [ 230.597701][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 230.636739][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1788'. [ 230.648415][T12985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1789'. [ 230.672182][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1789'. [ 230.699382][T12986] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 230.726123][T12985] netlink: 'syz.4.1789': attribute type 1 has an invalid length. [ 231.818373][T13053] syzkaller0: entered promiscuous mode [ 231.825553][T13053] syzkaller0: entered allmulticast mode [ 232.090398][T13064] netlink: 'syz.4.1814': attribute type 29 has an invalid length. [ 232.114107][T13064] netlink: 'syz.4.1814': attribute type 29 has an invalid length. [ 232.149322][T13063] delete_channel: no stack [ 232.161104][T13063] delete_channel: no stack [ 232.538937][T13084] sock: sock_timestamping_bind_phc: sock not bind to device [ 232.612268][T13083] bond7: option fail_over_mac: invalid value (127) [ 232.631082][T13083] bond7 (unregistering): Released all slaves [ 233.056597][T13105] netpci0: tun_chr_ioctl cmd 1074025677 [ 233.062381][T13105] netpci0: linktype set to 6 [ 233.138306][T13105] netlink: 'syz.2.1827': attribute type 15 has an invalid length. [ 233.541036][T13122] dummy0: entered promiscuous mode [ 233.550109][T13122] dummy0: left promiscuous mode [ 233.568821][T13130] tap0: tun_chr_ioctl cmd 2148553947 [ 233.583522][T13125] tap0: tun_chr_ioctl cmd 2147767521 [ 234.050251][T13156] netlink: 'syz.3.1840': attribute type 1 has an invalid length. [ 234.131234][T13156] 8021q: adding VLAN 0 to HW filter on device bond10 [ 234.190529][T13164] __nla_validate_parse: 4 callbacks suppressed [ 234.190545][T13164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 234.321067][T13160] ip6gretap1: entered allmulticast mode [ 234.344735][T13160] bond10: (slave ip6gretap1): making interface the new active one [ 234.357000][T13160] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 234.474443][T13168] tipc: Enabling of bearer rejected, failed to enable media [ 234.525773][T13179] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.1846'. [ 234.581057][T13184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1847'. [ 234.698991][T13195] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1850'. [ 234.709293][T13198] xt_policy: output policy not valid in PREROUTING and INPUT [ 234.730334][T13195] netlink: 83 bytes leftover after parsing attributes in process `syz.4.1850'. [ 234.949054][T13211] pimreg3: entered allmulticast mode [ 235.196540][T13225] atomic_op ffff888028172198 conn xmit_atomic 0000000000000000 [ 235.441989][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 235.469230][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'. [ 235.514686][T13236] netlink: 'syz.3.1861': attribute type 3 has an invalid length. [ 235.655731][T13248] bridge0: port 1(gretap0) entered blocking state [ 235.667574][T13248] bridge0: port 1(gretap0) entered disabled state [ 235.674900][T13248] gretap0: entered allmulticast mode [ 235.686613][T13248] gretap0: entered promiscuous mode [ 235.693950][T13248] bridge0: port 1(gretap0) entered blocking state [ 235.700496][T13248] bridge0: port 1(gretap0) entered forwarding state [ 235.767178][T13258] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1866'. [ 235.853407][T13261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1867'. [ 235.877432][T13255] lo speed is unknown, defaulting to 1000 [ 235.981354][T13264] lo speed is unknown, defaulting to 1000 [ 236.490786][T13279] lo speed is unknown, defaulting to 1000 [ 236.646394][T13300] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1876'. [ 237.042240][T13320] netlink: 'syz.4.1880': attribute type 13 has an invalid length. [ 237.210791][T13327] 8021q: VLANs not supported on wg1 [ 237.370340][T13336] netlink: 'syz.3.1886': attribute type 3 has an invalid length. [ 237.380354][T13336] netlink: 'syz.3.1886': attribute type 2 has an invalid length. [ 237.473953][T13340] tipc: Enabled bearer , priority 0 [ 237.548916][T13340] tipc: Disabling bearer [ 238.617457][T13398] SET target dimension over the limit! [ 238.694342][T13403] netlink: 'syz.2.1904': attribute type 1 has an invalid length. [ 238.703729][ T5940] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 238.894798][T13416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.906329][T13416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.917522][T13416] hsr0: entered promiscuous mode [ 238.923236][T13416] hsr0: entered allmulticast mode [ 238.928274][T13416] hsr_slave_0: entered allmulticast mode [ 238.954550][T13416] hsr_slave_1: entered allmulticast mode [ 239.038219][T13421] tipc: Enabled bearer , priority 0 [ 239.047088][T13422] syzkaller0: entered promiscuous mode [ 239.053719][T13422] syzkaller0: entered allmulticast mode [ 239.104164][T13425] tipc: Resetting bearer [ 239.155853][T13420] tipc: Resetting bearer [ 239.206753][T13420] tipc: Disabling bearer [ 239.243362][T13430] __nla_validate_parse: 16 callbacks suppressed [ 239.243387][T13430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1912'. [ 239.342782][ T60] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 239.382199][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 239.408708][T13434] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1914'. [ 239.423426][ T5940] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 239.547312][T13438] tipc: Enabled bearer , priority 0 [ 239.564140][T13437] tipc: Disabling bearer [ 239.587888][T13441] geneve4: entered promiscuous mode [ 239.600454][ T67] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.611532][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'. [ 239.616624][ T67] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.676914][ T67] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.704092][ T67] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.798522][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 239.830314][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1920'. [ 239.881853][T13460] nbd: must specify a size in bytes for the device [ 240.214610][T13490] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 240.385785][ T67] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.406920][ T67] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.439482][T13509] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1930'. [ 240.499793][T13509] wg1: entered promiscuous mode [ 240.507039][T13509] wg1: entered allmulticast mode [ 240.540192][T13510] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1932'. [ 240.763080][ T5940] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 240.868941][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 241.140560][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 241.524374][T13534] infiniband !yz!: set down [ 241.533468][T13534] infiniband !yz!: added team_slave_0 [ 241.636275][T13534] RDS/IB: !yz!: added [ 241.643567][T13534] smc: adding ib device !yz! with port count 1 [ 241.683288][T13534] smc: ib device !yz! port 1 has no pnetid [ 242.141081][T13587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.304681][T13594] netlink: 'syz.4.1954': attribute type 3 has an invalid length. [ 242.430125][T13599] x_tables: duplicate underflow at hook 1 [ 242.758372][T13616] netlink: 'syz.1.1959': attribute type 1 has an invalid length. [ 242.799095][T13616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.878181][T13620] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.904516][T13620] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 242.931392][T13620] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 242.992401][T13616] veth5: entered promiscuous mode [ 243.010706][T13616] bond3: (slave veth5): Enslaving as an active interface with a down link [ 243.219363][T13629] syzkaller1: entered promiscuous mode [ 243.233273][T13629] syzkaller1: entered allmulticast mode [ 243.628124][T13648] tipc: Enabled bearer , priority 0 [ 243.646516][T13648] syzkaller0: entered promiscuous mode [ 243.652152][T13648] syzkaller0: entered allmulticast mode [ 243.736929][T13648] tipc: Resetting bearer [ 243.803727][T13647] tipc: Resetting bearer [ 243.872316][T13647] tipc: Disabling bearer [ 243.893551][T13657] netlink: 'syz.1.1970': attribute type 2 has an invalid length. [ 244.278155][T13680] __nla_validate_parse: 6 callbacks suppressed [ 244.278172][T13680] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1974'. [ 244.457777][T13690] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1978'. [ 244.462854][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.671468][T13668] netlink: 'syz.2.1971': attribute type 23 has an invalid length. [ 245.121867][T13702] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1981'. [ 245.209772][T13714] xt_l2tp: invalid flags combination: 0 [ 245.248351][T13720] netlink: 'syz.4.1986': attribute type 13 has an invalid length. [ 245.266505][T13718] gtp0: entered promiscuous mode [ 245.273292][T13718] gtp0: entered allmulticast mode [ 245.302086][T13722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1986'. [ 245.321906][T13720] netlink: 'syz.4.1986': attribute type 13 has an invalid length. [ 245.339918][T13722] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1986'. [ 245.351425][T13724] ipvlan0: entered promiscuous mode [ 245.382110][T13724] tipc: Enabled bearer , priority 0 [ 245.397992][T13724] syzkaller0: entered promiscuous mode [ 245.424546][T13724] syzkaller0: entered allmulticast mode [ 245.473795][T13724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1987'. [ 245.494575][T13723] tipc: Resetting bearer [ 245.544737][T13723] tipc: Disabling bearer [ 245.599853][T13745] bond2: ARP target 9.0.0.0 is already present [ 245.607876][T13745] bond2: option arp_ip_target: invalid value (9) [ 245.617327][T13745] bond2 (unregistering): Released all slaves [ 246.514663][T13791] batadv_slave_0: entered promiscuous mode [ 246.530616][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'. [ 246.620060][T13805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1999'. [ 246.636540][T13755] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR [ 247.007855][T13824] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2008'. [ 247.322165][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 247.910734][T13871] netlink: 'syz.3.2018': attribute type 1 has an invalid length. [ 248.047718][T13871] 8021q: adding VLAN 0 to HW filter on device bond11 [ 248.104730][T13869] lo speed is unknown, defaulting to 1000 [ 248.131622][T13871] bond11: entered promiscuous mode [ 248.190873][T13866] lo speed is unknown, defaulting to 1000 [ 248.335690][T13883] syzkaller1: entered promiscuous mode [ 248.350652][T13883] syzkaller1: entered allmulticast mode [ 248.357931][T13888] netlink: 'syz.3.2021': attribute type 6 has an invalid length. [ 248.368926][T13888] bridge0: port 1(gretap0) entered disabled state [ 249.015345][T13904] lo speed is unknown, defaulting to 1000 [ 249.053420][T13905] lo speed is unknown, defaulting to 1000 [ 249.738511][T13921] __nla_validate_parse: 2 callbacks suppressed [ 249.738610][T13921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2029'. [ 249.756501][T13922] 8021q: VLANs not supported on lo [ 249.761677][T13921] 8021q: VLANs not supported on lo [ 250.488865][T13931] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2030'. [ 250.698120][T13935] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2032'. [ 250.962902][ T10] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 251.047564][T13941] syz_tun: entered promiscuous mode [ 251.073872][T13941] macvtap1: entered promiscuous mode [ 251.088577][T13941] macvtap1: entered allmulticast mode [ 251.103255][T13941] syz_tun: entered allmulticast mode [ 251.125110][T13941] syz_tun: left allmulticast mode [ 251.130476][T13941] syz_tun: left promiscuous mode [ 251.164049][ T10] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 251.190570][ T60] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 251.234243][T13940] lo speed is unknown, defaulting to 1000 [ 251.238244][T13951] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2038'. [ 251.600732][T13967] netlink: 'syz.0.2039': attribute type 3 has an invalid length. [ 251.623938][T13968] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20004 [ 251.710666][T13971] can: request_module (can-proto-0) failed. [ 251.938728][T13982] dummy0: entered promiscuous mode [ 251.945424][T13982] bond0: entered promiscuous mode [ 251.950462][T13982] bond_slave_0: entered promiscuous mode [ 251.956496][T13982] bond_slave_1: entered promiscuous mode [ 251.966071][T13982] debugfs: 'hsr1' already exists in 'hsr' [ 251.971791][T13982] Cannot create hsr debugfs directory [ 251.977833][T13982] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 252.002028][T13984] netlink: 'syz.4.2047': attribute type 1 has an invalid length. [ 252.008028][T13982] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 252.020578][T13982] hsr1: entered allmulticast mode [ 252.026768][T13982] dummy0: entered allmulticast mode [ 252.033503][T13982] bond0: entered allmulticast mode [ 252.038629][T13982] bond_slave_0: entered allmulticast mode [ 252.053708][T13982] bond_slave_1: entered allmulticast mode [ 252.128156][T13987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.253495][T13987] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 252.323368][T13987] bond0: (slave sit0): Error -95 calling set_mac_address [ 252.476733][T13890] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 252.487706][T13890] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 252.508626][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 252.626479][ T48] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 252.667340][T13997] batadv2: left allmulticast mode [ 252.677271][T13997] batadv2: left promiscuous mode [ 252.689137][T13997] bridge0: port 3(batadv2) entered disabled state [ 252.708972][T13997] bridge_slave_0: left allmulticast mode [ 252.735975][T13997] bridge_slave_0: left promiscuous mode [ 252.763920][T13997] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.022810][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.299463][T14046] tipc: Enabled bearer , priority 0 [ 253.321346][T14046] syzkaller0: entered promiscuous mode [ 253.352862][T14046] syzkaller0: entered allmulticast mode [ 253.494540][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2062'. [ 253.521144][T14046] tipc: Resetting bearer [ 253.840457][T14045] tipc: Resetting bearer [ 253.855901][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'. [ 253.893990][T14045] tipc: Disabling bearer [ 254.282349][T14106] lo speed is unknown, defaulting to 1000 [ 254.327605][T14113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2075'. [ 254.353449][T14113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2075'. [ 254.388112][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 254.443812][T14113] tun0: tun_chr_ioctl cmd 1074025675 [ 254.459892][T14113] tun0: persist enabled [ 254.994160][T14148] syzkaller0: entered promiscuous mode [ 255.013356][T14148] syzkaller0: entered allmulticast mode [ 255.287087][T14166] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 255.349774][T14167] dummy0: left allmulticast mode [ 255.367907][T14167] bridge0: port 3(dummy0) entered disabled state [ 255.428866][T14167] x9: left allmulticast mode [ 255.449145][T14167] x9: left promiscuous mode [ 255.464679][T14167] bridge0: port 1(1x9) entered disabled state [ 255.506380][T14167] bridge_slave_1: left promiscuous mode [ 255.519186][T14167] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.557531][T14167] team0: Port device 76 removed [ 255.573397][T14167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.589904][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.601329][T14167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.617983][T14167] batman_adv: batadv0: Removing interface: virt_wifi0 [ 255.644355][T14167] batman_adv: batadv0: Removing interface: macvtap0 [ 255.653374][T14167] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 255.686066][T14172] netlink: 'syz.4.2089': attribute type 15 has an invalid length. [ 255.714305][T14161] lo speed is unknown, defaulting to 1000 [ 256.142801][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 256.363562][T14181] netlink: 'syz.4.2091': attribute type 11 has an invalid length. [ 256.404588][T14181] netlink: 'syz.4.2091': attribute type 11 has an invalid length. [ 256.413701][T14181] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2091'. [ 256.455833][T14181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.564221][T14201] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2096'. [ 256.622960][T14201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2096'. [ 256.631966][T14201] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2096'. [ 256.699786][T14208] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2097'. [ 256.711212][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'. [ 256.732322][T14208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2097'. [ 256.845547][T14216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2099'. [ 256.965903][T14221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2101'. [ 256.986068][T14221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2101'. [ 257.042212][T14229] IPv6: sit3: Disabled Multicast RS [ 257.304051][T14244] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 257.344571][T14244] bond4 (unregistering): Released all slaves [ 257.518493][T14259] xt_hashlimit: max too large, truncated to 1048576 [ 257.897255][T14266] bond12: option arp_validate: invalid value (18446744073709551614) [ 258.080910][T14266] bond12 (unregistering): Released all slaves [ 258.112950][T14243] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 258.278265][T14273] syz.1.2116 uses old SIOCAX25GETINFO [ 258.894425][T14298] syzkaller1: entered promiscuous mode [ 258.899934][T14298] syzkaller1: entered allmulticast mode [ 258.963907][T14298] syzkaller1: left promiscuous mode [ 258.969226][T14298] syzkaller1: left allmulticast mode [ 258.983355][T14302] openvswitch: netlink: IP tunnel dst address not specified [ 259.329410][T14321] netlink: 'syz.3.2127': attribute type 3 has an invalid length. [ 259.343985][T14306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.368855][T14321] lo speed is unknown, defaulting to 1000 [ 259.506576][T14330] openvswitch: netlink: Invalid VLAN frame [ 259.775140][T14344] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20004 [ 260.038325][T14342] xt_TCPMSS: Only works on TCP SYN packets [ 260.076835][T14365] netlink: 'syz.4.2138': attribute type 11 has an invalid length. [ 260.160978][T14357] lo speed is unknown, defaulting to 1000 [ 260.287201][ T60] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.301509][ T60] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.322897][ T60] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.342916][ T60] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.546236][T14377] veth0_to_team: entered promiscuous mode [ 260.579445][T14378] tipc: Enabled bearer , priority 0 [ 260.772450][T14378] syzkaller0: entered promiscuous mode [ 260.778139][T14378] syzkaller0: entered allmulticast mode [ 260.899288][T14392] pimreg1: tun_chr_ioctl cmd 1074025677 [ 260.916157][T14392] pimreg1: linktype set to 804 [ 260.998315][T14378] tipc: Resetting bearer [ 261.044341][T14376] tipc: Resetting bearer [ 261.074055][T14398] sctp: [Deprecated]: syz.2.2148 (pid 14398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.074055][T14398] Use struct sctp_sack_info instead [ 261.221064][T14376] tipc: Disabling bearer [ 261.280880][T14408] tipc: Enabled bearer , priority 0 [ 261.478641][T14413] __nla_validate_parse: 68 callbacks suppressed [ 261.478658][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2152'. [ 261.512305][T14400] syzkaller0: entered promiscuous mode [ 261.518374][T14400] syzkaller0: entered allmulticast mode [ 261.524836][T14400] tipc: Resetting bearer [ 261.613702][T13890] tipc: Resetting bearer [ 261.629509][T14422] tipc: Enabled bearer , priority 0 [ 261.638347][T14399] tipc: Resetting bearer [ 263.081264][T14399] tipc: Disabling bearer [ 263.091021][T14426] syzkaller0: entered promiscuous mode [ 263.098474][T14426] syzkaller0: entered allmulticast mode [ 263.118918][T14434] tipc: Resetting bearer [ 263.133792][T14409] tipc: Resetting bearer [ 263.194051][T14409] tipc: Disabling bearer [ 263.225613][T14449] syzkaller0: entered promiscuous mode [ 263.231113][T14449] syzkaller0: entered allmulticast mode [ 263.240327][ T5889] tipc: Node number set to 1067814871 [ 263.306477][T14456] macvlan1: entered promiscuous mode [ 263.314996][T14456] ipvlan0: entered promiscuous mode [ 263.323903][T14456] ipvlan0: left promiscuous mode [ 263.337017][T14456] macvlan1: left promiscuous mode [ 263.902668][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 264.015070][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2166'. [ 264.066788][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2166'. [ 264.092207][T14479] macsec2: entered promiscuous mode [ 264.132798][T14479] hsr0: entered promiscuous mode [ 264.141719][T14479] macsec2: entered allmulticast mode [ 264.164850][T14479] hsr0: entered allmulticast mode [ 264.178936][T14479] hsr_slave_0: entered allmulticast mode [ 264.192002][T14499] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2169'. [ 264.213247][T14479] hsr_slave_1: entered allmulticast mode [ 264.237278][T14479] hsr0: left allmulticast mode [ 264.254390][T14479] hsr_slave_0: left allmulticast mode [ 264.276689][T14479] hsr_slave_1: left allmulticast mode [ 264.300016][T14479] hsr0: left promiscuous mode [ 264.443556][T14484] lo speed is unknown, defaulting to 1000 [ 264.855260][T14531] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 265.358732][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2179'. [ 265.369375][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2179'. [ 266.097830][T14571] pim6reg1: entered promiscuous mode [ 266.114666][T14571] pim6reg1: entered allmulticast mode [ 266.186904][T14575] netlink: 'syz.4.2189': attribute type 33 has an invalid length. [ 266.194970][T14575] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2189'. [ 266.289511][T14575] `: renamed from team0 [ 266.296191][T14583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2191'. [ 266.376994][T14581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.387048][T14581] bridge0: port 1(bond4) entered blocking state [ 266.393820][T14581] bridge0: port 1(bond4) entered disabled state [ 266.400237][T14581] bond4: entered allmulticast mode [ 266.409536][T14581] bond4: entered promiscuous mode [ 266.515883][T14561] delete_channel: no stack [ 266.778652][T14597] bond0: Caught tx_queue_len zero misconfig [ 267.483165][T14618] lo speed is unknown, defaulting to 1000 [ 267.660650][T14627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2201'. [ 268.014700][T14650] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20004 [ 268.079236][T14658] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 268.090537][T14658] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2210'. [ 268.175973][T14667] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2214'. [ 268.191953][T14667] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 268.287846][T14672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2215'. [ 268.300260][T14672] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 268.308441][T14672] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2215'. [ 268.481295][T14677] openvswitch: netlink: Tunnel attr 12558 out of range max 16 [ 268.523001][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2216'. [ 268.797410][T14691] netlink: 'syz.4.2222': attribute type 11 has an invalid length. [ 268.814052][T14692] netlink: 'syz.4.2222': attribute type 11 has an invalid length. [ 268.890050][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2223'. [ 269.095145][T14711] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2226'. [ 269.106847][T14712] syzkaller0: entered promiscuous mode [ 269.113876][T14712] syzkaller0: entered allmulticast mode [ 269.287745][T14716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2228'. [ 269.332279][T14718] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 269.359987][T14718] 8021q: adding VLAN 0 to HW filter on device bond27 [ 269.380116][T14718] bond27: (slave gretap1): making interface the new active one [ 269.388863][T14718] bond27: (slave gretap1): Enslaving as an active interface with an up link [ 269.539915][T14721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2230'. [ 269.662668][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.144374][T14746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.352230][T14769] Cannot find del_set index 2 as target [ 270.529234][T14775] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 270.543737][T14775] bond7 (unregistering): Released all slaves [ 270.576971][T14780] lo: entered allmulticast mode [ 270.605418][T14777] lo: left allmulticast mode [ 270.797857][T14799] gre0: entered promiscuous mode [ 270.803652][T14799] gre0: entered allmulticast mode [ 270.841664][T14800] block nbd0: shutting down sockets [ 270.969774][T14806] bond7: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 270.983459][T14806] bond7 (unregistering): Released all slaves [ 271.143529][T14821] gre0: left promiscuous mode [ 271.155304][T14821] gre0: left allmulticast mode [ 271.174990][T14821] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 271.188322][T14829] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 271.310193][T14835] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.036208][T14842] syzkaller0: entered promiscuous mode [ 272.041726][T14842] syzkaller0: entered allmulticast mode [ 272.073526][T14852] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 272.252371][T14855] sctp: [Deprecated]: syz.2.2269 (pid 14855) Use of int in max_burst socket option deprecated. [ 272.252371][T14855] Use struct sctp_assoc_value instead [ 272.286124][T14835] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.404235][T14835] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.455693][T14862] netlink: 'syz.3.2272': attribute type 1 has an invalid length. [ 272.497674][T14835] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.631683][ T3021] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.677527][ T3021] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.858064][ T4475] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.892171][ T4475] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.133600][T14904] netlink: 'syz.4.2281': attribute type 1 has an invalid length. [ 273.146066][T14903] netlink: 'syz.4.2281': attribute type 1 has an invalid length. [ 273.308656][T14915] netlink: 'syz.1.2283': attribute type 9 has an invalid length. [ 273.340938][T14915] netlink: 'syz.1.2283': attribute type 11 has an invalid length. [ 273.350694][T14915] netlink: 'syz.1.2283': attribute type 12 has an invalid length. [ 273.360031][T14915] __nla_validate_parse: 3 callbacks suppressed [ 273.360047][T14915] netlink: 211588 bytes leftover after parsing attributes in process `syz.1.2283'. [ 273.395967][T14916] lo speed is unknown, defaulting to 1000 [ 273.470496][T14922] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2285'. [ 273.972184][T14936] netlink: 'syz.3.2288': attribute type 96 has an invalid length. [ 274.107491][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2289'. [ 274.178072][T14943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2289'. [ 274.288292][T14943] bond7: entered promiscuous mode [ 274.302018][T14943] 8021q: adding VLAN 0 to HW filter on device bond7 [ 274.394067][T14940] 8021q: adding VLAN 0 to HW filter on device bond8 [ 274.415829][T14940] bond8: entered promiscuous mode [ 274.421351][T14940] bond7: (slave bond8): Enslaving as an active interface with an up link [ 274.447345][T14963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2295'. [ 274.447416][T14966] Bluetooth: MGMT ver 1.23 [ 274.571223][T14970] netlink: 'syz.0.2297': attribute type 5 has an invalid length. [ 274.581183][T14971] netlink: 'syz.0.2297': attribute type 5 has an invalid length. [ 274.611690][T14966] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 274.622041][T14963] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2295'. [ 274.635803][T14963] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2295'. [ 274.655300][T14963] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2295'. [ 274.848769][T14983] netlink: 'syz.1.2300': attribute type 3 has an invalid length. [ 274.927851][T14982] lo speed is unknown, defaulting to 1000 [ 274.945715][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2303'. [ 274.966955][T14977] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2300'. [ 275.080422][T14977] bond4: entered promiscuous mode [ 275.121558][T14977] bond4: entered allmulticast mode [ 275.147820][T14977] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.890471][T15028] ieee802154 phy1 wpan1: encryption failed: -22 [ 276.164527][T15038] openvswitch: netlink: Flow actions attr not present in new flow. [ 276.744716][T15063] veth0: entered promiscuous mode [ 276.766048][T15063] veth0 (unregistering): left promiscuous mode [ 277.588647][T15118] syzkaller0: entered promiscuous mode [ 277.600843][T15118] syzkaller0: entered allmulticast mode [ 277.676929][T15120] dummy0 (unregistering): left promiscuous mode [ 277.692152][T15121] validate_nla: 4 callbacks suppressed [ 277.692219][T15121] netlink: 'syz.0.2333': attribute type 12 has an invalid length. [ 278.407952][T15155] netlink: 'syz.0.2340': attribute type 32 has an invalid length. [ 278.416372][T15155] __nla_validate_parse: 13 callbacks suppressed [ 278.416390][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2340'. [ 278.622768][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 279.298618][T15132] bridge5: entered allmulticast mode [ 279.368453][T15155] bond9: Setting coupled_control to off (0) [ 279.376441][T15157] hsr0: left promiscuous mode [ 279.391913][T15157] macvtap0: left promiscuous mode [ 279.404389][T15157] bond2: left promiscuous mode [ 279.414710][T15157] veth5: left promiscuous mode [ 279.430037][T15157] bond4: left promiscuous mode [ 279.430894][T15164] netlink: 'syz.2.2343': attribute type 1 has an invalid length. [ 279.453116][ T6032] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.466938][T15164] 8021q: adding VLAN 0 to HW filter on device bond29 [ 279.517042][T15164] vlan4: entered allmulticast mode [ 279.525183][T15164] bond29: entered allmulticast mode [ 279.605297][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2345'. [ 279.647254][T15183] netlink: 'syz.2.2348': attribute type 10 has an invalid length. [ 279.655299][T15183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2348'. [ 279.678026][T15183] team0: Failed to send options change via netlink (err -105) [ 279.685852][ T5940] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.690728][T15183] team0: Port device geneve0 added [ 279.699223][ T1148] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.710556][ T1148] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.719831][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2349'. [ 279.740217][T15186] ip6tnl4: entered promiscuous mode [ 279.747485][T15186] ip6tnl4: entered allmulticast mode [ 279.756454][ T1148] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.779736][ T1148] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.818990][ T30] audit: type=1804 audit(1766805927.498:6): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2351" name="/newroot/477/cgroup.controllers" dev="tmpfs" ino=2459 res=1 errno=0 [ 279.892578][ T30] audit: type=1800 audit(1766805927.498:7): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2351" name="cgroup.controllers" dev="tmpfs" ino=2459 res=0 errno=0 [ 279.925723][ T30] audit: type=1800 audit(1766805927.538:8): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2351" name="cgroup.controllers" dev="tmpfs" ino=2459 res=0 errno=0 [ 281.038047][T15239] gtp1: entered promiscuous mode [ 281.043773][T15239] gtp1: entered allmulticast mode [ 281.057983][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2369'. [ 281.145612][T15247] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2370'. [ 281.293791][T15249] : entered allmulticast mode [ 281.455875][T15258] tipc: Enabled bearer , priority 0 [ 281.470584][T15262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2377'. [ 281.537352][T15261] syzkaller0: entered promiscuous mode [ 281.543222][T15261] syzkaller0: entered allmulticast mode [ 281.890859][T15265] netlink: 'syz.1.2377': attribute type 1 has an invalid length. [ 281.907987][T15266] syzkaller0: entered promiscuous mode [ 281.914589][T15266] syzkaller0: entered allmulticast mode [ 281.921446][T12161] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 58501 - 0 [ 281.947253][T12161] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 281.972812][T12161] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 58501 - 0 [ 281.981778][T12161] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 282.003732][T15285] netlink: 'syz.4.2380': attribute type 1 has an invalid length. [ 282.014968][T15272] tipc: Resetting bearer [ 282.020938][T15285] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2380'. [ 282.051463][T12161] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 58501 - 0 [ 282.074057][T12161] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 282.095329][T12161] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 58501 - 0 [ 282.120909][T12161] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 282.143688][T15286] gretap0: left allmulticast mode [ 282.148742][T15286] gretap0: left promiscuous mode [ 282.160158][T15286] bridge0: port 1(gretap0) entered disabled state [ 282.184147][T15286] bond7: (slave erspan0): Releasing active interface [ 282.207263][T15286] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 282.262239][T15257] tipc: Resetting bearer [ 282.302074][T15257] tipc: Disabling bearer [ 282.313327][T15297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2383'. [ 304.222699][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 308.702685][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 317.025536][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.743652][T15309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2384'. [ 352.817539][T15318] netlink: 'syz.3.2387': attribute type 1 has an invalid length. [ 352.843651][T15319] netlink: 'syz.3.2387': attribute type 1 has an invalid length. [ 352.945796][T15329] netlink: 'syz.3.2392': attribute type 2 has an invalid length. [ 353.063526][T15337] openvswitch: netlink: IP tunnel dst address not specified [ 353.216956][T15346] netlink: 'syz.4.2396': attribute type 1 has an invalid length. [ 353.275019][T15346] 8021q: adding VLAN 0 to HW filter on device bond5 [ 353.308021][T15352] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2398'. [ 353.374109][T15349] netlink: 'syz.4.2396': attribute type 10 has an invalid length. [ 353.382176][T15349] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2396'. [ 353.436341][T15346] bond5: (slave veth12): Enslaving as an active interface with a down link [ 353.459315][T15349] `: Port device geneve0 added [ 353.471885][ T1148] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.487146][ T1148] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.515585][ T1148] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.541992][ T1148] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.831172][T15372] lo speed is unknown, defaulting to 1000 [ 353.954127][T15382] Bluetooth: MGMT ver 1.23 [ 353.959755][T15382] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2406'. [ 354.114601][T15385] lo speed is unknown, defaulting to 1000 [ 354.532972][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 354.770675][T15410] netlink: 'syz.1.2413': attribute type 21 has an invalid length. [ 354.778961][T15410] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2413'. [ 355.135841][T15410] netlink: 'syz.1.2413': attribute type 5 has an invalid length. [ 355.152971][T15410] netlink: 'syz.1.2413': attribute type 6 has an invalid length. [ 355.160784][T15410] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2413'. [ 355.181543][T15427] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2415'. [ 355.248171][T15431] netlink: 203852 bytes leftover after parsing attributes in process `syz.3.2415'. [ 355.327080][T15436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2415'. [ 355.919379][T15445] fbQq: renamed from wg2 (while UP) [ 356.369483][ T3021] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x22 [ 356.459723][T15481] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 357.018972][T15507] lo speed is unknown, defaulting to 1000 [ 357.039174][T15513] netlink: 'syz.3.2434': attribute type 1 has an invalid length. [ 357.205223][T15530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.212504][T15530] IPv6: NLM_F_CREATE should be set when creating new route [ 357.219745][T15530] IPv6: NLM_F_CREATE should be set when creating new route [ 357.364145][T15513] bond13: entered promiscuous mode [ 357.370229][T15513] 8021q: adding VLAN 0 to HW filter on device bond13 [ 357.554571][T15535] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.675400][T15548] netlink: 'syz.2.2440': attribute type 12 has an invalid length. [ 358.212448][T15579] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 358.617114][T15603] lo speed is unknown, defaulting to 1000 [ 358.680770][T15610] __nla_validate_parse: 9 callbacks suppressed [ 358.680788][T15610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2458'. [ 359.112873][T15630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2464'. [ 359.194386][T15635] netlink: 'syz.4.2465': attribute type 2 has an invalid length. [ 359.198316][T15627] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 359.284861][T15639] netlink: 'syz.3.2463': attribute type 21 has an invalid length. [ 359.312661][T15639] IPv6: NLM_F_CREATE should be specified when creating new route [ 359.332597][T15639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.339853][T15639] IPv6: NLM_F_CREATE should be set when creating new route [ 359.347147][T15639] IPv6: NLM_F_CREATE should be set when creating new route [ 359.354396][T15639] IPv6: NLM_F_CREATE should be set when creating new route [ 359.561463][T15636] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2466'. [ 359.617335][T15636] ieee802154 phy1 wpan1: encryption failed: -90 [ 361.263776][T15622] veth7: entered promiscuous mode [ 361.274843][T15632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2465'. [ 361.298422][T15648] tipc: Enabled bearer , priority 0 [ 361.315686][T15649] geneve1: entered promiscuous mode [ 361.320913][T15649] geneve1: entered allmulticast mode [ 361.342296][ T3021] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.363779][T15646] tipc: Disabling bearer [ 361.398966][ T3021] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.406182][T15653] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2468'. [ 361.412537][ T3021] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.459164][ T3021] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.757772][T15667] sch_tbf: peakrate 2 is lower than or equals to rate 3221225473 ! [ 361.956204][T15685] netlink: 732 bytes leftover after parsing attributes in process `syz.2.2477'. [ 361.975101][T15685] netlink: 732 bytes leftover after parsing attributes in process `syz.2.2477'. [ 361.990590][T15681] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2478'. [ 362.215797][ T5839] Bluetooth: hci3: link tx timeout [ 362.221032][ T5839] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 362.636972][T15721] tipc: Enabled bearer , priority 0 [ 362.651841][T15723] syzkaller0: entered promiscuous mode [ 362.658487][T15723] syzkaller0: entered allmulticast mode [ 362.669051][T15716] lo speed is unknown, defaulting to 1000 [ 362.675155][T15721] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 362.691852][T15723] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 362.714991][T15721] tipc: Resetting bearer [ 362.733301][T15720] tipc: Resetting bearer [ 362.757333][T15720] tipc: Disabling bearer [ 362.808148][T15731] netlink: 'syz.3.2490': attribute type 1 has an invalid length. [ 362.808847][T15730] veth1_to_batadv: entered promiscuous mode [ 362.925744][T15731] 8021q: adding VLAN 0 to HW filter on device bond14 [ 363.035157][T15729] veth9: entered promiscuous mode [ 363.068346][T15729] bond14: (slave veth9): Enslaving as an active interface with an up link [ 363.121566][T15730] sit0: entered promiscuous mode [ 363.152210][T15730] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2488'. [ 363.276771][T15750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2494'. [ 363.353587][T15754] team0: Device gtp1 is up. Set it down before adding it as a team port [ 363.416780][T15714] veth1_to_batadv: left promiscuous mode [ 363.547230][T15761] vlan2: entered allmulticast mode [ 363.556276][T15761] bridge0: entered allmulticast mode [ 363.562093][T15761] bridge6: port 1(vlan2) entered blocking state [ 363.569169][T15761] bridge6: port 1(vlan2) entered disabled state [ 363.579129][T15761] vlan2: entered promiscuous mode [ 363.584581][T15761] bridge0: entered promiscuous mode [ 363.597532][T15750] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 364.054845][T15777] lo speed is unknown, defaulting to 1000 [ 364.304186][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 364.363300][T15796] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2502'. [ 364.373765][T15796] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2502'. [ 364.481405][T15799] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2507'. [ 364.516298][T15799] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2507'. [ 365.111731][T15813] netlink: 'syz.3.2509': attribute type 9 has an invalid length. [ 365.158898][T15813] netlink: 'syz.3.2509': attribute type 7 has an invalid length. [ 365.192653][T15813] netlink: 'syz.3.2509': attribute type 8 has an invalid length. [ 365.434436][T15828] netlink: 'syz.4.2514': attribute type 10 has an invalid length. [ 365.463555][T15828] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2514'. [ 365.463844][T15831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2511'. [ 365.494402][T15832] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2510'. [ 365.503857][T15832] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2510'. [ 365.518301][T15832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2510'. [ 365.614538][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2515'. [ 366.387225][T15852] lo speed is unknown, defaulting to 1000 [ 366.903275][T15857] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 366.970554][T15864] lo speed is unknown, defaulting to 1000 [ 367.420611][T15880] dvmrp12: entered allmulticast mode [ 367.428932][T15878] dvmrp12: left allmulticast mode [ 367.875513][T15901] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 367.883931][T15901] netlink: 'syz.0.2534': attribute type 1 has an invalid length. [ 368.222722][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 368.450394][T15915] sctp: [Deprecated]: syz.2.2538 (pid 15915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.450394][T15915] Use struct sctp_sack_info instead [ 368.530044][T15922] netlink: 'syz.0.2541': attribute type 5 has an invalid length. [ 368.955510][T15952] syzkaller0: entered promiscuous mode [ 368.991971][T15952] syzkaller0: entered allmulticast mode [ 369.132021][T15950] delete_channel: no stack [ 369.274627][T15967] syzkaller0: entered promiscuous mode [ 369.280726][T15967] syzkaller0: entered allmulticast mode [ 369.405100][T15973] __nla_validate_parse: 1 callbacks suppressed [ 369.405118][T15973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2551'. [ 369.407685][T15975] lo speed is unknown, defaulting to 1000 [ 369.447331][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2551'. [ 369.516004][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2553'. [ 369.570364][T15983] openvswitch: netlink: Message has 8 unknown bytes. [ 369.820249][T15996] tipc: Enabled bearer , priority 0 [ 369.832305][T15996] syzkaller0: entered promiscuous mode [ 369.839336][T15996] syzkaller0: entered allmulticast mode [ 369.901395][T15996] tipc: Resetting bearer [ 369.924384][T15995] tipc: Resetting bearer [ 369.949310][T15995] tipc: Disabling bearer [ 370.141074][T16010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2559'. [ 370.249728][T16012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2560'. [ 370.313847][T16015] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2561'. [ 370.338178][T16014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2561'. [ 370.350123][T16021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2562'. [ 370.359656][T16014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2561'. [ 370.374925][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 370.536185][T16027] tipc: Enabled bearer , priority 0 [ 370.593048][T16027] syzkaller0: entered promiscuous mode [ 370.598553][T16027] syzkaller0: entered allmulticast mode [ 370.714546][T16027] tipc: Resetting bearer [ 370.770437][T16042] netlink: 'syz.4.2568': attribute type 1 has an invalid length. [ 370.782327][T16027] tipc: Disabling bearer [ 370.983799][T16046] nbd: device at index 64 is going down [ 371.102438][T16062] tipc: Enabled bearer , priority 0 [ 371.128899][T16062] syzkaller0: entered promiscuous mode [ 371.139674][T16062] syzkaller0: entered allmulticast mode [ 371.303859][T16076] openvswitch: netlink: Duplicate key (type 21). [ 371.344148][T16059] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.368731][T16077] tipc: Resetting bearer [ 371.432254][T16059] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.507951][T16059] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.631869][T16088] lo speed is unknown, defaulting to 1000 [ 371.640799][T16059] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.745943][T16098] netlink: 'syz.2.2585': attribute type 13 has an invalid length. [ 371.757621][T16099] netlink: 'syz.4.2584': attribute type 10 has an invalid length. [ 371.770700][T13894] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.778142][T16098] netlink: 'syz.2.2585': attribute type 17 has an invalid length. [ 371.790901][T16099] 8021q: adding VLAN 0 to HW filter on device ` [ 371.793517][T16098] netlink: 'syz.2.2585': attribute type 27 has an invalid length. [ 371.828499][T16099] `: entered promiscuous mode [ 371.860559][T16099] team_slave_0: entered promiscuous mode [ 371.870509][T16099] team_slave_1: entered promiscuous mode [ 371.884317][T16095] netlink: 'syz.4.2584': attribute type 1 has an invalid length. [ 371.895671][T16099] geneve0: entered promiscuous mode [ 371.901658][T16099] `: entered allmulticast mode [ 371.908231][T16099] team_slave_0: entered allmulticast mode [ 371.918712][T16099] team_slave_1: entered allmulticast mode [ 371.925276][T16099] geneve0: entered allmulticast mode [ 371.931729][T16099] bond0: (slave `): Enslaving as an active interface with an up link [ 371.945294][T16058] tipc: Resetting bearer [ 371.993872][T16058] tipc: Disabling bearer [ 372.046660][T13894] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.065967][T13894] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.103097][ T1159] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.191114][T16112] x_tables: duplicate underflow at hook 2 [ 372.447346][T16123] lo speed is unknown, defaulting to 1000 [ 372.503881][T16129] 8021q: adding VLAN 0 to HW filter on device bond28 [ 372.521439][T16129] netlink: 'syz.2.2593': attribute type 3 has an invalid length. [ 373.127309][T16151] syzkaller0: entered promiscuous mode [ 373.142918][T16151] syzkaller0: entered allmulticast mode [ 373.324082][T16168] batadv2: entered promiscuous mode [ 373.342693][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 373.497500][T16173] netlink: 'syz.3.2606': attribute type 7 has an invalid length. [ 373.659678][T16168] lo speed is unknown, defaulting to 1000 [ 373.908238][T16170] tipc: Enabling of bearer rejected, failed to enable media [ 374.056630][ T30] audit: type=1107 audit(1766806021.738:9): pid=16181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ໄwSGL [ 374.056630][ T30] r~!:61 Gnk [ 374.056630][ T30] Om=1kؑt~r ro&Yharh8nwm*x %7傘`/Y GXxZ(5ԻMFy' [ 374.260432][T16189] lo speed is unknown, defaulting to 1000 [ 374.330685][T16194] netlink: 'syz.2.2612': attribute type 22 has an invalid length. [ 374.359516][T16194] netlink: 'syz.2.2612': attribute type 22 has an invalid length. [ 374.435790][T16203] __nla_validate_parse: 17 callbacks suppressed [ 374.435807][T16203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2614'. [ 374.485077][T16207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2615'. [ 374.503175][T16207] pim6reg1: tun_chr_ioctl cmd 21731 [ 375.205819][T16230] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2621'. [ 375.226697][T16230] openvswitch: netlink: Missing key (keys=40, expected=80) [ 375.467883][T16244] batadv_slave_1: entered promiscuous mode [ 375.487017][T16244] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2624'. [ 375.587331][T16250] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.595397][T16241] batadv_slave_1: left promiscuous mode [ 375.637931][T16250] veth16: entered promiscuous mode [ 375.647186][T16250] bond6: (slave veth16): Enslaving as an active interface with a down link [ 375.661144][T16250] bond2: (slave erspan0): Releasing active interface [ 375.668474][T16250] ip6gretap2: entered promiscuous mode [ 375.680456][T16250] bond6: (slave erspan0): making interface the new active one [ 375.689595][T16250] erspan0: entered promiscuous mode [ 375.696725][T16250] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 375.727631][T16250] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 376.077916][T16283] 8021q: adding VLAN 0 to HW filter on device bond7 [ 376.090246][T16283] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2636'. [ 376.103054][T16286] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2637'. [ 376.147524][T16288] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2638'. [ 376.215990][T16291] xt_limit: Overflow, try lower: 271964/0 [ 376.225420][T16291] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2639'. [ 376.337426][T16298] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 376.389645][T16302] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2643'. [ 376.447104][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 376.867576][T16331] smc: net device veth1_to_team applied user defined pnetid S [ 377.118561][T16350] validate_nla: 2 callbacks suppressed [ 377.118579][T16350] netlink: 'syz.3.2655': attribute type 1 has an invalid length. [ 377.511757][T16322] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 377.518122][T16322] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 377.532170][T16322] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 377.538712][T16322] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 377.548877][T16322] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 377.555542][T16322] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 377.565418][T16322] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 377.571321][T16322] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 377.980236][T16358] netlink: 'syz.3.2659': attribute type 15 has an invalid length. [ 378.016299][T16361] netlink: 'syz.2.2660': attribute type 3 has an invalid length. [ 378.121382][T16367] netlink: 'syz.2.2662': attribute type 1 has an invalid length. [ 378.146972][T16367] 8021q: adding VLAN 0 to HW filter on device bond30 [ 378.171607][T16367] 8021q: adding VLAN 0 to HW filter on device bond30 [ 378.178827][T16367] bond30: (slave vxcan3): The slave device specified does not support setting the MAC address [ 378.189835][T16367] bond30: (slave vxcan3): Error -95 calling set_mac_address [ 378.220312][T16369] veth11: entered promiscuous mode [ 378.228751][T16369] bond30: (slave veth11): Enslaving as an active interface with a down link [ 378.475589][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.789596][T13891] erspan0: left promiscuous mode [ 439.905985][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 485.982676][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 501.345679][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.582743][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 535.902900][ T31] INFO: task syz-executor:5836 blocked for more than 143 seconds. [ 535.910724][ T31] Not tainted syzkaller #0 [ 535.916008][ T31] Blocked by coredump. [ 535.920583][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.929386][ T31] task:syz-executor state:D stack:21432 pid:5836 tgid:5836 ppid:1 task_flags:0x40054c flags:0x00080003 [ 535.941558][ T31] Call Trace: [ 535.945045][ T31] [ 535.947963][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 535.952879][ T31] ? __pfx___schedule+0x10/0x10 [ 535.958191][ T31] ? schedule+0x91/0x360 [ 535.962558][ T31] schedule+0x165/0x360 [ 535.966751][ T31] schedule_preempt_disabled+0x13/0x30 [ 535.972214][ T31] __mutex_lock+0x7e6/0x1350 [ 535.977588][ T31] ? __mutex_lock+0x5bb/0x1350 [ 535.982366][ T31] ? rfkill_unregister+0xc8/0x220 [ 535.987745][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 535.993289][ T31] ? __pfx_device_del+0x10/0x10 [ 535.998144][ T31] ? hci_sock_dev_event+0x42d/0x630 [ 536.003706][ T31] ? __cancel_work_sync+0x5c/0x110 [ 536.008832][ T31] rfkill_unregister+0xc8/0x220 [ 536.014082][ T31] hci_unregister_dev+0x374/0x5b0 [ 536.019116][ T31] vhci_release+0x152/0x1a0 [ 536.024022][ T31] ? __pfx_vhci_release+0x10/0x10 [ 536.030374][ T31] __fput+0x44c/0xa70 [ 536.052915][ T31] task_work_run+0x1d4/0x260 [ 536.057624][ T31] ? __pfx_task_work_run+0x10/0x10 [ 536.077250][ T31] ? kmem_cache_free+0x197/0x620 [ 536.082662][ T31] ? do_exit+0x6c0/0x2310 [ 536.087078][ T31] do_exit+0x6c5/0x2310 [ 536.091254][ T31] ? do_raw_spin_lock+0x121/0x290 [ 536.096834][ T31] ? __pfx_do_exit+0x10/0x10 [ 536.101484][ T31] do_group_exit+0x21c/0x2d0 [ 536.106148][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 536.111355][ T31] get_signal+0x1285/0x1340 [ 536.116163][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 536.122272][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 536.128769][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 536.134455][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 536.139725][ T31] ? rcu_is_watching+0x15/0xb0 [ 536.144643][ T31] do_syscall_64+0x2d0/0xf80 [ 536.149250][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.155935][ T31] ? clear_bhb_loop+0x60/0xb0 [ 536.160605][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.166531][ T31] RIP: 0033:0x7f894d385897 [ 536.170949][ T31] RSP: 002b:00007ffe3502bf20 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 536.179536][ T31] RAX: fffffffffffffe00 RBX: 0000000000000729 RCX: 00007f894d385897 [ 536.187781][ T31] RDX: 0000000040000000 RSI: 00007ffe3502bf8c RDI: 00000000ffffffff [ 536.195948][ T31] RBP: 00007ffe3502bf8c R08: 0000000000000000 R09: 0000000000000000 [ 536.203989][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000228 [ 536.211958][ T31] R13: 0000555564232590 R14: 000000000005bf18 R15: 00007ffe3502bfe0 [ 536.220237][ T31] [ 536.223496][ T31] INFO: task kworker/1:4:5889 blocked for more than 143 seconds. [ 536.231205][ T31] Not tainted syzkaller #0 [ 536.236351][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.245311][ T31] task:kworker/1:4 state:D stack:24120 pid:5889 tgid:5889 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 536.257548][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 536.264353][ T31] Call Trace: [ 536.267615][ T31] [ 536.270530][ T31] __schedule+0x14bc/0x5000 [ 536.275532][ T31] ? __pfx___schedule+0x10/0x10 [ 536.280373][ T31] ? schedule+0x91/0x360 [ 536.284643][ T31] schedule+0x165/0x360 [ 536.288780][ T31] schedule_preempt_disabled+0x13/0x30 [ 536.294568][ T31] __mutex_lock+0x7e6/0x1350 [ 536.299162][ T31] ? __mutex_lock+0x5bb/0x1350 [ 536.304218][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 536.310444][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 536.315677][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 536.321384][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 536.327138][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 536.333559][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 536.339261][ T31] process_scheduled_works+0xad1/0x1770 [ 536.344898][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 536.350876][ T31] worker_thread+0x8a0/0xda0 [ 536.355749][ T31] kthread+0x711/0x8a0 [ 536.359812][ T31] ? __pfx_worker_thread+0x10/0x10 [ 536.365098][ T31] ? __pfx_kthread+0x10/0x10 [ 536.369693][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.375244][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 536.380427][ T31] ? __pfx_kthread+0x10/0x10 [ 536.385087][ T31] ret_from_fork+0x599/0xb30 [ 536.389662][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 536.395110][ T31] ? __switch_to_asm+0x39/0x70 [ 536.399857][ T31] ? __switch_to_asm+0x33/0x70 [ 536.404660][ T31] ? __pfx_kthread+0x10/0x10 [ 536.409243][ T31] ret_from_fork_asm+0x1a/0x30 [ 536.414417][ T31] [ 536.417512][ T31] INFO: task syz.4.2645:16311 blocked for more than 143 seconds. [ 536.425681][ T31] Not tainted syzkaller #0 [ 536.430616][ T31] Blocked by coredump. [ 536.435700][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.444628][ T31] task:syz.4.2645 state:D stack:25280 pid:16311 tgid:16305 ppid:5836 task_flags:0x40044c flags:0x00080001 [ 536.456846][ T31] Call Trace: [ 536.460110][ T31] [ 536.463170][ T31] __schedule+0x14bc/0x5000 [ 536.467672][ T31] ? __pfx___schedule+0x10/0x10 [ 536.472941][ T31] ? schedule+0x91/0x360 [ 536.477229][ T31] schedule+0x165/0x360 [ 536.481386][ T31] schedule_preempt_disabled+0x13/0x30 [ 536.487074][ T31] __mutex_lock+0x7e6/0x1350 [ 536.491652][ T31] ? __mutex_lock+0x5bb/0x1350 [ 536.496558][ T31] ? rfkill_unregister+0xc8/0x220 [ 536.501568][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 536.506635][ T31] ? __pfx_device_del+0x10/0x10 [ 536.511466][ T31] ? __cancel_work_sync+0x5c/0x110 [ 536.516845][ T31] rfkill_unregister+0xc8/0x220 [ 536.521681][ T31] nfc_unregister_device+0x96/0x300 [ 536.526974][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 536.532992][ T31] virtual_ncidev_close+0x56/0x90 [ 536.538023][ T31] __fput+0x44c/0xa70 [ 536.541991][ T31] task_work_run+0x1d4/0x260 [ 536.547185][ T31] ? __pfx_task_work_run+0x10/0x10 [ 536.552306][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 536.557847][ T31] do_exit+0x6c5/0x2310 [ 536.562018][ T31] ? do_raw_spin_lock+0x121/0x290 [ 536.567090][ T31] ? __pfx_do_exit+0x10/0x10 [ 536.571690][ T31] do_group_exit+0x21c/0x2d0 [ 536.576611][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 536.581795][ T31] get_signal+0x1285/0x1340 [ 536.586340][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 536.591870][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 536.598303][ T31] ? do_sys_openat2+0x15a/0x200 [ 536.603328][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 536.608770][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 536.614218][ T31] ? rcu_is_watching+0x15/0xb0 [ 536.618965][ T31] do_syscall_64+0x2d0/0xf80 [ 536.623856][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.629920][ T31] ? clear_bhb_loop+0x60/0xb0 [ 536.634909][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.640800][ T31] RIP: 0033:0x7f894d38f749 [ 536.645298][ T31] RSP: 002b:00007f894e198038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 536.653937][ T31] RAX: 0000000000000006 RBX: 00007f894d5e6180 RCX: 00007f894d38f749 [ 536.661892][ T31] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 536.670019][ T31] RBP: 00007f894d413f91 R08: 0000000000000000 R09: 0000000000000000 [ 536.678177][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.686307][ T31] R13: 00007f894d5e6218 R14: 00007f894d5e6180 R15: 00007ffe3502bbc8 [ 536.694610][ T31] [ 536.697627][ T31] INFO: task syz.0.2649:16322 blocked for more than 144 seconds. [ 536.707773][ T31] Not tainted syzkaller #0 [ 536.713063][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.721721][ T31] task:syz.0.2649 state:D stack:25408 pid:16322 tgid:16321 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 536.733980][ T31] Call Trace: [ 536.737246][ T31] [ 536.740156][ T31] __schedule+0x14bc/0x5000 [ 536.744834][ T31] ? __pfx___schedule+0x10/0x10 [ 536.749673][ T31] ? schedule+0x91/0x360 [ 536.754132][ T31] schedule+0x165/0x360 [ 536.758270][ T31] schedule_preempt_disabled+0x13/0x30 [ 536.764077][ T31] __mutex_lock+0x7e6/0x1350 [ 536.768676][ T31] ? __mutex_lock+0x5bb/0x1350 [ 536.773690][ T31] ? nfc_dev_down+0x3b/0x290 [ 536.778262][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 536.783328][ T31] ? do_raw_spin_lock+0x121/0x290 [ 536.788343][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 536.794631][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 536.799812][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 536.805573][ T31] nfc_dev_down+0x3b/0x290 [ 536.809966][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 536.816074][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 536.821188][ T31] rfkill_set_block+0x1d2/0x440 [ 536.826199][ T31] rfkill_fop_write+0x44b/0x570 [ 536.831030][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 536.836538][ T31] ? security_kernfs_init_security+0x220/0x290 [ 536.842747][ T31] ? rw_verify_area+0x255/0x4d0 [ 536.847592][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 536.853246][ T31] vfs_write+0x27e/0xb30 [ 536.857474][ T31] ? __pfx_vfs_write+0x10/0x10 [ 536.862211][ T31] ? __fget_files+0x2a/0x420 [ 536.866897][ T31] ? __fget_files+0x2a/0x420 [ 536.871473][ T31] ? __fget_files+0x3a0/0x420 [ 536.876286][ T31] ? __fget_files+0x2a/0x420 [ 536.880861][ T31] ksys_write+0x145/0x250 [ 536.885347][ T31] ? __pfx_ksys_write+0x10/0x10 [ 536.890207][ T31] ? do_syscall_64+0xbe/0xf80 [ 536.895040][ T31] do_syscall_64+0xfa/0xf80 [ 536.899525][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.905709][ T31] ? clear_bhb_loop+0x60/0xb0 [ 536.910370][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.916538][ T31] RIP: 0033:0x7f563078f749 [ 536.920940][ T31] RSP: 002b:00007f56316fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 536.929451][ T31] RAX: ffffffffffffffda RBX: 00007f56309e5fa0 RCX: 00007f563078f749 [ 536.937709][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 536.945847][ T31] RBP: 00007f5630813f91 R08: 0000000000000000 R09: 0000000000000000 [ 536.954067][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.962022][ T31] R13: 00007f56309e6038 R14: 00007f56309e5fa0 R15: 00007ffec2ef6738 [ 536.970106][ T31] [ 536.973435][ T31] INFO: task syz-executor:16329 blocked for more than 144 seconds. [ 536.981316][ T31] Not tainted syzkaller #0 [ 536.986366][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 536.995211][ T31] task:syz-executor state:D stack:27224 pid:16329 tgid:16329 ppid:1 task_flags:0x400040 flags:0x00080000 [ 537.007306][ T31] Call Trace: [ 537.010570][ T31] [ 537.013736][ T31] __schedule+0x14bc/0x5000 [ 537.018236][ T31] ? __pfx___schedule+0x10/0x10 [ 537.023264][ T31] ? schedule+0x91/0x360 [ 537.027489][ T31] schedule+0x165/0x360 [ 537.031623][ T31] schedule_preempt_disabled+0x13/0x30 [ 537.037426][ T31] __mutex_lock+0x7e6/0x1350 [ 537.042021][ T31] ? __mutex_lock+0x5bb/0x1350 [ 537.046811][ T31] ? rfkill_register+0x37/0x8e0 [ 537.051640][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 537.056854][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 537.062125][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 537.067663][ T31] ? device_initialize+0x24b/0x440 [ 537.073088][ T31] rfkill_register+0x37/0x8e0 [ 537.077797][ T31] hci_register_dev+0x3f2/0x8b0 [ 537.083194][ T31] vhci_create_device+0x39c/0x650 [ 537.088244][ T31] vhci_write+0x3ce/0x4a0 [ 537.093053][ T31] vfs_write+0x5c9/0xb30 [ 537.097368][ T31] ? __pfx_vhci_write+0x10/0x10 [ 537.102203][ T31] ? __pfx_vfs_write+0x10/0x10 [ 537.107373][ T31] ksys_write+0x145/0x250 [ 537.111708][ T31] ? __pfx_ksys_write+0x10/0x10 [ 537.116969][ T31] ? do_syscall_64+0xbe/0xf80 [ 537.121683][ T31] do_syscall_64+0xfa/0xf80 [ 537.126256][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.132318][ T31] ? clear_bhb_loop+0x60/0xb0 [ 537.137033][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.143282][ T31] RIP: 0033:0x7f9cc8d8e1c0 [ 537.147683][ T31] RSP: 002b:00007fff29f48bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 537.156167][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f9cc8d8e1c0 [ 537.164184][ T31] RDX: 0000000000000002 RSI: 00007fff29f48bea RDI: 00000000000000ca [ 537.172135][ T31] RBP: 00007f9cc8fe67b8 R08: 0000000000000000 R09: 00007f9cc9b1d6c0 [ 537.180260][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 537.188560][ T31] R13: 0000000000000003 R14: 00007fff29f48f38 R15: 0000000000000000 [ 537.196656][ T31] [ 537.199680][ T31] INFO: task syz.3.2659:16358 blocked for more than 144 seconds. [ 537.207902][ T31] Not tainted syzkaller #0 [ 537.213056][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 537.221713][ T31] task:syz.3.2659 state:D stack:23576 pid:16358 tgid:16357 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 537.234106][ T31] Call Trace: [ 537.237392][ T31] [ 537.240309][ T31] __schedule+0x14bc/0x5000 [ 537.244871][ T31] ? __pfx___schedule+0x10/0x10 [ 537.249709][ T31] ? schedule+0x91/0x360 [ 537.253996][ T31] schedule+0x165/0x360 [ 537.258131][ T31] schedule_preempt_disabled+0x13/0x30 [ 537.263949][ T31] __mutex_lock+0x7e6/0x1350 [ 537.268543][ T31] ? rcu_is_watching+0x15/0xb0 [ 537.273364][ T31] ? __mutex_lock+0x5bb/0x1350 [ 537.278128][ T31] ? rfkill_register+0x37/0x8e0 [ 537.283028][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 537.288028][ T31] ? netdev_run_todo+0xe1b/0xea0 [ 537.293117][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 537.298297][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 537.303611][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 537.309231][ T31] rfkill_register+0x37/0x8e0 [ 537.313982][ T31] wiphy_register+0x246a/0x2d20 [ 537.318847][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 537.324233][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 537.329527][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 537.334756][ T31] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 537.340830][ T31] ieee80211_register_hw+0x34a7/0x4110 [ 537.346523][ T31] ? ieee80211_register_hw+0x13f1/0x4110 [ 537.352145][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 537.358110][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 537.364046][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 537.369924][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 537.376322][ T31] ? __hrtimer_setup+0x181/0x200 [ 537.381252][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 537.387234][ T31] mac80211_hwsim_new_radio+0x2f76/0x5320 [ 537.393316][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 537.399407][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 537.405050][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 537.410151][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 537.415397][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 537.421106][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.426678][ T31] ? rcu_is_watching+0x15/0xb0 [ 537.431584][ T31] ? __nla_parse+0x40/0x60 [ 537.436032][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 537.442346][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 537.448137][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 537.454237][ T31] ? bpf_lsm_capable+0x9/0x20 [ 537.458898][ T31] ? security_capable+0x7e/0x2e0 [ 537.463853][ T31] genl_rcv_msg+0x60e/0x790 [ 537.468338][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.473498][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.479032][ T31] netlink_rcv_skb+0x208/0x470 [ 537.483817][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.488821][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.494198][ T31] ? down_read+0x274/0x2e0 [ 537.498616][ T31] ? genl_rcv+0xd/0x40 [ 537.502989][ T31] genl_rcv+0x28/0x40 [ 537.506975][ T31] netlink_unicast+0x82f/0x9e0 [ 537.511741][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 537.517048][ T31] ? netlink_sendmsg+0x642/0xb30 [ 537.521964][ T31] ? skb_put+0x11b/0x210 [ 537.526230][ T31] netlink_sendmsg+0x805/0xb30 [ 537.530980][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.536405][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 537.541326][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.546623][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.551890][ T31] __sock_sendmsg+0x21c/0x270 [ 537.556589][ T31] ____sys_sendmsg+0x505/0x820 [ 537.561336][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.566752][ T31] ? import_iovec+0x74/0xa0 [ 537.571240][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 537.575967][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.581162][ T31] ? futex_wake+0x4b2/0x560 [ 537.589768][ T31] ? __fget_files+0x2a/0x420 [ 537.594526][ T31] ? __fget_files+0x3a0/0x420 [ 537.599197][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 537.604144][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.609592][ T31] ? do_syscall_64+0xbe/0xf80 [ 537.614470][ T31] do_syscall_64+0xfa/0xf80 [ 537.618977][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.625183][ T31] ? clear_bhb_loop+0x60/0xb0 [ 537.629853][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.635769][ T31] RIP: 0033:0x7fb1c2f8f749 [ 537.640162][ T31] RSP: 002b:00007fb1c3e0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.648619][ T31] RAX: ffffffffffffffda RBX: 00007fb1c31e5fa0 RCX: 00007fb1c2f8f749 [ 537.656737][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 537.664964][ T31] RBP: 00007fb1c3013f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.672968][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.680918][ T31] R13: 00007fb1c31e6038 R14: 00007fb1c31e5fa0 R15: 00007ffd77729498 [ 537.689037][ T31] [ 537.692049][ T31] INFO: task syz.2.2662:16369 blocked for more than 145 seconds. [ 537.699823][ T31] Not tainted syzkaller #0 [ 537.704769][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 537.713588][ T31] task:syz.2.2662 state:D stack:20960 pid:16369 tgid:16366 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 537.725570][ T31] Call Trace: [ 537.728846][ T31] [ 537.731762][ T31] __schedule+0x14bc/0x5000 [ 537.736304][ T31] ? __pfx___schedule+0x10/0x10 [ 537.741139][ T31] ? schedule+0x91/0x360 [ 537.746060][ T31] schedule+0x165/0x360 [ 537.750226][ T31] schedule_preempt_disabled+0x13/0x30 [ 537.755752][ T31] __mutex_lock+0x7e6/0x1350 [ 537.760330][ T31] ? __mutex_lock+0x5bb/0x1350 [ 537.765113][ T31] ? genl_rcv_msg+0x10d/0x790 [ 537.769771][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 537.774939][ T31] ? stack_trace_save+0x9c/0xe0 [ 537.779782][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 537.784743][ T31] ? radix_tree_lookup+0x240/0x290 [ 537.789839][ T31] genl_rcv_msg+0x10d/0x790 [ 537.794373][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.799375][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 537.804467][ T31] netlink_rcv_skb+0x208/0x470 [ 537.809217][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.814287][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.819566][ T31] ? down_read+0x274/0x2e0 [ 537.824096][ T31] ? genl_rcv+0xd/0x40 [ 537.828163][ T31] genl_rcv+0x28/0x40 [ 537.832121][ T31] netlink_unicast+0x82f/0x9e0 [ 537.837036][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 537.842304][ T31] ? netlink_sendmsg+0x642/0xb30 [ 537.847280][ T31] ? skb_put+0x11b/0x210 [ 537.851506][ T31] netlink_sendmsg+0x805/0xb30 [ 537.856347][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.861631][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 537.866729][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.871994][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.877309][ T31] __sock_sendmsg+0x21c/0x270 [ 537.881971][ T31] __sys_sendto+0x3bd/0x520 [ 537.886515][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 537.891541][ T31] ? exc_page_fault+0x82/0x100 [ 537.896465][ T31] __x64_sys_sendto+0xde/0x100 [ 537.901212][ T31] do_syscall_64+0xfa/0xf80 [ 537.905901][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.911965][ T31] ? clear_bhb_loop+0x60/0xb0 [ 537.916706][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.922825][ T31] RIP: 0033:0x7f2efb7915dc [ 537.927223][ T31] RSP: 002b:00007f2ef99cbe60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 537.935669][ T31] RAX: ffffffffffffffda RBX: 00007f2ef99cbfa0 RCX: 00007f2efb7915dc [ 537.943678][ T31] RDX: 0000000000000020 RSI: 00007f2ef99cbff0 RDI: 0000000000000009 [ 537.951629][ T31] RBP: 0000000000000000 R08: 00007f2ef99cbeb4 R09: 000000000000000c [ 537.959746][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 537.967750][ T31] R13: 00007f2ef99cbf08 R14: 00007f2ef99cbff0 R15: 0000000000000000 [ 537.975772][ T31] [ 537.978788][ T31] INFO: task syz-executor:16373 blocked for more than 145 seconds. [ 537.987015][ T31] Not tainted syzkaller #0 [ 537.991928][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.000667][ T31] task:syz-executor state:D stack:27224 pid:16373 tgid:16373 ppid:1 task_flags:0x400040 flags:0x00080000 [ 538.012924][ T31] Call Trace: [ 538.016205][ T31] [ 538.019140][ T31] __schedule+0x14bc/0x5000 [ 538.023705][ T31] ? __pfx___schedule+0x10/0x10 [ 538.028541][ T31] ? schedule+0x91/0x360 [ 538.032858][ T31] schedule+0x165/0x360 [ 538.036997][ T31] schedule_preempt_disabled+0x13/0x30 [ 538.042429][ T31] __mutex_lock+0x7e6/0x1350 [ 538.047092][ T31] ? __mutex_lock+0x5bb/0x1350 [ 538.051836][ T31] ? rfkill_register+0x37/0x8e0 [ 538.056857][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 538.061860][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 538.067354][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 538.072834][ T31] ? device_initialize+0x24b/0x440 [ 538.077939][ T31] rfkill_register+0x37/0x8e0 [ 538.082939][ T31] hci_register_dev+0x3f2/0x8b0 [ 538.087799][ T31] vhci_create_device+0x39c/0x650 [ 538.092909][ T31] vhci_write+0x3ce/0x4a0 [ 538.097242][ T31] vfs_write+0x5c9/0xb30 [ 538.101470][ T31] ? __pfx_vhci_write+0x10/0x10 [ 538.106385][ T31] ? __pfx_vfs_write+0x10/0x10 [ 538.111141][ T31] ksys_write+0x145/0x250 [ 538.115639][ T31] ? __pfx_ksys_write+0x10/0x10 [ 538.120471][ T31] ? do_syscall_64+0xbe/0xf80 [ 538.125185][ T31] do_syscall_64+0xfa/0xf80 [ 538.129667][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.135759][ T31] ? clear_bhb_loop+0x60/0xb0 [ 538.140418][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.146844][ T31] RIP: 0033:0x7f32ff78e1c0 [ 538.151259][ T31] RSP: 002b:00007ffd788c6a88 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 538.159701][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f32ff78e1c0 [ 538.167703][ T31] RDX: 0000000000000002 RSI: 00007ffd788c6a9a RDI: 00000000000000ca [ 538.175972][ T31] RBP: 00007f32ff9e67b8 R08: 0000000000000000 R09: 00007f330051d6c0 [ 538.183991][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 538.191940][ T31] R13: 0000000000000003 R14: 00007ffd788c6de8 R15: 0000000000000000 [ 538.199978][ T31] [ 538.203282][ T31] INFO: task syz-executor:16374 blocked for more than 145 seconds. [ 538.211249][ T31] Not tainted syzkaller #0 [ 538.216344][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 538.225044][ T31] task:syz-executor state:D stack:27160 pid:16374 tgid:16374 ppid:1 task_flags:0x400040 flags:0x00080000 [ 538.237116][ T31] Call Trace: [ 538.240377][ T31] [ 538.243334][ T31] __schedule+0x14bc/0x5000 [ 538.247835][ T31] ? __pfx___schedule+0x10/0x10 [ 538.252856][ T31] ? schedule+0x91/0x360 [ 538.257096][ T31] schedule+0x165/0x360 [ 538.261232][ T31] schedule_preempt_disabled+0x13/0x30 [ 538.266817][ T31] __mutex_lock+0x7e6/0x1350 [ 538.271390][ T31] ? __mutex_lock+0x5bb/0x1350 [ 538.276164][ T31] ? rfkill_register+0x37/0x8e0 [ 538.280995][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 538.286032][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 538.291303][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 538.296814][ T31] ? device_initialize+0x24b/0x440 [ 538.301906][ T31] rfkill_register+0x37/0x8e0 [ 538.306616][ T31] hci_register_dev+0x3f2/0x8b0 [ 538.311455][ T31] vhci_create_device+0x39c/0x650 [ 538.316509][ T31] vhci_write+0x3ce/0x4a0 [ 538.320826][ T31] vfs_write+0x5c9/0xb30 [ 538.325364][ T31] ? __pfx_vhci_write+0x10/0x10 [ 538.330205][ T31] ? __pfx_vfs_write+0x10/0x10 [ 538.334985][ T31] ksys_write+0x145/0x250 [ 538.339297][ T31] ? __pfx_ksys_write+0x10/0x10 [ 538.344158][ T31] ? do_syscall_64+0xbe/0xf80 [ 538.348813][ T31] do_syscall_64+0xfa/0xf80 [ 538.353607][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.359668][ T31] ? clear_bhb_loop+0x60/0xb0 [ 538.364368][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.370239][ T31] RIP: 0033:0x7fd9bc58e1c0 [ 538.374668][ T31] RSP: 002b:00007ffd28533548 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 538.383365][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fd9bc58e1c0 [ 538.391323][ T31] RDX: 0000000000000002 RSI: 00007ffd2853355a RDI: 00000000000000ca [ 538.399312][ T31] RBP: 00007fd9bc7e67b8 R08: 0000000000000000 R09: 00007fd9bd31d6c0 [ 538.407327][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 538.415472][ T31] R13: 0000000000000003 R14: 00007ffd285338a8 R15: 0000000000000000 [ 538.423495][ T31] [ 538.426517][ T31] [ 538.426517][ T31] Showing all locks held in the system: [ 538.434409][ T31] 1 lock held by khungtaskd/31: [ 538.439238][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 538.449261][ T31] 2 locks held by getty/5586: [ 538.453948][ T31] #0: ffff8880352b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 538.463906][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 538.474219][ T31] 1 lock held by syz-executor/5836: [ 538.479399][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 538.489530][ T31] 3 locks held by kworker/1:4/5889: [ 538.494737][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 538.505843][ T31] #1: ffffc900044cfb80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 538.519348][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 538.530757][ T31] 2 locks held by syz.1.2471/15661: [ 538.536116][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 538.544356][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 538.554430][ T31] 2 locks held by syz.4.2645/16311: [ 538.559605][ T31] #0: ffff88804918b100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 538.569496][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 538.579626][ T31] 2 locks held by syz.0.2649/16322: [ 538.584859][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 538.595108][ T31] #1: ffff88804918b100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 538.604103][ T31] 2 locks held by syz-executor/16329: [ 538.609450][ T31] #0: ffff888027802118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.619472][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.632422][ T31] 3 locks held by syz.3.2659/16358: [ 538.637767][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 538.646253][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 538.655417][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.665381][ T31] 2 locks held by syz.2.2662/16369: [ 538.670556][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 538.678762][ T31] #1: ffffffff8f379708 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 538.687875][ T31] 2 locks held by syz-executor/16373: [ 538.693279][ T31] #0: ffff88804ebed918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.703463][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.713594][ T31] 2 locks held by syz-executor/16374: [ 538.718941][ T31] #0: ffff88804ebe8118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.728968][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.738910][ T31] 2 locks held by syz-executor/16377: [ 538.744432][ T31] #0: ffff88805c0ab918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.754509][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.764567][ T31] 2 locks held by syz-executor/16378: [ 538.769931][ T31] #0: ffff88805c0ab118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.780103][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.790228][ T31] 2 locks held by syz-executor/16380: [ 538.795910][ T31] #0: ffff888146aff118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.806130][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.816107][ T31] 2 locks held by syz-executor/16383: [ 538.821470][ T31] #0: ffff888032f76118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.831503][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.841570][ T31] 2 locks held by syz-executor/16384: [ 538.846969][ T31] #0: ffff888033459118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.857007][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.867078][ T31] 2 locks held by syz-executor/16386: [ 538.872422][ T31] #0: ffff88814d6ca918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.882633][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.892935][ T31] 2 locks held by syz-executor/16388: [ 538.898298][ T31] #0: ffff88814d6cd118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.908367][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.918307][ T31] 2 locks held by syz-executor/16390: [ 538.924004][ T31] #0: ffff8880339a2118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.934080][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.944034][ T31] 2 locks held by syz-executor/16393: [ 538.949381][ T31] #0: ffff88805a43f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.959538][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.969497][ T31] 2 locks held by syz-executor/16394: [ 538.974902][ T31] #0: ffff8880587cb118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 538.985069][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 538.995023][ T31] 2 locks held by syz-executor/16396: [ 539.000369][ T31] #0: ffff888029872118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 539.010415][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 539.020487][ T31] 2 locks held by syz-executor/16398: [ 539.026043][ T31] #0: ffff8880587ce918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 539.036151][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 539.046253][ T31] [ 539.048569][ T31] ============================================= [ 539.048569][ T31] [ 539.057008][ T31] NMI backtrace for cpu 0 [ 539.057025][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 539.057036][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.057042][ T31] Call Trace: [ 539.057047][ T31] [ 539.057053][ T31] dump_stack_lvl+0x189/0x250 [ 539.057070][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.057082][ T31] ? __pfx__printk+0x10/0x10 [ 539.057102][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 539.057117][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 539.057130][ T31] ? __pfx__printk+0x10/0x10 [ 539.057145][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 539.057161][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 539.057175][ T31] sys_info+0x135/0x170 [ 539.057190][ T31] watchdog+0xf95/0xfe0 [ 539.057206][ T31] ? watchdog+0x20a/0xfe0 [ 539.057221][ T31] kthread+0x711/0x8a0 [ 539.057235][ T31] ? __pfx_watchdog+0x10/0x10 [ 539.057247][ T31] ? __pfx_kthread+0x10/0x10 [ 539.057259][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.057273][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 539.057282][ T31] ? __pfx_kthread+0x10/0x10 [ 539.057294][ T31] ret_from_fork+0x599/0xb30 [ 539.057305][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 539.057319][ T31] ? __switch_to_asm+0x39/0x70 [ 539.057330][ T31] ? __switch_to_asm+0x33/0x70 [ 539.057341][ T31] ? __pfx_kthread+0x10/0x10 [ 539.057353][ T31] ret_from_fork_asm+0x1a/0x30 [ 539.057372][ T31] [ 539.057376][ T31] Sending NMI from CPU 0 to CPUs 1: [ 539.206693][ C1] NMI backtrace for cpu 1 [ 539.206708][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 539.206725][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.206735][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 539.206756][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 90 0c 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 539.206768][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 539.206782][ C1] RAX: 98c2f74fbc557200 RBX: ffffffff81978fda RCX: 98c2f74fbc557200 [ 539.206794][ C1] RDX: 0000000000000001 RSI: ffffffff8d7925e3 RDI: ffffffff8bc08360 [ 539.206804][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 539.206816][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822070 [ 539.206827][ C1] R13: 1ffff11003954b70 R14: 0000000000000001 R15: 0000000000000001 [ 539.206837][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 539.206849][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 539.206860][ C1] CR2: 0000561da6d59000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 539.206874][ C1] Call Trace: [ 539.206881][ C1] [ 539.206886][ C1] default_idle+0x13/0x20 [ 539.206903][ C1] default_idle_call+0x73/0xb0 [ 539.206921][ C1] do_idle+0x1ea/0x520 [ 539.206936][ C1] ? irqentry_exit+0x5ba/0x660 [ 539.206954][ C1] ? __pfx_do_idle+0x10/0x10 [ 539.206978][ C1] cpu_startup_entry+0x44/0x60 [ 539.206993][ C1] start_secondary+0x101/0x110 [ 539.207014][ C1] common_startup_64+0x13e/0x147 [ 539.207040][ C1] [ 539.373240][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 539.380082][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 539.389171][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.399217][ T31] Call Trace: [ 539.402489][ T31] [ 539.405417][ T31] dump_stack_lvl+0x99/0x250 [ 539.410006][ T31] ? __asan_memcpy+0x40/0x70 [ 539.414590][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.419776][ T31] ? __pfx__printk+0x10/0x10 [ 539.424361][ T31] vpanic+0x237/0x6d0 [ 539.428334][ T31] ? __pfx_vpanic+0x10/0x10 [ 539.432832][ T31] ? preempt_schedule_common+0x83/0xd0 [ 539.438294][ T31] panic+0xb9/0xc0 [ 539.442005][ T31] ? __pfx_panic+0x10/0x10 [ 539.446416][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 539.451780][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 539.457928][ T31] watchdog+0xfdf/0xfe0 [ 539.462076][ T31] ? watchdog+0x20a/0xfe0 [ 539.466401][ T31] kthread+0x711/0x8a0 [ 539.470460][ T31] ? __pfx_watchdog+0x10/0x10 [ 539.475128][ T31] ? __pfx_kthread+0x10/0x10 [ 539.479703][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 539.484887][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 539.490065][ T31] ? __pfx_kthread+0x10/0x10 [ 539.494641][ T31] ret_from_fork+0x599/0xb30 [ 539.499230][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 539.504344][ T31] ? __switch_to_asm+0x39/0x70 [ 539.509097][ T31] ? __switch_to_asm+0x33/0x70 [ 539.513853][ T31] ? __pfx_kthread+0x10/0x10 [ 539.518433][ T31] ret_from_fork_asm+0x1a/0x30 [ 539.523196][ T31] [ 539.526554][ T31] Kernel Offset: disabled [ 539.530862][ T31] Rebooting in 86400 seconds..