last executing test programs: 20.887446012s ago: executing program 4 (id=4573): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb83943667020d3df6845464707ccd7104dc6a994cd42dbeedd2f8cfa86ebba9b00b8aeb8021638931ac11b11721147fe993f32534b3dd", 0x46}, {&(0x7f0000000200)="ca8a42ca0c7565f05d5a7908d131dca97c57014d6e19176bea715b6ec66271c45cd540238c3c127a3666c0939aff745a4cc444292ced2d4ca775981e558cd320b6511ac7a42a1671e545225263ffc3c5c0dc0ec073e713fa2c", 0x59}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000080)="3b2f42080c8d49d7238ba3cf091b433f28cd60c2c3e3917151156fbf2711", 0xfffffc43}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000280)="6b48097632ab2cafe08f68909786d76d1be8d7363ac13a68e892c85470c382d6c2be0da17364752643883792b50b95ff3461cadb5ff282471e30d4fab85909d7c1b04a28c26e6256ff6c75ca8d5200d239f187830c755a267aaf7af49921be2f882f26d9f74c850b65d6ef250bca001e70a2cd8d523c0b71a7377d598b494cccd68e3d4bf378bfd9df0d8ea28923b63184449c78031d6c736e638fda62ad7971b583", 0xa2}, {&(0x7f0000000340)="ef648434b9034870d043039407c3b1b07a75ee0c550bd64654c7ada40f6f6ef6a5c5fb8345f32b0f549a8fbf85264caff0b839dd748fec4b052c4f0d152c80c700f4b86de88dbd046b838f2b659c890e0ab56fc3a92f74e42caf85cd7267fabeef72599a6b73c56939d9c5c1116d39ce0df9ee4b355f89b9fc2b651d28e2c961aa12e584ee3b", 0x86}, {&(0x7f0000000400)="03802e32b59b4735cde66da12d219704f9cef1779ad81d7e8d8c6ac93f0f9b1a42c0feb9fa792769f390914ff6423a6c2fbca23a925d3529297d8ef23611cd1abaeb17ad9edbec0a8e62da3d21578d2f0197bfdd390f53eba02169162b4c0224b679c5e15f9ccbdc15ca8f05d54d6c73cf7d40a11e3156b3feeea4a98c7a199b2b14ca13920d7b0109372c18ffaf4d894cea0cdec047fa82f801acc706a02a57fc7c468a2cd9847cdee0875e59446f1fe4", 0xb1}], 0x8, 0x0, 0x0, 0x8800}], 0x1, 0x20004014) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002580), 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x8}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8}}, @RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x30}}, 0x0) 20.639867966s ago: executing program 0 (id=4577): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x0, @local, 0x3ff}}, 0x64bfe218, 0xbedf, 0x6, 0x10000, 0x34872cd6}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r0, 0xa679f4a, 0x7, 0x7}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e0001000000000000000000070000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x30}}, 0x0) 20.638449487s ago: executing program 4 (id=4579): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x1084, 0x12, 0x1, 0x70bd27, 0x25dfdbfe, {0x6, 0x5, 0x81, 0x9, {0x4e21, 0x4e24, [0x3ff, 0x200, 0x8, 0x80000000], [0x10, 0x3, 0x0, 0x4], r2, [0x6ba, 0x4]}, 0x4, 0x200}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "fbc61df6c2caf7d86a39a734bbe029f9ddda3e417e6628d7dc1c039b4a73f1dc4f6e04669a8b75d0db571cfe1c17576e"}]}, 0x1084}, 0x1, 0x0, 0x0, 0x84}, 0x20040000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) 20.51746013s ago: executing program 0 (id=4581): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @remote}, {0x306, @broadcast}, 0x0, {0x2, 0x4e20, @remote}, 'ip6gretap0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0xb, 0x5, 0x5, 0x6, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_ident={0x2, 0xa, 0xf2a, 0x0, 0xc}]}, 0x30}}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) writev(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)="fb69b95899d591e18110712225fd770b38086927eacf9a7963d8dbc6cd50a466f38f00ce1a19377a229b4f69b4397e0c3ed293e9970b211fa2871802085f71cb91d5d08d3a02a6dc52a03c6f55335586de69be3dcdd073d890492dd517bfab7d28f7bb493ae57946470cf455e0cb0cc128e7afd30e25b1ee314237bd0e496c64d5786c0b62d5ebb447aa16f9a070d07557c44eef3731b34a", 0x98}, {&(0x7f0000000380)="1b1ea715340acd543445887f527f58cec2e8c8d267b38ecdba0bbc397f1aebc2610235d8289b41fe7b0e1ac9c1d9c4c1c87ed725f2592dab064bb85735b61340d1de52a2b88b44234a7513c5ae26df6f1b09cbc0570d599e911877bff08fd3465903064044c887ab4adc79cfdae111", 0x6f}, {&(0x7f0000000400)="2655ec5687cb12401449d8448af084f5d5a1614b167f5762a9a651f74c84ef5f958c3bfabd249485a977e7514ca7dc098c4349f6cca0b9038c3e87896f2528fd145f3429c3725d040ee328d2cfdd82ca9cdc03e004c64f30267c4341eeeb3b52e0be6159bc21d96cc4adab99f34437f88b7bdaf7ccd3e5e9397e9a44ca760bc73ca2e4330ef5d7e8aee24ea085dbc249398cbc3b1f0a23075c9e9156c27d8fd5bc5ebd8ef682345d62babafd643ab66c", 0xb0}, {&(0x7f00000004c0)="7b01e81826e2844fb135ef421e83197a6fe93c0f27ff9c3210b632c72555acba8f1f51686397f89df5c5f4189efd0a403e6bb52979892af6e165f786930d92d1bac705cc73b63189c3eb9c16109955ac0df6f0c51a7ec5b0bc4ba5be089252bf5932", 0x62}, {&(0x7f0000000540)="b2d303585bb6fb09bb11c48e9355130c3cf659778b845663617ccfd69e866c047fe3e9bfd0710bbb6bd88a94fe969a3766a0eb55d933a40cb8ac5b9ee21c0c3296f0653844f2028042a7150c4a2cb01fca9fdf1c1db4b98cf747b2f05a8a3cf3a33ed046e95df8707698baac8ab56af00a5920225dcd7f6a380733b9049c2fda8f8a35efddf530f69fbf6a25fa5dd8f37b352fda8498944e803a87b4493fbc19d7a902c7f1ba1a8179226e4a2ad5f63dd7d0b692e9f3fe8b8b", 0xb9}], 0x5) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000700)={{r5}, 0x0, 0x10, @inherit={0x68, &(0x7f0000000680)={0x1, 0x4, 0x9, 0x7, {0x0, 0xffffffffffffffaa, 0xd71, 0x4, 0xf7}, [0x4, 0x3, 0xfffffffffffffffa, 0x2]}}, @name="09b2decb27d2eb1d39e6a78d2123b8892974309ee3c46f73bd052a7411fbb0a1123f497313074182fd04d2e3ca62a402e36af55d207c6e35f029c9e8d722a3f32b8ba18e59c61c972ca10d134e1832426f14ee10e56a8a8f1dedc56784b3bf8e864c43b9f72e91e2904786cb93ca6d31f72c61a13ebeb75c04cc5fc0cdd2a2a06feb4a8dfe6fbe761dc6bfeb750de19444d623ab80c78242f60b28b2a6fd53193a1d0fbe2fbc72158009f4ba3a2d6f1afde8b3dd4dc7625469b9eaf80cc3b20624890016e537a83702d0f4b6d01e70c00b90c7fd5d6cb4d80d8866944194c8ef47489fa8f30dfce88164c86b21656331da2a1a99fe7d175055a745397943e913cc3e6c9c029caedc4f0bb0cb9258ecb207bedb575452c8cd82306d3a9ab4f572512e40a355154d335e591c3a0e67a7bd98030563f1d9b7fecda3c3db761d21fe350355ae0ff47fc690a625d2a3e8e63287809faecb501f9422b0f77074cbe709e0f581f38fc954495f8ef981d25d3e548d1ce77a1f981ae6bcc3ec93833f260c13143894372f23f0a0f7cee00375e7afea9b9b69589e4fdb93d17f4be3bdbfd1eece12164ebe98c92b540499283eb700a3ef88ffc989dc94734e885ff34260281f99178d6cd7fc51315feae097cc2ed7008162f4911b6783bb9a6443360aa625094b4de0d5076e7bc9c7a3e80d630212191d3fdd7fc4c38fd1756253f60853550dd0c9ffacb261f477047a7d2f444768f1dac706b3e3dc0141301e707ec46efb45a7b98d502ffb177daa10bba10efa56fad23fc9508b60c2baacf86823cf5895c90a02e54731782c7ce1c75909faca0e036d6ef8bff67e965ebe3b737f1784f0e4654cc680b76e597bca3d19942d54107d109465b7ff3c124f8a030b7c82ff5093d68ffb81611a17ea8fa7b7f52842097608715910a564131a69dfa502a769123a8c2af52f75357b7da1e5ce6315ff2fe6dddff881d94db5b6f1bb894ce8cc3d4de7a87f2e5b6b6ddcf9191b2961735854803b564b2434001d9120b7b23a6c9dc24b0f6064509184497b86da50179eeafc2cf6cda8584a6587f27a49e5617d3d3029db6f99f2da4498c6309d816623513ec0ae16c60f06caae61fd8741e14a6bf2f2f1ac3d5c1bded135e6ee8eef84798b0ca517f90508099fe43e515069fd429f9a7a33d64d73e226821819cd860133bfe3a401625e82cdd3c11b419cf20e964c6f0a70956dd2cea10f89cdcc6cca8baec0bda0184984f18ae805d7cd89a0a53fbeb4e97a05329b6b6cc5117224409753993981d4395fe8baae6a1dd41626770ccbb6804d906cf5ba3f3c838ee9d9f093d93bf5464f0a582b741159994b1ee02568d06ec1d623ad43af728ee68b3c595a3461c81748422831c88c9d5a4f6d866c8d1572856f14d4f8eb71232d9ae957385eb467ffb42c2555c9c7699710e98db80e43458c402176b98b8ba2879d61212db829a5f876864d92202623dfe28e42eb564e1beec260382a984295546fb84bed54e782c7a5dfd77935781df934158dc4d8ed7a1e6780d1d142cc4cb5527c175fde77faf799dd455789d60e2221dc0e0388e351b3c353fad24e3f4a86e45bff711376be54716e14fec07f08923a670f33674d0ed01461019c9aa4a6e5c7e09b787f870575dbc8ec4764d5e8e1caba09a2567e81b34d65dcca820773189f242ae47bc47577cc26cab3f5b2bc9a12d9be56dfa0bbacb4a88522698da687ee5c9cf1b9cd886dfee8733846baef11e6dcd02fe92fe32a315f2db7d88081c69d59e38fdde62517ea832e3ed79073cb96ad24e46253e4dc342fa9c63a982b7f9640d06a9707c51fdaf5d8677415d88a54daae08d538570064e36346ac3b5085533ae3c326ac9a3f22c37dca4b50f5cfc00d7b96fcb54bd359292952ff10c935971f11babba695d369cc07c34b8cb2ad3390ac413b4e10ecd2dd750c8726587546731acfb29fa960ba8e015ccfd6802bd04f4ef262c0b41a6f503f49e5af0ef816b3f31bd87f4713d81e00e5daecf410e30a7f35f3b25d53e9bdee6f5f7da36fe2fd79ed4757e1e0351b399de5c4a46526357099efeb5ae34a9ac8da3dc37e28659e877f1380b80531a6326e27405b3028939b5aa5a3478da09954dffd582d13517e3069696b041d8a191adb21f65497ed1466af465e34b683e03d6d7b5b1f5da48640fe1f589934e68d5b1ed89431769e7665383a06c89b42883988d902fc63c7ad34e26a9e4fa0438d152cd34a96a0f2d9a771d898320954f7bc683b6e7d8fb91846d94b63b5ffff7f7ff31969a7da1e24d720fe0133d6f5df86934eee134f0e54bd656ae04787731f709532ab053a03895f711ece8d6cc0f2b99a9e642af0e31c3da2d9e58859fa46c975c203a8430da478cb08539eaf93a9f043b226a2478cfb695dadedaaf6302e1578466ea0c54bf10002d0990aa53330ed88dd2f4a88c126a78310ad3fcb525e99895a4555b88f74d1efcc2150cd663342cd12ce262310c30c1ae1ab1922568de1b8b5e639f7ce5a2186e8ea1e518266e39ce2950ef4bc17f9e173bcd500dc4e93332037f6313663dc209edb054edc6cb0c4ab7e1c1fd23a681f06c274c684b5c08043c813e23f97dd1e124ec881007045eeac551033f9d6698457feb01d8d823694f9af3a143cdefca82d3040e92fa845ba8b45e83e1aee8f6f27c3200dcbcd46faa926796729bd5d939dc2e1ab6bd6661cd182305875e74d851eb80db0303dbd04ea9434ebfd5eb2395825b8e1822499c9858c3840621f5e34729e27077c9b6d3cd064d4d5d7393ca5acbdda7cd4a63b9c9e9ee3e73866c1b3a27af9c534358dbc5e5d5a1ad80f190a43c4c8af1c92a77f38693e6c6c8290aa6f143428ec67191dba07de0a2d8ff9ffcd3eff02e045fc403658551cf4484868ddcaca546cbc04c86086fb352a2cb1e8cdcd9f1f9ba528d1f79f5f5bd0bee2f0a057e036f50fdbd80507ae44b36e940dc34d501460d895bed870dc65606f01478a166b529b1a4b66e401edfd476086afe28cb433fdcaf0b1ef180cde9a7ddc1c01c66427778bc61e4ebcbb86b58027c975f05f6396055620fda58a40155ea0c731ed63243980033966682323321c59261e50c261a8eca6f8736723ed034338fe9d0d24b7600117b3322d6656643a405d35a5741ce6022fbb2ae3b3e32a949fa786f3454d9c443b6d48a4d9e77097d8df8130e7bab7edcf2b20894d3e3615b2f2f0cc1dc2f5e5076a82e0ac4c10e54e99fd0dc3c8d1dcabcb445c4e6b0597eda6ec78352f31f5bd43afd61da10df54a1801e86ffe855944e1f8aa0fbc5bd1b0c1950c99f17d342e83174d58efcfa2aeaf11f124476937ddeea62b2abe08bf8876b9dc70a6a241904aa41167aac081f6ea31a867eeb87fb72efcf3f5a9154141f96bb88c918291fe10e9e54a4342779d7af706154194274f729c6bdc8ec11d9f2d8ceab7e319568599e81188c9d8f37db216f96f63947e6eaf8e779b1cfa9ca1b024ce6e4fe4de809fa8ad7b60cb00ec652fdef75460a6bba2f81b6c8145f3aa682156b340ea2cfcd8e2a34bdda087283c6a679fb02402610df079fd4fcfbd1df6988fe117f774f2b9c054744a9de94e0a17a8ada0e78eaf8df6ba200f6b6f19c13724143f633f187b2f183226a4423c9964c7f40ad56c925be193bd5608cfa8ed93fbada3331215a33e53c5e7cb74dcf4855dbbb68425b367ec55b9c472604c1dc3451911ae825597f58435584e01be55b5b8df51eb9f82c6a3fa2d5cf208ead4b4fcfdd3abbd4818b4f7281fd5c6290ec70bd72837ab62f6af48401a0124683ed1d83d0a516fff54794baf8ffc562b637bddfe18bcae145e0ac576e839d93a07c8814c0a7ee0e552b07b75e37c804b843cd9026b1ad49070b7b58c16dda81ced2c94066edf26c40a5fb3a221016dbd205880ba4946404df97e6ce4603c414e592acd8cd930283bc875139d306b28e33b475af189049d6d6521e342788dd5e8ec183c600ea1fe41e2bb5c11854aaccc4f67ac41fb4193fb435fe3fb5cbb43eac28da915904f11dadb00bb7a2eede0ae2a1d7ab56591033e362c8b91fcfc7d67ccc0a320b19b8c8f354799a1caa9c0f94a2b860eebed5a4e99f444ef3bef3ba8abcdebe81046a9e2329dc09c3b513d21ebbd24fa822df09e40c3c3b383f18687bf1b61fd545c652e7943073810bcb0d4792ff61fa7422e5da580a40ab84f84cce440ec83a1594cf9b96f7270376a30c36bb030700589360ee145a6248a24be7ab73cc96b84fc18e5795501f9ce8e7b2214f441d69a962f9861753c41633fa19a490a1064d3a0cbda360b0636bc53baf36453993021579fd7c940103097cc0dd9080ab5a9d568853d16129d430e797a3b17ca0f91c1b55da13afd27dd5779f414eda51aed2b283e6cdde7aac19ce3e380542a2d593992b01eca54fd0a4aeb0bd646b9fe92adda83bdfe8ba1d62fe64b887f756e4308404b1985f068a80d39c382316f40c6712a06d57eb2266a947e2bd40c72c2f5be7dd905c4c55b17a40afa2bb4e66bc82e954293dc9388ab7ff8ce7a0d1dd717817910cc1acefdccaa7009cd97bf4907ce2a97c5532ab5fc58ba0dda829c1f3d6f40dc139cb49dce634054047768ae041bc2d14ec3d86ec6fa514ecd42c213f1a22f5e0e95c2951cfaf3f6b9f4ec314b270a968312ac25cc3eb96a04162709282082b529e5fb82ef70968dc2bce69fa4af013cf18845b5f4ad18189116e20d20c3aaf8f5f4cc9fb421b6956867acd07e71e7796801eda049dfc437146c6e5f64336c7538ea4acc0afedd323cab21b6068a61ce7993def22d7572cf471ea1aa88974b48e9dee2cd1a6405ce38a1bcd67ce507822dd5e101eef2b90512e9ddb13b0705254a3462ad8325d868ee62b5875344cf57b4057f40890584b924482f9cd05932d379c0682584a7fd5f9a3ab13e88b30d084614b370c7766a6954f81ecd35f5287830ba971af1eb9362b8a86d84308419220eb05d50d91fa16140c19c6331310b601111878cf1b880d90de8a3bf684e085ed8529dfaa6d8abc770e9eb0cd98d55673c04b6b6de1bc3864e4402abaa816c7b6e99576cb959a059f973ec56a52de5101d372e6a40196c92cfcddf4d911ddc8f714bf6c56d429cd9aa5ca9826b15a080dbde3d2f0388805f811e7cd23305ff47ab43f180885eb9d197904552d85d293998b9a40f89fa834bd852d34a7ff01c885efb7c25dc93de40e602b14d973243a9bc2bfcbf5867e7cdf3b804cadc6345710332df244a670959bc188f0fc1e6f5ee220903898a75105b00dd47c249abdcefd104623f546af385de10a8f446c8ff278e367d5c7e0039ed9ac438e43f5ffcfef6e2e101ae6f17686e2b6b6342ad5d1ee6d40c74f4e41acc16262c6491c6749f3da59a320be986fbe62abfbb40e15ed578a74f6aa416e2785e2f33f2da03251bbb66b9b30e98299d08eb64401aea5e8017223726cff9ada4d16121f07267ff33d3f6a5f465916739d491e1d1efc17cea2434e012c0603956cd968ef5a975ab249387030a6dbdf28575a828a4f2b5ba282ca7c5e0f01fec7b8e7d2fe901da9a1bc1dd6e99bda2121461ba5ff40e2ae8127d2b9b3047922946a892d32fbe7facabaaa9cb459e1d9ffb3a611868fe49d97d5c4dfeea2228994504decf959922b46f8201fb31fefc455779a187d05994f3c5cd"}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000001700)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001740)={'wlan0\x00'}) accept$inet(r0, &(0x7f0000001780)={0x2, 0x0, @empty}, &(0x7f00000017c0)=0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0xb4, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xb}]}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xa, 0x1a, '\xff\xff\xff\xff\xff\xff'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'dvmrp1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_0\x00'}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000001980)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000019c0)={0x2, 'ip6erspan0\x00', {0x9}, 0x3}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000001c00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a40)={0x150, 0x1403, 0x100, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x34048811}, 0x4804) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000001c40)='bond0\x00', 0x10) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000001c80)="6b473c151abeaef8e4ad3f19620973c413f7b38dd5de8f3e85b169ad3938693146beb5f082930e8df2478cc0a4f1c8425c26012826bd2c872ebfa6345788ae053331818ddd1d2b97c0ce273d96aad80941fa31a9889a7d5d7a204039c941b20207a6fd04c8a1b0233fceae7231405b1c43419cb1af13d678fc9f036576e472edefcc965a0d83281657ee9b4fe14d3fa32d62a19c60811fc33e8977c3f8b5c2180466fc5c9a72e813d2d8cd1e66d292721e4c824d2c35cac81c7bb6f2bbd58dbf7181c64634755a55d263e0929e53b8d7908f1ab2837dac80fe6697cb5417e8082aa3e01624b7c413a40de11d055502d7dc9480e5fdf1ebcf8d9bef753015c39d") r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000001d80)=0x3, &(0x7f0000001dc0)=0x2) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25GETINFOOLD(r8, 0x89e9, &(0x7f0000001e00)) 20.507040713s ago: executing program 4 (id=4583): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000006900000000040000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, @default, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{}, [@mcast1]}}}]}, 0x4c}}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0x2, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0xc25, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex=r9, r2, 0x17, 0x2028, 0x0, @void, @void, @value=r10, @void, r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r1, &(0x7f0000000380)="943272396dfc106eca232c8b824bd1f6a0ff91d76bbfd2414815e8c0f1990764aa5f6566bdf721734cac1056e63401a02a2ca7048431f6dce1a77e2eb5b387d26f75e0d8c93f64da8451d0c2029337ca2c40c3723eae398f87620228adc61725c95312ccf48ef93f4ec9c8bd519f0e3bfa008c3dcdb6fae0463c93afa13b41443e74385bda4e6e35c01eba1c6695a05fec7b9ed0931b726e7558f8e779e2db7b1b10453177ca5b8a2c748e81bae112ab671abec4e57acc60fb"}, 0x20) 20.31225961s ago: executing program 0 (id=4586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)={0x108, r2, 0x1, 0x0, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3e, 0x51}, {0xc}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xc54}, {0xc, 0x90, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4010090}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5, 0x1], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x40, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1f], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'syz0\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="82f4f4ac6b314a93838e9e623f07eb5ec6c11c"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 20.130754188s ago: executing program 0 (id=4588): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000000600000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) close(r0) r5 = socket$key(0xf, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000300)={r5}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) syz_emit_ethernet(0x73, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3d, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, [@fragment={0x33, 0x0, 0x6, 0x1, 0x0, 0x1a, 0x66}], "17c17f0791"}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000300000000000000000400"/28], 0x50) 20.129866827s ago: executing program 4 (id=4589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000036b8000000000000000000000000000000000000340521694d943ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x8064) 20.069342891s ago: executing program 4 (id=4590): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0xffffffffffffffff, &(0x7f0000000000)) (async, rerun: 64) r1 = socket(0x1d, 0x2, 0x6) (rerun: 64) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x6a, 0x1, 0x0, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x41, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x34, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) socket$rds(0x15, 0x5, 0x0) 19.843443922s ago: executing program 4 (id=4594): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa0}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0xffffffff, 0x71, 0x10, 0x8e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa0}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc001) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0xffffffff, 0x71, 0x10, 0x8e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) 19.819113943s ago: executing program 0 (id=4595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 19.661255227s ago: executing program 0 (id=4598): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010004b040000000000000050feaa1307c966716181cf0e4527b2ca4f7df03c8a5a2162491523a5007a000000", @ANYRES32=0x0, @ANYBLOB="0602000000000000140012800a00010069706f696200000004000280"], 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) (async) close(0x3) (async) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0xd3, "ce3dc03a7e8a35cba74d2d20ae76794dae75907871b67c06ffdeb7e529a82aeb26c007477d5a42b1ae102fd1468fde9a0e9a676d1ceb0f2d3620f69eb6eed0ebbcd394ca8c98d1f26ab0e4fbefd4b306d33a62ad06a8a0702ce9841c2190c9b76016a674759c3f9e7364549085efd8f242db7a03ee1ced1c59545e68fa456c2d0692354fa4c5361317757b787c55030e40b824d6901dd1d1e80f9e104a982bedef5b3ef3ee1cdb5ed2b0f25facf5437492f9241b91855c32b1be0a9ac6b949c9f7ac29ddd32232ba5b44a42001bc97ed08f466"}, &(0x7f00000001c0)=0xdb) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000240)={r7, 0xf97}, 0x8) shutdown(r6, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100ffffffff000000003900000008000300", @ANYRES32=r10, @ANYBLOB="18005a801400018005000a"], 0x34}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x8001, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r11, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, &(0x7f0000000100)=0x84) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x90) (async, rerun: 32) r12 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r12, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 18.237927422s ago: executing program 1 (id=4623): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x4, 0x7, 0xe48, 0x4, 0xffd, 0x10000, 0x9, 0x9}}) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001000000800000003535b3d215ee0169395f"], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="e8020000000000002900000004000000", @ANYBLOB="9b64d9"], 0x2e8}}], 0x2, 0x0) 18.203324043s ago: executing program 1 (id=4624): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000010000000000a00200062000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffff2500ffff0000000000000000000000001000000003000000000000200200000000000000fffffffffffffffffeffffff000000000000000300000000"], 0xb8}}, 0x4004) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x4) recvmmsg$unix(r2, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1}}], 0x1, 0x10001, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0000000140001000000020000080000e00000020000000000000000000000000000000000000000030000000000000000000000100000000a"], 0xc0}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x70, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x70}}, 0x4080) 18.07136763s ago: executing program 1 (id=4627): r0 = socket(0x840000000002, 0x3, 0x100) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0fe2ffffff00fa000000000000bd052b5328c82fcf000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) (async) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) sendmmsg$inet(r0, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18.068602902s ago: executing program 3 (id=4628): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x5a, 0x2a, 0x100, 0x0, 0x25dfdbfc, {0x1, 0x0, 0x2c00}, [@generic="00bbe906240f1b99bf009bd23418256d81118e19db753d9d1d344df5b793a629f96c75102543e8ce49f4bfe61a45c9206154d50a7f695e89f33245bdad88e9a47e1f218f292eaa518b68e3d246840647c45f4a5f2b189777af29b2b997d50c7498456a57e5713181a4762320ca8b74b6a314399154b15b28f2cf"]}, 0x90}, 0x1, 0x3000000}, 0x8080) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x91) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x48}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x2, 0x6, 0x0, 0x8, 0x3, 0x37f6, 0x4, {0x0, @in={{0x2, 0x4e23, @local}}, 0xfffffffa, 0x0, 0x0, 0x8, 0x60}}, &(0x7f0000000040)=0xb0) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)={r3, 0x9, 0x92, "e115b65515e962461b06451b03cab2709759d211647446a73288d32f1fe858b3e48432d5573fa9cbeaf54620b283c97ce3b73300bd6db2875b10b1c5098e3ae96ccffc1d33eaeb38ea5f041bac10d88a507fb534c91400582ecad463471de1af5356b1f8c243d0f30439138a9928b78584ffec7d035dda05165e4255cd92d2823d813e35604feba31f1ffe69795975765584"}, 0x9a) (async) socketpair(0x10, 0x80000, 0x4, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 18.044865628s ago: executing program 3 (id=4629): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffe15) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000280), 0x2, 0x0) read(r1, &(0x7f00000014c0)=""/4125, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELSETELEM={0x248, 0xe, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x228, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}]}, {0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x1f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "e35da998e07b83ca01235e4d7985494e9ddbabb61660b04970a026de27872794b8b64e0895e35e8bd4f9b7fb25fd38251f20f2225978315293dab336cab93b8e50394b84c6e1194d23539f49beed48f70f6876a463d4769c1e3b4ad1efe3908aa866c243551f2c9e2a21db981e7eb8a07c624149e101ede1a90c5ba39906ece7f32d11caa811ca9a28474e8cb7ea3cac0bd994311460a629c633bb000a02ba10bc512c7c2b06e5387bfd1c1f1acc6623d038aec704e8a8968e934af8ee19a4dd1d52d1bb54d166e9cdca"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xb0, 0x1, "68f8e8551afe3d9823c15de2234202091c99024a9aa67ad70caec88e3ce230265781c4cd0d168cd959d25180fd2d129de72957cac79f17702189e2186398ebf7c287a24ba7616ec38f12ccda03c537413cb92109d2f473f71b7b5a6b6d7b523b63c7601299444d25b133cc9883d0d74f9fe0d8edb1ac6a69ee4e247b39df291ec7464e31c7506a27405c976cf30cea20eb58c64ed1e367d6ec4891aec7ce24fc3e2a2ef92416d6da7466fa6c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x73b5c8de78965784}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf, 0x1, "1ebc0344ae3f6614f5b923"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2c4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffe15) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_type(r0, &(0x7f0000000280), 0x2, 0x0) (async) read(r1, &(0x7f00000014c0)=""/4125, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}]}, 0x60}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, @NFT_MSG_DELSETELEM={0x248, 0xe, 0xa, 0x0, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x228, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}]}, {0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x1f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xce, 0x1, "e35da998e07b83ca01235e4d7985494e9ddbabb61660b04970a026de27872794b8b64e0895e35e8bd4f9b7fb25fd38251f20f2225978315293dab336cab93b8e50394b84c6e1194d23539f49beed48f70f6876a463d4769c1e3b4ad1efe3908aa866c243551f2c9e2a21db981e7eb8a07c624149e101ede1a90c5ba39906ece7f32d11caa811ca9a28474e8cb7ea3cac0bd994311460a629c633bb000a02ba10bc512c7c2b06e5387bfd1c1f1acc6623d038aec704e8a8968e934af8ee19a4dd1d52d1bb54d166e9cdca"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0xb0, 0x1, "68f8e8551afe3d9823c15de2234202091c99024a9aa67ad70caec88e3ce230265781c4cd0d168cd959d25180fd2d129de72957cac79f17702189e2186398ebf7c287a24ba7616ec38f12ccda03c537413cb92109d2f473f71b7b5a6b6d7b523b63c7601299444d25b133cc9883d0d74f9fe0d8edb1ac6a69ee4e247b39df291ec7464e31c7506a27405c976cf30cea20eb58c64ed1e367d6ec4891aec7ce24fc3e2a2ef92416d6da7466fa6c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x73b5c8de78965784}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf, 0x1, "1ebc0344ae3f6614f5b923"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2c4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) 18.024538777s ago: executing program 1 (id=4630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400003d49c46bbc326d72008500000055122209bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.94423068s ago: executing program 1 (id=4632): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="611570000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000005000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='xen_mc_callback\x00', r1}, 0x18) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x4000) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x646f835d58a82cb8, 0xffffffffffffffff, 0x80000000) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x89}, @ldst={0x1, 0x1, 0x2, 0x4, 0x5, 0x18, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6206, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0xffffffc6, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0xd, 0x40}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='erofs_fill_inode\x00', r8, 0x0, 0x3}, 0x18) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0xffffffffffffffc8, 0x0, 0x0, 0xfffffffffffffffe}, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='afs_make_fs_call1\x00', r1, 0x0, 0x3ff}, 0x18) 17.943730082s ago: executing program 3 (id=4633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dc", 0xa3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8", 0xb7}], 0x1}}], 0x2, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r3, 0x3000) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000002d000100000008000000000000000000", @ANYRES8=r3, @ANYBLOB="0b000080976b640868603000910001", @ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRES32=r0, @ANYRES16, @ANYBLOB="0bcca374f1a9533d9f2b5fb2a86a6eda52837762ca3d364d72d72ea8ec249adb8a449eb6a03aa929665d4dc995f7d2066b1bfa53d01f27743dae39d476aea9103570ed35d8e911afaf2bdc61f4f7eb2e4dbb88c17000cf041c9fc2102a3673ae3cef1dafe00bea56c8876e019ee52b2ea9ac77c0c534c327125af91809c9d782c407e82834c6"], 0xb8}], 0x1, 0x0, 0x0, 0x4855}, 0x0) 17.766134505s ago: executing program 1 (id=4637): r0 = socket(0x10, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pimreg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000005400e505000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="00030200ac1414aa00000000000000000400000000000000"], 0x38}}, 0x34044810) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$inet(0x2, 0x3ef93a42e2e429ae, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x480, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000002850000001b000000b70000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x18) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x40002002) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17.052924183s ago: executing program 3 (id=4641): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x52}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x60, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x2e}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x3c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) 16.956590175s ago: executing program 3 (id=4642): r0 = socket$nl_generic(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r1 = accept(r0, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000000100)=0x80) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x6, 0x0, 0xc8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b26, &(0x7f0000000040)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008000) 16.867266971s ago: executing program 3 (id=4643): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0xffffffffffffff56) r2 = socket$inet(0x2, 0x802, 0x1) connect$inet(r2, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r13], 0x1c}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x7c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x24044084) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r4) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, r14, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6f95}, 0x14}}, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000040)=0x3ffffffd, 0x4) write(r2, &(0x7f0000000000)="08001800000020a3", 0x8) recvmmsg(r2, &(0x7f0000006f80)=[{{0x0, 0x0, 0x0}, 0x4000002}], 0x1, 0x20, 0x0) r17 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r17, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x8000000000000000, 0x6, 0xffffffffffff2ac6, 0x4, 0x8001, 0xffffffffffffffc0], 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 16.581707628s ago: executing program 2 (id=4647): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70004ff000008009e"], 0x44}}, 0x28000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r10 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x5, 0x3, 0x2, 0x0, 0xcbb}}]}}}]}, 0x8c}}, 0x0) (async, rerun: 32) r15 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) ioctl$SIOCGETNODEID(r15, 0x89e1, &(0x7f0000000780)={0x2}) (async) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="7f0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001", @ANYRESOCT=r14, @ANYRES16=r8, @ANYRES32=r15, @ANYRESHEX=r0, @ANYRESDEC=0x0], 0x44}}, 0x0) (async, rerun: 32) r16 = socket(0x10, 0x803, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r16) (async) getsockname$packet(r16, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r16, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r17, 0x50483}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r10, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r17, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x24, 0x19, 0x103, 0x70bd2d, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r9}, @CGW_DST_IF={0x8, 0xa, r9}]}, 0x24}}, 0x4040000) 16.525593248s ago: executing program 2 (id=4648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, 0x0, 0x8000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, 0x0, 0x20000030) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f00)={0x58, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb5a5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x45001}, 0x4000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27d3f) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000000c0), 0x8) getsockopt$nfc_llcp(r4, 0x3a, 0x0, 0x0, 0x20000000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x3, 0x6, 0x5, 0x73}, &(0x7f0000000040)=0x20) 16.435487419s ago: executing program 2 (id=4649): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$isdn(0x22, 0x3, 0x24) (async) r3 = socket$isdn(0x22, 0x3, 0x24) getsockopt$sock_int(r3, 0x1, 0x26, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) (async) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=@deltaction={0x1d8, 0x31, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd9e}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffd3}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x9) 16.435045817s ago: executing program 2 (id=4650): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@updsa={0x154, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/131, 0x83}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/138, 0x8a}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000340)=0x14) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)="270502001c0014000600002f86dd", 0xe}], 0x1}, 0x24008800) 16.408768973s ago: executing program 2 (id=4651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d018f0008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r0], 0x24}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xfffffffd}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001c00070c000000000000000007000000", @ANYRES32=r10, @ANYBLOB="fb00060b0a000200aaaaaaaaaabb00000c000e80"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x5c}}, 0x8000057) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r11, 0x1f4d2000) close(r11) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000140)={r0, 0x1, 0xd3b4, 0x4}) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x74, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) 15.548842822s ago: executing program 2 (id=4652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)=0x9b72) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {0xffff, 0xffff}, {0x9, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x99d}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r4, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x45, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f0000000700), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000001000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000030000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r14, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c000280050001008500dda209dbda380000"], 0x3c}}, 0x40800) 4.524649548s ago: executing program 32 (id=4598): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010004b040000000000000050feaa1307c966716181cf0e4527b2ca4f7df03c8a5a2162491523a5007a000000", @ANYRES32=0x0, @ANYBLOB="0602000000000000140012800a00010069706f696200000004000280"], 0x34}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) (async) close(0x3) (async) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0xd3, "ce3dc03a7e8a35cba74d2d20ae76794dae75907871b67c06ffdeb7e529a82aeb26c007477d5a42b1ae102fd1468fde9a0e9a676d1ceb0f2d3620f69eb6eed0ebbcd394ca8c98d1f26ab0e4fbefd4b306d33a62ad06a8a0702ce9841c2190c9b76016a674759c3f9e7364549085efd8f242db7a03ee1ced1c59545e68fa456c2d0692354fa4c5361317757b787c55030e40b824d6901dd1d1e80f9e104a982bedef5b3ef3ee1cdb5ed2b0f25facf5437492f9241b91855c32b1be0a9ac6b949c9f7ac29ddd32232ba5b44a42001bc97ed08f466"}, &(0x7f00000001c0)=0xdb) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000240)={r7, 0xf97}, 0x8) shutdown(r6, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100ffffffff000000003900000008000300", @ANYRES32=r10, @ANYBLOB="18005a801400018005000a"], 0x34}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x8001, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r11, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, &(0x7f0000000100)=0x84) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x90) (async, rerun: 32) r12 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r12, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 4.482501511s ago: executing program 33 (id=4594): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa0}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0xffffffff, 0x71, 0x10, 0x8e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xa0}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc001) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0xffffffff, 0x71, 0x10, 0x8e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) 2.473248309s ago: executing program 34 (id=4637): r0 = socket(0x10, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pimreg1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000005400e505000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="00030200ac1414aa00000000000000000400000000000000"], 0x38}}, 0x34044810) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$inet(0x2, 0x3ef93a42e2e429ae, 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x480, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040005}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000002850000001b000000b70000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x18) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x40002002) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.452506885s ago: executing program 35 (id=4643): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0xffffffffffffff56) r2 = socket$inet(0x2, 0x802, 0x1) connect$inet(r2, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r13], 0x1c}}, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x7c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x24044084) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r4) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, r14, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6f95}, 0x14}}, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000040)=0x3ffffffd, 0x4) write(r2, &(0x7f0000000000)="08001800000020a3", 0x8) recvmmsg(r2, &(0x7f0000006f80)=[{{0x0, 0x0, 0x0}, 0x4000002}], 0x1, 0x20, 0x0) r17 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r17, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x8000000000000000, 0x6, 0xffffffffffff2ac6, 0x4, 0x8001, 0xffffffffffffffc0], 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 0s ago: executing program 36 (id=4652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000100)=0x9b72) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {0xffff, 0xffff}, {0x9, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x99d}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r4, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x45, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000540), &(0x7f0000000700), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000001000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000030000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r14, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c000280050001008500dda209dbda380000"], 0x3c}}, 0x40800) kernel console output (not intermixed with test programs): n invalid length. [ 321.742463][T16179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2926'. [ 321.778638][T16185] netlink: 'syz.1.2927': attribute type 1 has an invalid length. [ 321.786826][T16185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2927'. [ 321.788036][T16184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2928'. [ 321.865291][T16185] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 321.911654][T16191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.931995][T16193] vlan1: entered allmulticast mode [ 321.939777][T16193] veth0_vlan: entered allmulticast mode [ 322.003203][T16198] tipc: Enabled bearer , priority 0 [ 322.059421][T16196] tipc: Disabling bearer [ 322.103031][T16202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'. [ 322.219303][T16074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 322.250157][T16074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 322.269922][T16211] netlink: 'syz.3.2937': attribute type 83 has an invalid length. [ 322.300031][T16074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 322.334390][T16074] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.655333][T16241] xt_l2tp: v2 doesn't support IP mode [ 322.671869][T16074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.730796][T16074] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.780816][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.788040][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.843319][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.850622][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.215580][T16273] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2953'. [ 323.232593][T16272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2954'. [ 323.279681][T16275] : entered promiscuous mode [ 323.361323][T16281] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 323.477966][T16074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.519873][ T5848] Bluetooth: hci5: command tx timeout [ 323.628429][T16074] veth0_vlan: entered promiscuous mode [ 323.643895][T16074] veth1_vlan: entered promiscuous mode [ 323.684788][T16292] wireguard1: entered promiscuous mode [ 323.690959][T16292] wireguard1: entered allmulticast mode [ 323.702258][T16292] team0: Port device wireguard1 added [ 323.764374][T16074] veth0_macvtap: entered promiscuous mode [ 323.779705][T16074] veth1_macvtap: entered promiscuous mode [ 323.809098][T16297] x_tables: unsorted entry at hook 3 [ 323.813513][T16074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.832016][T16074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.877490][ T1007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.886306][ T1007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.913268][ T1007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.934196][ T1007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.159847][T16316] bridge_slave_0: left promiscuous mode [ 324.166367][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.184412][T16316] bridge_slave_1: left promiscuous mode [ 324.198575][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.228005][T16316] team0: Port device team_slave_0 removed [ 324.238297][T16316] team0: Port device team_slave_1 removed [ 324.244677][T16316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.254308][T16316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.262896][T16316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 324.282405][T16319] tipc: Resetting bearer [ 324.299790][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.321235][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.400298][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.421224][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.432954][T16326] openvswitch: netlink: Flow key attr not present in new flow. [ 324.724899][T16343] netlink: 'syz.3.2974': attribute type 23 has an invalid length. [ 324.812941][ T6696] tipc: Resetting bearer [ 324.935160][ T5151] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.955589][ T5151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.964898][ T5151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.973854][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.981738][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.090207][T16352] bond0: entered promiscuous mode [ 325.116028][T16352] batadv0: entered promiscuous mode [ 325.153929][T16352] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 325.170381][T16352] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 325.181914][T16352] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 325.331331][T16366] nbd: must specify at least one socket [ 325.404612][T16366] netlink: 'syz.2.2985': attribute type 4 has an invalid length. [ 325.498444][T16371] netlink: 'syz.1.2986': attribute type 1 has an invalid length. [ 325.513162][T16371] netlink: 'syz.1.2986': attribute type 2 has an invalid length. [ 325.525614][T16374] netlink: 'syz.1.2986': attribute type 1 has an invalid length. [ 325.534531][T16374] netlink: 'syz.1.2986': attribute type 2 has an invalid length. [ 325.557738][T16373] syzkaller1: entered promiscuous mode [ 325.569361][T16373] syzkaller1: entered allmulticast mode [ 325.578351][T16373] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 325.590531][ T5151] Bluetooth: hci5: command tx timeout [ 325.597257][T16373] __nla_validate_parse: 6 callbacks suppressed [ 325.597274][T16373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2987'. [ 325.677720][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2988'. [ 325.934771][T16388] xt_addrtype: ipv6 does not support BROADCAST matching [ 326.111749][T16393] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2994'. [ 326.131450][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2994'. [ 326.213540][T16346] chnl_net:caif_netlink_parms(): no params data found [ 326.292847][T16406] tipc: Started in network mode [ 326.302276][T16406] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 326.318554][T16406] tipc: Enabled bearer , priority 2 [ 326.382532][T16408] tipc: Enabling of bearer rejected, already enabled [ 326.439721][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2999'. [ 326.592613][T16422] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3003'. [ 326.642123][T16346] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.652863][T16346] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.661114][T16346] bridge_slave_0: entered allmulticast mode [ 326.669481][T16346] bridge_slave_0: entered promiscuous mode [ 326.684664][T16346] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.695642][T16346] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.704213][T16346] bridge_slave_1: entered allmulticast mode [ 326.713336][T16346] bridge_slave_1: entered promiscuous mode [ 326.726574][T16436] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3007'. [ 326.772237][T16429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3005'. [ 326.798196][T16440] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3009'. [ 326.931883][T16346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.953760][T16346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.027025][ T5151] Bluetooth: hci2: command tx timeout [ 327.091641][T16346] team0: Port device team_slave_0 added [ 327.099355][T16445] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 327.134565][T16346] team0: Port device team_slave_1 added [ 327.246027][T16346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.261762][T16346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.307671][T16346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.338733][T16346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.362340][T16346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.391312][T16346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.447221][ T5916] tipc: Node number set to 10463914 [ 327.451441][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3021'. [ 327.561907][T16474] batman_adv: batadv0: Removing interface: dummy0 [ 327.666814][ T5151] Bluetooth: hci5: command tx timeout [ 327.736024][T16346] hsr_slave_0: entered promiscuous mode [ 327.743640][T16346] hsr_slave_1: entered promiscuous mode [ 327.751856][T16346] debugfs: 'hsr0' already exists in 'hsr' [ 327.758760][T16346] Cannot create hsr debugfs directory [ 327.775785][T16493] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 327.934339][T16499] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 328.419271][T16523] netlink: 'syz.3.3038': attribute type 1 has an invalid length. [ 328.423899][T16346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.442350][T16346] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.562477][T16346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.575668][T16346] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.603702][T16528] bond13: (slave gretap3): making interface the new active one [ 328.617893][T16528] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 328.697088][T16346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.710078][T16346] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.835697][T16544] netlink: 'syz.1.3046': attribute type 1 has an invalid length. [ 328.897752][T16346] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.909674][T16346] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.921699][T16551] netlink: 'syz.3.3045': attribute type 30 has an invalid length. [ 329.012688][T16551] bond14: option arp_missed_max: invalid value (0) [ 329.022350][T16551] bond14: option arp_missed_max: allowed values 1 - 255 [ 329.050450][T16551] bond14 (unregistering): Released all slaves [ 329.106859][ T5151] Bluetooth: hci2: command tx timeout [ 329.179868][T16551] netlink: 'syz.3.3045': attribute type 4 has an invalid length. [ 329.198380][T16550] syzkaller0: entered promiscuous mode [ 329.204520][T16550] syzkaller0: entered allmulticast mode [ 329.226208][T16544] bond15: (slave gretap3): making interface the new active one [ 329.235889][T16544] bond15: (slave gretap3): Enslaving as an active interface with an up link [ 329.254085][T16568] !: renamed from bond_slave_0 [ 329.415805][T16578] nbd: must specify at least one socket [ 330.895037][T16572] vxcan2: entered allmulticast mode [ 331.024208][T16588] __nla_validate_parse: 7 callbacks suppressed [ 331.024227][T16588] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3054'. [ 331.055155][T16586] bond1: Unable to set up delay as MII monitoring is disabled [ 331.081356][T16586] bond1 (unregistering): Released all slaves [ 331.129804][T16590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.186804][ T5151] Bluetooth: hci2: command tx timeout [ 331.209556][T16346] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.224990][T16346] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.253086][T16346] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.280581][T16346] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.340841][T16619] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3061'. [ 331.380670][T16619] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.386192][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3062'. [ 331.388162][T16619] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.523057][T16629] validate_nla: 1 callbacks suppressed [ 331.523075][T16629] netlink: 'syz.3.3064': attribute type 1 has an invalid length. [ 331.562059][T16629] netlink: 'syz.3.3064': attribute type 11 has an invalid length. [ 331.580340][T16346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.587512][T16629] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3064'. [ 331.611121][T16346] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.628018][T16629] netlink: 'syz.3.3064': attribute type 1 has an invalid length. [ 331.646795][T16629] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3064'. [ 331.774107][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.781346][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.809951][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.814553][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3067'. [ 331.817257][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.840648][T16636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3067'. [ 331.926025][T16639] team0: Device gtp2 is up. Set it down before adding it as a team port [ 331.948284][ T30] audit: type=1107 audit(1766942459.088:5): pid=16640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 332.180496][T16647] tipc: Resetting bearer [ 332.424038][T16658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.555522][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3076'. [ 332.641570][T16346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.751618][T16680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.075136][T16700] netlink: 'syz.0.3082': attribute type 33 has an invalid length. [ 333.089482][T16700] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3082'. [ 333.266927][ T5151] Bluetooth: hci2: command tx timeout [ 333.392219][T16346] veth0_vlan: entered promiscuous mode [ 333.447242][T16718] netlink: 'syz.3.3084': attribute type 1 has an invalid length. [ 333.456205][T16346] veth1_vlan: entered promiscuous mode [ 333.490237][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 333.543124][T16346] veth0_macvtap: entered promiscuous mode [ 333.584407][T16346] veth1_macvtap: entered promiscuous mode [ 333.701253][T16346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.748853][T16346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.789671][T16735] netlink: 'syz.1.3092': attribute type 2 has an invalid length. [ 333.801838][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.825467][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.839524][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.859685][T16735] 9: entered promiscuous mode [ 333.919733][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.021367][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.056270][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.070927][T16747] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 334.081593][ T5937] IPVS: starting estimator thread 0... [ 334.173120][T16751] bond1 (unregistering): Released all slaves [ 334.187228][T16753] IPVS: using max 32 ests per chain, 76800 per kthread [ 334.275277][ T3831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.312120][ T3831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.697806][T16791] netlink: 'syz.2.3108': attribute type 1 has an invalid length. [ 334.952121][T16791] 8021q: adding VLAN 0 to HW filter on device bond14 [ 334.987930][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.999287][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.010500][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.035164][T16801] ip6gre1: entered allmulticast mode [ 335.043221][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.051568][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.559127][T16829] sctp: [Deprecated]: syz.0.3114 (pid 16829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.559127][T16829] Use struct sctp_sack_info instead [ 336.065698][T16854] __nla_validate_parse: 6 callbacks suppressed [ 336.065717][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'. [ 336.289123][T16863] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3125'. [ 336.341826][T16867] openvswitch: netlink: IP tunnel dst address not specified [ 336.385078][T16870] openvswitch: netlink: IP tunnel dst address not specified [ 336.504005][T16804] chnl_net:caif_netlink_parms(): no params data found [ 336.619059][T16886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3133'. [ 336.635677][T16883] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3132'. [ 336.674044][T16890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3134'. [ 336.764412][T16901] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3137'. [ 336.910222][T16804] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.920045][T16804] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.928513][T16804] bridge_slave_0: entered allmulticast mode [ 336.938164][T16804] bridge_slave_0: entered promiscuous mode [ 336.957756][T16804] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.965036][T16804] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.983229][T16804] bridge_slave_1: entered allmulticast mode [ 336.995337][T16804] bridge_slave_1: entered promiscuous mode [ 337.107587][ T5848] Bluetooth: hci1: command tx timeout [ 337.162344][T16804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.185268][T16804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.231402][T16931] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3144'. [ 337.291567][T16804] team0: Port device team_slave_0 added [ 337.323181][T16804] team0: Port device team_slave_1 added [ 337.372527][T16942] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3145'. [ 337.385855][T16942] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 337.398878][T16943] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 337.408492][T16944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3146'. [ 337.410586][T16942] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3145'. [ 337.440011][T16942] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 337.557818][T16804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.564814][T16804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.653978][T16804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.705552][T16804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.767886][T16804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.795737][T16804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.824318][T16965] netlink: Conntrack attr has 4 unknown bytes [ 337.946072][T16804] hsr_slave_0: entered promiscuous mode [ 337.963937][T16804] hsr_slave_1: entered promiscuous mode [ 337.985023][T16804] debugfs: 'hsr0' already exists in 'hsr' [ 338.009506][T16804] Cannot create hsr debugfs directory [ 338.025561][T16976] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 338.389655][T17003] netlink: 'syz.4.3159': attribute type 1 has an invalid length. [ 338.461540][T16804] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 338.692332][T16804] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 338.743708][T17024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.815413][T17024] netlink: 'syz.3.3164': attribute type 4 has an invalid length. [ 338.904467][T16804] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 338.921595][T17040] xt_cluster: node mask cannot exceed total number of nodes [ 339.023594][T16804] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 339.187131][ T5848] Bluetooth: hci1: command tx timeout [ 339.190401][T17051] xt_l2tp: v2 doesn't support IP mode [ 339.258442][ T135] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.269257][ T135] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.280098][ T135] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.315656][ T135] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.329742][T16804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 339.359695][T16804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 339.392303][T17058] pim6reg527: entered allmulticast mode [ 339.399785][T17061] netlink: 'syz.4.3177': attribute type 1 has an invalid length. [ 339.422963][T16804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 339.527241][T16804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 339.708485][T16804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.737923][T17080] can: request_module (can-proto-0) failed. [ 339.783301][T16804] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.842825][ T9492] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.850185][ T9492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.961005][T17092] tipc: Enabled bearer , priority 0 [ 339.978741][T17087] tipc: Disabling bearer [ 340.015709][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.022974][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.392844][T17122] netlink: 'syz.2.3193': attribute type 21 has an invalid length. [ 340.407174][T17122] netlink: 'syz.2.3193': attribute type 6 has an invalid length. [ 340.474009][T17127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.506675][T17127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.543813][T17127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.563704][T17127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.673883][T16804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.765481][T16804] veth0_vlan: entered promiscuous mode [ 340.805879][T16804] veth1_vlan: entered promiscuous mode [ 340.895638][T16804] veth0_macvtap: entered promiscuous mode [ 340.938348][T16804] veth1_macvtap: entered promiscuous mode [ 340.980617][T16804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.994625][T16804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.021240][T17162] netlink: 'syz.2.3205': attribute type 10 has an invalid length. [ 341.044824][ T1007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.063999][ T1007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.072449][T17168] __nla_validate_parse: 15 callbacks suppressed [ 341.072466][T17168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3205'. [ 341.105068][T17162] bond0: (slave wlan1): Opening slave failed [ 341.114620][T17166] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3206'. [ 341.129391][ T1007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.142391][ T1007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.142672][T17172] netlink: 'syz.3.3207': attribute type 10 has an invalid length. [ 341.176905][T17161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.221006][T17172] veth0_macvtap: left promiscuous mode [ 341.240687][T17172] team0: Device veth0_macvtap failed to register rx_handler [ 341.267256][ T5848] Bluetooth: hci1: command tx timeout [ 341.342100][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.383932][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.448527][T17180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3210'. [ 341.465962][T17180] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 341.474498][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.495053][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.710907][T17188] netlink: 'syz.0.3213': attribute type 1 has an invalid length. [ 341.742404][T17192] netlink: 'syz.1.3107': attribute type 1 has an invalid length. [ 341.761250][T17192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3107'. [ 341.775509][T17189] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3213'. [ 341.787651][T17194] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3213'. [ 342.100021][T17204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3216'. [ 342.150061][T17205] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 342.157431][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3216'. [ 342.199425][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.210542][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.219617][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.228487][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.236189][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.612582][T17205] bond1 (unregistering): Released all slaves [ 342.729581][T17209] gre1: entered promiscuous mode [ 342.734582][T17209] gre1: entered allmulticast mode [ 342.830173][T17218] Bluetooth: MGMT ver 1.23 [ 342.942826][T17229] TCP: TCP_TX_DELAY enabled [ 342.969742][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3223'. [ 343.148642][T17239] ip6t_srh: unknown srh invflags 4000 [ 343.346946][ T5151] Bluetooth: hci1: command tx timeout [ 343.508963][T17261] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3233'. [ 343.647332][T17271] netlink: 'syz.3.3234': attribute type 10 has an invalid length. [ 343.692489][T17264] 8021q: adding VLAN 0 to HW filter on device bond14 [ 343.711005][T17265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.721978][T17265] bond14: (slave bond0): making interface the new active one [ 343.731954][T17265] bond14: (slave bond0): Enslaving as an active interface with an up link [ 343.972978][T17287] netlink: 'syz.1.3240': attribute type 4 has an invalid length. [ 344.214230][T17300] netlink: 'syz.1.3245': attribute type 33 has an invalid length. [ 344.285397][T17300] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 344.299131][T17300] bond1 (unregistering): Released all slaves [ 344.308713][ T5151] Bluetooth: hci0: command tx timeout [ 344.414196][T17308] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 344.441611][T17308] bond1 (unregistering): Released all slaves [ 344.505367][T17316] tipc: Enabled bearer , priority 0 [ 344.657246][T17310] syzkaller0: entered promiscuous mode [ 344.680446][T17310] syzkaller0: entered allmulticast mode [ 346.387602][ T5151] Bluetooth: hci0: command tx timeout [ 346.604218][T16346] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 346.625594][T16346] CPU: 0 UID: 0 PID: 16346 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 346.625624][T16346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.625634][T16346] Call Trace: [ 346.625642][T16346] [ 346.625651][T16346] dump_stack_lvl+0x189/0x250 [ 346.625675][T16346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.625690][T16346] ? __pfx__printk+0x10/0x10 [ 346.625719][T16346] dump_header+0xd4/0x4c0 [ 346.625735][T16346] oom_kill_process+0x263/0x800 [ 346.625752][T16346] out_of_memory+0xf0c/0x12b0 [ 346.625775][T16346] ? __pfx_out_of_memory+0x10/0x10 [ 346.625796][T16346] mem_cgroup_out_of_memory+0x145/0x240 [ 346.625814][T16346] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 346.625840][T16346] ? _raw_spin_unlock+0x28/0x50 [ 346.625858][T16346] ? memcg1_oom_prepare+0x37f/0x450 [ 346.625874][T16346] try_charge_memcg+0xde4/0x1280 [ 346.625901][T16346] ? __pfx_try_charge_memcg+0x10/0x10 [ 346.625930][T16346] charge_memcg+0x9f/0x180 [ 346.625945][T16346] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 346.625958][T16346] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 346.625974][T16346] __read_swap_cache_async+0x212/0x480 [ 346.625999][T16346] swap_cluster_readahead+0x336/0x630 [ 346.626022][T16346] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 346.626050][T16346] ? get_vma_policy+0x27c/0x3c0 [ 346.626068][T16346] swapin_readahead+0x189/0xc60 [ 346.626096][T16346] ? __pfx_swapin_readahead+0x10/0x10 [ 346.626128][T16346] ? swap_table_get+0x1e/0x260 [ 346.626144][T16346] ? swap_table_get+0x1e/0x260 [ 346.626159][T16346] ? swap_table_get+0x1e/0x260 [ 346.626175][T16346] ? swap_table_get+0x216/0x260 [ 346.626201][T16346] ? swap_cache_get_folio+0x51c/0x530 [ 346.626223][T16346] do_swap_page+0x837/0x5c70 [ 346.626245][T16346] ? __lock_acquire+0x6b6/0x2cf0 [ 346.626271][T16346] ? do_swap_page+0x17d/0x5c70 [ 346.626286][T16346] ? __pfx_do_swap_page+0x10/0x10 [ 346.626301][T16346] ? __lock_acquire+0x6b6/0x2cf0 [ 346.626319][T16346] ? __pfx_default_wake_function+0x10/0x10 [ 346.626335][T16346] ? ___pte_offset_map+0x1ae/0x240 [ 346.626358][T16346] ? pte_offset_map_rw_nolock+0xea/0x160 [ 346.626379][T16346] handle_mm_fault+0x1277/0x32b0 [ 346.626410][T16346] ? handle_mm_fault+0xdb/0x32b0 [ 346.626435][T16346] ? __pfx_handle_mm_fault+0x10/0x10 [ 346.626452][T16346] ? lock_vma_under_rcu+0x42c/0x4a0 [ 346.626480][T16346] ? do_user_addr_fault+0x1a8/0x1380 [ 346.626499][T16346] do_user_addr_fault+0xa7c/0x1380 [ 346.626521][T16346] ? rcu_is_watching+0x15/0xb0 [ 346.626538][T16346] ? trace_page_fault_user+0x84/0x1c0 [ 346.626554][T16346] exc_page_fault+0x82/0x100 [ 346.626572][T16346] asm_exc_page_fault+0x26/0x30 [ 346.626586][T16346] RIP: 0033:0x7f067f9b7570 [ 346.626603][T16346] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 346.626615][T16346] RSP: 002b:00007ffc40424718 EFLAGS: 00010246 [ 346.626629][T16346] RAX: 0000000000000000 RBX: 000000000000006b RCX: 00007f067f9c2005 [ 346.626638][T16346] RDX: 00007ffc40424760 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.626647][T16346] RBP: 00007ffc404247cc R08: 0000000000000000 R09: 0000000000000000 [ 346.626655][T16346] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 346.626664][T16346] R13: 00000000000927c0 R14: 000000000005435b R15: 00007ffc40424820 [ 346.626690][T16346] [ 346.982747][T16346] memory: usage 303300kB, limit 307200kB, failcnt 3420 [ 346.993655][T16346] memory+swap: usage 301436kB, limit 9007199254740988kB, failcnt 0 [ 347.002820][T16346] kmem: usage 298692kB, limit 9007199254740988kB, failcnt 0 [ 347.010837][T16346] Memory cgroup stats for /syz4: [ 347.011098][T16346] cache 0 [ 347.036798][T16346] rss 0 [ 347.039671][T16346] rss_huge 0 [ 347.042953][T16346] shmem 0 [ 347.045868][T16346] mapped_file 0 [ 347.049891][T16346] dirty 0 [ 347.057995][T16346] writeback 0 [ 347.061318][T16346] workingset_refault_anon 2 [ 347.074762][T16346] workingset_refault_file 0 [ 347.087147][T16346] swap 221184 [ 347.090522][T16346] swapcached 8192 [ 347.096920][T16346] pgpgin 36581 [ 347.106980][T16346] pgpgout 36579 [ 347.110573][T16346] pgfault 97157 [ 347.114038][T16346] pgmajfault 3 [ 347.132027][T16346] inactive_anon 0 [ 347.135711][T16346] active_anon 8192 [ 347.147303][T16346] inactive_file 0 [ 347.151023][T16346] active_file 0 [ 347.154485][T16346] unevictable 0 [ 347.178947][T16346] hierarchical_memory_limit 314572800 [ 347.184390][T16346] hierarchical_memsw_limit 9223372036854771712 [ 347.205712][T16346] total_cache 0 [ 347.215850][T16346] total_rss 0 [ 347.226053][T16346] total_rss_huge 0 [ 347.230453][T16346] total_shmem 0 [ 347.238546][T16346] total_mapped_file 0 [ 347.247133][T16346] total_dirty 0 [ 347.255099][T16346] total_writeback 0 [ 347.264045][T16346] total_workingset_refault_anon 2 [ 347.281460][T16346] total_workingset_refault_file 0 [ 347.294453][T16346] total_swap 221184 [ 347.309304][T16346] total_swapcached 8192 [ 347.317977][T16346] total_pgpgin 36582 [ 347.326688][T16346] total_pgpgout 36580 [ 347.357267][T16346] total_pgfault 97158 [ 347.361455][T16346] total_pgmajfault 3 [ 347.376957][T16346] total_inactive_anon 0 [ 347.381170][T16346] total_active_anon 8192 [ 347.395705][T16346] total_inactive_file 0 [ 347.429133][T16346] total_active_file 0 [ 347.433235][T16346] total_unevictable 0 [ 347.447162][T16346] anon_cost 0 [ 347.456967][T16346] file_cost 0 [ 347.460386][T16346] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3242,pid=17295,uid=0 [ 347.498475][T16346] Memory cgroup out of memory: Killed process 17295 (syz.4.3242) total-vm:110696kB, anon-rss:1140kB, file-rss:31524kB, shmem-rss:128kB, UID:0 pgtables:176kB oom_score_adj:1000 [ 348.131434][T17343] netlink: 'syz.1.3249': attribute type 83 has an invalid length. [ 348.145069][T17344] __nla_validate_parse: 8 callbacks suppressed [ 348.145086][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3250'. [ 348.180738][T17302] tipc: Resetting bearer [ 348.249688][T17302] tipc: Disabling bearer [ 348.264580][T17198] chnl_net:caif_netlink_parms(): no params data found [ 348.371188][T17349] netlink: 'syz.4.3251': attribute type 13 has an invalid length. [ 348.467549][ T5151] Bluetooth: hci0: command tx timeout [ 348.842166][T17377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3257'. [ 348.907862][T17376] veth3: entered allmulticast mode [ 349.047382][T17198] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.060875][T17198] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.069485][T17198] bridge_slave_0: entered allmulticast mode [ 349.077767][T17198] bridge_slave_0: entered promiscuous mode [ 349.091835][T17198] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.102427][T17198] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.131778][T17198] bridge_slave_1: entered allmulticast mode [ 349.149102][T17198] bridge_slave_1: entered promiscuous mode [ 349.177396][T17394] netlink: 'syz.3.3262': attribute type 10 has an invalid length. [ 349.185996][T17389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.205682][T17394] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3262'. [ 349.235709][T17394] team0: entered promiscuous mode [ 349.243664][T17394] geneve0: entered promiscuous mode [ 349.249775][T17394] batadv1: entered promiscuous mode [ 349.257456][T17394] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.279982][T17386] geneve2: entered promiscuous mode [ 349.296214][T17396] tipc: Enabling of bearer rejected, media not registered [ 349.311885][T17198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.354584][T17198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.449005][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3264'. [ 349.458747][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3264'. [ 349.462918][T17198] team0: Port device team_slave_0 added [ 349.503802][T17198] team0: Port device team_slave_1 added [ 349.613784][T17198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.619172][T17414] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 349.635599][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.666185][T17413] netlink: 'syz.4.3268': attribute type 10 has an invalid length. [ 349.691318][T17198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.704816][T17198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.712479][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.740328][T17198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.770382][T17413] veth0_virt_wifi: entered allmulticast mode [ 349.807186][T17413] team0: Port device veth0_virt_wifi added [ 349.924628][T17427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3272'. [ 350.001272][T17198] hsr_slave_0: entered promiscuous mode [ 350.002551][T17431] netlink: 'syz.3.3273': attribute type 1 has an invalid length. [ 350.020784][T17198] hsr_slave_1: entered promiscuous mode [ 350.024103][T17431] netlink: 'syz.3.3273': attribute type 11 has an invalid length. [ 350.036180][T17198] debugfs: 'hsr0' already exists in 'hsr' [ 350.056910][T17198] Cannot create hsr debugfs directory [ 350.065532][T17431] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3273'. [ 350.235849][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3275'. [ 350.260303][T17439] syzkaller1: entered promiscuous mode [ 350.265961][T17439] syzkaller1: entered allmulticast mode [ 350.341264][T17440] syzkaller1: entered promiscuous mode [ 350.347224][T17440] syzkaller1: entered allmulticast mode [ 350.534111][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3279'. [ 350.557104][ T5151] Bluetooth: hci0: command tx timeout [ 350.697830][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3281'. [ 350.723179][T17198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.740566][T17198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.763878][T17198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 350.766496][T17463] netlink: 'syz.0.3283': attribute type 20 has an invalid length. [ 350.796676][T17463] IPv6: NLM_F_CREATE should be specified when creating new route [ 350.962122][T17198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.995323][T17198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.008678][T17198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 351.030966][T17471] netlink: 'syz.0.3284': attribute type 2 has an invalid length. [ 351.048657][T17475] syzkaller0: entered promiscuous mode [ 351.054275][T17475] syzkaller0: entered allmulticast mode [ 351.148897][T17198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.160255][T17198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.171316][T17198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 351.300125][T17198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.331525][T17198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.374006][T17198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 351.452819][T17485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.513129][T17485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.703513][T17504] syzkaller0: entered promiscuous mode [ 351.717066][T17504] syzkaller0: entered allmulticast mode [ 351.788043][T17509] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 351.801589][T17509] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 351.989260][T17198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 352.029411][T17198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 352.082912][T17198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 352.122478][T17198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 352.537979][T17198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.596171][T17198] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.625988][ T9498] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.633257][ T9498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.745551][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.752806][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.918224][T17587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.925535][T17587] IPv6: NLM_F_CREATE should be set when creating new route [ 352.932818][T17587] IPv6: NLM_F_CREATE should be set when creating new route [ 353.180571][T17598] netlink: 'syz.0.3318': attribute type 1 has an invalid length. [ 353.189229][T17598] __nla_validate_parse: 6 callbacks suppressed [ 353.189244][T17598] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3318'. [ 353.213638][T17598] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3318'. [ 353.239448][T17598] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3318'. [ 353.404784][T17198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.470364][T17620] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3324'. [ 353.594856][T17198] veth0_vlan: entered promiscuous mode [ 353.621364][T17198] veth1_vlan: entered promiscuous mode [ 353.682154][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3328'. [ 353.715859][T17198] veth0_macvtap: entered promiscuous mode [ 353.765444][T17198] veth1_macvtap: entered promiscuous mode [ 353.900473][T17644] netlink: 'syz.1.3331': attribute type 7 has an invalid length. [ 353.903100][T17198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.930618][T17644] pimreg3: entered allmulticast mode [ 353.942618][T17198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.998788][ T9498] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.032165][ T9498] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.047146][T17649] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3332'. [ 354.050624][ T9498] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.074880][ T9498] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.080061][T17651] netlink: 'syz.0.3333': attribute type 13 has an invalid length. [ 354.096217][T17649] 8021q: VLANs not supported on gre0 [ 354.108884][T17651] veth0_macvtap: left promiscuous mode [ 354.117835][T17651] macvtap0: entered allmulticast mode [ 354.133552][T17651] macvtap0: refused to change device tx_queue_len [ 354.299535][T17657] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3335'. [ 354.336029][T17659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3336'. [ 354.400618][T17659] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 354.412895][T17667] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3335'. [ 354.414733][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.452629][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.463546][T17665] syzkaller0: entered promiscuous mode [ 354.473909][T17665] syzkaller0: entered allmulticast mode [ 354.495377][T17670] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3339'. [ 354.531218][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.539752][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.135600][T17690] syzkaller0: entered promiscuous mode [ 355.145651][T17690] syzkaller0: entered allmulticast mode [ 355.513928][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.537215][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.545649][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.554821][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.563735][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 355.567844][T17705] bridge_slave_1: left allmulticast mode [ 355.592240][T17707] netlink: 'syz.0.3347': attribute type 1 has an invalid length. [ 355.600287][T17705] bridge_slave_1: left promiscuous mode [ 355.600540][T17705] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.606948][T17707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.672236][T17705] bridge_slave_0: left allmulticast mode [ 355.678753][T17705] bridge_slave_0: left promiscuous mode [ 355.717892][T17705] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.917367][ T5833] bond0: (slave syz_tun): Releasing backup interface [ 356.112853][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 356.198570][ T9498] bond14: (slave bond0): link status definitely down, disabling slave [ 356.219116][ T9498] bond14: now running without any active interface! [ 356.300495][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 356.460480][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 356.572210][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 356.618417][T17737] tipc: Enabling of bearer rejected, failed to enable media [ 356.679848][T17741] netlink: 'syz.1.3362': attribute type 24 has an invalid length. [ 357.275753][ T12] bond13 (unregistering): (slave gretap3): Releasing active interface [ 357.362692][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 357.401829][ T12] geneve0 (unregistering): left promiscuous mode [ 357.410781][ T12] team0: Port device geneve0 removed [ 357.666766][ T5848] Bluetooth: hci3: command tx timeout [ 357.928092][ T12] bond14 (unregistering): (slave bond0): Releasing active interface [ 357.939326][ T12] bond0 (unregistering): Released all slaves [ 358.063790][ T12] bond1 (unregistering): Released all slaves [ 358.174394][ T12] bond2 (unregistering): Released all slaves [ 358.187259][ T12] bond3 (unregistering): Released all slaves [ 358.199660][ T12] bond4 (unregistering): Released all slaves [ 358.307795][ T12] bond5 (unregistering): Released all slaves [ 358.412269][ T12] bond6 (unregistering): (slave veth5): Releasing active interface [ 358.421089][ T12] bond6 (unregistering): Released all slaves [ 358.525672][ T12] bond7 (unregistering): Released all slaves [ 358.629546][ T12] bond8 (unregistering): Released all slaves [ 358.642396][ T12] bond9 (unregistering): Released all slaves [ 358.654996][ T12] bond10 (unregistering): Released all slaves [ 358.762887][ T12] bond11 (unregistering): Released all slaves [ 358.775839][ T12] bond12 (unregistering): Released all slaves [ 358.789687][ T12] bond13 (unregistering): Released all slaves [ 358.902636][ T12] bond14 (unregistering): Released all slaves [ 358.915176][T17752] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 358.922920][T17754] tipc: Resetting bearer [ 359.030520][T17774] __nla_validate_parse: 10 callbacks suppressed [ 359.030538][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3371'. [ 359.095309][T17775] netlink: 180620 bytes leftover after parsing attributes in process `syz.1.3370'. [ 359.348018][T17788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3374'. [ 359.419489][T17791] xfrm1: entered allmulticast mode [ 359.436959][T17791] netlink: 'syz.0.3375': attribute type 12 has an invalid length. [ 359.486256][T17794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3376'. [ 359.710403][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3377'. [ 359.756545][ T5151] Bluetooth: hci3: command tx timeout [ 359.878604][T17703] chnl_net:caif_netlink_parms(): no params data found [ 360.005136][T17822] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3383'. [ 360.036241][ T6088] hid-generic 0005:0007:5508.0002: hidraw0: BLUETOOTH HID vc3.38 Device [syz1] on aa:aa:aa:aa:aa:aa [ 360.154385][T17827] syzkaller1: entered promiscuous mode [ 360.251921][T17827] syzkaller1: entered allmulticast mode [ 360.415780][T17703] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.428355][T17703] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.435886][T17703] bridge_slave_0: entered allmulticast mode [ 360.445878][T17703] bridge_slave_0: entered promiscuous mode [ 360.471343][T17703] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.481338][T17849] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3389'. [ 360.493299][T17703] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.528734][T17703] bridge_slave_1: entered allmulticast mode [ 360.539601][T17703] bridge_slave_1: entered promiscuous mode [ 360.632964][T17853] syzkaller1: entered allmulticast mode [ 360.644573][T17703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.660425][T17703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.688402][T17859] netlink: 'syz.4.3392': attribute type 10 has an invalid length. [ 360.741647][T17861] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3392'. [ 360.778025][T17859] team0: Device veth0_macvtap failed to register rx_handler [ 360.822606][T17703] team0: Port device team_slave_0 added [ 360.843502][ T12] tipc: Disabling bearer [ 360.850121][ T12] tipc: Left network mode [ 360.852560][T17703] team0: Port device team_slave_1 added [ 360.906279][ T12] IPVS: stopping master sync thread 13650 ... [ 360.956720][ T12] IPVS: stopping backup sync thread 6695 ... [ 361.086952][T17880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3396'. [ 361.167235][T17703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.183113][T17703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.236147][T17703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.259493][T17888] veth1_macvtap: left promiscuous mode [ 361.266117][T17888] macsec0: entered promiscuous mode [ 361.289455][T17888] macsec0: entered allmulticast mode [ 361.295088][T17895] IPVS: set_ctl: invalid protocol: 11612 255.255.255.255:21 [ 361.328583][T17703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.337885][T17703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.367384][T17703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.379643][T17897] veth1_macvtap: entered promiscuous mode [ 361.385521][T17897] veth1_macvtap: entered allmulticast mode [ 361.393775][T17897] macsec0: left promiscuous mode [ 361.399881][T17897] macsec0: left allmulticast mode [ 361.405128][T17897] veth1_macvtap: left allmulticast mode [ 361.429402][T17891] netlink: 'syz.0.3398': attribute type 1 has an invalid length. [ 361.591064][ T5151] Bluetooth: hci1: command tx timeout [ 361.603304][T17910] netlink: 'syz.0.3404': attribute type 12 has an invalid length. [ 361.707560][T17910] bond2: option primary_reselect: invalid value (255) [ 361.724158][T17910] bond2 (unregistering): Released all slaves [ 361.785261][T17901] tap0: tun_chr_ioctl cmd 1074025678 [ 361.791613][T17901] tap0: group set to 0 [ 361.800445][T17703] hsr_slave_0: entered promiscuous mode [ 361.810318][T17703] hsr_slave_1: entered promiscuous mode [ 361.817949][T17703] debugfs: 'hsr0' already exists in 'hsr' [ 361.823713][T17703] Cannot create hsr debugfs directory [ 361.826735][ T5151] Bluetooth: hci3: command 0x040f tx timeout [ 361.916857][T17928] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3408'. [ 361.940938][T17931] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 362.036207][T17938] netlink: 'syz.4.3409': attribute type 32 has an invalid length. [ 362.517557][T17942] netlink: 'syz.4.3409': attribute type 32 has an invalid length. [ 362.679858][ T12] hsr_slave_0: left promiscuous mode [ 362.696935][ T12] hsr_slave_1: left promiscuous mode [ 362.743450][T17967] netlink: 'syz.1.3413': attribute type 1 has an invalid length. [ 362.810452][ T12] batadv1 (unregistering): left promiscuous mode [ 362.824312][ T12] team0 (unregistering): Port device batadv1 removed [ 363.360268][ T135] smc: removing ib device !yz! [ 363.769638][T17967] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 363.916781][ T5151] Bluetooth: hci3: command 0x040f tx timeout [ 364.045673][T17990] veth0: entered promiscuous mode [ 364.143693][T17994] veth0: left promiscuous mode [ 364.181601][T17993] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 364.514585][T18010] __nla_validate_parse: 2 callbacks suppressed [ 364.514605][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'. [ 364.552423][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3423'. [ 365.229290][T18038] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3433'. [ 365.425346][T18047] netlink: 'syz.0.3435': attribute type 29 has an invalid length. [ 365.440309][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 365.457511][T18047] netlink: 'syz.0.3435': attribute type 29 has an invalid length. [ 365.467915][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 365.732825][T17703] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 365.816575][T17703] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 365.842522][T18060] x_tables: unsorted underflow at hook 1 [ 365.942215][T17703] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 365.986525][ T5151] Bluetooth: hci3: command 0x040f tx timeout [ 366.010587][T17703] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.289819][T18074] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.3443'. [ 366.574727][T18083] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3447'. [ 366.616935][T18086] netlink: 'syz.2.3448': attribute type 7 has an invalid length. [ 366.639274][T18086] netlink: 'syz.2.3448': attribute type 7 has an invalid length. [ 366.685238][T17703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.757208][T18090] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3450'. [ 366.776875][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'. [ 366.851764][T18091] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3450'. [ 366.921076][T17703] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.945985][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.953310][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.083110][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.090629][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.250714][T18101] netlink: 'syz.0.3453': attribute type 2 has an invalid length. [ 367.349035][T18106] tipc: Enabling of bearer rejected, failed to enable media [ 367.705405][T18120] nbd: nbd2 already in use [ 367.742276][T17703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.824857][T18126] netlink: 'syz.2.3462': attribute type 33 has an invalid length. [ 367.914317][T17703] veth0_vlan: entered promiscuous mode [ 367.951290][T17703] veth1_vlan: entered promiscuous mode [ 368.050882][T17703] veth0_macvtap: entered promiscuous mode [ 368.070220][T17703] veth1_macvtap: entered promiscuous mode [ 368.159150][T17703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.191852][T17703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.214882][ T6696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.239399][ T6696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.257928][ T6696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.267269][ T6696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.371538][T18149] syzkaller0: entered promiscuous mode [ 368.377134][T18149] syzkaller0: entered allmulticast mode [ 368.590557][ T30] audit: type=1107 audit(1766942495.728:6): pid=18158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 368.911769][T18166] netlink: 'syz.1.3474': attribute type 2 has an invalid length. [ 370.141401][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.159498][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.204827][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.225489][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.381900][T18194] openvswitch: netlink: Message has 2712 unknown bytes. [ 370.476844][T18201] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '@' [ 370.516639][T18205] __nla_validate_parse: 2 callbacks suppressed [ 370.516657][T18205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'. [ 370.568403][T18207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.645724][T18213] netlink: 'syz.3.3486': attribute type 1 has an invalid length. [ 370.655555][T18214] netlink: 'syz.1.3487': attribute type 8 has an invalid length. [ 370.667830][T18214] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3487'. [ 370.766170][T18219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3486'. [ 370.792459][T18223] netlink: 'syz.0.3488': attribute type 39 has an invalid length. [ 370.882201][T18219] ip6gretap0: entered promiscuous mode [ 370.888627][T18219] ip6gretap0: entered allmulticast mode [ 370.941159][T18229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3491'. [ 370.977331][T18232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.064203][T18236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3494'. [ 371.219632][T18244] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3497'. [ 371.347919][T18255] sctp: [Deprecated]: syz.1.3498 (pid 18255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.347919][T18255] Use struct sctp_sack_info instead [ 371.594300][T18265] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3505'. [ 371.694623][T18274] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3506'. [ 372.709315][T18292] netlink: 'syz.3.3510': attribute type 1 has an invalid length. [ 372.724885][T18292] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3510'. [ 372.934570][T18319] netlink: 'syz.4.3515': attribute type 2 has an invalid length. [ 372.953724][T18319] : entered promiscuous mode [ 373.010693][T18325] netlink: 'syz.0.3516': attribute type 1 has an invalid length. [ 373.019410][T18327] netlink: 'syz.1.3518': attribute type 1 has an invalid length. [ 373.225493][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3523'. [ 373.289729][T18352] netlink: 'syz.0.3525': attribute type 10 has an invalid length. [ 373.304448][T18352] team0: Device veth0_macvtap failed to register rx_handler [ 373.366000][T18358] netlink: 'syz.1.3524': attribute type 13 has an invalid length. [ 373.410295][T18358] veth0_macvtap: left promiscuous mode [ 373.595547][T18371] netlink: 'syz.4.3529': attribute type 1 has an invalid length. [ 373.621485][T18377] IPv6: Can't replace route, no match found [ 373.807903][T18385] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.835935][T18385] bond1: (slave bond2): making interface the new active one [ 373.849258][T18385] bond1: (slave bond2): Enslaving as an active interface with an up link [ 373.896110][T18388] bond3 (unregistering): Released all slaves [ 374.374175][T18431] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 374.405333][T18432] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 374.569915][T18442] netlink: 'syz.1.3550': attribute type 12 has an invalid length. [ 374.665767][T18442] bond3: option primary_reselect: invalid value (255) [ 374.689103][T18442] bond3 (unregistering): Released all slaves [ 374.730886][T18453] syz.4.3554: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 374.747792][T18451] tipc: Started in network mode [ 374.752796][T18451] tipc: Node identity 4acc459266a, cluster identity 4711 [ 374.765677][T18451] tipc: Enabled bearer , priority 0 [ 374.773007][T18453] CPU: 0 UID: 0 PID: 18453 Comm: syz.4.3554 Not tainted syzkaller #0 PREEMPT(full) [ 374.773031][T18453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.773047][T18453] Call Trace: [ 374.773055][T18453] [ 374.773064][T18453] dump_stack_lvl+0x189/0x250 [ 374.773095][T18453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.773117][T18453] ? __pfx__printk+0x10/0x10 [ 374.773142][T18453] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 374.773163][T18453] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 374.773185][T18453] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 374.773208][T18453] warn_alloc+0x214/0x310 [ 374.773229][T18453] ? stack_trace_save+0x9c/0xe0 [ 374.773257][T18453] ? __pfx_warn_alloc+0x10/0x10 [ 374.773283][T18453] ? kasan_save_track+0x4f/0x80 [ 374.773300][T18453] ? kasan_save_track+0x3e/0x80 [ 374.773316][T18453] ? __kasan_kmalloc+0x93/0xb0 [ 374.773332][T18453] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 374.773349][T18453] ? xskq_create+0x56/0x170 [ 374.773374][T18453] ? xsk_setsockopt+0x4dc/0x8d0 [ 374.773394][T18453] ? do_sock_setsockopt+0x17c/0x1b0 [ 374.773413][T18453] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 374.773429][T18453] ? do_syscall_64+0xfa/0xf80 [ 374.773449][T18453] __vmalloc_node_range_noprof+0x134/0x16a0 [ 374.773495][T18453] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 374.773516][T18453] ? __kasan_kmalloc+0x93/0xb0 [ 374.773545][T18453] vmalloc_user_noprof+0xad/0xf0 [ 374.773563][T18453] ? xskq_create+0xbf/0x170 [ 374.773588][T18453] xskq_create+0xbf/0x170 [ 374.773617][T18453] xsk_init_queue+0xb0/0x110 [ 374.773642][T18453] xsk_setsockopt+0x4dc/0x8d0 [ 374.773669][T18453] ? __pfx_xsk_setsockopt+0x10/0x10 [ 374.773693][T18453] ? __pfx_aa_sk_perm+0x10/0x10 [ 374.773715][T18453] ? aa_sock_opt_perm+0xff/0x1a0 [ 374.773740][T18453] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 374.773762][T18453] ? __pfx_xsk_setsockopt+0x10/0x10 [ 374.773787][T18453] do_sock_setsockopt+0x17c/0x1b0 [ 374.773812][T18453] __x64_sys_setsockopt+0x13f/0x1b0 [ 374.773839][T18453] do_syscall_64+0xfa/0xf80 [ 374.773858][T18453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.773875][T18453] ? clear_bhb_loop+0x60/0xb0 [ 374.773897][T18453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.773921][T18453] RIP: 0033:0x7f067f98f749 [ 374.773939][T18453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.773955][T18453] RSP: 002b:00007f06808da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 374.773975][T18453] RAX: ffffffffffffffda RBX: 00007f067fbe5fa0 RCX: 00007f067f98f749 [ 374.773989][T18453] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 374.774000][T18453] RBP: 00007f067fa13f91 R08: 0000000000000004 R09: 0000000000000000 [ 374.774011][T18453] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.774023][T18453] R13: 00007f067fbe6038 R14: 00007f067fbe5fa0 R15: 00007ffc40424408 [ 374.774055][T18453] [ 374.775165][T18453] Mem-Info: [ 374.803695][T18460] xt_ecn: cannot match TCP bits for non-tcp packets [ 374.816894][T18451] syzkaller0: entered promiscuous mode [ 374.825157][T18460] xt_ecn: cannot match TCP bits for non-tcp packets [ 374.868706][T18451] syzkaller0: entered allmulticast mode [ 374.875486][T18453] active_anon:3955 inactive_anon:0 isolated_anon:0 [ 374.875486][T18453] active_file:2628 inactive_file:40018 isolated_file:0 [ 374.875486][T18453] unevictable:768 dirty:74 writeback:0 [ 374.875486][T18453] slab_reclaimable:12685 slab_unreclaimable:153349 [ 374.875486][T18453] mapped:28853 shmem:1361 pagetables:1237 [ 374.875486][T18453] sec_pagetables:0 bounce:0 [ 374.875486][T18453] kernel_misc_reclaimable:0 [ 374.875486][T18453] free:1270018 free_pcp:12721 free_cma:0 [ 374.903049][T18463] tipc: Resetting bearer [ 374.916947][T18453] Node 0 active_anon:15820kB inactive_anon:0kB active_file:10512kB inactive_file:159872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115412kB dirty:296kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14832kB pagetables:4796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.918316][T18460] xt_ecn: cannot match TCP bits for non-tcp packets [ 374.922412][T18453] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 374.938220][T18460] xt_ecn: cannot match TCP bits for non-tcp packets [ 374.941852][T18453] Node 0 [ 374.961444][T18460] xt_ecn: cannot match TCP bits for non-tcp packets [ 374.964441][T18453] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 374.990745][T18460] xt_ecn: cannot match TCP bits for non-tcp packets [ 374.996300][T18453] lowmem_reserve[]: [ 375.002546][T18450] tipc: Resetting bearer [ 375.005970][T18453] 0 [ 375.039084][T18460] xt_ecn: cannot match TCP bits for non-tcp packets [ 375.043202][T18453] 2499 [ 375.052051][T18460] xt_ecn: cannot match TCP bits for non-tcp packets [ 375.060212][T18453] 2501 [ 375.075294][T18460] xt_ecn: cannot match TCP bits for non-tcp packets [ 375.077829][T18453] 2501 [ 375.079483][T18460] xt_ecn: cannot match TCP bits for non-tcp packets [ 375.083902][T18453] 2501 [ 375.350496][T18450] tipc: Disabling bearer [ 375.356592][T18453] [ 375.361848][T18453] Node 0 DMA32 free:1187980kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16040kB inactive_anon:0kB active_file:10512kB inactive_file:159872kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:29508kB local_pcp:15384kB free_cma:0kB [ 375.416738][T18466] erspan0: entered allmulticast mode [ 375.422208][T18453] lowmem_reserve[]: 0 0 1 1 1 [ 375.455563][T18453] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.541641][T18453] lowmem_reserve[]: 0 0 0 0 0 [ 375.553309][T18453] Node 1 Normal free:3875472kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19904kB local_pcp:14624kB free_cma:0kB [ 375.590060][T18453] lowmem_reserve[]: 0 0 0 0 0 [ 375.595083][T18453] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 375.613069][T18453] Node 0 DMA32: 7199*4kB (UM) 4678*8kB (UME) 1673*16kB (UME) 199*32kB (UME) 257*64kB (UM) 653*128kB (UME) 496*256kB (UM) 373*512kB (UME) 194*1024kB (UME) 44*2048kB (UME) 93*4096kB (UM) = 1187036kB [ 375.649102][T18481] netlink: 'syz.1.3563': attribute type 83 has an invalid length. [ 375.661943][T18453] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 375.693170][T18453] Node 1 Normal: 164*4kB (UE) 48*8kB (UME) 44*16kB (UME) 100*32kB (UME) 35*64kB (UME) 9*128kB (UME) 6*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 942*4096kB (M) = 3875472kB [ 375.713321][T18453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.724011][T18453] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 375.734458][T18453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.752948][T18453] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 375.770904][T18453] 44029 total pagecache pages [ 375.775641][T18453] 0 pages in swap cache [ 375.795308][T18453] Free swap = 124996kB [ 375.803316][T18453] Total swap = 124996kB [ 375.810156][T18453] 2097051 pages RAM [ 375.814522][T18453] 0 pages HighMem/MovableOnly [ 375.829570][T18453] 425122 pages reserved [ 375.833853][T18453] 0 pages cma reserved [ 375.943609][T18501] __nla_validate_parse: 7 callbacks suppressed [ 375.943626][T18501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3569'. [ 376.010931][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3571'. [ 376.051321][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3572'. [ 376.052458][T18505] syzkaller0: entered promiscuous mode [ 376.088955][T18507] netlink: 'syz.2.3572': attribute type 1 has an invalid length. [ 376.098712][T18505] syzkaller0: entered allmulticast mode [ 376.319691][T18518] syzkaller0: entered promiscuous mode [ 376.325232][T18518] syzkaller0: entered allmulticast mode [ 376.416283][T18524] team0: Port device dummy0 added [ 376.507971][T18534] Bluetooth: MGMT ver 1.23 [ 376.654061][T18542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3585'. [ 376.765824][T18548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3589'. [ 376.937714][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3590'. [ 377.066797][T18562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3590'. [ 377.486944][T18560] syzkaller0: entered promiscuous mode [ 377.492490][T18560] syzkaller0: entered allmulticast mode [ 377.518844][T18568] tipc: Enabled bearer , priority 0 [ 377.556612][T18552] tipc: Resetting bearer [ 377.621505][T18552] tipc: Disabling bearer [ 377.791729][T18587] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 377.832345][T18591] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3597'. [ 377.954369][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3599'. [ 377.967647][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3599'. [ 378.466231][T18644] openvswitch: netlink: IPv6 tunnel dst address is zero [ 378.634204][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 379.737663][T18700] validate_nla: 1 callbacks suppressed [ 379.737683][T18700] netlink: 'syz.3.3624': attribute type 1 has an invalid length. [ 380.174464][T18728] openvswitch: netlink: Missing key (keys=40, expected=100) [ 382.398145][T18801] IPv6: addrconf: prefix option has invalid lifetime [ 382.424174][T18796] netlink: 'syz.0.3653': attribute type 8 has an invalid length. [ 382.552489][T18808] __nla_validate_parse: 7 callbacks suppressed [ 382.552508][T18808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3656'. [ 382.577365][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3656'. [ 382.792825][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3662'. [ 382.811710][T18827] netlink: 'syz.0.3662': attribute type 1 has an invalid length. [ 382.821095][T18827] netlink: 'syz.0.3662': attribute type 2 has an invalid length. [ 383.268976][T18854] v: renamed from dummy0 (while UP) [ 383.345756][T18862] bond0: option ad_select: unable to set because the bond device is up [ 383.363044][T18862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3671'. [ 383.380202][T18862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3671'. [ 383.381199][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3670'. [ 383.399991][T18867] netlink: 'syz.0.3672': attribute type 11 has an invalid length. [ 383.411619][T18867] netlink: 'syz.0.3672': attribute type 11 has an invalid length. [ 383.800547][T18892] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.3676'. [ 383.822805][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3677'. [ 384.033837][T18899] pimreg: entered allmulticast mode [ 384.626157][T18939] syzkaller0: entered promiscuous mode [ 384.637286][T18939] syzkaller0: entered allmulticast mode [ 384.797193][T18948] netlink: 'syz.4.3691': attribute type 1 has an invalid length. [ 384.819013][T18948] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 384.927882][T18950] tipc: Enabling of bearer rejected, failed to enable media [ 384.963233][T18953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3693'. [ 384.992565][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3693'. [ 385.458032][T18980] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 385.638103][T18989] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 385.647289][T18989] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 385.659989][T18989] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 386.145096][T18999] netlink: 'syz.1.3709': attribute type 5 has an invalid length. [ 386.175412][T18999] geneve2: entered promiscuous mode [ 386.186794][T18999] geneve2: entered allmulticast mode [ 386.198709][ T3496] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 386.213381][T19003] netlink: 'syz.0.3710': attribute type 10 has an invalid length. [ 386.223464][ T3496] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 386.233839][T19003] v: entered promiscuous mode [ 386.243391][T19003] bridge0: port 3(v) entered blocking state [ 386.253915][T19003] bridge0: port 3(v) entered disabled state [ 386.260954][T19003] v: entered allmulticast mode [ 386.271808][ T3496] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 386.323139][ T3496] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 386.451560][T19015] 8021q: VLANs not supported on sit0 [ 386.471201][T19017] 8021q: VLANs not supported on sit0 [ 386.581351][T18990] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 386.621837][T18990] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 386.666858][T18990] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 386.742024][T19030] syzkaller0: entered promiscuous mode [ 386.751860][T19030] syzkaller0: entered allmulticast mode [ 387.093861][T19056] netlink: 'syz.3.3730': attribute type 2 has an invalid length. [ 387.307223][T19076] openvswitch: netlink: Message has 6 unknown bytes. [ 387.315018][T19076] netlink: 'syz.0.3732': attribute type 4 has an invalid length. [ 387.381859][T19071] netlink: 'syz.0.3732': attribute type 4 has an invalid length. [ 387.690651][T19107] __nla_validate_parse: 11 callbacks suppressed [ 387.690664][T19107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3743'. [ 387.709682][T19107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3743'. [ 387.850985][T19113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 387.874224][T19113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 387.992143][T19116] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3746'. [ 388.210482][T19126] veth1_to_bond: entered allmulticast mode [ 388.235984][T19128] veth1_to_bond: left allmulticast mode [ 388.586903][T19142] delete_channel: no stack [ 388.592354][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3753'. [ 388.734033][T19146] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3755'. [ 388.855224][T19146] bond3 (unregistering): Released all slaves [ 389.168051][T19158] bridge1: entered promiscuous mode [ 389.177386][T19158] bridge1: entered allmulticast mode [ 389.364626][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3762'. [ 389.383763][T19176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3762'. [ 389.414648][T19176] netlink: 'syz.1.3762': attribute type 14 has an invalid length. [ 389.437528][T19176] netlink: 'syz.1.3762': attribute type 13 has an invalid length. [ 389.646513][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3768'. [ 389.651116][T19193] IPv6: sit1: Disabled Multicast RS [ 389.697465][ T3496] nci: nci_rx_work: unknown MT 0x6 [ 389.824906][T19211] netlink: 'syz.0.3772': attribute type 24 has an invalid length. [ 390.565600][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x25 [ 390.707526][T19243] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 391.605108][T19306] netlink: 'syz.3.3800': attribute type 7 has an invalid length. [ 392.238621][T19336] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 392.293668][T19339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.701758][T19367] nft_compat: unsupported protocol 0 [ 392.761783][T19368] __nla_validate_parse: 40 callbacks suppressed [ 392.761802][T19368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3820'. [ 392.852506][T19381] netlink: 'syz.3.3822': attribute type 39 has an invalid length. [ 392.980843][T19386] team_slave_0: entered promiscuous mode [ 392.986635][T19386] team_slave_1: entered promiscuous mode [ 392.994284][T19386] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 393.016196][T19390] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.3826'. [ 393.024121][T19392] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 393.059336][T19388] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3825'. [ 393.123705][T19396] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3828'. [ 393.217500][T19406] netlink: 'syz.3.3831': attribute type 18 has an invalid length. [ 393.277464][T19408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3832'. [ 393.371240][T19421] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 393.407617][T19422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3834'. [ 393.562172][T19429] syzkaller0: entered promiscuous mode [ 393.573373][T19429] syzkaller0: entered allmulticast mode [ 393.619545][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3838'. [ 393.629854][T19431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3838'. [ 393.639492][T19431] netlink: 'syz.0.3838': attribute type 11 has an invalid length. [ 393.693486][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3837'. [ 393.727356][T19429] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 393.740945][T19429] bond1 (unregistering): Released all slaves [ 393.752080][T19440] netlink: 'syz.4.3841': attribute type 1 has an invalid length. [ 393.799420][T19428] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 393.821307][T19428] bond1 (unregistering): Released all slaves [ 393.857485][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3838'. [ 393.869752][T19431] netlink: 'syz.0.3838': attribute type 11 has an invalid length. [ 393.880497][T19438] bridge3: entered promiscuous mode [ 393.896135][T19438] bridge3: entered allmulticast mode [ 393.905654][T19438] team0: Port device bridge3 added [ 393.918776][T19444] bridge0: port 3(team0) entered blocking state [ 393.947154][T19444] bridge0: port 3(team0) entered disabled state [ 393.955674][T19444] team0: entered allmulticast mode [ 393.962735][T19444] team_slave_0: entered allmulticast mode [ 393.975377][T19444] team_slave_1: entered allmulticast mode [ 393.992044][T19444] team0: left allmulticast mode [ 393.999758][T19444] team_slave_0: left allmulticast mode [ 394.008056][T19444] team_slave_1: left allmulticast mode [ 394.014051][ T1007] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.152186][ T1007] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.172222][ T1007] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.194414][ T1007] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.320049][T19471] batadv_slave_0: entered promiscuous mode [ 394.527689][T19484] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 394.790817][T19470] batadv_slave_0: left promiscuous mode [ 395.341398][T19533] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 395.772035][T19531] netlink: 'syz.3.3863': attribute type 4 has an invalid length. [ 395.797146][T19531] openvswitch: netlink: Flow key attr not present in new flow. [ 396.151764][T19558] netlink: 'syz.0.3869': attribute type 10 has an invalid length. [ 396.380438][T19573] sctp: [Deprecated]: syz.0.3873 (pid 19573) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.380438][T19573] Use struct sctp_sack_info instead [ 396.462513][T19573] pim6reg1: entered promiscuous mode [ 396.468127][T19573] pim6reg1: entered allmulticast mode [ 396.553146][T19583] netlink: 'syz.2.3877': attribute type 27 has an invalid length. [ 396.614042][T19583] ipt_REJECT: TCP_RESET invalid for non-tcp [ 396.628078][T19583] block nbd0: reconnected socket [ 396.636918][T19583] nbd: socks must be embedded in a SOCK_ITEM attr [ 396.657344][ T5151] block nbd0: Receive control failed (result -32) [ 397.015742][T19613] netlink: 'syz.4.3886': attribute type 26 has an invalid length. [ 397.080089][ T9492] tipc: Disabling bearer [ 397.113077][ T9492] bond5 (unregistering): (slave gretap2): Releasing active interface [ 397.138307][ T9492] bond15 (unregistering): (slave gretap3): Releasing active interface [ 397.249213][ T9492] bond6 (unregistering): (slave geneve3): Releasing active interface [ 397.834488][ T9492] bond1 (unregistering): Released all slaves [ 397.848118][ T9492] bond2 (unregistering): Released all slaves [ 397.860692][ T9492] bond0 (unregistering): Released all slaves [ 397.873813][ T9492] bond3 (unregistering): Released all slaves [ 397.983941][ T9492] bond4 (unregistering): Released all slaves [ 397.998058][ T9492] bond5 (unregistering): Released all slaves [ 398.011037][ T9492] bond6 (unregistering): Released all slaves [ 398.126818][ T9492] bond7 (unregistering): Released all slaves [ 398.234093][ T9492] bond8 (unregistering): Released all slaves [ 398.338240][ T9492] bond9 (unregistering): Released all slaves [ 398.350996][ T9492] bond10 (unregistering): Released all slaves [ 398.366631][ T9492] bond11 (unregistering): Released all slaves [ 398.379557][ T9492] bond12 (unregistering): Released all slaves [ 398.498359][ T9492] bond13 (unregistering): Released all slaves [ 398.511281][ T9492] bond14 (unregistering): Released all slaves [ 398.523887][ T9492] bond15 (unregistering): Released all slaves [ 398.544033][T19599] bridge0: port 4(veth0_to_bridge) entered blocking state [ 398.553522][T19599] bridge0: port 4(veth0_to_bridge) entered disabled state [ 398.561055][T19599] veth0_to_bridge: entered allmulticast mode [ 398.569382][T19599] veth0_to_bridge: entered promiscuous mode [ 398.636848][T19613] __nla_validate_parse: 15 callbacks suppressed [ 398.636867][T19613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3886'. [ 398.682787][T19618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3886'. [ 398.731067][ T9492] 9: left promiscuous mode [ 398.912601][T19635] syzkaller1: entered promiscuous mode [ 398.918336][T19635] syzkaller1: entered allmulticast mode [ 398.925775][ T9492] tipc: Disabling bearer [ 398.960444][T19630] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 398.968625][ T9492] tipc: Disabling bearer [ 398.988635][ T9492] tipc: Left network mode [ 399.004151][T19627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3887'. [ 399.057092][T19627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3887'. [ 399.105629][T19632] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3887'. [ 399.296979][T19647] syzkaller0: refused to change device tx_queue_len [ 399.451010][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 399.566209][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 399.648151][T19664] vlan2: entered allmulticast mode [ 399.653450][T19664] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 399.689207][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3897'. [ 399.818772][ C0] Unknown status report in ack skb [ 399.824744][ C1] Unknown status report in ack skb [ 399.850983][T19673] netlink: 'syz.3.3898': attribute type 3 has an invalid length. [ 399.889460][T19677] lo: entered promiscuous mode [ 399.953544][T19677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.972445][T19680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3900'. [ 400.187498][T19694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3905'. [ 400.207488][ T9492] hsr_slave_0: left promiscuous mode [ 400.215665][ T9492] batman_adv: batadv0: Removing interface: veth3 [ 400.281264][ T9492] pim6reg (unregistering): left allmulticast mode [ 400.938399][ T75] smc: removing ib device sy [ 401.228314][ T9492] smc: removing net device team0 with user defined pnetid SYZ2 [ 401.419782][T19715] 8021q: VLANs not supported on ipvlan1 [ 401.486170][T19721] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 401.899021][T19736] Cannot find add_set index 2 as target [ 401.972645][T19736] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 402.035294][T19745] netlink: 'syz.2.3919': attribute type 1 has an invalid length. [ 402.209176][T19753] tipc: Enabling of bearer rejected, failed to enable media [ 402.320189][T19759] netlink: 'syz.3.3921': attribute type 2 has an invalid length. [ 402.505183][T19768] netlink: 'syz.4.3924': attribute type 9 has an invalid length. [ 402.542782][T19768] netlink: 'syz.4.3924': attribute type 6 has an invalid length. [ 402.750991][T19753] syzkaller0: entered promiscuous mode [ 402.777208][T19753] syzkaller0: entered allmulticast mode [ 404.958848][T19798] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 404.969477][T19798] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 404.997133][T19807] __nla_validate_parse: 8 callbacks suppressed [ 404.997153][T19807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3934'. [ 405.082442][T19813] netlink: 'syz.0.3934': attribute type 63 has an invalid length. [ 405.131854][T19807] netlink: 'syz.0.3934': attribute type 63 has an invalid length. [ 405.245156][ T9492] IPVS: stop unused estimator thread 0... [ 405.258656][T19824] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3936'. [ 405.300585][T19826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3937'. [ 405.304961][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3936'. [ 405.357552][T19830] netlink: 'syz.1.3938': attribute type 3 has an invalid length. [ 405.388344][T19830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3938'. [ 405.478430][T19838] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3942'. [ 405.492254][T19838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3942'. [ 405.516235][T19840] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 405.850046][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3948'. [ 406.028402][T19877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3952'. [ 406.059438][T19877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3952'. [ 406.313809][T19896] netlink: 'syz.2.3959': attribute type 2 has an invalid length. [ 406.378191][T19891] netlink: 'syz.1.3956': attribute type 2 has an invalid length. [ 406.466247][T19905] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 406.608365][T19909] netlink: 'syz.3.3962': attribute type 1 has an invalid length. [ 406.681204][T19920] macvtap0: refused to change device tx_queue_len [ 406.979443][T19937] veth1_to_bond: entered allmulticast mode [ 407.228501][T19936] veth1_to_bond: left allmulticast mode [ 407.373752][T19969] xt_HMARK: spi-set and port-set can't be combined [ 407.443554][T19971] validate_nla: 6 callbacks suppressed [ 407.443572][T19971] netlink: 'syz.3.3982': attribute type 5 has an invalid length. [ 407.648036][T19983] geneve3: entered promiscuous mode [ 408.651472][T20035] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 408.661774][T20035] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 408.761553][T20015] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 409.184878][T20078] macvtap0: entered promiscuous mode [ 409.192316][T20078] macvtap0: entered allmulticast mode [ 409.226042][T20078] veth1_vlan: entered allmulticast mode [ 409.279679][T20082] macvtap1: entered promiscuous mode [ 409.296182][T20082] macvtap1: entered allmulticast mode [ 409.389903][T19659] bridge_slave_1: left allmulticast mode [ 409.412024][T19659] bridge_slave_1: left promiscuous mode [ 409.455718][T19659] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.500050][T19659] bridge_slave_0: left allmulticast mode [ 409.506136][T19659] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.552792][T20095] netlink: 'syz.0.4019': attribute type 8 has an invalid length. [ 409.567609][T20096] openvswitch: netlink: Duplicate key (type 1). [ 409.568749][T20095] netlink: 'syz.0.4019': attribute type 3 has an invalid length. [ 409.604310][T20095] netlink: 'syz.0.4019': attribute type 1 has an invalid length. [ 409.830927][T19659] dvmrp0 (unregistering): left allmulticast mode [ 409.995218][T19659] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 410.068867][T19659] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 410.450782][T19659] bond1 (unregistering): (slave bond2): Releasing backup interface [ 410.460174][T19659] bond1 (unregistering): (slave bond3): Releasing backup interface [ 410.470997][T19659] bond1 (unregistering): Released all slaves [ 410.595482][T19659] bond2 (unregistering): Released all slaves [ 410.709165][T19659] bond3 (unregistering): Released all slaves [ 410.721768][T19659] bond4 (unregistering): Released all slaves [ 410.834923][T19659] bond5 (unregistering): Released all slaves [ 410.848851][T19659] bond0 (unregistering): Released all slaves [ 410.862802][T19659] bond6 (unregistering): Released all slaves [ 410.908580][T20095] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.106799][T19659] tipc: Disabling bearer [ 411.187087][T19659] tipc: Left network mode [ 411.234818][T20120] __nla_validate_parse: 16 callbacks suppressed [ 411.234838][T20120] netlink: 536 bytes leftover after parsing attributes in process `syz.3.4028'. [ 411.520030][T20139] netlink: 'syz.2.4032': attribute type 33 has an invalid length. [ 411.541857][T20139] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4032'. [ 411.573684][T20146] netlink: 'syz.3.4035': attribute type 1 has an invalid length. [ 411.889911][T20167] netlink: 'syz.0.4040': attribute type 1 has an invalid length. [ 412.898465][T20186] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4046'. [ 413.063908][T20189] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 413.079163][T20196] IPv6: addrconf: prefix option has invalid lifetime [ 413.100893][T20196] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4050'. [ 413.113600][T20195] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 413.285913][T20211] netlink: 'syz.3.4055': attribute type 1 has an invalid length. [ 413.411808][T20219] bond1: (slave ip6gretap1): making interface the new active one [ 413.421699][T20219] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 413.438153][T20219] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 413.457345][T20219] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 413.542050][T19659] IPVS: stop unused estimator thread 0... [ 413.687942][T20238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4063'. [ 413.726672][T20238] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4063'. [ 413.883069][T20253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4066'. [ 413.912903][T20246] vlan2: entered promiscuous mode [ 413.919650][T20246] vlan2: entered allmulticast mode [ 413.929078][T20246] hsr_slave_1: entered allmulticast mode [ 413.941267][T20247] vlan0: entered promiscuous mode [ 413.977247][T20247] vlan0: entered allmulticast mode [ 413.992786][T20247] veth0_vlan: entered allmulticast mode [ 414.196596][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4069'. [ 414.260874][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4071'. [ 414.311626][T20269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4071'. [ 414.348734][T20269] netlink: 'syz.2.4071': attribute type 6 has an invalid length. [ 414.370873][ T3496] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.400477][ T3496] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.414784][T20277] netlink: 'syz.1.4074': attribute type 1 has an invalid length. [ 414.447148][ T3496] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.496484][ T3496] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.621412][T20289] netlink: 'syz.1.4079': attribute type 1 has an invalid length. [ 414.697382][T20289] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.721669][T20296] bond4: (slave geneve3): making interface the new active one [ 414.734190][T20296] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 414.775807][T20296] netlink: 'syz.1.4079': attribute type 1 has an invalid length. [ 414.779117][T20289] netlink: 'syz.1.4079': attribute type 1 has an invalid length. [ 414.921024][T20312] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 415.150004][T20320] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.306181][T20341] xt_hashlimit: size too large, truncated to 1048576 [ 415.341431][T20345] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 415.353496][T20346] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 415.508807][T20352] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 415.889224][T20375] netlink: 'syz.4.4103': attribute type 2 has an invalid length. [ 416.084257][T20398] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 416.210509][T20403] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 416.254385][T20406] __nla_validate_parse: 11 callbacks suppressed [ 416.254403][T20406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4112'. [ 416.295722][T20411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4116'. [ 416.321327][T20406] bond4: Invalid ad_actor_system MAC address. [ 416.327822][T20406] bond4: option ad_actor_system: invalid value (1) [ 416.346005][T20406] bond4 (unregistering): Released all slaves [ 416.412995][T20425] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4118'. [ 416.441572][T20425] openvswitch: netlink: Flow key attr not present in new flow. [ 416.569087][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4120'. [ 416.852563][T20449] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4122'. [ 416.872898][T20449] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 417.060356][T20464] netlink: 'syz.3.4125': attribute type 1 has an invalid length. [ 417.174398][T20464] bond2: entered promiscuous mode [ 417.183303][T20464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.192015][T20465] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 417.214263][T20465] bond6: (slave lo): Enslaving as a backup interface with an up link [ 417.231375][T20465] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 417.321670][T20466] bond2: (slave bridge3): making interface the new active one [ 417.348216][T20466] bridge3: entered promiscuous mode [ 417.364434][T20466] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 417.463250][T20483] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4132'. [ 417.481433][T20490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4135'. [ 417.510856][T20493] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4133'. [ 417.541873][T20492] netlink: 'syz.4.4134': attribute type 10 has an invalid length. [ 417.569038][T20492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4134'. [ 417.611475][T20492] team0: Port device geneve0 added [ 417.770938][T20507] bridge3: entered promiscuous mode [ 417.783508][T20507] bridge3: entered allmulticast mode [ 418.431771][T20531] netlink: 'syz.4.4147': attribute type 25 has an invalid length. [ 418.443663][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4147'. [ 418.573359][T20537] netlink: 'syz.3.4149': attribute type 7 has an invalid length. [ 418.591122][T20538] netlink: 'syz.3.4149': attribute type 7 has an invalid length. [ 418.633511][T20537] netlink: 'syz.3.4149': attribute type 21 has an invalid length. [ 418.864506][T20546] syz.4.4153 (20546) used greatest stack depth: 15744 bytes left [ 419.210864][T20562] ipvlan2: entered promiscuous mode [ 419.769539][T20601] tipc: Started in network mode [ 419.781553][T20601] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 419.799046][T20601] tipc: Enabled bearer , priority 2 [ 419.894517][T20610] sock: sock_set_timeout: `syz.2.4170' (pid 20610) tries to set negative timeout [ 419.927032][T20614] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 420.093470][T20623] netlink: 'syz.2.4174': attribute type 4 has an invalid length. [ 420.262847][T20632] sctp: [Deprecated]: syz.2.4175 (pid 20632) Use of int in maxseg socket option. [ 420.262847][T20632] Use struct sctp_assoc_value instead [ 420.379384][T20635] netlink: 'syz.1.4177': attribute type 12 has an invalid length. [ 420.611309][T20653] x_tables: duplicate underflow at hook 1 [ 420.827610][ T795] tipc: Node number set to 10136234 [ 421.150933][T20673] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 421.378603][T20696] __nla_validate_parse: 10 callbacks suppressed [ 421.378623][T20696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4197'. [ 421.413316][T20698] team_slave_0: left promiscuous mode [ 421.418705][T20696] openvswitch: netlink: Missing key (keys=40, expected=80) [ 421.427450][T20698] team_slave_1: left promiscuous mode [ 421.429255][T20696] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4197'. [ 421.555514][T20713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4199'. [ 421.870599][T20698] team0 (unregistering): Port device team_slave_0 removed [ 421.885763][T20698] team0 (unregistering): Port device team_slave_1 removed [ 421.896140][T20698] team0 (unregistering): Port device bridge3 removed [ 422.039551][ T795] IPVS: starting estimator thread 0... [ 422.137085][T20727] IPVS: using max 33 ests per chain, 79200 per kthread [ 422.225229][T20735] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 422.240137][T20735] bond1 (unregistering): Released all slaves [ 422.244892][T20738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4207'. [ 422.261145][T20739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4207'. [ 422.272475][T20738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4207'. [ 422.272662][T20740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.284804][T20738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4207'. [ 422.302502][T20738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4207'. [ 422.319989][T20738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4207'. [ 422.329993][T20738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4207'. [ 422.525422][T20748] netlink: 'syz.2.4210': attribute type 1 has an invalid length. [ 422.571437][T20748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.497079][T20826] openvswitch: netlink: Flow actions attr not present in new flow. [ 423.761792][T20840] bond7: option resend_igmp: invalid value (32767) [ 423.769467][T20840] bond7: option resend_igmp: allowed values 0 - 255 [ 423.780022][T20840] bond7 (unregistering): Released all slaves [ 423.803888][T20842] gretap1: entered promiscuous mode [ 423.809387][T20842] gretap1: entered allmulticast mode [ 423.917244][T20851] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 424.185046][T20873] netlink: 'syz.2.4247': attribute type 1 has an invalid length. [ 424.250682][T20873] 8021q: adding VLAN 0 to HW filter on device bond3 [ 424.258351][T20879] netlink: 'syz.3.4249': attribute type 8 has an invalid length. [ 424.268852][T20873] bond2: (slave bond3): making interface the new active one [ 424.277244][T20873] bond2: (slave bond3): Enslaving as an active interface with an up link [ 424.350203][T20873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.563306][T20894] geneve4: entered promiscuous mode [ 424.601683][T20894] geneve4: entered allmulticast mode [ 424.646208][T20900] netlink: 'syz.4.4256': attribute type 1 has an invalid length. [ 424.922777][T19820] tipc: Resetting bearer [ 425.151153][T20937] netlink: 'syz.0.4269': attribute type 2 has an invalid length. [ 425.265928][T20944] netlink: 'syz.2.4270': attribute type 5 has an invalid length. [ 425.282122][T20939] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.289838][T20939] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.502934][T20939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.524346][T20939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.584690][T20939] vlan0: left promiscuous mode [ 425.590963][T20939] vlan0: left allmulticast mode [ 425.595827][T20939] veth0_vlan: left allmulticast mode [ 425.638814][T20939] bridge3: left promiscuous mode [ 425.643811][T20939] bridge3: left allmulticast mode [ 425.653558][T20939] vlan2: left allmulticast mode [ 425.658864][T20939] mac80211_hwsim hwsim37 wlan0: left allmulticast mode [ 425.684591][T20944] geneve3: entered promiscuous mode [ 425.690311][T20944] geneve3: entered allmulticast mode [ 425.724396][ T9502] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.733574][ T9502] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.745265][ T9502] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 425.755563][ T9502] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.772099][ T9502] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.782106][ T9502] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 425.791550][ T9502] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.805265][ T9502] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.814260][ T9502] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 425.823037][ T9502] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.832619][ T9502] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.842772][ T9502] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 432.047117][T20979] __nla_validate_parse: 77 callbacks suppressed [ 432.047138][T20979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4277'. [ 432.101240][T20982] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 432.179534][T20982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4280'. [ 432.386246][T20998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4286'. [ 432.440555][T21005] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.4288'. [ 432.579134][T21013] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 432.790501][T21023] netlink: 'syz.3.4295': attribute type 11 has an invalid length. [ 432.802059][T21023] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4295'. [ 432.915360][T21032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4297'. [ 433.027729][T21040] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 433.046973][T21040] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 433.204972][T21051] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4303'. [ 433.215265][T21051] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 433.269095][T21059] tipc: Enabled bearer , priority 0 [ 433.288786][T21063] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 433.347526][T21063] bond4: Unable to set up delay as MII monitoring is disabled [ 433.358042][T21063] bond4 (unregistering): Released all slaves [ 433.468567][T21077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4311'. [ 433.523576][T21074] can: request_module (can-proto-3) failed. [ 433.532772][T21080] netlink: 'syz.0.4313': attribute type 2 has an invalid length. [ 433.542452][T21081] netlink: 'syz.0.4313': attribute type 2 has an invalid length. [ 433.550864][T21081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'. [ 433.569965][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4313'. [ 433.731841][T21089] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 433.970327][T21115] netlink: 'syz.2.4323': attribute type 1 has an invalid length. [ 434.021951][T21115] bond4: (slave geneve4): making interface the new active one [ 434.031776][T21115] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 434.048277][T19659] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 434.060456][T19659] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 434.070931][T19659] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 434.084017][T19659] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 434.270952][T21128] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.376449][ T5916] tipc: Node number set to 745293202 [ 434.673797][T21135] syzkaller0: entered promiscuous mode [ 434.696527][T21135] syzkaller0: entered allmulticast mode [ 434.797974][T21148] netlink: 'syz.3.4331': attribute type 11 has an invalid length. [ 434.802801][T21146] netlink: 'syz.1.4333': attribute type 10 has an invalid length. [ 434.854588][T21146] team0: entered promiscuous mode [ 434.870265][T21146] team_slave_0: entered promiscuous mode [ 434.876189][T21146] team_slave_1: entered promiscuous mode [ 435.639721][T21227] vxcan1 speed is unknown, defaulting to 1000 [ 435.662427][T21227] vxcan1 speed is unknown, defaulting to 1000 [ 435.690762][T21227] vxcan1 speed is unknown, defaulting to 1000 [ 435.971185][T21247] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 436.042209][T21247] netlink: 'syz.2.4363': attribute type 10 has an invalid length. [ 436.069602][T21247] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 436.092781][T21247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.251913][T21227] infiniband syz2: set active [ 436.256815][ T5894] vxcan1 speed is unknown, defaulting to 1000 [ 436.263533][T21227] infiniband syz2: added vxcan1 [ 436.415524][T21271] netlink: 'syz.0.4369': attribute type 4 has an invalid length. [ 436.458461][T21227] RDS/IB: syz2: added [ 436.508511][T21227] smc: adding ib device syz2 with port count 1 [ 436.515179][T21227] smc: ib device syz2 port 1 has no pnetid [ 436.542497][ T5894] vxcan1 speed is unknown, defaulting to 1000 [ 436.553995][T21227] vxcan1 speed is unknown, defaulting to 1000 [ 436.636262][T21282] sctp: [Deprecated]: syz.2.4373 (pid 21282) Use of int in max_burst socket option deprecated. [ 436.636262][T21282] Use struct sctp_assoc_value instead [ 436.810055][ T30] audit: type=1107 audit(1766942563.928:7): pid=21292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 437.041324][T21309] netlink: 'syz.2.4381': attribute type 33 has an invalid length. [ 437.066632][T21309] __nla_validate_parse: 16 callbacks suppressed [ 437.066651][T21309] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4381'. [ 437.144549][T21227] vxcan1 speed is unknown, defaulting to 1000 [ 437.171173][T21312] netlink: 'syz.3.4383': attribute type 4 has an invalid length. [ 437.233514][T21314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4384'. [ 437.242520][T21317] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4385'. [ 437.290680][T21318] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4386'. [ 437.297146][T21314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4384'. [ 437.504383][T21329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4391'. [ 437.635865][T21227] vxcan1 speed is unknown, defaulting to 1000 [ 437.677631][T21337] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4394'. [ 437.780930][T21342] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20004 [ 437.793519][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4397'. [ 437.850870][T21343] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4397'. [ 437.859957][T21343] netlink: 'syz.0.4397': attribute type 7 has an invalid length. [ 437.874850][T21343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4397'. [ 438.128463][T21227] vxcan1 speed is unknown, defaulting to 1000 [ 438.221931][T21369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.302634][T21369] lo: entered promiscuous mode [ 438.322625][T21369] netlink: 'syz.3.4406': attribute type 2 has an invalid length. [ 438.355100][T21369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.531668][T21383] openvswitch: netlink: Duplicate or invalid key (type 0). [ 438.543682][T21383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.605544][T21227] vxcan1 speed is unknown, defaulting to 1000 [ 438.711532][T21396] netlink: 'syz.3.4414': attribute type 1 has an invalid length. [ 438.711747][T21394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.730005][T21395] netlink: 'syz.3.4414': attribute type 1 has an invalid length. [ 438.857606][T21408] netlink: 'syz.3.4418': attribute type 8 has an invalid length. [ 439.057392][T21419] gre3: entered promiscuous mode [ 439.086910][T21419] gre3: entered allmulticast mode [ 439.187999][T21227] vxcan1 speed is unknown, defaulting to 1000 [ 439.350436][T21432] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.419000][T21432] bridge_slave_1 (unregistering): left allmulticast mode [ 439.426082][T21432] bridge_slave_1 (unregistering): left promiscuous mode [ 439.441227][T21432] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.450728][T21438] netlink: 'syz.0.4426': attribute type 30 has an invalid length. [ 439.599401][T21438] bond4: option arp_missed_max: invalid value (0) [ 439.618178][T21438] bond4: option arp_missed_max: allowed values 1 - 255 [ 439.628179][T21438] bond4 (unregistering): Released all slaves [ 439.700841][T21227] vxcan1 speed is unknown, defaulting to 1000 [ 440.075166][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 441.697453][T21495] openvswitch: netlink: Flow actions attr not present in new flow. [ 441.717578][T21496] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 441.736518][T21496] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 441.910520][T21504] netlink: 'syz.2.4437': attribute type 3 has an invalid length. [ 441.926803][T21509] netlink: 'syz.3.4440': attribute type 1 has an invalid length. [ 442.091755][T21519] __nla_validate_parse: 20 callbacks suppressed [ 442.091770][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4443'. [ 442.149734][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 442.180773][T21523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4445'. [ 442.342739][T21538] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 442.352015][T21538] netlink: 45 bytes leftover after parsing attributes in process `syz.2.4450'. [ 442.707186][T21564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4457'. [ 443.310600][T21582] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4465'. [ 443.327059][T21582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4465'. [ 443.337895][T21589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4462'. [ 443.450974][T21596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4463'. [ 444.031199][T21634] Unsupported ieee802154 address type: 0 [ 444.084513][T21636] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4478'. [ 444.154290][T21638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4479'. [ 444.166917][T21638] netlink: 'syz.2.4479': attribute type 6 has an invalid length. [ 444.175453][T21638] netlink: 'syz.2.4479': attribute type 5 has an invalid length. [ 444.198166][T21644] team0: No ports can be present during mode change [ 444.318502][T21652] syzkaller1: entered promiscuous mode [ 444.362901][T21652] syzkaller1: entered allmulticast mode [ 444.403501][T21664] bridge_slave_0: left allmulticast mode [ 444.409317][T21664] bridge_slave_0: left promiscuous mode [ 444.416180][T21664] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.460607][T21664] bond0: (slave bond_slave_0): Releasing backup interface [ 444.490909][T21664] bond0: (slave bond_slave_1): Releasing backup interface [ 444.532621][T21664] team0: Port device team_slave_0 removed [ 444.554964][T21664] team0: Port device team_slave_1 removed [ 444.562226][T21664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.577775][T21664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.594682][T21664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.617227][T21664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.638096][T21664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 445.420441][T21703] ip6gre1: entered promiscuous mode [ 445.425815][T21703] ip6gre1: entered allmulticast mode [ 445.566870][T21720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.980045][T21754] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 446.427169][T21786] netlink: 'syz.2.4523': attribute type 1 has an invalid length. [ 446.435083][T21786] netlink: 'syz.2.4523': attribute type 1 has an invalid length. [ 446.460547][T21786] netlink: 'syz.2.4523': attribute type 1 has an invalid length. [ 446.478992][T21786] netlink: 'syz.2.4523': attribute type 2 has an invalid length. [ 446.541390][T21797] netlink: 'syz.4.4526': attribute type 1 has an invalid length. [ 446.588650][T21797] bond4 (unregistering): Released all slaves [ 446.840770][T21825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.108757][T21838] __nla_validate_parse: 15 callbacks suppressed [ 447.108777][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4537'. [ 447.178772][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4539'. [ 447.179876][T21849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4539'. [ 447.268936][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 447.311364][T21858] batadv_slave_1: entered promiscuous mode [ 447.318247][T21859] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4544'. [ 447.348931][T21852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4539'. [ 447.394539][T21857] batadv_slave_1: left promiscuous mode [ 447.414583][T21865] netlink: 'syz.2.4547': attribute type 21 has an invalid length. [ 447.444506][T21865] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4547'. [ 447.503563][T21868] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 447.518504][ T5151] Bluetooth: hci3: command 0x040f tx timeout [ 447.908554][T21897] tipc: Enabled bearer , priority 13 [ 447.943805][T21901] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4560'. [ 447.985743][T21903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4562'. [ 448.024077][T21905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4561'. [ 448.048333][T21908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4562'. [ 448.202013][T21913] gre1: entered promiscuous mode [ 448.219818][T21913] gre1: entered allmulticast mode [ 448.381824][T21930] netlink: 'syz.4.4570': attribute type 2 has an invalid length. [ 448.392466][T21926] IPv6: sit1: Disabled Multicast RS [ 448.418192][T21929] netlink: 'syz.4.4570': attribute type 5 has an invalid length. [ 448.517147][T21933] syzkaller0: entered promiscuous mode [ 448.532208][T21933] syzkaller0: entered allmulticast mode [ 448.703581][T21948] sctp: [Deprecated]: syz.2.4578 (pid 21948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.703581][T21948] Use struct sctp_sack_info instead [ 449.153860][T21981] set match dimension is over the limit! [ 449.589305][T22006] xt_hashlimit: invalid rate [ 449.756900][T22010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.874322][T22029] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 449.881190][T22029] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 449.962837][T22029] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 449.973010][T22029] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 450.029422][T22029] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 450.045629][T22029] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 450.616087][T22071] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 450.919958][T22051] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 450.926713][T22029] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.932667][T22029] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 450.954138][T22029] tipc: Resetting bearer [ 451.025652][T22029] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 451.057795][T22029] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 451.278322][T22112] validate_nla: 2 callbacks suppressed [ 451.278340][T22112] netlink: 'syz.2.4625': attribute type 3 has an invalid length. [ 451.294282][T22112] netlink: 'syz.2.4625': attribute type 3 has an invalid length. [ 451.303314][T22112] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 451.313888][T22112] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 451.644690][T22144] tipc: Enabling of bearer rejected, already enabled [ 451.655557][T22144] netlink: 'syz.2.4636': attribute type 62 has an invalid length. [ 451.818112][T22163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.828887][T22165] netlink: 'syz.2.4640': attribute type 1 has an invalid length. [ 451.840223][ T5939] IPVS: starting estimator thread 0... [ 451.956926][T22166] IPVS: using max 51 ests per chain, 122400 per kthread [ 452.707861][T22178] dvmrp0: entered allmulticast mode [ 452.787873][T22182] __nla_validate_parse: 13 callbacks suppressed [ 452.787886][T22182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4646'. [ 453.069130][T22197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4651'. [ 454.047255][T22202] bond5: option mode: invalid value (133) [ 454.054443][T22202] bond5 (unregistering): Released all slaves [ 501.512991][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 562.954213][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 597.506601][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 597.514304][ T31] Not tainted syzkaller #0 [ 597.519401][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.528436][ T31] task:kworker/0:0 state:D stack:23256 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 597.540803][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 597.548267][ T31] Call Trace: [ 597.551743][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 597.554687][ T31] __schedule+0x14bc/0x5000 [ 597.561126][ T31] ? __pfx___schedule+0x10/0x10 [ 597.566033][ T31] ? schedule+0x91/0x360 [ 597.572167][ T31] schedule+0x165/0x360 [ 597.576626][ T31] schedule_preempt_disabled+0x13/0x30 [ 597.606396][ T31] __mutex_lock+0x7e6/0x1350 [ 597.611051][ T31] ? __mutex_lock+0x5bb/0x1350 [ 597.615834][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 597.648905][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 597.653960][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 597.659738][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 597.665464][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 597.671853][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 597.677664][ T31] process_scheduled_works+0xad1/0x1770 [ 597.683269][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 597.689883][ T31] worker_thread+0x8a0/0xda0 [ 597.694502][ T31] kthread+0x711/0x8a0 [ 597.698807][ T31] ? __pfx_worker_thread+0x10/0x10 [ 597.703931][ T31] ? __pfx_kthread+0x10/0x10 [ 597.708680][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.713893][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 597.719194][ T31] ? __pfx_kthread+0x10/0x10 [ 597.723796][ T31] ret_from_fork+0x599/0xb30 [ 597.728597][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 597.733721][ T31] ? __switch_to_asm+0x39/0x70 [ 597.738549][ T31] ? __switch_to_asm+0x33/0x70 [ 597.743412][ T31] ? __pfx_kthread+0x10/0x10 [ 597.751188][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.755964][ T31] [ 597.759403][ T31] INFO: task kworker/0:6:5916 blocked for more than 143 seconds. [ 597.767423][ T31] Not tainted syzkaller #0 [ 597.772414][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.781194][ T31] task:kworker/0:6 state:D stack:22840 pid:5916 tgid:5916 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 597.793409][ T31] Workqueue: events rfkill_uevent_work [ 597.798957][ T31] Call Trace: [ 597.802243][ T31] [ 597.805161][ T31] __schedule+0x14bc/0x5000 [ 597.809994][ T31] ? __pfx___schedule+0x10/0x10 [ 597.814971][ T31] ? schedule+0x91/0x360 [ 597.819274][ T31] schedule+0x165/0x360 [ 597.823441][ T31] schedule_preempt_disabled+0x13/0x30 [ 597.829689][ T31] __mutex_lock+0x7e6/0x1350 [ 597.834307][ T31] ? __mutex_lock+0x5bb/0x1350 [ 597.839154][ T31] ? rfkill_uevent_work+0x1d/0xa0 [ 597.844188][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 597.849370][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 597.855103][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.860502][ T31] rfkill_uevent_work+0x1d/0xa0 [ 597.865362][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 597.871308][ T31] process_scheduled_works+0xad1/0x1770 [ 597.876921][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 597.882986][ T31] worker_thread+0x8a0/0xda0 [ 597.887739][ T31] kthread+0x711/0x8a0 [ 597.891824][ T31] ? __pfx_worker_thread+0x10/0x10 [ 597.897010][ T31] ? __pfx_kthread+0x10/0x10 [ 597.901610][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.907056][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 597.912263][ T31] ? __pfx_kthread+0x10/0x10 [ 597.917105][ T31] ret_from_fork+0x599/0xb30 [ 597.921707][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 597.926992][ T31] ? __switch_to_asm+0x39/0x70 [ 597.931765][ T31] ? __switch_to_asm+0x33/0x70 [ 597.936592][ T31] ? __pfx_kthread+0x10/0x10 [ 597.941197][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.945996][ T31] [ 597.949270][ T31] INFO: task syz.4.4594:22020 blocked for more than 143 seconds. [ 597.957073][ T31] Not tainted syzkaller #0 [ 597.962026][ T31] Blocked by coredump. [ 597.966918][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.975592][ T31] task:syz.4.4594 state:D stack:25920 pid:22020 tgid:22008 ppid:16346 task_flags:0x40054c flags:0x00080001 [ 597.987985][ T31] Call Trace: [ 597.991260][ T31] [ 597.994175][ T31] __schedule+0x14bc/0x5000 [ 597.998739][ T31] ? __pfx___schedule+0x10/0x10 [ 598.003603][ T31] ? schedule+0x91/0x360 [ 598.008038][ T31] schedule+0x165/0x360 [ 598.012203][ T31] schedule_preempt_disabled+0x13/0x30 [ 598.017705][ T31] __mutex_lock+0x7e6/0x1350 [ 598.022326][ T31] ? __mutex_lock+0x5bb/0x1350 [ 598.027425][ T31] ? rfkill_unregister+0xc8/0x220 [ 598.032462][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 598.037525][ T31] ? __pfx_device_del+0x10/0x10 [ 598.042395][ T31] ? __cancel_work_sync+0x5c/0x110 [ 598.047734][ T31] rfkill_unregister+0xc8/0x220 [ 598.052609][ T31] nfc_unregister_device+0x96/0x300 [ 598.057893][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 598.063625][ T31] virtual_ncidev_close+0x56/0x90 [ 598.068820][ T31] __fput+0x44c/0xa70 [ 598.072825][ T31] task_work_run+0x1d4/0x260 [ 598.077504][ T31] ? __pfx_task_work_run+0x10/0x10 [ 598.082654][ T31] ? kmem_cache_free+0x197/0x620 [ 598.087779][ T31] ? do_exit+0x6c0/0x2310 [ 598.092146][ T31] do_exit+0x6c5/0x2310 [ 598.096416][ T31] ? do_raw_spin_lock+0x121/0x290 [ 598.101465][ T31] ? __pfx_do_exit+0x10/0x10 [ 598.106064][ T31] do_group_exit+0x21c/0x2d0 [ 598.110869][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 598.116088][ T31] get_signal+0x1285/0x1340 [ 598.120685][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 598.126436][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 598.132627][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 598.138340][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 598.143648][ T31] ? rcu_is_watching+0x15/0xb0 [ 598.148697][ T31] do_syscall_64+0x2d0/0xf80 [ 598.153484][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.159607][ T31] ? clear_bhb_loop+0x60/0xb0 [ 598.164295][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.170365][ T31] RIP: 0033:0x7f067f98f749 [ 598.174788][ T31] RSP: 002b:00007f06808b90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 598.183299][ T31] RAX: fffffffffffffe00 RBX: 00007f067fbe6098 RCX: 00007f067f98f749 [ 598.191445][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f067fbe6098 [ 598.199568][ T31] RBP: 00007f067fbe6090 R08: 0000000000000000 R09: 0000000000000000 [ 598.207740][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.215807][ T31] R13: 00007f067fbe6128 R14: 00007ffc40424320 R15: 00007ffc40424408 [ 598.223913][ T31] [ 598.227098][ T31] INFO: task syz.0.4598:22029 blocked for more than 144 seconds. [ 598.234818][ T31] Not tainted syzkaller #0 [ 598.243941][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.253055][ T31] task:syz.0.4598 state:D stack:23944 pid:22029 tgid:22028 ppid:16074 task_flags:0x400040 flags:0x00080002 [ 598.265326][ T31] Call Trace: [ 598.268741][ T31] [ 598.271668][ T31] __schedule+0x14bc/0x5000 [ 598.276177][ T31] ? __pfx___schedule+0x10/0x10 [ 598.281172][ T31] ? schedule+0x91/0x360 [ 598.285425][ T31] schedule+0x165/0x360 [ 598.289762][ T31] schedule_preempt_disabled+0x13/0x30 [ 598.295234][ T31] __mutex_lock+0x7e6/0x1350 [ 598.299894][ T31] ? __mutex_lock+0x5bb/0x1350 [ 598.304665][ T31] ? nfc_dev_down+0x3b/0x290 [ 598.309492][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 598.314523][ T31] ? do_raw_spin_lock+0x121/0x290 [ 598.319661][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 598.325575][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 598.330952][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 598.336853][ T31] nfc_dev_down+0x3b/0x290 [ 598.341282][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 598.347276][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 598.352460][ T31] rfkill_set_block+0x1d2/0x440 [ 598.357579][ T31] rfkill_fop_write+0x44b/0x570 [ 598.362463][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 598.368016][ T31] ? security_kernfs_init_security+0x220/0x290 [ 598.374393][ T31] ? rw_verify_area+0x255/0x4d0 [ 598.379434][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 598.384842][ T31] vfs_write+0x27e/0xb30 [ 598.389303][ T31] ? __pfx_vfs_write+0x10/0x10 [ 598.394092][ T31] ? __fget_files+0x2a/0x420 [ 598.398760][ T31] ? __fget_files+0x2a/0x420 [ 598.403367][ T31] ? __fget_files+0x3a0/0x420 [ 598.408236][ T31] ? __fget_files+0x2a/0x420 [ 598.412860][ T31] ksys_write+0x145/0x250 [ 598.417262][ T31] ? __pfx_ksys_write+0x10/0x10 [ 598.422129][ T31] ? do_syscall_64+0xbe/0xf80 [ 598.426998][ T31] do_syscall_64+0xfa/0xf80 [ 598.431518][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.437637][ T31] ? clear_bhb_loop+0x60/0xb0 [ 598.442330][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.448374][ T31] RIP: 0033:0x7f7ca3d8f749 [ 598.452794][ T31] RSP: 002b:00007f7ca4cbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 598.461284][ T31] RAX: ffffffffffffffda RBX: 00007f7ca3fe5fa0 RCX: 00007f7ca3d8f749 [ 598.469478][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 598.477528][ T31] RBP: 00007f7ca3e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 598.485520][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.493681][ T31] R13: 00007f7ca3fe6038 R14: 00007f7ca3fe5fa0 R15: 00007ffd5ee62938 [ 598.501752][ T31] [ 598.504802][ T31] INFO: task syz.1.4637:22151 blocked for more than 144 seconds. [ 598.512855][ T31] Not tainted syzkaller #0 [ 598.517843][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.526709][ T31] task:syz.1.4637 state:D stack:25256 pid:22151 tgid:22142 ppid:16804 task_flags:0x400140 flags:0x00080002 [ 598.538745][ T31] Call Trace: [ 598.542046][ T31] [ 598.544977][ T31] __schedule+0x14bc/0x5000 [ 598.549911][ T31] ? __pfx___schedule+0x10/0x10 [ 598.554788][ T31] ? schedule+0x91/0x360 [ 598.560325][ T31] schedule+0x165/0x360 [ 598.564515][ T31] schedule_preempt_disabled+0x13/0x30 [ 598.570118][ T31] __mutex_lock+0x7e6/0x1350 [ 598.574725][ T31] ? __mutex_lock+0x5bb/0x1350 [ 598.579538][ T31] ? rfkill_register+0x37/0x8e0 [ 598.584400][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 598.590065][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 598.595482][ T31] ? device_initialize+0x24b/0x440 [ 598.600779][ T31] rfkill_register+0x37/0x8e0 [ 598.605473][ T31] nfc_register_device+0x14a/0x390 [ 598.610788][ T31] nci_register_device+0x87f/0x9d0 [ 598.615935][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 598.622014][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 598.627512][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 598.633347][ T31] virtual_ncidev_open+0x129/0x1a0 [ 598.638612][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 598.644271][ T31] misc_open+0x2d5/0x350 [ 598.649051][ T31] chrdev_open+0x4cc/0x5e0 [ 598.653475][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 598.658458][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 598.664805][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 598.669829][ T31] do_dentry_open+0x7ce/0x1420 [ 598.674614][ T31] vfs_open+0x3b/0x340 [ 598.679208][ T31] ? path_openat+0x33f3/0x3dd0 [ 598.683990][ T31] path_openat+0x340e/0x3dd0 [ 598.688675][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 598.694066][ T31] ? stack_depot_save_flags+0x40/0x850 [ 598.699644][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 598.705308][ T31] ? getname_flags+0xb8/0x540 [ 598.710610][ T31] ? __pfx_path_openat+0x10/0x10 [ 598.715571][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 598.720556][ T31] do_filp_open+0x1fa/0x410 [ 598.725070][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 598.730194][ T31] ? _raw_spin_unlock+0x28/0x50 [ 598.735061][ T31] ? alloc_fd+0x64c/0x6c0 [ 598.739872][ T31] do_sys_openat2+0x121/0x200 [ 598.744626][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 598.749964][ T31] ? rcu_is_watching+0x15/0xb0 [ 598.754751][ T31] __x64_sys_openat+0x138/0x170 [ 598.759675][ T31] do_syscall_64+0xfa/0xf80 [ 598.764195][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.770717][ T31] ? clear_bhb_loop+0x60/0xb0 [ 598.775775][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.781805][ T31] RIP: 0033:0x7efe3138f749 [ 598.786283][ T31] RSP: 002b:00007efe2f5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 598.794720][ T31] RAX: ffffffffffffffda RBX: 00007efe315e6090 RCX: 00007efe3138f749 [ 598.805377][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 598.813768][ T31] RBP: 00007efe31413f91 R08: 0000000000000000 R09: 0000000000000000 [ 598.821938][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.830200][ T31] R13: 00007efe315e6128 R14: 00007efe315e6090 R15: 00007fffb010f0e8 [ 598.838247][ T31] [ 598.841329][ T31] INFO: task syz.3.4643:22174 blocked for more than 144 seconds. [ 598.849197][ T31] Not tainted syzkaller #0 [ 598.854139][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.863313][ T31] task:syz.3.4643 state:D stack:28088 pid:22174 tgid:22173 ppid:17703 task_flags:0x400140 flags:0x00080002 [ 598.875708][ T31] Call Trace: [ 598.879248][ T31] [ 598.882198][ T31] __schedule+0x14bc/0x5000 [ 598.887392][ T31] ? __pfx___schedule+0x10/0x10 [ 598.892337][ T31] ? schedule+0x91/0x360 [ 598.896684][ T31] schedule+0x165/0x360 [ 598.900852][ T31] schedule_preempt_disabled+0x13/0x30 [ 598.906464][ T31] __mutex_lock+0x7e6/0x1350 [ 598.911074][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 598.916008][ T31] ? __mutex_lock+0x5bb/0x1350 [ 598.921303][ T31] ? misc_open+0x51/0x350 [ 598.925655][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 598.930746][ T31] misc_open+0x51/0x350 [ 598.934923][ T31] chrdev_open+0x4cc/0x5e0 [ 598.939410][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 598.944355][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 598.951350][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 598.956354][ T31] do_dentry_open+0x7ce/0x1420 [ 598.961233][ T31] vfs_open+0x3b/0x340 [ 598.965313][ T31] ? path_openat+0x33f3/0x3dd0 [ 598.970179][ T31] path_openat+0x340e/0x3dd0 [ 598.974799][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 598.980576][ T31] ? stack_depot_save_flags+0x40/0x850 [ 598.986061][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 598.991771][ T31] ? getname_flags+0xb8/0x540 [ 598.996510][ T31] ? __pfx_path_openat+0x10/0x10 [ 599.001613][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 599.007094][ T31] do_filp_open+0x1fa/0x410 [ 599.011710][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 599.017033][ T31] ? _raw_spin_unlock+0x28/0x50 [ 599.021940][ T31] ? alloc_fd+0x64c/0x6c0 [ 599.026402][ T31] do_sys_openat2+0x121/0x200 [ 599.031104][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 599.036820][ T31] ? rcu_is_watching+0x15/0xb0 [ 599.041647][ T31] __x64_sys_openat+0x138/0x170 [ 599.046565][ T31] do_syscall_64+0xfa/0xf80 [ 599.051073][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.057191][ T31] ? clear_bhb_loop+0x60/0xb0 [ 599.061882][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.068184][ T31] RIP: 0033:0x7f9798b8f749 [ 599.072599][ T31] RSP: 002b:00007f9799a70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 599.081136][ T31] RAX: ffffffffffffffda RBX: 00007f9798de5fa0 RCX: 00007f9798b8f749 [ 599.089218][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 599.097624][ T31] RBP: 00007f9798c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.105599][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.113741][ T31] R13: 00007f9798de6038 R14: 00007f9798de5fa0 R15: 00007ffe590e9638 [ 599.121794][ T31] [ 599.124832][ T31] INFO: task syz.3.4643:22175 blocked for more than 144 seconds. [ 599.133046][ T31] Not tainted syzkaller #0 [ 599.138048][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.146780][ T31] task:syz.3.4643 state:D stack:27640 pid:22175 tgid:22173 ppid:17703 task_flags:0x400140 flags:0x00080002 [ 599.160314][ T31] Call Trace: [ 599.163604][ T31] [ 599.166605][ T31] __schedule+0x14bc/0x5000 [ 599.171137][ T31] ? __pfx___schedule+0x10/0x10 [ 599.175984][ T31] ? schedule+0x91/0x360 [ 599.180308][ T31] schedule+0x165/0x360 [ 599.184475][ T31] schedule_preempt_disabled+0x13/0x30 [ 599.190352][ T31] __mutex_lock+0x7e6/0x1350 [ 599.194940][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 599.199924][ T31] ? __mutex_lock+0x5bb/0x1350 [ 599.204696][ T31] ? misc_open+0x51/0x350 [ 599.209064][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 599.214115][ T31] misc_open+0x51/0x350 [ 599.218702][ T31] chrdev_open+0x4cc/0x5e0 [ 599.223121][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 599.228149][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 599.234579][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 599.239565][ T31] do_dentry_open+0x7ce/0x1420 [ 599.244356][ T31] vfs_open+0x3b/0x340 [ 599.249023][ T31] ? path_openat+0x33f3/0x3dd0 [ 599.253792][ T31] path_openat+0x340e/0x3dd0 [ 599.258620][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 599.264013][ T31] ? stack_depot_save_flags+0x40/0x850 [ 599.270330][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 599.275969][ T31] ? getname_flags+0xb8/0x540 [ 599.281164][ T31] ? __pfx_path_openat+0x10/0x10 [ 599.286123][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 599.291176][ T31] do_filp_open+0x1fa/0x410 [ 599.295696][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 599.300808][ T31] ? _raw_spin_unlock+0x28/0x50 [ 599.305674][ T31] ? alloc_fd+0x64c/0x6c0 [ 599.310523][ T31] do_sys_openat2+0x121/0x200 [ 599.315231][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 599.320468][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 599.325687][ T31] __x64_sys_openat+0x138/0x170 [ 599.330630][ T31] do_syscall_64+0xfa/0xf80 [ 599.335144][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.341711][ T31] ? clear_bhb_loop+0x60/0xb0 [ 599.346529][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.352464][ T31] RIP: 0033:0x7f9798b8f749 [ 599.357206][ T31] RSP: 002b:00007f9799a4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 599.365639][ T31] RAX: ffffffffffffffda RBX: 00007f9798de6090 RCX: 00007f9798b8f749 [ 599.374076][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 599.382139][ T31] RBP: 00007f9798c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.390168][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.398682][ T31] R13: 00007f9798de6128 R14: 00007f9798de6090 R15: 00007ffe590e9638 [ 599.406740][ T31] [ 599.409789][ T31] INFO: task syz.2.4652:22199 blocked for more than 145 seconds. [ 599.417929][ T31] Not tainted syzkaller #0 [ 599.422939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.432303][ T31] task:syz.2.4652 state:D stack:28152 pid:22199 tgid:22198 ppid:17198 task_flags:0x400040 flags:0x00080002 [ 599.444324][ T31] Call Trace: [ 599.447636][ T31] [ 599.450576][ T31] __schedule+0x14bc/0x5000 [ 599.455162][ T31] ? __pfx___schedule+0x10/0x10 [ 599.460476][ T31] ? schedule+0x91/0x360 [ 599.465156][ T31] schedule+0x165/0x360 [ 599.469369][ T31] schedule_preempt_disabled+0x13/0x30 [ 599.474840][ T31] __mutex_lock+0x7e6/0x1350 [ 599.479475][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 599.484420][ T31] ? __mutex_lock+0x5bb/0x1350 [ 599.489578][ T31] ? misc_open+0x51/0x350 [ 599.493912][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 599.499040][ T31] misc_open+0x51/0x350 [ 599.503273][ T31] chrdev_open+0x4cc/0x5e0 [ 599.507751][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 599.512701][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 599.519466][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 599.524408][ T31] do_dentry_open+0x7ce/0x1420 [ 599.529293][ T31] vfs_open+0x3b/0x340 [ 599.533387][ T31] ? path_openat+0x33f3/0x3dd0 [ 599.538222][ T31] path_openat+0x340e/0x3dd0 [ 599.542834][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 599.548541][ T31] ? stack_depot_save_flags+0x40/0x850 [ 599.554016][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 599.559705][ T31] ? getname_flags+0xb8/0x540 [ 599.564579][ T31] ? __pfx_path_openat+0x10/0x10 [ 599.569576][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 599.574528][ T31] do_filp_open+0x1fa/0x410 [ 599.579436][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 599.584563][ T31] ? _raw_spin_unlock+0x28/0x50 [ 599.589618][ T31] ? alloc_fd+0x64c/0x6c0 [ 599.593966][ T31] do_sys_openat2+0x121/0x200 [ 599.598730][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 599.604036][ T31] ? rcu_is_watching+0x15/0xb0 [ 599.609195][ T31] __x64_sys_openat+0x138/0x170 [ 599.614046][ T31] do_syscall_64+0xfa/0xf80 [ 599.618587][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.624658][ T31] ? clear_bhb_loop+0x60/0xb0 [ 599.629389][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.635404][ T31] RIP: 0033:0x7fed1178f749 [ 599.640237][ T31] RSP: 002b:00007fed12605038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 599.648750][ T31] RAX: ffffffffffffffda RBX: 00007fed119e5fa0 RCX: 00007fed1178f749 [ 599.656771][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 599.664755][ T31] RBP: 00007fed11813f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.673353][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.681398][ T31] R13: 00007fed119e6038 R14: 00007fed119e5fa0 R15: 00007ffec730b148 [ 599.689443][ T31] [ 599.692465][ T31] INFO: task syz.2.4652:22200 blocked for more than 145 seconds. [ 599.700674][ T31] Not tainted syzkaller #0 [ 599.705616][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.714331][ T31] task:syz.2.4652 state:D stack:28152 pid:22200 tgid:22198 ppid:17198 task_flags:0x400140 flags:0x00080002 [ 599.726634][ T31] Call Trace: [ 599.729912][ T31] [ 599.732833][ T31] __schedule+0x14bc/0x5000 [ 599.737406][ T31] ? __pfx___schedule+0x10/0x10 [ 599.742265][ T31] ? schedule+0x91/0x360 [ 599.746612][ T31] schedule+0x165/0x360 [ 599.750908][ T31] schedule_preempt_disabled+0x13/0x30 [ 599.756781][ T31] __mutex_lock+0x7e6/0x1350 [ 599.761366][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 599.766333][ T31] ? __mutex_lock+0x5bb/0x1350 [ 599.771105][ T31] ? misc_open+0x51/0x350 [ 599.775433][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 599.780555][ T31] misc_open+0x51/0x350 [ 599.784727][ T31] chrdev_open+0x4cc/0x5e0 [ 599.789641][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 599.794668][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 599.801062][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 599.806015][ T31] do_dentry_open+0x7ce/0x1420 [ 599.810855][ T31] vfs_open+0x3b/0x340 [ 599.814933][ T31] ? path_openat+0x33f3/0x3dd0 [ 599.820112][ T31] path_openat+0x340e/0x3dd0 [ 599.824722][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 599.830217][ T31] ? stack_depot_save_flags+0x40/0x850 [ 599.835702][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 599.841399][ T31] ? getname_flags+0xb8/0x540 [ 599.846084][ T31] ? __pfx_path_openat+0x10/0x10 [ 599.851552][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 599.856610][ T31] do_filp_open+0x1fa/0x410 [ 599.861225][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 599.866337][ T31] ? _raw_spin_unlock+0x28/0x50 [ 599.871196][ T31] ? alloc_fd+0x64c/0x6c0 [ 599.875515][ T31] do_sys_openat2+0x121/0x200 [ 599.880671][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 599.885934][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 599.891208][ T31] __x64_sys_openat+0x138/0x170 [ 599.896072][ T31] do_syscall_64+0xfa/0xf80 [ 599.900637][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.907426][ T31] ? clear_bhb_loop+0x60/0xb0 [ 599.912126][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.918164][ T31] RIP: 0033:0x7fed1178f749 [ 599.922591][ T31] RSP: 002b:00007fed125e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 599.931166][ T31] RAX: ffffffffffffffda RBX: 00007fed119e6090 RCX: 00007fed1178f749 [ 599.939455][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 599.947537][ T31] RBP: 00007fed11813f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.955601][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.963636][ T31] R13: 00007fed119e6128 R14: 00007fed119e6090 R15: 00007ffec730b148 [ 599.971936][ T31] [ 599.974948][ T31] INFO: task syz.2.4652:22201 blocked for more than 145 seconds. [ 599.982696][ T31] Not tainted syzkaller #0 [ 599.987718][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 599.997230][ T31] task:syz.2.4652 state:D stack:28152 pid:22201 tgid:22198 ppid:17198 task_flags:0x400040 flags:0x00080002 [ 600.009224][ T31] Call Trace: [ 600.012500][ T31] [ 600.015414][ T31] __schedule+0x14bc/0x5000 [ 600.019992][ T31] ? __pfx___schedule+0x10/0x10 [ 600.024937][ T31] ? schedule+0x91/0x360 [ 600.029847][ T31] schedule+0x165/0x360 [ 600.034120][ T31] schedule_preempt_disabled+0x13/0x30 [ 600.039702][ T31] __mutex_lock+0x7e6/0x1350 [ 600.044299][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 600.049304][ T31] ? __mutex_lock+0x5bb/0x1350 [ 600.054106][ T31] ? misc_open+0x51/0x350 [ 600.058847][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 600.063883][ T31] misc_open+0x51/0x350 [ 600.068220][ T31] chrdev_open+0x4cc/0x5e0 [ 600.072672][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 600.077680][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 600.084066][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 600.089542][ T31] do_dentry_open+0x7ce/0x1420 [ 600.094319][ T31] vfs_open+0x3b/0x340 [ 600.098450][ T31] ? path_openat+0x33f3/0x3dd0 [ 600.103215][ T31] path_openat+0x340e/0x3dd0 [ 600.107861][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 600.113247][ T31] ? stack_depot_save_flags+0x40/0x850 [ 600.119123][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 600.124756][ T31] ? getname_flags+0xb8/0x540 [ 600.129511][ T31] ? __pfx_path_openat+0x10/0x10 [ 600.134488][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 600.139513][ T31] do_filp_open+0x1fa/0x410 [ 600.144111][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 600.149675][ T31] ? _raw_spin_unlock+0x28/0x50 [ 600.154533][ T31] ? alloc_fd+0x64c/0x6c0 [ 600.158959][ T31] do_sys_openat2+0x121/0x200 [ 600.163658][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 600.169032][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 600.174254][ T31] __x64_sys_openat+0x138/0x170 [ 600.179545][ T31] do_syscall_64+0xfa/0xf80 [ 600.184075][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.190202][ T31] ? clear_bhb_loop+0x60/0xb0 [ 600.194988][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.200952][ T31] RIP: 0033:0x7fed1178f749 [ 600.205375][ T31] RSP: 002b:00007fed125c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 600.214211][ T31] RAX: ffffffffffffffda RBX: 00007fed119e6180 RCX: 00007fed1178f749 [ 600.222286][ T31] RDX: 0000000000040241 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 600.230484][ T31] RBP: 00007fed11813f91 R08: 0000000000000000 R09: 0000000000000000 [ 600.238898][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.246944][ T31] R13: 00007fed119e6218 R14: 00007fed119e6180 R15: 00007ffec730b148 [ 600.254935][ T31] [ 600.258037][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 600.267406][ T31] [ 600.267406][ T31] Showing all locks held in the system: [ 600.275128][ T31] 3 locks held by kworker/0:0/9: [ 600.280142][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 600.291194][ T31] #1: ffffc900000e7b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 600.305312][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 600.316820][ T31] 1 lock held by khungtaskd/31: [ 600.321674][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 600.332055][ T31] 1 lock held by klogd/5190: [ 600.336690][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 600.346729][ T31] 2 locks held by getty/5592: [ 600.351408][ T31] #0: ffff88802f96e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 600.361631][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 600.371814][ T31] 3 locks held by kworker/0:6/5916: [ 600.377053][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 600.388941][ T31] #1: ffffc900046dfb80 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 600.401540][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x1d/0xa0 [ 600.411699][ T31] 1 lock held by syz-executor/16346: [ 600.417339][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 600.427499][ T31] 2 locks held by syz.4.4594/22020: [ 600.432696][ T31] #0: ffff888040836100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 600.442598][ T31] #1: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 600.453113][ T31] 2 locks held by syz.0.4598/22029: [ 600.458378][ T31] #0: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 600.468640][ T31] #1: ffff888040836100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 600.478006][ T31] 3 locks held by syz.1.4637/22151: [ 600.483193][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.491709][ T31] #1: ffff8880298f1100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x390 [ 600.501338][ T31] #2: ffffffff8f5fd668 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 600.511801][ T31] 1 lock held by syz.3.4643/22174: [ 600.516948][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.525376][ T31] 1 lock held by syz.3.4643/22175: [ 600.530535][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.539270][ T31] 1 lock held by syz.2.4652/22199: [ 600.544389][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.553048][ T31] 1 lock held by syz.2.4652/22200: [ 600.558185][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.567206][ T31] 1 lock held by syz.2.4652/22201: [ 600.572327][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.580930][ T31] 1 lock held by syz-executor/22206: [ 600.586281][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.594747][ T31] 1 lock held by syz-executor/22207: [ 600.600518][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.609153][ T31] 1 lock held by syz-executor/22209: [ 600.614436][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.623030][ T31] 1 lock held by syz-executor/22211: [ 600.629145][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.637691][ T31] 1 lock held by syz-executor/22213: [ 600.642972][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.651708][ T31] 1 lock held by syz-executor/22216: [ 600.657275][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.665866][ T31] 1 lock held by syz-executor/22217: [ 600.671222][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.679830][ T31] 1 lock held by syz-executor/22219: [ 600.685101][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.694124][ T31] 1 lock held by syz-executor/22221: [ 600.699512][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.708137][ T31] 1 lock held by syz-executor/22223: [ 600.713428][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.722375][ T31] 1 lock held by syz-executor/22226: [ 600.727723][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.736162][ T31] 1 lock held by syz-executor/22227: [ 600.741491][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.750318][ T31] 1 lock held by syz-executor/22229: [ 600.755587][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.764062][ T31] 1 lock held by syz-executor/22231: [ 600.769371][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.778212][ T31] 1 lock held by syz-executor/22233: [ 600.783487][ T31] #0: ffffffff8e79fae8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 600.792146][ T31] [ 600.794480][ T31] ============================================= [ 600.794480][ T31] [ 600.803409][ T31] NMI backtrace for cpu 1 [ 600.803425][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 600.803441][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.803450][ T31] Call Trace: [ 600.803456][ T31] [ 600.803463][ T31] dump_stack_lvl+0x189/0x250 [ 600.803489][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.803506][ T31] ? __pfx__printk+0x10/0x10 [ 600.803536][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 600.803561][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 600.803581][ T31] ? __pfx__printk+0x10/0x10 [ 600.803605][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 600.803632][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 600.803657][ T31] sys_info+0x135/0x170 [ 600.803683][ T31] watchdog+0xf95/0xfe0 [ 600.803716][ T31] ? watchdog+0x20a/0xfe0 [ 600.803745][ T31] kthread+0x711/0x8a0 [ 600.803771][ T31] ? __pfx_watchdog+0x10/0x10 [ 600.803792][ T31] ? __pfx_kthread+0x10/0x10 [ 600.803815][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 600.803847][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 600.803863][ T31] ? __pfx_kthread+0x10/0x10 [ 600.803884][ T31] ret_from_fork+0x599/0xb30 [ 600.803903][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 600.803936][ T31] ? __switch_to_asm+0x39/0x70 [ 600.803955][ T31] ? __switch_to_asm+0x33/0x70 [ 600.803974][ T31] ? __pfx_kthread+0x10/0x10 [ 600.803995][ T31] ret_from_fork_asm+0x1a/0x30 [ 600.804030][ T31] [ 600.804037][ T31] Sending NMI from CPU 1 to CPUs 0: [ 600.955633][ C0] NMI backtrace for cpu 0 [ 600.955649][ C0] CPU: 0 UID: 0 PID: 19659 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 600.955686][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.955696][ C0] Workqueue: events_unbound toggle_allocation_gate [ 600.955720][ C0] RIP: 0010:mark_lock+0x3c/0x190 [ 600.955738][ C0] Code: 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 f4 9b e7 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 b0 63 27 93 eb 42 83 3d bb 2b [ 600.955751][ C0] RSP: 0018:ffffc90004c87608 EFLAGS: 00000003 [ 600.955763][ C0] RAX: 00000000000000cb RBX: 0000000000000002 RCX: 0000000000000002 [ 600.955773][ C0] RDX: 0000000000000002 RSI: ffff88807dba8b30 RDI: ffff88807dba8000 [ 600.955784][ C0] RBP: 0000000000000004 R08: ffffffff8f822077 R09: 1ffffffff1f0440e [ 600.955795][ C0] R10: dffffc0000000000 R11: fffffbfff1f0440f R12: ffff88807dba8b30 [ 600.955806][ C0] R13: ffff88813ff25558 R14: ffff88807dba8b30 R15: 0000000000000000 [ 600.955816][ C0] FS: 0000000000000000(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 600.955829][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 600.955840][ C0] CR2: 00007fcb11517d60 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 600.955854][ C0] Call Trace: [ 600.955860][ C0] [ 600.955870][ C0] lockdep_hardirqs_on_prepare+0x129/0x290 [ 600.955886][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x3a/0x1a0 [ 600.955902][ C0] trace_hardirqs_on+0x28/0x40 [ 600.955920][ C0] __text_poke+0x78f/0x9f0 [ 600.955946][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 600.955962][ C0] ? perf_event_text_poke+0x13d/0x190 [ 600.955982][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x3a/0x1a0 [ 600.955997][ C0] ? __pfx___text_poke+0x10/0x10 [ 600.956013][ C0] ? rcu_is_watching+0x15/0xb0 [ 600.956030][ C0] ? trace_contention_end+0x39/0x100 [ 600.956053][ C0] smp_text_poke_batch_finish+0xd0f/0x1130 [ 600.956076][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 600.956097][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 600.956121][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 600.956141][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 600.956162][ C0] static_key_disable+0x1a/0x20 [ 600.956180][ C0] toggle_allocation_gate+0x1a1/0x240 [ 600.956197][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 600.956216][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 600.956236][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 600.956251][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 600.956264][ C0] process_scheduled_works+0xad1/0x1770 [ 600.956290][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 600.956314][ C0] worker_thread+0x8a0/0xda0 [ 600.956331][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 600.956359][ C0] ? __kthread_parkme+0x7b/0x200 [ 600.956381][ C0] kthread+0x711/0x8a0 [ 600.956401][ C0] ? __pfx_worker_thread+0x10/0x10 [ 600.956417][ C0] ? __pfx_kthread+0x10/0x10 [ 600.956436][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 600.956458][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 600.956473][ C0] ? __pfx_kthread+0x10/0x10 [ 600.956492][ C0] ret_from_fork+0x599/0xb30 [ 600.956509][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 600.956528][ C0] ? __switch_to_asm+0x39/0x70 [ 600.956548][ C0] ? __switch_to_asm+0x33/0x70 [ 600.956566][ C0] ? __pfx_kthread+0x10/0x10 [ 600.956585][ C0] ret_from_fork_asm+0x1a/0x30 [ 600.956612][ C0] [ 600.956863][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 600.956878][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 600.956897][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.956908][ T31] Call Trace: [ 600.956916][ T31] [ 600.956924][ T31] dump_stack_lvl+0x99/0x250 [ 600.956945][ T31] ? __asan_memcpy+0x40/0x70 [ 600.956963][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.956983][ T31] ? __pfx__printk+0x10/0x10 [ 600.957018][ T31] vpanic+0x237/0x6d0 [ 600.957038][ T31] ? __pfx_vpanic+0x10/0x10 [ 600.957059][ T31] ? preempt_schedule_common+0x83/0xd0 [ 600.957083][ T31] panic+0xb9/0xc0 [ 600.957102][ T31] ? __pfx_panic+0x10/0x10 [ 600.957122][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 600.957145][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 600.957172][ T31] watchdog+0xfdf/0xfe0 [ 600.957199][ T31] ? watchdog+0x20a/0xfe0 [ 600.957227][ T31] kthread+0x711/0x8a0 [ 600.957251][ T31] ? __pfx_watchdog+0x10/0x10 [ 600.957273][ T31] ? __pfx_kthread+0x10/0x10 [ 600.957296][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 600.957319][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 600.957335][ T31] ? __pfx_kthread+0x10/0x10 [ 600.957367][ T31] ret_from_fork+0x599/0xb30 [ 600.957386][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 600.957413][ T31] ? __switch_to_asm+0x39/0x70 [ 600.957432][ T31] ? __switch_to_asm+0x33/0x70 [ 600.957451][ T31] ? __pfx_kthread+0x10/0x10 [ 600.957473][ T31] ret_from_fork_asm+0x1a/0x30 [ 600.957510][ T31] [ 601.444220][ T31] Kernel Offset: disabled [ 601.448527][ T31] Rebooting in 86400 seconds..