last executing test programs: 6m51.287356726s ago: executing program 3 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r2, &(0x7f0000000000)='\"', 0x1) recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r2, &(0x7f0000000400)=ANY=[], 0x1d) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, 0x0, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_pid(r4, 0x0, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) write$cgroup_pid(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010428bd700019cb000000000000", @ANYRES32=0x0, @ANYBLOB="00000000051c00002c0012800e00010069703665727370616e0000001800028004001200080004000600"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="800000001510010200000000000000000500000a0900010073797a31000000000902020073797a32000000000900020073797a300000000008000340000000060900010073797a310000000008000340000000060900010073797a31000000001f00080047b485a737358789cc82c8b708af00793f1c42580163b1afb3efda00"], 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x400c004) 6m47.229502248s ago: executing program 0 (id=42): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x665, 0x14}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x30}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x48000) listen(r0, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3f, {0x1, 0x7, 0x7, 0x1, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}}, 0x980) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000076000100020000000000000007020040", @ANYRES32=0x0], 0x18}, 0x1, 0x5502000000000000, 0x0, 0x801}, 0x4000) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c4) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) close(r2) 6m46.993388212s ago: executing program 0 (id=35): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="181000a7daa64144370f0d00", @ANYRES32, @ANYBLOB], 0x0, 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x48}, 0x94) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$kcm(0x29, 0x2, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@bridge_delneigh={0x58, 0x1d, 0x2, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x0, r4, 0x0, 0x46, 0x4}, [@NDA_MASTER={0x8, 0x9, 0x8}, @NDA_MASTER={0x8, 0x9, 0x401}, @NDA_DST_IPV6={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @NDA_LINK_NETNSID={0x8, 0xa, 0x487}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000006c0)={0x8, {{0x2, 0x4e26, @multicast2}}}, 0x90) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0xa, 0x6, @remote}, 0x14) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0xb, 0xa2, [@broadcast, @broadcast]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x10000, 0xfffffffc, 0x0]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) 6m46.484182362s ago: executing program 3 (id=38): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) unshare(0x100) unshare(0x26020480) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc6004", 0x15}], 0x1}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x101, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x4}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r4 = epoll_create(0x7) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000280)={0x2007}) r6 = socket(0x10, 0x803, 0x0) write(r6, &(0x7f0000000040), 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@gettaction={0x18, 0x32, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8040) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x6000100c}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) 6m46.044047133s ago: executing program 3 (id=39): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @void, @llc={@snap={0xaa, 0x1, "c841", "75b787", 0x8863, "16edb0c89157e7aa7611bb85589b94bd7be9112d73ffb6f861e8f9f48a135c82029a980cbffbc6f20f9da11298ffa69e662539a1ab4afad4aa943b5210fe0024c9f045e4c963cc466f3480f449c459f19287a277d9bb27a1"}}}, 0x61) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0x80000001, 0x4, @mcast2, @local, 0x10, 0x8000, 0xaa, 0x1}}) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000240)=r4) r5 = socket$netlink(0x10, 0x3, 0x5) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x278, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x21}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa47}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000005c0)) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x14, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000680)={r4, 0x1, 0x6, @multicast}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockname$llc(r7, &(0x7f00000006c0), &(0x7f0000000700)=0x10) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000740)) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000800)={0x0, 0x2}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000880)={r9, 0xf1, "d691604fa6e5ffd563ae3f9c3be55963da4ddab177f2432001db70be0db4179986a926d1923b7ee03eb99b85b6dbd704dfc7da8d2b02f2be14cba969b433f9df001a91ee5b2aaf11ed15bc207b661dcc950b935e68edca39481a3ef2f017b65e34a720264d6cdd6efa57c7ccbf883ac1f356357df8c77a429638a74dcb120bd4832ee3c3668791be1dd7ba2b06dd5a04ea5d4777bc0fd14ffb4dfb01dcd31152067eff6b8b537f205ba9ea130c1fd6213ab4c8a24139a7f338772fd7b9470cf0d4475e03941f6f7f86da47da6eb1f134483131d33813555c94d4060144577f2f139e3e15d943d896ab1c8efd553c6eb144"}, &(0x7f0000000980)=0xf9) bind$can_j1939(0xffffffffffffffff, &(0x7f00000009c0)={0x1d, r4, 0x3, {0x2, 0xff, 0x3}, 0xff}, 0x18) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f0000000a00)={{0xa, 0x4e22, 0x8, @mcast2, 0x5}, {0xa, 0x4e20, 0x9, @private1, 0x6}, 0x0, {[0x6, 0x6, 0xe, 0xd45, 0x9, 0x3, 0x9, 0x7]}}, 0x5c) r11 = socket$inet_sctp(0x2, 0x5, 0x84) accept4$inet(r11, &(0x7f0000000a80)={0x2, 0x0, @private}, &(0x7f0000000ac0)=0x10, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000b00)={'macsec0\x00'}) socket$kcm(0x29, 0x7, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000bc0)={'syztnl2\x00', &(0x7f0000000b40)={'syztnl1\x00', r4, 0x29, 0x2, 0x4b, 0x2, 0x4, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x20, 0x6d1f, 0x4}}) 6m45.99113754s ago: executing program 0 (id=40): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0x1c}, 0x94) 6m45.828703838s ago: executing program 0 (id=43): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x2c, 0x75, &(0x7f0000000140)="6c9e65833bc757b0003dea026d58f62468df4d4d9b3a9c5f3678668b53975893cd595bad4d0336f04c6cb2b0", &(0x7f00000002c0)=""/117, 0x1274, 0x0, 0xc9, 0x6c, &(0x7f00000004c0)="fca705b2ae2462e2bdc8b300e4d4de222d3dc8a1e421a47a9b07c202c020ef5eddf9434a01d0f1f87b0f8985b20b3b84b99e5127e88367c897aba32d338f23f24a2b03a702cba15d173c05557232ccdf69bdb99d5e1d8f7224cd7d72541325f704ed597771bb3fb95b441f1b584033ed3be7c631ba76fa71ee46197e8550e9327daf8e4b60e8308b3338bca6f47fc365eb4e527dd26a4922979bfb43bf1de6b493e0e1bdf8f871eadbd963fd4021728eb73b97ef4f899e5d3fc695d9ca7911eefc23ea6973613fd668", &(0x7f0000000340)="53b7ff56a83c4ddffd96f1a461ef1ffc2a3185f51ab93864faed5a9c5c618a9d2077c037772f8ccb16a58e70b6bcbe79ec3dffd9222b02f873e7dfad8aa09c83315b1ebf3b6bed2524a7e8c17394c38a4fa9130b109c5908c7ce4d7de1dfb464c6c35e2dfd7d1a7036946c0c", 0x1, 0x0, 0x9}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000b00837162205f78b9dd72993eff9456ed75f80cd0f19af743748ab45e60235dc787e7a35c84843a55ea844aa82a350dc2ebfe87d743f30840a154459f475ecc52501d61074523579cc73d8e283eb42bf9d1eead513b5292e2710ab77e1f4edb74ee90fac8c0b6f9a4b64239aa54c372a25f5db9c2c78ac0e72d037acdf3fae31f0a20cecbc07118", @ANYRES16=r9, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c0099004100000060000000080026009a030000"], 0x30}}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x1051, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r10 = socket$unix(0x1, 0x1, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x1, 0x7, 0x1c16, 0x8}, 0x5, 0x0, 0x10000, 0x6, 0x1, 0xe, 0x14, 0x1f, 0x7, 0x78d9, {0x1, 0x6, 0xc, 0xfffffffb, 0x1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 6m45.597226987s ago: executing program 3 (id=45): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRESDEC=r0], 0x30}}, 0x40) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000ecd00000000000000000000711083000000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 6m45.456613985s ago: executing program 3 (id=46): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004e8b69a4c6a457be625009c59885ab170136d71b53f56ec6e56fe9120d58cc6bb2dcc8f7ebdf5c"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x26, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xe8, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r3, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r2, 0x4, 0x4, 0x5}) setsockopt$inet_tcp_int(r5, 0x6, 0x1, &(0x7f0000000180)=0x6c2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) socket(0x10, 0x803, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r7 = epoll_create(0x7) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)) r10 = epoll_create1(0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYRES16=r9], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r11, 0x0, 0x4, 0x0, &(0x7f0000000000)='\x00\b\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(r11) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) 6m45.441051462s ago: executing program 0 (id=47): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe66}, 0x1, 0x0, 0x0, 0x40884}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x4, 0xfc, 0xff, 0x0, 0x8c38, 0xbffd, 0x2, 0x7, 0x236c, [0xfffffffc, 0x4]}}) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) close(r0) socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 6m45.163871574s ago: executing program 0 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x3010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x57}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x7}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xa1}, @NL80211_ATTR_IE={0x56, 0x2a, [@measure_req={0x26, 0x50, {0x7f, 0x7, 0x0, "316d323f494c6d781625416e5e903603addea4c4d4592e8b207b6edf01f125446569bd3b1ff8a3a3f2358cdd6f46978dfb3ee823a2a4494e15297709cd8cc2f29884acb988fcb5997b6625a695"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x45}, 0x240000d0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000080) 6m44.709687776s ago: executing program 32 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x3010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x57}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x7}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xa1}, @NL80211_ATTR_IE={0x56, 0x2a, [@measure_req={0x26, 0x50, {0x7f, 0x7, 0x0, "316d323f494c6d781625416e5e903603addea4c4d4592e8b207b6edf01f125446569bd3b1ff8a3a3f2358cdd6f46978dfb3ee823a2a4494e15297709cd8cc2f29884acb988fcb5997b6625a695"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x45}, 0x240000d0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000080) 6m44.676286824s ago: executing program 3 (id=54): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000007cba000000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000000900020073797a32000000002c0004902800018007000100637400001c000280080004400000000408000240000000040800014000000014140000001100010000000000000000000100000af3e777167c8453a6481bb9c75d92e41ee6983587b0429e56f2c7107ecbabc2bd"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) 6m44.491499914s ago: executing program 33 (id=54): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000007cba000000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000000900020073797a32000000002c0004902800018007000100637400001c000280080004400000000408000240000000040800014000000014140000001100010000000000000000000100000af3e777167c8453a6481bb9c75d92e41ee6983587b0429e56f2c7107ecbabc2bd"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) 3.65227775s ago: executing program 4 (id=3883): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='workqueue_activate_work\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) tee(r2, r1, 0xd849, 0x4) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) 3.612406385s ago: executing program 6 (id=3884): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) 3.540170411s ago: executing program 4 (id=3885): r0 = socket$netlink(0x10, 0x3, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x739ef000) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf, 0x11, r0, 0xc98e5000) (async) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x18, 0x41, 0x9, 0x70bd2a, 0x0, {0x3}, [@nested={0x4, 0x2c}]}, 0x18}}, 0x4004080) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006740)=@newchain={0x1c58, 0x64, 0x0, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x5, 0x7}, {0xc, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c28, 0x2, [@TCA_FLOW_POLICE={0xc10, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x4, 0x401, 0x100, 0x2, 0x6, 0x2, 0xc, 0x9, 0xb9f0945, 0x1, 0x4, 0x6, 0x38, 0x8, 0x9d14, 0x8, 0xff, 0x33, 0x101, 0x0, 0x8, 0x5, 0xffff0001, 0x2, 0x1000, 0x14, 0xfffffff7, 0x9, 0x3fffc, 0xa, 0x7ff, 0x5, 0xb, 0x5, 0xdcb, 0xd7, 0x401, 0x3, 0x580f, 0x1000, 0x0, 0x5, 0x7, 0x29e0, 0x10001, 0x7f, 0x1, 0x46c6, 0x5, 0x4, 0x73a0, 0x2, 0x4, 0x5, 0x9, 0x3ff, 0x8, 0x80000001, 0x10, 0x6, 0x3, 0x80000001, 0x8, 0xffff, 0x6, 0x8, 0x6, 0x7, 0x6, 0x400, 0x0, 0x100, 0x8001, 0x9, 0x1, 0xfffffffb, 0x8, 0x0, 0x9d, 0x8, 0x5e, 0xb31, 0x8, 0x4, 0xff, 0x97, 0x7, 0x8, 0x10, 0x1, 0xc, 0x6, 0x3, 0x40000000, 0xf7, 0xb, 0xff, 0x8, 0x3, 0x400, 0x5, 0x0, 0x9d, 0x2, 0xbda6, 0xcc, 0x7, 0xc4c6, 0x1, 0x9, 0x6, 0x2, 0x7, 0xc1b3d865, 0x1, 0x5, 0x2, 0x0, 0x10, 0x13, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x4, 0x8001, 0x10, 0x6, 0x4, 0x2, 0x0, 0x1, 0x7, 0x44, 0x2, 0x9b5, 0xfffffff8, 0x1, 0x9, 0x0, 0xffffffff, 0x9f1, 0x3, 0x4, 0xb05, 0x1, 0xbc39, 0x8, 0x6, 0x5, 0xa, 0x3, 0x2b6, 0x0, 0x6, 0x1800, 0x8000, 0x1, 0xff, 0x3a5, 0x4, 0x1a, 0x6, 0x401, 0x1000, 0x9, 0x9, 0x5, 0x9, 0xa, 0x2, 0x5, 0x3, 0x9, 0x4, 0x9367, 0x0, 0x0, 0x1, 0x2, 0xfffffffc, 0x1, 0x400, 0x2d6, 0xfff, 0xf6, 0x6, 0x7, 0x5, 0x4, 0x2, 0x4, 0x2, 0x21e2, 0x8, 0x2, 0x10000, 0x800, 0x4, 0x7178, 0x0, 0x0, 0x3e, 0x1, 0x3, 0x9, 0x8, 0xa24, 0x1, 0x0, 0x0, 0xe, 0x0, 0xfffffffd, 0x1, 0x10001, 0x6, 0x3, 0x7, 0x2, 0x4, 0x0, 0xaa31, 0xcd32, 0x2, 0x6, 0xfff, 0x70, 0x4, 0x6, 0x0, 0x3, 0x8e9, 0x6, 0x3, 0x3, 0x4fba, 0x5, 0x1, 0x401, 0x0, 0x7, 0x4e, 0x8, 0x1, 0x8000, 0x2, 0x40, 0x5, 0xbc, 0x0, 0x800]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6, 0x1, 0x6, 0x0, 0x2, 0xff, 0x5, 0x40000000, 0x7f, 0x0, 0x4, 0x8, 0x5, 0x6, 0x9, 0x3b, 0x4, 0x82a, 0x10, 0x2, 0x6, 0x1ff, 0xa6, 0x400, 0x5, 0x6, 0x4, 0xffff8000, 0x8001, 0x408c2ae0, 0x2, 0x8, 0xffff, 0x8001, 0x1, 0x9, 0x7b8b87bf, 0x946, 0xaa28, 0x80, 0xa, 0x3, 0x6, 0x6, 0x2, 0xac02, 0x1, 0x4, 0x7, 0x5, 0x6, 0x466, 0x7, 0x3, 0x2, 0x401, 0x3, 0x5, 0xfffffff8, 0xd702, 0xf, 0x8, 0xcb4, 0x100, 0x0, 0x13a, 0x6, 0x6, 0x6, 0x58ce, 0xe02, 0x5, 0x3, 0x5, 0x6, 0x29, 0x0, 0x400, 0x2b11, 0x81, 0x0, 0x7f, 0x10, 0x6, 0x800, 0x7487, 0x1, 0x2, 0x8, 0x0, 0x2, 0x4, 0x5, 0x3, 0x2, 0x7ff, 0x3, 0xe, 0xe, 0x401, 0x4, 0xcb, 0x9, 0x100, 0x10, 0x2, 0x40, 0x5, 0x6, 0xf, 0x0, 0x3, 0x1e22, 0x3, 0x0, 0x7, 0x12dbe0, 0x726, 0x2, 0x8, 0xf8, 0x1, 0x6, 0x7, 0x4, 0x30, 0xffffff2f, 0x0, 0xb6be, 0x5, 0x7, 0xb69b, 0x5, 0x8000, 0xc, 0x5, 0x483, 0x80, 0x30, 0x3, 0x65, 0xff, 0x4, 0x7, 0x59, 0x7, 0x0, 0x40, 0xfffffffa, 0x0, 0x431, 0x4, 0x7, 0x4, 0x6, 0xd, 0x7b2b, 0xf, 0x3, 0x200, 0x9, 0x5, 0x7, 0x9, 0x0, 0x3ff, 0x0, 0xfffffff2, 0x8001, 0xffffff7f, 0x8, 0x2, 0x0, 0x8, 0x0, 0xffff7be8, 0x8, 0xa300, 0xe, 0x2, 0xfffffffd, 0x9, 0x101, 0x4, 0x54, 0x5, 0x6e, 0x6fd4, 0x398d1d17, 0x0, 0x8, 0x3, 0x7, 0x4, 0x8000, 0x0, 0xab9a, 0x9, 0x1, 0x2, 0x4, 0x6, 0x14000, 0x1, 0x9, 0x0, 0xe8000000, 0x4, 0x81, 0x3, 0x5b9, 0xb, 0x3ff, 0xefde, 0x68c, 0x9, 0x3, 0xcf, 0x2, 0x9c7a, 0x7, 0x2, 0x6000000, 0x0, 0x55b8, 0xb, 0x9, 0xd, 0x1, 0x401, 0x100, 0x1000, 0x7, 0x5, 0x4, 0xffffffff, 0x5, 0x800, 0x7fffffff, 0x10000, 0xfffffff7, 0x0, 0x8, 0x6, 0x7, 0xffff509b, 0xfffffff8, 0x7, 0x2, 0x8, 0x2, 0x6240, 0xfff, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x358, 0x0, 0x7106, 0x80000000, 0xb, 0x5, 0x3, 0xb, 0xfffffff9, 0x1, 0x2, 0x2, 0x5, 0x6d0, 0x3, 0x0, 0x6, 0x0, 0x5, 0x400, 0x4, 0x6, 0x1, 0x7fffffff, 0x6, 0x5, 0x800, 0x8, 0x0, 0x4, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x1, 0x2, 0x0, 0x70200000, 0x4, 0x8, 0xe, 0x1, 0x1, 0x6, 0x1ff, 0x80000001, 0x1, 0x4, 0x9, 0x0, 0x8001, 0x65, 0x1ff, 0x8, 0x7, 0x3, 0x3, 0x7, 0x4, 0x1, 0x929, 0x8, 0x4aa, 0x3d8056eb, 0xff, 0x8, 0xfffeffff, 0x4, 0x0, 0x9, 0x9, 0x8, 0x1, 0x10001, 0xfffffc01, 0x800, 0x1, 0x3, 0x4, 0x47c2, 0x0, 0x80000001, 0xfffffff7, 0x200, 0x5, 0x7, 0x0, 0xf9da, 0x7f34, 0x81, 0x7c, 0x6, 0x8, 0x9, 0x6, 0x9, 0x3, 0x9, 0x74c, 0x7ff, 0x2e, 0x5, 0x2, 0x9, 0x7, 0x9, 0x40, 0x400, 0xe769, 0x4, 0x0, 0x80, 0x5, 0x100, 0x7ff, 0x9, 0x4, 0x0, 0x8, 0x4, 0x2, 0xfffffffd, 0x10001, 0x14000, 0x0, 0x10001, 0x4, 0x40, 0xffffffff, 0x7fffffff, 0x6, 0x401, 0x4, 0x7, 0x4, 0x7, 0x3ea, 0x1000, 0xffff4e7a, 0x23, 0x7, 0x6a8, 0x20000010, 0x5, 0x6, 0xf37, 0x1, 0x5, 0x2, 0x5, 0x4, 0x4, 0x8, 0x3, 0x2, 0x6, 0x0, 0x8, 0x8, 0x5, 0x7, 0x400, 0x800, 0x4, 0x729, 0x0, 0x0, 0x100, 0x9, 0x5, 0xe, 0x2, 0x9, 0x10001, 0x6, 0x8000, 0x10000, 0xb, 0x1, 0x6, 0x10001, 0x8, 0x2, 0xee, 0x5, 0x4, 0x7, 0x2, 0x7, 0x1, 0xd8f, 0x80000000, 0x2, 0x401, 0xf, 0xcf, 0x5, 0x1, 0x71a8, 0x7fffffff, 0x7ff, 0x5, 0x6f, 0x7, 0x8, 0xffffff40, 0x254b, 0xc4f, 0x8000, 0x9, 0x744d, 0x6, 0xad1, 0x10, 0x11, 0x10, 0x7, 0xc2, 0x2, 0x2, 0x3, 0x1, 0x3, 0xf73b, 0xa, 0x9, 0x10000, 0x3, 0x2, 0x6, 0x10000, 0x80000000, 0x7, 0x1, 0x1, 0xffffffff, 0xc6e3, 0x9, 0x101000, 0x0, 0x2, 0x6, 0x3c, 0x9, 0x8, 0x3, 0xfffffffc, 0x9, 0x5, 0x2, 0xb4, 0x9, 0x2, 0x48]}]}, @TCA_FLOW_POLICE={0x1014, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x8a51, 0x1, 0x7, 0x3, 0x8, 0xfff, 0x3, 0x3, 0xa, 0x93, 0x4, 0x4, 0x0, 0x1c000, 0x2, 0x6, 0x4, 0x80000001, 0x7, 0xcd6, 0x9, 0x6, 0x0, 0x2, 0x6, 0x6, 0x6336f786, 0xb9c4, 0x7, 0x3, 0x5, 0x79c, 0x200, 0x2, 0x8, 0xd53, 0x13, 0xffffffff, 0x240, 0x9, 0x7, 0xffffff8f, 0xf1, 0x0, 0x68000000, 0x7b, 0x200, 0x80000000, 0x8, 0x10, 0xf8000000, 0x7f80, 0x303, 0x2, 0x5, 0x5, 0xfffffffc, 0x13cc, 0x7ff, 0x4, 0x7, 0x6, 0x1, 0x4000000, 0x81, 0x2, 0x2, 0x49fa, 0xfd8d, 0x9, 0x3, 0x7, 0xc20c, 0xe2f, 0xa2, 0x5, 0x0, 0x3, 0x2, 0x0, 0x9, 0x5, 0x3fbe, 0x9, 0x1, 0x7, 0x2, 0x400, 0x8000, 0x0, 0xff, 0x3, 0x8, 0x400, 0x4, 0xffffcd11, 0xf33, 0x0, 0x800, 0xa, 0x39, 0x7, 0x9, 0x9, 0x7f, 0x101, 0xc00, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xffff, 0x9, 0x2, 0x10000, 0x4ba, 0x7fffffff, 0xcf1, 0x400, 0xd, 0x800, 0x9, 0x5, 0x8c3, 0x2, 0x3212, 0x4, 0x0, 0x8, 0x2, 0x9, 0x2, 0x80000000, 0x1, 0x5a, 0x72a8, 0xf000000, 0x0, 0x7, 0xfffffeff, 0xf, 0x6, 0x9, 0x7, 0x6, 0x6, 0x102, 0x0, 0x3, 0xe, 0x6, 0x4, 0x5, 0x7, 0x7fc0, 0x5, 0x9, 0xc0, 0x5, 0x0, 0x3, 0x8, 0xbf728e3, 0xca, 0x400, 0xa, 0x8, 0xb4, 0xa, 0xa1f, 0x400, 0x9, 0x1ff, 0x4, 0x40, 0x3, 0xfffffffa, 0x1000000, 0x5, 0x5, 0x2, 0xe, 0x3, 0x6, 0xffffffff, 0x1, 0xf60, 0xe, 0x5, 0x7, 0xfffffffc, 0x0, 0xc89, 0x2, 0x6, 0x9, 0x1, 0x10000, 0x95f1, 0x6, 0x4, 0x8, 0x8000, 0x7, 0x6, 0x116, 0x3, 0xb8, 0x80000000, 0x3, 0x7, 0x7, 0x9, 0xfffffe00, 0xbde, 0x8, 0xdd000000, 0x4, 0x8, 0x4, 0x40, 0x7, 0x32, 0x0, 0xa7ef, 0x800, 0xb5, 0xce, 0x8, 0x8, 0x9, 0x2, 0x1, 0x800, 0x9, 0x4, 0x2, 0x1ff, 0xd, 0x4, 0x37, 0x5, 0x696b, 0x1967, 0x76, 0x9, 0x9c, 0xf4, 0xfff, 0x6, 0x2, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3f3, 0x80000000, 0xfc2, 0x0, 0xf, 0x6000, 0x8001, 0x111a, 0x2, 0x9, 0x5, 0x0, 0x800, 0xa0, 0xb, 0x6d1, 0x3, 0x9, 0x0, 0x9902, 0x6, 0x10d7022d, 0x20eb15d5, 0xfffffb97, 0x4, 0x17, 0x51, 0x6c, 0x10, 0x0, 0x9, 0xb990, 0x8000, 0x2aa9, 0x5, 0x5, 0x5, 0x78, 0xffffded0, 0x8, 0x6, 0xfffffffe, 0xfffffffa, 0xe000000, 0x2, 0x800, 0x6, 0x3, 0x7, 0x1, 0x6, 0x80, 0x6, 0x43, 0x9, 0x3ff, 0x4, 0x200, 0x5a3, 0x5, 0x0, 0x2, 0x0, 0x6e900, 0x9, 0x0, 0xffff8000, 0x7ff, 0x3, 0x2, 0xfffffff7, 0x7, 0x5, 0x3, 0x101, 0x8b, 0x7fffffff, 0x5, 0xe, 0x80, 0xcd, 0xffffffff, 0x80000000, 0x9, 0x4, 0x3, 0x18000000, 0x4, 0x9, 0x3, 0x5, 0x6, 0x4, 0x5, 0x4, 0x6, 0x1, 0xffffffff, 0xd3e, 0x4a, 0x8, 0x9, 0x8001, 0x34fa, 0x0, 0x4, 0x3, 0x800, 0x6, 0x5bfb0197, 0x5, 0x6, 0x5, 0xfffffff8, 0x8, 0x7, 0xbf, 0x4, 0x5, 0x3, 0x9, 0xc, 0xfffffd7c, 0x3, 0x1, 0x8bd0, 0xfff, 0xf61f, 0x2, 0xfffffffb, 0x7, 0x8, 0x6, 0xfffffff8, 0x1, 0x6, 0x66, 0x7578, 0xf4, 0x21, 0x2, 0x4, 0x8, 0x1, 0x100, 0x8, 0x800, 0xa, 0x4, 0x80000000, 0x8, 0x6, 0x8, 0x8, 0x7f, 0x0, 0x3, 0x6, 0x2, 0xffff, 0xfffffff6, 0x8, 0x3ff, 0x1, 0x9, 0x4, 0x3, 0x1, 0x5, 0x4, 0x4, 0x95, 0x7ff, 0x7, 0x6, 0x200, 0xfe9, 0x7, 0x5, 0x10000, 0x1, 0xa7, 0xb, 0x6, 0x99, 0x94b, 0x6, 0x6, 0x95b, 0x1, 0x0, 0x7, 0x6, 0x9, 0x5, 0x0, 0x0, 0x5, 0x480, 0x4, 0x5, 0x3ff, 0x1, 0x6, 0x7, 0x7, 0x50c, 0x6, 0xd, 0x0, 0x3, 0x3, 0x8, 0x3e94d338, 0xffff, 0x80000000, 0x4, 0x0, 0x5, 0x7, 0x401, 0x4, 0x4, 0x8874, 0x9, 0x1, 0x0, 0x7ff, 0x8, 0x4, 0xf, 0x9, 0x3, 0x3, 0x0, 0x9, 0x4, 0x0, 0x80000001, 0x0, 0xffff, 0xfffffffc, 0xf, 0xd3, 0x10, 0x10001, 0x200, 0x800, 0x800, 0x400, 0x7, 0x5, 0x1, 0x2a, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfffffffd, 0x2, 0x0, 0x5, 0x9, 0x5, 0x6, 0xfffffff8, 0x6, 0x2, 0x1, 0x13, 0x7f, 0x0, 0x7fffffff, 0x8001, 0xaa, 0xb422, 0x5, 0x9, 0x885, 0xffffffff, 0x4, 0x5, 0xe870, 0x63bc, 0xa6, 0x4, 0x5, 0xcf, 0x7fffffff, 0x10, 0x9, 0x0, 0x3, 0x9, 0x7, 0x2, 0x6, 0x6, 0x6, 0x4, 0x80000001, 0x3, 0xfffffbff, 0x6, 0x7fff, 0x4, 0x1705ba6e, 0x4, 0x8, 0x6, 0x4, 0x800, 0x3, 0x8, 0x0, 0x0, 0x81, 0x8, 0x919, 0xffff, 0x0, 0x9, 0xffffffff, 0x7, 0x7, 0x2, 0x790, 0x0, 0x95e, 0x1, 0xfffffffb, 0xb, 0x0, 0x7a64, 0xbf16, 0x5, 0x2, 0xe6d, 0x0, 0x2, 0x8, 0xe, 0x0, 0x10000, 0x553, 0x5, 0x2, 0x3d5, 0xc, 0xffff, 0x1, 0x8, 0x7, 0x2, 0x6, 0x5ddcff5, 0x6, 0x80000000, 0x1, 0x9, 0x7, 0xc333, 0x5, 0x9, 0x9, 0xffff, 0x3ff, 0x8, 0xfffffff3, 0x6, 0x9, 0x200, 0x7f, 0x2, 0x9, 0x1, 0xf0, 0x1, 0x4, 0x7f, 0xf9, 0x8, 0x10000000, 0x1, 0x6, 0x1000, 0x6, 0x4, 0xc6d, 0x7, 0x7ff, 0x7, 0x180, 0x8, 0xfffffffe, 0x0, 0x2, 0x8, 0x2, 0x8, 0x3, 0x3, 0x1, 0x9, 0x4, 0x2, 0x101, 0xfff, 0xbd0d, 0x27f3, 0x5, 0x8, 0xb0e, 0x400, 0x100, 0x400, 0x3, 0x7fffffff, 0x6, 0x7, 0x9, 0x8, 0x6e1, 0x790c, 0x7ff, 0x80000000, 0x7, 0x7, 0x7fff, 0x5, 0xfffffff7, 0x0, 0x10, 0x9, 0xd96, 0x50, 0x1, 0x6, 0x4, 0x37, 0xfffffffc, 0x6, 0x7, 0x9, 0x690, 0x3ff, 0x2, 0xff, 0x0, 0x0, 0x3, 0x400, 0x7, 0x0, 0xff, 0x2, 0x1, 0x1ff, 0x8, 0x7, 0xb58a, 0x8, 0x9, 0x5, 0x9c, 0xfffffeff, 0x9, 0x6, 0x8, 0x9, 0x0, 0x9, 0xe, 0x2, 0x5, 0x0, 0x7, 0x8, 0x7, 0x2, 0xfffff520, 0x1, 0xb3a, 0x40400000, 0xe9f77feb, 0x0, 0xcd, 0x9, 0x3, 0x5, 0x800, 0x8, 0x0, 0xffff, 0xc, 0x5, 0x3, 0x9, 0xffffff3b, 0x3, 0x43, 0x1, 0x9, 0x1, 0x9, 0x6, 0x5, 0x4, 0xf, 0x8000, 0x800, 0xe9f, 0xba6c]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5d, 0x4, 0x0, 0xbf, 0x3, 0x7, 0xb35, 0x0, 0x7f, 0x16f8, 0x1, 0x800, 0xb, 0x3, 0x2, 0x3, 0x4, 0x7, 0x4, 0x9, 0x5, 0xc31f, 0x1ff, 0x4, 0x3, 0x3ff, 0x0, 0x7, 0x2, 0x7, 0x1, 0x6, 0xb, 0x7, 0x78, 0x417, 0x1, 0x10, 0x5, 0xa, 0x7, 0x692, 0x2, 0x8001, 0x0, 0x5, 0x4, 0xf, 0x9, 0x9, 0x1, 0x16, 0x3, 0x5, 0x7, 0xe, 0x9, 0x6, 0x2, 0x2, 0x6, 0x3, 0x9, 0x3, 0x8, 0x6, 0x800, 0x0, 0x4, 0x2, 0x7ba, 0x10, 0x3, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, 0x4, 0x7442, 0x6, 0x9, 0x4, 0x0, 0x309, 0xfffffeb3, 0xabc, 0x9, 0x3, 0x3, 0x6, 0x996, 0x0, 0x1, 0x0, 0x40, 0x7, 0x9, 0x17, 0x1e000000, 0x1c, 0x633, 0x0, 0x1ff, 0x8, 0x7f, 0x3, 0x9, 0x5, 0x3, 0x9, 0xffff, 0x6, 0x8001, 0x9, 0x6, 0x8, 0x5, 0x7fff, 0xff, 0xf7a, 0x3, 0xfffffffd, 0x9, 0x3, 0x8, 0x0, 0x8, 0x5, 0x7fffffff, 0x1ff, 0x6, 0x6, 0x11c8, 0x4, 0x6, 0x400, 0x4, 0x1, 0x6af, 0x0, 0x3, 0xa, 0x6, 0x1, 0x515c91eb, 0xb, 0x6, 0x3, 0x1812, 0x8, 0x6, 0x9, 0x3, 0x2, 0x9, 0x4, 0xfffffff0, 0x6, 0xfffffffe, 0x2, 0xffff, 0xd, 0x7ff, 0x1, 0xab, 0x8, 0x9, 0x5, 0x8000, 0x7, 0x3, 0x1, 0x81, 0x2, 0x3, 0x9, 0x8, 0xe8, 0x9, 0x2, 0x10000, 0x9, 0xc2d, 0x0, 0x9, 0x6, 0x1, 0x2a, 0x80000001, 0x6, 0x6, 0xc, 0xc, 0xfffffffe, 0x1, 0xd5b, 0x4800000, 0x7, 0x25, 0x5, 0x10000, 0x8, 0xfffffffa, 0x3, 0xa, 0x3, 0xe, 0xfffffff9, 0x7, 0x0, 0x1af, 0x101, 0xfffffffa, 0x6, 0x9, 0x2, 0x53f9, 0x5, 0x0, 0x3, 0x1, 0x8, 0x1, 0xdf10, 0x529, 0xffff, 0x3, 0x7f, 0x401, 0x7fff, 0x0, 0x38, 0x86e8, 0x9, 0x3, 0xcc0, 0x5, 0xfffffffc, 0xd91, 0xffffffff, 0x3, 0x1000, 0x800, 0xfffffffa, 0x8, 0x8, 0x9, 0x6a, 0x6, 0x2, 0x6, 0x0, 0x3, 0x400, 0x589]}]}]}}]}, 0x1c58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000084) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r7, 0x0, 0x6}, 0x18) (async) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0xfffd, @loopback}, 0x10) 3.338667277s ago: executing program 4 (id=3888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x24000041}, 0x4000001) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x633, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 2.928074244s ago: executing program 4 (id=3894): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) unshare(0x400) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x35}]}}}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) (async) unshare(0x400) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x35}]}}}]}, 0x44}}, 0x0) (async) 2.677339271s ago: executing program 6 (id=3899): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r4], 0x34}}, 0x4008000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.604637551s ago: executing program 4 (id=3902): ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000040)={0xfffffff9, 0x4, 0x10, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, 'pimreg0\x00'}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000940)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd26, 0x25dfdbfb, {{@in6=@empty, @in6=@private1, 0x4e23, 0x0, 0x4e22, 0xc, 0xa, 0xa0, 0x20, 0x2f}, 0x0, 0x2}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000030000000f00005f0000000000"], &(0x7f00000000c0)=""/101, 0x27, 0x65, 0x0, 0x6}, 0x28) 2.571148589s ago: executing program 4 (id=3903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x76, &(0x7f0000000680)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @mcast1, [@fragment={0x29, 0x0, 0x6, 0x1, 0x0, 0x6, 0x67}], "d3897b1f4edff52d"}}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r2, @ANYBLOB="0200260a060005e326927bfb0d430de3bf1900040000000a000200ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x404c884) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x8918, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000000240)='W', 0x1, 0x4024891, 0x0, 0xfffffffffffffece) setsockopt$inet6_int(r6, 0x84, 0x4a, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') unshare(0x6a040000) r7 = socket(0x8, 0x3, 0x0) unshare(0x40400) bind$netlink(r7, 0x0, 0x0) shutdown(r4, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000000}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @private2, 0x8}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000280)='1', 0x1}], 0x1}}], 0x2, 0x20000012) 2.382875306s ago: executing program 6 (id=3904): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x20, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e00010046fc7464657673696d0000000f0002006e657464657673696d3000000e00017673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000"], 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="1380000023b201002400128009000100626f6e6400000000140002800800070081000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f00000001c0), &(0x7f0000000100)=@tcp6=r4}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0xfffc, 0x1, 0x8, 0x7ff, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000540)={r6, 0x3b, "457676cd2d19cbd73bac4afd44a7f42e6ac53a80796dc2034ea53ac44b8db0817d99a4d1234e62ca1ccc6df18618351bab6042c7e878be3dfad198"}, &(0x7f0000000480)=0x43) 1.958671211s ago: executing program 5 (id=3908): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r1, 0x1bc60, 0x1a704}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 1.884853488s ago: executing program 2 (id=3909): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) unshare(0x20000400) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_hci(r4, 0x112, 0x3, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100f3ffffff0000000002"], 0x54}}, 0x20004010) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000400)={r11, @in6={{0xa, 0x4e22, 0x6, @empty, 0xac}}, 0x0, 0x1000}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010003904000006000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c00001400028005000400800000000500060004000000"], 0x44}}, 0x40) 1.868395842s ago: executing program 5 (id=3910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmmsg$alg(r2, &(0x7f0000000580)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000}], 0x1, 0x0) recvfrom(r2, &(0x7f00000000c0)=""/74, 0x4a, 0x0, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x2, 0x0, 0x50}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x82, &(0x7f0000000240)=""/130}, 0x94) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESHEX=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) 1.843446577s ago: executing program 1 (id=3911): r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0x80087601, 0x100000000010001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmmsg$inet6(r0, &(0x7f00000126c0)=[{{&(0x7f000000a200)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd0de}, 0x1c, 0x0, 0x0, &(0x7f000000a2c0)=ANY=[@ANYBLOB="24000000000000002900000002000000ff0200"/29, @ANYRES32], 0x28}}], 0x1, 0x8000) 1.672855706s ago: executing program 1 (id=3912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x9, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xe8b, 0x93, 0x1, 0x3}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="b117909d56d0c45e8634b93ccc7e40e57af98acf07ec1fad303251c1c8cb62b1b9345e8723f457443a69e30f08eebff313ad04c175553bc9b0a5f7a46d33e0c98b8ab84a35c32dfb0e86bb15ac9e069bf2f93e3fc59bbaa71b0240123483763e7b05ddfa6c35aafb3d37df036d511923ceee23376381ad7efa6fb4b4b430578c85fbca9c8cd82ade1cfd408d9e797124e180a95af0c00618462ec92ab53a224ca46b78b5ed0774200348f522c7ee23d70f37517221dcbad98a8ec4fa900631034532d8c352a50359115238fe45a2ba160f3390ca4293e73104b4c7da360629b5a7cd4026a26e6eefb729a16c7809ac21dddcb6696f4000465a0d127ccfa8", 0xfe, 0x810, &(0x7f00000001c0)={0x11, 0x1, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.562954074s ago: executing program 2 (id=3913): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x10010, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4a, 0x0, &(0x7f0000000080)=0xe) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x7}, 0x90) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0xf4e54000) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000000040), 0x4) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x3, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x2e, 0x2f]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x20004880) ioctl$SIOCAX25GETUID(r8, 0x89e0, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r9}) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\b\x00}\x00', @ANYRES32=0x0, @ANYBLOB="00300047800c000800010000000000000014002800000000000000000000000000000000010c0075006e6c38303231310008000100", @ANYRES32=r0, @ANYBLOB="a0006f800400818077003800bee386771053f7ed5a2fd5c7f68dd34a37424197a9cbf392fe4613d0e23641addb72c2e26807bad815d2b255a3f0e42a9dc719c3340a52f9e19545c276402b03ddbfd7986f77a77ee2889d5d5e3ee95ca099ae2eca17d49f163a26f4aae8dcfd0afdf11ecb464200040008800c000200d65f000000000000040038800400118008002800"/156, @ANYRES32=r9, @ANYBLOB], 0x1348}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r11 = socket(0xa, 0x3, 0x87) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000001a00)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r12, @ANYBLOB="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", @ANYBLOB="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"], 0xf4}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 1.446570136s ago: executing program 6 (id=3914): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x500}, 0x38) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/243, 0xf3}, 0xf338}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xd}], 0x3fffe16, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1.296456642s ago: executing program 1 (id=3915): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1.287978663s ago: executing program 2 (id=3916): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xfffffffe}}]}}, 0x0, 0x4a}, 0x28) r2 = socket(0x1e, 0x4, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000280)=0x60, 0x80800) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f00000002c0)=""/145, &(0x7f00000003c0)=0x91) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100000000372500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="10080400220002001c002b80080003001100000008000100", @ANYRES32, @ANYBLOB='\b\x00\b'], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000000580)={{r1}, "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"}) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008300), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000008440)={0x0, 0x0, &(0x7f0000008400)={&(0x7f0000008340)={0x38, r9, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:crack_db_t:s0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001001f100000000067940a000002"], 0x28}}, 0xc4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket$nl_route(0x10, 0x3, 0x0) 1.098440618s ago: executing program 1 (id=3917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000005c0)={'icmp6\x00'}, &(0x7f0000000600)=0x1e) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000007000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_team\x00', 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0xdd, &(0x7f0000000100)="ba59d69fdc434ac7daac1cdcd66e", &(0x7f00000003c0)=""/221, 0x1, 0x0, 0xcd, 0x10, &(0x7f00000004c0)="67cd5044b210656f76f407bc4ddb92387e97145e2523c6cdda630cec227fa99cd4e02e779a892b926de8f648d1153074937c0513896bb261513d5f5c9c740c00db4ee099f630072fa0b053f1a7591ee43c73a32876f33da037e0d4cb73c18a493c37f36261c37274d4bf8836ff5996bb511d5fdc3b5e8726a9cff8d76b7e9f30396f2a51d4a0b11a11df3e9e8dfc231c0991130a253620cfd10283617bf9fc4ee8933cceb086aec4e28765f1f275fdaa2ce6b5e38af059265fdab867a779cfbb2e7d8a607d38dd65e1435fde71", &(0x7f0000000140)="23f0dd707fb986ae78460f323a48770b", 0x0, 0x0, 0x80000001}, 0x50) 968.053235ms ago: executing program 1 (id=3918): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfff}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @private, 0x0}, &(0x7f0000000080)=0xc) r4 = socket(0x11, 0x3, 0x0) setsockopt(r4, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg(r4, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r6, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="00030200f0ff000000002d3922ff65b4355e953d23d27c69e074889fa8e7ee962184588e5fd8c5ee00a7472916f510027afb3654", 0x34}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea5963", 0x14}], 0x2}, 0x40011) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x70, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x10, 0x40, 0x32e, 0x0, {{0x21, 0x4, 0x2, 0x8, 0x84, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x3c, 0x7e, 0x3, 0x3, [{@remote}, {@remote, 0x5}, {@private=0xa010101, 0x10000}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@private=0xa010102, 0xd6}, {@multicast1, 0x43e7aad0}]}, @noop, @end, @generic={0x44, 0xa, "a867a5b06d6f46c9"}, @lsrr={0x83, 0x27, 0x54, [@loopback, @broadcast, @remote, @empty, @rand_addr=0x64010101, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, @empty]}]}}}}}) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf98000000000000d6080000380000008500000007000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0xf, 0x0, 0x48, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x7800, 0x80, 0x0, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000009c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0x2, 0x17ed, {{0xc, 0x4, 0x3, 0x2, 0x30, 0x68, 0x0, 0x2, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x17}, {[@end, @lsrr={0x83, 0x1b, 0xfb, [@loopback, @loopback, @multicast2, @multicast1, @private=0xa010102, @loopback]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'macvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b00)={0x1e8, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0xc810}, 0x4000001) 963.283425ms ago: executing program 5 (id=3919): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = socket$inet(0x2, 0xa, 0xd3) getpeername$l2tp(r5, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000003500)=[{&(0x7f0000001440)="34325a3ec95335e231", 0x9}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456391cffdef93e29f10f4a11f0cfbfc0ff976b20fef6033495b9b94777db9bb9b678ffc1130000009faa798226a080c01e47151268a02dc1a557cfdcf76305fbf6643df66b1b4d2d5e7bf698fc5a18d984ecb91e6683a5f522d536e2f3c43b89823659d1945258fc668950e5aacfffffffffffffff7f7a266c90e64efc8d8f730867202a9ee94e6a00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x503, 0x70bd28, 0x100000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x40}}, 0x0) 714.848017ms ago: executing program 2 (id=3920): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x8}, 0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10000, 0x3cf, 0x9, 0x0, r0, 0x7fff, '\x00', 0x0, r1, 0x1, 0x5, 0x4, 0xa}, 0x50) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r3, &(0x7f0000000100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = accept4$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000200)=0x1c, 0x800) setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f0000000240)=0x9, 0x4) socket$alg(0x26, 0x5, 0x0) r7 = accept4$inet(r3, 0x0, &(0x7f0000000280), 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000400)={'bond_slave_0\x00', 0x2000}) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) getsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) pwrite64(r4, &(0x7f0000000500)="00fa22cebb724431ac65658aa2eaedbb26a4dbe788e6a73768c401751b44eeadd79ccff1f85d555e091c994934e5be77513045f50f48bb84d5e61f5865797c4aa941e2a6c527b2c11a0a4019e945fabb71749c85c38e704f8da6f3dbf9d16800a7a28ca0b387941e91b92d5acaea234176d108674203fd3738ed3b7185dd0a02fd261f17ff5254e156333f90a5e2ba0fa8fa7b0b38a54a074990bbe39a4d3de2fceb4ea93db43da8c2825bd2a762a5a09f428ea5faf985d23f2f1b4043d6dcc97ab61548613f7b234b8cdf56c7f802be5207765098bab10a98aede395e478de9038e3b7949fc8da456ae6cabf90912173e256ab4ad", 0xf5, 0xffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x2d, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x7, 0x0, 0x4, 0x4, 0x1, 0xffffffffffffffc0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, @map_idx={0x18, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xcc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='syzkaller\x00', 0x2, 0xa8, &(0x7f00000008c0)=""/168, 0x41000, 0x70, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000980)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x2, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a00)=[r0, r0, r9, 0xffffffffffffffff], &(0x7f0000000a40)=[{0x5, 0x1, 0x7, 0x7}, {0x5, 0x5, 0xd, 0x4}, {0x1, 0x2, 0x1, 0xa}, {0x3, 0x3, 0x3, 0x5}, {0x2, 0x1, 0x7, 0x2}, {0x0, 0x4, 0x10, 0xc}, {0x4, 0x5, 0xf, 0x5}], 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f00000006c0)='sched_kthread_stop_ret\x00', r11, 0x0, 0x200}, 0x18) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000bc0)={0x62, 0xc, 0x1, 0xf, 0x0, [@dev={0xfe, 0x80, '\x00', 0x15}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @remote]}, 0x68) bind$inet(r9, &(0x7f0000000c40)={0x2, 0x4e20, @empty}, 0x10) write$nci(r9, &(0x7f0000000c80)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x5, {0x3, 0xfa, 0x0, 0xaf, 0x8, 0x8001}}, 0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001dc0)={0x9, 0x0}, 0x8) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000001e00)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xbfa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xab}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4e74b2e1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x6}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @generic={0x1, 0xb, 0x2, 0x6, 0x40}], &(0x7f0000001f00)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x3, '\x00', r10, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001f40)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001f80)={0x4, 0x9, 0x8e, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002100)={{r0, 0xffffffffffffffff}, &(0x7f0000002080), &(0x7f00000020c0)=r9}, 0x20) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r8, r1, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x8, 0x15, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000d80)='GPL\x00', 0xffffffff, 0x1000, &(0x7f0000000dc0)=""/4096, 0x40f00, 0x5b, '\x00', r8, @fallback=0x1a, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, r13, 0x0, &(0x7f00000021c0)=[r14, r15, r2, r9], 0x0, 0x10, 0x5}, 0x94) sendmsg$kcm(r9, &(0x7f0000003980)={0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000022c0)="728bc598ffd9b6e00b91f7836784a82fcd76f5283f9581bd3ef00f111afdcbfa9089a1d533ca349fb32d6538f4956bf85324aca4ece74a19869378eb626351e1be802f3d0b4f4819b029a66eb5d3e6b8345a4c9aa9a3cb62cecf0122", 0x5c}, {&(0x7f0000002340)="833a83db8daa9450ebf3de052799b32bed9ade674b41f3e59e9711049313889213e1588df76ae074ccd838a6e78b464ed5acb562eca61fd87f911507378b022cf547bbbad57393c3053f186c0edf5dfdddd271db2f4c2002e49f5f0610665636a5ed068fa0f2040749df4ac5e5a7f8fdafb893f6ae20c97457ae521fd9161a779bc7190960df9f078e79d3d313de2606db64", 0x92}, {&(0x7f0000002400)="38e73d6b42799147bfca0c352d017fe729cc1180e7d47b1143bdba0d8bdf526045d29e6ffbf83d8ed12450786609bde4bce550f939e0c0d26708f6aa5cda79d91884252c2568124916a6e91dae8400a80e9441792ea572aa0e1e1db227a6c924da8abce91d019a36dc0a7d5a6d5cfb0990dd7513296a2ba040b8bee086285d48503dee19cad0d110ffdd69194322e5fe2fff1b3118ebb6a1cc38b8413a82706908371a5c769b5ec7c6f75d6d4ce820c151180278ee46d9c17c610c7fb80bafaec67d682019699af129cf82da989fbbf639577c723ab3c28e0ce3a4795764c7418c0dabdb637c1f71e899d11c0d7c680209491acc15b94aae7c813c22afe568250edfc5c58e26447931be6b7a3bf3c83a97dc6db3497c4bd55e352b53404139c7c79a55419ddb2541943d8bf6e576cad3dc780ea5ae9956612b4f8fe824e0d6c433de88bbb254f5cbdc3aca5f199fd97735baca55a21c562089e9f18378ca9003f4b0165bf3f14302ec777b903ded3fc8fd906bc77a148501bb84394ad162853b9f119ab303387c469e0cb24e6927fd911385dda1473008c6a56ad5bc3defc7d1e67918a2c591d619041d1977c26abf7cb95151ca851c09149badaf91c89983ca641c7ad048f06837da0ee5460393995a4316695bff1f9033a555bc1db8ffeafdea1ff613843f47d5179ef786d2e55c312200d983140963abb7366e7ed170690e22e2c8abe11df0d5b0a87784de6abbdcb8d2e504defb3524d62f9c3dec1623145b99c00c124f8db22b94da185acfe22ccccfe4348b63c1cd3991ed4489dc24ea9c50cfbdf8ce736c7ba2ea56012d41b5643a6c028f8567d4f2e2162fe61524115f72260dce336415eb961e1e85f8b2bacf0531fd306f0287c0a7840770904d859b9bff66bfb8a356260bfc9f548e464120f00ad494c40be34e95b70f29e301161538b1020a59791f6c8f8783413e98d66628f34747383ce53722d0411e8b8e9a07753a6ecc1f53e61e18071cedc3a214a7d930a43b7391a8ef99ef6b6e60dce9983130332cd02f90100e6eff409efe1afd06510ffe3ae0140ed0e03108434f65693d5d4f1e72d12aa214a4bb67f231ba26245ab7f1badf6c37bd282f908e18815a20f3fe6e78ec5ff3590935dca70c5d6cd70cfbc0d4de9995d00e327d21106e3977ab48b0abd4aa660aadfbc1f2df2d33b71ce577427cefedb8c59a3c6a524f952900fb28d4ff98925d5d5122ae4fbcedcc256f8a1a09c24a16e95e60bebf79542447ced956b096c54c9d6a7d3a632afdaa41ae001519cea6b5f320802a53791fa9abbc288a8fe71d18f4d1ae025a36d0e08e541f607a03085e12004ed1418c867c84e7388b3b285cb2b30d2e5e538b2a723cb58351210e6a5862d87f73fe4225428d34dcb7b92fb5a2e858926cf1f06f75d277643496d4fae6cbacef076fe59316a816a0d553e5322748a29cc8bf09b6ba07e26c28866cd752a66c54eabc96d7a1f5a2a85af1ba7b1c032bc329e85c98c37cf21dffac92b4b077c235c7a5f77c63eb903a07aaf5388d56e018d953336f13fabf5214578be1d4887e6c2a000110fc63fe0367182d98643ca304f7470a227a2edef65ef8d6c72f9b496745c3ab56add838bf17cc3557252e432e43ea8c493959d2319b23e928b3902646a124007acd68397d74819571910cf54ec1dfb7b48cab3b42905e81ca3347dbe6d313b9a9f7ed5c8883756599277d98f8008b1092b77ab4563b12fbcfe1ba249e7ce3ef272ad9fb6d26a8481a66f7b767c5b41f32301721f8e89a07c46db1113c948307292178dcd1dd540363826a0cea88ddd60d875def4edcbb8b080268662d2a62c67ef029d302c00ea584de6f9430f6fe646f084531163a03e1536a87728b9f13808dc8f7a8c34d8fbda023b0b76034e1a3fdcd72eaca1b1cb8c518bf5f23673ebc70cc631932233efaa0868fef709de527266ab454b8e2d450eac094cd311d79a22b15799c57e3bdeb30d16578f174a3308262a8980c9db162066557ab653fb12403f582097e054689f4d5ae521825cf58b897b2df7cfa636f4d362b4860a01175e1b487d40f4228f1df27856a8936900185cf6777779146c07b8386de56b77ae035d986530a06d2d8476c4b375e02a6e19968d9da1187f44efd0e8777e1bb3fd4c8deec40ab88d0b720b93e601396ca54e7b776973c4be15d627682b8dd2b146352916e967a8905173ebc0f97c481b68d39bba6ac2424ce78fde7b7ee072e3924a7fd3c22e8cf69b8843bc31adf7d9083f660405bdc592289a36ccf9fbed01975b9a5e413bf1e014edf0dba5b28e370f57778afcf41b890164c46f3e4da2d34bdc81c0d5dafaa9c506ceeeb57f619791166a708969b0375729ca7949a3f966b1f936df2e3a0b792e9ef5d457085b8722137feb5d41dd591285e7d541a7c1927df551b95b5469427fbd489da3040a8ab33ef10927d330718ef207b70edb04de1e6af5e07268f44c79de5aac7b4214144c3198eacb7ef2df0fa8bd89392d8830221ae01a1564e921c65e00a04d539c173f36074192fd0090a9aeb689424342750734bd514fe1bb2b17b84df0e7ab8683ca71bcc46c5d18d85d5f9f8e0ad14a870ddb812b714d3cd6ce9dff49e1fb3bc4e6b54be1e350a83d62e25354cffae6285b9a46e3d1139305d860b0d78ba279ca626fc179433f07baa0a504874e8858aa9efe6a14bb28f505e15f5bbda23dbd991a4c50e4d2397b28bf0baf46177f7099a07da5d4fcbe42ac016954c5ff4cf213968ed0657bdffbc6f5802aebc69d7c475e2ee9a17e7f85ccf32aeee6dc5b862414d490a704e981be512bb68570b4db94bd74969ade960f0f348c186f36161537d634858f714c341a6cd033d562cf4d26647b89b972abd36b7e4cf3a2aacb7a7dcbbb960e01d51b102699c0b5264764a3654a8e8482971f8faeac271d21e5bc429d542b24d8b9062722cff0bbd653232487180a12050cca465cd42442f3fafbb890a4592ecc89bc71b6af7666c80daf390164941fecabedb3bf7e86396609679b66d701b067a5d1b8dbffc8dc656e63c00f9b86bad0ebdf592e8c760e0396a3b18e2aa8c4d70d75ec95bfdacaae25214fe38a1013035f3016b0f2b7e0f40f5878d90681ab92c2506b4638265eb1dc5e896f30ed11a17db000b4f66bd09e44c48b9ed5b9d6a59a088721b79a2d247f2ec1f096957671ff9356b5200a6bf4d25c7cab17e510049edd66290f0552032f8cd7311d13b3b97cb562b962a49addbe566f49d466e70b5ff4f5e15622454a7c5de8631d64f1627b278add6f3763b930d227d26653b667b318ae81b65325e836b3caad8344ad9ddd0570058d7c6c0dea776f662ff2d59107ebc9ef1a5d5d608c2b2dd370be6e83a5bb82dfb74fb3ca5424de7f18a6371cfd4c876275f7c88ca88e6ec01438419222c0e96129f0b077ebf22e41bc5fe307f9c42ca8ce1a70ef5e1db18d1f562a0203e4348a8509ccc5e9ea07f53f7c0373ab9ca309145777ebea27a4031ffa52cf25d828cbf71fb2013ba6c0f930aa2040a92850b5b98dba58f6ff6389f8ea650f9aafe9d67d754c5ad218491e518b67bfed284252646611eb757c0cfa50fcd1ce474adecf8dc4f4aef543236601829f83a543aaf2d45e7b2859f5b49e2385e556812cf810d04cfe90d0a072cd03c479dae42978b683e4a81894c58f9c7901225c66c25d2aaa15894bfd6e9a0f3302b5e9d1e772403952df3b4b10ebdaffe9757164636a16e2bd0828eaf9e6e9698eb043aec5d22c907c760b2ef79a28fdad38ce3c8cfb33898329be38eb1bc2fb49010aa849e3a951e5c713ab1089465bde64ffc23010f0cd011e7beb16ae55e63e12b3ce859ad3f0fbc1ca6512eb7c994f68bf516f4c118f5dbd8143759e7b14c051f890deb42894c38510650ba66c7feb7b1c100256ed2bb781410ca88d9e22cdc17275873599b14813618c11fbd32e748ec6eff3d9450a456a2133ee45037bfc8fa42ea28116f5ec86d10d8ea2544323240d43b5f8916ea4fcbfece5849a480a2b7f5f185ebfbafd617dcfa29119528a36696e4aeea8b0ffe98a75117097718905c129dcfb5c3ffc28b8d8d49fb722f6cc229f4490d4f4c4308d91ba5ab041d6e4d5766a44c03928077476d36d044e5ae13b7b299331640435a6ed56da008ca404fbd6db1eb186bf6b50720398af07a8d6de00184f7115cde3a19b0a86a949216f6ceb9c2f2b5e2a719a9718ea1f1454c1b86f51655223b4b625ef43820422c06c560be8c1b21947da660fb245b2b3666284c97a4fde19454b7102934d62bc62f374d04cbb1507aca6ef5ebe359ce45cdfd556ba01ca937e0dfd4b84173b5f31e83a5382fcedac82314458e7f164fddebba57c576e7836a7edb277ce77e30e7373cd35a46bb21f190de3bf506f8d74bd09c62f48fecc34f748438618b0f294ca3a2391b09d431ed2eb6ef6720bc18453574d0c089c7911249b2dfc0c3aa139b27a61764a3775336fec8a7356487e46272d66027e7b150d27c8d814e99060c8c835d554f3d027261c2cda6c6ce34301bef07bce3405b8d7100b68cf0c12dba1cd82b8c5726888c3f4f92eb276e57682cea2d3c045a301e856436c948df2539dd498608e417e05de99cfe52d897c8fa16b9e98d2f71c4b3532f613412b85410bb4610acebd23a1b3e068e6818be999312152c5b4f14d7826161881f5fd141bcaf7009e5af18e02c6653873103700a08ab7e13999afa48c3b6a1384c9e76316355fd75c842070034bbbc842ce1e2ae7ce799f93cf9c918779a05a0a9c4cee925b463f7f4d64d2a0144858d45581fbef6713911a276b05a78878f41f5d4b8577be03f775ef8d1f926597f5a8acae507dd45dcfce277edba61a202fd97007e0907861a68c8e512e26126e95987ab5f2f2faff31a410439c91271f9691ebdd0464dc07701a48b98035a4ffc8d43d6ec335c26df021fd56575d4cf4728ae90d37274d67a4293e1505ec39efdaca4ff18240be8f00138a1182d20a1430ad3c0789f923a6577573e1b8a30a90836816e9ca9ce9d29271231e2e496fa78203f1183522ca908e4e51d42c9ba2a7a0af9ad01c28708cbf6fefc053b1c78c9b27c6a23b2370e71ded225b51bdc415c013370faa167c97d490c6d40e9958973cdae61b80e75ac1fe6fe07aa19924108fb8c8d1e9c2ef2b1b96295f2f761e2245a4687cbd4b114f4de4ad2458b239c9cd4cf74ea0835679b973cd5e05564a435a7d6724815ee1482af5628320fabf2813ef29df95655d7237c5c57d2d532d6aa22ba13ba897cd2522c354bd86ab74027e9d13e79e98c823447c22e532916a402dc4e0680ffce84cdf666c34cb9acd298ef5e1217b7d4e7adda697a93a031402b7efb3e0624b08e45465076a48a8ee26eead1a2f4a8ba8242225a989aa8fb305f9427439b57c5a7c8b57f39b96f23e58d6447ad68ec7e16d645e8404d604f1f614353d9d33b9fd08fd3db16dc6324b8761c8a13321ec8f1f8ff0e44ea696e0ca29014ecc40a5cadda2a35dfa75c279b17dce66cfb4b208ad87a3612df2d7af3ca285b5ecfda4c9ffc97697b751f5eb569565eb692d3802f288d79441a0841c4d4e87346a54d5d32dc64d944d5141120296189b921c5fd870ebea91f41a9aab1932b02c0861e0ab8cf1752aa81d31ab763f07bdad1b0fab5e4f4a2e6a551f147821cbd8996f5caccf993409427798396ff8da6340d5e45aa80af6d547dae5caed02ff0dc1c1f3eee5075bf7c5df4c71b99b32a5b6d35d4", 0x1000}, {&(0x7f0000003400)="4a8a40b6fc884c8ca7a1e841683184e6adf29cf4f8f8bea26a1376f87da4a9e88ae4af8d3f6b0e3bf51a1fddc2f9586926399e11fe4ccb05436bfdde2390d2c775f343fc0467c34adc03b3c4592e68503d29ce1a13774324ffb09592a885d4ec5c17c33d56a0bb56ed69bf27f4296ebd9778dc9a58f5fec3d65c2156e31795fa936eb691972768", 0x87}, {&(0x7f00000034c0)="68c9e2f10efab32e60f7499dc608586de70c17db7ce9d1192d6a9d84eed7c341c896711c6e0cc65338d3ebb3ac1fb9205db511bb7232ad45a2e3b53f12a97746ae82c5ee942ec6e771c9ed8e1c5291a792cb5c6563366920e98c1db83dd6ffef49fc73c75ad6d8a06429a0ddecc2cde93271f7616badcc91518fca723d54c7e4e4", 0x81}, {&(0x7f0000003580)="cfded222f4f8f724711dcb218a74c49d794614011cb299fad40ca9eb13457c4b9a10abd79e5b", 0x26}], 0x6, &(0x7f0000003640)=[{0xf0, 0x0, 0x1c3c, "d0512acbc7434990ad6c69d6223e197ed2de735294ecd1ab6e469b50c2e8d8d1ca4a720c6b679a075a39713b53261586e722e305030455553e3eca6f57fee5d82bb9b938519ca998c12772eb70116fd2db4a0d43f2faf2a031bbdaf01c3e9d98ce03ec2edaf41d7744baf206b1c978755506b561d444be8ce9214a97a41ea681b3c7b5db077e88fba9540d52dbae226400981f95705f0a1a2eb2ed7c0d73e0f0b28ec1768f9837f5effe39ca3d7a3f35fbac471ac68f20b54784818603f619490edb3309ef8354083c2ac679be574e656c472e63b92e9895de"}, {0x78, 0x104, 0x8934, "165441be31b9da3c7aa04998887b40b74958f0fcfb08652885fa0931074a486a2c10e315e6933e42afa1ebebddf522b17e655015f021ad7fd07a5a2b00f936d51314a0ca81feb584ccc9c20815767fde9285fee359c638d5a3c552311ffa1e2432"}, {0x10, 0x10d, 0xa87}, {0x78, 0x0, 0x3, "64546bd6430e5820f6adb7f960232a2e450db7ab4647112e8a89af1fc98fde62c98db5ccf6c20c4e3e03e580138f082e1dfb40d9a8c578b1649fdfdfc1ea08e64a65b4fc27000556f2c8d4fc20c0e82f3cd3d73a5054cacefd7f440dcb7a239c56"}, {0x108, 0x102, 0x3, "8d4c572eed35c18753c210e00919f89df92603f9311aab59d7da00dd1b5acd321be15a354161745bccd3d6392d73baa4f49bd9c3c89858866e876b8ab3bc204ad3d4a9c95126d8f6f4d4347bdc23724ec2b32590d17913293fa5da079b868c20f3c344a177c79fcb49cb1bc14ad7b219109600d23766c49715bf6292230fd099f3049dd631049dad9d6d07f018f7890a5919506a6d4801434c02c54e47f425281c797ae2274a4a95a344f1a11cfe94b1e6130617d7021e52b278c892e4e99005e205785074d8affbc511a49342234b82e70614f526fa93e017155bfc600652ac5b19551c40ff096bf3ff4992fa8fd710dd27cc"}, {0x40, 0x111, 0x44362cdd, "ec14ccfdb088e06f639b9442d871fb98acf2d9e2b4ea9d8fd14b0c895e274b78a74968f9c93a41ca37e51a0c"}], 0x338}, 0x20000000) listen(r4, 0x784) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000039c0), 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000003a00)={0x1}, 0x4) 612.25668ms ago: executing program 5 (id=3921): r0 = socket$can_j1939(0x1d, 0x2, 0x7) accept(r0, &(0x7f0000000540)=@caif=@dbg, &(0x7f0000000640)=0x80) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) socketpair(0x2c, 0x80a, 0x8001, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0x2, 0x1}, 0x6) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_GET_PARAMS(r10, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '#'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2d}]}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r6, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000016000000000000000800000091116a000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) write$nci(r6, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0000004000000100000000000000ffffac1414aa00"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40003009078001c0e0300050207ffffff000000000002d58838068b91000000"], 0x4e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a3100000000080003400000000008000180000000003800028008000340000000000800018000000000080003400000000008000340000000000900020073797a300000000008000340000000002c00028008000340000000000900020073"], 0x17d4}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) 601.216844ms ago: executing program 1 (id=3922): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', r0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xffff, 0xffe4}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x200000, 0x5, 0x4, 0x1, 0xa, 0xa, 0x800}}}}]}, 0x58}}, 0x4008000) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000005000000080000004000000042", @ANYBLOB="0000000000000000000000000000000000000000422dd0a94222e825ddf6958b0ec103e292fea528ca203d5126f43632fa29aa05432b9598ad5a907bbb432c4f4af907be4c4451a8ef68cfee4bffb3d5a4b79f662d1b8819e5d3bbeae6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r10 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r10, 0xdd6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x46, 0x0, 0x1}, 0x28) 492.53739ms ago: executing program 2 (id=3923): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000003c80)=@deltfilter={0x27e8, 0x2d, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffe0, 0x3}, {0xb, 0x16}, {0xc, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x214c, 0x2, [@TCA_BASIC_ACT={0x14c4, 0x3, [@m_connmark={0x1ac, 0x3, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x731d, 0x4, 0xffffffff, 0xfb}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x6, 0x10000000, 0x5, 0xb}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff7aee, 0x9, 0x1, 0x6, 0x401}, 0x2531}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9667a8ec, 0x7, 0x5, 0x1, 0x1}, 0x2c2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x102, 0x4, 0x7, 0x3}, 0x900}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x6, 0x6, 0x6}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000001, 0x7, 0x20000000, 0x45, 0x6}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x5, 0x6, 0x9}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x4, 0x80, 0x13}, 0xc0}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x0, 0x1, 0x1, 0x2}, 0x3}}]}, {0x62, 0x6, "82937d6d9575ad88449060a1c867f49e8ac76304a04926fff65595ea2c7879988938aa46134378de7c7cbebe17bbca1c379ae5465d9439d1f05edec2d74eb887b15da62a257c6cd06b89ee339d2b135713ebf2b192c7c13ecd60638ecdcb"}, {0xc, 0x7, {0x0, 0xe978008685802491}}, {0xc, 0x8, {0x3}}}}, @m_nat={0x140, 0x1e, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7, 0x1, 0xd, 0x1}, @rand_addr=0x64010101, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7, 0x2, 0x80000000, 0x401}, @remote, @dev={0xac, 0x14, 0x14, 0x43}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xa, 0x7, 0x0, 0x1ff}, @empty, @dev={0xac, 0x14, 0x14, 0x34}, 0xffffffff}}]}, {0x9f, 0x6, "b0a68d94ff85c72d9c256e9c378338d7e9b8fd87550913692c4f2cbb9a81f3cd216d595f041a0cd5d33178a1aa18047b0061b95c4d76c546d310b4950205e792f6e02f1d5f17e1f8747ad46606a3b32592894764022d703f1b21410ec23e1ec2e26ae843e457c7dfe2f32b98069f1667ed2ace05c2ad8ca7cecba1685dfa41f3fcf1df5bc323d40225a13f60fe5d7394855e3629ec88fc55d8257d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_nat={0x107c, 0x18, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x401, 0x7, 0xa35c, 0x5}, @empty, @multicast1, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x5, 0x5, 0x7f, 0x80}, @multicast1, @rand_addr=0x64010102, 0xffffffff, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x128, 0x17, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5529, 0xffffffffffffffff, 0x9, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000000, 0x1}}]}, {0xd7, 0x6, "7605f22f775c7987496e316e4159183598eb469ffdb4a0ce357fa79871e787ac84d37ddc6de19460262271b324724b4a01131c584be34c6f9b404519b2bf71ef296c2b5357afbe280a03ccdaee0d66fa9118085484a4c2f827aaee82c2f0483bf04c70202ad1f63806aedba812da26cdfcae531ed14c15157081fccb9b6406cd947beead727521ef350c31927fe43897be51d63d5eb52d54a97ae3e96863d727054c6019de9c60971b925aaba87ca7613d752dadebfc9862144344cdafdbc8bd6e052fe71d8be090107b9073e062158bbe5697"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_mpls={0x30, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x93b56999fe52d840, 0x1}}}}]}, @TCA_BASIC_POLICE={0x410, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x8, 0x5, 0x90, 0x25, 0x1, 0x97d9, 0x1c0, 0x7, 0x0, 0x8, 0x40, 0x78b43571, 0x8, 0xfffffff0, 0xffff, 0x6, 0x0, 0x800, 0x7f, 0x2, 0x3, 0xcca, 0x2, 0x4, 0x4, 0x6, 0x81, 0x4, 0x2, 0xf76, 0x7, 0x4, 0x8, 0x9, 0x0, 0x1, 0xfffffffd, 0x0, 0x800, 0x1, 0x8, 0x6, 0x10, 0x40, 0x9, 0x8, 0x0, 0x480, 0x4106, 0x8, 0xb5e4, 0x9, 0x9, 0x1, 0x8, 0x0, 0x5, 0xfffffff9, 0x8, 0x4, 0x3, 0x6, 0x6, 0x401, 0xffffffff, 0x4, 0x6, 0x10001, 0x101, 0x4f6, 0xc, 0x9ee, 0x0, 0xffff0001, 0x14a, 0x9, 0x3, 0x2, 0x9, 0x2, 0xd5, 0x8, 0x10000, 0x7f, 0x3, 0xffff, 0x40, 0x3, 0x3, 0x40000000, 0x8, 0x1, 0x1000, 0xe9, 0x4, 0x3, 0x5, 0xfffffbff, 0x1, 0x1ff, 0x7, 0x10001, 0x20000000, 0x74, 0x9, 0xffff, 0xc0, 0x800, 0x7, 0x14, 0xc, 0x4, 0x5, 0xffffffff, 0xb, 0x8b, 0x8, 0x18, 0x9, 0x0, 0xa, 0x4, 0xfffffffa, 0x100, 0xfffffff7, 0xfffffff9, 0x3, 0x1, 0x46d, 0x6, 0x5, 0x10000, 0x3, 0x10, 0x2, 0xffff, 0x10, 0x5, 0x2, 0x4, 0x1c, 0x362, 0xa66, 0x9, 0x0, 0x1000, 0x5, 0xffffffc0, 0x100, 0x7, 0x5, 0x9, 0x800, 0x7, 0xc49, 0x6, 0xfffffff5, 0xfff, 0x4, 0x40, 0xfffc0000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x2, 0x3, 0x0, 0xc5, 0x3f4, 0x401, 0xfff, 0x6, 0xaf7, 0x400, 0x4502dfee, 0x5b, 0x3, 0x9, 0x80000000, 0x6, 0xfc6, 0x6f, 0xa3000000, 0x1d847e1f, 0xfffffffb, 0x40, 0x2, 0x0, 0x5, 0x7, 0x2, 0x4dd, 0x80000001, 0x10001, 0x603e, 0x3, 0x0, 0x3, 0x54, 0x5, 0xb, 0xf, 0x7, 0x7fffffff, 0xe7, 0xfff, 0x10000, 0x2, 0x7, 0xfff, 0x8001, 0x8001, 0xb, 0xb, 0xf000, 0x0, 0x3, 0x8, 0x6b9f, 0x4, 0x9eb6, 0x4, 0x4d, 0x48, 0x0, 0x800, 0x3, 0x2, 0x9, 0x1, 0x9, 0x80000000, 0x5fce, 0x3, 0x3, 0xfffffff7, 0x2, 0x5, 0x1, 0xffffff38, 0xb6b, 0x7f, 0x1, 0x8, 0x1, 0x3, 0x3, 0xe9c, 0x6, 0xfffff058, 0x2, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BASIC_POLICE={0x4c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0xb, 0x6, 0x2, {0x3, 0x1, 0x0, 0x6, 0x5, 0x5}, {0xc3, 0x2, 0x7fff, 0x7, 0x0, 0x1}, 0xfffffffa, 0x5, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_BASIC_EMATCHES={0x124, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf88}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_META={0x30, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="31c268f2c7f4ae1a30", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x2, 0x1}, {0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x6}, {0x1, 0x0, 0xf, 0x80000000}}}, @TCF_EM_CONTAINER={0xa8, 0x2, 0x0, 0x0, {{0x5, 0x0, 0xeb}, "b45861f150c57edf8e60ac4d716b57dfa563ed4e2a0b340b3c4accf791d6a50052cb7df1fd4903c1b4833603155a141671af5515b6e99e15d0b035779bd678d8824b5c3e3b0a6d748abc6e919d7f71b2bfe3097c1b4c8bf3fffcb8243f318d20ee2683b87f736bb71c3b618b5f37378ae6264a1806be3c93f9d9160df06ebc62bbba04727743fa84c878f0759e48247e81161b71118f9c9973"}}]}]}, @TCA_BASIC_POLICE={0x414, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xff, 0x3, 0x5, 0x7, 0x4, 0x274, 0x7, 0x0, 0x4, 0x3, 0xfffffffb, 0x9, 0x3, 0x2, 0x2800000, 0x5, 0x726aaa4d, 0x7, 0x0, 0x8001, 0x80, 0x9, 0xecd3, 0x7, 0xc7, 0x8, 0x3, 0xcf7d, 0x874, 0x3, 0x9, 0x800, 0xfffffff7, 0x4bcd, 0xf, 0x711, 0x1, 0xd1a, 0x6, 0x2, 0x2, 0x4, 0xa8e, 0x3, 0x3ff, 0xedfc, 0x0, 0x2, 0x7, 0x2, 0x10, 0x4, 0x0, 0x80000000, 0x2, 0x7, 0xa, 0x986, 0x4b, 0x6, 0x6, 0x7ff, 0x6, 0x5, 0x1059, 0x7c2a, 0x2, 0xc76, 0x3, 0xc, 0xac0e, 0x0, 0x7, 0x0, 0x4, 0x2bc, 0x8, 0x3, 0x4, 0x10, 0x6, 0x5, 0x6, 0x401, 0x2, 0x1, 0xb601, 0xffff, 0x40, 0x9, 0x0, 0x7, 0x0, 0x43, 0x6, 0x8, 0x7f, 0xfffffe52, 0x5, 0x562e9bf0, 0xffff7fff, 0x4, 0x921, 0xffff692f, 0x2, 0x3, 0x7f, 0x3, 0x3, 0x7, 0x7, 0x7ff, 0x61, 0x1, 0x2f11da08, 0xffffffff, 0x6, 0x7, 0x8, 0x4, 0x5, 0xffff1c83, 0x7, 0x4, 0x0, 0x1, 0x8, 0x80000001, 0x7f, 0x8, 0x1fffe, 0xcb00, 0xf3, 0x4, 0x80000000, 0x4, 0x2, 0x2, 0xd1, 0x0, 0xcce5, 0x9, 0x4, 0x1, 0x8, 0x4, 0x10, 0x2, 0x8, 0x800, 0x4, 0x9, 0x7fff, 0xf6c9, 0x7fff, 0x42a, 0x7, 0x40, 0xfffffffb, 0xffff9941, 0x6, 0xffff54c7, 0x8, 0x0, 0x9, 0xc, 0x2, 0x7, 0x1000000, 0x7, 0x2932, 0x0, 0x7, 0x5, 0x5, 0x9, 0x3800000, 0x2860, 0x88, 0x125c, 0x6, 0xcd4, 0x7fffffff, 0xe623, 0x0, 0xef73, 0x2, 0x7, 0x31ab, 0x9, 0x4, 0x10000, 0x8, 0x1, 0x7, 0x2, 0x0, 0x81, 0x8, 0x50, 0x8, 0x3, 0x1, 0x2, 0x8, 0x2, 0x6, 0x9, 0x7, 0x5, 0x6, 0x6, 0xca4, 0x2, 0x73, 0xc60, 0x101, 0x8, 0x200, 0x3, 0x0, 0xc77, 0x5129cf97, 0x81, 0x3, 0x4, 0x5, 0xa, 0xf239, 0x2, 0xeb3, 0x2, 0xe, 0x6, 0x7, 0x9, 0x2, 0xfffffffa, 0x8, 0x3, 0x0, 0x4c, 0xe81, 0x7, 0x1ff, 0x1, 0x401, 0x5, 0x1, 0x5, 0x101, 0x0, 0x5, 0x3, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_BASIC_EMATCHES={0x2f0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x1764}, {0x6, 0x7, 0x7, 0x2, 0x2, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x214, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x80, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x7594}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x40, 0x5, "182e491def1d1308320d81809ad349681ff203e732a408553f115db366b02be21a9c8675e07d1a1e795dd9f009f06f9985b8320df591f8d79adceb46"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xf, 0x2, 0x3}, {0x9, 0x1, 0x1, "da"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x4}, {{0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xec, 0x3, 0x0, 0x0, {{0x3, 0x0, 0xbf}, "98cfb5b7e83f55d1d70e31cf3cfb1b6b0ec0d9923257b586de4ac5f2dae3c6c1d50e60eaff553da491542143e76f6dad1814fc706d6ac9f095f6be8cdc33d8a1fef905f3dc8be3b0c31df084339a1870795d568a4b3fd283d5c500c8308b5f9b306b77ec8ded6c893b9d864d4e748f36f67fd141671837cadf64d77066e4789362ae5690171c95e2f77120ce6ff6fd870a2881fff97a1bf57dc52acb2692087ea13814dfde74d911b9698deaca14094b67ea285498d4250730f30633358956cd2c33c0b2f7b09f5e8a0b544776400ca4b88c50a8e9276d290a8789ea294d"}}, @TCF_EM_CONTAINER={0x7c, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x2}, "bc9488a6ff34463e1271586286aad0f30f60c4e0fbe5d7fa584c91c2fdd29e6efde8b425f99d91bea589597d787973d0516fa19e8a065978960a93430ec998f27af0c59460695c22a9d122818d74f54fb1156af3b3be227f8f93e02dd90f8aac2da62e2374e003e6f380c34ba226"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x5}, {0x3, 0x4, 0xdba, 0x4, 0x7, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xe, 0x8, 0x7}, {0xffffffffffffffff, 0x6, 0x6}}}, @TCF_EM_META={0x54, 0x3, 0x0, 0x0, {{0x74c5, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x1, 0x2}, {0xd, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xef, 0x2}, {0x5, 0x6, 0x3}}}, @TCA_EM_META_LVALUE={0x2f, 0x2, [@TCF_META_TYPE_VAR="0150f3595599b36a73", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="62cf", @TCF_META_TYPE_VAR='r', @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="2f7bdfb6b1e6e9eba1", @TCF_META_TYPE_VAR="e79baadbc0dbff0b0d19", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8, 0x7, 0x7}, {{0x4, 0x1, 0x1}, {0x3, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x3}, {0x4, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x33ec}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x664, 0x2, [@TCA_U32_ACT={0x650, 0x7, [@m_gact={0x1bc, 0x1d, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x46, 0x6e, 0x2, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1d15, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xe09, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb5, 0x59, 0x7, 0xf, 0x269}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc69, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x101, 0xffffffff, 0xcfa12777b7f23456, 0x1000, 0xfff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x4a, 0x2, 0x4, 0x3ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xd, 0x5, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x6, 0x1, 0x3}}]}, {0xdc, 0x6, "901e5593650d3895172c295e09f577d77b2402f0c086a7c7d95d666a2796087780f9585c357ca3e3d9e074f1391db7371d5c35e7c855e31448e7e485db7eac81d1d4f66dd114a71179ae1a37d241e083365199b90d7af6a78c76d5dda2440f943c69e27cfcd7b92ed4de961a8896e0637ac78c72f64d946eba504a7de7118a6e62ddc9cab8ad79cd6ab0cc40bd40ca78276792cea9bd4a5a539a91422995c98da0a67991ed92162059f3a878e97e30e148c3be56c4f79c57acabf78113db8935ced2f00d753ae0256daffad14a8bae9d26a291bb4d24ed12"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0xd8, 0x4, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xc, 0x5, 0xe, 0xffff15d2}, 0x1}}]}, {0x7e, 0x6, "4f306bda6b633006c0f007d2baec71731b6666fe64117cea1a2da6d4433c5cdbced8b34e8be18d3cb854e9079b27facbced6c3553881f72c2437917c3aeaa3752284703d633242cdc097725f1a994c286c012d9d2bb3cc2fc07e99c3b35005b4a98831c3aef087df7ebf2926ea1ac39905a9ca544d98dfe70943"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x134, 0xf, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xe, 0x5a7, 0x0, 0x4, 0xe5a}}]}, {0xf2, 0x6, "34e254bf309b4b28ad3ef5ebc2743380373eaa0e53e65c317acf2c2d12ad31b4d18e5a6c63915eac1bc1c15a946ff66c37dd5dd440918261c956159b1369c755230e19b4de3d686496175d05153bc12415836ddff282899f44c46ff4dce8f80e1c1e665beb0336393543dbe493580e3610b01e833f0bd4ab42c8fd73f0b915885a1e5ad21effeb5d070a4cbc10b314a2b6054374c2abc5d78638ffdf0b3703815a37a73ea9f8922a7f65d308be84c448613c26fea34897789cc353ea2dfc5aaf95b663ecc65cca28814c1912a0414e13f2f1b520bf9b31d0dc3d9ab01a69ef35ff9ae34c8eb3c9d1420c088a4b76"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x48, 0x20, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xffffff7f, 0x5, 0x6, 0x7fffffff, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x160, 0x0, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd44, 0x5, 0x2, 0x2, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x887}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xc60}]}, {0xfc, 0x6, "6e176e3bf1fbd4e25920914112f14e8f3c7f4f99bfb04c556d01e686520c4e6ce80733fd7a684e7d49296ecfc34e3451425d520205bbf8122bf5fc7e4e9d2ed0ba1d9c31df21930c89ebf5c252530ea6645dd2c224f4364818337f9d52892655c06606d793ce794967cd670fa036e4453215924420687f3794aea85f827244a05d304dfa59bf0b74c6308f28179108e3e6ebb7453c1f47381cb1ab01ae63a86b6f31af346d9bbffbc891fb0ae2fa55d8073578b494572dc67bc8b8799e763e66f274b493b09937cdf547b737bb20e82cf1e7079d6897ddc4278d508619e2915dedfce53227e78bebad3b89881668b2b26fd50befad787afa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_tunnel_key={0xdc, 0x5, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010102}]}, {0x91, 0x6, "de1fdc379478962c2670527248c2869042437143e8e2399dcd01f3ecc4970f04589f4cabb4f674e9d65c728f935c93c4bc21f58661ed261be3b148ae1d2fe7760f95a998015290bd91ee5a3c04fe756a542ebdee351f969ea3ee96b1f6bba06d615f4a2f3f2d4db4d020c6a4618c57db1f039fbccd7490c1c058724822a887e6a3ce1017e5a03a46e7f4fee806"}, {0xc}, {0xc}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x5}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0}}]}}]}, 0x27e8}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003c00), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003e00)={0x18, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000854}, 0x40000c0) (async) bind$bt_sco(r4, &(0x7f0000000400), 0x8) 404.532471ms ago: executing program 6 (id=3924): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x7ffffffe, 0x1e8, 0x0, 0x11, 0x148, 0x1d0, 0x0, 0x2c8, 0x2a8, 0x2a8, 0x2c8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000500)={0x0, 0xb1c9, 0x4, "d945c52c"}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xec4, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xeb0, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x9, 0x67fb, 0x7}, {0x100, 0x80000000, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x800}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x4, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x401}, {0xfffffff9, 0x6, 0xfffffffa, 0x7, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x400000, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x9, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0x1, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x0, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x400, 0x7}, {0x28000, 0xf, 0x9, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x80000000, 0x4, 0x70a, 0x8}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d5, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0xffffffff, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0xc4, 0x62182213, 0x8, 0x3, 0x8f4c}, {0x36b, 0xb6, 0xfffffffd, 0x5f60be42, 0x8, 0x9}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x6, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x9, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0x1, 0x3ff}, {0xfffffffe, 0x800, 0x1, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x8000, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x1, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x1ff, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x0, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x2, 0x39, 0x9d6, 0x5}, {0xf, 0xf, 0x1, 0x5c665eda, 0x9, 0x2}, {0x0, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0x2, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x1, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x800}, {0x8, 0xf, 0x7, 0x3, 0x8000, 0x400}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0x7, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0000, 0x2}, {0x401b, 0x9, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0xa}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x2, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x1, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x5, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x9, 0x30, 0x7, 0x7}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x6, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x6, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 270.365416ms ago: executing program 2 (id=3925): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0xb0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa010100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x0, 0x68}, 0x2c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002df800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) r12 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x4, 0x1, 0xff, 0x1, 0x0, 0xc}, &(0x7f0000000080)=0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xf, 0x3, 0xffffffffffffffff, 0x1, 0x7c2}, 0x40000002}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x240400c0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c891}, 0x4000814) 199.841947ms ago: executing program 6 (id=3926): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) unshare(0x400) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0x6, 0x6, @broadcast}, 0x14) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) (async) close(0x3) 24.868724ms ago: executing program 5 (id=3927): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x1}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000040000100fcff0700040000000100000004004880300001802c00108014000d80100090800c00588008007300", @ANYRES32=0x0, @ANYBLOB="14000800000093b0b9a0fab1946d000000000000080002"], 0x50}, 0x1, 0x0, 0x0, 0x4000805}, 0x2004c094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x80000) accept$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) 0s ago: executing program 5 (id=3928): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) kernel console output (not intermixed with test programs): 370.731099][T17042] veth1_vlan: entered promiscuous mode [ 370.782869][T17042] veth0_macvtap: entered promiscuous mode [ 370.796629][T17042] veth1_macvtap: entered promiscuous mode [ 370.833465][T17042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.852234][T17042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.875645][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.894028][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 370.896670][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.902077][ C0] lec:lec_tx_timeout: lec0 [ 370.915500][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 370.929035][ T7776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.943095][T17265] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 370.960914][ T7776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.052903][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.062363][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.126809][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.138468][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.147924][T17277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2849'. [ 371.255360][T17279] macvtap1: entered promiscuous mode [ 371.268561][T17279] bridge0: entered promiscuous mode [ 371.301377][T17279] macvtap1: entered allmulticast mode [ 371.328474][T17279] bridge0: entered allmulticast mode [ 371.350118][T17279] bridge0: port 1(macvtap1) entered blocking state [ 371.377578][T17279] bridge0: port 1(macvtap1) entered disabled state [ 371.465278][T17279] bridge0: left allmulticast mode [ 371.470345][T17279] bridge0: left promiscuous mode [ 371.550631][T17284] macvtap1: entered promiscuous mode [ 371.564480][T17284] bridge0: entered promiscuous mode [ 371.576268][T17284] macvtap1: entered allmulticast mode [ 371.581673][T17284] bridge0: entered allmulticast mode [ 371.616059][T17284] bridge0: port 1(macvtap1) entered blocking state [ 371.632990][T17284] bridge0: port 1(macvtap1) entered disabled state [ 371.690880][T17284] bridge0: left allmulticast mode [ 371.704506][T17284] bridge0: left promiscuous mode [ 371.820485][T17305] bond1: option primary_reselect: invalid value (6) [ 371.836808][T17305] bond1 (unregistering): Released all slaves [ 371.979001][T17312] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2857'. [ 372.008595][T17312] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2857'. [ 372.156771][T17300] lo speed is unknown, defaulting to 1000 [ 372.199565][T17300] lo speed is unknown, defaulting to 1000 [ 372.206911][T17320] syzkaller1: entered promiscuous mode [ 372.216458][T17320] syzkaller1: entered allmulticast mode [ 372.230433][T17300] wg1 speed is unknown, defaulting to 1000 [ 372.416636][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2862'. [ 372.454416][ T5844] Bluetooth: hci5: command tx timeout [ 372.706522][T17342] æÿîÿ: entered promiscuous mode [ 372.720573][T17344] sock: sock_set_timeout: `syz.4.2866' (pid 17344) tries to set negative timeout [ 373.559044][T17376] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2878'. [ 373.882135][T17385] tipc: Enabling of bearer rejected, failed to enable media [ 373.928859][T17384] lo speed is unknown, defaulting to 1000 [ 373.938947][T17384] lo speed is unknown, defaulting to 1000 [ 373.947518][T17384] wg1 speed is unknown, defaulting to 1000 [ 374.303316][T17409] netlink: 'syz.6.2888': attribute type 1 has an invalid length. [ 374.410252][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2885'. [ 374.473524][T17420] netlink: 'syz.2.2890': attribute type 10 has an invalid length. [ 374.537627][T17416] veth1: Caught tx_queue_len zero misconfig [ 374.635844][T17420] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.643673][T17420] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.666482][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.676671][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.685585][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.696436][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.704163][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.712567][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2892'. [ 374.714089][T17420] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.728611][T17420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.736152][T17420] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.743312][T17420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.761753][T17420] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 374.879296][T17423] lo speed is unknown, defaulting to 1000 [ 375.032690][T17423] lo speed is unknown, defaulting to 1000 [ 375.043394][T17423] wg1 speed is unknown, defaulting to 1000 [ 375.361682][T17423] chnl_net:caif_netlink_parms(): no params data found [ 375.590755][T17423] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.604034][T17423] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.615070][T17423] bridge_slave_0: entered allmulticast mode [ 375.627491][T17423] bridge_slave_0: entered promiscuous mode [ 375.682285][T17423] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.706891][T17423] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.723304][T17423] bridge_slave_1: entered allmulticast mode [ 375.740903][T17423] bridge_slave_1: entered promiscuous mode [ 375.815515][T17423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.863251][T17423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.924022][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 375.932120][ C0] lec:lec_tx_timeout: lec0 [ 375.937088][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 375.982050][T17423] team0: Port device team_slave_0 added [ 376.000996][T17423] team0: Port device team_slave_1 added [ 376.063366][T17491] netlink: 416 bytes leftover after parsing attributes in process `syz.2.2908'. [ 376.067762][T17423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.081012][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.081751][T17493] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2907'. [ 376.118591][T17423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.134107][T17489] batman_adv: batadv0: Removing interface: vlan0 [ 376.151032][T17423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.174655][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.204039][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2908'. [ 376.219473][T17423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.313390][T17423] hsr_slave_0: entered promiscuous mode [ 376.322428][T17423] hsr_slave_1: entered promiscuous mode [ 376.330508][T17423] debugfs: 'hsr0' already exists in 'hsr' [ 376.338117][T17423] Cannot create hsr debugfs directory [ 376.401829][T17510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2911'. [ 376.562599][T17423] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.624731][T17423] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.626702][T17523] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.2912'. [ 376.644583][T17523] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 376.689572][T17423] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.729447][T17423] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.774557][ T5850] Bluetooth: hci2: command tx timeout [ 377.245970][T17423] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.279333][T17423] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.322155][T17423] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.357679][T17423] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.375856][T17534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2916'. [ 377.485978][T17543] netlink: 87 bytes leftover after parsing attributes in process `syz.6.2918'. [ 377.524828][T17551] netlink: 'syz.1.2917': attribute type 1 has an invalid length. [ 377.624252][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 377.702131][T17551] bond6: entered promiscuous mode [ 377.705887][T17556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2917'. [ 377.708057][T17551] 8021q: adding VLAN 0 to HW filter on device bond6 [ 377.744597][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2920'. [ 377.806315][T17423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.868471][T17545] bond6: (slave bridge5): making interface the new active one [ 377.876709][T17545] bridge5: entered promiscuous mode [ 377.887780][T17545] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 377.953242][T17565] lo speed is unknown, defaulting to 1000 [ 377.978274][T17565] lo speed is unknown, defaulting to 1000 [ 378.007849][T17423] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.022099][T17579] netlink: 'syz.5.2922': attribute type 1 has an invalid length. [ 378.032420][T17565] wg1 speed is unknown, defaulting to 1000 [ 378.035328][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.045434][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.237082][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.244339][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.294765][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 378.317610][T17579] erspan0: entered promiscuous mode [ 378.425515][T17582] lo speed is unknown, defaulting to 1000 [ 378.462392][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.471847][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.493389][T17582] lo speed is unknown, defaulting to 1000 [ 378.622174][T17582] wg1 speed is unknown, defaulting to 1000 [ 378.700046][T17597] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.795655][T17588] lo speed is unknown, defaulting to 1000 [ 378.805650][T17596] lo speed is unknown, defaulting to 1000 [ 378.855500][ T5850] Bluetooth: hci2: command tx timeout [ 378.871711][T17588] lo speed is unknown, defaulting to 1000 [ 378.911875][T17596] lo speed is unknown, defaulting to 1000 [ 378.911875][T17588] wg1 speed is unknown, defaulting to 1000 [ 378.941534][T17596] wg1 speed is unknown, defaulting to 1000 [ 379.030376][T17423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.702710][T17628] lo speed is unknown, defaulting to 1000 [ 379.719347][T17628] lo speed is unknown, defaulting to 1000 [ 379.728267][T17628] wg1 speed is unknown, defaulting to 1000 [ 380.086031][T17423] veth0_vlan: entered promiscuous mode [ 380.143528][T17423] veth1_vlan: entered promiscuous mode [ 380.239772][T17423] veth0_macvtap: entered promiscuous mode [ 380.289703][T17423] veth1_macvtap: entered promiscuous mode [ 380.374405][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 380.511651][T17423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.551391][T17423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.585710][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.610222][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.630494][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.671312][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.868960][T12045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.891456][T12045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.936719][ T5850] Bluetooth: hci2: command tx timeout [ 380.944152][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 380.952207][ C0] lec:lec_tx_timeout: lec0 [ 380.956773][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 380.992457][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.005020][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.148421][T17689] __nla_validate_parse: 6 callbacks suppressed [ 381.148437][T17689] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2945'. [ 381.175473][T17691] netlink: 'syz.4.2889': attribute type 12 has an invalid length. [ 381.219006][T17693] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20000 [ 381.280736][T17691] sctp: [Deprecated]: syz.4.2889 (pid 17691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.280736][T17691] Use struct sctp_sack_info instead [ 381.447233][T17698] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 381.455998][T17698] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 381.463902][T17698] tipc: Resetting bearer [ 381.512226][T17700] syzkaller0: entered promiscuous mode [ 381.544188][T17700] syzkaller0: entered allmulticast mode [ 381.993290][T17733] syzkaller0: entered promiscuous mode [ 381.999742][T17733] syzkaller0: entered allmulticast mode [ 382.168398][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'. [ 382.177494][T17745] netlink: 'syz.1.2960': attribute type 30 has an invalid length. [ 382.196607][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.205091][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.215365][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.223646][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.269039][T17748] syzkaller1: entered promiscuous mode [ 382.275168][T17748] syzkaller1: entered allmulticast mode [ 382.425754][T17751] netlink: 584 bytes leftover after parsing attributes in process `syz.2.2961'. [ 382.481043][T17755] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2963'. [ 382.641358][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2962'. [ 382.647704][T17758] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.690028][T17756] 8021q: adding VLAN 0 to HW filter on device bond7 [ 382.733823][T17758] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.806104][T17758] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.998314][T17758] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.024412][ T5850] Bluetooth: hci2: command tx timeout [ 383.059631][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.070012][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.079166][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.088545][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.096646][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.181517][T17766] lo speed is unknown, defaulting to 1000 [ 383.206045][T17766] lo speed is unknown, defaulting to 1000 [ 383.213604][T17766] wg1 speed is unknown, defaulting to 1000 [ 383.288008][T12045] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.343599][ T1135] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.418901][ T4554] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.477664][T17778] netlink: 'syz.5.2971': attribute type 11 has an invalid length. [ 383.606344][T17788] Bluetooth: MGMT ver 1.23 [ 383.628332][ T5966] lo speed is unknown, defaulting to 1000 [ 383.650600][ T1079] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.653032][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2975'. [ 383.975072][T17766] chnl_net:caif_netlink_parms(): no params data found [ 384.305015][T17766] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.390671][T17766] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.398035][T17766] bridge_slave_0: entered allmulticast mode [ 384.407406][T17766] bridge_slave_0: entered promiscuous mode [ 384.449302][T17766] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.465462][T17766] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.472739][T17766] bridge_slave_1: entered allmulticast mode [ 384.484722][T17766] bridge_slave_1: entered promiscuous mode [ 384.502742][T17819] lo speed is unknown, defaulting to 1000 [ 384.575605][T17819] lo speed is unknown, defaulting to 1000 [ 384.621987][T17766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.632736][T17819] wg1 speed is unknown, defaulting to 1000 [ 384.761592][T17827] 8021q: adding VLAN 0 to HW filter on device bond9 [ 384.804147][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2986'. [ 384.837272][T17766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.107632][ T5850] Bluetooth: hci2: command tx timeout [ 385.115996][T17766] team0: Port device team_slave_0 added [ 385.137099][T17766] team0: Port device team_slave_1 added [ 385.185203][ T5850] Bluetooth: hci4: command tx timeout [ 385.268266][T17766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.275931][T17766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.315795][T17766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.329188][T17766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.336413][T17766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.362630][T17766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.579793][T17766] hsr_slave_0: entered promiscuous mode [ 385.589025][T17766] hsr_slave_1: entered promiscuous mode [ 385.596055][T17766] debugfs: 'hsr0' already exists in 'hsr' [ 385.602124][T17766] Cannot create hsr debugfs directory [ 385.885291][T17766] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.898048][T17868] x_tables: duplicate entry at hook 3 [ 385.906330][T17868] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2995'. [ 385.916866][T17866] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2994'. [ 385.970301][T17870] netlink: 'syz.6.2995': attribute type 13 has an invalid length. [ 385.982964][T17766] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.984934][T17870] netlink: 288 bytes leftover after parsing attributes in process `syz.6.2995'. [ 386.011206][T17872] netlink: 'syz.4.2996': attribute type 4 has an invalid length. [ 386.081946][T17766] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.152820][T17766] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.465780][T17878] geneve2: entered promiscuous mode [ 386.547578][T17881] __nla_validate_parse: 2 callbacks suppressed [ 386.547646][T17881] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2999'. [ 386.572646][T17766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 386.585993][T17766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 386.599319][T17766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 386.613068][T17766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.773953][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 386.782013][ C0] lec:lec_tx_timeout: lec0 [ 386.787380][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 386.939504][T17766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.994918][T17766] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.040639][ T3921] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.047878][ T3921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.093474][T17902] tipc: Started in network mode [ 387.103707][T17902] tipc: Node identity 6e830e1829f6, cluster identity 4711 [ 387.133175][T17902] tipc: Enabled bearer , priority 0 [ 387.187108][T17912] syzkaller0: entered promiscuous mode [ 387.205631][T17912] syzkaller0: entered allmulticast mode [ 387.240774][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.247965][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.257021][ T5850] Bluetooth: hci4: command tx timeout [ 387.332661][T17902] tipc: Resetting bearer [ 387.607765][T17897] tipc: Resetting bearer [ 387.633695][T17897] tipc: Disabling bearer [ 387.928602][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3009'. [ 387.973702][T17944] bridge_slave_1: left allmulticast mode [ 387.980464][T17944] bridge_slave_1: left promiscuous mode [ 387.986930][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.999922][T17944] bridge_slave_0: left allmulticast mode [ 388.006284][T17944] bridge_slave_0: left promiscuous mode [ 388.012047][T17944] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.491362][T17948] syzkaller0: entered promiscuous mode [ 388.497019][T17948] syzkaller0: entered allmulticast mode [ 388.532871][T17766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.335376][ T5850] Bluetooth: hci4: command tx timeout [ 389.462385][T18003] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3022'. [ 390.619237][T17986] syzkaller0: entered promiscuous mode [ 390.625784][T17986] syzkaller0: entered allmulticast mode [ 390.740916][T17766] veth0_vlan: entered promiscuous mode [ 390.796386][T17766] veth1_vlan: entered promiscuous mode [ 390.956768][T17766] veth0_macvtap: entered promiscuous mode [ 391.002066][T17766] veth1_macvtap: entered promiscuous mode [ 391.085553][T17766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.141088][T17766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.180547][ T7776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.414310][ T5850] Bluetooth: hci4: command tx timeout [ 391.423794][ T7776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.622978][ T7776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.642799][ T7776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.678126][ T3921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.711533][ T3921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.769444][ T3858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.780494][ T3858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.785357][T18053] netlink: 'syz.5.3033': attribute type 13 has an invalid length. [ 391.803964][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 391.811992][ C0] lec:lec_tx_timeout: lec0 [ 391.816608][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 392.128151][T18061] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2966'. [ 392.240476][T18066] dvmrp0: entered allmulticast mode [ 392.373786][T18073] tipc: Enabled bearer , priority 0 [ 392.434523][T18075] syzkaller0: entered promiscuous mode [ 392.463022][T18069] netlink: 'syz.5.3036': attribute type 11 has an invalid length. [ 392.470605][T18075] syzkaller0: entered allmulticast mode [ 392.569600][T18074] lo speed is unknown, defaulting to 1000 [ 392.602320][T18074] lo speed is unknown, defaulting to 1000 [ 392.603682][T18083] netlink: 'syz.1.3041': attribute type 16 has an invalid length. [ 392.615040][T18073] tipc: Resetting bearer [ 392.623801][T18083] netlink: 'syz.1.3041': attribute type 17 has an invalid length. [ 392.706520][T18087] netlink: 'syz.2.3042': attribute type 10 has an invalid length. [ 392.737356][T18083] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.745061][T18083] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.873700][T18083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.898752][T18083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.046323][T18071] tipc: Resetting bearer [ 393.067372][T18071] tipc: Disabling bearer [ 393.081295][T18074] wg1 speed is unknown, defaulting to 1000 [ 393.081312][T18085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3041'. [ 393.113414][T18087] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.136251][T18087] bond0: (slave team0): Enslaving as an active interface with an up link [ 393.238319][ T1079] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.288536][ T1079] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.358447][ T1079] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.390970][ T1079] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.448339][T18105] netlink: 'syz.6.3048': attribute type 1 has an invalid length. [ 393.505365][T18105] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3048'. [ 393.538213][T18104] netlink: 'syz.6.3048': attribute type 1 has an invalid length. [ 393.549038][T18104] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3048'. [ 393.742064][T18115] lo speed is unknown, defaulting to 1000 [ 393.757599][T18115] lo speed is unknown, defaulting to 1000 [ 393.778571][T18115] wg1 speed is unknown, defaulting to 1000 [ 393.788778][T18125] netlink: 'syz.4.3055': attribute type 1 has an invalid length. [ 393.917715][T18131] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3057'. [ 393.934273][T18131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3057'. [ 394.263463][T18139] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3060'. [ 394.273197][T18139] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3060'. [ 394.709368][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3063'. [ 394.744576][T18149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3063'. [ 394.845623][T18152] bond0: (slave bond_slave_0): Releasing backup interface [ 394.861199][T18152] bond0: (slave bond_slave_1): Releasing backup interface [ 394.883687][T18152] team0: Port device team_slave_0 removed [ 394.893586][T18152] team0: Port device team_slave_1 removed [ 394.900016][T18152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.916865][T18152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.926274][T18152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.933651][T18152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.942703][T18152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.005095][T18152] syzkaller0: entered promiscuous mode [ 395.013307][T18152] syzkaller0: entered allmulticast mode [ 395.163030][T18171] set match dimension is over the limit! [ 395.569416][T18208] pim6reg1: entered promiscuous mode [ 395.589574][T18208] pim6reg1: entered allmulticast mode [ 395.826970][T18212] lo speed is unknown, defaulting to 1000 [ 395.843713][T18212] lo speed is unknown, defaulting to 1000 [ 395.877535][T18212] wg1 speed is unknown, defaulting to 1000 [ 396.055348][T18225] syzkaller0: entered promiscuous mode [ 396.062212][T18225] syzkaller0: entered allmulticast mode [ 396.187064][T18225] tipc: Started in network mode [ 396.191963][T18225] tipc: Node identity 76570bda0c31, cluster identity 4711 [ 396.229185][T18225] tipc: Enabled bearer , priority 0 [ 396.291904][T18225] tipc: Resetting bearer [ 396.319456][T18224] tipc: Resetting bearer [ 396.455682][T18224] tipc: Disabling bearer [ 396.641505][T18244] syzkaller1: entered promiscuous mode [ 396.648092][T18244] syzkaller1: entered allmulticast mode [ 396.708065][T18248] SET target dimension over the limit! [ 396.788685][T18254] netlink: 'syz.2.3092': attribute type 39 has an invalid length. [ 396.824080][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 396.832162][ C0] lec:lec_tx_timeout: lec0 [ 396.836837][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 397.216201][T18262] __nla_validate_parse: 39 callbacks suppressed [ 397.216219][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3096'. [ 397.983839][T18300] lo speed is unknown, defaulting to 1000 [ 398.093334][T18301] dvmrp0: entered allmulticast mode [ 398.103584][T18300] lo speed is unknown, defaulting to 1000 [ 398.136102][T18300] wg1 speed is unknown, defaulting to 1000 [ 398.790945][T18330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3108'. [ 398.886625][T18335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3109'. [ 398.932642][T18334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3109'. [ 399.054998][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3112'. [ 399.864511][T18376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3119'. [ 399.968771][T18375] lo speed is unknown, defaulting to 1000 [ 399.997379][T18382] tipc: Enabled bearer , priority 0 [ 400.013558][T18375] lo speed is unknown, defaulting to 1000 [ 400.028048][T18387] ip6gre0: entered promiscuous mode [ 400.037557][T18382] syzkaller0: entered promiscuous mode [ 400.043046][T18382] syzkaller0: entered allmulticast mode [ 400.073347][T18384] lo speed is unknown, defaulting to 1000 [ 400.073359][T18375] wg1 speed is unknown, defaulting to 1000 [ 400.147509][T18398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3124'. [ 400.184001][T18398] nbd: must specify a size in bytes for the device [ 400.192514][T18384] lo speed is unknown, defaulting to 1000 [ 400.604170][T18384] wg1 speed is unknown, defaulting to 1000 [ 400.623767][T18408] tipc: Resetting bearer [ 400.808747][T18373] tipc: Resetting bearer [ 400.905153][T18373] tipc: Disabling bearer [ 401.488230][T18443] lo speed is unknown, defaulting to 1000 [ 401.506762][T18443] lo speed is unknown, defaulting to 1000 [ 401.513407][T18443] wg1 speed is unknown, defaulting to 1000 [ 401.638729][T18457] netlink: 'syz.5.3135': attribute type 22 has an invalid length. [ 401.843967][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 401.852035][ C0] lec:lec_tx_timeout: lec0 [ 401.856600][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 401.940597][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 401.961237][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 401.970189][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 401.989557][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 401.999540][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.184987][T18466] lo speed is unknown, defaulting to 1000 [ 402.192618][T18466] lo speed is unknown, defaulting to 1000 [ 402.220895][T18466] wg1 speed is unknown, defaulting to 1000 [ 402.355557][T18477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 402.367672][T18479] FAULT_INJECTION: forcing a failure. [ 402.367672][T18479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.414573][T18479] CPU: 1 UID: 0 PID: 18479 Comm: syz.2.3140 Not tainted syzkaller #0 PREEMPT(full) [ 402.414602][T18479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.414617][T18479] Call Trace: [ 402.414624][T18479] [ 402.414633][T18479] dump_stack_lvl+0xe8/0x150 [ 402.414661][T18479] should_fail_ex+0x414/0x560 [ 402.414691][T18479] _copy_from_user+0x2d/0xb0 [ 402.414713][T18479] bpf_test_init+0xd8/0x150 [ 402.414740][T18479] bpf_prog_test_run_xdp+0x4dc/0x1110 [ 402.414777][T18479] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 402.414803][T18479] ? __fget_files+0x2a/0x420 [ 402.414828][T18479] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 402.414851][T18479] bpf_prog_test_run+0x2c7/0x340 [ 402.414879][T18479] __sys_bpf+0x562/0x860 [ 402.414902][T18479] ? __pfx___sys_bpf+0x10/0x10 [ 402.414939][T18479] ? ksys_write+0x22a/0x250 [ 402.414958][T18479] ? __pfx_ksys_write+0x10/0x10 [ 402.414980][T18479] __x64_sys_bpf+0x7c/0x90 [ 402.414998][T18479] do_syscall_64+0xec/0xf80 [ 402.415018][T18479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.415034][T18479] ? trace_irq_disable+0x37/0x100 [ 402.415054][T18479] ? clear_bhb_loop+0x60/0xb0 [ 402.415075][T18479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.415096][T18479] RIP: 0033:0x7f1a31b8f749 [ 402.415113][T18479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.415129][T18479] RSP: 002b:00007f1a32947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.415154][T18479] RAX: ffffffffffffffda RBX: 00007f1a31de5fa0 RCX: 00007f1a31b8f749 [ 402.415168][T18479] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 402.415179][T18479] RBP: 00007f1a32947090 R08: 0000000000000000 R09: 0000000000000000 [ 402.415190][T18479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.415201][T18479] R13: 00007f1a31de6038 R14: 00007f1a31de5fa0 R15: 00007ffe0601fe28 [ 402.415231][T18479] [ 402.634028][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3142'. [ 402.643085][T18484] netlink: 261 bytes leftover after parsing attributes in process `syz.6.3142'. [ 402.911226][T18495] bond1: option arp_interval: invalid value (18446744073709551615) [ 402.919541][T18495] bond1: option arp_interval: allowed values 0 - 2147483647 [ 402.976978][T18495] bond1 (unregistering): Released all slaves [ 403.012881][T18466] chnl_net:caif_netlink_parms(): no params data found [ 403.145611][T18508] x_tables: duplicate underflow at hook 1 [ 403.183044][T18509] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3148'. [ 403.251298][T18466] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.260562][T18466] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.270640][T18466] bridge_slave_0: entered allmulticast mode [ 403.278529][T18466] bridge_slave_0: entered promiscuous mode [ 403.287765][T18466] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.314035][T18466] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.321335][T18466] bridge_slave_1: entered allmulticast mode [ 403.330009][T18466] bridge_slave_1: entered promiscuous mode [ 403.386745][T18466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.405508][T18466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.473808][T18466] team0: Port device team_slave_0 added [ 403.490099][T18517] lo speed is unknown, defaulting to 1000 [ 403.499735][T18466] team0: Port device team_slave_1 added [ 403.518839][T18517] lo speed is unknown, defaulting to 1000 [ 403.559479][T18517] wg1 speed is unknown, defaulting to 1000 [ 403.576830][T18523] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3152'. [ 403.606891][T18523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3152'. [ 403.629676][T18466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.638693][T18466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.666454][T18466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.741025][T18466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.763697][T18466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.794932][T18466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.950473][T18466] hsr_slave_0: entered promiscuous mode [ 403.978355][T18466] hsr_slave_1: entered promiscuous mode [ 403.985013][T18466] debugfs: 'hsr0' already exists in 'hsr' [ 403.995983][T18466] Cannot create hsr debugfs directory [ 404.055033][ T5844] Bluetooth: hci3: command tx timeout [ 404.061566][T18530] raw_sendmsg: syz.6.3153 forgot to set AF_INET. Fix it! [ 404.165297][T18530] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3153'. [ 404.664670][T18569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3161'. [ 404.858034][T18557] lo speed is unknown, defaulting to 1000 [ 404.875525][T18557] lo speed is unknown, defaulting to 1000 [ 404.940264][T18466] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 404.971261][T18557] wg1 speed is unknown, defaulting to 1000 [ 405.066855][T18466] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 405.183360][T18466] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 405.223659][T18580] lo: Caught tx_queue_len zero misconfig [ 405.425807][T18598] RDS: rds_bind could not find a transport for ::ffff:172.30.3.7, load rds_tcp or rds_rdma? [ 405.457754][T18466] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 405.500468][T18593] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3169'. [ 405.524358][T18593] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3169'. [ 405.524986][T18603] RDS: rds_bind could not find a transport for ::ffff:172.30.3.7, load rds_tcp or rds_rdma? [ 405.771342][T18613] FAULT_INJECTION: forcing a failure. [ 405.771342][T18613] name failslab, interval 1, probability 0, space 0, times 0 [ 405.815996][T18612] bond1: option arp_validate: invalid value (18446744073491447809) [ 405.824084][T18613] CPU: 1 UID: 0 PID: 18613 Comm: syz.2.3173 Not tainted syzkaller #0 PREEMPT(full) [ 405.824107][T18613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.824118][T18613] Call Trace: [ 405.824126][T18613] [ 405.824133][T18613] dump_stack_lvl+0xe8/0x150 [ 405.824157][T18613] should_fail_ex+0x414/0x560 [ 405.824186][T18613] should_failslab+0xa8/0x100 [ 405.824207][T18613] __kvmalloc_node_noprof+0x175/0x920 [ 405.824227][T18613] ? bpf_test_run_xdp_live+0x1ba/0x1b20 [ 405.824255][T18613] bpf_test_run_xdp_live+0x1ba/0x1b20 [ 405.824283][T18613] ? stack_trace_save+0x9c/0xe0 [ 405.824306][T18613] ? __pfx_stack_trace_save+0x10/0x10 [ 405.824338][T18613] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 405.824360][T18613] ? __kasan_kmalloc+0x93/0xb0 [ 405.824375][T18613] ? __kmalloc_noprof+0x41d/0x800 [ 405.824389][T18613] ? bpf_test_init+0x9f/0x150 [ 405.824409][T18613] ? bpf_prog_test_run_xdp+0x4dc/0x1110 [ 405.824429][T18613] ? bpf_prog_test_run+0x2c7/0x340 [ 405.824484][T18613] ? __might_fault+0xb0/0x130 [ 405.824510][T18613] ? __might_fault+0xb0/0x130 [ 405.824537][T18613] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 405.824574][T18613] ? _copy_from_user+0x94/0xb0 [ 405.824595][T18613] ? bpf_test_init+0x113/0x150 [ 405.824616][T18613] ? xdp_convert_md_to_buff+0x5b/0x330 [ 405.824641][T18613] bpf_prog_test_run_xdp+0x7c4/0x1110 [ 405.824679][T18613] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 405.824707][T18613] ? __fget_files+0x2a/0x420 [ 405.824732][T18613] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 405.824757][T18613] bpf_prog_test_run+0x2c7/0x340 [ 405.824783][T18613] __sys_bpf+0x562/0x860 [ 405.824807][T18613] ? __pfx___sys_bpf+0x10/0x10 [ 405.824843][T18613] ? ksys_write+0x22a/0x250 [ 405.824863][T18613] ? __pfx_ksys_write+0x10/0x10 [ 405.824887][T18613] __x64_sys_bpf+0x7c/0x90 [ 405.824909][T18613] do_syscall_64+0xec/0xf80 [ 405.824930][T18613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.824946][T18613] ? trace_irq_disable+0x37/0x100 [ 405.824965][T18613] ? clear_bhb_loop+0x60/0xb0 [ 405.824987][T18613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.825003][T18613] RIP: 0033:0x7f1a31b8f749 [ 405.825019][T18613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.825034][T18613] RSP: 002b:00007f1a32947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.825053][T18613] RAX: ffffffffffffffda RBX: 00007f1a31de5fa0 RCX: 00007f1a31b8f749 [ 405.825066][T18613] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 405.825085][T18613] RBP: 00007f1a32947090 R08: 0000000000000000 R09: 0000000000000000 [ 405.825096][T18613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.825107][T18613] R13: 00007f1a31de6038 R14: 00007f1a31de5fa0 R15: 00007ffe0601fe28 [ 405.825137][T18613] [ 405.828056][T18612] bond1 (unregistering): Released all slaves [ 406.134910][ T5844] Bluetooth: hci3: command tx timeout [ 406.184195][T18466] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 406.218453][T18466] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 406.291353][T18466] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 406.314900][T18466] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 406.349149][T18639] netlink: 'syz.6.3178': attribute type 4 has an invalid length. [ 406.529357][T18466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.614776][T18466] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.721446][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.728661][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.816999][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.824167][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.863955][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 406.871977][ C0] lec:lec_tx_timeout: lec0 [ 406.876827][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 406.999994][T18673] lo speed is unknown, defaulting to 1000 [ 407.058793][T18673] lo speed is unknown, defaulting to 1000 [ 407.096562][T18673] wg1 speed is unknown, defaulting to 1000 [ 407.099530][T18675] xt_CT: No such helper "netbios-ns" [ 407.628885][T18466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.214522][ T5844] Bluetooth: hci3: command tx timeout [ 408.406468][T18466] veth0_vlan: entered promiscuous mode [ 408.417700][T18725] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3197'. [ 408.438716][T18725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3197'. [ 408.448280][T18724] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3195'. [ 408.469629][T18466] veth1_vlan: entered promiscuous mode [ 408.482065][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3197'. [ 408.601704][T18466] veth0_macvtap: entered promiscuous mode [ 408.650866][T18466] veth1_macvtap: entered promiscuous mode [ 408.709677][T18732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3201'. [ 408.711326][T18466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.744281][T18730] nbd1: detected capacity change from 0 to 127 [ 408.767130][T18466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.830022][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.841589][ T5844] block nbd1: Receive control failed (result -104) [ 408.883197][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.926616][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.953811][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.991095][T18736] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3202'. [ 409.032634][T18736] netlink: 'syz.2.3202': attribute type 9 has an invalid length. [ 409.048503][T18736] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3202'. [ 409.057687][T18736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3202'. [ 409.197149][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.232628][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.299115][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.337102][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.523256][T18751] tipc: Started in network mode [ 409.542152][T18751] tipc: Node identity 3abc6d296eec, cluster identity 4711 [ 409.570954][T18751] tipc: Enabled bearer , priority 0 [ 409.592570][T18752] syzkaller0: entered promiscuous mode [ 409.598158][T18752] syzkaller0: entered allmulticast mode [ 409.661563][T18751] tipc: Resetting bearer [ 409.667862][ T9] IPVS: starting estimator thread 0... [ 409.678198][T18759] netlink: 'syz.2.3208': attribute type 1 has an invalid length. [ 409.699846][T18751] tipc: Disabling bearer [ 409.774032][T18762] IPVS: using max 27 ests per chain, 64800 per kthread [ 409.828052][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3209'. [ 409.908289][T18768] tipc: Resetting bearer [ 410.008580][T18773] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3213'. [ 410.294230][ T5844] Bluetooth: hci3: command tx timeout [ 410.553060][T18801] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.634390][T18801] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.682479][T18801] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.709784][T18768] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.724310][T18768] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 410.754406][T18801] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.791744][T18768] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 410.814388][T18768] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 410.857504][T18768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 410.863452][T18768] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 410.899815][T12045] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.929039][T18768] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 410.963754][T12045] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.964042][T18768] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 410.985250][T12045] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.016918][T12045] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.038025][T18768] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 411.046247][T18768] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 411.158879][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.172168][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.181494][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.189645][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.197407][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.218256][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.237168][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.237301][T18808] lo speed is unknown, defaulting to 1000 [ 411.251878][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.261610][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.269336][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.334341][T18814] macvlan0: entered allmulticast mode [ 411.339826][T18814] veth1_vlan: entered allmulticast mode [ 411.474308][T18808] lo speed is unknown, defaulting to 1000 [ 411.496998][T18777] lo speed is unknown, defaulting to 1000 [ 411.497938][T18808] wg1 speed is unknown, defaulting to 1000 [ 411.515902][T18777] lo speed is unknown, defaulting to 1000 [ 411.571919][T18817] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.614145][T18777] wg1 speed is unknown, defaulting to 1000 [ 411.725934][T18817] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.772625][T18827] bridge0: port 1(gretap0) entered blocking state [ 411.784216][T18827] bridge0: port 1(gretap0) entered disabled state [ 411.791186][T18827] gretap0: entered allmulticast mode [ 411.805003][T18827] gretap0: entered promiscuous mode [ 411.812781][T18827] bridge0: port 1(gretap0) entered blocking state [ 411.819331][T18827] bridge0: port 1(gretap0) entered forwarding state [ 411.884109][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 411.892140][ C0] lec:lec_tx_timeout: lec0 [ 411.896829][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 412.448866][T18817] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.472841][T18830] netlink: 'syz.1.3228': attribute type 31 has an invalid length. [ 412.484598][T18830] netlink: 'syz.1.3228': attribute type 1 has an invalid length. [ 412.504322][T18834] FAULT_INJECTION: forcing a failure. [ 412.504322][T18834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.541982][T18834] CPU: 1 UID: 0 PID: 18834 Comm: syz.4.3229 Not tainted syzkaller #0 PREEMPT(full) [ 412.542007][T18834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.542017][T18834] Call Trace: [ 412.542025][T18834] [ 412.542033][T18834] dump_stack_lvl+0xe8/0x150 [ 412.542060][T18834] should_fail_ex+0x414/0x560 [ 412.542091][T18834] _copy_to_user+0x31/0xb0 [ 412.542114][T18834] bpf_test_finish+0x1dd/0x6d0 [ 412.542143][T18834] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 412.542176][T18834] ? __pfx_bpf_test_finish+0x10/0x10 [ 412.542204][T18834] ? _copy_from_user+0x94/0xb0 [ 412.542224][T18834] ? bpf_test_init+0x113/0x150 [ 412.542248][T18834] bpf_prog_test_run_xdp+0x89b/0x1110 [ 412.542288][T18834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 412.542316][T18834] ? __fget_files+0x2a/0x420 [ 412.542342][T18834] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 412.542366][T18834] bpf_prog_test_run+0x2c7/0x340 [ 412.542394][T18834] __sys_bpf+0x562/0x860 [ 412.542417][T18834] ? __pfx___sys_bpf+0x10/0x10 [ 412.542455][T18834] ? ksys_write+0x22a/0x250 [ 412.542475][T18834] ? __pfx_ksys_write+0x10/0x10 [ 412.542499][T18834] __x64_sys_bpf+0x7c/0x90 [ 412.542520][T18834] do_syscall_64+0xec/0xf80 [ 412.542541][T18834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.542557][T18834] ? trace_irq_disable+0x37/0x100 [ 412.542577][T18834] ? clear_bhb_loop+0x60/0xb0 [ 412.542598][T18834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.542615][T18834] RIP: 0033:0x7f947df8f749 [ 412.542631][T18834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.542645][T18834] RSP: 002b:00007f947ee43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.542664][T18834] RAX: ffffffffffffffda RBX: 00007f947e1e5fa0 RCX: 00007f947df8f749 [ 412.542678][T18834] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 412.542689][T18834] RBP: 00007f947ee43090 R08: 0000000000000000 R09: 0000000000000000 [ 412.542701][T18834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.542711][T18834] R13: 00007f947e1e6038 R14: 00007f947e1e5fa0 R15: 00007ffc79493698 [ 412.542742][T18834] [ 412.815192][T18817] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.859406][T18837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.882276][T18838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.891850][T18838] bond1: (slave bond0): Enslaving as an active interface with an up link [ 412.997090][T18839] bond1 (unregistering): (slave bond0): Releasing backup interface [ 413.009540][T18839] bond1 (unregistering): Released all slaves [ 413.168303][ T1135] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.246582][ T1135] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.276782][T18777] chnl_net:caif_netlink_parms(): no params data found [ 413.285658][T18858] Cannot find set identified by id 2 to match [ 413.303463][ T49] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.322489][T18857] netlink: 'syz.4.3235': attribute type 30 has an invalid length. [ 413.334167][ T5844] Bluetooth: hci0: command tx timeout [ 413.397384][ T3435] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.426593][ T3435] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.453893][ T3435] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.489086][ T1135] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.502246][T18867] __nla_validate_parse: 10 callbacks suppressed [ 413.502263][T18867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3239'. [ 413.548189][ T1135] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.586806][T18873] FAULT_INJECTION: forcing a failure. [ 413.586806][T18873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.602797][T18777] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.610067][T18873] CPU: 1 UID: 0 PID: 18873 Comm: syz.4.3240 Not tainted syzkaller #0 PREEMPT(full) [ 413.610092][T18873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.610101][T18873] Call Trace: [ 413.610108][T18873] [ 413.610114][T18873] dump_stack_lvl+0xe8/0x150 [ 413.610140][T18873] should_fail_ex+0x414/0x560 [ 413.610170][T18873] _copy_to_user+0x31/0xb0 [ 413.610193][T18873] bpf_test_finish+0x1dd/0x6d0 [ 413.610221][T18873] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 413.610245][T18873] ? __pfx_bpf_test_finish+0x10/0x10 [ 413.610272][T18873] ? _copy_from_user+0x94/0xb0 [ 413.610291][T18873] ? bpf_test_init+0x113/0x150 [ 413.610314][T18873] bpf_prog_test_run_xdp+0x89b/0x1110 [ 413.610360][T18873] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 413.610387][T18873] ? __fget_files+0x2a/0x420 [ 413.610413][T18873] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 413.610436][T18873] bpf_prog_test_run+0x2c7/0x340 [ 413.610462][T18873] __sys_bpf+0x562/0x860 [ 413.610486][T18873] ? __pfx___sys_bpf+0x10/0x10 [ 413.610521][T18873] ? ksys_write+0x22a/0x250 [ 413.610539][T18873] ? __pfx_ksys_write+0x10/0x10 [ 413.610562][T18873] __x64_sys_bpf+0x7c/0x90 [ 413.610583][T18873] do_syscall_64+0xec/0xf80 [ 413.610602][T18873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.610617][T18873] ? trace_irq_disable+0x37/0x100 [ 413.610638][T18873] ? clear_bhb_loop+0x60/0xb0 [ 413.610657][T18873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.610673][T18873] RIP: 0033:0x7f947df8f749 [ 413.610688][T18873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.610702][T18873] RSP: 002b:00007f947ee43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.610721][T18873] RAX: ffffffffffffffda RBX: 00007f947e1e5fa0 RCX: 00007f947df8f749 [ 413.610734][T18873] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 413.610745][T18873] RBP: 00007f947ee43090 R08: 0000000000000000 R09: 0000000000000000 [ 413.610755][T18873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.610765][T18873] R13: 00007f947e1e6038 R14: 00007f947e1e5fa0 R15: 00007ffc79493698 [ 413.610793][T18873] [ 413.766462][T18879] netlink: 'syz.4.3243': attribute type 1 has an invalid length. [ 413.799910][T18777] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.849741][T18777] bridge_slave_0: entered allmulticast mode [ 413.871067][T18777] bridge_slave_0: entered promiscuous mode [ 413.879793][T18879] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 413.918700][T18777] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.943134][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3246'. [ 413.952538][T18777] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.975150][T18777] bridge_slave_1: entered allmulticast mode [ 414.008099][T18777] bridge_slave_1: entered promiscuous mode [ 414.035814][T18898] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3244'. [ 414.286171][T18777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.349638][T18777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.580268][T18777] team0: Port device team_slave_0 added [ 414.605541][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'. [ 414.609806][T18777] team0: Port device team_slave_1 added [ 414.798280][T18777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.819895][T18777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.856346][T18915] netlink: 'syz.2.3250': attribute type 13 has an invalid length. [ 414.872472][T18777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.876062][T18915] netlink: 'syz.2.3250': attribute type 17 has an invalid length. [ 414.977293][T18918] syzkaller0: entered promiscuous mode [ 414.982802][T18918] syzkaller0: entered allmulticast mode [ 415.171743][T18777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.180079][T18777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.207536][T18777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.248854][T18926] lo speed is unknown, defaulting to 1000 [ 415.256418][T18926] lo speed is unknown, defaulting to 1000 [ 415.263745][T18926] wg1 speed is unknown, defaulting to 1000 [ 415.405469][T18933] netlink: 'syz.2.3253': attribute type 13 has an invalid length. [ 415.414038][ T5844] Bluetooth: hci0: command tx timeout [ 416.914007][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 416.922081][ C0] lec:lec_tx_timeout: lec0 [ 416.926621][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 417.455573][T18947] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3257'. [ 417.494248][ T5844] Bluetooth: hci0: command tx timeout [ 417.583138][T18777] hsr_slave_0: entered promiscuous mode [ 417.615841][T18777] hsr_slave_1: entered promiscuous mode [ 417.622281][T18777] debugfs: 'hsr0' already exists in 'hsr' [ 417.651764][T18777] Cannot create hsr debugfs directory [ 417.747991][T18953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3258'. [ 417.791660][T18957] lo speed is unknown, defaulting to 1000 [ 417.891591][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 417.913061][T18957] lo speed is unknown, defaulting to 1000 [ 417.928452][T18962] lo speed is unknown, defaulting to 1000 [ 417.934739][T18957] wg1 speed is unknown, defaulting to 1000 [ 417.961219][T18962] lo speed is unknown, defaulting to 1000 [ 418.001937][T18962] wg1 speed is unknown, defaulting to 1000 [ 418.174377][T18972] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3261'. [ 418.208046][T18977] openvswitch: netlink: Message has 12 unknown bytes. [ 418.318080][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3262'. [ 418.417115][T18777] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.550035][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3268'. [ 418.623214][T18988] lo speed is unknown, defaulting to 1000 [ 418.630810][T18988] lo speed is unknown, defaulting to 1000 [ 418.639500][T18777] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.675135][T18988] wg1 speed is unknown, defaulting to 1000 [ 418.770129][T18777] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.871254][T18777] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.058330][T19006] Bluetooth: MGMT ver 1.23 [ 419.282249][T19025] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3275'. [ 419.388071][T18777] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 419.406355][T19028] lo speed is unknown, defaulting to 1000 [ 419.412854][T18777] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 419.441859][T19028] lo speed is unknown, defaulting to 1000 [ 419.448631][T18777] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 419.468125][T19033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3278'. [ 419.473186][T18777] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 419.500226][T19028] wg1 speed is unknown, defaulting to 1000 [ 419.549727][T19037] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 419.571440][T19036] syzkaller1: entered promiscuous mode [ 419.574398][ T5844] Bluetooth: hci0: command tx timeout [ 419.577867][T19036] syzkaller1: entered allmulticast mode [ 419.972972][T19057] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 420.692372][T19057] bond1 (unregistering): Released all slaves [ 421.393032][T19067] tipc: Enabling of bearer rejected, failed to enable media [ 421.945615][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 421.953643][ C0] lec:lec_tx_timeout: lec0 [ 421.965650][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 422.209431][T19061] lo speed is unknown, defaulting to 1000 [ 422.782765][T19061] lo speed is unknown, defaulting to 1000 [ 422.822204][T19071] netlink: 'syz.2.3284': attribute type 21 has an invalid length. [ 422.992246][T19061] wg1 speed is unknown, defaulting to 1000 [ 423.018554][T19071] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3284'. [ 423.282761][T19064] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3283'. [ 423.749944][T18777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.033130][T19076] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3285'. [ 425.853757][T18777] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.633552][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.642132][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.736871][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5770 ms [ 427.745891][ C0] lec:lec_tx_timeout: lec0 [ 427.756469][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 428.492282][T19076] syzkaller0: entered promiscuous mode [ 428.632501][T19076] syzkaller0: entered allmulticast mode [ 428.919296][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.928669][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.305817][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3289'. [ 430.315053][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3289'. [ 430.334947][T19095] smc: net device veth1_to_bond applied user defined pnetid SYZ0 [ 430.357868][T19097] netlink: 676 bytes leftover after parsing attributes in process `syz.1.3290'. [ 430.367780][T19097] netlink: 676 bytes leftover after parsing attributes in process `syz.1.3290'. [ 430.409048][T19097] netlink: 'syz.1.3290': attribute type 10 has an invalid length. [ 430.442363][T19097] bridge0: port 3(macsec0) entered blocking state [ 430.458892][T19097] bridge0: port 3(macsec0) entered disabled state [ 430.504155][T19097] macsec0: entered allmulticast mode [ 430.509570][T19097] veth1_macvtap: entered allmulticast mode [ 430.529802][T19097] macsec0: entered promiscuous mode [ 430.596789][T19117] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3295'. [ 430.716480][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3295'. [ 430.812412][T18777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.832729][T19127] lo speed is unknown, defaulting to 1000 [ 430.847798][T19127] lo speed is unknown, defaulting to 1000 [ 430.875486][T19127] wg1 speed is unknown, defaulting to 1000 [ 431.023520][T19140] netlink: 'syz.2.3299': attribute type 1 has an invalid length. [ 431.032550][T19140] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3299'. [ 431.067028][T19140] netlink: 'syz.2.3299': attribute type 44 has an invalid length. [ 431.449890][T18777] veth0_vlan: entered promiscuous mode [ 431.453770][T19157] netlink: 'syz.2.3302': attribute type 1 has an invalid length. [ 431.462276][T18777] veth1_vlan: entered promiscuous mode [ 431.500339][T18777] veth0_macvtap: entered promiscuous mode [ 431.511498][T18777] veth1_macvtap: entered promiscuous mode [ 431.577540][T19157] netlink: 'syz.2.3302': attribute type 1 has an invalid length. [ 431.594461][T19157] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3302'. [ 431.615230][T19157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3302'. [ 431.635208][T19157] xt_TCPMSS: Only works on TCP SYN packets [ 431.696500][T19159] xt_CT: No such helper "snmp" [ 431.758060][T19162] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 431.761027][T18777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.799624][T18777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.811933][T19164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3304'. [ 431.863051][ T1062] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.884796][ T1062] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.897311][ T1062] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.913341][ T1062] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.969560][T19169] siw: device registration error -23 [ 432.032475][T19168] lo speed is unknown, defaulting to 1000 [ 432.079308][T19168] lo speed is unknown, defaulting to 1000 [ 432.085358][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.095895][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.152038][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.163812][T19168] wg1 speed is unknown, defaulting to 1000 [ 432.172278][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.208889][T19172] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.220583][T19172] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.365558][T19172] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.401218][T19172] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.466442][T19172] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.476886][T19172] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.542203][T19172] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.552703][T19172] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.700944][ T60] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.710615][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.774105][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 432.782198][ C0] lec:lec_tx_timeout: lec0 [ 432.805396][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.817108][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.951771][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.982431][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.015910][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.035461][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.206755][ T9169] IPVS: starting estimator thread 0... [ 433.219922][T19203] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 433.335761][T19202] IPVS: using max 33 ests per chain, 79200 per kthread [ 433.412603][T19209] lo speed is unknown, defaulting to 1000 [ 433.426559][T19209] lo speed is unknown, defaulting to 1000 [ 433.440573][T19209] wg1 speed is unknown, defaulting to 1000 [ 433.617021][T19223] tipc: Enabled bearer , priority 0 [ 433.645988][T19223] syzkaller0: entered promiscuous mode [ 433.694122][T19223] syzkaller0: entered allmulticast mode [ 433.956382][T19241] tipc: Started in network mode [ 433.961446][T19241] tipc: Node identity 1efb073c619b, cluster identity 4711 [ 433.968881][T19241] tipc: Enabled bearer , priority 0 [ 433.979975][T19241] syzkaller0: entered promiscuous mode [ 433.987806][T19241] syzkaller0: entered allmulticast mode [ 433.997740][T19241] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 434.029000][T19241] tipc: Resetting bearer [ 434.111775][T19239] tipc: Resetting bearer [ 434.132701][T19239] tipc: Disabling bearer [ 434.181766][T19249] xt_TPROXY: Can be used only with -p tcp or -p udp [ 434.190568][T19249] v: renamed from dummy0 [ 434.349790][T19217] tipc: Resetting bearer [ 434.399342][T19217] tipc: Disabling bearer [ 434.480471][T19271] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 435.511760][T19304] __nla_validate_parse: 9 callbacks suppressed [ 435.511779][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3339'. [ 435.527694][T19304] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3339'. [ 435.776603][T19313] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3342'. [ 435.921133][T19318] netlink: 'syz.2.3344': attribute type 16 has an invalid length. [ 435.929255][T19318] netlink: 'syz.2.3344': attribute type 3 has an invalid length. [ 435.939451][T19318] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.3344'. [ 436.803111][T19341] ªªªªª9úž‹¿_‘zý: renamed from lo (while UP) [ 436.961372][T19348] xt_TCPMSS: Only works on TCP SYN packets [ 436.987692][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3352'. [ 437.350694][T19376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3359'. [ 437.367778][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3360'. [ 437.385985][T19380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3359'. [ 437.452084][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3362'. [ 437.530576][T19389] tipc: Enabled bearer , priority 0 [ 437.539202][T19393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3364'. [ 437.571001][T19389] syzkaller0: entered promiscuous mode [ 437.578146][T19389] syzkaller0: entered allmulticast mode [ 437.584367][T19389] tipc: Resetting bearer [ 437.704368][T19386] tipc: Resetting bearer [ 439.195415][T19386] tipc: Disabling bearer [ 439.204726][T19400] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 439.248239][ T48] tipc: Node number set to 1198853656 [ 439.267855][ T11] block nbd1: Possible stuck request ffff888024f78000: control (read@0,1024B). Runtime 30 seconds [ 439.271801][T19399] lo speed is unknown, defaulting to 1000 [ 439.279832][ T11] block nbd1: Possible stuck request ffff888024f78200: control (read@1024,1024B). Runtime 30 seconds [ 439.295645][ T11] block nbd1: Possible stuck request ffff888024f78400: control (read@2048,1024B). Runtime 30 seconds [ 439.306700][ T11] block nbd1: Possible stuck request ffff888024f78600: control (read@3072,1024B). Runtime 30 seconds [ 439.347930][T19399] lo speed is unknown, defaulting to 1000 [ 439.386514][T19399] wg1 speed is unknown, defaulting to 1000 [ 439.460641][T19421] lo speed is unknown, defaulting to 1000 [ 439.469494][T19421] lo speed is unknown, defaulting to 1000 [ 439.480633][T19421] wg1 speed is unknown, defaulting to 1000 [ 439.901097][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 439.910410][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.923239][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 440.510074][T19473] siw: device registration error -23 [ 440.619938][T19480] __nla_validate_parse: 6 callbacks suppressed [ 440.619954][T19480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3387'. [ 440.636290][T19479] tipc: Enabling of bearer rejected, failed to enable media [ 440.644916][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3387'. [ 440.654039][T19480] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3387'. [ 440.662982][T19480] netlink: 'syz.2.3387': attribute type 3 has an invalid length. [ 440.671010][T19480] netlink: 'syz.2.3387': attribute type 2 has an invalid length. [ 440.678939][T19480] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3387'. [ 440.688081][T19480] netlink: 'syz.2.3387': attribute type 2 has an invalid length. [ 440.718477][T19486] Cannot find add_set index 0 as target [ 440.738249][T19486] netlink: 'syz.5.3389': attribute type 3 has an invalid length. [ 440.990797][T19495] netlink: 'syz.1.3391': attribute type 1 has an invalid length. [ 441.231384][T19509] lo speed is unknown, defaulting to 1000 [ 441.238860][T19509] lo speed is unknown, defaulting to 1000 [ 441.245894][T19509] wg1 speed is unknown, defaulting to 1000 [ 441.715401][T19536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3404'. [ 441.830722][T19535] netlink: 'syz.1.3402': attribute type 10 has an invalid length. [ 441.889811][T19535] veth1_macvtap (unregistering): left allmulticast mode [ 441.913268][T19535] macsec0 (unregistering): left allmulticast mode [ 441.919985][T19535] macsec0 (unregistering): left promiscuous mode [ 441.927144][T19535] bridge0: port 3(macsec0) entered disabled state [ 441.973721][T19525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3400'. [ 442.092237][T19551] Cannot find set identified by id 0 to match [ 442.272481][T19567] xt_TPROXY: Can be used only with -p tcp or -p udp [ 442.351471][T19569] lo speed is unknown, defaulting to 1000 [ 442.363730][T19569] lo speed is unknown, defaulting to 1000 [ 442.389459][T19569] wg1 speed is unknown, defaulting to 1000 [ 442.407872][T19571] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3414'. [ 442.471341][T19576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3416'. [ 442.763463][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 442.797299][T19591] macvtap1: entered promiscuous mode [ 442.802689][T19591] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 443.606792][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3432'. [ 443.621209][T19637] netlink: 'syz.6.3433': attribute type 2 has an invalid length. [ 443.633411][T19637] netlink: 'syz.6.3433': attribute type 1 has an invalid length. [ 443.974285][T19650] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 444.070338][T19658] xt_hashlimit: size too large, truncated to 1048576 [ 444.469571][T19682] lo speed is unknown, defaulting to 1000 [ 444.486409][T19682] lo speed is unknown, defaulting to 1000 [ 444.513966][T19682] wg1 speed is unknown, defaulting to 1000 [ 444.898073][T19700] lo speed is unknown, defaulting to 1000 [ 444.915810][T19700] lo speed is unknown, defaulting to 1000 [ 444.936680][T19700] wg1 speed is unknown, defaulting to 1000 [ 444.944062][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 444.952094][ C0] lec:lec_tx_timeout: lec0 [ 445.130235][T19712] IPVS: Error joining to the multicast group [ 445.610062][T19716] veth1_to_hsr: entered promiscuous mode [ 445.616938][T19716] macvtap1: entered promiscuous mode [ 445.622702][T19716] macvtap1: entered allmulticast mode [ 445.630556][T19716] veth1_to_hsr: entered allmulticast mode [ 445.684774][T19718] lo speed is unknown, defaulting to 1000 [ 445.736326][T19718] lo speed is unknown, defaulting to 1000 [ 445.791105][T19718] wg1 speed is unknown, defaulting to 1000 [ 445.872153][T19725] __nla_validate_parse: 4 callbacks suppressed [ 445.872170][T19725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3459'. [ 446.160896][T19733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3459'. [ 446.405534][T19753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3466'. [ 446.767372][T19761] syzkaller0: entered promiscuous mode [ 446.772961][T19761] syzkaller0: entered allmulticast mode [ 446.842874][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3471'. [ 448.759536][T19794] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3479'. [ 448.835220][T19800] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3480'. [ 448.848355][T19794] syzkaller0: entered promiscuous mode [ 448.854373][T19794] syzkaller0: entered allmulticast mode [ 449.063252][T19798] lo speed is unknown, defaulting to 1000 [ 449.082693][T19798] lo speed is unknown, defaulting to 1000 [ 449.082693][T19806] lo speed is unknown, defaulting to 1000 [ 449.100134][T19798] wg1 speed is unknown, defaulting to 1000 [ 449.107079][T19806] lo speed is unknown, defaulting to 1000 [ 449.154801][T19812] netlink: 'syz.2.3484': attribute type 5 has an invalid length. [ 449.156132][T19806] wg1 speed is unknown, defaulting to 1000 [ 449.176410][T19812] netlink: 'syz.2.3484': attribute type 4 has an invalid length. [ 449.220801][T19814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3487'. [ 449.256352][ T6043] IPVS: starting estimator thread 0... [ 449.355271][T19819] IPVS: using max 38 ests per chain, 91200 per kthread [ 449.366200][T19825] openvswitch: netlink: Key type 220 is out of range max 32 [ 449.451897][T19829] openvswitch: netlink: Key type 220 is out of range max 32 [ 449.515750][T19832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3489'. [ 449.577427][T19828] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3489'. [ 449.827618][T19845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3493'. [ 449.884923][T19852] tipc: Enabling of bearer rejected, failed to enable media [ 450.198977][T19869] syzkaller0: entered promiscuous mode [ 450.207131][T19869] syzkaller0: entered allmulticast mode [ 450.973274][T19897] __nla_validate_parse: 1 callbacks suppressed [ 450.973291][T19897] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.3504'. [ 451.091600][T19911] lo speed is unknown, defaulting to 1000 [ 451.117045][T19911] lo speed is unknown, defaulting to 1000 [ 451.139654][T19911] wg1 speed is unknown, defaulting to 1000 [ 451.150295][T19915] xt_l2tp: missing protocol rule (udp|l2tpip) [ 451.237163][T19912] lo speed is unknown, defaulting to 1000 [ 451.263519][T19912] lo speed is unknown, defaulting to 1000 [ 451.272690][T19921] xt_connbytes: Forcing CT accounting to be enabled [ 451.285512][T19921] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3510'. [ 451.302376][T19912] wg1 speed is unknown, defaulting to 1000 [ 451.640799][T19937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3513'. [ 451.702066][T19929] syzkaller0: entered promiscuous mode [ 451.734463][T19929] syzkaller0: entered allmulticast mode [ 455.369353][T19956] veth0: entered promiscuous mode [ 455.376326][T19957] veth0: left promiscuous mode [ 455.552294][T19965] lo speed is unknown, defaulting to 1000 [ 455.575737][T19965] lo speed is unknown, defaulting to 1000 [ 455.583046][T19965] wg1 speed is unknown, defaulting to 1000 [ 455.694361][T19973] batadv_slave_0: entered promiscuous mode [ 455.844403][T19977] batadv_slave_0: left promiscuous mode [ 455.903226][T19973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3523'. [ 456.340819][T19988] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3525'. [ 456.367886][ T6196] IPVS: starting estimator thread 0... [ 456.396859][T19988] bridge_slave_0: left allmulticast mode [ 456.413210][T19988] bridge_slave_0: left promiscuous mode [ 456.413418][T19991] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.423235][T19988] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.457807][T19988] bridge_slave_1: left allmulticast mode [ 456.474207][T19988] bridge_slave_1: left promiscuous mode [ 456.475808][T19989] IPVS: using max 31 ests per chain, 74400 per kthread [ 456.488913][T19988] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.538375][T19988] bond0: (slave bond_slave_0): Releasing backup interface [ 456.567300][T19988] bond0: (slave bond_slave_1): Releasing backup interface [ 456.619771][T19988] team0: Port device team_slave_0 removed [ 456.646322][T19988] team0: Port device team_slave_1 removed [ 456.655307][T19988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.675360][T19988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.696676][T19988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.711005][T19988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.720968][T19988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 456.819282][T20004] tipc: Enabled bearer , priority 0 [ 456.858890][T20002] syzkaller0: entered promiscuous mode [ 456.904047][T20002] syzkaller0: entered allmulticast mode [ 457.000230][T20002] tipc: Resetting bearer [ 457.002369][T20009] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3532'. [ 457.016745][T20001] tipc: Resetting bearer [ 457.063297][T20001] tipc: Disabling bearer [ 457.217249][T20006] lo speed is unknown, defaulting to 1000 [ 457.241218][T20006] lo speed is unknown, defaulting to 1000 [ 457.265921][T20006] wg1 speed is unknown, defaulting to 1000 [ 457.546122][T20030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3537'. [ 457.837546][T20030] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3537'. [ 458.023573][T20045] lo speed is unknown, defaulting to 1000 [ 458.048886][T20053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3544'. [ 458.111627][T20045] lo speed is unknown, defaulting to 1000 [ 458.141064][T20045] wg1 speed is unknown, defaulting to 1000 [ 458.204166][T20055] netlink: 'syz.6.3545': attribute type 1 has an invalid length. [ 458.287433][T20061] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3547'. [ 458.319802][T20062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3546'. [ 458.546816][T20063] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3547'. [ 458.762434][T20076] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3550'. [ 458.897003][T20080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3551'. [ 459.295567][T20110] netlink: 'syz.4.3560': attribute type 1 has an invalid length. [ 459.544776][T20115] netlink: 'syz.6.3562': attribute type 3 has an invalid length. [ 459.594668][T20126] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 459.970627][T20146] netlink: 'syz.6.3569': attribute type 2 has an invalid length. [ 460.021285][T20146] : entered promiscuous mode [ 460.610495][T20168] bond0: (slave team0): Releasing backup interface [ 460.642997][T20168] team0 (unregistering): Port device team_slave_0 removed [ 460.657696][T20168] team0 (unregistering): Port device team_slave_1 removed [ 461.395932][T20205] __nla_validate_parse: 10 callbacks suppressed [ 461.395951][T20205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3587'. [ 461.469030][T20211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3589'. [ 461.479263][T20207] netlink: 'syz.1.3588': attribute type 4 has an invalid length. [ 461.487228][T20211] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 461.532045][T20211] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3589'. [ 461.704157][T20224] netlink: 'syz.4.3594': attribute type 13 has an invalid length. [ 461.885025][T20224] bridge0: port 1(gretap0) entered disabled state [ 462.057414][T20242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3598'. [ 462.093746][T20243] netlink: 'syz.5.3596': attribute type 1 has an invalid length. [ 462.333014][T20224] veth1_to_hsr: left allmulticast mode [ 462.348238][T20239] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3596'. [ 462.404098][T20243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.449922][T20244] bond1: (slave gretap2): making interface the new active one [ 462.478564][T20244] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 462.488949][ T1062] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.527161][ T1062] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.565987][ T1062] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.589008][ T1062] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.684186][ T1062] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.696293][ T1062] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.715161][ T1062] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.726799][ T1062] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.831738][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3604'. [ 462.842698][T20265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3604'. [ 462.905969][T20267] lo speed is unknown, defaulting to 1000 [ 462.922415][T20267] lo speed is unknown, defaulting to 1000 [ 462.982972][T20267] wg1 speed is unknown, defaulting to 1000 [ 462.990359][T20265] lo speed is unknown, defaulting to 1000 [ 463.062340][T20265] lo speed is unknown, defaulting to 1000 [ 463.147200][T20265] wg1 speed is unknown, defaulting to 1000 [ 463.189057][T20281] syzkaller1: entered promiscuous mode [ 463.206250][T20281] syzkaller1: entered allmulticast mode [ 463.336570][T20286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3609'. [ 463.379748][T20286] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 463.399034][T20293] gtp0: entered promiscuous mode [ 463.421845][T20293] gtp0: entered allmulticast mode [ 463.533865][T20304] netlink: 'syz.5.3612': attribute type 1 has an invalid length. [ 463.791240][T20304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.805960][T20308] bond2: entered allmulticast mode [ 463.823480][T20312] vlan2: entered promiscuous mode [ 463.829229][T20312] bridge0: entered promiscuous mode [ 463.991928][T20333] batman_adv: batadv0: Adding interface: vlan2 [ 464.000995][T20333] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.031872][T20333] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 464.243039][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3624'. [ 464.256731][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3624'. [ 464.939593][ T5844] Bluetooth: hci0: command tx timeout [ 465.310443][T20387] 0: reclassify loop, rule prio 0, protocol 800 [ 465.818741][T20407] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.842362][T20407] ieee802154 phy0 wpan0: encryption failed: -22 [ 465.877702][T20410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.906907][T20411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.079530][T20419] syzkaller0: entered promiscuous mode [ 466.163449][T20424] netlink: 'syz.4.3642': attribute type 1 has an invalid length. [ 466.171385][T20419] syzkaller0: entered allmulticast mode [ 466.309501][T20424] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 466.507152][T20439] __nla_validate_parse: 4 callbacks suppressed [ 466.507173][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3644'. [ 466.583681][T20441] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3645'. [ 466.720889][T20447] tipc: Enabled bearer , priority 25 [ 466.805057][T20451] geneve2: entered promiscuous mode [ 466.886503][T20459] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3649'. [ 467.031955][T20464] tipc: Enabled bearer , priority 0 [ 467.068681][T20467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3653'. [ 467.214687][T20464] syzkaller0: entered promiscuous mode [ 467.220204][T20464] syzkaller0: entered allmulticast mode [ 467.226873][T20464] tipc: Resetting bearer [ 467.497128][T20461] tipc: Resetting bearer [ 467.601063][T20491] netlink: 'syz.5.3656': attribute type 39 has an invalid length. [ 467.659283][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3656'. [ 467.690273][T20494] netlink: 'syz.1.3658': attribute type 1 has an invalid length. [ 467.709802][T20494] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3658'. [ 467.875863][T20501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3659'. [ 469.248555][T20461] tipc: Disabling bearer [ 469.266546][T20491] tipc: Resetting bearer [ 469.285038][T20491] tipc: Disabling bearer [ 469.317840][T20493] batman_adv: batadv0: Removing interface: vlan2 [ 469.365551][ T11] block nbd1: Possible stuck request ffff888024f78000: control (read@0,1024B). Runtime 60 seconds [ 469.377439][ T11] block nbd1: Possible stuck request ffff888024f78200: control (read@1024,1024B). Runtime 60 seconds [ 469.389449][ T11] block nbd1: Possible stuck request ffff888024f78400: control (read@2048,1024B). Runtime 60 seconds [ 469.400463][ T11] block nbd1: Possible stuck request ffff888024f78600: control (read@3072,1024B). Runtime 60 seconds [ 469.418265][T20494] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 469.419245][T20497] batadv_slave_0: entered promiscuous mode [ 469.433655][ T5204] udevd[5204]: worker [17388] /devices/virtual/block/nbd1 is taking a long time [ 469.443232][ T5966] tipc: Node number set to 1414556969 [ 469.460083][T20501] team0: Device gtp0 is of different type [ 469.562919][T20500] batadv_slave_0: left promiscuous mode [ 469.732836][T20527] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3667'. [ 469.761220][T20529] netlink: 'syz.6.3666': attribute type 1 has an invalid length. [ 469.921725][T20535] syzkaller0: entered promiscuous mode [ 469.943215][T20535] syzkaller0: entered allmulticast mode [ 470.131081][T20551] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3675'. [ 470.167763][T20557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3677'. [ 470.195095][T20557] macvtap1: entered promiscuous mode [ 470.200671][T20557] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 470.511054][T20567] netlink: 'syz.6.3678': attribute type 1 has an invalid length. [ 470.949049][T20582] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 470.964154][T20580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.342351][T20600] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 471.433578][T20598] lo speed is unknown, defaulting to 1000 [ 471.462621][T20598] lo speed is unknown, defaulting to 1000 [ 471.507990][T20598] wg1 speed is unknown, defaulting to 1000 [ 471.514127][T20608] __nla_validate_parse: 7 callbacks suppressed [ 471.514144][T20608] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3687'. [ 471.537004][T20610] netlink: 'syz.1.3688': attribute type 4 has an invalid length. [ 471.545272][T20610] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3688'. [ 471.779389][T20614] netlink: 'syz.5.3690': attribute type 1 has an invalid length. [ 472.059755][T20630] pimreg3: entered allmulticast mode [ 472.144176][T20637] lo speed is unknown, defaulting to 1000 [ 472.177880][T20637] lo speed is unknown, defaulting to 1000 [ 472.227445][T20637] wg1 speed is unknown, defaulting to 1000 [ 472.228296][T20647] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3697'. [ 472.247735][T20649] netlink: 'syz.1.3698': attribute type 8 has an invalid length. [ 472.251041][T20647] syzkaller0: entered promiscuous mode [ 472.261021][T20647] syzkaller0: entered allmulticast mode [ 472.438554][T20649] macsec0: entered promiscuous mode [ 472.443776][T20649] ip6gretap0: entered promiscuous mode [ 472.456879][T20649] ip6gretap0: left promiscuous mode [ 472.872979][T20671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3703'. [ 472.921877][T20660] lo speed is unknown, defaulting to 1000 [ 472.931385][T20660] lo speed is unknown, defaulting to 1000 [ 472.940484][T20660] wg1 speed is unknown, defaulting to 1000 [ 472.976047][T20672] tunl0: Caught tx_queue_len zero misconfig [ 472.982205][ T8554] lec:lec_start_xmit: lec0:No lecd attached [ 473.053796][T20680] netlink: 'syz.1.3706': attribute type 1 has an invalid length. [ 473.900019][T20692] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3711'. [ 473.909488][T20692] netlink: 'syz.6.3711': attribute type 7 has an invalid length. [ 473.917746][T20692] netlink: 'syz.6.3711': attribute type 8 has an invalid length. [ 473.934774][T20692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3711'. [ 473.940867][T20686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3709'. [ 473.956525][T20692] syz_tun: entered promiscuous mode [ 473.987711][T20692] gretap0: entered promiscuous mode [ 473.998592][T20692] syz_tun: left promiscuous mode [ 474.018373][T20701] netlink: 'syz.5.3713': attribute type 10 has an invalid length. [ 474.027836][T20692] gretap0: left promiscuous mode [ 474.060129][T20701] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 474.077159][T20686] syzkaller0: entered promiscuous mode [ 474.088463][T20701] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3713'. [ 474.098057][T20686] syzkaller0: entered allmulticast mode [ 474.114119][T20684] lo speed is unknown, defaulting to 1000 [ 474.280676][T20684] lo speed is unknown, defaulting to 1000 [ 474.311178][T20684] wg1 speed is unknown, defaulting to 1000 [ 474.473139][T20718] netlink: 'syz.6.3717': attribute type 1 has an invalid length. [ 474.486014][T20719] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3716'. [ 474.589687][T20724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3719'. [ 474.630488][T20721] lo speed is unknown, defaulting to 1000 [ 474.638229][T20721] lo speed is unknown, defaulting to 1000 [ 474.645754][T20721] wg1 speed is unknown, defaulting to 1000 [ 474.782978][T20727] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 474.858582][T20737] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 474.886222][T20737] syzkaller1: linktype set to 778 [ 475.391613][T20756] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 475.528823][T20766] 8021q: VLANs not supported on ip_vti0 [ 475.566183][T20765] 8021q: VLANs not supported on ip_vti0 [ 475.642425][T20772] validate_nla: 3 callbacks suppressed [ 475.642444][T20772] netlink: 'syz.5.3731': attribute type 1 has an invalid length. [ 475.793113][T20785] erspan0: entered promiscuous mode [ 475.848369][T20784] lo speed is unknown, defaulting to 1000 [ 475.859254][T20784] lo speed is unknown, defaulting to 1000 [ 475.867494][T20784] wg1 speed is unknown, defaulting to 1000 [ 476.031972][T20792] netlink: 'syz.5.3739': attribute type 1 has an invalid length. [ 476.552177][T20824] bridge_slave_1: left allmulticast mode [ 476.569142][T20824] bridge_slave_1: left promiscuous mode [ 476.586908][T20824] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.656485][T20824] bridge_slave_0: left allmulticast mode [ 476.663757][T20835] __nla_validate_parse: 13 callbacks suppressed [ 476.663777][T20835] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3745'. [ 476.698221][T20824] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.750310][T20824] bond0: (slave bridge0): Releasing backup interface [ 476.946696][T20849] netlink: 'syz.1.3750': attribute type 13 has an invalid length. [ 477.054454][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3750'. [ 477.137716][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3750'. [ 477.271427][T20870] netlink: 'syz.4.3756': attribute type 1 has an invalid length. [ 477.304645][T20870] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3756'. [ 477.530130][T20878] lo speed is unknown, defaulting to 1000 [ 477.589422][T20878] lo speed is unknown, defaulting to 1000 [ 477.609570][T20878] wg1 speed is unknown, defaulting to 1000 [ 477.636246][T20898] bridge0: port 2(erspan0) entered blocking state [ 477.655341][T20898] bridge0: port 2(erspan0) entered disabled state [ 477.669060][T20898] erspan0: entered allmulticast mode [ 477.679151][T20898] erspan0: entered promiscuous mode [ 477.746710][T20898] erspan0: left allmulticast mode [ 477.751804][T20898] erspan0: left promiscuous mode [ 477.756270][T20903] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3762'. [ 477.766815][T20898] bridge0: port 2(erspan0) entered disabled state [ 477.782081][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3763'. [ 477.878963][T20911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3763'. [ 478.042939][T20918] netlink: 'syz.1.3767': attribute type 6 has an invalid length. [ 478.051950][T20918] netlink: 'syz.1.3767': attribute type 7 has an invalid length. [ 478.061536][T20918] netlink: 'syz.1.3767': attribute type 8 has an invalid length. [ 478.199862][T20903] team0 (unregistering): Port device team_slave_0 removed [ 478.212388][T20903] team0 (unregistering): Port device team_slave_1 removed [ 478.336514][T20917] delete_channel: no stack [ 478.471812][T20934] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 478.597386][T20933] lo speed is unknown, defaulting to 1000 [ 478.646186][T20933] lo speed is unknown, defaulting to 1000 [ 478.654108][T20933] wg1 speed is unknown, defaulting to 1000 [ 478.744459][T20942] netlink: 'syz.5.3773': attribute type 9 has an invalid length. [ 478.752359][T20942] netlink: 'syz.5.3773': attribute type 11 has an invalid length. [ 478.773944][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 478.782042][ C0] lec:lec_tx_timeout: lec0 [ 478.787824][T20942] netlink: 'syz.5.3773': attribute type 12 has an invalid length. [ 478.823005][T20942] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.3773'. [ 478.925106][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3773'. [ 478.960132][ T30] audit: type=1800 audit(1768603879.395:14): pid=20937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3772" name="cgroup.controllers" dev="tmpfs" ino=783 res=0 errno=0 [ 479.174975][T20959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3775'. [ 479.267083][T20959] hsr0: entered promiscuous mode [ 479.292802][T20959] macvlan2: entered promiscuous mode [ 479.319349][T20959] macvlan2: entered allmulticast mode [ 479.365215][T20959] hsr0: entered allmulticast mode [ 479.370287][T20959] hsr_slave_0: entered allmulticast mode [ 479.404884][T20959] hsr_slave_1: entered allmulticast mode [ 479.664860][T20965] syzkaller0: entered promiscuous mode [ 479.670371][T20965] syzkaller0: entered allmulticast mode [ 480.188847][T21006] xt_CT: No such helper "pptp" [ 480.262263][T21006] xt_CT: No such helper "pptp" [ 480.279153][T21008] bond1 (unregistering): Released all slaves [ 480.403746][T21006] xt_CT: No such helper "pptp" [ 480.505326][T21006] xt_CT: No such helper "pptp" [ 480.642513][T21006] xt_CT: No such helper "pptp" [ 480.762092][T21006] xt_CT: No such helper "pptp" [ 480.868430][T21006] xt_CT: No such helper "pptp" [ 480.901358][T21039] siw: device registration error -23 [ 480.967266][T21041] validate_nla: 2 callbacks suppressed [ 480.967284][T21041] netlink: 'syz.1.3794': attribute type 1 has an invalid length. [ 481.405441][T21067] lo speed is unknown, defaulting to 1000 [ 481.452823][T21067] lo speed is unknown, defaulting to 1000 [ 481.467612][T21067] wg1 speed is unknown, defaulting to 1000 [ 482.115091][T21061] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 482.292194][T21107] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 482.371691][T21111] xt_nfacct: accounting object `syz0' does not exist [ 482.644073][ T6043] IPVS: starting estimator thread 0... [ 482.701667][T21127] lo speed is unknown, defaulting to 1000 [ 482.735009][T21128] IPVS: using max 29 ests per chain, 69600 per kthread [ 482.743240][T21127] lo speed is unknown, defaulting to 1000 [ 482.764908][T21127] wg1 speed is unknown, defaulting to 1000 [ 482.822231][T21137] lo speed is unknown, defaulting to 1000 [ 482.875276][T21137] lo speed is unknown, defaulting to 1000 [ 482.895808][T21137] wg1 speed is unknown, defaulting to 1000 [ 483.239123][T21146] lo speed is unknown, defaulting to 1000 [ 483.309566][T21146] lo speed is unknown, defaulting to 1000 [ 483.332923][T21146] wg1 speed is unknown, defaulting to 1000 [ 483.753325][T21170] netlink: 'syz.1.3820': attribute type 21 has an invalid length. [ 483.807147][T21174] netlink: 'syz.1.3820': attribute type 21 has an invalid length. [ 483.898194][T21176] netlink: 'syz.6.3821': attribute type 1 has an invalid length. [ 483.927167][T21176] netlink: 'syz.6.3821': attribute type 2 has an invalid length. [ 483.963098][T21174] __nla_validate_parse: 15 callbacks suppressed [ 483.963117][T21174] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3820'. [ 484.014707][T21164] lo speed is unknown, defaulting to 1000 [ 484.060745][T21164] lo speed is unknown, defaulting to 1000 [ 484.079712][T21180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3822'. [ 484.090407][T21164] wg1 speed is unknown, defaulting to 1000 [ 484.258415][T21175] lo speed is unknown, defaulting to 1000 [ 484.299390][T21175] lo speed is unknown, defaulting to 1000 [ 484.355096][T21175] wg1 speed is unknown, defaulting to 1000 [ 484.384819][T21200] openvswitch: netlink: Message has 572 unknown bytes. [ 484.391750][T21200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.634523][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3827'. [ 484.728075][T21216] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 484.850094][T21209] netlink: 'syz.4.3826': attribute type 1 has an invalid length. [ 485.173358][T21232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3831'. [ 485.214191][T21232] netlink: 'syz.2.3831': attribute type 30 has an invalid length. [ 485.363373][T21063] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.405842][T21063] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.420773][T21063] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.491117][T21063] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.551327][T21252] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 485.752686][T21266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3838'. [ 485.771143][T21268] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.3838'. [ 485.804689][T21270] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3837'. [ 485.930654][T21277] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 485.936997][T21277] syzkaller0: linktype set to 780 [ 485.969618][T21278] lo speed is unknown, defaulting to 1000 [ 485.982532][T21278] lo speed is unknown, defaulting to 1000 [ 485.996146][T21278] wg1 speed is unknown, defaulting to 1000 [ 486.057941][T21283] netlink: 'syz.4.3842': attribute type 1 has an invalid length. [ 486.136216][T21288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3843'. [ 486.770397][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3849'. [ 486.784411][T21313] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 487.208609][T21321] bond1 (unregistering): Released all slaves [ 487.230481][T21329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3857'. [ 487.519921][T21350] FAULT_INJECTION: forcing a failure. [ 487.519921][T21350] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 487.595028][T21350] CPU: 1 UID: 0 PID: 21350 Comm: syz.6.3861 Not tainted syzkaller #0 PREEMPT(full) [ 487.595072][T21350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.595083][T21350] Call Trace: [ 487.595091][T21350] [ 487.595099][T21350] dump_stack_lvl+0xe8/0x150 [ 487.595128][T21350] should_fail_ex+0x414/0x560 [ 487.595159][T21350] prepare_alloc_pages+0x22b/0x650 [ 487.595189][T21350] __alloc_frozen_pages_noprof+0x123/0x370 [ 487.595213][T21350] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 487.595237][T21350] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 487.595261][T21350] ? policy_nodemask+0x27c/0x720 [ 487.595287][T21350] alloc_pages_mpol+0x232/0x4a0 [ 487.595313][T21350] vma_alloc_folio_noprof+0xe4/0x200 [ 487.595336][T21350] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 487.595370][T21350] folio_prealloc+0x30/0x180 [ 487.595389][T21350] do_wp_page+0x1231/0x5810 [ 487.595421][T21350] ? ___pte_offset_map+0x29/0x240 [ 487.595456][T21350] ? __pfx_do_wp_page+0x10/0x10 [ 487.595474][T21350] ? do_raw_spin_lock+0x121/0x290 [ 487.595499][T21350] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 487.595532][T21350] handle_mm_fault+0x14c5/0x32b0 [ 487.595554][T21350] ? __pte_offset_map_lock+0x13e/0x210 [ 487.595589][T21350] ? handle_mm_fault+0xdb/0x32b0 [ 487.595621][T21350] ? __pfx_handle_mm_fault+0x10/0x10 [ 487.595644][T21350] ? follow_page_pte+0xd03/0x13e0 [ 487.595676][T21350] ? __pfx_follow_page_pte+0x10/0x10 [ 487.595711][T21350] __get_user_pages+0x1650/0x29f0 [ 487.595772][T21350] __gup_longterm_locked+0xde4/0x1660 [ 487.595808][T21350] ? sanity_check_pinned_pages+0x123a/0x1300 [ 487.595838][T21350] gup_fast_fallback+0x1d26/0x2290 [ 487.595895][T21350] ? __pfx_gup_fast_fallback+0x10/0x10 [ 487.595927][T21350] ? pin_user_pages_fast+0x4d/0xb0 [ 487.595951][T21350] iov_iter_extract_pages+0x35f/0x5e0 [ 487.595981][T21350] extract_iter_to_sg+0xe46/0x24e0 [ 487.596015][T21350] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 487.596054][T21350] ? __asan_memset+0x22/0x50 [ 487.596081][T21350] af_alg_get_rsgl+0x436/0x810 [ 487.596120][T21350] skcipher_recvmsg+0x3d1/0x11d0 [ 487.596144][T21350] ? aa_sk_perm+0x7ee/0x920 [ 487.596177][T21350] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 487.596195][T21350] ? __lock_acquire+0x6b6/0x2cf0 [ 487.596215][T21350] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 487.596231][T21350] ? security_socket_recvmsg+0x7e/0x2e0 [ 487.596253][T21350] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 487.596272][T21350] sock_recvmsg+0x22c/0x270 [ 487.596294][T21350] ____sys_recvmsg+0x1c9/0x460 [ 487.596322][T21350] ? __pfx_____sys_recvmsg+0x10/0x10 [ 487.596358][T21350] ? import_iovec+0x74/0xa0 [ 487.596380][T21350] ___sys_recvmsg+0x1b5/0x510 [ 487.596400][T21350] ? get_pid_task+0x20/0x1f0 [ 487.596422][T21350] ? __pfx____sys_recvmsg+0x10/0x10 [ 487.596446][T21350] ? __fget_files+0x2a/0x420 [ 487.596484][T21350] ? __fget_files+0x3a0/0x420 [ 487.596515][T21350] __x64_sys_recvmsg+0x198/0x260 [ 487.596540][T21350] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 487.596572][T21350] ? __pfx_ksys_write+0x10/0x10 [ 487.596602][T21350] do_syscall_64+0xec/0xf80 [ 487.596622][T21350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.596638][T21350] ? trace_irq_disable+0x37/0x100 [ 487.596659][T21350] ? clear_bhb_loop+0x60/0xb0 [ 487.596680][T21350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.596697][T21350] RIP: 0033:0x7f893b18f749 [ 487.596714][T21350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.596729][T21350] RSP: 002b:00007f893bfd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 487.596755][T21350] RAX: ffffffffffffffda RBX: 00007f893b3e5fa0 RCX: 00007f893b18f749 [ 487.596768][T21350] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 487.596779][T21350] RBP: 00007f893bfd4090 R08: 0000000000000000 R09: 0000000000000000 [ 487.596790][T21350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 487.596801][T21350] R13: 00007f893b3e6038 R14: 00007f893b3e5fa0 R15: 00007ffe0037b4e8 [ 487.596833][T21350] [ 488.146825][T21358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.156414][T21358] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.280720][T21358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.425020][T21365] lo speed is unknown, defaulting to 1000 [ 488.434842][T21365] lo speed is unknown, defaulting to 1000 [ 488.442582][T21365] wg1 speed is unknown, defaulting to 1000 [ 488.660495][T21372] tipc: Enabled bearer , priority 0 [ 488.764626][T21372] syzkaller0: entered promiscuous mode [ 488.795910][T21372] syzkaller0: entered allmulticast mode [ 488.825589][T21372] tipc: Resetting bearer [ 488.975538][T21381] lo speed is unknown, defaulting to 1000 [ 488.999613][T21400] netlink: 'syz.2.3868': attribute type 6 has an invalid length. [ 489.035123][T21383] __nla_validate_parse: 1 callbacks suppressed [ 489.035140][T21383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3867'. [ 489.112659][T21372] tipc: Resetting bearer [ 489.168516][T21372] tipc: Disabling bearer [ 489.180926][T21381] lo speed is unknown, defaulting to 1000 [ 489.227297][T21381] wg1 speed is unknown, defaulting to 1000 [ 489.307718][T21413] FAULT_INJECTION: forcing a failure. [ 489.307718][T21413] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 489.357222][T21413] CPU: 0 UID: 0 PID: 21413 Comm: syz.6.3873 Not tainted syzkaller #0 PREEMPT(full) [ 489.357244][T21413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.357253][T21413] Call Trace: [ 489.357259][T21413] [ 489.357265][T21413] dump_stack_lvl+0xe8/0x150 [ 489.357287][T21413] should_fail_ex+0x414/0x560 [ 489.357312][T21413] prepare_alloc_pages+0x22b/0x650 [ 489.357333][T21413] __alloc_frozen_pages_noprof+0x123/0x370 [ 489.357352][T21413] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 489.357370][T21413] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 489.357389][T21413] ? policy_nodemask+0x27c/0x720 [ 489.357408][T21413] alloc_pages_mpol+0x232/0x4a0 [ 489.357427][T21413] vma_alloc_folio_noprof+0xe4/0x200 [ 489.357445][T21413] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 489.357469][T21413] folio_prealloc+0x30/0x180 [ 489.357484][T21413] do_wp_page+0x1231/0x5810 [ 489.357508][T21413] ? ___pte_offset_map+0x29/0x240 [ 489.357534][T21413] ? __pfx_do_wp_page+0x10/0x10 [ 489.357549][T21413] ? do_raw_spin_lock+0x121/0x290 [ 489.357568][T21413] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 489.357593][T21413] handle_mm_fault+0x14c5/0x32b0 [ 489.357611][T21413] ? __pte_offset_map_lock+0x13e/0x210 [ 489.357637][T21413] ? handle_mm_fault+0xdb/0x32b0 [ 489.357661][T21413] ? __pfx_handle_mm_fault+0x10/0x10 [ 489.357679][T21413] ? follow_page_pte+0xd03/0x13e0 [ 489.357704][T21413] ? __pfx_follow_page_pte+0x10/0x10 [ 489.357730][T21413] __get_user_pages+0x1650/0x29f0 [ 489.357769][T21413] __gup_longterm_locked+0xde4/0x1660 [ 489.357795][T21413] ? sanity_check_pinned_pages+0x123a/0x1300 [ 489.357818][T21413] gup_fast_fallback+0x1d26/0x2290 [ 489.357869][T21413] ? __pfx_gup_fast_fallback+0x10/0x10 [ 489.357892][T21413] ? pin_user_pages_fast+0x4d/0xb0 [ 489.357910][T21413] iov_iter_extract_pages+0x35f/0x5e0 [ 489.357933][T21413] extract_iter_to_sg+0xe46/0x24e0 [ 489.357959][T21413] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 489.357986][T21413] ? __asan_memset+0x22/0x50 [ 489.358011][T21413] af_alg_get_rsgl+0x436/0x810 [ 489.358040][T21413] skcipher_recvmsg+0x3d1/0x11d0 [ 489.358060][T21413] ? aa_sk_perm+0x7ee/0x920 [ 489.358085][T21413] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 489.358100][T21413] ? __lock_acquire+0x6b6/0x2cf0 [ 489.358116][T21413] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 489.358129][T21413] ? security_socket_recvmsg+0x7e/0x2e0 [ 489.358148][T21413] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 489.358163][T21413] sock_recvmsg+0x22c/0x270 [ 489.358181][T21413] ____sys_recvmsg+0x1c9/0x460 [ 489.358205][T21413] ? __pfx_____sys_recvmsg+0x10/0x10 [ 489.358235][T21413] ? import_iovec+0x74/0xa0 [ 489.358255][T21413] ___sys_recvmsg+0x1b5/0x510 [ 489.358271][T21413] ? get_pid_task+0x20/0x1f0 [ 489.358292][T21413] ? __pfx____sys_recvmsg+0x10/0x10 [ 489.358312][T21413] ? __fget_files+0x2a/0x420 [ 489.358343][T21413] ? __fget_files+0x3a0/0x420 [ 489.358368][T21413] __x64_sys_recvmsg+0x198/0x260 [ 489.358388][T21413] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 489.358414][T21413] ? __pfx_ksys_write+0x10/0x10 [ 489.358438][T21413] do_syscall_64+0xec/0xf80 [ 489.358456][T21413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.358469][T21413] ? trace_irq_disable+0x37/0x100 [ 489.358486][T21413] ? clear_bhb_loop+0x60/0xb0 [ 489.358502][T21413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.358515][T21413] RIP: 0033:0x7f893b18f749 [ 489.358532][T21413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.358545][T21413] RSP: 002b:00007f893bfd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 489.358562][T21413] RAX: ffffffffffffffda RBX: 00007f893b3e5fa0 RCX: 00007f893b18f749 [ 489.358572][T21413] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 489.358580][T21413] RBP: 00007f893bfd4090 R08: 0000000000000000 R09: 0000000000000000 [ 489.358588][T21413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.358597][T21413] R13: 00007f893b3e6038 R14: 00007f893b3e5fa0 R15: 00007ffe0037b4e8 [ 489.358621][T21413] [ 489.540446][T21416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3872'. [ 489.778732][T21416] nbd: must specify a size in bytes for the device [ 489.977992][T21426] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 490.059841][T21426] bond1 (unregistering): Released all slaves [ 490.333400][T21438] syzkaller0: entered promiscuous mode [ 490.360541][T21438] syzkaller0: entered allmulticast mode [ 490.444110][T21454] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3879'. [ 490.491828][T21454] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3879'. [ 490.903484][T21478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3889'. [ 491.075561][T21486] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.3890'. [ 491.211882][T21495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3892'. [ 491.391879][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3898'. [ 491.547933][T21513] ip_vti0: entered promiscuous mode [ 491.584231][T21513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3899'. [ 491.669854][T21524] netlink: 'syz.1.3900': attribute type 11 has an invalid length. [ 491.819392][T21523] lo speed is unknown, defaulting to 1000 [ 491.854401][T21523] lo speed is unknown, defaulting to 1000 [ 491.861138][T21523] wg1 speed is unknown, defaulting to 1000 [ 491.971665][T21533] veth0: entered promiscuous mode [ 492.039079][T21534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3905'. [ 492.106401][T21532] veth0: left promiscuous mode [ 492.588688][T21567] netlink: 'syz.1.3912': attribute type 1 has an invalid length. [ 493.618234][T21601] lo speed is unknown, defaulting to 1000 [ 493.652626][T21601] lo speed is unknown, defaulting to 1000 [ 493.660744][T21605] syzkaller0: entered promiscuous mode [ 493.684520][T21605] syzkaller0: entered allmulticast mode [ 493.792659][T21601] wg1 speed is unknown, defaulting to 1000 [ 493.949128][T21617] bond0: Caught tx_queue_len zero misconfig [ 493.981726][T21620] netlink: 'syz.2.3925': attribute type 1 has an invalid length. [ 494.009912][T21622] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 494.013711][T21622] openvswitch: netlink: IP tunnel TTL not specified. [ 494.248389][T21629] __nla_validate_parse: 3 callbacks suppressed [ 494.248407][T21629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3925'. [ 509.566733][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 509.568860][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 509.569635][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 509.570483][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 509.571052][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 509.638624][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 509.640660][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 509.641415][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 509.642278][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 509.642879][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 509.874964][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 509.877509][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 509.878287][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 509.879193][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 509.879831][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 510.035328][ T5848] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 510.037684][ T5848] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 510.038499][ T5848] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 510.039387][ T5848] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 510.039966][ T5848] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 511.114888][ T5850] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 511.117078][ T5850] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 511.118940][ T5850] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 511.119831][ T5850] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 511.120407][ T5850] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 511.660906][ T5848] Bluetooth: hci1: command tx timeout [ 511.661755][ T5850] Bluetooth: hci6: command tx timeout [ 511.894192][ T5850] Bluetooth: hci7: command tx timeout [ 512.054184][ T5850] Bluetooth: hci8: command tx timeout [ 513.174293][ T5850] Bluetooth: hci9: command tx timeout [ 513.739513][ T5848] Bluetooth: hci1: command tx timeout [ 513.739607][ T5850] Bluetooth: hci6: command tx timeout [ 513.974150][ T5850] Bluetooth: hci7: command tx timeout [ 514.134049][ T5850] Bluetooth: hci8: command tx timeout [ 515.254215][ T5850] Bluetooth: hci9: command tx timeout [ 515.819409][ T5848] Bluetooth: hci1: command tx timeout [ 515.820781][ T5850] Bluetooth: hci6: command tx timeout [ 516.054226][ T5850] Bluetooth: hci7: command tx timeout [ 516.214071][ T5850] Bluetooth: hci8: command tx timeout [ 517.334263][ T5850] Bluetooth: hci9: command tx timeout [ 517.899360][ T5848] Bluetooth: hci1: command tx timeout [ 517.899406][ T5850] Bluetooth: hci6: command tx timeout [ 518.134102][ T5850] Bluetooth: hci7: command tx timeout [ 518.294137][ T5850] Bluetooth: hci8: command tx timeout [ 519.414191][ T5850] Bluetooth: hci9: command tx timeout [ 570.345044][ T5848] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 570.348639][ T5848] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 570.349445][ T5848] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 570.350328][ T5848] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 570.350900][ T5848] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 570.434927][ T5850] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 570.438436][ T5850] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 570.439242][ T5850] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 570.440097][ T5850] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 570.440733][ T5850] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 570.785324][T21664] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 570.788889][T21664] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 570.789678][T21664] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 570.790567][T21664] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 570.791136][T21664] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 570.874929][ T5850] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 570.877627][ T5850] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 570.878436][ T5850] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 570.879307][ T5850] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 570.879871][ T5850] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 571.834908][ T5848] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 571.837551][ T5848] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 571.838349][ T5848] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 571.839215][ T5848] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 571.839784][ T5848] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 572.374046][ T5848] Bluetooth: hci10: command tx timeout [ 572.454192][ T5848] Bluetooth: hci11: command tx timeout [ 572.854353][ T5848] Bluetooth: hci12: command tx timeout [ 572.934173][ T5848] Bluetooth: hci13: command tx timeout [ 573.894161][ T5848] Bluetooth: hci14: command tx timeout [ 574.454147][ T5848] Bluetooth: hci10: command tx timeout [ 574.534200][ T5848] Bluetooth: hci11: command tx timeout [ 574.934212][ T5848] Bluetooth: hci12: command tx timeout [ 575.014073][ T5848] Bluetooth: hci13: command tx timeout [ 575.974096][ T5848] Bluetooth: hci14: command tx timeout [ 576.534133][ T5848] Bluetooth: hci10: command tx timeout [ 576.614202][ T5848] Bluetooth: hci11: command tx timeout [ 577.014011][ T5848] Bluetooth: hci12: command tx timeout [ 577.094081][ T5848] Bluetooth: hci13: command tx timeout [ 578.054050][ T5848] Bluetooth: hci14: command tx timeout [ 578.614103][ T5848] Bluetooth: hci10: command tx timeout [ 578.694246][ T5848] Bluetooth: hci11: command tx timeout [ 579.094090][ T5848] Bluetooth: hci12: command tx timeout [ 579.174250][ T5848] Bluetooth: hci13: command tx timeout [ 580.134030][ T5848] Bluetooth: hci14: command tx timeout [ 589.882772][ T5204] udevd[5204]: worker [17388] /devices/virtual/block/nbd1 timeout; kill it [ 589.882875][ T5204] udevd[5204]: seq 30460 '/devices/virtual/block/nbd1' killed [ 599.013837][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 599.013863][ C0] rcu: 0-....: (1 GPs behind) idle=5dc4/1/0x4000000000000000 softirq=97724/97727 fqs=5245 [ 599.014501][ C0] rcu: hardirqs softirqs csw/system [ 599.014513][ C0] rcu: number: 6035 0 0 [ 599.014525][ C0] rcu: cputime: 124 52375 3 ==> 52500(ms) [ 599.014548][ C0] rcu: (t=10501 jiffies g=89157 q=2202 ncpus=2) [ 599.014572][ C0] CPU: 0 UID: 0 PID: 21620 Comm: syz.2.3925 Not tainted syzkaller #0 PREEMPT(full) [ 599.014614][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.014625][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x2f/0x90 [ 599.014652][ C0] Code: 8b 04 24 65 48 8b 14 25 08 40 80 92 65 8b 0d a8 45 bf 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 6c 16 00 00 00 <74> 52 8b 8a 48 16 00 00 83 f9 03 75 47 48 8b 8a 50 16 00 00 44 8b [ 599.014667][ C0] RSP: 0018:ffffc90000007cd0 EFLAGS: 00000246 [ 599.014691][ C0] RAX: ffffffff8970cf5c RBX: 000000000000000c RCX: 0000000000000100 [ 599.014702][ C0] RDX: ffff888065ec3d00 RSI: 000000000000000c RDI: 000000000000000a [ 599.014713][ C0] RBP: 1ffff1100920c26a R08: ffffffff89702936 R09: ffffffff8df41aa0 [ 599.014726][ C0] R10: 0000000000000001 R11: ffffffff89635210 R12: dffffc0000000000 [ 599.014738][ C0] R13: ffff888049061354 R14: 000000000000000a R15: 0000000000000008 [ 599.014749][ C0] FS: 00007f1a2fdf66c0(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000 [ 599.014764][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 599.014776][ C0] CR2: 0000001b31d63fff CR3: 0000000032bce000 CR4: 00000000003526f0 [ 599.014791][ C0] Call Trace: [ 599.014798][ C0] [ 599.014804][ C0] taprio_dequeue_tc_priority+0x20c/0x750 [ 599.014834][ C0] ? taprio_dequeue+0x26/0x550 [ 599.014857][ C0] taprio_dequeue+0x186/0x550 [ 599.014876][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 599.014899][ C0] __qdisc_run+0x23f/0x1510 [ 599.014936][ C0] qdisc_run+0xc7/0x300 [ 599.014954][ C0] ? net_tx_action+0x58c/0x900 [ 599.014971][ C0] net_tx_action+0x717/0x900 [ 599.014994][ C0] handle_softirqs+0x22b/0x7c0 [ 599.015014][ C0] ? __irq_exit_rcu+0x60/0x150 [ 599.015039][ C0] __irq_exit_rcu+0x60/0x150 [ 599.015055][ C0] irq_exit_rcu+0x9/0x30 [ 599.015070][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 599.015088][ C0] [ 599.015094][ C0] [ 599.015102][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 599.015119][ C0] RIP: 0010:console_flush_all+0x7fc/0xb00 [ 599.015140][ C0] Code: ff ff e8 b7 f9 1f 00 90 0f 0b 90 e9 85 fc ff ff e8 a9 f9 1f 00 e8 14 42 b9 09 48 85 db 74 c0 e8 9a f9 1f 00 fb 48 8b 5c 24 10 <48> 8b 44 24 20 42 80 3c 28 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 6b [ 599.015154][ C0] RSP: 0018:ffffc9000d676a20 EFLAGS: 00000283 [ 599.015167][ C0] RAX: ffffffff81a0ff16 RBX: ffffc9000d676b80 RCX: 0000000000080000 [ 599.015179][ C0] RDX: ffffc9001cb0f000 RSI: 0000000000002836 RDI: 0000000000002837 [ 599.015190][ C0] RBP: ffffc9000d676b30 R08: ffffffff8f823877 R09: 1ffffffff1f0470e [ 599.015203][ C0] R10: dffffc0000000000 R11: fffffbfff1f0470f R12: 0000000000000001 [ 599.015214][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8e792280 [ 599.015234][ C0] ? console_flush_all+0x7f6/0xb00 [ 599.015266][ C0] ? console_flush_all+0x11a/0xb00 [ 599.015293][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 599.015318][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 599.015343][ C0] console_unlock+0xbb/0x190 [ 599.015366][ C0] ? __pfx_console_unlock+0x10/0x10 [ 599.015386][ C0] ? _printk+0xcf/0x120 [ 599.015413][ C0] vprintk_emit+0x47b/0x550 [ 599.015431][ C0] ? unwind_get_return_address+0x4d/0x90 [ 599.015453][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 599.015482][ C0] _printk+0xcf/0x120 [ 599.015508][ C0] ? __pfx__printk+0x10/0x10 [ 599.015531][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 599.015548][ C0] ? ___ratelimit+0x5a0/0x900 [ 599.015573][ C0] __nla_validate_parse+0x1719/0x2d40 [ 599.015591][ C0] ? ___sys_sendmsg+0x21f/0x2a0 [ 599.015609][ C0] ? __x64_sys_sendmsg+0x19b/0x260 [ 599.015646][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 599.015683][ C0] ? reacquire_held_locks+0x104/0x190 [ 599.015701][ C0] ? rtnl_link_ops_get+0x23/0x250 [ 599.015729][ C0] ? rtnl_link_ops_get+0x23/0x250 [ 599.015751][ C0] __nla_parse+0x40/0x60 [ 599.015773][ C0] rtnl_newlink+0x7ac/0x1c90 [ 599.015793][ C0] ? kasan_save_track+0x3e/0x80 [ 599.015809][ C0] ? kasan_save_free_info+0x46/0x50 [ 599.015830][ C0] ? nlmon_xmit+0xb0/0x100 [ 599.015851][ C0] ? netlink_deliver_tap+0x19c/0x1b0 [ 599.015871][ C0] ? netlink_unicast+0x7fa/0x9e0 [ 599.015888][ C0] ? netlink_sendmsg+0x805/0xb30 [ 599.015910][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 599.015925][ C0] ? do_syscall_64+0xec/0xf80 [ 599.015942][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.015994][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 599.016010][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 599.016034][ C0] ? kmem_cache_free+0x197/0x620 [ 599.016051][ C0] ? nlmon_xmit+0xb0/0x100 [ 599.016080][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 599.016106][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 599.016123][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 599.016140][ C0] ? __dev_queue_xmit+0x280/0x3100 [ 599.016160][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 599.016185][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 599.016218][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 599.016236][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 599.016259][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 599.016277][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.016293][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 599.016311][ C0] ? __asan_memcpy+0x40/0x70 [ 599.016325][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 599.016353][ C0] netlink_rcv_skb+0x208/0x470 [ 599.016374][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.016395][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.016428][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.016457][ C0] netlink_unicast+0x82f/0x9e0 [ 599.016487][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 599.016508][ C0] ? netlink_sendmsg+0x642/0xb30 [ 599.016528][ C0] ? skb_put+0x11b/0x210 [ 599.016550][ C0] netlink_sendmsg+0x805/0xb30 [ 599.016581][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.016606][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 599.016628][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.016642][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.016665][ C0] __sock_sendmsg+0x21c/0x270 [ 599.016695][ C0] ____sys_sendmsg+0x505/0x820 [ 599.016721][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.016750][ C0] ? import_iovec+0x74/0xa0 [ 599.016774][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 599.016796][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.016823][ C0] ? futex_wake+0x4b2/0x560 [ 599.016871][ C0] ? __fget_files+0x2a/0x420 [ 599.016890][ C0] ? __fget_files+0x3a0/0x420 [ 599.016920][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 599.016944][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.016974][ C0] ? rcu_is_watching+0x15/0xb0 [ 599.017007][ C0] do_syscall_64+0xec/0xf80 [ 599.017026][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.017042][ C0] ? trace_irq_disable+0x37/0x100 [ 599.017061][ C0] ? clear_bhb_loop+0x60/0xb0 [ 599.017082][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.017099][ C0] RIP: 0033:0x7f1a31b8f749 [ 599.017116][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.017130][ C0] RSP: 002b:00007f1a2fdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.017147][ C0] RAX: ffffffffffffffda RBX: 00007f1a31de6090 RCX: 00007f1a31b8f749 [ 599.017160][ C0] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 599.017171][ C0] RBP: 00007f1a31c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.017182][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.017193][ C0] R13: 00007f1a31de6128 R14: 00007f1a31de6090 R15: 00007ffe0601fe28 [ 599.017224][ C0] [ 629.335449][ T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 13515 jiffies s: 67041 root: 0x1/. [ 629.335501][ T18] rcu: blocking rcu_node structures (internal RCU debug): [ 629.335524][ T18] Sending NMI from CPU 1 to CPUs 0: [ 629.335557][ C0] NMI backtrace for cpu 0 [ 629.335572][ C0] CPU: 0 UID: 0 PID: 21620 Comm: syz.2.3925 Not tainted syzkaller #0 PREEMPT(full) [ 629.335590][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.335601][ C0] RIP: 0010:taprio_dequeue_tc_priority+0x247/0x750 [ 629.335623][ C0] Code: 93 01 00 00 45 89 75 00 4c 8b 7c 24 28 49 83 ff 10 4c 8b 74 24 30 0f 87 99 01 00 00 42 0f b6 44 25 00 84 c0 0f 85 33 02 00 00 <41> 8b 5d 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 39 02 [ 629.335637][ C0] RSP: 0018:ffffc90000007cd8 EFLAGS: 00000246 [ 629.335651][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000100 [ 629.335662][ C0] RDX: ffff888065ec3d00 RSI: 000000000000000c RDI: 000000000000000c [ 629.335672][ C0] RBP: 1ffff1100920c26a R08: ffffffff89702936 R09: ffffffff8df41aa0 [ 629.335684][ C0] R10: 0000000000000001 R11: ffffffff89635210 R12: dffffc0000000000 [ 629.335695][ C0] R13: ffff888049061354 R14: ffff8880651984c8 R15: 0000000000000002 [ 629.335706][ C0] FS: 00007f1a2fdf66c0(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000 [ 629.335720][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 629.335731][ C0] CR2: 0000001b31d63fff CR3: 0000000032bce000 CR4: 00000000003526f0 [ 629.335746][ C0] Call Trace: [ 629.335753][ C0] [ 629.335768][ C0] ? taprio_dequeue+0x26/0x550 [ 629.335789][ C0] taprio_dequeue+0x186/0x550 [ 629.335807][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 629.335826][ C0] __qdisc_run+0x23f/0x1510 [ 629.335853][ C0] qdisc_run+0xc7/0x300 [ 629.335876][ C0] ? net_tx_action+0x58c/0x900 [ 629.335892][ C0] net_tx_action+0x717/0x900 [ 629.335910][ C0] handle_softirqs+0x22b/0x7c0 [ 629.335927][ C0] ? __irq_exit_rcu+0x60/0x150 [ 629.335946][ C0] __irq_exit_rcu+0x60/0x150 [ 629.335961][ C0] irq_exit_rcu+0x9/0x30 [ 629.335974][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 629.335992][ C0] [ 629.335997][ C0] [ 629.336004][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 629.336021][ C0] RIP: 0010:console_flush_all+0x7fc/0xb00 [ 629.336040][ C0] Code: ff ff e8 b7 f9 1f 00 90 0f 0b 90 e9 85 fc ff ff e8 a9 f9 1f 00 e8 14 42 b9 09 48 85 db 74 c0 e8 9a f9 1f 00 fb 48 8b 5c 24 10 <48> 8b 44 24 20 42 80 3c 28 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 6b [ 629.336053][ C0] RSP: 0018:ffffc9000d676a20 EFLAGS: 00000283 [ 629.336066][ C0] RAX: ffffffff81a0ff16 RBX: ffffc9000d676b80 RCX: 0000000000080000 [ 629.336078][ C0] RDX: ffffc9001cb0f000 RSI: 0000000000002836 RDI: 0000000000002837 [ 629.336089][ C0] RBP: ffffc9000d676b30 R08: ffffffff8f823877 R09: 1ffffffff1f0470e [ 629.336100][ C0] R10: dffffc0000000000 R11: fffffbfff1f0470f R12: 0000000000000001 [ 629.336111][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8e792280 [ 629.336125][ C0] ? console_flush_all+0x7f6/0xb00 [ 629.336150][ C0] ? console_flush_all+0x11a/0xb00 [ 629.336171][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 629.336191][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 629.336213][ C0] console_unlock+0xbb/0x190 [ 629.336230][ C0] ? __pfx_console_unlock+0x10/0x10 [ 629.336248][ C0] ? _printk+0xcf/0x120 [ 629.336270][ C0] vprintk_emit+0x47b/0x550 [ 629.336286][ C0] ? unwind_get_return_address+0x4d/0x90 [ 629.336305][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 629.336326][ C0] _printk+0xcf/0x120 [ 629.336347][ C0] ? __pfx__printk+0x10/0x10 [ 629.336366][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 629.336382][ C0] ? ___ratelimit+0x5a0/0x900 [ 629.336401][ C0] __nla_validate_parse+0x1719/0x2d40 [ 629.336419][ C0] ? ___sys_sendmsg+0x21f/0x2a0 [ 629.336436][ C0] ? __x64_sys_sendmsg+0x19b/0x260 [ 629.336461][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 629.336484][ C0] ? reacquire_held_locks+0x104/0x190 [ 629.336500][ C0] ? rtnl_link_ops_get+0x23/0x250 [ 629.336522][ C0] ? rtnl_link_ops_get+0x23/0x250 [ 629.336540][ C0] __nla_parse+0x40/0x60 [ 629.336558][ C0] rtnl_newlink+0x7ac/0x1c90 [ 629.336576][ C0] ? kasan_save_track+0x3e/0x80 [ 629.336590][ C0] ? kasan_save_free_info+0x46/0x50 [ 629.336610][ C0] ? nlmon_xmit+0xb0/0x100 [ 629.336629][ C0] ? netlink_deliver_tap+0x19c/0x1b0 [ 629.336648][ C0] ? netlink_unicast+0x7fa/0x9e0 [ 629.336664][ C0] ? netlink_sendmsg+0x805/0xb30 [ 629.336683][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 629.336698][ C0] ? do_syscall_64+0xec/0xf80 [ 629.336714][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.336746][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 629.336760][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 629.336779][ C0] ? kmem_cache_free+0x197/0x620 [ 629.336794][ C0] ? nlmon_xmit+0xb0/0x100 [ 629.336816][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 629.336835][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 629.336850][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 629.336870][ C0] ? __dev_queue_xmit+0x280/0x3100 [ 629.336889][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 629.336907][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 629.336931][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 629.336946][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 629.336965][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 629.336980][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 629.336996][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 629.337011][ C0] ? __asan_memcpy+0x40/0x70 [ 629.337025][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 629.337044][ C0] netlink_rcv_skb+0x208/0x470 [ 629.337063][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 629.337080][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 629.337104][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 629.337127][ C0] netlink_unicast+0x82f/0x9e0 [ 629.337148][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 629.337166][ C0] ? netlink_sendmsg+0x642/0xb30 [ 629.337185][ C0] ? skb_put+0x11b/0x210 [ 629.337203][ C0] netlink_sendmsg+0x805/0xb30 [ 629.337227][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.337248][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 629.337266][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 629.337281][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.337300][ C0] __sock_sendmsg+0x21c/0x270 [ 629.337322][ C0] ____sys_sendmsg+0x505/0x820 [ 629.337342][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.337364][ C0] ? import_iovec+0x74/0xa0 [ 629.337382][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 629.337401][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.337422][ C0] ? futex_wake+0x4b2/0x560 [ 629.337452][ C0] ? __fget_files+0x2a/0x420 [ 629.337470][ C0] ? __fget_files+0x3a0/0x420 [ 629.337491][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 629.337509][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 629.337532][ C0] ? rcu_is_watching+0x15/0xb0 [ 629.337555][ C0] do_syscall_64+0xec/0xf80 [ 629.337571][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.337585][ C0] ? trace_irq_disable+0x37/0x100 [ 629.337604][ C0] ? clear_bhb_loop+0x60/0xb0 [ 629.337620][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.337635][ C0] RIP: 0033:0x7f1a31b8f749 [ 629.337649][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.337662][ C0] RSP: 002b:00007f1a2fdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.337677][ C0] RAX: ffffffffffffffda RBX: 00007f1a31de6090 RCX: 00007f1a31b8f749 [ 629.337689][ C0] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 629.337699][ C0] RBP: 00007f1a31c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 629.337709][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.337719][ C0] R13: 00007f1a31de6128 R14: 00007f1a31de6090 R15: 00007ffe0601fe28 [ 629.337738][ C0] [ 631.455380][T21679] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 631.458429][T21679] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 631.530175][T21682] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 631.532341][T21682] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 631.533411][T21682] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 631.535145][T21682] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 631.538433][T21682] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 631.539054][T21682] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 631.539275][T21682] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 631.539875][T21682] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 631.540576][T21682] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 631.540926][T21682] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 631.544354][T21683] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 631.544557][T21682] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 631.545263][T21683] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 631.546519][T21682] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 631.546709][T21683] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 631.547140][T21683] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 631.554466][T21641] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 631.556803][T21641] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 632.314895][T21683] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 632.318472][T21683] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 632.319275][T21683] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 632.320138][T21683] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 632.320768][T21683] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 633.574222][T21679] Bluetooth: hci15: command tx timeout [ 633.575085][T21641] Bluetooth: hci16: command tx timeout [ 633.575488][T21683] Bluetooth: hci17: command tx timeout [ 633.654805][T21683] Bluetooth: hci18: command tx timeout [ 634.379264][T21683] Bluetooth: hci19: command tx timeout [ 635.654789][ T5850] Bluetooth: hci16: command tx timeout [ 635.654822][ T5850] Bluetooth: hci15: command tx timeout [ 635.654929][T21683] Bluetooth: hci17: command tx timeout [ 635.734047][ T5848] Bluetooth: hci18: command tx timeout [ 636.459290][ T5848] Bluetooth: hci19: command tx timeout [ 636.539037][T21688] Bluetooth: hci6: command 0x0406 tx timeout [ 636.539074][T21688] Bluetooth: hci1: command 0x0406 tx timeout [ 636.539097][T21688] Bluetooth: hci8: command 0x0406 tx timeout [ 636.539148][T21683] Bluetooth: hci7: command 0x0406 tx timeout [ 636.539183][ T5848] Bluetooth: hci9: command 0x0406 tx timeout [ 637.734205][ T5848] Bluetooth: hci16: command tx timeout [ 637.734294][T21689] Bluetooth: hci15: command tx timeout [ 637.734355][ T5850] Bluetooth: hci17: command tx timeout [ 637.813999][ T5850] Bluetooth: hci18: command tx timeout [ 638.539269][ T5850] Bluetooth: hci19: command tx timeout [ 639.814104][ T5848] Bluetooth: hci16: command tx timeout [ 639.814152][T21689] Bluetooth: hci15: command tx timeout [ 639.814185][ T5850] Bluetooth: hci17: command tx timeout [ 639.894199][ T5850] Bluetooth: hci18: command tx timeout [ 640.619222][ T5850] Bluetooth: hci19: command tx timeout [ 641.494514][ T31] INFO: task dhcpcd:5499 blocked for more than 143 seconds. [ 641.494539][ T31] Not tainted syzkaller #0 [ 641.494551][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 641.494561][ T31] task:dhcpcd state:D stack:21240 pid:5499 tgid:5499 ppid:5498 task_flags:0x400140 flags:0x00080000 [ 641.494612][ T31] Call Trace: [ 641.494620][ T31] [ 641.494643][ T31] __schedule+0x149b/0x4fd0 [ 641.494700][ T31] ? __pfx___schedule+0x10/0x10 [ 641.494731][ T31] ? schedule+0x91/0x360 [ 641.494756][ T31] schedule+0x165/0x360 [ 641.494780][ T31] schedule_preempt_disabled+0x13/0x30 [ 641.494801][ T31] __mutex_lock+0x7e6/0x1350 [ 641.494830][ T31] ? __mutex_lock+0x5bb/0x1350 [ 641.494858][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 641.494888][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 641.494918][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 641.494942][ T31] ? __nla_parse+0x40/0x60 [ 641.494969][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 641.494993][ T31] ? unwind_get_return_address+0x4d/0x90 [ 641.495017][ T31] ? arch_stack_walk+0xfc/0x150 [ 641.495045][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 641.495088][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 641.495112][ T31] rtnetlink_rcv_msg+0x7cf/0xb70 [ 641.495139][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 641.495161][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 641.495182][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 641.495218][ T31] netlink_rcv_skb+0x208/0x470 [ 641.495245][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 641.495270][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 641.495308][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 641.495341][ T31] netlink_unicast+0x82f/0x9e0 [ 641.495374][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 641.495398][ T31] ? netlink_sendmsg+0x642/0xb30 [ 641.495422][ T31] ? skb_put+0x11b/0x210 [ 641.495449][ T31] netlink_sendmsg+0x805/0xb30 [ 641.495484][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.495514][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 641.495540][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 641.495559][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.495586][ T31] __sock_sendmsg+0x21c/0x270 [ 641.495617][ T31] ____sys_sendmsg+0x505/0x820 [ 641.495654][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.495688][ T31] ? import_iovec+0x74/0xa0 [ 641.495716][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 641.495743][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.495771][ T31] ? count_memcg_event_mm+0x21/0x260 [ 641.495833][ T31] ? __pfx_handle_mm_fault+0x10/0x10 [ 641.495865][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 641.495893][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.495928][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 641.495960][ T31] do_syscall_64+0xec/0xf80 [ 641.495983][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.496002][ T31] ? trace_irq_disable+0x37/0x100 [ 641.496025][ T31] ? clear_bhb_loop+0x60/0xb0 [ 641.496048][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.496068][ T31] RIP: 0033:0x7f095ef0a407 [ 641.496086][ T31] RSP: 002b:00007ffcd2cf8320 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 641.496108][ T31] RAX: ffffffffffffffda RBX: 00007f095ee80740 RCX: 00007f095ef0a407 [ 641.496124][ T31] RDX: 0000000000000000 RSI: 00007ffcd2d0c500 RDI: 0000000000000004 [ 641.496138][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 641.496151][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcd2d1c730 [ 641.496165][ T31] R13: 00007f095ee806c8 R14: 0000000000000044 R15: 00007ffcd2d0c500 [ 641.496199][ T31] [ 641.496312][ T31] INFO: task syz.1.3922:21600 blocked for more than 143 seconds. [ 641.496327][ T31] Not tainted syzkaller #0 [ 641.496338][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 641.496348][ T31] task:syz.1.3922 state:D stack:25752 pid:21600 tgid:21600 ppid:17766 task_flags:0x400040 flags:0x00080002 [ 641.496398][ T31] Call Trace: [ 641.496406][ T31] [ 641.496420][ T31] __schedule+0x149b/0x4fd0 [ 641.496443][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 641.496476][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 641.496512][ T31] ? __pfx___schedule+0x10/0x10 [ 641.496544][ T31] ? schedule+0x91/0x360 [ 641.496569][ T31] schedule+0x165/0x360 [ 641.496593][ T31] synchronize_rcu_expedited+0x5a7/0x6e0 [ 641.496623][ T31] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 641.496653][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 641.496679][ T31] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 641.496729][ T31] packet_release+0x9e1/0xcb0 [ 641.496763][ T31] ? __pfx_packet_release+0x10/0x10 [ 641.496787][ T31] ? down_write+0x162/0x1f0 [ 641.496825][ T31] sock_close+0xc3/0x240 [ 641.496852][ T31] ? __pfx_sock_close+0x10/0x10 [ 641.496878][ T31] __fput+0x44c/0xa70 [ 641.496915][ T31] task_work_run+0x1d4/0x260 [ 641.496943][ T31] ? __pfx_task_work_run+0x10/0x10 [ 641.496978][ T31] exit_to_user_mode_loop+0xef/0x4e0 [ 641.497000][ T31] ? rcu_is_watching+0x15/0xb0 [ 641.497025][ T31] do_syscall_64+0x2c1/0xf80 [ 641.497048][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.497067][ T31] ? clear_bhb_loop+0x60/0xb0 [ 641.497090][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.497109][ T31] RIP: 0033:0x7f0224f8f749 [ 641.497125][ T31] RSP: 002b:00007ffe75ed3328 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 641.497146][ T31] RAX: 0000000000000000 RBX: 00007f02251e7da0 RCX: 00007f0224f8f749 [ 641.497160][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 641.497174][ T31] RBP: 00007f02251e7da0 R08: 0000000000000214 R09: 0000001e75ed361f [ 641.497189][ T31] R10: 00007f02251e7cb0 R11: 0000000000000246 R12: 0000000000078b09 [ 641.497203][ T31] R13: 00007f02251e6090 R14: ffffffffffffffff R15: 00007ffe75ed3440 [ 641.497238][ T31] [ 641.497247][ T31] INFO: task syz.1.3922:21601 blocked for more than 143 seconds. [ 641.497261][ T31] Not tainted syzkaller #0 [ 641.497271][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 641.497281][ T31] task:syz.1.3922 state:D stack:26200 pid:21601 tgid:21600 ppid:17766 task_flags:0x400140 flags:0x00080002 [ 641.497331][ T31] Call Trace: [ 641.497338][ T31] [ 641.497352][ T31] __schedule+0x149b/0x4fd0 [ 641.497385][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 641.497410][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 641.497442][ T31] ? __kernel_text_address+0xd/0x40 [ 641.497471][ T31] ? __pfx___schedule+0x10/0x10 [ 641.497502][ T31] ? schedule+0x91/0x360 [ 641.497527][ T31] schedule+0x165/0x360 [ 641.497551][ T31] schedule_preempt_disabled+0x13/0x30 [ 641.497572][ T31] __mutex_lock+0x7e6/0x1350 [ 641.497599][ T31] ? __mutex_lock+0x5bb/0x1350 [ 641.497632][ T31] ? ip_tunnel_init_net+0x2ab/0x800 [ 641.497663][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 641.497695][ T31] ? net_generic+0x1e/0x240 [ 641.497719][ T31] ? net_generic+0x1e/0x240 [ 641.497751][ T31] ip_tunnel_init_net+0x2ab/0x800 [ 641.497785][ T31] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 641.497817][ T31] ? rcu_is_watching+0x15/0xb0 [ 641.497840][ T31] ? trace_kmalloc+0x1f/0xb0 [ 641.497857][ T31] ? __kmalloc_noprof+0x43e/0x800 [ 641.497880][ T31] vti_init_net+0x2f/0x100 [ 641.497904][ T31] ops_init+0x35c/0x5c0 [ 641.497936][ T31] setup_net+0x110/0x330 [ 641.497960][ T31] ? __pfx_setup_net+0x10/0x10 [ 641.497985][ T31] ? preinit_net+0x47d/0x780 [ 641.498008][ T31] copy_net_ns+0x3e3/0x570 [ 641.498033][ T31] create_new_namespaces+0x3e7/0x6a0 [ 641.498058][ T31] ? security_capable+0x7e/0x2e0 [ 641.498088][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 641.498112][ T31] ksys_unshare+0x4c8/0x8c0 [ 641.498142][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 641.498166][ T31] ? rcu_is_watching+0x15/0xb0 [ 641.498199][ T31] __x64_sys_unshare+0x38/0x50 [ 641.498221][ T31] do_syscall_64+0xec/0xf80 [ 641.498243][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.498262][ T31] ? trace_irq_disable+0x37/0x100 [ 641.498284][ T31] ? clear_bhb_loop+0x60/0xb0 [ 641.498308][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.498326][ T31] RIP: 0033:0x7f0224f8f749 [ 641.498342][ T31] RSP: 002b:00007f0225e1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 641.498363][ T31] RAX: ffffffffffffffda RBX: 00007f02251e5fa0 RCX: 00007f0224f8f749 [ 641.498378][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 641.498392][ T31] RBP: 00007f0225013f91 R08: 0000000000000000 R09: 0000000000000000 [ 641.498405][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.498418][ T31] R13: 00007f02251e6038 R14: 00007f02251e5fa0 R15: 00007ffe75ed31c8 [ 641.498452][ T31] [ 641.498461][ T31] INFO: task syz.2.3925:21617 blocked for more than 143 seconds. [ 641.498475][ T31] Not tainted syzkaller #0 [ 641.498486][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 641.498496][ T31] task:syz.2.3925 state:D stack:25688 pid:21617 tgid:21616 ppid:17042 task_flags:0x400140 flags:0x00080002 [ 641.498545][ T31] Call Trace: [ 641.498553][ T31] [ 641.498566][ T31] __schedule+0x149b/0x4fd0 [ 641.498617][ T31] ? __pfx___schedule+0x10/0x10 [ 641.498653][ T31] ? schedule+0x91/0x360 [ 641.498678][ T31] schedule+0x165/0x360 [ 641.498702][ T31] schedule_preempt_disabled+0x13/0x30 [ 641.498722][ T31] __mutex_lock+0x7e6/0x1350 [ 641.498750][ T31] ? __mutex_lock+0x5bb/0x1350 [ 641.498778][ T31] ? synchronize_rcu_expedited+0x36e/0x6e0 [ 641.498807][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 641.498832][ T31] ? do_raw_spin_lock+0x121/0x290 [ 641.498866][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 641.498895][ T31] synchronize_rcu_expedited+0x36e/0x6e0 [ 641.498923][ T31] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 641.498950][ T31] ? __pfx_fifo_destroy+0x10/0x10 [ 641.498985][ T31] ? __is_module_percpu_address+0x28/0x3f0 [ 641.499009][ T31] ? __pfx_fifo_destroy+0x10/0x10 [ 641.499031][ T31] ? __is_module_percpu_address+0x39b/0x3f0 [ 641.499056][ T31] ? is_module_address+0x17/0xf0 [ 641.499072][ T31] ? is_module_address+0x17/0xf0 [ 641.499095][ T31] ? lockdep_unlock+0x6c/0xf0 [ 641.499124][ T31] ? __pfx_fifo_destroy+0x10/0x10 [ 641.499146][ T31] __qdisc_destroy+0x166/0x400 [ 641.499173][ T31] taprio_destroy+0x263/0x550 [ 641.499204][ T31] ? __pfx_taprio_destroy+0x10/0x10 [ 641.499227][ T31] __qdisc_destroy+0x153/0x400 [ 641.499254][ T31] taprio_attach+0x25a/0x380 [ 641.499287][ T31] ? __pfx_taprio_attach+0x10/0x10 [ 641.499314][ T31] qdisc_graft+0x1175/0x1590 [ 641.499352][ T31] ? __pfx_qdisc_graft+0x10/0x10 [ 641.499377][ T31] ? qdisc_create+0xa52/0xea0 [ 641.499405][ T31] tc_modify_qdisc+0x16d3/0x2020 [ 641.499441][ T31] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 641.499493][ T31] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 641.499513][ T31] rtnetlink_rcv_msg+0x77c/0xb70 [ 641.499540][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 641.499561][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 641.499581][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 641.499603][ T31] ? __asan_memcpy+0x40/0x70 [ 641.499621][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 641.499657][ T31] netlink_rcv_skb+0x208/0x470 [ 641.499683][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 641.499708][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 641.499746][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 641.499780][ T31] netlink_unicast+0x82f/0x9e0 [ 641.499813][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 641.499839][ T31] ? netlink_sendmsg+0x642/0xb30 [ 641.499863][ T31] ? skb_put+0x11b/0x210 [ 641.499889][ T31] netlink_sendmsg+0x805/0xb30 [ 641.499925][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.499954][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 641.499980][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 641.499998][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.500025][ T31] __sock_sendmsg+0x21c/0x270 [ 641.500055][ T31] ____sys_sendmsg+0x505/0x820 [ 641.500085][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.500119][ T31] ? import_iovec+0x74/0xa0 [ 641.500146][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 641.500172][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.500204][ T31] ? futex_wait+0x285/0x360 [ 641.500255][ T31] ? __fget_files+0x2a/0x420 [ 641.500277][ T31] ? __fget_files+0x3a0/0x420 [ 641.500311][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 641.500338][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.500372][ T31] ? rcu_is_watching+0x15/0xb0 [ 641.500407][ T31] do_syscall_64+0xec/0xf80 [ 641.500428][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.500447][ T31] ? trace_irq_disable+0x37/0x100 [ 641.500469][ T31] ? clear_bhb_loop+0x60/0xb0 [ 641.500493][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.500511][ T31] RIP: 0033:0x7f1a31b8f749 [ 641.500527][ T31] RSP: 002b:00007f1a32947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.500548][ T31] RAX: ffffffffffffffda RBX: 00007f1a31de5fa0 RCX: 00007f1a31b8f749 [ 641.500562][ T31] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 641.500574][ T31] RBP: 00007f1a31c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 641.500588][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.500601][ T31] R13: 00007f1a31de6038 R14: 00007f1a31de5fa0 R15: 00007ffe0601fe28 [ 641.500640][ T31] [ 641.500650][ T31] INFO: task syz.6.3926:21619 blocked for more than 143 seconds. [ 641.500664][ T31] Not tainted syzkaller #0 [ 641.500675][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 641.500685][ T31] task:syz.6.3926 state:D stack:26080 pid:21619 tgid:21618 ppid:18777 task_flags:0x400140 flags:0x00080002 [ 641.500734][ T31] Call Trace: [ 641.500742][ T31] [ 641.500755][ T31] __schedule+0x149b/0x4fd0 [ 641.500778][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 641.500823][ T31] ? __pfx___schedule+0x10/0x10 [ 641.500856][ T31] ? schedule+0x91/0x360 [ 641.500881][ T31] schedule+0x165/0x360 [ 641.500905][ T31] synchronize_rcu_expedited+0x538/0x6e0 [ 641.500933][ T31] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 641.500967][ T31] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 641.500994][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 641.501033][ T31] __unregister_prot_hook+0x503/0x6e0 [ 641.501061][ T31] ? packet_do_bind+0x98/0xcd0 [ 641.501084][ T31] ? packet_do_bind+0x98/0xcd0 [ 641.501104][ T31] packet_do_bind+0x536/0xcd0 [ 641.501126][ T31] ? packet_do_bind+0x98/0xcd0 [ 641.501151][ T31] __sys_bind+0x2c6/0x3e0 [ 641.501174][ T31] ? __pfx___sys_bind+0x10/0x10 [ 641.501208][ T31] ? rcu_is_watching+0x15/0xb0 [ 641.501240][ T31] __x64_sys_bind+0x7a/0x90 [ 641.501262][ T31] do_syscall_64+0xec/0xf80 [ 641.501283][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.501302][ T31] ? trace_irq_disable+0x37/0x100 [ 641.501324][ T31] ? clear_bhb_loop+0x60/0xb0 [ 641.501348][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.501367][ T31] RIP: 0033:0x7f893b18f749 [ 641.501382][ T31] RSP: 002b:00007f893bfd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 641.501403][ T31] RAX: ffffffffffffffda RBX: 00007f893b3e5fa0 RCX: 00007f893b18f749 [ 641.501419][ T31] RDX: 0000000000000014 RSI: 0000200000000040 RDI: 0000000000000006 [ 641.501433][ T31] RBP: 00007f893b213f91 R08: 0000000000000000 R09: 0000000000000000 [ 641.501447][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.501460][ T31] R13: 00007f893b3e6038 R14: 00007f893b3e5fa0 R15: 00007ffe0037b4e8 [ 641.501494][ T31] [ 641.501503][ T31] INFO: task syz.6.3926:21623 blocked for more than 143 seconds. [ 641.501517][ T31] Not tainted syzkaller #0 [ 641.501527][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 641.501538][ T31] task:syz.6.3926 state:D stack:26080 pid:21623 tgid:21618 ppid:18777 task_flags:0x400140 flags:0x00080002 [ 641.501586][ T31] Call Trace: [ 641.501594][ T31] [ 641.501607][ T31] __schedule+0x149b/0x4fd0 [ 641.501663][ T31] ? __pfx___schedule+0x10/0x10 [ 641.501694][ T31] ? schedule+0x91/0x360 [ 641.501719][ T31] schedule+0x165/0x360 [ 641.501743][ T31] schedule_preempt_disabled+0x13/0x30 [ 641.501763][ T31] __mutex_lock+0x7e6/0x1350 [ 641.501791][ T31] ? __mutex_lock+0x5bb/0x1350 [ 641.501820][ T31] ? dev_ioctl+0x83c/0x1150 [ 641.501846][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 641.501877][ T31] ? dev_load+0x21/0x1f0 [ 641.501902][ T31] ? dev_load+0x21/0x1f0 [ 641.501925][ T31] dev_ioctl+0x83c/0x1150 [ 641.501952][ T31] sock_ioctl+0x719/0x790 [ 641.501981][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 641.502009][ T31] ? __fget_files+0x3a0/0x420 [ 641.502030][ T31] ? __fget_files+0x2a/0x420 [ 641.502057][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 641.502077][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 641.502103][ T31] __se_sys_ioctl+0xfc/0x170 [ 641.502132][ T31] do_syscall_64+0xec/0xf80 [ 641.502154][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.502172][ T31] ? trace_irq_disable+0x37/0x100 [ 641.502194][ T31] ? clear_bhb_loop+0x60/0xb0 [ 641.502218][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.502237][ T31] RIP: 0033:0x7f893b18f749 [ 641.502252][ T31] RSP: 002b:00007f893bfb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.502273][ T31] RAX: ffffffffffffffda RBX: 00007f893b3e6090 RCX: 00007f893b18f749 [ 641.502288][ T31] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000009 [ 641.502302][ T31] RBP: 00007f893b213f91 R08: 0000000000000000 R09: 0000000000000000 [ 641.502316][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.502329][ T31] R13: 00007f893b3e6128 R14: 00007f893b3e6090 R15: 00007ffe0037b4e8 [ 641.502363][ T31] [ 641.502372][ T31] INFO: task syz.5.3928:21627 blocked for more than 143 seconds. [ 641.502386][ T31] Not tainted syzkaller #0 [ 641.502396][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 641.502406][ T31] task:syz.5.3928 state:D stack:25592 pid:21627 tgid:21625 ppid:18466 task_flags:0x400140 flags:0x00080002 [ 641.502455][ T31] Call Trace: [ 641.502462][ T31] [ 641.502476][ T31] __schedule+0x149b/0x4fd0 [ 641.502498][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 641.502544][ T31] ? __pfx___schedule+0x10/0x10 [ 641.502576][ T31] ? schedule+0x91/0x360 [ 641.502601][ T31] schedule+0x165/0x360 [ 641.502630][ T31] synchronize_rcu_expedited+0x5a7/0x6e0 [ 641.502658][ T31] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 641.502683][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 641.502708][ T31] ? cpus_read_unlock+0xa6/0x140 [ 641.502726][ T31] ? __static_call_update+0x5a6/0x600 [ 641.502757][ T31] ? bpf_dispatcher_xdp+0x800/0x1000 [ 641.502784][ T31] ? bpf_dispatcher_xdp+0x800/0x1000 [ 641.502804][ T31] ? bpf_dispatcher_xdp+0x800/0x1000 [ 641.502823][ T31] bpf_dispatcher_change_prog+0xad2/0xc90 [ 641.502849][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 641.502871][ T31] ? bpf_dispatcher_xdp+0x800/0x1000 [ 641.502892][ T31] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 641.502917][ T31] ? 0xffffffffa0201a54 [ 641.502933][ T31] ? 0xffffffffa0209908 [ 641.502991][ T31] ? _copy_from_user+0x94/0xb0 [ 641.503014][ T31] ? bpf_test_init+0x113/0x150 [ 641.503036][ T31] ? xdp_convert_md_to_buff+0x5b/0x330 [ 641.503065][ T31] bpf_prog_test_run_xdp+0x736/0x1110 [ 641.503107][ T31] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 641.503138][ T31] ? __fget_files+0x2a/0x420 [ 641.503166][ T31] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 641.503193][ T31] bpf_prog_test_run+0x2c7/0x340 [ 641.503223][ T31] __sys_bpf+0x562/0x860 [ 641.503250][ T31] ? __pfx___sys_bpf+0x10/0x10 [ 641.503297][ T31] ? rcu_is_watching+0x15/0xb0 [ 641.503328][ T31] __x64_sys_bpf+0x7c/0x90 [ 641.503353][ T31] do_syscall_64+0xec/0xf80 [ 641.503374][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.503392][ T31] ? trace_irq_disable+0x37/0x100 [ 641.503415][ T31] ? clear_bhb_loop+0x60/0xb0 [ 641.503438][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.503457][ T31] RIP: 0033:0x7fadc6f8f749 [ 641.503473][ T31] RSP: 002b:00007fadc7e12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 641.503494][ T31] RAX: ffffffffffffffda RBX: 00007fadc71e6090 RCX: 00007fadc6f8f749 [ 641.503509][ T31] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 641.503523][ T31] RBP: 00007fadc7013f91 R08: 0000000000000000 R09: 0000000000000000 [ 641.503536][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.503549][ T31] R13: 00007fadc71e6128 R14: 00007fadc71e6090 R15: 00007ffced2290f8 [ 641.503584][ T31] [ 641.503593][ T31] INFO: task syz.4.3930:21633 blocked for more than 143 seconds. [ 641.503607][ T31] Not tainted syzkaller #0 [ 641.503617][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 641.503632][ T31] task:syz.4.3930 state:D stack:26296 pid:21633 tgid:21632 ppid:17423 task_flags:0x400140 flags:0x00080002 [ 641.503681][ T31] Call Trace: [ 641.503689][ T31] [ 641.503703][ T31] __schedule+0x149b/0x4fd0 [ 641.503724][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 641.503755][ T31] ? __schedule+0x14b1/0x4fd0 [ 641.504076][ T31] ? __pfx___schedule+0x10/0x10 [ 641.504111][ T31] ? schedule+0x91/0x360 [ 641.504136][ T31] schedule+0x165/0x360 [ 641.504160][ T31] synchronize_rcu_expedited+0x5a7/0x6e0 [ 641.504183][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 641.504207][ T31] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 641.504232][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 641.504287][ T31] nf_tables_abort+0x763d/0x89e0 [ 641.504308][ T31] ? do_syscall_64+0xec/0xf80 [ 641.504329][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.504373][ T31] ? __pfx_nf_tables_abort+0x10/0x10 [ 641.504417][ T31] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 641.504446][ T31] nfnetlink_rcv+0x1d18/0x2590 [ 641.504507][ T31] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 641.504548][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 641.504598][ T31] ? __netlink_deliver_tap+0x807/0x850 [ 641.504624][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 641.504673][ T31] netlink_unicast+0x82f/0x9e0 [ 641.504706][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 641.504732][ T31] ? netlink_sendmsg+0x642/0xb30 [ 641.504756][ T31] ? skb_put+0x11b/0x210 [ 641.504782][ T31] netlink_sendmsg+0x805/0xb30 [ 641.504818][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.504847][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 641.504873][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 641.504891][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.504918][ T31] __sock_sendmsg+0x21c/0x270 [ 641.504948][ T31] ____sys_sendmsg+0x505/0x820 [ 641.504978][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.505012][ T31] ? import_iovec+0x74/0xa0 [ 641.505039][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 641.505065][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.505096][ T31] ? futex_wake+0x4b2/0x560 [ 641.505147][ T31] ? __fget_files+0x2a/0x420 [ 641.505169][ T31] ? __fget_files+0x3a0/0x420 [ 641.505203][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 641.505230][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.505264][ T31] ? rcu_is_watching+0x15/0xb0 [ 641.505299][ T31] do_syscall_64+0xec/0xf80 [ 641.505321][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.505340][ T31] ? trace_irq_disable+0x37/0x100 [ 641.505362][ T31] ? clear_bhb_loop+0x60/0xb0 [ 641.505386][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.505404][ T31] RIP: 0033:0x7f947df8f749 [ 641.505421][ T31] RSP: 002b:00007f947ee43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.505443][ T31] RAX: ffffffffffffffda RBX: 00007f947e1e5fa0 RCX: 00007f947df8f749 [ 641.505458][ T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 641.505472][ T31] RBP: 00007f947e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 641.505485][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.505499][ T31] R13: 00007f947e1e6038 R14: 00007f947e1e5fa0 R15: 00007ffc79493698 [ 641.505533][ T31] [ 641.505573][ T31] [ 641.505573][ T31] Showing all locks held in the system: [ 641.505587][ T31] 1 lock held by khungtaskd/31: [ 641.505599][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 641.505684][ T31] 4 locks held by kworker/u8:10/2979: [ 641.505697][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 641.505749][ T31] #1: ffffc9000bc07bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 641.505799][ T31] #2: ffffffff8f305530 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 641.505851][ T31] #3: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x200 [ 641.505910][ T31] 3 locks held by kworker/u8:16/4554: [ 641.505923][ T31] #0: ffff88814cd43148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 641.505973][ T31] #1: ffffc9000def7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 641.506025][ T31] #2: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 641.506082][ T31] 1 lock held by dhcpcd/5499: [ 641.506094][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.506150][ T31] 2 locks held by getty/5594: [ 641.506162][ T31] #0: ffff88814d65d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 641.506220][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 641.506290][ T31] 3 locks held by kworker/u9:3/5844: [ 641.506302][ T31] #0: ffff888036573148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 641.506352][ T31] #1: ffffc9000411fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 641.506403][ T31] #2: ffff888033458ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 641.506463][ T31] 3 locks held by kworker/1:8/6196: [ 641.506475][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 641.506525][ T31] #1: ffffc9000b7ffbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 641.506575][ T31] #2: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 641.506639][ T31] 3 locks held by kworker/1:9/9169: [ 641.506651][ T31] #0: ffff88813ff16948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 641.506702][ T31] #1: ffffc9000d6f7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 641.506753][ T31] #2: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf10 [ 641.506810][ T31] 1 lock held by udevd/17388: [ 641.506822][ T31] #0: ffff888024e4b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 641.506883][ T31] 1 lock held by syz.1.3922/21600: [ 641.506896][ T31] #0: ffff8880505e5e08 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 641.506957][ T31] 2 locks held by syz.1.3922/21601: [ 641.506970][ T31] #0: ffffffff8f305530 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 641.507020][ T31] #1: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 641.507076][ T31] 2 locks held by syz.2.3925/21617: [ 641.507089][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 641.507141][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 641.507195][ T31] 6 locks held by syz.2.3925/21620: [ 641.507208][ T31] 2 locks held by syz.6.3926/21619: [ 641.507220][ T31] #0: ffff8880310ee260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 641.507270][ T31] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 641.507324][ T31] 1 lock held by syz.6.3926/21623: [ 641.507336][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 641.507387][ T31] 1 lock held by syz.5.3928/21627: [ 641.507400][ T31] #0: ffffffff8f315ce8 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90 [ 641.507456][ T31] 1 lock held by syz.4.3930/21633: [ 641.507468][ T31] #0: ffff888055741cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 641.507520][ T31] 1 lock held by syz-executor/21639: [ 641.507532][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.507587][ T31] 6 locks held by kworker/u9:0/21641: [ 641.507599][ T31] #0: ffff888036794948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 641.507655][ T31] #1: ffffc9000dee7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 641.507705][ T31] #2: ffff88806a3c4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 641.507758][ T31] #3: ffff88806a3c40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 641.507807][ T31] #4: ffffffff8f484cc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 641.507855][ T31] #5: ffff888036791b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 641.507910][ T31] 1 lock held by syz-executor/21643: [ 641.507922][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.507976][ T31] 1 lock held by syz-executor/21646: [ 641.507988][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.508043][ T31] 1 lock held by syz-executor/21648: [ 641.508054][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.508108][ T31] 1 lock held by syz-executor/21651: [ 641.508120][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.508174][ T31] 1 lock held by syz-executor/21655: [ 641.508186][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.508240][ T31] 1 lock held by syz-executor/21658: [ 641.508252][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.508306][ T31] 1 lock held by syz-executor/21661: [ 641.508317][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.508372][ T31] 1 lock held by syz-executor/21663: [ 641.508383][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.508437][ T31] 5 locks held by kworker/u9:1/21664: [ 641.508449][ T31] #0: ffff888078d75948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 641.508499][ T31] #1: ffffc9000de1fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 641.508550][ T31] #2: ffff888021ba4ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 641.508602][ T31] #3: ffff888021ba40c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 641.508658][ T31] #4: ffffffff8f484cc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 641.508707][ T31] 1 lock held by syz-executor/21667: [ 641.508719][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.508774][ T31] 1 lock held by syz-executor/21671: [ 641.508786][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.508840][ T31] 1 lock held by syz-executor/21674: [ 641.508852][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.508906][ T31] 1 lock held by syz-executor/21677: [ 641.508918][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.508972][ T31] 1 lock held by syz-executor/21678: [ 641.508983][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.509037][ T31] 5 locks held by kworker/u9:2/21679: [ 641.509049][ T31] #0: ffff888031112948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 641.509099][ T31] #1: ffffc9000dd7fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 641.509150][ T31] #2: ffff88807a024ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 641.509201][ T31] #3: ffff88807a0240c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 641.509249][ T31] #4: ffffffff8f484cc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 641.509298][ T31] 5 locks held by kworker/u9:4/21682: [ 641.509310][ T31] #0: ffff888078dd9148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 641.509360][ T31] #1: ffffc9000dcb7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 641.509410][ T31] #2: ffff8880518c8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 641.509462][ T31] #3: ffff8880518c80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 641.509511][ T31] #4: ffffffff8f484cc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 641.509559][ T31] 5 locks held by kworker/u9:8/21684: [ 641.509572][ T31] #0: ffff888036797948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 641.509622][ T31] #1: ffffc9000dc87bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 641.509676][ T31] #2: ffff88806cab0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 641.509728][ T31] #3: ffff88806cab00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 641.509777][ T31] #4: ffffffff8f484cc8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 641.509826][ T31] 1 lock held by syz-executor/21686: [ 641.509838][ T31] #0: ffffffff8f312908 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 641.509893][ T31] [ 641.509900][ T31] ============================================= [ 641.509900][ T31] [ 641.509910][ T31] NMI backtrace for cpu 1 [ 641.509923][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 641.509943][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.509953][ T31] Call Trace: [ 641.509961][ T31] [ 641.509969][ T31] dump_stack_lvl+0xe8/0x150 [ 641.509992][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 641.510019][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 641.510047][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 641.510074][ T31] sys_info+0x135/0x170 [ 641.510097][ T31] watchdog+0xf95/0xfe0 [ 641.510124][ T31] ? watchdog+0x20a/0xfe0 [ 641.510154][ T31] kthread+0x711/0x8a0 [ 641.510179][ T31] ? __pfx_watchdog+0x10/0x10 [ 641.510201][ T31] ? __pfx_kthread+0x10/0x10 [ 641.510225][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 641.510244][ T31] ? __pfx_kthread+0x10/0x10 [ 641.510266][ T31] ret_from_fork+0x510/0xa50 [ 641.510287][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 641.510303][ T31] ? __switch_to+0xc9e/0x1480 [ 641.510330][ T31] ? __pfx_kthread+0x10/0x10 [ 641.510353][ T31] ret_from_fork_asm+0x1a/0x30 [ 641.510390][ T31] [ 641.510397][ T31] Sending NMI from CPU 1 to CPUs 0: [ 641.510426][ C0] NMI backtrace for cpu 0 [ 641.510439][ C0] CPU: 0 UID: 0 PID: 21620 Comm: syz.2.3925 Not tainted syzkaller #0 PREEMPT(full) [ 641.510456][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.510466][ C0] RIP: 0010:taprio_dequeue_tc_priority+0x25f/0x750 [ 641.510484][ C0] Code: 99 01 00 00 42 0f b6 44 25 00 84 c0 0f 85 33 02 00 00 41 8b 5d 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 39 02 00 00 <45> 8b 36 89 df 44 89 f6 e8 b4 2a 50 f8 44 39 f3 73 15 48 8b 5c 24 [ 641.510497][ C0] RSP: 0018:ffffc90000007cd8 EFLAGS: 00000246 [ 641.510511][ C0] RAX: 0000000000000000 RBX: 0000000000000009 RCX: 0000000000000100 [ 641.510521][ C0] RDX: ffff888065ec3d00 RSI: 000000000000000c RDI: 0000000000000009 [ 641.510532][ C0] RBP: 1ffff1100920c26a R08: ffffffff89702936 R09: ffffffff8df41aa0 [ 641.510543][ C0] R10: 0000000000000001 R11: ffffffff89635210 R12: dffffc0000000000 [ 641.510554][ C0] R13: ffff888049061354 R14: ffff8880651984c8 R15: 0000000000000002 [ 641.510565][ C0] FS: 00007f1a2fdf66c0(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000 [ 641.510579][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.510591][ C0] CR2: 0000001b31d63fff CR3: 0000000032bce000 CR4: 00000000003526f0 [ 641.510605][ C0] Call Trace: [ 641.510611][ C0] [ 641.510624][ C0] ? taprio_dequeue+0x26/0x550 [ 641.510644][ C0] taprio_dequeue+0x186/0x550 [ 641.510662][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 641.510680][ C0] __qdisc_run+0x23f/0x1510 [ 641.510706][ C0] qdisc_run+0xc7/0x300 [ 641.510721][ C0] ? net_tx_action+0x58c/0x900 [ 641.510736][ C0] net_tx_action+0x717/0x900 [ 641.510754][ C0] handle_softirqs+0x22b/0x7c0 [ 641.510772][ C0] ? __irq_exit_rcu+0x60/0x150 [ 641.510790][ C0] __irq_exit_rcu+0x60/0x150 [ 641.510804][ C0] irq_exit_rcu+0x9/0x30 [ 641.510818][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 641.510835][ C0] [ 641.510841][ C0] [ 641.510847][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 641.510862][ C0] RIP: 0010:console_flush_all+0x7fc/0xb00 [ 641.510882][ C0] Code: ff ff e8 b7 f9 1f 00 90 0f 0b 90 e9 85 fc ff ff e8 a9 f9 1f 00 e8 14 42 b9 09 48 85 db 74 c0 e8 9a f9 1f 00 fb 48 8b 5c 24 10 <48> 8b 44 24 20 42 80 3c 28 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 6b [ 641.510894][ C0] RSP: 0018:ffffc9000d676a20 EFLAGS: 00000283 [ 641.510907][ C0] RAX: ffffffff81a0ff16 RBX: ffffc9000d676b80 RCX: 0000000000080000 [ 641.510918][ C0] RDX: ffffc9001cb0f000 RSI: 0000000000002836 RDI: 0000000000002837 [ 641.510929][ C0] RBP: ffffc9000d676b30 R08: ffffffff8f823877 R09: 1ffffffff1f0470e [ 641.510940][ C0] R10: dffffc0000000000 R11: fffffbfff1f0470f R12: 0000000000000001 [ 641.510951][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8e792280 [ 641.510966][ C0] ? console_flush_all+0x7f6/0xb00 [ 641.510989][ C0] ? console_flush_all+0x11a/0xb00 [ 641.511010][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 641.511030][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 641.511051][ C0] console_unlock+0xbb/0x190 [ 641.511069][ C0] ? __pfx_console_unlock+0x10/0x10 [ 641.511087][ C0] ? _printk+0xcf/0x120 [ 641.511108][ C0] vprintk_emit+0x47b/0x550 [ 641.511124][ C0] ? unwind_get_return_address+0x4d/0x90 [ 641.511142][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 641.511163][ C0] _printk+0xcf/0x120 [ 641.511184][ C0] ? __pfx__printk+0x10/0x10 [ 641.511204][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 641.511219][ C0] ? ___ratelimit+0x5a0/0x900 [ 641.511238][ C0] __nla_validate_parse+0x1719/0x2d40 [ 641.511254][ C0] ? ___sys_sendmsg+0x21f/0x2a0 [ 641.511270][ C0] ? __x64_sys_sendmsg+0x19b/0x260 [ 641.511296][ C0] ? __pfx___nla_validate_parse+0x10/0x10 [ 641.511318][ C0] ? reacquire_held_locks+0x104/0x190 [ 641.511335][ C0] ? rtnl_link_ops_get+0x23/0x250 [ 641.511356][ C0] ? rtnl_link_ops_get+0x23/0x250 [ 641.511381][ C0] __nla_parse+0x40/0x60 [ 641.511399][ C0] rtnl_newlink+0x7ac/0x1c90 [ 641.511417][ C0] ? kasan_save_track+0x3e/0x80 [ 641.511431][ C0] ? kasan_save_free_info+0x46/0x50 [ 641.511450][ C0] ? nlmon_xmit+0xb0/0x100 [ 641.511469][ C0] ? netlink_deliver_tap+0x19c/0x1b0 [ 641.511487][ C0] ? netlink_unicast+0x7fa/0x9e0 [ 641.511502][ C0] ? netlink_sendmsg+0x805/0xb30 [ 641.511521][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 641.511537][ C0] ? do_syscall_64+0xec/0xf80 [ 641.511553][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.511584][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 641.511598][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 641.511617][ C0] ? kmem_cache_free+0x197/0x620 [ 641.511632][ C0] ? nlmon_xmit+0xb0/0x100 [ 641.511654][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 641.511673][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 641.511687][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 641.511704][ C0] ? __dev_queue_xmit+0x280/0x3100 [ 641.511722][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 641.511741][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 641.511764][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 641.511780][ C0] rtnetlink_rcv_msg+0x7cf/0xb70 [ 641.511798][ C0] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 641.511814][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 641.511830][ C0] ? ref_tracker_free+0x63a/0x7d0 [ 641.511844][ C0] ? __asan_memcpy+0x40/0x70 [ 641.511857][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 641.511878][ C0] netlink_rcv_skb+0x208/0x470 [ 641.511896][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 641.511914][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 641.511938][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 641.511960][ C0] netlink_unicast+0x82f/0x9e0 [ 641.511981][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 641.511999][ C0] ? netlink_sendmsg+0x642/0xb30 [ 641.512017][ C0] ? skb_put+0x11b/0x210 [ 641.512035][ C0] netlink_sendmsg+0x805/0xb30 [ 641.512058][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.512078][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 641.512098][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 641.512111][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.512130][ C0] __sock_sendmsg+0x21c/0x270 [ 641.512152][ C0] ____sys_sendmsg+0x505/0x820 [ 641.512172][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 641.512193][ C0] ? import_iovec+0x74/0xa0 [ 641.512212][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 641.512230][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.512251][ C0] ? futex_wake+0x4b2/0x560 [ 641.512280][ C0] ? __fget_files+0x2a/0x420 [ 641.512296][ C0] ? __fget_files+0x3a0/0x420 [ 641.512318][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 641.512337][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.512359][ C0] ? rcu_is_watching+0x15/0xb0 [ 641.512387][ C0] do_syscall_64+0xec/0xf80 [ 641.512404][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.512418][ C0] ? trace_irq_disable+0x37/0x100 [ 641.512435][ C0] ? clear_bhb_loop+0x60/0xb0 [ 641.512451][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.512465][ C0] RIP: 0033:0x7f1a31b8f749 [ 641.512479][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.512492][ C0] RSP: 002b:00007f1a2fdf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.512507][ C0] RAX: ffffffffffffffda RBX: 00007f1a31de6090 RCX: 00007f1a31b8f749 [ 641.512518][ C0] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000a [ 641.512528][ C0] RBP: 00007f1a31c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 641.512538][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.512548][ C0] R13: 00007f1a31de6128 R14: 00007f1a31de6090 R15: 00007ffe0601fe28 [ 641.512568][ C0] [ 641.513434][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 641.513447][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 641.513468][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 641.513480][ T31] Call Trace: [ 641.513488][ T31] [ 641.513500][ T31] vpanic+0x1e0/0x670 [ 641.513526][ T31] panic+0xb9/0xc0 [ 641.513546][ T31] ? __pfx_panic+0x10/0x10 [ 641.513578][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 641.513608][ T31] watchdog+0xfdf/0xfe0 [ 641.513641][ T31] ? watchdog+0x20a/0xfe0 [ 641.513671][ T31] kthread+0x711/0x8a0 [ 641.513697][ T31] ? __pfx_watchdog+0x10/0x10 [ 641.513720][ T31] ? __pfx_kthread+0x10/0x10 [ 641.513746][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 641.513765][ T31] ? __pfx_kthread+0x10/0x10 [ 641.513791][ T31] ret_from_fork+0x510/0xa50 [ 641.513807][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 641.513820][ T31] ? __switch_to+0xc9e/0x1480 [ 641.513847][ T31] ? __pfx_kthread+0x10/0x10 [ 641.513871][ T31] ret_from_fork_asm+0x1a/0x30 [ 641.513910][ T31] [ 641.514265][ T31] Kernel Offset: disabled