last executing test programs: 23.813123165s ago: executing program 0 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000f5ffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 23.764761038s ago: executing program 1 (id=761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a320000000014000580080002400000000208000140e1"], 0xa0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x21, 0x0, 0x0, 0x13}, 0x94) 23.643034001s ago: executing program 1 (id=763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r0, 0xd) accept$ax25(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x180, 0x24, 0x200, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x7, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x150, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xa}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x3}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x4, 0x8, 0x5, 0x3, 0xd, 0x3, 0x1, 0x5, 0x10, 0x2, 0x2, 0x5, 0x2, 0x8, 0x8, 0x10], 0x1, [0x4, 0x7, 0x2, 0x2, 0x4, 0x1ff, 0x2, 0x5, 0x42eb, 0xe6c3, 0x2, 0x107, 0xf5, 0x2, 0x7ff, 0x150], [0x4300, 0x0, 0x4, 0xfff, 0x2, 0x9, 0x8, 0x8, 0x8, 0x40, 0x0, 0x3, 0x6, 0xd5, 0x4, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x710}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xc8, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xc71}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xf8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5f}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x25}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xc}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xc2d}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}]}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000018001a8004002d8000000a8000000700ff02000000000000000000000001000008000b00110000000800814e89d886ee5100000000e30600ff00000000000000000000413d21f46b37f2c52d7af9b81aa66d7886d7507707b19821178509fb690000"], 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r12, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) connect$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @default, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) 23.445903964s ago: executing program 0 (id=766): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r2, 0x0, 0x0, 0x2, 0x1000, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7, 0x0, 0xfffffffc}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341204"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805fd05a607fd48040"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x27, 0xe80, 0x0, &(0x7f0000000000)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) getsockopt$inet_int(r4, 0x0, 0x18, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0xff, "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"}, &(0x7f0000000340)=0x107) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000480)={r10, 0x5}, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, r12, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac08}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "07ba560ee8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000000) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x9}, {0x10, 0xffff}, {0x0, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x1, 0x21, @remote}]}}]}, 0x5c}}, 0x4040004) 22.294073515s ago: executing program 1 (id=771): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000001000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000140}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r5, 0x20, 0x70bd25, 0x6, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008045) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb860000000000000000000000000000fe8000000000000000000000000000aa890090780000000000000000000000000000000000000001ff020000000000000000000000000001"], 0x0) epoll_create1(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket(0x40000000015, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 22.140241573s ago: executing program 0 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000000100000500"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x48000000}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r1, 0x0, 0x8000000000000000}, 0x18) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x1, 0x6, 0x30, 0x65, 0x0, 0xf, 0x11, 0x0, @remote, @remote, {[@rr={0x7, 0x13, 0xd, [@rand_addr=0x64010101, @private=0xa010100, @loopback, @broadcast]}]}}, {0x4e21, 0x4e24, 0x8}}}}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}], 0x1, 0x4008040) 21.932708847s ago: executing program 1 (id=777): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000ef0800010073797a30000000000900030073797a320200000014000000110001f61e1f4733856288dd24deef942da0f41a70e28e3e8c3b0906"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000240)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) 21.929022672s ago: executing program 0 (id=778): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0x80000000, 0x10001, {{0x21, 0x4, 0x2, 0x5, 0x84, 0x68, 0x0, 0x50, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@cipso={0x86, 0x26, 0x2, [{0x0, 0x3, "de"}, {0x1, 0x3, "e8"}, {0x2, 0xc, "1697930131aa38823907"}, {0x7, 0xc, "d915afbdcdb55990ce3f"}, {0x4, 0x2}]}, @timestamp={0x44, 0x10, 0xd4, 0x0, 0xa, [0xa, 0x2, 0xfffffff3]}, @cipso={0x86, 0x38, 0x2, [{0x1, 0x8, "ec6b1877fa87"}, {0x5, 0x8, "951c43e3966a"}, {0x5, 0x8, "49c3f183907d"}, {0x6, 0x2}, {0x1, 0x4, 'l6'}, {0x5, 0xb, "089fc91a30b234e85b"}, {0x7, 0x7, "1ff593517e"}, {0x0, 0x2}]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x19}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0xfffffff1, 0x2, 0xfd}}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30, 0x30, 0x2e, 0x0, 0x30, 0x30, 0x30, 0x5f]}}, &(0x7f0000000340)=""/143, 0x5e, 0x8f, 0x0, 0x1, 0x10000, @value=r0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000040)='GPL\x00', 0x3, 0x72, &(0x7f0000000080)=""/114, 0x40f00, 0x2c, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000400)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x2, 0x2, 0x4}, {0x4, 0x3, 0xc, 0x1}, {0x3, 0x3, 0x2, 0x5}, {0x4, 0x1, 0x6, 0x7}, {0x2, 0x2, 0x10, 0xc}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f20000000000000005000000b7080000000000007b0bf8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 21.854836134s ago: executing program 0 (id=779): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @random="12d65acc8373", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000811779e919e5460400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x3, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f018"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da0b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed0000000000"}]}}}}}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYBLOB='Cy4'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0xe, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c"], 0x30}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) r5 = socket(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'veth1\x00', &(0x7f0000000740)=@ethtool_drvinfo={0x3, "7c15da7afb0844c8c0b4550d8540cc1fed5e3219101f255f42ceffefc9c2e844", "451ee86e5fbf7f073d191f76ca60c27fc6be8a334e9f24f671ff96571b8ad532", "17c800428089ef455f44307329979d415d48e8763b44a17b3e94f5aa5d68830c", "ac2092f10c174dd065f076da7c5b5b1b053802338cce886df56abf4b08fd9145", "5b1113b90e1a71ab4612d0c47781be2187ad5143e6a51772677e3fdf65ebc7e7", "6d420ca75b5ec8fcb8e10b15", 0x8, 0x4, 0xf38, 0x10000}}) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x1, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc9360f468cc3fb2}, 0x4) 21.793529439s ago: executing program 1 (id=780): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000180)={0x1, 0x64, 0x2}, 0xc) (async) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="164dc1000000000008000000feff000040080400", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffff01, 0x9}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1, 0x0, 0xb25f3391de2111ae}}], 0x1, 0x3404c8d4) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x24, &(0x7f0000000040)=ANY=[], 0x1000f) (async) r4 = accept4$netrom(r2, 0x0, &(0x7f0000000040), 0x87d619735d3a14a1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYRES64=r4], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r5 = openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x2000) (async) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001c00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000c00)={r6, "bff4678338cdeac2bddd8f5f460de415"}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000600)={r6, "fc5ec7409745a1dfbd287bd8b228aa98"}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000007c0)={r6, 0x7, 0x9}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a", @ANYRES32], 0x54}}, 0x0) 21.611078647s ago: executing program 0 (id=783): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, 0x14, 0x4, 0x70bd25, 0x25dfdbff, {0x2b, 0xff}, [@INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "d3250811effc068df6bec0aa0ed5296a52becbc172421d18725ca2dd48df06b6c2636bea5accf159a1ed0962d3f50737cbd1001aca464403c83de9a11b3d83f8f9f0a248479bde1fd67b2c48bd07fcef37fe8f742e7d6b4089f4639ae2edb0401b923859063becbadd79dbb28f04877fcfe50ec63d2a40c09a685bd416575b08e2c973e3d4a94547abda2afffe10efaec3a2fc6005ebc328a485c73d6f9ad44a09e5b237f038c2fa8d8419ed9bf962d8fa0927e32ed75732fed9bfc58094e98e1c5ca9d4870e79ea860d38c412aa8b2890"}]}, 0xec}, 0x1, 0x0, 0x0, 0x4008800}, 0x8004010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0xfffffff7, @local, 0x7757}}, 0xffff, 0x1}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000400)={r7, 0x82, "89aeda119ff883022c625171d55203a1e88f67d1d00b2d60a369bc1b6378310da0a09e79f35c918337d0e71109bb380b59964a5581b60da625b9865f239d5549161b9e68850c33578e544da1859502381e185c1f0802ece457d929f1d6b9958d8444dc74bd52bf998d4fb603abce01365007d417d1e3457d68951cbca9f40e56c13b"}, &(0x7f0000000340)=0x8a) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r9, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x24}}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 21.591183065s ago: executing program 1 (id=784): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x4, 0x7}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x3, 0x32}, 0x0, @in=@rand_addr=0x64010102, 0x1, 0x4, 0x0, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX=r6, @ANYRESOCT=r2, @ANYBLOB], 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x3, @b={0x0, 0x1, 0x1, 0x94, {0x36, "f1870e5454ad6611b70ebcc3b8dd756e5bfc228bdeb163661a4f43753513bbe0bd04d60ea16b9251db1052cb2cf5ee1b5e1f42670d8c"}}}, 0x3f) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r7, 0x0, &(0x7f00000000c0)=@udp6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) r9 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r9, 0x61d8, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) 20.321308253s ago: executing program 3 (id=793): r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x100000000, 0x8000, 0x3ff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'wg0\x00', 0x1206}) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x3) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @remote}, 0x1c) (async, rerun: 64) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) (rerun: 64) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r5, 0xd9510ce465fbfa6b, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000340)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000440)) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xd4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000580), 0x4) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000844}, 0x0) (async) r7 = socket$unix(0x1, 0x7cc7c1cb3b4515a4, 0x0) (async, rerun: 32) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) (rerun: 32) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000410}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r8, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000800)={0x1, 0x5}, 0x8) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000880)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000008c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'wg0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x20000880) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f00000009c0)={0xc0000000}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000a00)=0x4eae, 0x4) (async) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) (async) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000b40)={0x210, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x63}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffb9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x240}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69d2b21c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffe00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1db}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffd5}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 19.956648683s ago: executing program 3 (id=795): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r3, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x2}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e0020000280080001001000000008000300030000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r4, @ANYBLOB="91f58a0c0365fac6e0a395e9252c28e1a65afcabe0b91dbdd3f1519f1981788497915afbbf6a85b02501818d708b3016d344cea422a83f09199f9bc01358d4bd86451b5a0bc40b0f62923132fc2d3058ad4290ef5a2bc982f73567b6c2f71be8f0de6a12eaef1be827497a07f47db8"], 0x58}}, 0x0) 19.877101462s ago: executing program 4 (id=796): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000006909000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x25) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 19.705547018s ago: executing program 3 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xffffffff, 0x10000, 0x0, 0xcb6}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) (async) ppoll(0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) (async) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000340)=0x1, 0x12) (async, rerun: 64) sendmmsg$alg(r3, &(0x7f0000007000)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="bcc1645873d3c2da416c0c8e959aa1a4eb15b5519e122eeaec9f075832e7bfb8a36c2c5b19e0347e59b6048ab79a7a35c2eb7e96fbe6dcf7643640d8df016f94a4082a66cf185e40037c71cd18de57003757501ed7373cc4b92d0bab", 0x5c}, {&(0x7f0000000040)="9ab883592314e9fb672c80ea7b311f66851d2271515de0a78fa12ef040cdd9ef46fb8552458efbeca7a964ac7c94", 0x2e}, {&(0x7f0000000540)="801e7bc300a6aa7ad3e752009501f19b98df5b3bc0f249111af381c5abc9142c26294c85a6ec7e5b637272d9885ead9bba3f6ec83f60b6afc36e363ac5fcf64def2bf5578e6479c53b5ef70bef799534c57625706a5d724f1b121693e7fbd88b26ed7486e2a3569ebc23f86b760e89c38493e62b7ceebc28ff5a27cb41e7a0754ddc8528c0e01aa9900a23", 0x8b}, {&(0x7f0000000dc0)="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", 0x23b}], 0x4, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000010}], 0x1, 0x240040d0) (async, rerun: 64) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x7}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000a00)=""/261, 0x105}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000800)=""/232, 0xe8}], 0x5}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) 19.636433302s ago: executing program 4 (id=798): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400f1ff010a0300000000000000000000200000193b83519aab48e15098c2d3fe2c21680c813c8c67e56e12846347487b7615599acb94b977c3dcce69e48f6d86139fdca51690c193fdb5f8c4b5ff3be85fda467f5624095e9a4fed3b02fd3803f84dfde07a63cd056bcdd526"], 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x20004040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x128, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5242}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/188, 0xfffffe18}], 0x2b, 0x0, 0x0, 0x40000}, 0x4000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x33) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'veth1\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) socket(0x2, 0x80805, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000a40), 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0x68, 0x30, 0x2, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x4, 0x0, 0x0, {{0xb}, {0xfffffffffffffee7, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x0, 0xfffffffe}, 0x4, r13}}]}, {0x4, 0xa, "278dceaead46599f99f12adc73885fc2b0ae3fec39248485fd87c4db581381f1d0786f7733e32cd458905e4f21371d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendfile(r7, r4, 0x0, 0x10000) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="38001000cb1afa09fcb8f8e338bb713ab414d05e1b2c48138100000000bcc8bc35d81f1a1d6ebd2faa122fff3f6036bb447a6804c8aade097e00cddf7d8eeeeb83e60c9319b6f2ce4a5d57e8d221", @ANYRES16=r3, @ANYBLOB="cd462dbd7000fbcbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="04006e800400280011000700887f9e1804d2635ee9cfef1cb8000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400d4) 19.539035688s ago: executing program 3 (id=799): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xe0000014}) epoll_wait(r5, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000100040061116c000000000085000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000080)=0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffe, @rand_addr, 0xffffffff}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r9, 0x1) splice(r9, 0x0, r8, 0x0, 0x2, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @dev}, &(0x7f0000000100)=0xc) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) 19.220884897s ago: executing program 4 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000190001090000000020000000021800080002fd010000000088000100ac14142dfa8b2d1d15df7b00e2d5d3aec179bd3ee04fe5decd6b27d4875ae6506eecf71d0566871194b83192d4882a9283daba945cfffbb59ef30a395b788ba731a137ff8a6fe87b0e3ebdc8818f9e1b4ff3fe50ca416e49edaccd20fffa4e255d0a0661adf3893b76a666b0d8d85d1a55235c9ddca1043a992f898d18eb5c5deb9da67f0fa68180f2f86935f01826bed71933479e83de98dbbede6a316d4c2de9a9495ab5df77d398f490909037b1ae4ea2d3df1d61deb6a2909665c2de6e05e53debec17c1da9375af47169cf1dc5949bb65558cd2af412d454e4f6206f9a30fa991338596631ef3dc2b398ed0d56c565f41ad8f06301b75f5e0f597fba8a6e67488272704a91fb26f61fd5668059ba871de4e1d917efe4697f7d02104fe0bc31714ba757700000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000040)={{0x29, @loopback, 0x4e23, 0x0, 'lc\x00', 0x1, 0x2, 0x5f}, {@multicast2, 0x4e23, 0x12001, 0x0, 0x8000, 0xe050}}, 0x44) 19.143600137s ago: executing program 3 (id=802): sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8844}, 0x20000000) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000001800)="240000101e005e031400ff01000000f80700b3dc0000b8240d1e2d01b06a8beb69097ba2cf3bfb09e0a26909b7640e6794e0", 0x32) recvmmsg(r5, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r7, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(r7, 0x6, 0x21, 0x0, &(0x7f0000000580)) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000002c0)=""/75, 0x4b}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"/268], 0x10c}}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000017c0)=""/46, &(0x7f0000000240)=0x2e) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x80, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}, 0x9}, 0x90) 19.107070263s ago: executing program 4 (id=803): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) unshare(0x2c020400) socket$rxrpc(0x21, 0x2, 0x2) (async) r4 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r4, 0x0, 0x2400) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000180)=0x404000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f00000000c0)='syzkaller\x00', 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r7}, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) 18.858165659s ago: executing program 4 (id=807): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x28, &(0x7f0000000040)=""/93, &(0x7f0000000140)=0x5d) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4020010) (async, rerun: 32) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0xe778b27f324841ae, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9806}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) (async, rerun: 32) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x84, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000300)={0x2}, 0x1) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004200)=ANY=[@ANYBLOB="ac0c0000", @ANYRES16=r5, @ANYBLOB="050027bd7000bddbdf25010000001400020077673000000000000000000000000000840c088050000080200004000a004e2200000000000000000000000000000000000000010500000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b060005"], 0xcac}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40) 18.794885837s ago: executing program 4 (id=808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) listen(r0, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) (async) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r1, &(0x7f00000002c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r1, &(0x7f0000000380)=""/100, 0x64) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (rerun: 32) read$nci(r1, &(0x7f0000000500)=""/100, 0x64) write$nci(r1, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r1, &(0x7f00000005c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r1, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r1, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r1, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000100)=r5}, 0x20) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000380)="465fce", 0x0}, 0x20) (async, rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r1, &(0x7f0000000840)=""/100, 0x64) 18.259161952s ago: executing program 3 (id=811): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xac, "a9737d9cea3d7de8b1b5413a1d337d289353aad1719386be7691f1be05220cd73dc4d0d54f837e9a2b07499b08dd1f0b9d4eaf412f0a4f42a4ef8e288ed17e10795f8fcb898f2d29cd56692fe1bfb4c1b059953acd549f62fa7369d32b8392c3ea451a969ba71b7bbba73875435d9ec526f713b94f9c1964956346c8829a958f252b5ce536fd9ffd8d45146a0abfc2fa013a650f8fa55d85ae49be9f43246e99b333a51437ae7cdc4f0055f2"}, &(0x7f0000000280)=0xb4) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r1, &(0x7f0000000340)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0x4, 0x7}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000003c0)={r5, 0x3}, &(0x7f0000000400)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x1}, [@IFAL_ADDRESS={0x14, 0x1, @private1}]}, 0x30}}, 0x40080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCAX25GETINFO(r7, 0x89ed, &(0x7f0000000780)) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r13, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r11}, 0x20) sendmmsg$inet6(r11, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x4}}, 0x8, 0x8dc, 0x800, 0x0, 0x54, 0x6}, 0x9c) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084894) 16.896580294s ago: executing program 2 (id=819): socket(0x15, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0xdc, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0x6}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0x7c, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6a9}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2aab, 0x0, 0x401, 0xfffffffd, 0xed1, {0x0, 0x0, 0x2, 0x0, 0x6dd0, 0x2}, {0xff, 0x0, 0x9, 0xfe4e, 0x7, 0xfffffc01}, 0x32, 0x7, 0xb}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}, @filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x6, 0x8012, r2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8967}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x1, @private2, 0x100}], 0x2c) sendmmsg$inet6(r4, &(0x7f0000002580)=[{{&(0x7f0000000080)={0xa, 0x8000, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000380)="d0", 0x1}], 0x1}}], 0x1, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="580000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83200000c6010500240012800b00010067656e65766500001400028005000c000200000008000100010000001400030067656e65766542b0d1db0d9c3100000000000000000096f9c3e3e06f6d67dafe64058eb72f85330e839bac869d4b561cb4a97640d6c331e9eab578e27d4e334cb8f6cbb571c8c9448d24ee6945eae1a177dfe78693d493687457f9f0e67d6a35b73d75dc3b4fce863bd5e0dcf7ec3c6678945ecd5b0a82d710af04560cd20e218f36"], 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x4}, 0x1c) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 16.870173015s ago: executing program 2 (id=820): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x6c, 0x10, 0x403, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x100, 0xa608}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x1000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x8e40}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0xffe}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x6c}, 0x1, 0xba01, 0x0, 0x8000}, 0x810) (async, rerun: 32) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) (async, rerun: 32) r4 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000029000000370000005200"/24], 0x18}}], 0x1, 0x4000000) (async) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async) r5 = socket(0x2, 0x6, 0x7ff) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r6, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x14}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x54}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) 16.81104922s ago: executing program 2 (id=821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) write$cgroup_subtree(r1, &(0x7f0000000480)={[{0x2d, 'memory'}]}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r2, 0x10e, 0xb, 0x0, &(0x7f00000003c0)) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000500)=0x5f5a10e9) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f00000004c0)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "00001c00f800", "5ab58ab1214ed09fb1bf73a229084e45b2a17ad35bc9ee4b2e899447096807da", "34c5f91a"}, 0x38) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="6e37cff5", 0x4}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x5f, 0x2e]}}, 0x0, 0x29, 0x0, 0x1, 0xf}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "0aa8147700", "f937fbda2fed32a2f1d4d5dd89a5da97", "b0c401b4", "1a184a228df4406e"}, 0x1d204de41ec4e852) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000540)={{0x2, 0x4e20, @loopback}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, {0x2, 0x4e24, @rand_addr=0x64010101}, 'lo\x00'}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000140)="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"/297, 0x3accf8d5) close(r3) close(r4) socket$kcm(0x29, 0x1, 0x0) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0xff1, 0x40, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r5, 0x30e, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x28004085}, 0x4000000) 16.644678673s ago: executing program 2 (id=822): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002980)={0x4c, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, {0xb, 0xa3, 0x4, 0x9b, {0x4e20, 0x4e1f, [0x7, 0x0, 0x40000000, 0x7], [0xd, 0x4, 0x6, 0xbd6], 0x0, [0x4, 0x3]}, 0x4, 0x1}}, 0x4c}, 0x1, 0x0, 0x0, 0x40000880}, 0x20008000) ppoll(&(0x7f0000000080)=[{r0, 0x2001}], 0x1, 0x0, 0x0, 0x0) close(r1) 16.5903043s ago: executing program 2 (id=823): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) (rerun: 32) 15.699234832s ago: executing program 2 (id=824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x4c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x788}, @TCA_TBF_RATE64={0xc, 0x4, 0x25d97390d5534874}, @TCA_TBF_PBURST={0x8, 0x7, 0x3a2}, @TCA_TBF_RATE64={0xc, 0x4, 0x975c16681b0f5160}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x8d0, 0xeb, 0x1, 0xffff8001, 0xa95, 0x8, 0x6, 0x400, 0xffff, 0x3000, 0x4, 0x5, 0x0, 0x8, 0x3, 0x9, 0x7, 0x7, 0xa, 0x97, 0x81, 0x100, 0x1, 0x65, 0x4, 0x529d, 0x240, 0x4, 0x8001, 0xfffffffe, 0x4, 0x2, 0x9, 0xc, 0x7, 0x80000000, 0x800, 0x0, 0x1, 0x6, 0x80, 0x52b, 0xffffffff, 0x185c, 0x6, 0x0, 0x0, 0x5, 0x8725, 0x9, 0x80, 0x800, 0xf, 0x7, 0xd7, 0x4, 0x7, 0x9, 0x4, 0x5, 0x1, 0x4, 0x1, 0x1, 0x3, 0x8, 0x1, 0x7ff, 0x8001, 0x9, 0x40000000, 0x4, 0x4, 0x1, 0x6, 0xfffffff9, 0x1, 0x3, 0x2, 0x36e4, 0x8, 0x0, 0x3, 0x9, 0x7, 0xb0f4, 0x81, 0xffffffff, 0x8ff, 0x1, 0x3, 0x1, 0x0, 0x7, 0x9ee, 0x4, 0x5, 0x7fffffff, 0xfc7d, 0x6, 0x5, 0xd693, 0xff, 0xe, 0x7, 0xd4, 0x7, 0x4, 0x1, 0x2, 0x9, 0x5, 0x2, 0x1, 0x6, 0x2ce2, 0x7, 0x9, 0x2, 0x3, 0x5, 0xf, 0xc0000000, 0xe, 0x2, 0xc, 0xc, 0x5, 0xff, 0xe82, 0xd, 0x0, 0x2, 0x5f2c, 0x8, 0x3d65, 0x4, 0xf63f, 0x8, 0x7, 0x4, 0x2, 0x8, 0x6, 0x2, 0xffffffff, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x3, 0x100, 0x1000, 0x4, 0xe41, 0x6, 0x4, 0x200, 0x1, 0x4, 0xffff7fff, 0x9, 0xfffffd2b, 0x1, 0x9, 0xc, 0x1, 0x4, 0x6, 0x10001, 0xe, 0x7, 0xad6, 0x39, 0x8001, 0x1, 0xff, 0xffffffff, 0x4, 0xfffffffc, 0x0, 0xe29, 0x6, 0x8, 0x4, 0x7, 0xfffffff2, 0xab8b, 0x7, 0x2502, 0x0, 0x7f, 0x2, 0x4482, 0x3, 0x298, 0x3, 0x0, 0x7fff, 0x2, 0x9, 0x0, 0x101, 0x4, 0xf, 0xfffffa22, 0x0, 0x3, 0x81, 0x3, 0x3, 0x2, 0x7, 0x5, 0x8, 0xffffffff, 0xcbd, 0x1000, 0x1, 0x0, 0x5, 0x0, 0xe, 0xf3, 0x3, 0x2, 0xf2, 0x7d49, 0x3, 0x9, 0x63, 0x200, 0x8, 0x9, 0x200, 0x81, 0x2, 0x7, 0xe, 0x1000, 0x6a1, 0x9, 0x7, 0xffffff80, 0xfffff000, 0x6, 0x1, 0xd, 0xa]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0xffff}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) listen(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x3) 6.005199338s ago: executing program 32 (id=783): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, 0x14, 0x4, 0x70bd25, 0x25dfdbff, {0x2b, 0xff}, [@INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "d3250811effc068df6bec0aa0ed5296a52becbc172421d18725ca2dd48df06b6c2636bea5accf159a1ed0962d3f50737cbd1001aca464403c83de9a11b3d83f8f9f0a248479bde1fd67b2c48bd07fcef37fe8f742e7d6b4089f4639ae2edb0401b923859063becbadd79dbb28f04877fcfe50ec63d2a40c09a685bd416575b08e2c973e3d4a94547abda2afffe10efaec3a2fc6005ebc328a485c73d6f9ad44a09e5b237f038c2fa8d8419ed9bf962d8fa0927e32ed75732fed9bfc58094e98e1c5ca9d4870e79ea860d38c412aa8b2890"}]}, 0xec}, 0x1, 0x0, 0x0, 0x4008800}, 0x8004010) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0xfffffff7, @local, 0x7757}}, 0xffff, 0x1}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000400)={r7, 0x82, "89aeda119ff883022c625171d55203a1e88f67d1d00b2d60a369bc1b6378310da0a09e79f35c918337d0e71109bb380b59964a5581b60da625b9865f239d5549161b9e68850c33578e544da1859502381e185c1f0802ece457d929f1d6b9958d8444dc74bd52bf998d4fb603abce01365007d417d1e3457d68951cbca9f40e56c13b"}, &(0x7f0000000340)=0x8a) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r9, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x24}}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 5.961792448s ago: executing program 33 (id=784): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x4, 0x7}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x3, 0x32}, 0x0, @in=@rand_addr=0x64010102, 0x1, 0x4, 0x0, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX=r6, @ANYRESOCT=r2, @ANYBLOB], 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x3, @b={0x0, 0x1, 0x1, 0x94, {0x36, "f1870e5454ad6611b70ebcc3b8dd756e5bfc228bdeb163661a4f43753513bbe0bd04d60ea16b9251db1052cb2cf5ee1b5e1f42670d8c"}}}, 0x3f) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r7, 0x0, &(0x7f00000000c0)=@udp6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) r9 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r9, 0x61d8, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) 3.001983956s ago: executing program 34 (id=811): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xac, "a9737d9cea3d7de8b1b5413a1d337d289353aad1719386be7691f1be05220cd73dc4d0d54f837e9a2b07499b08dd1f0b9d4eaf412f0a4f42a4ef8e288ed17e10795f8fcb898f2d29cd56692fe1bfb4c1b059953acd549f62fa7369d32b8392c3ea451a969ba71b7bbba73875435d9ec526f713b94f9c1964956346c8829a958f252b5ce536fd9ffd8d45146a0abfc2fa013a650f8fa55d85ae49be9f43246e99b333a51437ae7cdc4f0055f2"}, &(0x7f0000000280)=0xb4) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r1, &(0x7f0000000340)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r5, 0x4, 0x7}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000003c0)={r5, 0x3}, &(0x7f0000000400)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x1}, [@IFAL_ADDRESS={0x14, 0x1, @private1}]}, 0x30}}, 0x40080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCAX25GETINFO(r7, 0x89ed, &(0x7f0000000780)) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r13, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r11}, 0x20) sendmmsg$inet6(r11, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x4}}, 0x8, 0x8dc, 0x800, 0x0, 0x54, 0x6}, 0x9c) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {}, {0xfff1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084894) 2.942755231s ago: executing program 35 (id=808): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) listen(r0, 0x0) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) (async) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) read$nci(r1, &(0x7f00000002c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r1, &(0x7f0000000380)=""/100, 0x64) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (rerun: 32) read$nci(r1, &(0x7f0000000500)=""/100, 0x64) write$nci(r1, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r1, &(0x7f00000005c0)=""/100, 0x64) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async) read$nci(r1, &(0x7f0000000680)=""/100, 0x64) (async) write$nci(r1, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r1, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000100)=r5}, 0x20) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000380)="465fce", 0x0}, 0x20) (async, rerun: 32) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async) read$nci(r1, &(0x7f0000000840)=""/100, 0x64) 0s ago: executing program 36 (id=824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x4c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x788}, @TCA_TBF_RATE64={0xc, 0x4, 0x25d97390d5534874}, @TCA_TBF_PBURST={0x8, 0x7, 0x3a2}, @TCA_TBF_RATE64={0xc, 0x4, 0x975c16681b0f5160}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x8d0, 0xeb, 0x1, 0xffff8001, 0xa95, 0x8, 0x6, 0x400, 0xffff, 0x3000, 0x4, 0x5, 0x0, 0x8, 0x3, 0x9, 0x7, 0x7, 0xa, 0x97, 0x81, 0x100, 0x1, 0x65, 0x4, 0x529d, 0x240, 0x4, 0x8001, 0xfffffffe, 0x4, 0x2, 0x9, 0xc, 0x7, 0x80000000, 0x800, 0x0, 0x1, 0x6, 0x80, 0x52b, 0xffffffff, 0x185c, 0x6, 0x0, 0x0, 0x5, 0x8725, 0x9, 0x80, 0x800, 0xf, 0x7, 0xd7, 0x4, 0x7, 0x9, 0x4, 0x5, 0x1, 0x4, 0x1, 0x1, 0x3, 0x8, 0x1, 0x7ff, 0x8001, 0x9, 0x40000000, 0x4, 0x4, 0x1, 0x6, 0xfffffff9, 0x1, 0x3, 0x2, 0x36e4, 0x8, 0x0, 0x3, 0x9, 0x7, 0xb0f4, 0x81, 0xffffffff, 0x8ff, 0x1, 0x3, 0x1, 0x0, 0x7, 0x9ee, 0x4, 0x5, 0x7fffffff, 0xfc7d, 0x6, 0x5, 0xd693, 0xff, 0xe, 0x7, 0xd4, 0x7, 0x4, 0x1, 0x2, 0x9, 0x5, 0x2, 0x1, 0x6, 0x2ce2, 0x7, 0x9, 0x2, 0x3, 0x5, 0xf, 0xc0000000, 0xe, 0x2, 0xc, 0xc, 0x5, 0xff, 0xe82, 0xd, 0x0, 0x2, 0x5f2c, 0x8, 0x3d65, 0x4, 0xf63f, 0x8, 0x7, 0x4, 0x2, 0x8, 0x6, 0x2, 0xffffffff, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x3, 0x100, 0x1000, 0x4, 0xe41, 0x6, 0x4, 0x200, 0x1, 0x4, 0xffff7fff, 0x9, 0xfffffd2b, 0x1, 0x9, 0xc, 0x1, 0x4, 0x6, 0x10001, 0xe, 0x7, 0xad6, 0x39, 0x8001, 0x1, 0xff, 0xffffffff, 0x4, 0xfffffffc, 0x0, 0xe29, 0x6, 0x8, 0x4, 0x7, 0xfffffff2, 0xab8b, 0x7, 0x2502, 0x0, 0x7f, 0x2, 0x4482, 0x3, 0x298, 0x3, 0x0, 0x7fff, 0x2, 0x9, 0x0, 0x101, 0x4, 0xf, 0xfffffa22, 0x0, 0x3, 0x81, 0x3, 0x3, 0x2, 0x7, 0x5, 0x8, 0xffffffff, 0xcbd, 0x1000, 0x1, 0x0, 0x5, 0x0, 0xe, 0xf3, 0x3, 0x2, 0xf2, 0x7d49, 0x3, 0x9, 0x63, 0x200, 0x8, 0x9, 0x200, 0x81, 0x2, 0x7, 0xe, 0x1000, 0x6a1, 0x9, 0x7, 0xffffff80, 0xfffff000, 0x6, 0x1, 0xd, 0xa]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0xffff}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) listen(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.201' (ED25519) to the list of known hosts. [ 86.248569][ T5849] cgroup: Unknown subsys name 'net' [ 86.383798][ T5849] cgroup: Unknown subsys name 'cpuset' [ 86.393544][ T5849] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.222727][ T5849] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.407817][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.417477][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.426648][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.436348][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.443706][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.452008][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.460233][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.469176][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.476553][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.484522][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.538420][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.547899][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.555911][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.579580][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.586920][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.595081][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.602686][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.610716][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.629249][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.637570][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.678181][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.688990][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.696974][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.705726][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.714200][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.181006][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 93.328308][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 93.492573][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.502667][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.510760][ T5861] bridge_slave_0: entered allmulticast mode [ 93.518988][ T5861] bridge_slave_0: entered promiscuous mode [ 93.558222][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.565514][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.573100][ T5861] bridge_slave_1: entered allmulticast mode [ 93.580698][ T5861] bridge_slave_1: entered promiscuous mode [ 93.588201][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 93.614550][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 93.698037][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.771292][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.797266][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.804759][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.812960][ T5864] bridge_slave_0: entered allmulticast mode [ 93.820644][ T5864] bridge_slave_0: entered promiscuous mode [ 93.912082][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.919301][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.926831][ T5864] bridge_slave_1: entered allmulticast mode [ 93.934389][ T5864] bridge_slave_1: entered promiscuous mode [ 93.948298][ T5861] team0: Port device team_slave_0 added [ 93.999892][ T5861] team0: Port device team_slave_1 added [ 94.024669][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 94.040593][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.053306][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.158678][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.166350][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.174456][ T5871] bridge_slave_0: entered allmulticast mode [ 94.182272][ T5871] bridge_slave_0: entered promiscuous mode [ 94.229898][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.236883][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.263176][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.276385][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.283805][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.310053][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.322037][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.329181][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.337272][ T5877] bridge_slave_0: entered allmulticast mode [ 94.345129][ T5877] bridge_slave_0: entered promiscuous mode [ 94.353777][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.361975][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.369843][ T5871] bridge_slave_1: entered allmulticast mode [ 94.377077][ T5871] bridge_slave_1: entered promiscuous mode [ 94.393568][ T5864] team0: Port device team_slave_0 added [ 94.402629][ T5864] team0: Port device team_slave_1 added [ 94.416203][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.424009][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.431440][ T5877] bridge_slave_1: entered allmulticast mode [ 94.438634][ T5877] bridge_slave_1: entered promiscuous mode [ 94.500269][ T51] Bluetooth: hci0: command tx timeout [ 94.545172][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.552484][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.579109][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.592032][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.599025][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.599625][ T51] Bluetooth: hci1: command tx timeout [ 94.625064][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.644095][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.657317][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.666579][ T51] Bluetooth: hci3: command tx timeout [ 94.669596][ T51] Bluetooth: hci2: command tx timeout [ 94.675795][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.778961][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.789705][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.796960][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.804445][ T5879] bridge_slave_0: entered allmulticast mode [ 94.812214][ T5879] bridge_slave_0: entered promiscuous mode [ 94.819587][ T51] Bluetooth: hci4: command tx timeout [ 94.821396][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.832821][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.840169][ T5879] bridge_slave_1: entered allmulticast mode [ 94.847467][ T5879] bridge_slave_1: entered promiscuous mode [ 94.890742][ T5861] hsr_slave_0: entered promiscuous mode [ 94.897410][ T5861] hsr_slave_1: entered promiscuous mode [ 94.908486][ T5877] team0: Port device team_slave_0 added [ 94.945561][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.958378][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.969887][ T5877] team0: Port device team_slave_1 added [ 94.978180][ T5871] team0: Port device team_slave_0 added [ 95.046690][ T5871] team0: Port device team_slave_1 added [ 95.122164][ T5864] hsr_slave_0: entered promiscuous mode [ 95.128603][ T5864] hsr_slave_1: entered promiscuous mode [ 95.135269][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 95.141449][ T5864] Cannot create hsr debugfs directory [ 95.162941][ T5879] team0: Port device team_slave_0 added [ 95.178550][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.186286][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.212519][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.249598][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.256606][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.282765][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.308673][ T5879] team0: Port device team_slave_1 added [ 95.329103][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.338554][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.365162][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.389593][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.396582][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.422585][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.501399][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.508404][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.534902][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.547543][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.554592][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.580524][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.682212][ T5871] hsr_slave_0: entered promiscuous mode [ 95.688676][ T5871] hsr_slave_1: entered promiscuous mode [ 95.695144][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 95.701901][ T5871] Cannot create hsr debugfs directory [ 95.743228][ T5877] hsr_slave_0: entered promiscuous mode [ 95.750088][ T5877] hsr_slave_1: entered promiscuous mode [ 95.756534][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 95.762704][ T5877] Cannot create hsr debugfs directory [ 96.004070][ T5879] hsr_slave_0: entered promiscuous mode [ 96.010876][ T5879] hsr_slave_1: entered promiscuous mode [ 96.017096][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 96.022989][ T5879] Cannot create hsr debugfs directory [ 96.223219][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.270208][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.324942][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.361836][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.460389][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.488116][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.498893][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.512369][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.580400][ T51] Bluetooth: hci0: command tx timeout [ 96.611815][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.628884][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.647065][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.658954][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.670910][ T51] Bluetooth: hci1: command tx timeout [ 96.740167][ T51] Bluetooth: hci2: command tx timeout [ 96.745647][ T51] Bluetooth: hci3: command tx timeout [ 96.797481][ T5877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.810668][ T5877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.825581][ T5877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.835935][ T5877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.899644][ T51] Bluetooth: hci4: command tx timeout [ 96.961219][ T5879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.983723][ T5879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.006486][ T5879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.020138][ T5879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.036582][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.116128][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.126873][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.179426][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.186727][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.198909][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.206089][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.237183][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.253552][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.274450][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.303534][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.305089][ T981] cfg80211: failed to load regulatory.db [ 97.310757][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.350356][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.357507][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.422220][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.433000][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.488488][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.495728][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.546546][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.554114][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.568262][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.575420][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.646848][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.654090][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.801750][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.855696][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.887267][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.955387][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.962636][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.044546][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.051881][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.205810][ T5861] veth0_vlan: entered promiscuous mode [ 98.276796][ T5861] veth1_vlan: entered promiscuous mode [ 98.291330][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.396429][ T5861] veth0_macvtap: entered promiscuous mode [ 98.444277][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.458323][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.468826][ T5861] veth1_macvtap: entered promiscuous mode [ 98.497906][ T5864] veth0_vlan: entered promiscuous mode [ 98.597171][ T5864] veth1_vlan: entered promiscuous mode [ 98.647266][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.661678][ T51] Bluetooth: hci0: command tx timeout [ 98.679173][ T5871] veth0_vlan: entered promiscuous mode [ 98.730725][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.742337][ T51] Bluetooth: hci1: command tx timeout [ 98.783619][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.797431][ T5871] veth1_vlan: entered promiscuous mode [ 98.819752][ T51] Bluetooth: hci3: command tx timeout [ 98.824962][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.825204][ T51] Bluetooth: hci2: command tx timeout [ 98.851797][ T5864] veth0_macvtap: entered promiscuous mode [ 98.859485][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.869584][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.902015][ T5864] veth1_macvtap: entered promiscuous mode [ 98.948032][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.982400][ T51] Bluetooth: hci4: command tx timeout [ 99.006968][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.016578][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.063439][ T5871] veth0_macvtap: entered promiscuous mode [ 99.071621][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.081962][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.108897][ T3509] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.121387][ T3509] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.183464][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.194835][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.200563][ T5871] veth1_macvtap: entered promiscuous mode [ 99.278053][ T5877] veth0_vlan: entered promiscuous mode [ 99.309178][ T5877] veth1_vlan: entered promiscuous mode [ 99.310401][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.322539][ T5879] veth0_vlan: entered promiscuous mode [ 99.336235][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.343971][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.370386][ T5879] veth1_vlan: entered promiscuous mode [ 99.387086][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.411023][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.421538][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.477108][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.512284][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.521588][ T153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.552364][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.563560][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.578255][ T5877] veth0_macvtap: entered promiscuous mode [ 99.594924][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.620345][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.643033][ T5877] veth1_macvtap: entered promiscuous mode [ 99.692792][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 99.735190][ T5879] veth0_macvtap: entered promiscuous mode [ 99.757783][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.784393][ T5879] veth1_macvtap: entered promiscuous mode [ 99.834785][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.932581][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.975615][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.028973][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.069998][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.094508][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.132024][ T5993] openvswitch: netlink: Message has 12 unknown bytes. [ 100.139135][ T5993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.180911][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.205292][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.254483][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.310282][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.331033][ T5996] gretap0: entered promiscuous mode [ 100.336820][ T5996] vlan2: entered promiscuous mode [ 100.340677][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.393389][ T153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.416012][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.455224][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.516187][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.613960][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.653305][ T6003] netlink: 71 bytes leftover after parsing attributes in process `syz.0.8'. [ 100.669114][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.740609][ T51] Bluetooth: hci0: command tx timeout [ 100.830219][ T51] Bluetooth: hci1: command tx timeout [ 100.901670][ T51] Bluetooth: hci2: command tx timeout [ 100.907166][ T51] Bluetooth: hci3: command tx timeout [ 101.057487][ T6044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.066387][ T51] Bluetooth: hci4: command tx timeout [ 101.096085][ T6044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.402585][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.423717][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.530018][ T6051] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 101.558869][ T6044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.598690][ T6044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.676443][ T6054] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 101.716418][ T6054] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10'. [ 102.010875][ T6070] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.5'. [ 102.223292][ T6066] Zero length message leads to an empty skb [ 102.642071][ T6093] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.271440][ T6105] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 103.352271][ T6116] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 103.578393][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'. [ 103.633768][ T6118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.642126][ T6118] batadv_slave_0: entered promiscuous mode [ 103.716798][ T6124] netlink: 277 bytes leftover after parsing attributes in process `syz.3.21'. [ 104.057429][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'. [ 104.479286][ T6148] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.966492][ T6163] tipc: Started in network mode [ 104.977915][ T6163] tipc: Node identity 0259e5fcbe4b, cluster identity 4711 [ 104.990180][ T6163] tipc: Enabled bearer , priority 0 [ 105.039183][ T6155] tipc: Resetting bearer [ 105.118842][ T6153] tipc: Disabling bearer [ 105.449840][ T6188] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 105.522917][ T6188] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 105.552170][ T6196] netlink: 148 bytes leftover after parsing attributes in process `syz.4.40'. [ 105.794235][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 106.074785][ T6214] netlink: 'syz.4.46': attribute type 5 has an invalid length. [ 106.351830][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.48'. [ 107.935051][ T6292] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 108.076057][ T6301] sctp: [Deprecated]: syz.3.67 (pid 6301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.076057][ T6301] Use struct sctp_sack_info instead [ 108.252721][ T6297] 8021q: VLANs not supported on caif0 [ 108.308199][ T6292] gretap1: entered promiscuous mode [ 109.357344][ T6334] netlink: 'syz.1.76': attribute type 13 has an invalid length. [ 109.831974][ T6320] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 109.987721][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.996477][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.259277][ T6334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.292034][ T6334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.457930][ T153] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.479535][ T153] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.507393][ T153] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.599096][ T6360] netlink: 76 bytes leftover after parsing attributes in process `syz.1.84'. [ 110.623409][ T153] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.875240][ T6366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.87'. [ 110.922578][ T6367] netlink: 180 bytes leftover after parsing attributes in process `syz.1.86'. [ 111.883565][ T6407] netlink: 'syz.4.98': attribute type 11 has an invalid length. [ 112.347033][ T6429] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 112.412936][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 112.435565][ T6435] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 112.438411][ T6437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.106'. [ 113.240009][ T6479] netlink: 'syz.0.114': attribute type 5 has an invalid length. [ 113.267451][ T6477] netlink: 'syz.4.115': attribute type 13 has an invalid length. [ 113.306758][ T6480] netlink: 'syz.3.116': attribute type 13 has an invalid length. [ 113.306824][ T6475] netlink: 'syz.3.116': attribute type 13 has an invalid length. [ 113.330425][ T6475] netlink: 'syz.3.116': attribute type 17 has an invalid length. [ 113.356957][ T6480] netlink: 'syz.3.116': attribute type 17 has an invalid length. [ 113.546537][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 113.570965][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 113.945221][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 114.014204][ T6475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.105651][ T6480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.147190][ T6497] veth1_macvtap: left promiscuous mode [ 114.468971][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 114.805472][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 114.828800][ T6541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.858928][ T6530] syzkaller1: entered promiscuous mode [ 114.875088][ T6530] syzkaller1: entered allmulticast mode [ 114.930294][ T6545] netlink: 'syz.2.129': attribute type 1 has an invalid length. [ 114.954976][ T6546] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 115.117809][ T6546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.154386][ T6546] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 115.249736][ T6546] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 115.262268][ T6552] veth0: entered promiscuous mode [ 115.433614][ T6571] Illegal XDP return value 4294967294 on prog (id 47) dev N/A, expect packet loss! [ 115.634968][ T6546] batadv0: entered promiscuous mode [ 115.649122][ T6546] batadv0: entered allmulticast mode [ 115.658629][ T6546] bond0: (slave batadv0): Releasing backup interface [ 115.670290][ T6546] bridge0: port 3(batadv0) entered blocking state [ 115.677083][ T6546] bridge0: port 3(batadv0) entered disabled state [ 115.855791][ T6580] pim6reg1: entered promiscuous mode [ 115.866410][ T6580] pim6reg1: entered allmulticast mode [ 116.031502][ T153] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 116.041141][ T153] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 116.566221][ T6601] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 116.586114][ T6601] __nla_validate_parse: 4 callbacks suppressed [ 116.586133][ T6601] netlink: 216 bytes leftover after parsing attributes in process `syz.4.142'. [ 116.654616][ T6601] syz.4.142: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 116.681202][ T6607] netlink: 96 bytes leftover after parsing attributes in process `syz.0.146'. [ 116.697410][ T6601] CPU: 0 UID: 0 PID: 6601 Comm: syz.4.142 Not tainted syzkaller #0 PREEMPT(full) [ 116.697443][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.697506][ T6601] Call Trace: [ 116.697517][ T6601] [ 116.697526][ T6601] dump_stack_lvl+0x189/0x250 [ 116.697573][ T6601] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 116.697605][ T6601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.697630][ T6601] ? __pfx__printk+0x10/0x10 [ 116.697660][ T6601] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 116.697686][ T6601] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 116.697720][ T6601] warn_alloc+0x214/0x310 [ 116.697755][ T6601] ? stack_depot_save_flags+0x40/0x860 [ 116.697795][ T6601] ? __pfx_warn_alloc+0x10/0x10 [ 116.697830][ T6601] ? kasan_save_track+0x4f/0x80 [ 116.697857][ T6601] ? xskq_create+0x56/0x170 [ 116.697875][ T6601] ? xsk_init_queue+0xb0/0x110 [ 116.697892][ T6601] ? xsk_setsockopt+0x4dc/0x8d0 [ 116.697921][ T6601] ? do_sock_setsockopt+0x17c/0x1b0 [ 116.697942][ T6601] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 116.697963][ T6601] ? do_syscall_64+0xfa/0x3b0 [ 116.697984][ T6601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.698018][ T6601] __vmalloc_node_range_noprof+0x125/0x12f0 [ 116.698083][ T6601] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.698122][ T6601] ? __kasan_kmalloc+0x93/0xb0 [ 116.698154][ T6601] vmalloc_user_noprof+0xad/0xf0 [ 116.698182][ T6601] ? xskq_create+0xbf/0x170 [ 116.698204][ T6601] xskq_create+0xbf/0x170 [ 116.698228][ T6601] xsk_init_queue+0xb0/0x110 [ 116.698251][ T6601] xsk_setsockopt+0x4dc/0x8d0 [ 116.698285][ T6601] ? __pfx_xsk_setsockopt+0x10/0x10 [ 116.698318][ T6601] ? __pfx_aa_sk_perm+0x10/0x10 [ 116.698354][ T6601] ? aa_sock_opt_perm+0xff/0x1b0 [ 116.698379][ T6601] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 116.698401][ T6601] ? __pfx_xsk_setsockopt+0x10/0x10 [ 116.698435][ T6601] do_sock_setsockopt+0x17c/0x1b0 [ 116.698464][ T6601] __x64_sys_setsockopt+0x13f/0x1b0 [ 116.698493][ T6601] do_syscall_64+0xfa/0x3b0 [ 116.698515][ T6601] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.698536][ T6601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.698556][ T6601] ? clear_bhb_loop+0x60/0xb0 [ 116.698581][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.698601][ T6601] RIP: 0033:0x7f125a78ebe9 [ 116.698635][ T6601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.698652][ T6601] RSP: 002b:00007f125b617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 116.698674][ T6601] RAX: ffffffffffffffda RBX: 00007f125a9c5fa0 RCX: 00007f125a78ebe9 [ 116.698690][ T6601] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 116.698702][ T6601] RBP: 00007f125a811e19 R08: 0000000000000004 R09: 0000000000000000 [ 116.698714][ T6601] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.698727][ T6601] R13: 00007f125a9c6038 R14: 00007f125a9c5fa0 R15: 00007ffcf8135688 [ 116.698760][ T6601] [ 116.725248][ T6601] Mem-Info: [ 117.004556][ T6601] active_anon:4640 inactive_anon:0 isolated_anon:0 [ 117.004556][ T6601] active_file:2692 inactive_file:39850 isolated_file:0 [ 117.004556][ T6601] unevictable:768 dirty:104 writeback:0 [ 117.004556][ T6601] slab_reclaimable:10586 slab_unreclaimable:138107 [ 117.004556][ T6601] mapped:29063 shmem:1356 pagetables:1016 [ 117.004556][ T6601] sec_pagetables:0 bounce:0 [ 117.004556][ T6601] kernel_misc_reclaimable:0 [ 117.004556][ T6601] free:1290646 free_pcp:17563 free_cma:0 [ 117.051079][ T6601] Node 0 active_anon:18560kB inactive_anon:0kB active_file:10768kB inactive_file:159196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116252kB dirty:416kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11772kB pagetables:3884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 117.097037][ T6601] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 117.149464][ T6601] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.205825][ T6601] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 117.222206][ T6601] Node 0 DMA32 free:1259204kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18564kB inactive_anon:0kB active_file:10768kB inactive_file:157620kB unevictable:1536kB writepending:448kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:47768kB local_pcp:25764kB free_cma:0kB [ 117.278184][ T6601] lowmem_reserve[]: 0 0 1 1 1 [ 117.285366][ T6601] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 117.320772][ T6601] lowmem_reserve[]: 0 0 0 0 0 [ 117.325821][ T6601] Node 1 Normal free:3891360kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19584kB local_pcp:10592kB free_cma:0kB [ 117.357453][ T6601] lowmem_reserve[]: 0 0 0 0 0 [ 117.362728][ T6601] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 117.440486][ T6601] Node 0 DMA32: 1138*4kB (U) 691*8kB (UME) 247*16kB (UME) 287*32kB (UME) 112*64kB (UME) 35*128kB (UME) 15*256kB (UME) 12*512kB (UME) 6*1024kB (UME) 2*2048kB (ME) 294*4096kB (M) = 1259312kB [ 117.529735][ T6601] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 117.590580][ T6601] Node 1 Normal: 194*4kB (UE) 47*8kB (UME) 40*16kB (UME) 87*32kB (UME) 27*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3891360kB [ 117.673305][ T6601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.713961][ T6601] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.746501][ T6601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.787711][ T6601] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.859444][ T6601] 44920 total pagecache pages [ 117.864246][ T6601] 0 pages in swap cache [ 117.906224][ T6601] Free swap = 124996kB [ 117.919782][ T6601] Total swap = 124996kB [ 117.924015][ T6601] 2097051 pages RAM [ 117.927847][ T6601] 0 pages HighMem/MovableOnly [ 117.971006][ T6601] 425673 pages reserved [ 117.985666][ T6601] 0 pages cma reserved [ 118.191570][ T6650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.424225][ T6655] Bluetooth: MGMT ver 1.23 [ 118.544343][ T6660] sctp: [Deprecated]: syz.2.159 (pid 6660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.544343][ T6660] Use struct sctp_sack_info instead [ 118.565660][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.159'. [ 118.611971][ T24] IPVS: starting estimator thread 0... [ 118.719619][ T6662] IPVS: using max 28 ests per chain, 67200 per kthread [ 118.935126][ T6666] pim6reg1: entered promiscuous mode [ 118.940665][ T6666] pim6reg1: entered allmulticast mode [ 119.063115][ T6672] validate_nla: 1 callbacks suppressed [ 119.063137][ T6672] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 119.081836][ T6672] netlink: 'syz.4.163': attribute type 4 has an invalid length. [ 119.092792][ T6672] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.163'. [ 119.111408][ T6672] netlink: 68 bytes leftover after parsing attributes in process `syz.4.163'. [ 120.116322][ T5970] IPVS: starting estimator thread 0... [ 120.122544][ T6692] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:19999 [ 120.131593][ T6692] IPVS: lc: FWM 3 0x00000003 - no destination available [ 120.138764][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 120.220492][ T6693] IPVS: using max 29 ests per chain, 69600 per kthread [ 120.676089][ T6711] netlink: 120 bytes leftover after parsing attributes in process `syz.3.173'. [ 120.819644][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 120.843790][ T6716] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 2, id = 0 [ 120.906790][ T6715] pimreg: entered allmulticast mode [ 120.936798][ T6718] pimreg: left allmulticast mode [ 121.250338][ T6724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.176'. [ 121.287768][ T6724] netlink: 48 bytes leftover after parsing attributes in process `syz.3.176'. [ 121.322488][ T6724] netlink: 48 bytes leftover after parsing attributes in process `syz.3.176'. [ 121.424000][ T6729] macsec1: entered promiscuous mode [ 121.429279][ T6729] macsec0: entered promiscuous mode [ 121.483983][ T6729] macsec1: entered allmulticast mode [ 121.491148][ T6729] macsec0: entered allmulticast mode [ 121.496638][ T6729] veth1_macvtap: entered allmulticast mode [ 121.668730][ T6742] trusted_key: syz.2.181 sent an empty control message without MSG_MORE. [ 121.896286][ T6750] netlink: 'syz.3.182': attribute type 11 has an invalid length. [ 121.929716][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 122.008925][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 122.020692][ T6751] warning: `syz.3.182' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.119236][ T6759] netlink: 32 bytes leftover after parsing attributes in process `syz.1.185'. [ 122.222570][ T6762] netlink: 164 bytes leftover after parsing attributes in process `syz.3.187'. [ 122.794065][ T6778] Bluetooth: MGMT ver 1.23 [ 124.118258][ T6817] syzkaller0: entered promiscuous mode [ 124.145570][ T6817] syzkaller0: entered allmulticast mode [ 124.193224][ T6818] syzkaller1: entered promiscuous mode [ 124.198819][ T6818] syzkaller1: entered allmulticast mode [ 124.397896][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 124.758201][ T6842] netlink: 'syz.0.209': attribute type 4 has an invalid length. [ 124.792054][ T6841] netlink: 'syz.0.209': attribute type 4 has an invalid length. [ 124.821505][ T5869] Bluetooth: hci2: command 0x0401 tx timeout [ 124.827705][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 124.857523][ T6843] nbd: couldn't find device at index 2048 [ 125.147866][ T6858] netlink: 36 bytes leftover after parsing attributes in process `syz.4.213'. [ 125.270574][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 125.350707][ T6869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.213'. [ 125.857418][ T6892] netlink: 'syz.4.221': attribute type 2 has an invalid length. [ 125.900122][ T6892] netlink: 32 bytes leftover after parsing attributes in process `syz.4.221'. [ 126.217245][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.224'. [ 126.946953][ T6941] __nla_validate_parse: 3 callbacks suppressed [ 126.946974][ T6941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 127.254404][ T6937] bridge_slave_1: left allmulticast mode [ 127.271823][ T6937] bridge_slave_1: left promiscuous mode [ 127.279246][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.343583][ T6937] bridge_slave_0: left allmulticast mode [ 127.349826][ T6937] bridge_slave_0: left promiscuous mode [ 127.356612][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.682208][ T6959] IPv6: NLM_F_REPLACE set, but no existing node found! [ 127.905245][ T6965] syzkaller1: entered promiscuous mode [ 127.911151][ T6965] syzkaller1: entered allmulticast mode [ 128.317000][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 128.359761][ T6982] netlink: 32 bytes leftover after parsing attributes in process `syz.2.246'. [ 128.747956][ T6998] sctp: [Deprecated]: syz.2.251 (pid 6998) Use of int in max_burst socket option. [ 128.747956][ T6998] Use struct sctp_assoc_value instead [ 128.816772][ T6998] sctp: [Deprecated]: syz.2.251 (pid 6998) Use of int in maxseg socket option. [ 128.816772][ T6998] Use struct sctp_assoc_value instead [ 128.831647][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 128.890398][ T7003] sctp: [Deprecated]: syz.2.251 (pid 7003) Use of int in maxseg socket option. [ 128.890398][ T7003] Use struct sctp_assoc_value instead [ 129.001022][ T7007] netlink: 48 bytes leftover after parsing attributes in process `syz.1.254'. [ 129.268962][ T7019] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20003 [ 129.466751][ T7030] netlink: 56 bytes leftover after parsing attributes in process `syz.3.261'. [ 129.806473][ T7043] syzkaller1: entered promiscuous mode [ 129.826531][ T7043] syzkaller1: entered allmulticast mode [ 130.144888][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 130.170912][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 130.215233][ T7051] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 130.239775][ T7051] netlink: 10 bytes leftover after parsing attributes in process `syz.1.266'. [ 130.269755][ T7051] block nbd0: Unsupported socket: shutdown callout must be supported. [ 130.875794][ T7075] netlink: 'syz.4.270': attribute type 18 has an invalid length. [ 131.545412][ T7106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.278'. [ 131.978298][ T7117] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 132.033844][ T7123] __nla_validate_parse: 1 callbacks suppressed [ 132.033864][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 132.072491][ T7121] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 132.106931][ T7123] veth4: entered allmulticast mode [ 132.941632][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 132.967619][ T7157] bridge_slave_1: left allmulticast mode [ 133.032248][ T7157] bridge_slave_1: left promiscuous mode [ 133.038134][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.082842][ T7157] bridge_slave_0: left allmulticast mode [ 133.100570][ T7157] bridge_slave_0: left promiscuous mode [ 133.106456][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.267115][ T7175] netlink: 'syz.3.293': attribute type 10 has an invalid length. [ 133.312398][ T7175] bond0: (slave wlan1): Opening slave failed [ 133.492326][ T7168] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 133.775218][ T7185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.266253][ T7191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.299'. [ 134.312513][ T7191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.299'. [ 134.472245][ T7206] netlink: 240 bytes leftover after parsing attributes in process `syz.2.302'. [ 134.590620][ T7210] netlink: 40 bytes leftover after parsing attributes in process `syz.3.306'. [ 134.884728][ T7213] macvtap1: entered allmulticast mode [ 134.899557][ T7213] veth0_macvtap: entered allmulticast mode [ 135.224348][ T7240] netlink: 68 bytes leftover after parsing attributes in process `syz.2.314'. [ 135.516542][ T7250] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 135.532117][ T7252] netlink: 64 bytes leftover after parsing attributes in process `syz.1.319'. [ 135.658946][ T7250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.672695][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.321'. [ 135.765562][ T7269] openvswitch: netlink: IPv6 tunnel dst address is zero [ 135.814901][ T7272] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 135.844723][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 135.856533][ T7250] veth1: entered promiscuous mode [ 136.077292][ T7257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.093372][ T7282] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 136.112655][ T7257] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 136.129092][ T7257] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 136.192083][ T7279] ÿ: renamed from bond_slave_0 (while UP) [ 136.767122][ T7302] svc: failed to register nfsdv3 RPC service (errno 111). [ 136.795798][ T7302] svc: failed to register nfsaclv3 RPC service (errno 111). [ 137.143045][ T7316] __nla_validate_parse: 2 callbacks suppressed [ 137.143067][ T7316] netlink: 200 bytes leftover after parsing attributes in process `syz.2.333'. [ 137.175886][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 137.428908][ T7334] netlink: 830 bytes leftover after parsing attributes in process `syz.0.335'. [ 137.468696][ T7337] sit0: entered promiscuous mode [ 137.534749][ T7337] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 137.546105][ T7337] netlink: 1 bytes leftover after parsing attributes in process `syz.3.336'. [ 137.674503][ T7341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.338'. [ 137.975435][ T7357] netlink: 56 bytes leftover after parsing attributes in process `syz.1.343'. [ 138.266863][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.510970][ T7394] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 138.524952][ T7397] netlink: 'syz.2.355': attribute type 3 has an invalid length. [ 138.585168][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 138.623266][ T7399] ip6gretap1: entered promiscuous mode [ 138.648925][ T7397] netlink: 'syz.2.355': attribute type 3 has an invalid length. [ 138.668195][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 138.680713][ T7392] netlink: 'syz.0.354': attribute type 3 has an invalid length. [ 138.836741][ T7409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.858222][ T7409] bridge_slave_0: left allmulticast mode [ 138.873875][ T7409] bridge_slave_0: left promiscuous mode [ 138.885544][ T7409] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.902175][ T7409] bridge_slave_1: left allmulticast mode [ 138.918484][ T7409] bridge_slave_1: left promiscuous mode [ 138.933782][ T7409] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.933897][ T7412] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 139.130337][ T7409] bond0: (slave bond_slave_0): Releasing backup interface [ 139.220341][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 139.240894][ T7409] bond0: (slave bond_slave_1): Releasing backup interface [ 139.340520][ T7409] team0: Port device team_slave_0 removed [ 139.428952][ T7409] team0: Port device team_slave_1 removed [ 139.435674][ T7409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.462252][ T7409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.499290][ T7439] netlink: 176 bytes leftover after parsing attributes in process `syz.2.361'. [ 139.572325][ T7442] tipc: Started in network mode [ 139.577266][ T7442] tipc: Node identity 22bca50145e1, cluster identity 4711 [ 139.591055][ T7442] tipc: Enabled bearer , priority 0 [ 139.749494][ T7442] tipc: Resetting bearer [ 140.236629][ T7466] bridge0: port 3(batadv0) entered blocking state [ 140.243328][ T7466] bridge0: port 3(batadv0) entered forwarding state [ 140.263588][ T7466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.596430][ T5988] tipc: Node number set to 1734190337 [ 140.772316][ T7484] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 140.794777][ T7482] netlink: 'syz.0.375': attribute type 1 has an invalid length. [ 140.830071][ T7482] netlink: 224 bytes leftover after parsing attributes in process `syz.0.375'. [ 140.866566][ T7484] bridge_slave_0: left allmulticast mode [ 140.930914][ T7484] bridge_slave_0: left promiscuous mode [ 140.936923][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.937494][ T5932] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0 [ 140.982748][ T7491] netlink: 'syz.4.374': attribute type 10 has an invalid length. [ 141.008633][ T7484] bridge_slave_1: left allmulticast mode [ 141.019386][ T7484] bridge_slave_1: left promiscuous mode [ 141.037697][ T5932] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 141.038124][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.167223][ T7484] bond0: (slave bond_slave_0): Releasing backup interface [ 141.235705][ T7484] bond0: (slave bond_slave_1): Releasing backup interface [ 141.258598][ T7484] team0: Port device team_slave_0 removed [ 141.283336][ T7484] team0: Port device team_slave_1 removed [ 141.297625][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.318066][ T7484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.349816][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.365676][ T7484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.397660][ T7491] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 141.428992][ T7491] bond0: (slave wlan1): Opening slave failed [ 141.572069][ T7519] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 141.603547][ T7519] bond0: option mode: unable to set because the bond device has slaves [ 141.828476][ T7537] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.168639][ T7554] netlink: 'syz.4.393': attribute type 13 has an invalid length. [ 142.184121][ T7554] __nla_validate_parse: 4 callbacks suppressed [ 142.184144][ T7554] netlink: 140 bytes leftover after parsing attributes in process `syz.4.393'. [ 142.321812][ T7560] netlink: 'syz.2.395': attribute type 4 has an invalid length. [ 142.349593][ T7560] netlink: 17 bytes leftover after parsing attributes in process `syz.2.395'. [ 142.507353][ T7575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.610664][ T7580] netlink: 51 bytes leftover after parsing attributes in process `syz.2.399'. [ 142.748950][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 142.765338][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 142.787836][ T7584] IPVS: Error joining to the multicast group [ 142.944882][ T7589] syz_tun: entered allmulticast mode [ 142.980776][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 143.083287][ T7589] syz_tun (unregistering): left allmulticast mode [ 143.142210][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 143.164783][ T7600] geneve0: entered allmulticast mode [ 143.286259][ T7602] netlink: 'syz.3.406': attribute type 5 has an invalid length. [ 143.315800][ T7607] macvtap1: entered promiscuous mode [ 143.325555][ T7602] netlink: 'syz.3.406': attribute type 6 has an invalid length. [ 143.334619][ T7607] vlan0: entered promiscuous mode [ 143.345629][ T7607] macvtap1: entered allmulticast mode [ 143.353692][ T7607] vlan0: entered allmulticast mode [ 143.359584][ T7607] veth0_vlan: entered allmulticast mode [ 143.418318][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.407'. [ 143.429967][ T7608] macvtap2: entered promiscuous mode [ 143.435484][ T7608] macvtap2: entered allmulticast mode [ 143.457913][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 143.487131][ T7602] netlink: 'syz.3.406': attribute type 12 has an invalid length. [ 143.499077][ T7602] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.406'. [ 143.947396][ T7633] veth1: entered promiscuous mode [ 143.959003][ T7633] netlink: 'syz.3.415': attribute type 8 has an invalid length. [ 143.970103][ T7633] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 144.165033][ T7647] sctp: [Deprecated]: syz.4.419 (pid 7647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.165033][ T7647] Use struct sctp_sack_info instead [ 144.513573][ T7664] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.713336][ T7674] netlink: 'syz.1.427': attribute type 39 has an invalid length. [ 145.285153][ T7695] nbd0: detected capacity change from 0 to 127 [ 145.456757][ T7704] macvlan0: entered allmulticast mode [ 145.464327][ T7704] veth1_vlan: entered allmulticast mode [ 145.478914][ T7704] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 145.928552][ T5869] block nbd0: Receive control failed (result -32) [ 146.107108][ T7715] validate_nla: 2 callbacks suppressed [ 146.107128][ T7715] netlink: 'syz.2.440': attribute type 10 has an invalid length. [ 146.492516][ T7738] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 146.641693][ T7745] bond0: entered promiscuous mode [ 146.646830][ T7745] bond_slave_0: entered promiscuous mode [ 146.677092][ T7745] bond_slave_1: entered promiscuous mode [ 146.702242][ T7755] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 147.045148][ T7772] : entered promiscuous mode [ 147.182548][ T7775] netlink: 'syz.2.457': attribute type 1 has an invalid length. [ 147.708389][ T7812] netlink: 'syz.3.468': attribute type 8 has an invalid length. [ 148.025001][ T7826] __nla_validate_parse: 6 callbacks suppressed [ 148.025021][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 148.067832][ T7825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 148.075168][ T7825] IPv6: NLM_F_CREATE should be set when creating new route [ 148.082627][ T7825] IPv6: NLM_F_CREATE should be set when creating new route [ 148.089916][ T7825] IPv6: NLM_F_CREATE should be set when creating new route [ 148.129148][ T7826] netlink: 136 bytes leftover after parsing attributes in process `syz.2.470'. [ 148.159508][ T7826] netlink: 180 bytes leftover after parsing attributes in process `syz.2.470'. [ 148.586146][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 148.687307][ T7862] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 148.958088][ T7871] batadv_slave_1: entered promiscuous mode [ 149.296457][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 149.312165][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 149.362845][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 149.386480][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.489'. [ 149.634004][ T7896] netlink: 48 bytes leftover after parsing attributes in process `syz.3.493'. [ 149.695704][ T7896] syzkaller0: entered promiscuous mode [ 149.715370][ T7896] syzkaller0: entered allmulticast mode [ 149.863024][ T7871] batadv_slave_1: left promiscuous mode [ 149.914318][ T7908] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 149.931940][ T7908] netlink: 232 bytes leftover after parsing attributes in process `syz.1.497'. [ 149.962715][ T5988] IPVS: starting estimator thread 0... [ 150.075381][ T7914] IPVS: using max 26 ests per chain, 62400 per kthread [ 150.148735][ T7911] netlink: 'syz.2.498': attribute type 21 has an invalid length. [ 150.183712][ T7911] netlink: 'syz.2.498': attribute type 4 has an invalid length. [ 150.202872][ T7911] netlink: 'syz.2.498': attribute type 5 has an invalid length. [ 150.396229][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.408945][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.469020][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.490205][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.623376][ T7939] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 150.748387][ T7951] tipc: Started in network mode [ 150.754322][ T7951] tipc: Node identity 66de27fd1e8a, cluster identity 4711 [ 150.762625][ T7951] tipc: Enabled bearer , priority 0 [ 150.795819][ T7951] syzkaller0: mtu less than device minimum [ 150.850259][ T7950] tipc: Disabling bearer [ 151.096735][ T7979] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 151.189918][ T7985] netlink: 'syz.2.516': attribute type 10 has an invalid length. [ 151.205467][ T7985] team0: Port device dummy0 added [ 151.244205][ T7985] netlink: 'syz.2.516': attribute type 10 has an invalid length. [ 151.260764][ T7980] tipc: Enabled bearer , priority 10 [ 151.305596][ T7985] team0: Port device dummy0 removed [ 151.323460][ T7985] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 151.721516][ T8003] syzkaller0: entered promiscuous mode [ 151.727205][ T8003] syzkaller0: entered allmulticast mode [ 151.760867][ T8003] dummy0: mtu less than device minimum [ 151.968401][ T8012] netlink: 'syz.0.525': attribute type 3 has an invalid length. [ 152.006590][ T8012] ip6gretap0: entered promiscuous mode [ 152.018580][ T8012] ip6gretap0: left promiscuous mode [ 152.321441][ T8028] tipc: Started in network mode [ 152.327415][ T8028] tipc: Node identity , cluster identity 4711 [ 152.336818][ T8028] tipc: Failed to obtain node identity [ 152.351450][ T8028] tipc: Enabling of bearer rejected, failed to enable media [ 152.381586][ T5932] tipc: Node number set to 2018781181 [ 152.568299][ T8028] syzkaller0: entered promiscuous mode [ 152.600323][ T8028] syzkaller0: entered allmulticast mode [ 152.882169][ T8054] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 153.194972][ T8063] __nla_validate_parse: 9 callbacks suppressed [ 153.194996][ T8063] netlink: 36 bytes leftover after parsing attributes in process `syz.1.537'. [ 153.219959][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.537'. [ 154.601393][ T8046] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 154.649206][ T8051] syzkaller0: left promiscuous mode [ 154.678743][ T8051] syzkaller0: left allmulticast mode [ 154.684734][ T8051] netlink: 60 bytes leftover after parsing attributes in process `syz.0.530'. [ 155.044746][ T8098] @ÿ: renamed from veth0_vlan (while UP) [ 155.666783][ T8122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.549'. [ 155.724456][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.549'. [ 156.296178][ T8144] vxcan3: entered allmulticast mode [ 156.672798][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 156.701252][ T8157] netlink: 32 bytes leftover after parsing attributes in process `syz.0.558'. [ 156.776776][ T8157] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 156.845879][ T8157] gretap1: entered promiscuous mode [ 157.051986][ T8169] macsec2: entered promiscuous mode [ 157.057491][ T8169] bridge0: entered promiscuous mode [ 157.078923][ T8169] bridge0: port 1(macsec2) entered blocking state [ 157.092993][ T8168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'. [ 157.103532][ T8169] bridge0: port 1(macsec2) entered disabled state [ 157.113529][ T8169] macsec2: entered allmulticast mode [ 157.119164][ T8169] bridge0: entered allmulticast mode [ 157.130929][ T8169] macsec2: left allmulticast mode [ 157.136057][ T8169] bridge0: left allmulticast mode [ 157.176366][ T8169] bridge0: left promiscuous mode [ 157.432829][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 157.864688][ T8209] netlink: 'syz.4.579': attribute type 11 has an invalid length. [ 157.883658][ T8209] netlink: 'syz.4.579': attribute type 11 has an invalid length. [ 157.894696][ T8211] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20000 [ 157.898476][ T8209] netlink: 224 bytes leftover after parsing attributes in process `syz.4.579'. [ 157.984281][ T8218] vlan0: entered promiscuous mode [ 157.992224][ T8218] team0: entered promiscuous mode [ 157.998776][ T8218] team0: Device vlan0 is already an upper device of the team interface [ 158.068688][ T8220] dvmrp0: entered allmulticast mode [ 158.187596][ T8228] bridge0: port 1(hsr_slave_0) entered blocking state [ 158.194912][ T8228] bridge0: port 1(hsr_slave_0) entered disabled state [ 158.202872][ T8228] hsr_slave_0: entered allmulticast mode [ 158.211931][ T8228] hsr_slave_0: left allmulticast mode [ 158.392962][ T8230] veth1_vlan: left allmulticast mode [ 158.422534][ T8235] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.446528][ T8230] macvlan0: left allmulticast mode [ 158.466743][ T8241] sctp: [Deprecated]: syz.2.588 (pid 8241) Use of int in max_burst socket option deprecated. [ 158.466743][ T8241] Use struct sctp_assoc_value instead [ 158.482829][ T8230] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 158.734872][ T8251] netlink: 'syz.1.591': attribute type 13 has an invalid length. [ 158.754645][ T8251] netlink: 'syz.1.591': attribute type 17 has an invalid length. [ 159.205547][ T8251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.216452][ T8251] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.244149][ T8251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.266548][ T8262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.594'. [ 159.294010][ T8262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.594'. [ 159.899737][ T8284] netlink: 252 bytes leftover after parsing attributes in process `syz.4.598'. [ 160.075329][ T8296] pim6reg1: entered promiscuous mode [ 160.086322][ T8296] pim6reg1: entered allmulticast mode [ 160.725987][ T8325] netlink: 20 bytes leftover after parsing attributes in process `syz.0.612'. [ 160.881081][ T8325] nbd: socks must be embedded in a SOCK_ITEM attr [ 160.908001][ T8300] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 161.231315][ T8339] team_slave_0: entered promiscuous mode [ 161.237653][ T8339] team_slave_1: entered promiscuous mode [ 161.290625][ T8339] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 161.337392][ T8339] team0: Device macvtap1 is already an upper device of the team interface [ 161.358199][ T8339] team_slave_0: left promiscuous mode [ 161.364080][ T8339] team_slave_1: left promiscuous mode [ 161.522742][ T8337] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.648206][ T8349] netlink: 'syz.4.616': attribute type 1 has an invalid length. [ 161.672223][ T8349] netlink: 224 bytes leftover after parsing attributes in process `syz.4.616'. [ 161.814989][ T8337] bond3 (unregistering): Released all slaves [ 162.340993][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 162.374024][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.620'. [ 162.584446][ T8376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.623'. [ 162.661209][ T8375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.622'. [ 162.690906][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.624'. [ 163.377328][ T8406] netlink: 'syz.3.630': attribute type 39 has an invalid length. [ 163.417381][ T8408] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 163.439733][ T8408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.846641][ T8414] netlink: 'syz.0.632': attribute type 2 has an invalid length. [ 164.432946][ T8443] __nla_validate_parse: 30 callbacks suppressed [ 164.432969][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 164.627000][ T8454] Bluetooth: MGMT ver 1.23 [ 164.756609][ T8458] netlink: 'syz.3.641': attribute type 4 has an invalid length. [ 165.328537][ T8477] pim6reg1: entered promiscuous mode [ 165.336973][ T8477] pim6reg1: entered allmulticast mode [ 166.152373][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 167.024622][ T8517] netlink: 'syz.3.659': attribute type 2 has an invalid length. [ 167.048788][ T8517] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 167.066132][ T8517] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 167.081553][ T8517] netlink: 'syz.3.659': attribute type 2 has an invalid length. [ 167.098116][ T8517] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 167.389997][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 167.418337][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'. [ 168.009887][ T8553] batadv_slave_1: entered promiscuous mode [ 168.078811][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 168.150662][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 168.319640][ T8563] netlink: 'syz.1.672': attribute type 2 has an invalid length. [ 168.335977][ T8563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'. [ 168.347578][ T8563] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 168.371163][ T8549] batadv_slave_1: left promiscuous mode [ 168.405666][ T8568] ieee802154 phy1 wpan1: encryption failed: -22 [ 168.508082][ T8570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.643017][ T8576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.676'. [ 168.896423][ T8591] vlan3: entered promiscuous mode [ 168.902290][ T8591] team0: entered promiscuous mode [ 168.907879][ T8591] team_slave_0: entered promiscuous mode [ 168.923271][ T8591] team_slave_1: entered promiscuous mode [ 168.947591][ T8596] delete_channel: no stack [ 169.143088][ T8604] syz.2.681 uses old SIOCAX25GETINFO [ 169.267110][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 169.295791][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'. [ 169.337291][ T8610] netlink: 'syz.3.685': attribute type 18 has an invalid length. [ 169.526581][ T8618] __nla_validate_parse: 1 callbacks suppressed [ 169.526604][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 169.572717][ T8618] netlink: 'syz.0.688': attribute type 1 has an invalid length. [ 169.637433][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 169.701874][ T8618] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.705872][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 169.725762][ T8629] ieee802154 phy1 wpan1: encryption failed: -22 [ 169.770506][ T8618] bond3: (slave bond4): making interface the new active one [ 169.783506][ T8618] bond3: (slave bond4): Enslaving as an active interface with an up link [ 169.806166][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 169.898594][ T8628] netlink: 1032 bytes leftover after parsing attributes in process `syz.2.690'. [ 170.098214][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 170.167885][ T8642] geneve2: entered promiscuous mode [ 170.258922][ T8650] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.694'. [ 170.363711][ T8654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.694'. [ 170.444530][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.694'. [ 170.476929][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 170.490249][ T8660] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 170.546819][ T8669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.794534][ T8729] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 171.963612][ T8738] netlink: 'syz.3.721': attribute type 11 has an invalid length. [ 172.419013][ T8755] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 173.368049][ T8777] pim6reg1: entered promiscuous mode [ 173.380223][ T8777] pim6reg1: entered allmulticast mode [ 173.784956][ T8784] netlink: 'syz.2.732': attribute type 4 has an invalid length. [ 173.805452][ T8798] batman_adv: batadv0: Adding interface: dummy0 [ 173.830362][ T8798] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.884102][ T8798] batman_adv: batadv0: Interface activated: dummy0 [ 173.893275][ T8788] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 173.900250][ T8788] syzkaller1: linktype set to 823 [ 173.990772][ T8799] batadv0: mtu less than device minimum [ 173.998598][ T8799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.012585][ T8799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.025937][ T8799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.039480][ T8799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.053314][ T8799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.066307][ T8799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.081267][ T8799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.086705][ T30] audit: type=1800 audit(1757246933.544:2): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.734" name="memory.events" dev="tmpfs" ino=744 res=0 errno=0 [ 174.097177][ T8799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.133928][ T8799] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.696763][ T8829] __nla_validate_parse: 5 callbacks suppressed [ 174.696784][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.742'. [ 174.718689][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 174.728628][ T8829] netlink: 'syz.0.742': attribute type 14 has an invalid length. [ 174.786154][ T8829] netlink: 'syz.0.742': attribute type 13 has an invalid length. [ 174.817550][ T8836] sit0: entered promiscuous mode [ 174.845782][ T8836] netlink: 'syz.4.745': attribute type 1 has an invalid length. [ 174.866039][ T8836] netlink: 1 bytes leftover after parsing attributes in process `syz.4.745'. [ 175.391571][ T8821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.410999][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.750'. [ 175.444425][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.750'. [ 175.642771][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 175.671705][ T8865] tipc: Enabling of bearer rejected, already enabled [ 176.440034][ T8907] netlink: 100 bytes leftover after parsing attributes in process `syz.2.765'. [ 176.452046][ T8907] netlink: 100 bytes leftover after parsing attributes in process `syz.2.765'. [ 176.481661][ T8907] team0: Device gtp1 is of different type [ 176.773371][ T8918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.766'. [ 176.893615][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 176.965943][ T8908] tipc: Enabling of bearer rejected, failed to enable media [ 177.149125][ T8927] bond0: (slave dummy0): Releasing backup interface [ 177.235063][ T8927] bond0: (slave 77ÿ): Releasing backup interface [ 177.274346][ T8927] bond0: (slave bond_slave_1): Releasing backup interface [ 177.322624][ T8927] team0: Port device team_slave_0 removed [ 177.355487][ T8927] team0: Port device team_slave_1 removed [ 177.363564][ T8927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.375829][ T8927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.390090][ T8927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.473031][ T8939] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 177.675893][ T8937] syzkaller1: entered promiscuous mode [ 177.689712][ T8937] syzkaller1: entered allmulticast mode [ 177.810227][ T8948] vlan2: entered promiscuous mode [ 177.829177][ T8948] team0: entered promiscuous mode [ 177.853244][ T8948] team0: Device vlan2 is already an upper device of the team interface [ 178.633577][ T8997] macsec2: entered promiscuous mode [ 178.653727][ T8997] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 178.698202][ T8997] macsec2: entered allmulticast mode [ 178.733958][ T8997] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 179.139622][ T8987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.162779][ T8987] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 179.197095][ T8987] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.216201][ T8987] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 179.345464][ T8987] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.363683][ T8987] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 179.475197][ T8987] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 179.483360][ T8987] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 179.635991][ T9037] syzkaller1: entered promiscuous mode [ 179.647307][ T9037] syzkaller1: entered allmulticast mode [ 179.706759][ T9037] __nla_validate_parse: 3 callbacks suppressed [ 179.706780][ T9037] netlink: 14 bytes leftover after parsing attributes in process `syz.2.794'. [ 179.755381][ T9041] netlink: 14 bytes leftover after parsing attributes in process `syz.2.794'. [ 180.020758][ T9051] netlink: 'syz.4.796': attribute type 4 has an invalid length. [ 180.030430][ T9052] netlink: 'syz.4.796': attribute type 4 has an invalid length. [ 180.058878][ T9041] bond0 (unregistering): Released all slaves [ 180.268217][ T9057] netlink: 'syz.4.798': attribute type 4 has an invalid length. [ 180.495903][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 180.678123][ T9072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.801'. [ 180.968288][ T9085] tipc: Started in network mode [ 180.973683][ T9085] tipc: Node identity e2431454f44e, cluster identity 4711 [ 180.983527][ T9085] tipc: Enabled bearer , priority 0 [ 181.022807][ T9085] syzkaller0: entered promiscuous mode [ 181.029022][ T9085] syzkaller0: entered allmulticast mode [ 181.066412][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 181.084825][ T9084] tipc: Resetting bearer [ 181.126140][ T9084] tipc: Disabling bearer [ 181.394860][ T9107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.810'. [ 182.305441][ T9121] pim6reg: entered allmulticast mode [ 182.315242][ T9121] pim6reg: left allmulticast mode [ 182.443633][ T9123] netlink: 176 bytes leftover after parsing attributes in process `syz.2.814'. [ 182.458803][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 182.469698][ T9123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.814'. [ 182.798526][ T9136] netlink: 36 bytes leftover after parsing attributes in process `syz.2.817'. [ 199.703575][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.143058][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.583459][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.540086][ T31] INFO: task kworker/1:6:5933 blocked for more than 143 seconds. [ 331.547924][ T31] Not tainted syzkaller #0 [ 331.552990][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.561811][ T31] task:kworker/1:6 state:D stack:24520 pid:5933 tgid:5933 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 331.574086][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 331.580878][ T31] Call Trace: [ 331.584189][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 331.587163][ T31] __schedule+0x1798/0x4cc0 [ 331.591774][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 331.597341][ T31] ? __pfx___schedule+0x10/0x10 [ 331.603533][ T31] ? schedule+0x91/0x360 [ 331.608125][ T31] schedule+0x165/0x360 [ 331.613514][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.619026][ T31] __mutex_lock+0x7e6/0x1350 [ 331.625244][ T31] ? __mutex_lock+0x5bb/0x1350 [ 331.641661][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 331.648004][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.679861][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 331.685676][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 331.717875][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 331.724340][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 331.730522][ T31] process_scheduled_works+0xae1/0x17b0 [ 331.736113][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.742248][ T31] worker_thread+0x8a0/0xda0 [ 331.746882][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 331.753330][ T31] ? __kthread_parkme+0x7b/0x200 [ 331.758294][ T31] kthread+0x70e/0x8a0 [ 331.762504][ T31] ? __pfx_worker_thread+0x10/0x10 [ 331.767670][ T31] ? __pfx_kthread+0x10/0x10 [ 331.773635][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.778906][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.784203][ T31] ? __pfx_kthread+0x10/0x10 [ 331.788833][ T31] ret_from_fork+0x3fc/0x770 [ 331.793524][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.798700][ T31] ? __switch_to_asm+0x39/0x70 [ 331.803536][ T31] ? __switch_to_asm+0x33/0x70 [ 331.808461][ T31] ? __pfx_kthread+0x10/0x10 [ 331.813157][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.817953][ T31] [ 331.821097][ T31] INFO: task syz.1.784:8975 blocked for more than 143 seconds. [ 331.828680][ T31] Not tainted syzkaller #0 [ 331.833745][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.842453][ T31] task:syz.1.784 state:D stack:25096 pid:8975 tgid:8975 ppid:5879 task_flags:0x400040 flags:0x00004006 [ 331.854502][ T31] Call Trace: [ 331.857816][ T31] [ 331.860808][ T31] __schedule+0x1798/0x4cc0 [ 331.865349][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.870426][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.875365][ T31] ? __pfx___schedule+0x10/0x10 [ 331.880383][ T31] ? schedule+0x91/0x360 [ 331.884685][ T31] schedule+0x165/0x360 [ 331.888865][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.894434][ T31] __mutex_lock+0x7e6/0x1350 [ 331.899062][ T31] ? __mutex_lock+0x5bb/0x1350 [ 331.903900][ T31] ? rfkill_unregister+0xc8/0x220 [ 331.908978][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.914542][ T31] ? __pfx_device_del+0x10/0x10 [ 331.919468][ T31] rfkill_unregister+0xc8/0x220 [ 331.924389][ T31] nfc_unregister_device+0x96/0x2a0 [ 331.929690][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 331.935421][ T31] virtual_ncidev_close+0x56/0x90 [ 331.940612][ T31] __fput+0x44c/0xa70 [ 331.944651][ T31] task_work_run+0x1d1/0x260 [ 331.949359][ T31] ? __pfx_task_work_run+0x10/0x10 [ 331.954521][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 331.960082][ T31] exit_to_user_mode_loop+0xec/0x110 [ 331.965418][ T31] do_syscall_64+0x2bd/0x3b0 [ 331.970090][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.975352][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.981658][ T31] ? clear_bhb_loop+0x60/0xb0 [ 331.986399][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.992397][ T31] RIP: 0033:0x7fe32958ebe9 [ 331.996837][ T31] RSP: 002b:00007ffc4838a508 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 332.005344][ T31] RAX: 0000000000000000 RBX: 00007fe3297c7da0 RCX: 00007fe32958ebe9 [ 332.013418][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 332.021505][ T31] RBP: 00007fe3297c7da0 R08: 0000000000000240 R09: 0000001e4838a7ff [ 332.029655][ T31] R10: 00007fe3297c7cb0 R11: 0000000000000246 R12: 000000000002bb72 [ 332.037677][ T31] R13: 00007ffc4838a600 R14: ffffffffffffffff R15: 00007ffc4838a620 [ 332.045743][ T31] [ 332.048804][ T31] INFO: task syz.0.783:8987 blocked for more than 143 seconds. [ 332.056463][ T31] Not tainted syzkaller #0 [ 332.061488][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.070254][ T31] task:syz.0.783 state:D stack:26792 pid:8987 tgid:8978 ppid:5861 task_flags:0x400140 flags:0x00004006 [ 332.082271][ T31] Call Trace: [ 332.085580][ T31] [ 332.088543][ T31] __schedule+0x1798/0x4cc0 [ 332.093180][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.098072][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.103021][ T31] ? __pfx___schedule+0x10/0x10 [ 332.107919][ T31] ? schedule+0x91/0x360 [ 332.112284][ T31] schedule+0x165/0x360 [ 332.116483][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.122111][ T31] __mutex_lock+0x7e6/0x1350 [ 332.126738][ T31] ? __mutex_lock+0x5bb/0x1350 [ 332.131631][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 332.136939][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.142068][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.147321][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 332.153296][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 332.159712][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 332.165461][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 332.170708][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 332.176490][ T31] rfkill_set_block+0x1d2/0x440 [ 332.181898][ T31] rfkill_fop_write+0x44b/0x570 [ 332.186836][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 332.192317][ T31] ? security_kernfs_init_security+0x240/0x290 [ 332.198496][ T31] ? rw_verify_area+0x255/0x4d0 [ 332.203583][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.208486][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 332.214004][ T31] vfs_write+0x27b/0xb30 [ 332.218307][ T31] ? __pfx_vfs_write+0x10/0x10 [ 332.223148][ T31] ? __fget_files+0x2a/0x420 [ 332.227783][ T31] ? __fget_files+0x2a/0x420 [ 332.232428][ T31] ? __fget_files+0x3a0/0x420 [ 332.237109][ T31] ? __fget_files+0x2a/0x420 [ 332.241775][ T31] ksys_write+0x145/0x250 [ 332.246141][ T31] ? __pfx_ksys_write+0x10/0x10 [ 332.251066][ T31] ? rcu_is_watching+0x15/0xb0 [ 332.255843][ T31] ? do_syscall_64+0xbe/0x3b0 [ 332.260674][ T31] do_syscall_64+0xfa/0x3b0 [ 332.265216][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.270521][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.276617][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.281369][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.287285][ T31] RIP: 0033:0x7f8c28b8ebe9 [ 332.291815][ T31] RSP: 002b:00007f8c29a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.300331][ T31] RAX: ffffffffffffffda RBX: 00007f8c28dc6090 RCX: 00007f8c28b8ebe9 [ 332.308356][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 332.316437][ T31] RBP: 00007f8c28c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 332.324492][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.332577][ T31] R13: 00007f8c28dc6128 R14: 00007f8c28dc6090 R15: 00007ffca5d4e708 [ 332.340831][ T31] [ 332.343894][ T31] INFO: task syz.4.808:9096 blocked for more than 144 seconds. [ 332.356932][ T31] Not tainted syzkaller #0 [ 332.361955][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.370736][ T31] task:syz.4.808 state:D stack:26792 pid:9096 tgid:9093 ppid:5877 task_flags:0x400040 flags:0x00004004 [ 332.382908][ T31] Call Trace: [ 332.386213][ T31] [ 332.389151][ T31] __schedule+0x1798/0x4cc0 [ 332.393737][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.398647][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.403600][ T31] ? __pfx___schedule+0x10/0x10 [ 332.408494][ T31] ? schedule+0x91/0x360 [ 332.412815][ T31] schedule+0x165/0x360 [ 332.416981][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.422830][ T31] __mutex_lock+0x7e6/0x1350 [ 332.427471][ T31] ? __mutex_lock+0x5bb/0x1350 [ 332.432329][ T31] ? rfkill_register+0x37/0x8e0 [ 332.437237][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.442333][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 332.447752][ T31] ? device_initialize+0x24b/0x440 [ 332.452972][ T31] rfkill_register+0x37/0x8e0 [ 332.457670][ T31] nfc_register_device+0x14a/0x320 [ 332.462862][ T31] nci_register_device+0x87f/0x9d0 [ 332.468033][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 332.473993][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 332.479375][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 332.484795][ T31] virtual_ncidev_open+0x129/0x1a0 [ 332.490021][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 332.495675][ T31] misc_open+0x2bc/0x330 [ 332.500604][ T31] chrdev_open+0x4c9/0x5e0 [ 332.505103][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 332.510196][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 332.516594][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 332.521667][ T31] do_dentry_open+0x950/0x13f0 [ 332.526481][ T31] vfs_open+0x3b/0x340 [ 332.530656][ T31] ? path_openat+0x2ecd/0x3830 [ 332.535439][ T31] path_openat+0x2ee5/0x3830 [ 332.540090][ T31] ? arch_stack_walk+0xfc/0x150 [ 332.545006][ T31] ? stack_depot_save_flags+0x40/0x860 [ 332.550615][ T31] ? __pfx_path_openat+0x10/0x10 [ 332.555618][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.561787][ T31] do_filp_open+0x1fa/0x410 [ 332.566312][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.571256][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 332.576331][ T31] ? _raw_spin_unlock+0x28/0x50 [ 332.581282][ T31] ? alloc_fd+0x64c/0x6c0 [ 332.585635][ T31] do_sys_openat2+0x121/0x1c0 [ 332.590401][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.595631][ T31] ? exc_page_fault+0x76/0xf0 [ 332.600380][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 332.605700][ T31] __x64_sys_openat+0x138/0x170 [ 332.610629][ T31] do_syscall_64+0xfa/0x3b0 [ 332.615148][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.620450][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.626558][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.631356][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.637281][ T31] RIP: 0033:0x7f125a78ebe9 [ 332.641760][ T31] RSP: 002b:00007f125b5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.650241][ T31] RAX: ffffffffffffffda RBX: 00007f125a9c6180 RCX: 00007f125a78ebe9 [ 332.658221][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 332.666259][ T31] RBP: 00007f125a811e19 R08: 0000000000000000 R09: 0000000000000000 [ 332.674316][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.682369][ T31] R13: 00007f125a9c6218 R14: 00007f125a9c6180 R15: 00007ffcf8135688 [ 332.690444][ T31] [ 332.693498][ T31] INFO: task syz.3.811:9112 blocked for more than 144 seconds. [ 332.701152][ T31] Not tainted syzkaller #0 [ 332.706118][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.714911][ T31] task:syz.3.811 state:D stack:28328 pid:9112 tgid:9111 ppid:5864 task_flags:0x400140 flags:0x00004004 [ 332.726924][ T31] Call Trace: [ 332.730282][ T31] [ 332.733247][ T31] __schedule+0x1798/0x4cc0 [ 332.737798][ T31] ? kasan_save_free_info+0x46/0x50 [ 332.743118][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.748031][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.753013][ T31] ? __pfx___schedule+0x10/0x10 [ 332.757929][ T31] ? schedule+0x91/0x360 [ 332.762254][ T31] schedule+0x165/0x360 [ 332.766446][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.771993][ T31] __mutex_lock+0x7e6/0x1350 [ 332.776614][ T31] ? __mutex_lock+0x5bb/0x1350 [ 332.781444][ T31] ? misc_open+0x51/0x330 [ 332.785796][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.791024][ T31] misc_open+0x51/0x330 [ 332.795211][ T31] chrdev_open+0x4c9/0x5e0 [ 332.799688][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 332.804680][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 332.811096][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 332.816087][ T31] do_dentry_open+0x950/0x13f0 [ 332.823625][ T31] vfs_open+0x3b/0x340 [ 332.827763][ T31] ? path_openat+0x2ecd/0x3830 [ 332.845028][ T31] path_openat+0x2ee5/0x3830 [ 332.851157][ T31] ? arch_stack_walk+0xfc/0x150 [ 332.856067][ T31] ? stack_depot_save_flags+0x40/0x860 [ 332.866206][ T31] ? __pfx_path_openat+0x10/0x10 [ 332.871351][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.877600][ T31] do_filp_open+0x1fa/0x410 [ 332.890776][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.895731][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 332.904992][ T31] ? _raw_spin_unlock+0x28/0x50 [ 332.911551][ T31] ? alloc_fd+0x64c/0x6c0 [ 332.915955][ T31] do_sys_openat2+0x121/0x1c0 [ 332.923878][ T31] ? __se_sys_futex+0x36f/0x400 [ 332.928779][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.935881][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 332.944535][ T31] ? rcu_is_watching+0x15/0xb0 [ 332.952001][ T31] __x64_sys_openat+0x138/0x170 [ 332.956914][ T31] do_syscall_64+0xfa/0x3b0 [ 332.964791][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.971746][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.978052][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.986066][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.995071][ T31] RIP: 0033:0x7fecfc78ebe9 [ 333.004627][ T31] RSP: 002b:00007fecfd6ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 333.013244][ T31] RAX: ffffffffffffffda RBX: 00007fecfc9c5fa0 RCX: 00007fecfc78ebe9 [ 333.026022][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 333.034074][ T31] RBP: 00007fecfc811e19 R08: 0000000000000000 R09: 0000000000000000 [ 333.046912][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.055227][ T31] R13: 00007fecfc9c6038 R14: 00007fecfc9c5fa0 R15: 00007ffccae20ab8 [ 333.069351][ T31] [ 333.075088][ T31] INFO: task syz.2.824:9176 blocked for more than 144 seconds. [ 333.084327][ T31] Not tainted syzkaller #0 [ 333.092439][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.104854][ T31] task:syz.2.824 state:D stack:28328 pid:9176 tgid:9175 ppid:5871 task_flags:0x400040 flags:0x00004004 [ 333.121451][ T31] Call Trace: [ 333.124809][ T31] [ 333.127791][ T31] __schedule+0x1798/0x4cc0 [ 333.134821][ T31] ? kasan_save_free_info+0x46/0x50 [ 333.142720][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.147635][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.154920][ T31] ? __pfx___schedule+0x10/0x10 [ 333.162368][ T31] ? schedule+0x91/0x360 [ 333.166663][ T31] schedule+0x165/0x360 [ 333.174545][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.182422][ T31] __mutex_lock+0x7e6/0x1350 [ 333.187064][ T31] ? __mutex_lock+0x5bb/0x1350 [ 333.193386][ T31] ? misc_open+0x51/0x330 [ 333.197741][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.203022][ T31] misc_open+0x51/0x330 [ 333.207234][ T31] chrdev_open+0x4c9/0x5e0 [ 333.211754][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 333.216727][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 333.223714][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 333.228707][ T31] do_dentry_open+0x950/0x13f0 [ 333.233624][ T31] vfs_open+0x3b/0x340 [ 333.237721][ T31] ? path_openat+0x2ecd/0x3830 [ 333.242574][ T31] path_openat+0x2ee5/0x3830 [ 333.247194][ T31] ? arch_stack_walk+0xfc/0x150 [ 333.252119][ T31] ? stack_depot_save_flags+0x40/0x860 [ 333.257597][ T31] ? __pfx_path_openat+0x10/0x10 [ 333.262612][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.268722][ T31] do_filp_open+0x1fa/0x410 [ 333.273277][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.278143][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 333.283272][ T31] ? _raw_spin_unlock+0x28/0x50 [ 333.288148][ T31] ? alloc_fd+0x64c/0x6c0 [ 333.292609][ T31] do_sys_openat2+0x121/0x1c0 [ 333.297356][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 333.302604][ T31] ? exc_page_fault+0x76/0xf0 [ 333.307294][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 333.312645][ T31] __x64_sys_openat+0x138/0x170 [ 333.317516][ T31] do_syscall_64+0xfa/0x3b0 [ 333.322088][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.327309][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.333457][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.338171][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.344139][ T31] RIP: 0033:0x7f4f5f98ebe9 [ 333.348593][ T31] RSP: 002b:00007f4f6076f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 333.357141][ T31] RAX: ffffffffffffffda RBX: 00007f4f5fbc5fa0 RCX: 00007f4f5f98ebe9 [ 333.365224][ T31] RDX: 0000000000000302 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 333.373287][ T31] RBP: 00007f4f5fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 333.381390][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.389572][ T31] R13: 00007f4f5fbc6038 R14: 00007f4f5fbc5fa0 R15: 00007ffc2674ad08 [ 333.397619][ T31] [ 333.400968][ T31] [ 333.400968][ T31] Showing all locks held in the system: [ 333.408708][ T31] 1 lock held by khungtaskd/31: [ 333.413769][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 333.423725][ T31] 2 locks held by getty/5623: [ 333.428405][ T31] #0: ffff888033a6d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 333.438237][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 333.448408][ T31] 3 locks held by kworker/1:6/5933: [ 333.453694][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 333.464959][ T31] #1: ffffc9000aa1fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 333.478546][ T31] #2: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 333.489943][ T31] 2 locks held by syz.1.784/8975: [ 333.494968][ T31] #0: ffff8880772af100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 333.504791][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 333.514978][ T31] 2 locks held by syz.0.783/8987: [ 333.520057][ T31] #0: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 333.530415][ T31] #1: ffff8880772af100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 333.540484][ T31] 3 locks held by syz.4.808/9096: [ 333.545577][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.556471][ T31] #1: ffff88801a55e100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 333.566174][ T31] #2: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 333.576188][ T31] 1 lock held by syz.3.811/9112: [ 333.581234][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.589827][ T31] 1 lock held by syz.2.824/9176: [ 333.594795][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.603306][ T31] 1 lock held by syz-executor/9183: [ 333.608510][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.617048][ T31] 1 lock held by syz-executor/9184: [ 333.622321][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.631013][ T31] 1 lock held by syz-executor/9187: [ 333.636249][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.644786][ T31] 1 lock held by syz-executor/9188: [ 333.650079][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.658714][ T31] 1 lock held by syz-executor/9190: [ 333.664071][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.672686][ T31] 1 lock held by syz-executor/9193: [ 333.677925][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.686487][ T31] 1 lock held by syz-executor/9194: [ 333.691782][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.700380][ T31] 1 lock held by syz-executor/9197: [ 333.705614][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.714174][ T31] 1 lock held by syz-executor/9198: [ 333.719430][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.727946][ T31] 1 lock held by syz-executor/9200: [ 333.733227][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.741863][ T31] 1 lock held by syz-executor/9203: [ 333.747067][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.755593][ T31] 1 lock held by syz-executor/9204: [ 333.760857][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.769427][ T31] 1 lock held by syz-executor/9207: [ 333.774663][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.783270][ T31] 1 lock held by syz-executor/9208: [ 333.788501][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.797044][ T31] 1 lock held by syz-executor/9210: [ 333.802325][ T31] #0: ffffffff8e9c1c48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 333.810942][ T31] [ 333.813299][ T31] ============================================= [ 333.813299][ T31] [ 333.821785][ T31] NMI backtrace for cpu 1 [ 333.821800][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 333.821818][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.821828][ T31] Call Trace: [ 333.821835][ T31] [ 333.821842][ T31] dump_stack_lvl+0x189/0x250 [ 333.821869][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.821889][ T31] ? __pfx__printk+0x10/0x10 [ 333.821923][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 333.821949][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 333.821976][ T31] ? __pfx__printk+0x10/0x10 [ 333.822002][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 333.822030][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 333.822057][ T31] watchdog+0xf93/0xfe0 [ 333.822084][ T31] ? watchdog+0x1de/0xfe0 [ 333.822112][ T31] kthread+0x70e/0x8a0 [ 333.822135][ T31] ? __pfx_watchdog+0x10/0x10 [ 333.822157][ T31] ? __pfx_kthread+0x10/0x10 [ 333.822178][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.822204][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.822220][ T31] ? __pfx_kthread+0x10/0x10 [ 333.822240][ T31] ret_from_fork+0x3fc/0x770 [ 333.822260][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 333.822281][ T31] ? __switch_to_asm+0x39/0x70 [ 333.822301][ T31] ? __switch_to_asm+0x33/0x70 [ 333.822321][ T31] ? __pfx_kthread+0x10/0x10 [ 333.822342][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.822382][ T31] [ 333.822388][ T31] Sending NMI from CPU 1 to CPUs 0: [ 333.968782][ C0] NMI backtrace for cpu 0 [ 333.968801][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 333.968820][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.968830][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 333.968853][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 b7 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 333.968867][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 333.968883][ C0] RAX: e958553c862aea00 RBX: ffffffff819683f8 RCX: e958553c862aea00 [ 333.968895][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b9d08 RDI: ffffffff8be33880 [ 333.968907][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 333.968919][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa39230 [ 333.968932][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 333.968943][ C0] FS: 0000000000000000(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 333.968956][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 333.968967][ C0] CR2: 000055df1d5df4d8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 333.968983][ C0] Call Trace: [ 333.968990][ C0] [ 333.968997][ C0] default_idle+0x13/0x20 [ 333.969017][ C0] default_idle_call+0x74/0xb0 [ 333.969039][ C0] do_idle+0x1e8/0x510 [ 333.969059][ C0] ? __pfx_do_idle+0x10/0x10 [ 333.969084][ C0] cpu_startup_entry+0x44/0x60 [ 333.969100][ C0] rest_init+0x2de/0x300 [ 333.969122][ C0] start_kernel+0x3a9/0x410 [ 333.969142][ C0] x86_64_start_reservations+0x24/0x30 [ 333.969166][ C0] x86_64_start_kernel+0x143/0x1c0 [ 333.969188][ C0] common_startup_64+0x13e/0x147 [ 333.969225][ C0] [ 333.969849][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 333.969869][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 333.969895][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.969908][ T31] Call Trace: [ 333.969919][ T31] [ 333.969931][ T31] dump_stack_lvl+0x99/0x250 [ 333.969962][ T31] ? __asan_memcpy+0x40/0x70 [ 333.969991][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.970021][ T31] ? __pfx__printk+0x10/0x10 [ 333.970069][ T31] vpanic+0x281/0x750 [ 333.970099][ T31] ? __pfx_vpanic+0x10/0x10 [ 333.970125][ T31] ? preempt_schedule+0xae/0xc0 [ 333.970151][ T31] ? preempt_schedule_common+0x83/0xd0 [ 333.970182][ T31] panic+0xb9/0xc0 [ 333.970208][ T31] ? __pfx_panic+0x10/0x10 [ 333.970236][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 333.970266][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 333.970304][ T31] watchdog+0xfd2/0xfe0 [ 333.970343][ T31] ? watchdog+0x1de/0xfe0 [ 333.970383][ T31] kthread+0x70e/0x8a0 [ 333.970425][ T31] ? __pfx_watchdog+0x10/0x10 [ 333.970456][ T31] ? __pfx_kthread+0x10/0x10 [ 333.970489][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.970525][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.970548][ T31] ? __pfx_kthread+0x10/0x10 [ 333.970578][ T31] ret_from_fork+0x3fc/0x770 [ 333.970606][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 333.970638][ T31] ? __switch_to_asm+0x39/0x70 [ 333.970666][ T31] ? __switch_to_asm+0x33/0x70 [ 333.970694][ T31] ? __pfx_kthread+0x10/0x10 [ 333.970724][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.970777][ T31] [ 334.301527][ T31] Kernel Offset: disabled [ 334.305857][ T31] Rebooting in 86400 seconds..