last executing test programs: 20.489526798s ago: executing program 3 (id=5157): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="68fff900", @ANYRES16=r4, @ANYBLOB="010028bd70000000000001000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f00000100000000000000001400020077673200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000380)={'ip_vti0\x00', r1, 0x1, 0x40, 0x4, 0x0, {{0x33, 0x4, 0x3, 0x28, 0xcc, 0x68, 0x0, 0x9, 0x2d, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x14}, {[@rr={0x7, 0xf, 0xae, [@empty, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0x68, 0x1, 0xa, [{@local, 0x7fff}, {@empty, 0x3}, {@private=0xa010101, 0x2d9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd3e}, {@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x44, 0x3b, 0x3, 0x2, [{@loopback, 0x8}, {@private=0xa010100, 0x6}, {@local, 0x6}, {@broadcast, 0x9}, {@remote, 0xfffffda8}, {@remote, 0x8}, {@loopback}, {@empty, 0x7}]}, @timestamp_addr={0x44, 0x24, 0xc4, 0x1, 0x4, [{@local}, {@private=0xa}, {@multicast2, 0x4d}, {@private=0xa010100, 0x9}]}, @timestamp_prespec={0x44, 0x14, 0xb3, 0x3, 0x1, [{@local, 0x400}, {@multicast2, 0x7fffffff}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0xa0, 0x0, 0x405, 0x70bd27, 0x25dfdc01, {}, [{{0x8, 0x1, r5}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r7}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44084) 20.296810118s ago: executing program 3 (id=5161): r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x6, 0xa, 0xfffffffa, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x3c, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x33}, @srh={0x0, 0x0, 0x4, 0x0, 0x5, 0x20, 0x5}]}}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\b\x00\x00', @ANYRES16=r5, @ANYBLOB="080025bd7000fddbdf2514000000050019000100000005000c0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4e801}, 0x24000890) 20.154441065s ago: executing program 3 (id=5162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf2501000000080001001e7fbd87fe458b0ca5ee6340362c63646bac5fa76ecbfaa3bf27fbfffce38670deea13350cc22cf3cec9ced39102fd6548756e92121d35e8b96c9a", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000001dcdf251700000008000300", @ANYRES32=r10, @ANYBLOB="5c00308014000400dfeedc2634e7d49e20f73e16e79faba03c0001803000038006000200ffff0000190002000300000006000300ffff00000600010001000000430004000200aaaaaaaaaaaa08000100000000000500020009000000c338f28d300c54e92fc9aac2bb34a6c0d20946571ea89d29b9a6a824ae6cb225a222cb178f486901"], 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x48804) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xffffffffffffffaa, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0xfffffffffffffec5}}], 0x400000000000181, 0x4) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) 18.287272112s ago: executing program 2 (id=5172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2000000000000103, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000014c0)=[@sack_perm, @timestamp, @window={0x3, 0xc2, 0x6}, @mss={0x2, 0x4}, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x1000007}, @window={0x3, 0x575, 0x10}, @mss={0x2, 0x10001}, @window={0x3, 0x1000, 0x9}, @timestamp, @mss={0x2, 0xb}], 0xd) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0xc, 0x7100000}) socket$packet(0x11, 0x3, 0x300) sendmsg(0xffffffffffffffff, 0x0, 0x4000844) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x2b, 0x80000, 0x7a) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) getsockname$packet(r6, 0x0, 0x0) connect$rose(r6, 0x0, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r7, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f00000004c0)=""/4096, &(0x7f0000000240)=0x1000) 18.265410065s ago: executing program 3 (id=5176): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x6, 0x3ff, 0xca73, 0x1, 0x8, 0x8}) 18.23567772s ago: executing program 3 (id=5178): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) (async) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="fcddc759027c", 0x6}], 0x1}, 0x41) (async) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r2 = socket(0x1, 0x803, 0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x0, &(0x7f0000000000)=0x5, 0x4) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="34000000c003b5950000000000000000bfe3c968009eba", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff000000000800080081060000"], 0x34}}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xb, 0x7, 0x21, @local, @empty, 0x8, 0x1, 0x3, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x6, 0x8, 0x1, 0x9, 0x70, @loopback, @loopback, 0x20, 0x0, 0x4, 0x3}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @local}, &(0x7f0000000440)=0xc) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r7, 0x0, 0x21, 0x0, &(0x7f00000000c0)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x3, 0xffffffff, {{0x12, 0x4, 0x3, 0x5, 0x48, 0x68, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0xee, 0x1, 0x5, [{@remote, 0xa}, {@private=0xa010101, 0xc}, {@empty, 0xfffffffe}, {@private=0xfffffff9, 0xff}, {@empty}]}, @lsrr={0x83, 0x7, 0xf, [@rand_addr=0x64010100]}]}}}}}) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @remote, @dev}, &(0x7f0000000580)=0xc) 18.162696491s ago: executing program 2 (id=5183): r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x68152000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0xd, 0x1, 0x1, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1, &(0x7f00000002c0)=@raw=[@generic={0xe9, 0x9, 0x1, 0xfff9, 0x7}], &(0x7f0000000340)='GPL\x00', 0x4, 0xd4, &(0x7f0000000480)=""/212, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x8, 0x6, 0xfffffff8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000400)=[r1, r1, r1, r1, r1], &(0x7f0000000580)=[{0x1, 0x4, 0xd, 0x9}, {0x4, 0x4, 0x80000001, 0x2}, {0x1, 0x3, 0x5, 0x4}, {0x1, 0x4, 0x4, 0x4}, {0x2, 0x1, 0x2, 0x4}, {0x1, 0x2, 0x3}, {0x3, 0x1, 0x0, 0xb}, {0x2, 0x2, 0x2, 0x9}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r4, r2, 0x14, 0x18, 0x0, @void, @value=r5, @void, @void, r3}, 0x20) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x6d5) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 18.158219418s ago: executing program 3 (id=5184): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x1, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x0, 0x8, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x4, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x20000001, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x9c, 0x5, 0x2ac, 0xf7, 0x5, 0x1, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x0, 0x3, 0x0, 0x10001, 0x4e7b3717, 0x4, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x8, 0x20006, 0x105, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x0, 0x401, 0x66cd, 0x7, 0x8, 0x1, 0xfffffffe, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x1, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x0, 0x8, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x4, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x20000001, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x9c, 0x5, 0x2ac, 0xf7, 0x5, 0x1, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x0, 0x3, 0x0, 0x10001, 0x4e7b3717, 0x4, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x8, 0x20006, 0x105, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x0, 0x401, 0x66cd, 0x7, 0x8, 0x1, 0xfffffffe, 0xc5c, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) 17.486423349s ago: executing program 1 (id=5191): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x40, 0x1bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x10000, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0xd10, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0x2640, 0xffffffff]}}) unshare(0x400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 17.429876724s ago: executing program 2 (id=5192): r0 = socket(0x28, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_perm_addr={0x20, 0x21, "e2598b8b7812f9e1a56c447385e8fe14919515529ca875e45101533bd8f5f3f52a"}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r4, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0], 0x48) socket$rds(0x15, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x80000) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r11, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) listen(r11, 0x0) setsockopt(r10, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 17.10820329s ago: executing program 0 (id=5194): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={r3, 0x3}, 0x8) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_cmd={0x24, 0x0, 0x4, 0xbe, 0xc0, 0x9, 0x2, 0x8, 0x6c, 0xf7, 0x400, 0xfffffc00, 0x3, 0x0, 0x5, 0xfffffffa, [0xc35c, 0x2400]}}) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ec0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000ecfffffdffffffff0000", @ANYRES16=r5, @ANYBLOB="01002dbdf000fddbdf2566000000"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000180)={{0x88, @remote, 0x4e20, 0x3, 'sed\x00', 0x0, 0x7, 0x5}, {@multicast1, 0x4e20, 0x10000, 0x9, 0xfffffff4, 0x68}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xf, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000008a500000086000000bf0900000000000055090100000000409500000000000000bf91000000000000b702000003000000850000002a000000b70000010000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xff2, &(0x7f0000000cc0)=""/4082, 0x41100, 0x2f}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xf, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000008a500000086000000bf0900000000000055090100000000409500000000000000bf91000000000000b702000003000000850000002a000000b70000010000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xff2, &(0x7f0000000cc0)=""/4082, 0x41100, 0x2f}, 0x94) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x15015000) (async) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x15015000) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 17.069728461s ago: executing program 1 (id=5195): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48105}, 0x0) 16.966071108s ago: executing program 4 (id=5196): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000540)="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", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0xffffffb8}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)='\'\x00\x00\x00', 0x4) 16.939913679s ago: executing program 0 (id=5197): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={r2, 0x101}, &(0x7f0000000080)=0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}}, 0x4000044) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0xdf34, 0x206, 0x8, 0xce1c, 0x6, 0xc, 0x5, r2}, &(0x7f00000000c0)=0x20) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000040)=0x65b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.85970383s ago: executing program 1 (id=5198): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x100000, 0x5}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000800000000000001a0a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) 16.706028953s ago: executing program 4 (id=5199): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) shutdown(r3, 0x1) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000054) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}}, 0x0) 16.705184126s ago: executing program 0 (id=5200): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xf, 0x10}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4080800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ffef00000000000000000100ff00100002800cda3a0a34d3d44a25eea7bb6de7f2a93e2b9569"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000008000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x1f, 0xf, &(0x7f0000000f40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x30000000, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000240)=r8, 0x4) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[], 0x9) socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) 16.700977174s ago: executing program 4 (id=5201): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x5, [@func={0x9, 0x0, 0x0, 0xc, 0x2}, @enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x3, 0x8000}, {0x0, 0x2}, {0x4, 0xffffff31}, {0x8, 0x4}, {0xa, 0x5}, {0x8, 0x7}, {0x1, 0x8}, {0x3, 0x5}, {0x8, 0x52}, {0xf, 0x6}]}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000100)=""/48, 0x85, 0x30, 0x1, 0x2}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x5, [@func={0x9, 0x0, 0x0, 0xc, 0x2}, @enum={0x3, 0xa, 0x0, 0x6, 0x4, [{0x3, 0x8000}, {0x0, 0x2}, {0x4, 0xffffff31}, {0x8, 0x4}, {0xa, 0x5}, {0x8, 0x7}, {0x1, 0x8}, {0x3, 0x5}, {0x8, 0x52}, {0xf, 0x6}]}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000100)=""/48, 0x85, 0x30, 0x1, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r1, 0x0, 0x0, 0x800) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010025bd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="100804001a0804001c002b80080003001100000008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\b'], 0x3c}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001eb28bd7000fedbdf2507000000", @ANYRES32=r9, @ANYBLOB="80007e0a0a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001eb28bd7000fedbdf2507000000", @ANYRES32=r9, @ANYBLOB="80007e0a0a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10804111}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x4c, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004141) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10804111}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x4c, r4, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004141) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0xc03}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x4b}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x70}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 16.662478611s ago: executing program 1 (id=5202): socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000008cd03467669e8d00000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x15, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x8884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000001800030727bd7000fddbdf2502142004fd02ff"], 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01034000000000000000010000000900010073797a3100000000080002400000000140000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x200000d4) 16.599703325s ago: executing program 0 (id=5203): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.545984233s ago: executing program 1 (id=5204): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x35f, @private1, 0xfffffffe}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}]}, &(0x7f0000000440)=0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$alg(r5, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004011}, 0x4c040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r2, 0x2}, &(0x7f0000000100)=0x8) 16.539483474s ago: executing program 4 (id=5205): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000000440)="340b76235e542388314c94ffb092fe45f73f8c986973c4976cfb5e6d1d8c82244df1f513a1c1fbfa9a9f0b95aeb353c71ce43ab84de2d842a33e91ce88d884ec2a248e85b886f115b686136aaf601bbff88abe474a8494073ad74fa9adc48bb0577ba007c034067d35226a6049c20b62fef3bad5f9e53c8ea5682c0073eec76929c6d3362325fe1144dcc97ff2c5aa59dde347555cd214a311db3942deef1b9143089b894379762ff8b5e92db6ab7ff6e4fe98137ee709c44a9353840f906e9a"}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000001b100000000fcffffff8500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) (async) r7 = socket(0x2, 0x80805, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0xce23, @dev={0xac, 0x14, 0x14, 0x36}}}}, &(0x7f0000000040)=0x84) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x83, &(0x7f0000000480)={r9, 0x2}, 0x8) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r10, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x400}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x22000090}, 0x4040014) (async, rerun: 64) writev(r1, &(0x7f0000003b00)=[{&(0x7f0000000580)="c24e", 0x2}], 0x1) (async, rerun: 64) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) (async) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000240)='|w') (async, rerun: 32) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7") (rerun: 32) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) (async, rerun: 32) syz_emit_ethernet(0xfc1, &(0x7f0000003780)=ANY=[@ANYBLOB="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"], 0x0) (rerun: 32) 16.382633429s ago: executing program 4 (id=5206): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r3, 0x541b, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa9289bb0a010500bbbbbbbbbbbbe000000200"/42], 0x0) 16.245846762s ago: executing program 0 (id=5207): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001080)={@empty, @private, 0x0}, &(0x7f00000010c0)=0xc) bind$packet(r2, &(0x7f0000001100)={0x11, 0x1c, r4, 0x1, 0x4, 0x6, @random="e48f04b30122"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x800, 0x0, &(0x7f0000001200)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000001040)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000110001c941d771924d5bdb64ed004100", @ANYRES32=0x0, @ANYBLOB="2008010000040000140003006d6163766c616e300000000000000000"], 0x34}}, 0x4084) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="440000fbffffffff07000a0022bc118621bfe366e99594fa59e4988dddf66fc30268112cae339d638571abd545391cf5a881ca0b3cd2b85cf6a05759e87db323d493ae63491bb4ce432f978d57dc5e", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000bc4a9e0b02900000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b000100736f636b657400000c009d77d8a9773e360280080002400000000b0900010073797a3000000000797a3200000000140000001100010000000000"], 0x74}}, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000011c0)=@req3={0xf5f, 0x8, 0x1, 0xad07, 0x10001, 0x1, 0x9}, 0x1c) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001300)) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000003c00188008000340000000000800024000000000080001"], 0xa0}}, 0x0) 16.24224058s ago: executing program 2 (id=5208): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0xbee3, 0x9, 0x7a6, 0x2, 0xfffffffe}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffff"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r7, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010001ffffeffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000083f00002400122dfa23e3498cad7f511440800b00010067726574617000001400028006000e000100000008000700ac14142208000a005a3497dbc470daf6641f31ac0194786021693f1d972e534cc148a7a00cfaf17f377900fd237443daddf3e74869ae9a0c502ffe95b19e52b2a495f2ba533caf93484fcad93599ca76c75975e124eabced7fe1cdd04e3e546a8975a9b5ef32fe42f12db5afc78e2baa82876f34913015e0f9a9223ca3a6c2ed49b6fccb53b5eab5002f949269f0715a20d18173a189b214e4120012bb3732d56fee33c4208dc8c7d07f74eac8ff382122c3a71a0b091a21ed80", @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x4000) 15.957228255s ago: executing program 2 (id=5209): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x20000000}, 0x8}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0x7, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a00000002"], 0x184}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6, 0x0, 0x5}, 0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000080)={0x9, 'veth1_to_bond\x00', {0x7ff}, 0x1000}) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xb0}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) 15.877858355s ago: executing program 4 (id=5210): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x2004000d}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c0", 0x13}, {&(0x7f0000000300)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}], 0x2}}], 0x1, 0x24004044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40884}, 0x20000040) 15.867058166s ago: executing program 2 (id=5211): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x10001, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x5, 0x33, 0x5}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 15.605916207s ago: executing program 1 (id=5212): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000740), r6) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x0, 0x70f, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x9, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x700, 0x8, 0x0, 0x1}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4048001) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r12, 0x0, 0xfffffffffffffd2b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0xa) 15.350415787s ago: executing program 0 (id=5213): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0x19, 0x30}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r3, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES8, @ANYBLOB="df3fef10fcae041e3e5ba479d4230d2a525e8e7704477d848d5981fdcde6080ca114c17a1a459b08085f89cd2cdbfa7a34d1017c6b1cfc4fa71a68f9725d819f79bb38bf32b7da13447bf799ff7a65389e3f6e378ea9c4b00165cb69589bd7bc60bdaf9691ef6685ee134ed18b55824d07d6c0746cd21a9fc17a9566dcdb30795532449a310e7eab1903274b69b4ca3e6e192dc546e4e76f64ceba838bfe9e7fdccbf91029726e1251e3943a6c0699c6760bca1d97a1f7f355efad4d11c82063e9c3b251cca24aae90138be2ef0450cf3c9230f81adf16db16f1f0a18d0da78c4f99", @ANYBLOB="6d91cb1dccabc4720ffd39b957fca2a60149724482d28afe5bc1f8e0806037cb28593aa344277a705f0543113c276f007ca2c27bf0d3016264b0a4e6257884bbdd28726f469d20419351af0021dd493c339d66243917a83960a8505923e9262b9636c60d5973a0e81bbf2384fce60f0c62ee4a5f1c50026589c9e1c4f5b01a4ded9e89d389837c8460eeff244cb65b2efa80acdf66bf45243f0cb345eeba2dec01fdfc54cdb41ce9ba8ff93a259b1c54351d97c63e52d11ef0cd61e0a23a3b221157", @ANYRESOCT=r3, @ANYBLOB="a18dfe54e548ecbd7b0d58efe71b4419a2156f5a613ee6e3cf30e6f945dd79ba5932726531f86fc63e462fb47f91afa6c96741e8f2f7e55c9c2e949c4b1976bc336faca463967742"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 2.653487737s ago: executing program 32 (id=5184): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x1, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x0, 0x8, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x4, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x20000001, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x9c, 0x5, 0x2ac, 0xf7, 0x5, 0x1, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x0, 0x3, 0x0, 0x10001, 0x4e7b3717, 0x4, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x8, 0x20006, 0x105, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x0, 0x401, 0x66cd, 0x7, 0x8, 0x1, 0xfffffffe, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x1, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x8, 0x5, 0x101, 0x1000, 0x9, 0x0, 0x8, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x81, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x429f, 0xe, 0x4, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x8, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x20000001, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0xd6f, 0x4007, 0x9c, 0x5, 0x2ac, 0xf7, 0x5, 0x1, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x800000, 0x204, 0x1, 0x8, 0x8000, 0x0, 0x3, 0x0, 0x10001, 0x4e7b3717, 0x4, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x5b, 0x81, 0x33b, 0x8, 0x20006, 0x105, 0x2, 0x6, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x0, 0x401, 0x66cd, 0x7, 0x8, 0x1, 0xfffffffe, 0xc5c, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) 141.90252ms ago: executing program 33 (id=5213): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0x19, 0x30}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r3, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRES8, @ANYBLOB="df3fef10fcae041e3e5ba479d4230d2a525e8e7704477d848d5981fdcde6080ca114c17a1a459b08085f89cd2cdbfa7a34d1017c6b1cfc4fa71a68f9725d819f79bb38bf32b7da13447bf799ff7a65389e3f6e378ea9c4b00165cb69589bd7bc60bdaf9691ef6685ee134ed18b55824d07d6c0746cd21a9fc17a9566dcdb30795532449a310e7eab1903274b69b4ca3e6e192dc546e4e76f64ceba838bfe9e7fdccbf91029726e1251e3943a6c0699c6760bca1d97a1f7f355efad4d11c82063e9c3b251cca24aae90138be2ef0450cf3c9230f81adf16db16f1f0a18d0da78c4f99", @ANYBLOB="6d91cb1dccabc4720ffd39b957fca2a60149724482d28afe5bc1f8e0806037cb28593aa344277a705f0543113c276f007ca2c27bf0d3016264b0a4e6257884bbdd28726f469d20419351af0021dd493c339d66243917a83960a8505923e9262b9636c60d5973a0e81bbf2384fce60f0c62ee4a5f1c50026589c9e1c4f5b01a4ded9e89d389837c8460eeff244cb65b2efa80acdf66bf45243f0cb345eeba2dec01fdfc54cdb41ce9ba8ff93a259b1c54351d97c63e52d11ef0cd61e0a23a3b221157", @ANYRESOCT=r3, @ANYBLOB="a18dfe54e548ecbd7b0d58efe71b4419a2156f5a613ee6e3cf30e6f945dd79ba5932726531f86fc63e462fb47f91afa6c96741e8f2f7e55c9c2e949c4b1976bc336faca463967742"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) 120.426252ms ago: executing program 34 (id=5212): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000740), r6) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r9, 0x107, 0x5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x0, 0x70f, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x9, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, 0x700, 0x8, 0x0, 0x1}}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x54, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4048001) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r12, 0x0, 0xfffffffffffffd2b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0xa) 64.950946ms ago: executing program 35 (id=5211): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x10001, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x5, 0x33, 0x5}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 0s ago: executing program 36 (id=5210): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x2004000d}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000240)="a905000000007464000100000000000000e5c0", 0x13}, {&(0x7f0000000300)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}], 0x2}}], 0x1, 0x24004044) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40884}, 0x20000040) kernel console output (not intermixed with test programs): slave_0): Releasing backup interface [ 518.490583][ T6474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.500383][ T6474] bond0 (unregistering): Released all slaves [ 518.514514][ T6474] bond1 (unregistering): Released all slaves [ 518.621576][ T6474] bond2 (unregistering): Released all slaves [ 518.635049][ T6474] bond3 (unregistering): Released all slaves [ 518.737111][ T6474] bond4 (unregistering): (slave wlan0): Releasing active interface [ 518.745895][ T6474] bond4 (unregistering): Released all slaves [ 518.846500][ T6474] bond5 (unregistering): Released all slaves [ 518.946281][ T6474] bond6 (unregistering): Released all slaves [ 518.958912][ T6474] bond7 (unregistering): Released all slaves [ 519.057498][ T6474] bond8 (unregistering): Released all slaves [ 519.157109][ T6474] bond9 (unregistering): Released all slaves [ 519.254759][ T6474] bond10 (unregistering): Released all slaves [ 519.299954][T18549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3219'. [ 519.329666][T18474] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.353712][T18474] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.376377][T18474] bridge_slave_0: entered allmulticast mode [ 519.384332][T18474] bridge_slave_0: entered promiscuous mode [ 519.441417][T18554] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3220'. [ 519.464930][T18474] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.482039][T18474] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.489664][T18474] bridge_slave_1: entered allmulticast mode [ 519.504362][T18474] bridge_slave_1: entered promiscuous mode [ 519.525493][ T6474] tipc: Left network mode [ 519.667923][T18474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.773366][T18474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.851584][T18583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3227'. [ 519.988633][T18474] team0: Port device team_slave_0 added [ 520.012281][T18474] team0: Port device team_slave_1 added [ 520.102324][T18594] netlink: 'syz.4.3229': attribute type 4 has an invalid length. [ 520.177318][T18474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.184288][T18474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.266418][T18474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.409007][T18474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.410426][T18598] netlink: 'syz.0.3231': attribute type 5 has an invalid length. [ 520.423903][T18474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.450565][T18474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.464746][T18600] netlink: 'syz.4.3232': attribute type 1 has an invalid length. [ 520.536046][ T5880] Bluetooth: hci2: command tx timeout [ 520.724347][ T30] audit: type=1800 audit(1758438290.877:14): pid=18619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3236" name="blkio.bfq.time_recursive" dev="tmpfs" ino=422 res=0 errno=0 [ 520.748039][T18620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.810739][T18474] hsr_slave_0: entered promiscuous mode [ 520.818396][T18474] hsr_slave_1: entered promiscuous mode [ 520.824865][T18474] debugfs: 'hsr0' already exists in 'hsr' [ 520.835780][T18474] Cannot create hsr debugfs directory [ 520.954147][T18630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3239'. [ 521.034587][T18630] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 521.042301][T18630] team0: Device ipvlan2 is already an upper device of the team interface [ 521.094496][T18625] lo speed is unknown, defaulting to 1000 [ 521.122238][T18631] mac80211_hwsim hwsim59 wlan0: entered promiscuous mode [ 521.131949][T18631] macvtap1: entered allmulticast mode [ 521.137407][T18631] mac80211_hwsim hwsim59 wlan0: entered allmulticast mode [ 521.157881][T18631] mac80211_hwsim hwsim59 wlan0: left allmulticast mode [ 521.165729][T18631] mac80211_hwsim hwsim59 wlan0: left promiscuous mode [ 521.230005][ T6474] hsr_slave_0: left promiscuous mode [ 521.237900][ T6474] hsr_slave_1: left promiscuous mode [ 521.244106][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.253374][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.288523][ T6474] pim6reg99999999 (unregistering): left allmulticast mode [ 521.365706][T18638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3241'. [ 521.489254][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3241'. [ 521.563487][T18643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3241'. [ 521.982364][T18646] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3243'. [ 522.250939][T18651] lo speed is unknown, defaulting to 1000 [ 522.623334][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3249'. [ 522.627728][ T5880] Bluetooth: hci2: command tx timeout [ 522.646828][T18672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3249'. [ 522.667999][T18672] netlink: 'syz.2.3249': attribute type 15 has an invalid length. [ 522.940381][ T6473] bond0: (slave bond_slave_0): interface is now down [ 522.952871][T18678] bond0: option arp_validate: invalid value (18446744073491447809) [ 522.963096][ T6473] bond0: (slave bond_slave_1): interface is now down [ 523.000201][ T6473] bond0: now running without any active interface! [ 523.278503][T18695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 523.295886][T18695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3256'. [ 523.314587][T18695] netlink: 'syz.0.3256': attribute type 1 has an invalid length. [ 523.348222][T18695] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3256'. [ 523.563429][T18701] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.571130][T18701] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.747643][T18701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.780030][T18701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.973824][ T8936] lo speed is unknown, defaulting to 1000 [ 523.997576][ T8936] syz1: Port: 1 Link DOWN [ 524.019589][T18716] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 524.046111][T18716] macvtap1: entered allmulticast mode [ 524.051753][T18716] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 524.063306][T18716] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 524.071490][T18716] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 524.097891][ T9110] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.108408][ T9110] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.119586][T18696] lo speed is unknown, defaulting to 1000 [ 524.126390][ T9110] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.140724][ T9110] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.150486][ T9110] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.162416][ T9110] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.211186][T18712] lo speed is unknown, defaulting to 1000 [ 524.218933][ T9110] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.229673][ T9110] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.241707][T18474] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 524.272967][T18474] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 524.289753][T18474] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 524.327864][T18474] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 524.627005][T18474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.660514][T18474] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.694142][ T9110] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.701351][ T9110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.706804][ T5880] Bluetooth: hci2: command tx timeout [ 524.711756][ T9110] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.721102][ T9110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.807019][T18762] vlan3: entered promiscuous mode [ 524.812094][T18762] macvtap0: entered promiscuous mode [ 524.848918][T18768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.131012][T18784] netlink: 'syz.2.3276': attribute type 5 has an invalid length. [ 525.140378][T18784] netlink: 'syz.2.3276': attribute type 2 has an invalid length. [ 525.155936][T18784] netlink: 'syz.2.3276': attribute type 1 has an invalid length. [ 525.176194][T18784] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.193594][T18784] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.200813][T18784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.250412][T18797] netlink: 'syz.4.3281': attribute type 12 has an invalid length. [ 525.311378][T18793] bond1: entered promiscuous mode [ 525.320563][T18793] bond1: entered allmulticast mode [ 525.339053][T18793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.347384][T18791] netlink: 'syz.1.3279': attribute type 2 has an invalid length. [ 525.525124][T18814] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 525.583151][T18808] lo speed is unknown, defaulting to 1000 [ 525.585963][T18474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.641345][T18795] lo speed is unknown, defaulting to 1000 [ 525.729281][T18826] 8021q: VLANs not supported on ip6_vti0 [ 525.972932][T18474] veth0_vlan: entered promiscuous mode [ 525.991076][T18840] __nla_validate_parse: 13 callbacks suppressed [ 525.991091][T18840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3292'. [ 526.011438][T18474] veth1_vlan: entered promiscuous mode [ 526.025344][T18840] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3292'. [ 526.082536][T18474] veth0_macvtap: entered promiscuous mode [ 526.093205][T18474] veth1_macvtap: entered promiscuous mode [ 526.121881][T18474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.141537][T18474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.169370][ T9111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.188493][ T9111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.213860][ T9111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.223596][ T9111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.327711][T18851] macvlan2: entered allmulticast mode [ 526.333190][T18851] hsr0: entered allmulticast mode [ 526.338733][T18851] hsr_slave_0: entered allmulticast mode [ 526.344446][T18851] hsr_slave_1: entered allmulticast mode [ 526.353620][T18851] hsr0: left allmulticast mode [ 526.358632][T18851] hsr_slave_0: left allmulticast mode [ 526.364012][T18851] hsr_slave_1: left allmulticast mode [ 526.451048][ T9111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.460445][ T9111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.508077][ T6474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.518816][ T6474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.829218][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3304'. [ 526.980611][T18888] lo speed is unknown, defaulting to 1000 [ 527.081745][T18898] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3308'. [ 527.099416][T18895] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3308'. [ 527.131434][T18903] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3309'. [ 527.161232][T18903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3309'. [ 527.420677][T18915] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3312'. [ 527.435427][T18915] unsupported nlmsg_type 40 [ 527.848907][T18920] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3314'. [ 527.862555][T18920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3314'. [ 528.738335][T18914] syz_tun: entered allmulticast mode [ 528.919053][T18914] syz_tun: left allmulticast mode [ 529.210834][T18949] netlink: 'syz.4.3323': attribute type 11 has an invalid length. [ 529.314582][T18943] lo speed is unknown, defaulting to 1000 [ 529.697199][T18973] lo speed is unknown, defaulting to 1000 [ 529.920602][T18986] IPv6: NLM_F_REPLACE set, but no existing node found! [ 530.139933][T18996] netlink: 'syz.4.3338': attribute type 3 has an invalid length. [ 530.192655][T18995] syzkaller0: entered promiscuous mode [ 530.214552][T18995] syzkaller0: entered allmulticast mode [ 530.235904][T18994] tipc: Started in network mode [ 530.244516][T18994] tipc: Node identity 8edc40e98e88, cluster identity 4711 [ 530.270524][T18994] tipc: Enabled bearer , priority 0 [ 530.298528][T19005] netlink: 'syz.4.3341': attribute type 12 has an invalid length. [ 530.304903][T19000] lo speed is unknown, defaulting to 1000 [ 530.307999][T19005] netlink: 'syz.4.3341': attribute type 11 has an invalid length. [ 530.367530][T19002] netlink: 'syz.0.3340': attribute type 4 has an invalid length. [ 530.390717][T18994] tipc: Resetting bearer [ 530.425034][T18994] tipc: Disabling bearer [ 530.780931][T19017] lo speed is unknown, defaulting to 1000 [ 530.787330][T19035] netlink: 'syz.3.3349': attribute type 5 has an invalid length. [ 530.942724][T19026] lo speed is unknown, defaulting to 1000 [ 531.044852][T19042] __nla_validate_parse: 14 callbacks suppressed [ 531.044870][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'. [ 531.077215][T19042] netlink: 'syz.2.3351': attribute type 30 has an invalid length. [ 531.129547][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'. [ 531.140668][T19042] netlink: 'syz.2.3351': attribute type 30 has an invalid length. [ 531.145625][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.182761][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.230643][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.242734][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.559232][T19071] nbd: must specify an index to disconnect [ 531.615129][T19059] lo speed is unknown, defaulting to 1000 [ 531.741196][T19073] bond0: (slave rose0): Releasing backup interface [ 531.794763][T19081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3362'. [ 532.235338][T19110] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 532.286449][T19109] tipc: Started in network mode [ 532.294490][T19109] tipc: Node identity 725ce2dde6dc, cluster identity 4711 [ 532.311609][T19098] netlink: 'syz.3.3367': attribute type 5 has an invalid length. [ 532.321841][T19109] tipc: Enabled bearer , priority 0 [ 532.370541][T19114] syzkaller0: entered promiscuous mode [ 532.371307][T19115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'. [ 532.385071][T19114] syzkaller0: entered allmulticast mode [ 532.415394][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'. [ 532.437858][T19115] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3371'. [ 532.467778][T19115] 0ªX¹¦À: renamed from caif0 [ 532.487996][T19115] 0ªX¹¦À: entered allmulticast mode [ 532.495155][T19115] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 532.512483][T19122] netlink: 'syz.2.3373': attribute type 3 has an invalid length. [ 532.520724][T19122] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3373'. [ 532.538105][T19109] tipc: Resetting bearer [ 532.549659][T19115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3371'. [ 532.561768][T19108] tipc: Resetting bearer [ 532.603730][T19108] tipc: Disabling bearer [ 532.739968][T19136] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.3374'. [ 532.797510][T19138] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3376'. [ 532.939697][T19148] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 533.587182][T19184] lo speed is unknown, defaulting to 1000 [ 533.792609][T19199] lo speed is unknown, defaulting to 1000 [ 534.002425][T19207] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 534.017416][T19207] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 534.250799][T19231] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 534.467520][T19236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.072913][T19268] validate_nla: 2 callbacks suppressed [ 535.072932][T19268] netlink: 'syz.4.3412': attribute type 30 has an invalid length. [ 535.097079][T19265] lo speed is unknown, defaulting to 1000 [ 535.400949][T19284] netlink: 'syz.1.3418': attribute type 13 has an invalid length. [ 535.496043][T19289] Bluetooth: MGMT ver 1.23 [ 535.571366][T19292] vxcan3: entered allmulticast mode [ 536.171043][T19280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.218791][T19291] lo speed is unknown, defaulting to 1000 [ 536.275952][T19286] lo speed is unknown, defaulting to 1000 [ 536.365362][T19315] __nla_validate_parse: 9 callbacks suppressed [ 536.365378][T19315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3425'. [ 536.410246][T19315] netlink: 'syz.0.3425': attribute type 2 has an invalid length. [ 536.425202][T19315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3425'. [ 536.823327][T19333] netlink: zone id is out of range [ 536.840145][T19333] netlink: zone id is out of range [ 536.852830][T19333] netlink: zone id is out of range [ 536.871837][T19333] netlink: zone id is out of range [ 536.899440][T19333] netlink: zone id is out of range [ 536.926192][T19333] netlink: zone id is out of range [ 536.929321][T19337] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 537.201792][T19355] lo speed is unknown, defaulting to 1000 [ 537.341118][T19367] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.348873][T19367] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.562505][T19367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.596666][T19367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.793738][T19386] tipc: Enabled bearer , priority 0 [ 537.808477][T19389] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 537.826363][T19389] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 537.839145][T19393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3444'. [ 537.847956][ T3590] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.872072][ T3590] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.892965][ T3590] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.900039][T19395] netlink: 'syz.0.3445': attribute type 1 has an invalid length. [ 537.913738][T19395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3445'. [ 537.926227][ T3590] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.952106][T19399] netlink: 'syz.0.3445': attribute type 11 has an invalid length. [ 537.964926][T19383] tipc: Resetting bearer [ 537.998207][T19382] tipc: Disabling bearer [ 538.031032][T19400] lo speed is unknown, defaulting to 1000 [ 538.350309][T19412] bridge0: entered allmulticast mode [ 538.377080][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3451'. [ 538.460692][T19427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3453'. [ 538.491794][T19412] pim6reg: entered allmulticast mode [ 538.498457][T19417] bridge_slave_1: left allmulticast mode [ 538.504239][T19417] bridge_slave_1: left promiscuous mode [ 538.510196][T19417] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.519525][T19417] bridge_slave_0: left allmulticast mode [ 538.525457][T19417] bridge_slave_0: left promiscuous mode [ 538.532574][T19417] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.578939][T19417] bridge0 (unregistering): left allmulticast mode [ 538.883795][T19449] syz_tun: entered allmulticast mode [ 538.929578][T19449] dvmrp8: entered allmulticast mode [ 539.014123][T19449] lo speed is unknown, defaulting to 1000 [ 539.089423][T19457] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 539.096584][T19457] syzkaller0: linktype set to 1 [ 539.173066][T19445] syz_tun: left allmulticast mode [ 539.196414][T19445] dvmrp8: left allmulticast mode [ 539.418843][T19476] syzkaller0: entered promiscuous mode [ 539.425146][T19476] syzkaller0: entered allmulticast mode [ 539.512210][T19482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3468'. [ 539.524100][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3469'. [ 539.531079][T19482] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3468'. [ 539.535414][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3469'. [ 540.181367][T19509] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.189264][T19509] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.349684][T19509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.367525][T19509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.689282][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.749413][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.769345][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.795873][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.833987][T19530] syzkaller0: entered promiscuous mode [ 540.846028][T19530] syzkaller0: entered allmulticast mode [ 540.868004][T19522] lo speed is unknown, defaulting to 1000 [ 540.911810][T19536] : entered promiscuous mode [ 540.936240][T19536] net_ratelimit: 2 callbacks suppressed [ 540.936256][T19536] openvswitch: netlink: Flow actions attr not present in new flow. [ 541.528295][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804762d800: rx timeout, send abort [ 541.565613][T19550] syzkaller1: entered promiscuous mode [ 541.571222][T19550] syzkaller1: entered allmulticast mode [ 541.662719][T19551] lo speed is unknown, defaulting to 1000 [ 541.696454][T19550] __nla_validate_parse: 4 callbacks suppressed [ 541.696471][T19550] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3484'. [ 542.028469][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804762f800: rx timeout, send abort [ 542.038147][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804762d800: abort rx timeout. Force session deactivation [ 542.261008][T19576] tipc: Enabled bearer , priority 0 [ 542.274316][T19568] syzkaller1: entered promiscuous mode [ 542.288450][T19568] syzkaller1: entered allmulticast mode [ 542.311288][T19576] syzkaller0: entered promiscuous mode [ 542.319909][T19576] syzkaller0: entered allmulticast mode [ 542.354115][T19568] tipc: Enabling of bearer rejected, failed to enable media [ 542.458306][T19576] tipc: Resetting bearer [ 542.536743][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804762f800: abort rx timeout. Force session deactivation [ 542.562363][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3495'. [ 542.834347][T19573] tipc: Resetting bearer [ 542.860703][T19573] tipc: Disabling bearer [ 542.873242][T19591] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3496'. [ 543.084472][T19606] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3499'. [ 543.153482][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3501'. [ 543.210111][ T8931] IPVS: starting estimator thread 0... [ 543.315953][T19622] IPVS: using max 30 ests per chain, 72000 per kthread [ 543.682958][T19644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3508'. [ 543.701757][T19654] netlink: 'syz.0.3509': attribute type 1 has an invalid length. [ 543.701871][T19651] lo speed is unknown, defaulting to 1000 [ 543.717702][T19654] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3509'. [ 543.741822][T19654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3509'. [ 543.858829][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'. [ 543.868053][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3512'. [ 543.877806][T19660] netlink: 'syz.0.3512': attribute type 14 has an invalid length. [ 543.888201][T19660] netlink: 'syz.0.3512': attribute type 11 has an invalid length. [ 544.000383][ T9110] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 544.758818][T19693] 8021q: VLANs not supported on ip6_vti0 [ 544.788885][T19692] 8021q: VLANs not supported on ip6_vti0 [ 544.861309][T19704] tipc: Enabled bearer , priority 0 [ 544.908836][T19703] tipc: Disabling bearer [ 545.351897][T19735] lo speed is unknown, defaulting to 1000 [ 545.557857][T19741] lo speed is unknown, defaulting to 1000 [ 545.996279][T19773] netlink: 'syz.1.3537': attribute type 16 has an invalid length. [ 546.016110][T19773] netlink: 'syz.1.3537': attribute type 17 has an invalid length. [ 546.022951][T19774] netlink: 'syz.4.3540': attribute type 17 has an invalid length. [ 546.084681][T19773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.095155][T19773] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.108841][T19773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.129274][T19774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.160201][ T44] lo speed is unknown, defaulting to 1000 [ 546.176837][ T44] syz1: Port: 1 Link ACTIVE [ 546.753611][T19796] lo speed is unknown, defaulting to 1000 [ 547.201885][T19810] netlink: 'syz.4.3549': attribute type 10 has an invalid length. [ 547.291071][T19813] netlink: 'syz.3.3551': attribute type 1 has an invalid length. [ 547.324931][T19816] __nla_validate_parse: 13 callbacks suppressed [ 547.324948][T19816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3552'. [ 547.360850][T19816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3552'. [ 547.383765][T19816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3552'. [ 547.384998][T19810] team0: Port device dummy0 added [ 547.392970][T19816] netlink: 58 bytes leftover after parsing attributes in process `syz.0.3552'. [ 547.418952][T19820] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3551'. [ 547.494803][T19818] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 547.508913][T19818] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 547.534203][T19816] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3552'. [ 547.635057][T19828] openvswitch: netlink: Flow actions attr not present in new flow. [ 547.730904][T19830] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3554'. [ 547.735551][T19832] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3555'. [ 547.754817][T19832] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3555'. [ 547.787503][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'. [ 548.121940][T19850] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 548.153117][T19848] batadv1: entered promiscuous mode [ 548.158945][T19848] batadv1: entered allmulticast mode [ 548.232519][T19850] netlink: 'syz.1.3560': attribute type 10 has an invalid length. [ 548.417361][T19869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.110025][T19883] tc_dump_action: action bad kind [ 549.159435][T19885] netlink: 'syz.4.3569': attribute type 1 has an invalid length. [ 549.298783][T19887] netlink: 'syz.4.3570': attribute type 13 has an invalid length. [ 549.333398][T19887] netlink: 'syz.4.3570': attribute type 17 has an invalid length. [ 549.447627][T19887] 0ªX¹¦À: left allmulticast mode [ 549.460989][T19887] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 549.539946][T19890] lo speed is unknown, defaulting to 1000 [ 549.691986][T19899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.833649][T19905] tipc: Enabling of bearer rejected, failed to enable media [ 550.028681][T19922] vlan2: entered promiscuous mode [ 550.046029][T19922] macvtap0: entered promiscuous mode [ 550.315323][T19939] sctp: [Deprecated]: syz.1.3583 (pid 19939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.315323][T19939] Use struct sctp_sack_info instead [ 550.409521][T19942] lo speed is unknown, defaulting to 1000 [ 550.743464][T19953] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.751362][T19953] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 551.344365][T19975] tipc: Enabling of bearer rejected, failed to enable media [ 551.407034][ T5868] IPVS: starting estimator thread 0... [ 551.496475][T19980] IPVS: using max 32 ests per chain, 76800 per kthread [ 551.887218][T19995] netlink: 'syz.4.3596': attribute type 1 has an invalid length. [ 551.963608][T19991] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.971388][T19991] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.414906][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.505200][T19991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.711187][T20007] __nla_validate_parse: 12 callbacks suppressed [ 552.711205][T20007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3602'. [ 552.792485][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.801625][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.823814][T20001] lo speed is unknown, defaulting to 1000 [ 552.859889][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.894071][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.954512][T20016] netlink: 'syz.2.3605': attribute type 4 has an invalid length. [ 552.984549][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 553.106687][T20019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3606'. [ 553.255490][T20023] tap0: tun_chr_ioctl cmd 1074025680 [ 553.294582][T20023] tipc: Enabled bearer , priority 0 [ 553.443986][T20033] tipc: New replicast peer: 255.255.255.255 [ 553.466522][T20033] tipc: Enabled bearer , priority 10 [ 553.621537][T20022] tipc: Disabling bearer [ 553.769741][T20045] vlan3: entered promiscuous mode [ 553.777621][T20045] erspan0: entered promiscuous mode [ 553.868248][T20051] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 553.890811][T20051] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 553.940428][T20055] lo speed is unknown, defaulting to 1000 [ 554.304301][T20058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3619'. [ 554.320860][T20063] Bluetooth: MGMT ver 1.23 [ 554.587357][ T8931] tipc: Node number set to 5521641 [ 554.788457][T20058] batadv1: entered promiscuous mode [ 554.794364][T20058] batadv1: entered allmulticast mode [ 554.871138][T20093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3627'. [ 554.880778][T20093] tipc: Enabled bearer , priority 18 [ 554.915030][T20095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3628'. [ 554.959272][T20095] netlink: 'syz.0.3628': attribute type 5 has an invalid length. [ 554.977797][T20095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3628'. [ 555.272162][T20105] lo speed is unknown, defaulting to 1000 [ 555.394522][T20118] Bluetooth: MGMT ver 1.23 [ 555.619711][T20130] netlink: 'syz.3.3637': attribute type 4 has an invalid length. [ 555.774193][T20136] lo speed is unknown, defaulting to 1000 [ 555.805009][T20137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3639'. [ 556.341199][T20124] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 556.653240][T20169] lo speed is unknown, defaulting to 1000 [ 556.723564][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3649'. [ 557.604132][T20211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3658'. [ 558.250362][T20239] lo speed is unknown, defaulting to 1000 [ 559.022938][T20263] vxcan1: entered allmulticast mode [ 559.041901][T20263] vxcan1: left allmulticast mode [ 559.104576][T20267] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 559.212395][T20272] netlink: 504 bytes leftover after parsing attributes in process `syz.1.3675'. [ 559.228842][T20266] lo speed is unknown, defaulting to 1000 [ 559.246788][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3675'. [ 559.263705][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3675'. [ 559.265161][T20270] lo speed is unknown, defaulting to 1000 [ 559.426786][T20272] team0: Port device team_slave_0 removed [ 559.644145][T20299] lo speed is unknown, defaulting to 1000 [ 560.046307][T20325] netlink: 'syz.0.3683': attribute type 4 has an invalid length. [ 560.054773][T20325] netlink: 'syz.0.3683': attribute type 4 has an invalid length. [ 560.289689][T20337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3687'. [ 560.389774][T20346] mac80211_hwsim hwsim67 wlan1: entered allmulticast mode [ 560.404983][T20346] bridge_slave_0: left allmulticast mode [ 560.411296][T20346] bridge_slave_0: left promiscuous mode [ 560.420119][T20346] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.430469][T20346] bridge_slave_1: left allmulticast mode [ 560.437832][T20346] bridge_slave_1: left promiscuous mode [ 560.445990][T20346] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.491628][T20346] bond0: (slave bond_slave_0): Releasing backup interface [ 560.539267][T20346] bond0: (slave bond_slave_1): Releasing backup interface [ 560.574024][T20346] team0: Port device team_slave_0 removed [ 560.598737][T20346] team0: Port device team_slave_1 removed [ 560.615282][T20346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.636515][T20346] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 560.706095][T20359] tipc: Started in network mode [ 560.711219][T20359] tipc: Node identity aa16bcc7625, cluster identity 4711 [ 560.738135][T20359] tipc: Enabled bearer , priority 0 [ 560.829624][T20369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3694'. [ 560.858547][T20361] syzkaller0: entered promiscuous mode [ 560.874073][T20361] syzkaller0: entered allmulticast mode [ 560.898167][T20347] tipc: Resetting bearer [ 560.929373][T20347] tipc: Disabling bearer [ 560.969427][T20380] lo speed is unknown, defaulting to 1000 [ 561.096638][T20390] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3698'. [ 561.170043][T20393] sctp: [Deprecated]: syz.4.3701 (pid 20393) Use of int in maxseg socket option. [ 561.170043][T20393] Use struct sctp_assoc_value instead [ 561.197398][T20380] netlink: 'syz.3.3697': attribute type 16 has an invalid length. [ 561.205243][T20380] netlink: 'syz.3.3697': attribute type 17 has an invalid length. [ 561.273138][T20380] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 561.398727][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3704'. [ 561.434373][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3704'. [ 561.443962][T20407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3705'. [ 561.522849][T20399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3702'. [ 561.692884][T20417] netlink: 'syz.3.3708': attribute type 18 has an invalid length. [ 561.901312][T20432] lo speed is unknown, defaulting to 1000 [ 563.193214][T20498] netlink: 'syz.0.3728': attribute type 1 has an invalid length. [ 563.232486][T20498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 563.770171][T20536] netlink: 'syz.1.3737': attribute type 39 has an invalid length. [ 564.345419][T20576] __nla_validate_parse: 12 callbacks suppressed [ 564.345431][T20576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3745'. [ 564.468853][T20583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3747'. [ 564.659697][T20586] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3748'. [ 564.669203][T20586] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3748'. [ 564.771999][T20593] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3750'. [ 564.781461][T20593] tipc: Enabling of bearer rejected, failed to enable media [ 565.024016][T20606] netlink: 'syz.0.3754': attribute type 13 has an invalid length. [ 565.032305][T20606] netlink: 'syz.0.3754': attribute type 17 has an invalid length. [ 565.094872][T20606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.111455][T20606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.170608][T20606] lo speed is unknown, defaulting to 1000 [ 565.173775][T20609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 565.480173][T20617] xt_l2tp: v2 tid > 0xffff: 37482740 [ 565.518881][T20617] netlink: 'syz.2.3758': attribute type 1 has an invalid length. [ 565.542212][T20617] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3758'. [ 566.551721][T20660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3768'. [ 566.591834][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'. [ 566.601282][T20664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'. [ 567.899032][T20715] vlan2: entered promiscuous mode [ 567.904110][T20715] dummy0: entered promiscuous mode [ 568.215326][T20729] lo speed is unknown, defaulting to 1000 [ 568.353619][T20738] lo speed is unknown, defaulting to 1000 [ 568.430924][T20742] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 568.463122][T20741] syzkaller0: tun_chr_ioctl cmd 35092 [ 568.899997][T20765] syzkaller1: entered promiscuous mode [ 568.916869][T20765] syzkaller1: entered allmulticast mode [ 569.057636][T20768] netlink: 'syz.4.3799': attribute type 10 has an invalid length. [ 569.067810][T20768] team0: Failed to send options change via netlink (err -105) [ 569.075527][T20768] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 569.085542][T20768] team0: Port device dummy0 removed [ 569.101222][T20768] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 569.320976][T20785] ip6tnl1: entered promiscuous mode [ 569.327867][T20785] syz_tun: entered promiscuous mode [ 569.336394][T20785] syz_tun: entered allmulticast mode [ 569.646695][T20799] FAULT_INJECTION: forcing a failure. [ 569.646695][T20799] name failslab, interval 1, probability 0, space 0, times 0 [ 569.674591][T20799] CPU: 0 UID: 0 PID: 20799 Comm: syz.4.3807 Not tainted syzkaller #0 PREEMPT(full) [ 569.674639][T20799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 569.674666][T20799] Call Trace: [ 569.674674][T20799] [ 569.674682][T20799] dump_stack_lvl+0x189/0x250 [ 569.674707][T20799] ? __pfx____ratelimit+0x10/0x10 [ 569.674726][T20799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.674745][T20799] ? __pfx__printk+0x10/0x10 [ 569.674847][T20799] ? __pfx___might_resched+0x10/0x10 [ 569.674870][T20799] should_fail_ex+0x414/0x560 [ 569.674898][T20799] should_failslab+0xa8/0x100 [ 569.674923][T20799] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 569.674945][T20799] ? __get_vm_area_node+0x13f/0x300 [ 569.674970][T20799] __get_vm_area_node+0x13f/0x300 [ 569.674996][T20799] __vmalloc_node_range_noprof+0x301/0x12f0 [ 569.675017][T20799] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 569.675039][T20799] ? __lock_acquire+0xab9/0xd20 [ 569.675087][T20799] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 569.675108][T20799] ? __might_fault+0xb0/0x130 [ 569.675131][T20799] ? _parse_integer_limit+0x1ae/0x1f0 [ 569.675155][T20799] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 569.675174][T20799] __vmalloc_noprof+0xb1/0xf0 [ 569.675196][T20799] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 569.675221][T20799] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 569.675248][T20799] bpf_prog_alloc+0x3c/0x1a0 [ 569.675271][T20799] bpf_prog_load+0x735/0x1930 [ 569.675305][T20799] ? __pfx_bpf_prog_load+0x10/0x10 [ 569.675350][T20799] ? bpf_lsm_bpf+0x9/0x20 [ 569.675368][T20799] ? security_bpf+0x7e/0x300 [ 569.675392][T20799] __sys_bpf+0x528/0x870 [ 569.675416][T20799] ? __pfx___sys_bpf+0x10/0x10 [ 569.675450][T20799] ? ksys_write+0x22a/0x250 [ 569.675474][T20799] ? __pfx_ksys_write+0x10/0x10 [ 569.675492][T20799] ? rcu_is_watching+0x15/0xb0 [ 569.675521][T20799] __x64_sys_bpf+0x7c/0x90 [ 569.675541][T20799] do_syscall_64+0xfa/0x3b0 [ 569.675558][T20799] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.675575][T20799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.675591][T20799] ? clear_bhb_loop+0x60/0xb0 [ 569.675612][T20799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.675635][T20799] RIP: 0033:0x7f6c2c38ec29 [ 569.675652][T20799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.675667][T20799] RSP: 002b:00007f6c2a5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 569.675684][T20799] RAX: ffffffffffffffda RBX: 00007f6c2c5d5fa0 RCX: 00007f6c2c38ec29 [ 569.675694][T20799] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 569.675703][T20799] RBP: 00007f6c2a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 569.675713][T20799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.675722][T20799] R13: 00007f6c2c5d6038 R14: 00007f6c2c5d5fa0 R15: 00007ffd9d48f4c8 [ 569.675750][T20799] [ 569.977636][T20799] syz.4.3807: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 569.994464][T20799] CPU: 0 UID: 0 PID: 20799 Comm: syz.4.3807 Not tainted syzkaller #0 PREEMPT(full) [ 569.994489][T20799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 569.994500][T20799] Call Trace: [ 569.994507][T20799] [ 569.994514][T20799] dump_stack_lvl+0x189/0x250 [ 569.994541][T20799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.994561][T20799] ? __pfx__printk+0x10/0x10 [ 569.994583][T20799] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 569.994602][T20799] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 569.994623][T20799] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 569.994646][T20799] warn_alloc+0x214/0x310 [ 569.994675][T20799] ? __pfx_warn_alloc+0x10/0x10 [ 569.994699][T20799] ? __get_vm_area_node+0x13f/0x300 [ 569.994724][T20799] ? __get_vm_area_node+0x2b5/0x300 [ 569.994761][T20799] __vmalloc_node_range_noprof+0x326/0x12f0 [ 569.994783][T20799] ? __lock_acquire+0xab9/0xd20 [ 569.994833][T20799] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 569.994853][T20799] ? __might_fault+0xb0/0x130 [ 569.994876][T20799] ? _parse_integer_limit+0x1ae/0x1f0 [ 569.994900][T20799] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 569.994920][T20799] __vmalloc_noprof+0xb1/0xf0 [ 569.994941][T20799] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 569.994965][T20799] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 569.994989][T20799] bpf_prog_alloc+0x3c/0x1a0 [ 569.995012][T20799] bpf_prog_load+0x735/0x1930 [ 569.995045][T20799] ? __pfx_bpf_prog_load+0x10/0x10 [ 569.995088][T20799] ? bpf_lsm_bpf+0x9/0x20 [ 569.995105][T20799] ? security_bpf+0x7e/0x300 [ 569.995128][T20799] __sys_bpf+0x528/0x870 [ 569.995151][T20799] ? __pfx___sys_bpf+0x10/0x10 [ 569.995183][T20799] ? ksys_write+0x22a/0x250 [ 569.995207][T20799] ? __pfx_ksys_write+0x10/0x10 [ 569.995224][T20799] ? rcu_is_watching+0x15/0xb0 [ 569.995250][T20799] __x64_sys_bpf+0x7c/0x90 [ 569.995271][T20799] do_syscall_64+0xfa/0x3b0 [ 569.995289][T20799] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.995306][T20799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.995323][T20799] ? clear_bhb_loop+0x60/0xb0 [ 569.995343][T20799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.995359][T20799] RIP: 0033:0x7f6c2c38ec29 [ 569.995375][T20799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.995389][T20799] RSP: 002b:00007f6c2a5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 569.995408][T20799] RAX: ffffffffffffffda RBX: 00007f6c2c5d5fa0 RCX: 00007f6c2c38ec29 [ 569.995420][T20799] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 569.995431][T20799] RBP: 00007f6c2a5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 569.995442][T20799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.995452][T20799] R13: 00007f6c2c5d6038 R14: 00007f6c2c5d5fa0 R15: 00007ffd9d48f4c8 [ 569.995481][T20799] [ 569.995498][T20799] Mem-Info: [ 570.290845][T20799] active_anon:13736 inactive_anon:0 isolated_anon:0 [ 570.290845][T20799] active_file:3271 inactive_file:40052 isolated_file:0 [ 570.290845][T20799] unevictable:3799 dirty:146 writeback:0 [ 570.290845][T20799] slab_reclaimable:13231 slab_unreclaimable:145571 [ 570.290845][T20799] mapped:34294 shmem:8965 pagetables:1018 [ 570.290845][T20799] sec_pagetables:0 bounce:0 [ 570.290845][T20799] kernel_misc_reclaimable:0 [ 570.290845][T20799] free:1255393 free_pcp:22512 free_cma:0 [ 570.338983][T20799] Node 0 active_anon:54744kB inactive_anon:0kB active_file:13084kB inactive_file:160004kB unevictable:13660kB isolated(anon):0kB isolated(file):0kB mapped:137176kB dirty:580kB writeback:0kB shmem:34124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13224kB pagetables:3956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 570.396927][T20799] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 570.427549][T20799] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 570.430434][T20803] netlink: 'syz.2.3808': attribute type 8 has an invalid length. [ 570.491109][T20799] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 570.506106][T20799] Node 0 DMA32 free:1100836kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62796kB inactive_anon:0kB active_file:13084kB inactive_file:158436kB unevictable:1560kB writepending:580kB present:3129332kB managed:2557376kB mlocked:28kB bounce:0kB free_pcp:86348kB local_pcp:41108kB free_cma:0kB [ 570.573733][T20799] lowmem_reserve[]: 0 0 1 1 1 [ 570.574413][T20805] macvlan1: entered allmulticast mode [ 570.578786][T20799] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 570.578840][T20799] lowmem_reserve[]: 0 0 0 0 0 [ 570.643911][T20799] Node 1 Normal free:3905500kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9712kB local_pcp:4128kB free_cma:0kB [ 570.716635][T20799] lowmem_reserve[]: 0 0 0 0 0 [ 570.721412][T20799] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 570.756052][T20799] Node 0 DMA32: 2129*4kB (UM) 414*8kB (UME) 496*16kB (UME) 478*32kB (UME) 77*64kB (UME) 24*128kB (UME) 5*256kB (UME) 3*512kB (UM) 11*1024kB (UM) 16*2048kB (UME) 250*4096kB (UM) = 1113908kB [ 570.787163][T20799] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 570.815518][T20799] Node 1 Normal: 145*4kB (UME) 51*8kB (UME) 42*16kB (UME) 199*32kB (UME) 68*64kB (UME) 17*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3905500kB [ 570.847686][T20820] __nla_validate_parse: 5 callbacks suppressed [ 570.847703][T20820] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3811'. [ 570.874203][T20799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 570.892645][T20826] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3812'. [ 570.918812][T20799] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 570.938486][T20799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 570.961052][T20799] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 570.980217][T20799] 44678 total pagecache pages [ 570.984936][T20799] 0 pages in swap cache [ 570.995253][T20799] Free swap = 124996kB [ 571.018400][T20799] Total swap = 124996kB [ 571.022595][T20799] 2097051 pages RAM [ 571.069408][T20799] 0 pages HighMem/MovableOnly [ 571.094798][T20799] 425681 pages reserved [ 571.117581][T20799] 0 pages cma reserved [ 572.413632][T20896] netlink: 'syz.2.3832': attribute type 1 has an invalid length. [ 572.523003][T20899] bond0: (slave gretap1): making interface the new active one [ 572.592284][T20899] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 572.677268][T20913] bond0: (slave dummy0): Releasing backup interface [ 572.708193][T20913] batman_adv: batadv0: Adding interface: dummy0 [ 572.725044][T20913] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.762084][T20913] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 572.807605][T20925] tipc: Enabled bearer , priority 0 [ 572.823997][T20922] netlink: 'syz.4.3839': attribute type 26 has an invalid length. [ 572.839060][T20920] vlan0: entered promiscuous mode [ 572.845444][T20925] syzkaller0: entered promiscuous mode [ 572.878018][T20925] syzkaller0: entered allmulticast mode [ 572.888212][T20929] syzkaller0: entered promiscuous mode [ 572.893804][T20929] syzkaller0: entered allmulticast mode [ 573.035025][T20933] tipc: Resetting bearer [ 573.044115][T20924] tipc: Resetting bearer [ 573.071854][T20924] tipc: Disabling bearer [ 573.091091][T20945] syzkaller0: entered promiscuous mode [ 573.105147][T20945] syzkaller0: entered allmulticast mode [ 573.320302][T20960] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3852'. [ 573.488522][T20965] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 573.503772][T20965] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3853'. [ 573.513092][T20965] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3853'. [ 573.522285][T20965] netlink: 'syz.3.3853': attribute type 5 has an invalid length. [ 573.530215][T20965] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3853'. [ 573.845914][T20967] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3854'. [ 573.858605][T20967] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3854'. [ 574.093244][T20983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.612049][T21011] tipc: Enabled bearer , priority 0 [ 574.626275][T21011] syzkaller0: entered promiscuous mode [ 574.631920][T21011] syzkaller0: entered allmulticast mode [ 575.168190][T21028] netlink: 'syz.2.3872': attribute type 10 has an invalid length. [ 575.187592][T21028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.189729][T21030] sctp: [Deprecated]: syz.1.3873 (pid 21030) Use of int in maxseg socket option. [ 575.189729][T21030] Use struct sctp_assoc_value instead [ 575.197468][T21028] : (slave batadv0): Enslaving as an active interface with an up link [ 575.271354][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3874'. [ 575.280971][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3874'. [ 575.290296][T21033] netlink: 'syz.1.3874': attribute type 18 has an invalid length. [ 575.395254][T21011] tipc: Resetting bearer [ 575.437817][T21011] tipc: Disabling bearer [ 575.781480][T21061] lo speed is unknown, defaulting to 1000 [ 575.794892][T21059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.852077][T21062] lo speed is unknown, defaulting to 1000 [ 575.989076][T21076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.206845][T21085] __nla_validate_parse: 3 callbacks suppressed [ 576.206864][T21085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3889'. [ 576.354710][T21092] lo speed is unknown, defaulting to 1000 [ 576.573736][T21104] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3894'. [ 576.593055][T21103] netlink: 'syz.3.3893': attribute type 1 has an invalid length. [ 576.679777][T21103] netlink: 'syz.3.3893': attribute type 6 has an invalid length. [ 576.690541][T21109] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3894'. [ 576.720507][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 576.736482][T21105] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3895'. [ 576.749741][T21104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3894'. [ 576.800551][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 576.823058][T21104] netlink: 'syz.2.3894': attribute type 5 has an invalid length. [ 576.939805][T21117] netlink: 'syz.0.3897': attribute type 1 has an invalid length. [ 577.103651][T21135] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3903'. [ 577.117474][T21133] netlink: 'syz.3.3902': attribute type 1 has an invalid length. [ 577.191166][T21133] bond2: (slave gretap1): making interface the new active one [ 577.200301][T21133] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 577.233740][T21133] vlan2: entered allmulticast mode [ 577.239072][T21133] bond2: entered allmulticast mode [ 577.244293][T21133] gretap1: entered allmulticast mode [ 577.251860][T21133] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 577.278694][T21143] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3906'. [ 577.463568][T21146] syzkaller1: entered promiscuous mode [ 577.476251][T21146] syzkaller1: entered allmulticast mode [ 577.484953][T21146] vlan0: entered promiscuous mode [ 577.894408][T21183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3917'. [ 578.542308][T21208] lo speed is unknown, defaulting to 1000 [ 578.895189][ T3590] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 578.991617][T21254] lo speed is unknown, defaulting to 1000 [ 579.414689][T21270] lo speed is unknown, defaulting to 1000 [ 579.664690][T21239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 580.262010][T21298] lo speed is unknown, defaulting to 1000 [ 580.347591][T21306] netlink: 'syz.4.3946': attribute type 13 has an invalid length. [ 580.355523][T21306] netlink: 'syz.4.3946': attribute type 17 has an invalid length. [ 580.481216][T21306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.489902][T21306] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.499408][T21306] batman_adv: batadv0: Interface activated: dummy0 [ 580.511192][T21306] batadv0: mtu less than device minimum [ 580.521219][T21306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 580.533593][T21306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 580.545507][T21306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 580.557652][T21306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 580.569584][T21306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 580.581584][T21306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 580.593518][T21306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 580.605438][T21306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 580.617334][T21306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 581.113920][T21335] wg1 speed is unknown, defaulting to 1000 [ 581.162178][T21335] wg1 speed is unknown, defaulting to 1000 [ 581.176107][T21335] wg1 speed is unknown, defaulting to 1000 [ 581.222866][T21339] __nla_validate_parse: 6 callbacks suppressed [ 581.222882][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3954'. [ 581.236502][T21335] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 581.272439][T21339] erspan0: entered promiscuous mode [ 581.278697][T21339] macvtap1: entered promiscuous mode [ 581.285265][T21339] macvtap1: entered allmulticast mode [ 581.291682][T21339] erspan0: entered allmulticast mode [ 581.299109][T21335] wg1 speed is unknown, defaulting to 1000 [ 581.299143][T21334] lo speed is unknown, defaulting to 1000 [ 581.309628][T21335] wg1 speed is unknown, defaulting to 1000 [ 581.317530][T21343] pimreg: entered allmulticast mode [ 581.338521][T21335] wg1 speed is unknown, defaulting to 1000 [ 581.450621][T21335] wg1 speed is unknown, defaulting to 1000 [ 581.464023][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3957'. [ 581.542214][T21335] wg1 speed is unknown, defaulting to 1000 [ 581.542269][T21349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.594760][T21349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.618363][T21349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.626218][T21349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.675062][T21349] : (slave batadv0): Releasing backup interface [ 581.716817][T21335] wg1 speed is unknown, defaulting to 1000 [ 581.725288][T21335] wg1 speed is unknown, defaulting to 1000 [ 581.769271][T21335] wg1 speed is unknown, defaulting to 1000 [ 581.778015][T21353] lo speed is unknown, defaulting to 1000 [ 581.793371][T21353] wg1 speed is unknown, defaulting to 1000 [ 581.929409][T21354] lo speed is unknown, defaulting to 1000 [ 582.019281][T21354] wg1 speed is unknown, defaulting to 1000 [ 582.025930][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3964'. [ 582.026597][T21366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3963'. [ 582.120552][T21368] lo speed is unknown, defaulting to 1000 [ 582.210780][T21368] wg1 speed is unknown, defaulting to 1000 [ 582.492752][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3970'. [ 582.508504][T21388] syzkaller1: entered promiscuous mode [ 582.520996][T21388] syzkaller1: entered allmulticast mode [ 582.543669][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3970'. [ 582.581239][T21387] lo speed is unknown, defaulting to 1000 [ 582.682439][T21387] wg1 speed is unknown, defaulting to 1000 [ 583.012509][T21407] lo speed is unknown, defaulting to 1000 [ 583.017266][T21412] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3973'. [ 583.036619][T21412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3973'. [ 583.048365][T21407] wg1 speed is unknown, defaulting to 1000 [ 583.054285][T21410] lo speed is unknown, defaulting to 1000 [ 583.072026][T21410] wg1 speed is unknown, defaulting to 1000 [ 583.581171][T21431] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3974'. [ 583.675992][T21423] netlink: 'syz.1.3974': attribute type 5 has an invalid length. [ 583.685047][T21423] netlink: 'syz.1.3974': attribute type 2 has an invalid length. [ 583.701400][T21423] netlink: 'syz.1.3974': attribute type 1 has an invalid length. [ 583.711483][T21423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3974'. [ 583.723577][T21437] tipc: Enabled bearer , priority 10 [ 583.870737][T21439] lo speed is unknown, defaulting to 1000 [ 583.882160][T21439] wg1 speed is unknown, defaulting to 1000 [ 584.157053][T21451] lo speed is unknown, defaulting to 1000 [ 584.165329][T21451] wg1 speed is unknown, defaulting to 1000 [ 584.338005][T21464] lo speed is unknown, defaulting to 1000 [ 584.661109][T21464] wg1 speed is unknown, defaulting to 1000 [ 584.836378][ T8933] tipc: Node number set to 1728053248 [ 584.845999][T21493] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 585.457389][T21550] netlink: 'syz.1.3999': attribute type 11 has an invalid length. [ 585.727878][T21564] Bluetooth: MGMT ver 1.23 [ 586.074098][T21580] lo speed is unknown, defaulting to 1000 [ 586.097851][T21580] wg1 speed is unknown, defaulting to 1000 [ 586.299826][T21587] __nla_validate_parse: 10 callbacks suppressed [ 586.299845][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4010'. [ 586.598181][T21596] lo speed is unknown, defaulting to 1000 [ 586.667597][T21601] geneve2: entered promiscuous mode [ 586.695035][T21601] geneve2: entered allmulticast mode [ 586.702348][ T5880] Bluetooth: hci2: link tx timeout [ 586.709054][ T5880] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 586.720092][ T5880] Bluetooth: hci2: link tx timeout [ 586.725227][ T5880] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 586.813103][T21596] wg1 speed is unknown, defaulting to 1000 [ 586.819563][T21604] dummy0: entered promiscuous mode [ 586.824909][T21604] dummy0: left promiscuous mode [ 586.834874][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4015'. [ 587.547317][T21628] netlink: 'syz.1.4018': attribute type 4 has an invalid length. [ 587.565225][T21628] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4018'. [ 588.272630][T21650] netlink: 'syz.3.4027': attribute type 23 has an invalid length. [ 588.414360][T21659] netlink: 'syz.4.4030': attribute type 2 has an invalid length. [ 588.452719][T21659] netlink: 'syz.4.4030': attribute type 8 has an invalid length. [ 588.495276][T21659] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4030'. [ 588.784928][ T5880] Bluetooth: hci2: command 0x0406 tx timeout [ 589.124314][T21684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4038'. [ 589.157324][T21688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'. [ 589.180645][T21690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4038'. [ 589.207137][T21690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4038'. [ 589.216713][T21690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4038'. [ 589.326808][T21698] tipc: Enabled bearer , priority 0 [ 589.343835][T21698] syzkaller0: entered promiscuous mode [ 589.361575][T21698] syzkaller0: entered allmulticast mode [ 589.427108][T21698] tipc: Resetting bearer [ 589.460146][T21697] tipc: Resetting bearer [ 589.526516][T21697] tipc: Disabling bearer [ 589.863772][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4052'. [ 590.076875][T21744] IPVS: persistence engine module ip_vs_pe_ not found [ 590.220914][T21760] lo speed is unknown, defaulting to 1000 [ 590.273788][T21760] wg1 speed is unknown, defaulting to 1000 [ 590.505494][T21778] netlink: 'syz.3.4065': attribute type 5 has an invalid length. [ 590.583922][T21782] netlink: 'syz.2.4064': attribute type 5 has an invalid length. [ 590.655431][T21788] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 590.670225][T21792] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 590.718334][T21799] netlink: 'syz.0.4070': attribute type 1 has an invalid length. [ 590.759961][T21799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.789793][T21799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.797844][T21799] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 590.813670][T21799] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 590.857386][ T5880] Bluetooth: hci2: command 0x0406 tx timeout [ 590.903781][T21806] veth13: entered promiscuous mode [ 590.912366][T21806] bond3: (slave veth13): Enslaving as an active interface with a down link [ 590.924025][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.934609][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.999020][T21815] netlink: 'syz.3.4074': attribute type 5 has an invalid length. [ 591.187276][T21827] lo speed is unknown, defaulting to 1000 [ 591.196902][T21827] wg1 speed is unknown, defaulting to 1000 [ 591.718777][T21855] __nla_validate_parse: 2 callbacks suppressed [ 591.718796][T21855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4084'. [ 591.784975][T21860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4086'. [ 592.185277][T21882] netlink: 'syz.4.4092': attribute type 13 has an invalid length. [ 592.214793][T21887] netlink: 'syz.3.4093': attribute type 12 has an invalid length. [ 592.233523][T21888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4090'. [ 592.246565][T21882] netlink: 'syz.4.4092': attribute type 17 has an invalid length. [ 592.257932][T21890] xfrm0: entered promiscuous mode [ 592.267884][T21890] xfrm0: entered allmulticast mode [ 592.515196][T21890] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4092'. [ 592.666405][T21882] net_ratelimit: 13 callbacks suppressed [ 592.666417][T21882] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 592.754796][T21899] netlink: 'syz.3.4094': attribute type 3 has an invalid length. [ 592.866496][T21893] lo speed is unknown, defaulting to 1000 [ 592.989269][T21895] veth3: entered promiscuous mode [ 593.059235][T21893] wg1 speed is unknown, defaulting to 1000 [ 593.152454][T21913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4098'. [ 593.164494][T21913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4098'. [ 593.452145][T21921] netlink: 'syz.4.4100': attribute type 1 has an invalid length. [ 593.502295][T21921] netlink: 'syz.4.4100': attribute type 3 has an invalid length. [ 593.519830][T21921] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4100'. [ 593.568623][T21922] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4100'. [ 593.812863][T21935] ipvlan2: entered promiscuous mode [ 593.906275][T21944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4106'. [ 594.110042][T21952] syz_tun: refused to change device tx_queue_len [ 594.224588][T21961] IPVS: set_ctl: invalid protocol: 255 10.1.1.0:20002 [ 594.245967][T21954] !: renamed from dummy0 (while UP) [ 594.335396][T21964] syz_tun: entered promiscuous mode [ 594.390210][T21964] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 594.453145][T21967] lo speed is unknown, defaulting to 1000 [ 594.502301][T21967] wg1 speed is unknown, defaulting to 1000 [ 594.551949][T21975] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4116'. [ 595.313707][T22009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.677677][T22030] validate_nla: 4 callbacks suppressed [ 595.677695][T22030] netlink: 'syz.2.4131': attribute type 13 has an invalid length. [ 595.677726][T22031] netlink: 'syz.2.4131': attribute type 13 has an invalid length. [ 595.686636][T22030] netlink: 'syz.2.4131': attribute type 17 has an invalid length. [ 595.734017][T22031] netlink: 'syz.2.4131': attribute type 17 has an invalid length. [ 595.843973][T22030] syz_tun: left promiscuous mode [ 595.853573][T22030] syz_tun: left allmulticast mode [ 595.917465][T22030] 8021q: adding VLAN 0 to HW filter on device  [ 595.939182][T22030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.968860][T22031] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.419699][T22067] netlink: 'syz.2.4140': attribute type 20 has an invalid length. [ 596.645228][T22104] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 596.923487][T22126] lo speed is unknown, defaulting to 1000 [ 596.934549][T22126] wg1 speed is unknown, defaulting to 1000 [ 596.976822][T22130] dvmrp8: entered allmulticast mode [ 597.031081][T22130] lo speed is unknown, defaulting to 1000 [ 597.048549][T22130] wg1 speed is unknown, defaulting to 1000 [ 597.141584][T22122] dvmrp8: left allmulticast mode [ 597.193199][T22142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.608436][T22160] lo speed is unknown, defaulting to 1000 [ 597.644664][T22160] wg1 speed is unknown, defaulting to 1000 [ 597.836493][T22186] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 598.174437][T22195] lo speed is unknown, defaulting to 1000 [ 598.210034][T22195] wg1 speed is unknown, defaulting to 1000 [ 598.273611][T22202] netlink: 'syz.1.4175': attribute type 1 has an invalid length. [ 598.345191][T22206] __nla_validate_parse: 10 callbacks suppressed [ 598.345210][T22206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4176'. [ 598.490596][T22209] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4177'. [ 598.512713][T22209] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4177'. [ 598.550531][T22209] IPv6: sit1: Disabled Multicast RS [ 598.568482][T22211] netlink: 'syz.1.4178': attribute type 1 has an invalid length. [ 598.623379][T22211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 598.679098][T22213] 8021q: adding VLAN 0 to HW filter on device bond3 [ 598.688587][T22213] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 598.731960][T22213] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 598.778509][T22220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4181'. [ 598.975869][T22237] vlan2: entered promiscuous mode [ 598.981253][T22237] vlan2: entered allmulticast mode [ 598.986668][T22237] hsr_slave_1: entered allmulticast mode [ 599.055063][T22240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4184'. [ 599.221474][T22249] netlink: 'syz.2.4189': attribute type 1 has an invalid length. [ 599.963279][T22278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4196'. [ 600.122887][T22289] netlink: 'syz.1.4198': attribute type 2 has an invalid length. [ 600.146505][T22289] : entered promiscuous mode [ 600.292417][T22298] netlink: 'syz.4.4201': attribute type 1 has an invalid length. [ 600.567704][T22313] unknown channel width for channel at 909000KHz? [ 600.595942][T22313] unknown channel width for channel at 909000KHz? [ 600.602855][T22313] unknown channel width for channel at 909000KHz? [ 600.768800][T22328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4212'. [ 600.776100][ T5880] Bluetooth: hci5: command 0x0406 tx timeout [ 600.785614][T22321] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4207'. [ 600.825075][T22321] hsr_slave_0: left promiscuous mode [ 600.841421][T22321] hsr_slave_1: left promiscuous mode [ 600.841467][T22333] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4213'. [ 600.926090][T22335] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 601.048546][T22336] netlink: 11382 bytes leftover after parsing attributes in process `syz.2.4214'. [ 601.158776][T22350] netlink: 'syz.1.4217': attribute type 39 has an invalid length. [ 601.187341][T22341] lo speed is unknown, defaulting to 1000 [ 601.320202][T22341] wg1 speed is unknown, defaulting to 1000 [ 601.544896][T22363] lo speed is unknown, defaulting to 1000 [ 601.568233][T22363] wg1 speed is unknown, defaulting to 1000 [ 602.398120][T22398] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 602.768860][T22424] 0ªX¹¦À: renamed from caif0 [ 602.801017][T22424] 0ªX¹¦À: entered allmulticast mode [ 602.809039][T22424] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 602.970065][T22444] lo speed is unknown, defaulting to 1000 [ 602.984387][T22444] wg1 speed is unknown, defaulting to 1000 [ 603.157310][T22452] netlink: 'syz.1.4249': attribute type 1 has an invalid length. [ 603.421482][T22471] vxcan1: entered allmulticast mode [ 603.433635][T22471] vxcan1: left allmulticast mode [ 603.577076][ T5880] Bluetooth: hci2: command 0x0406 tx timeout [ 603.788258][T22488] bond0: entered promiscuous mode [ 603.793667][T22488] bond_slave_0: entered promiscuous mode [ 603.810989][T22488] bond_slave_1: entered promiscuous mode [ 604.039041][T22503] __nla_validate_parse: 9 callbacks suppressed [ 604.039060][T22503] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4264'. [ 604.149886][T22511] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 604.161430][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4264'. [ 604.248962][T22522] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 604.262502][T22522] syz_tun: entered allmulticast mode [ 604.287695][T22523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4268'. [ 604.303666][T22515] syz_tun: left allmulticast mode [ 604.942163][T22541] netlink: 'syz.3.4274': attribute type 4 has an invalid length. [ 605.045374][T22551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4276'. [ 605.118033][T22550] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.4275'. [ 605.165273][T22554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4277'. [ 605.211856][T22550] netlink: 'syz.4.4275': attribute type 10 has an invalid length. [ 605.239005][T22550] batman_adv: batadv0: Interface deactivated: dummy0 [ 605.250926][T22550] batman_adv: batadv0: Removing interface: dummy0 [ 605.277427][T22550] dummy0: entered promiscuous mode [ 605.283445][T22550] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 605.326825][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4280'. [ 605.417964][T22573] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 605.512031][T22578] lo speed is unknown, defaulting to 1000 [ 605.520473][T22578] wg1 speed is unknown, defaulting to 1000 [ 605.781238][T22590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4286'. [ 605.877218][T22593] netlink: 16334 bytes leftover after parsing attributes in process `syz.2.4287'. [ 606.171115][T22566] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 606.177540][T22566] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 606.194678][T22566] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 606.200973][T22566] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 606.218384][T22566] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 606.224395][T22566] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 606.239789][T22566] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 606.245958][T22566] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 606.321258][T22595] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4288'. [ 606.332746][T22595] netlink: 'syz.0.4288': attribute type 1 has an invalid length. [ 606.469503][T22603] pim6reg1: entered promiscuous mode [ 606.477707][T22603] pim6reg1: entered allmulticast mode [ 607.014237][T22641] netlink: 'syz.4.4300': attribute type 6 has an invalid length. [ 607.036184][T22636] lo speed is unknown, defaulting to 1000 [ 607.046713][T22636] wg1 speed is unknown, defaulting to 1000 [ 607.184680][T22652] sctp: [Deprecated]: syz.4.4303 (pid 22652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.184680][T22652] Use struct sctp_sack_info instead [ 607.590170][T22676] openvswitch: netlink: Flow key attr not present in new flow. [ 607.764275][T22681] lo speed is unknown, defaulting to 1000 [ 607.850867][T22681] wg1 speed is unknown, defaulting to 1000 [ 608.738094][ T30] audit: type=1800 audit(1758438378.897:15): pid=22713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4321" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1630 res=0 errno=0 [ 608.779981][ T5865] block nbd2: Receive control failed (result -107) [ 608.806382][T22709] nbd2: detected capacity change from 0 to 32 [ 609.193187][T22725] lo speed is unknown, defaulting to 1000 [ 609.216257][T22725] wg1 speed is unknown, defaulting to 1000 [ 609.605148][T22741] ip6gretap0: entered promiscuous mode [ 609.708973][T22739] netlink: 'syz.3.4327': attribute type 13 has an invalid length. [ 609.738926][T22739] netlink: 'syz.3.4327': attribute type 17 has an invalid length. [ 609.863298][T22739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.872640][T22739] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.880711][T22758] netlink: 'syz.0.4331': attribute type 3 has an invalid length. [ 609.893126][T22739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 609.986131][T22763] __nla_validate_parse: 7 callbacks suppressed [ 609.986150][T22763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4332'. [ 610.060945][T22765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4333'. [ 610.076351][T22765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4333'. [ 610.089033][T22765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4333'. [ 610.344557][T22765] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4333'. [ 610.498900][T22768] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4334'. [ 610.509577][T22768] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 610.907095][T22793] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4339'. [ 611.305018][T22815] netlink: 'syz.4.4345': attribute type 12 has an invalid length. [ 611.316130][T22815] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.4345'. [ 611.336754][T22814] lo speed is unknown, defaulting to 1000 [ 611.344176][T22814] wg1 speed is unknown, defaulting to 1000 [ 611.797686][T22826] netlink: zone id is out of range [ 611.803493][T22826] netlink: zone id is out of range [ 611.818955][T22826] netlink: zone id is out of range [ 611.829053][T22826] netlink: zone id is out of range [ 611.834189][T22826] netlink: zone id is out of range [ 611.870823][T22826] netlink: zone id is out of range [ 611.887075][T22826] netlink: zone id is out of range [ 611.892372][T22826] netlink: zone id is out of range [ 612.149931][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4350'. [ 612.165651][T22831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4350'. [ 612.280036][T22833] lo speed is unknown, defaulting to 1000 [ 612.300427][T22833] wg1 speed is unknown, defaulting to 1000 [ 612.824783][T22846] €Â0: renamed from bond_slave_1 (while UP) [ 613.023358][T22852] tap0: tun_chr_ioctl cmd 1074025680 [ 613.144725][T22852] D: renamed from syzkaller0 [ 613.716536][T22907] bridge1: entered allmulticast mode [ 613.819575][T22914] tap0: tun_chr_ioctl cmd 1074025680 [ 613.848173][T22913] lo speed is unknown, defaulting to 1000 [ 613.874545][T22913] wg1 speed is unknown, defaulting to 1000 [ 614.024969][T22921] lo speed is unknown, defaulting to 1000 [ 614.038446][T22921] wg1 speed is unknown, defaulting to 1000 [ 614.212860][T22926] veth1_to_hsr: entered promiscuous mode [ 614.252487][T22926] macvtap2: entered promiscuous mode [ 614.261115][T22926] macvtap2: entered allmulticast mode [ 614.266836][T22926] veth1_to_hsr: entered allmulticast mode [ 614.712383][T22949] xfrm0: left promiscuous mode [ 614.743964][T22949] xfrm0: left allmulticast mode [ 614.887887][T22939] lo speed is unknown, defaulting to 1000 [ 614.923463][T22939] wg1 speed is unknown, defaulting to 1000 [ 614.932024][T22957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.014973][T22959] __nla_validate_parse: 3 callbacks suppressed [ 615.014990][T22959] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4378'. [ 616.052565][T23001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4387'. [ 616.052860][T22998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4391'. [ 616.096298][T23003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 616.125892][T23003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 616.398003][T23025] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4395'. [ 616.672259][T23034] lo speed is unknown, defaulting to 1000 [ 616.680813][T23034] wg1 speed is unknown, defaulting to 1000 [ 617.224967][T23062] pim6reg1: entered promiscuous mode [ 617.244099][T23062] pim6reg1: entered allmulticast mode [ 617.357721][T23062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4404'. [ 617.382992][T18285] IPVS: ip_vs_send_async error -101 [ 617.383810][T23073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4405'. [ 617.481216][T23071] lo speed is unknown, defaulting to 1000 [ 617.553394][T23083] netlink: 'syz.2.4408': attribute type 12 has an invalid length. [ 617.581062][T23071] wg1 speed is unknown, defaulting to 1000 [ 617.748360][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4410'. [ 617.881096][T23095] syzkaller1: entered promiscuous mode [ 617.898277][T23095] syzkaller1: entered allmulticast mode [ 618.259630][T23107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4416'. [ 618.547370][T23120] team0: No ports can be present during mode change [ 618.694607][T23124] lo speed is unknown, defaulting to 1000 [ 618.707808][T23124] wg1 speed is unknown, defaulting to 1000 [ 618.971352][T23145] netlink: 'syz.0.4428': attribute type 21 has an invalid length. [ 619.153661][T23154] siw: device registration error -23 [ 619.273946][T23158] netlink: 'syz.0.4430': attribute type 1 has an invalid length. [ 619.292488][T23160] dvmrp0: left allmulticast mode [ 619.496000][T18285] IPVS: ip_vs_send_async error -101 [ 620.106051][T23212] __nla_validate_parse: 8 callbacks suppressed [ 620.106070][T23212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4444'. [ 620.173479][T23222] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.4447'. [ 620.182985][T23212] bridge_slave_1: left allmulticast mode [ 620.183009][T23212] bridge_slave_1: left promiscuous mode [ 620.183219][T23212] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.205401][T23212] bridge_slave_0: left allmulticast mode [ 620.212787][T23212] bridge_slave_0: left promiscuous mode [ 620.221814][T23212] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.236114][T23225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4448'. [ 620.471338][T23241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4452'. [ 620.480942][T23243] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4452'. [ 620.493452][T23241] netlink: 'syz.1.4452': attribute type 29 has an invalid length. [ 620.588825][T23250] bridge0: entered promiscuous mode [ 620.772369][T23265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4459'. [ 621.350187][T23306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4473'. [ 621.510332][T23315] vxcan1: tx address claim with dest, not broadcast [ 621.738083][T23317] lo speed is unknown, defaulting to 1000 [ 621.745949][T23317] wg1 speed is unknown, defaulting to 1000 [ 621.835574][T23321] lo speed is unknown, defaulting to 1000 [ 621.843302][T23321] wg1 speed is unknown, defaulting to 1000 [ 622.772050][T23356] ipvlan2: entered promiscuous mode [ 622.809942][T23356] netlink: 'syz.4.4483': attribute type 3 has an invalid length. [ 622.930573][T23369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4486'. [ 623.014576][T23370] syzkaller1: entered promiscuous mode [ 623.027295][T23370] syzkaller1: entered allmulticast mode [ 623.216347][T23387] netlink: 23 bytes leftover after parsing attributes in process `syz.4.4489'. [ 623.300505][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4489'. [ 623.320864][T23391] lo speed is unknown, defaulting to 1000 [ 623.328922][T23391] wg1 speed is unknown, defaulting to 1000 [ 624.983828][T23425] syzkaller1: entered promiscuous mode [ 625.012636][T23425] syzkaller1: entered allmulticast mode [ 625.323817][T23445] __nla_validate_parse: 3 callbacks suppressed [ 625.323836][T23445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4504'. [ 625.374481][T23445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4504'. [ 625.426519][T23448] netlink: 'syz.2.4505': attribute type 10 has an invalid length. [ 625.462814][T23448] : (slave 0!): Enslaving as an active interface with an up link [ 625.517151][T23452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4507'. [ 625.563111][T23452] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.4507'. [ 625.593827][T23452] netlink: 'syz.0.4507': attribute type 1 has an invalid length. [ 625.630191][T23455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4508'. [ 625.717558][T23458] lo speed is unknown, defaulting to 1000 [ 625.725334][T23458] wg1 speed is unknown, defaulting to 1000 [ 625.868961][T23464] Can't find ip_set type hash:ipwmec [ 625.877497][T23469] netlink: 'syz.0.4509': attribute type 13 has an invalid length. [ 625.903975][T23469] netlink: 'syz.0.4509': attribute type 17 has an invalid length. [ 625.980065][T23469] 0ªX¹¦À: left allmulticast mode [ 625.985141][T23469] net_ratelimit: 51 callbacks suppressed [ 625.985163][T23469] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 626.084996][T23461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.269682][T23471] lo speed is unknown, defaulting to 1000 [ 626.311338][T23471] wg1 speed is unknown, defaulting to 1000 [ 626.525297][T23477] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4512'. [ 626.801488][T23486] tipc: Enabled bearer , priority 0 [ 626.810247][T23486] syzkaller0: entered promiscuous mode [ 626.816340][T23486] syzkaller0: entered allmulticast mode [ 626.845900][T23485] tipc: Resetting bearer [ 626.875002][T23485] tipc: Disabling bearer [ 626.982381][T23505] netlink: 20824 bytes leftover after parsing attributes in process `syz.1.4517'. [ 627.363888][T23513] lo speed is unknown, defaulting to 1000 [ 627.378319][T23513] wg1 speed is unknown, defaulting to 1000 [ 627.449092][T23515] tipc: Enabling of bearer rejected, failed to enable media [ 627.574992][T23524] lo speed is unknown, defaulting to 1000 [ 627.612701][T23524] wg1 speed is unknown, defaulting to 1000 [ 627.682090][T23530] netlink: 'syz.4.4525': attribute type 1 has an invalid length. [ 627.700866][T23530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4525'. [ 627.852447][T23535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4526'. [ 627.888625][T23536] syzkaller0: entered promiscuous mode [ 627.894233][T23536] syzkaller0: entered allmulticast mode [ 627.957156][T23542] netlink: 'syz.1.4527': attribute type 1 has an invalid length. [ 627.957154][T23540] netlink: 'syz.1.4527': attribute type 1 has an invalid length. [ 628.009358][T23540] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4527'. [ 628.301099][T23560] netlink: 'syz.1.4532': attribute type 1 has an invalid length. [ 628.680265][T23583] hsr1: left allmulticast mode [ 628.699028][T23583] veth1_to_team: left allmulticast mode [ 628.717318][T23583] bond0: left allmulticast mode [ 628.730754][T23583] bond_slave_0: left allmulticast mode [ 628.759000][T23583] bond_slave_1: left allmulticast mode [ 628.765462][T23583] bond2: left promiscuous mode [ 628.771913][T23583] bridge1: left allmulticast mode [ 628.790608][ T5868] lo speed is unknown, defaulting to 1000 [ 628.796785][ T5868] syz1: Port: 1 Link DOWN [ 628.922013][T23596] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 629.170370][T23611] netlink: 'syz.1.4543': attribute type 3 has an invalid length. [ 629.257445][T23613] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 629.933167][T23664] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 630.411348][T23685] lo speed is unknown, defaulting to 1000 [ 630.460347][T23685] wg1 speed is unknown, defaulting to 1000 [ 630.659020][T23696] __nla_validate_parse: 10 callbacks suppressed [ 630.659041][T23696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4566'. [ 630.896095][T23700] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20000 [ 630.961955][T23702] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20002 [ 631.180398][T23709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4569'. [ 631.249445][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4569'. [ 632.106837][T23750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4579'. [ 632.175130][T23754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4579'. [ 632.336262][T23759] netlink: 'syz.0.4581': attribute type 11 has an invalid length. [ 632.355912][T23759] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4581'. [ 632.393659][T23750] bond0: (slave bond_slave_1): Releasing backup interface [ 632.402434][T23750] bond_slave_1 (unregistering): left promiscuous mode [ 632.502721][T23748] lo speed is unknown, defaulting to 1000 [ 632.524968][T23748] wg1 speed is unknown, defaulting to 1000 [ 632.645267][T23770] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4584'. [ 632.765630][T23772] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4585'. [ 632.821579][ T30] audit: type=1800 audit(1758438402.977:16): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4586" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1951 res=0 errno=0 [ 633.018224][T23787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4588'. [ 633.073233][T23788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4587'. [ 633.211649][T23787] team0 (unregistering): Port device team_slave_0 removed [ 633.221984][T23787] team0 (unregistering): Port device team_slave_1 removed [ 633.417230][T23803] netlink: 'syz.3.4593': attribute type 1 has an invalid length. [ 633.452665][T23803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 633.484584][T23803] bond3: (slave ip6gretap1): making interface the new active one [ 633.495159][T23803] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 633.540451][T23803] veth3: entered promiscuous mode [ 633.549386][T23803] bond3: (slave veth3): Enslaving as an active interface with a down link [ 633.591038][T23804] veth5: entered promiscuous mode [ 633.600667][T23804] bond3: (slave veth5): Enslaving as an active interface with a down link [ 633.612641][T23803] erspan0: entered allmulticast mode [ 633.653739][T23803] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 633.900105][T23834] netlink: zone id is out of range [ 633.906476][T23834] netlink: zone id is out of range [ 633.912241][T23834] netlink: zone id is out of range [ 633.925014][T23834] netlink: zone id is out of range [ 633.932708][T23834] netlink: zone id is out of range [ 633.941473][T23834] netlink: zone id is out of range [ 633.949132][T23834] netlink: zone id is out of range [ 633.954612][T23834] netlink: zone id is out of range [ 633.970689][T23842] syzkaller1: entered promiscuous mode [ 633.978274][T23842] syzkaller1: entered allmulticast mode [ 633.989848][T23834] netlink: zone id is out of range [ 633.994996][T23834] netlink: zone id is out of range [ 634.657144][ T30] audit: type=1800 audit(1758438404.817:17): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4609" name="memory.events" dev="tmpfs" ino=1645 res=0 errno=0 [ 635.744939][T23917] lo speed is unknown, defaulting to 1000 [ 635.797812][T23917] wg1 speed is unknown, defaulting to 1000 [ 636.131386][T23923] __nla_validate_parse: 9 callbacks suppressed [ 636.131403][T23923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4627'. [ 636.151529][T23923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4627'. [ 636.317270][T23928] lo speed is unknown, defaulting to 1000 [ 636.317565][T23931] netlink: 'syz.4.4628': attribute type 10 has an invalid length. [ 636.354098][T23928] wg1 speed is unknown, defaulting to 1000 [ 636.427342][T23939] netlink: 'syz.4.4628': attribute type 10 has an invalid length. [ 636.437890][T23939] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4628'. [ 636.447565][T23931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.501927][T23931] batadv0: entered promiscuous mode [ 636.521571][T23931] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 636.550893][T23949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4634'. [ 636.571968][T23939] batadv0: entered allmulticast mode [ 636.588990][T23939] bond0: (slave batadv0): Releasing backup interface [ 636.618047][T23939] bridge0: port 3(batadv0) entered blocking state [ 636.633828][T23939] bridge0: port 3(batadv0) entered disabled state [ 636.675544][T23946] : (slave 0!): Releasing backup interface [ 636.701591][T23946] : (slave bond_slave_0): Releasing backup interface [ 636.737250][T23946] : (slave €Â0): Releasing backup interface [ 636.795517][T23946] team0: Port device team_slave_0 removed [ 636.823214][T23946] team0: Port device team_slave_1 removed [ 636.859732][T23951] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 636.867121][T23949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4634'. [ 636.885216][T23949] netlink: 'syz.0.4634': attribute type 11 has an invalid length. [ 636.947032][T23949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4634'. [ 636.994350][T23949] netlink: 'syz.0.4634': attribute type 11 has an invalid length. [ 637.067877][T21506] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 637.077292][T21506] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 637.163417][T23960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4636'. [ 637.394229][T23958] lo speed is unknown, defaulting to 1000 [ 637.529068][T23958] wg1 speed is unknown, defaulting to 1000 [ 637.542614][T23981] bridge0: port 4(erspan0) entered blocking state [ 637.550106][T23981] bridge0: port 4(erspan0) entered disabled state [ 637.551832][T23986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4642'. [ 637.571869][T23981] erspan0: entered allmulticast mode [ 637.602550][T23981] erspan0: entered promiscuous mode [ 637.628180][T23981] bridge0: port 4(erspan0) entered blocking state [ 637.635344][T23981] bridge0: port 4(erspan0) entered forwarding state [ 637.744163][T23973] erspan0: left allmulticast mode [ 637.763168][T23973] erspan0: left promiscuous mode [ 637.778789][T23973] bridge0: port 4(erspan0) entered disabled state [ 637.836621][T23982] lo speed is unknown, defaulting to 1000 [ 637.844275][T23982] wg1 speed is unknown, defaulting to 1000 [ 638.150288][T24011] !: renamed from dummy0 (while UP) [ 638.441483][T24008] lo speed is unknown, defaulting to 1000 [ 638.476320][T24008] wg1 speed is unknown, defaulting to 1000 [ 638.620244][T24016] lo speed is unknown, defaulting to 1000 [ 638.662539][T24015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4649'. [ 638.679736][T24016] wg1 speed is unknown, defaulting to 1000 [ 638.732840][T24024] lo speed is unknown, defaulting to 1000 [ 638.738800][T24015] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4649'. [ 638.768885][T24024] wg1 speed is unknown, defaulting to 1000 [ 639.545023][T24054] netlink: 'syz.3.4662': attribute type 1 has an invalid length. [ 639.689621][T24054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 639.902036][T24062] netlink: 'syz.3.4662': attribute type 11 has an invalid length. [ 639.937400][T24077] bond4: (slave geneve2): making interface the new active one [ 639.952193][T24077] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 639.982338][T24082] net_ratelimit: 9 callbacks suppressed [ 639.982357][T24082] openvswitch: netlink: Flow key attr not present in new flow. [ 640.002653][T21517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.020323][T21517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.036207][T21517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.045296][T21517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.064393][T24079] tipc: Enabled bearer , priority 0 [ 640.074826][T24083] syzkaller0: entered promiscuous mode [ 640.080781][T24083] syzkaller0: entered allmulticast mode [ 640.110096][T24079] tipc: Resetting bearer [ 640.266508][T24094] syzkaller1: entered promiscuous mode [ 640.278524][T24094] syzkaller1: entered allmulticast mode [ 640.331447][T24103] netlink: 'syz.4.4677': attribute type 27 has an invalid length. [ 640.406928][T24103] syz_tun: left promiscuous mode [ 640.460929][T24103] bond0: left promiscuous mode [ 640.468540][T24103] bond_slave_0: left promiscuous mode [ 640.474131][T24103] dummy0: left promiscuous mode [ 640.503403][T24103] vlan0: left promiscuous mode [ 640.527486][T24103] ipvlan2: left promiscuous mode [ 640.563550][T24118] netlink: 'syz.3.4679': attribute type 13 has an invalid length. [ 640.575076][T24118] netlink: 'syz.3.4679': attribute type 17 has an invalid length. [ 640.591483][T24118] erspan0: left allmulticast mode [ 640.617595][T24118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 640.708107][T24118] lo speed is unknown, defaulting to 1000 [ 640.715548][T24118] wg1 speed is unknown, defaulting to 1000 [ 640.817935][T24120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.828648][T24137] lo speed is unknown, defaulting to 1000 [ 640.836740][T24137] wg1 speed is unknown, defaulting to 1000 [ 641.115857][ T44] tipc: Node number set to 937110057 [ 641.200437][T24169] __nla_validate_parse: 9 callbacks suppressed [ 641.200453][T24169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4694'. [ 641.217046][T24169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4694'. [ 641.270892][T24177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4696'. [ 641.282263][T24177] netlink: 'syz.2.4696': attribute type 30 has an invalid length. [ 641.533636][T24193] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4701'. [ 641.567543][T24193] macvtap1: entered promiscuous mode [ 641.573202][T24193] veth1_to_hsr: entered promiscuous mode [ 641.580939][T24193] macvtap1: entered allmulticast mode [ 641.586503][T24193] veth1_to_hsr: entered allmulticast mode [ 641.619972][T24201] macvtap2: entered promiscuous mode [ 641.643667][T24201] macvtap2: entered allmulticast mode [ 641.698159][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4704'. [ 641.814413][T24214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4709'. [ 641.841605][T24216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4709'. [ 641.972178][T24223] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 642.647649][T24237] lo speed is unknown, defaulting to 1000 [ 642.665033][T24237] wg1 speed is unknown, defaulting to 1000 [ 642.918599][T24258] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4718'. [ 643.022350][T24271] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 643.156992][T24273] 8021q: adding VLAN 0 to HW filter on device bond4 [ 643.528968][T24306] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4731'. [ 643.599293][T24310] netlink: 'syz.0.4733': attribute type 2 has an invalid length. [ 643.607989][T24310] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4733'. [ 643.759708][T24317] lo speed is unknown, defaulting to 1000 [ 643.778575][T24317] wg1 speed is unknown, defaulting to 1000 [ 644.284449][T24343] tipc: Enabling of bearer rejected, failed to enable media [ 645.053438][T24388] lo speed is unknown, defaulting to 1000 [ 645.077686][T24388] wg1 speed is unknown, defaulting to 1000 [ 645.162468][T24401] netlink: 'syz.4.4757': attribute type 6 has an invalid length. [ 645.181226][T24404] team0: Device ipvlan3 failed to register rx_handler [ 646.499340][T24464] netlink: 'syz.4.4775': attribute type 1 has an invalid length. [ 646.509020][T24464] __nla_validate_parse: 10 callbacks suppressed [ 646.515624][T24464] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4775'. [ 646.684660][T24478] dvmrp8: entered allmulticast mode [ 646.786749][T24478] lo speed is unknown, defaulting to 1000 [ 646.816303][T24478] wg1 speed is unknown, defaulting to 1000 [ 647.149166][T24505] netlink: 360 bytes leftover after parsing attributes in process `syz.3.4787'. [ 647.450458][T24487] dvmrp8: left allmulticast mode [ 647.840895][T24552] delete_channel: no stack [ 647.859376][T24552] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4800'. [ 647.873037][T24549] lo speed is unknown, defaulting to 1000 [ 647.902957][T24549] wg1 speed is unknown, defaulting to 1000 [ 648.006223][T24559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4802'. [ 648.185336][T24565] netem: incorrect ge model size [ 648.200072][T24565] netem: change failed [ 648.332512][T24574] lo speed is unknown, defaulting to 1000 [ 648.347884][T24574] wg1 speed is unknown, defaulting to 1000 [ 648.606101][T24587] tipc: Trying to set illegal importance in message [ 648.676755][T24587] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4809'. [ 648.895206][T24594] syzkaller0: left promiscuous mode [ 648.910067][T24594] syzkaller0: left allmulticast mode [ 648.985583][T24572] netlink: 'syz.3.4806': attribute type 1 has an invalid length. [ 649.036679][T24594] tipc: Resetting bearer [ 649.388688][T24613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.584335][T24617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4819'. [ 649.771023][T24639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4826'. [ 649.795527][T24639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4826'. [ 649.835879][T24639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4826'. [ 649.845038][T24639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4826'. [ 649.897311][T24639] netlink: 'syz.3.4826': attribute type 6 has an invalid length. [ 650.119743][T24652] bridge0: port 4(macvlan2) entered blocking state [ 650.132443][T24652] bridge0: port 4(macvlan2) entered disabled state [ 650.143842][T24652] macvlan2: entered allmulticast mode [ 650.149811][T24652] bridge0: entered allmulticast mode [ 650.166142][T24652] macvlan2: left allmulticast mode [ 650.194659][T24652] bridge0: left allmulticast mode [ 650.275095][T24654] nbd: socks must be embedded in a SOCK_ITEM attr [ 651.226943][T24699] netlink: 'syz.3.4839': attribute type 3 has an invalid length. [ 651.563926][T24720] __nla_validate_parse: 3 callbacks suppressed [ 651.563945][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4845'. [ 651.613173][T24720] netlink: 'syz.4.4845': attribute type 29 has an invalid length. [ 651.783248][T24729] tipc: Enabling of bearer rejected, already enabled [ 651.799734][T24729] syzkaller0: entered promiscuous mode [ 651.805597][T24729] syzkaller0: entered allmulticast mode [ 651.834349][T24729] tipc: Resetting bearer [ 651.954672][T24742] syz_tun: entered allmulticast mode [ 651.992602][T24745] syz_tun: left allmulticast mode [ 652.043044][T24750] netlink: 'syz.2.4854': attribute type 1 has an invalid length. [ 652.092340][T24750] bond2: entered promiscuous mode [ 652.098157][T24750] bond2: entered allmulticast mode [ 652.103995][T24750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 652.281086][T24755] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4856'. [ 652.308527][T24755] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4856'. [ 652.321225][T24755] macvlan1: left allmulticast mode [ 652.337535][T24757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4857'. [ 652.467854][T24765] tipc: Enabled bearer , priority 0 [ 652.477229][T24765] syzkaller0: entered promiscuous mode [ 652.482817][T24765] syzkaller0: entered allmulticast mode [ 652.635580][T24771] netlink: 'syz.2.4861': attribute type 4 has an invalid length. [ 652.658064][T24775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4862'. [ 652.681882][T24775] netlink: 'syz.0.4862': attribute type 22 has an invalid length. [ 652.694359][T24775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4862'. [ 652.721359][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.736078][T24775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4862'. [ 652.757235][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.762582][T24779] netlink: 'syz.3.4864': attribute type 10 has an invalid length. [ 652.765444][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.825953][T24775] netlink: 'syz.0.4862': attribute type 22 has an invalid length. [ 652.834029][T24775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4862'. [ 652.850263][T24779] team0: Device veth0_vlan failed to register rx_handler [ 652.882890][T24779] tipc: Resetting bearer [ 652.903779][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.932959][T24787] netlink: 'syz.4.4866': attribute type 4 has an invalid length. [ 652.947887][T24789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4867'. [ 652.987413][T24792] syzkaller1: entered promiscuous mode [ 653.018820][T24792] syzkaller1: entered allmulticast mode [ 653.055965][T24802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4869'. [ 653.613898][T24825] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 653.831325][T24829] netlink: 'syz.3.4880': attribute type 1 has an invalid length. [ 653.935464][T24842] tipc: Enabled bearer , priority 0 [ 653.948912][T24842] syzkaller0: entered promiscuous mode [ 653.967713][T24842] syzkaller0: entered allmulticast mode [ 654.044950][T24842] tipc: Resetting bearer [ 654.095070][T24840] tipc: Resetting bearer [ 654.189485][T24840] tipc: Disabling bearer [ 654.598073][T24877] tipc: Enabling of bearer rejected, already enabled [ 655.118765][T24905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.313413][T21517] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 655.321851][T21517] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 655.336243][ T8933] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 655.352123][T24909] mac80211_hwsim hwsim56 ªªªªª;: renamed from wlan0 [ 655.822634][T24918] lo speed is unknown, defaulting to 1000 [ 655.830494][ T8933] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 655.840134][T24918] wg1 speed is unknown, defaulting to 1000 [ 655.885878][T24927] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 656.308190][ T8933] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 656.983338][T24986] tipc: Enabled bearer , priority 0 [ 657.050329][T24986] pim6reg1: entered promiscuous mode [ 657.057378][T24986] pim6reg1: entered allmulticast mode [ 657.069137][T24986] syzkaller0: entered promiscuous mode [ 657.074741][T24986] syzkaller0: entered allmulticast mode [ 657.209954][T24984] tipc: Resetting bearer [ 657.271128][T24984] tipc: Disabling bearer [ 657.520767][T25015] tap0: tun_chr_ioctl cmd 1074025677 [ 657.526487][T25015] tap0: linktype set to 774 [ 657.533458][T25015] __nla_validate_parse: 18 callbacks suppressed [ 657.533470][T25015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4926'. [ 658.072999][T25040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4933'. [ 658.401689][T25054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4939'. [ 658.413977][T25054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4939'. [ 658.444562][T25054] lo speed is unknown, defaulting to 1000 [ 658.454936][T25054] wg1 speed is unknown, defaulting to 1000 [ 658.724840][T25064] syzkaller1: entered promiscuous mode [ 658.730716][T25064] syzkaller1: entered allmulticast mode [ 659.014249][T25073] sctp: [Deprecated]: syz.0.4945 (pid 25073) Use of int in max_burst socket option. [ 659.014249][T25073] Use struct sctp_assoc_value instead [ 659.221418][T25084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4951'. [ 659.414082][T25107] netlink: 'syz.0.4956': attribute type 29 has an invalid length. [ 659.422399][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 659.469027][T25107] netlink: 'syz.0.4956': attribute type 29 has an invalid length. [ 659.479533][T25107] netlink: 'syz.0.4956': attribute type 29 has an invalid length. [ 659.487796][T25107] netlink: 'syz.0.4956': attribute type 29 has an invalid length. [ 659.524669][T25107] netlink: 'syz.0.4956': attribute type 29 has an invalid length. [ 659.533053][T25107] netlink: 'syz.0.4956': attribute type 29 has an invalid length. [ 659.541642][T25107] netlink: 'syz.0.4956': attribute type 29 has an invalid length. [ 659.557859][T25116] netlink: 'syz.4.4958': attribute type 1 has an invalid length. [ 659.558604][T25107] netlink: 'syz.0.4956': attribute type 29 has an invalid length. [ 659.566769][T25116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4958'. [ 659.573892][T25107] netlink: 'syz.0.4956': attribute type 29 has an invalid length. [ 660.049682][T25140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4966'. [ 660.179068][T25147] Bluetooth: hci1: too big key_count value 32778 [ 660.282449][T25149] lo speed is unknown, defaulting to 1000 [ 660.295549][T25149] wg1 speed is unknown, defaulting to 1000 [ 660.754632][T25176] lo speed is unknown, defaulting to 1000 [ 660.773917][T25176] wg1 speed is unknown, defaulting to 1000 [ 661.005107][T25196] openvswitch: netlink: Message has 4 unknown bytes. [ 661.152414][T25202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4981'. [ 661.173166][T25206] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4983'. [ 661.305656][T25213] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4984'. [ 661.381740][T25215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.759518][T25255] tipc: Disabling bearer [ 662.940515][T25262] lo speed is unknown, defaulting to 1000 [ 662.978256][T25262] wg1 speed is unknown, defaulting to 1000 [ 663.064362][T25276] __nla_validate_parse: 6 callbacks suppressed [ 663.064380][T25276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5000'. [ 663.400955][T25284] tipc: Enabled bearer , priority 0 [ 663.848047][T25272] tipc: Disabling bearer [ 664.343509][T25330] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5013'. [ 664.588686][T25345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5015'. [ 665.642309][T25394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5030'. [ 665.938719][T25412] netlink: 676 bytes leftover after parsing attributes in process `syz.2.5035'. [ 665.958591][T25412] netlink: 676 bytes leftover after parsing attributes in process `syz.2.5035'. [ 665.996922][T25417] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5036'. [ 666.055209][T25421] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5037'. [ 666.257045][T25435] validate_nla: 34 callbacks suppressed [ 666.257064][T25435] netlink: 'syz.4.5042': attribute type 1 has an invalid length. [ 666.289373][T25432] vlan2: left allmulticast mode [ 666.294258][T25432] batadv0: left allmulticast mode [ 666.300478][T25432] bond1: left promiscuous mode [ 666.305346][T25432] bond1: left allmulticast mode [ 666.318648][T25432] veth13: left promiscuous mode [ 666.324239][T25432] tipc: Resetting bearer [ 666.330583][T25432] syzkaller0: left promiscuous mode [ 666.335914][T25432] syzkaller0: left allmulticast mode [ 666.385446][T25435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 666.410034][T25438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 666.418939][T25438] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 666.430969][T25438] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 666.452358][ T6474] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.462114][ T6474] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.500360][T25440] veth3: entered promiscuous mode [ 666.513070][T25440] bond2: (slave veth3): Enslaving as an active interface with a down link [ 666.532922][ T6474] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.556653][ T6474] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.995177][T25474] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5048'. [ 667.270773][T25492] netlink: 23 bytes leftover after parsing attributes in process `syz.3.5055'. [ 667.280454][T25492] caif0: entered allmulticast mode [ 667.516046][T25482] block nbd3: server does not support multiple connections per device. [ 667.524520][T25482] block nbd3: shutting down sockets [ 667.770710][T25512] syz_tun: entered allmulticast mode [ 667.782010][T25512] dvmrp8: entered allmulticast mode [ 667.803746][T25512] lo speed is unknown, defaulting to 1000 [ 667.810960][T25512] wg1 speed is unknown, defaulting to 1000 [ 668.455974][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 668.529222][T25539] __nla_validate_parse: 3 callbacks suppressed [ 668.529239][T25539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5068'. [ 668.557375][T25513] syz_tun: left allmulticast mode [ 668.562677][T25513] dvmrp8: left allmulticast mode [ 668.588299][T25542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5068'. [ 668.731867][T25545] 8021q: VLANs not supported on pimreg [ 668.751297][T25547] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 668.898081][T25556] netlink: 'syz.1.5074': attribute type 11 has an invalid length. [ 668.948347][T25556] netlink: 'syz.1.5074': attribute type 11 has an invalid length. [ 668.982785][T25565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5075'. [ 669.180408][T25587] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 669.188716][T25587] syzkaller1: linktype set to 823 [ 669.286626][T25594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5084'. [ 669.448483][T25610] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 669.448702][T25597] lo speed is unknown, defaulting to 1000 [ 669.521605][T25597] wg1 speed is unknown, defaulting to 1000 [ 669.761042][T25629] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5096'. [ 669.770279][T25634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5097'. [ 669.781121][T25632] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5094'. [ 670.606198][T25652] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5102'. [ 670.808344][T25663] pim6reg: left allmulticast mode [ 670.899416][T25661] block nbd3: shutting down sockets [ 671.683182][T25707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.709106][T25711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5117'. [ 672.086444][T25728] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5119'. [ 672.199246][T25735] netlink: 'syz.0.5124': attribute type 1 has an invalid length. [ 672.439401][T25742] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 672.651833][T25758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.739391][T25759] netlink: 'syz.2.5130': attribute type 12 has an invalid length. [ 672.774692][T25771] syz_tun: entered allmulticast mode [ 673.342225][T25801] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 673.441443][T25803] lo speed is unknown, defaulting to 1000 [ 673.450468][T25803] wg1 speed is unknown, defaulting to 1000 [ 673.694492][T25813] __nla_validate_parse: 4 callbacks suppressed [ 673.694505][T25813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5144'. [ 673.805544][T25815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5145'. [ 673.887443][T25820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5147'. [ 674.061596][T25833] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5150'. [ 674.110253][T25799] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 674.330268][T25841] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5152'. [ 674.360943][T25841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5152'. [ 674.473057][T25851] lo speed is unknown, defaulting to 1000 [ 674.499700][T25851] wg1 speed is unknown, defaulting to 1000 [ 674.653564][T25870] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5162'. [ 674.883125][T25870] lo speed is unknown, defaulting to 1000 [ 674.961299][T25870] wg1 speed is unknown, defaulting to 1000 [ 674.990135][T25886] syzkaller1: entered promiscuous mode [ 675.013089][T25886] syzkaller1: entered allmulticast mode [ 675.152748][T25892] IPVS: stopping backup sync thread 24927 ... [ 675.189803][T25895] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 675.327950][T25900] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 675.527020][T25913] lo speed is unknown, defaulting to 1000 [ 675.539001][T25913] wg1 speed is unknown, defaulting to 1000 [ 675.651987][T25921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5171'. [ 675.844658][T25918] lo speed is unknown, defaulting to 1000 [ 675.899002][T25918] wg1 speed is unknown, defaulting to 1000 [ 675.971090][T25939] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5177'. [ 676.069932][T25944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5179'. [ 676.571608][T25994] lo speed is unknown, defaulting to 1000 [ 676.580607][T25994] wg1 speed is unknown, defaulting to 1000 [ 676.953045][T26016] lo speed is unknown, defaulting to 1000 [ 676.962108][T26016] wg1 speed is unknown, defaulting to 1000 [ 677.378941][T26032] lo speed is unknown, defaulting to 1000 [ 677.392439][T26032] wg1 speed is unknown, defaulting to 1000 [ 677.403282][T26029] netlink: 'syz.4.5190': attribute type 1 has an invalid length. [ 677.612484][T26036] lo speed is unknown, defaulting to 1000 [ 677.637505][T26036] wg1 speed is unknown, defaulting to 1000 [ 678.555778][T26087] nbd3: detected capacity change from 0 to 127 [ 678.610803][T26092] lo speed is unknown, defaulting to 1000 [ 678.628439][T26098] netlink: 'syz.2.5208': attribute type 1 has an invalid length. [ 678.630903][T26092] wg1 speed is unknown, defaulting to 1000 [ 678.713043][T26102] netlink: 'syz.0.5207': attribute type 10 has an invalid length. [ 678.764193][T26091] __nla_validate_parse: 5 callbacks suppressed [ 678.764210][T26091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5207'. [ 678.822156][ T5865] block nbd3: Receive control failed (result -32) [ 678.833451][T26105] rdma_rxe: rxe_newlink: failed to add lo [ 683.015913][T18285] IPVS: ip_vs_send_async error -101 [ 685.095919][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 719.655897][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 744.376141][T18285] IPVS: ip_vs_send_async error -101 [ 788.146055][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 798.394651][T21506] bond10: left allmulticast mode [ 798.399890][T21506] bridge8: port 1(bond10) entered disabled state [ 798.541511][T21506] erspan0 (unregistering): left allmulticast mode [ 798.572609][T21506] bond2 (unregistering): (slave gretap1): Releasing active interface [ 799.177281][T21506] bond3 (unregistering): (slave macvlan1): Releasing backup interface [ 799.192373][T21506] bond0 (unregistering): Released all slaves [ 799.293537][T21506] bond1 (unregistering): (slave veth3): Releasing active interface [ 799.302318][T21506] bond1 (unregistering): Released all slaves [ 799.402699][T21506] bond2 (unregistering): Released all slaves [ 799.501454][T21506] bond3 (unregistering): Released all slaves [ 799.604653][T21506] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 799.613517][T21506] bond4 (unregistering): Released all slaves [ 799.625993][T21506] bond5 (unregistering): Released all slaves [ 799.638371][T21506] bond6 (unregistering): Released all slaves [ 799.743300][T21506] bond7 (unregistering): Released all slaves [ 799.850754][T21506] bond8 (unregistering): Released all slaves [ 799.862896][T21506] bond9 (unregistering): Released all slaves [ 799.966124][T21506] bond10 (unregistering): Released all slaves [ 799.980399][T21506] bond11 (unregistering): Released all slaves [ 800.082196][T21506] bond12 (unregistering): Released all slaves [ 800.250200][T21506] tipc: Left network mode [ 805.735857][T18285] IPVS: ip_vs_send_async error -101 [ 823.976107][ T31] INFO: task kworker/0:28:8931 blocked for more than 143 seconds. [ 823.983961][ T31] Not tainted syzkaller #0 [ 823.989110][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 823.998034][ T31] task:kworker/0:28 state:D stack:24488 pid:8931 tgid:8931 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 824.010155][ T31] Workqueue: events rfkill_sync_work [ 824.015463][ T31] Call Trace: [ 824.018822][ T31] [ 824.021754][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 824.026352][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 824.031841][ T31] ? __pfx___schedule+0x10/0x10 [ 824.037930][ T31] ? schedule+0x91/0x360 [ 824.042209][ T31] schedule+0x165/0x360 [ 824.046490][ T31] schedule_preempt_disabled+0x13/0x30 [ 824.051950][ T31] __mutex_lock+0x7e6/0x1350 [ 824.062386][ T31] ? __mutex_lock+0x5bb/0x1350 [ 824.067261][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 824.072564][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 824.078185][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.083405][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 824.089394][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 824.095925][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 824.101657][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 824.106879][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 824.112620][ T31] rfkill_set_block+0x1cf/0x440 [ 824.117720][ T31] rfkill_sync_work+0x114/0x200 [ 824.122587][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 824.128382][ T31] process_scheduled_works+0xae1/0x17b0 [ 824.133962][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 824.140231][ T31] worker_thread+0x8a0/0xda0 [ 824.144866][ T31] kthread+0x70e/0x8a0 [ 824.149017][ T31] ? __pfx_worker_thread+0x10/0x10 [ 824.154141][ T31] ? __pfx_kthread+0x10/0x10 [ 824.158987][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 824.164190][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.169477][ T31] ? __pfx_kthread+0x10/0x10 [ 824.174083][ T31] ret_from_fork+0x439/0x7d0 [ 824.185911][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 824.191056][ T31] ? __switch_to_asm+0x39/0x70 [ 824.231509][ T31] ? __switch_to_asm+0x33/0x70 [ 824.244495][ T31] ? __pfx_kthread+0x10/0x10 [ 824.249166][ T31] ret_from_fork_asm+0x1a/0x30 [ 824.253930][ T31] [ 824.257133][ T31] INFO: task kworker/0:33:8937 blocked for more than 143 seconds. [ 824.264934][ T31] Not tainted syzkaller #0 [ 824.270578][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 824.279266][ T31] task:kworker/0:33 state:D stack:24424 pid:8937 tgid:8937 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 824.291275][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 824.298120][ T31] Call Trace: [ 824.301392][ T31] [ 824.304306][ T31] __schedule+0x1798/0x4cc0 [ 824.308841][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 824.314202][ T31] ? __pfx___schedule+0x10/0x10 [ 824.319153][ T31] ? schedule+0x91/0x360 [ 824.323376][ T31] schedule+0x165/0x360 [ 824.327683][ T31] schedule_preempt_disabled+0x13/0x30 [ 824.333138][ T31] __mutex_lock+0x7e6/0x1350 [ 824.338197][ T31] ? __mutex_lock+0x5bb/0x1350 [ 824.342964][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 824.349273][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 824.354286][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 824.360026][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 824.365775][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 824.371824][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 824.377582][ T31] process_scheduled_works+0xae1/0x17b0 [ 824.383184][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 824.389241][ T31] worker_thread+0x8a0/0xda0 [ 824.393837][ T31] kthread+0x70e/0x8a0 [ 824.397918][ T31] ? __pfx_worker_thread+0x10/0x10 [ 824.403010][ T31] ? __pfx_kthread+0x10/0x10 [ 824.407614][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 824.412792][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.417989][ T31] ? __pfx_kthread+0x10/0x10 [ 824.423000][ T31] ret_from_fork+0x439/0x7d0 [ 824.427611][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 824.432708][ T31] ? __switch_to_asm+0x39/0x70 [ 824.437479][ T31] ? __switch_to_asm+0x33/0x70 [ 824.442225][ T31] ? __pfx_kthread+0x10/0x10 [ 824.446845][ T31] ret_from_fork_asm+0x1a/0x30 [ 824.451620][ T31] [ 824.454697][ T31] INFO: task syz.3.5184:25989 blocked for more than 143 seconds. [ 824.462547][ T31] Not tainted syzkaller #0 [ 824.467498][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 824.476160][ T31] task:syz.3.5184 state:D stack:25096 pid:25989 tgid:25989 ppid:18474 task_flags:0x400040 flags:0x00004004 [ 824.488117][ T31] Call Trace: [ 824.491383][ T31] [ 824.494300][ T31] __schedule+0x1798/0x4cc0 [ 824.498881][ T31] ? validate_chain+0x897/0x2140 [ 824.503854][ T31] ? __lock_acquire+0xab9/0xd20 [ 824.508729][ T31] ? __pfx___schedule+0x10/0x10 [ 824.513574][ T31] ? schedule+0x91/0x360 [ 824.517905][ T31] schedule+0x165/0x360 [ 824.522060][ T31] schedule_timeout+0x9a/0x270 [ 824.526849][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 824.532213][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 824.537479][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.542683][ T31] ? wait_for_completion+0x267/0x5d0 [ 824.547996][ T31] wait_for_completion+0x2bf/0x5d0 [ 824.553111][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 824.558773][ T31] ? __flush_work+0xd2/0xbc0 [ 824.563347][ T31] ? __flush_work+0xd2/0xbc0 [ 824.568006][ T31] __flush_work+0x9b9/0xbc0 [ 824.572492][ T31] ? __flush_work+0xd2/0xbc0 [ 824.577102][ T31] ? __pfx___flush_work+0x10/0x10 [ 824.582120][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 824.587426][ T31] ? __pfx___cancel_work+0x10/0x10 [ 824.592517][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 824.598185][ T31] __cancel_work_sync+0xbe/0x110 [ 824.603108][ T31] rfkill_unregister+0x92/0x220 [ 824.607987][ T31] nfc_unregister_device+0x96/0x2a0 [ 824.613188][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 824.619057][ T31] virtual_ncidev_close+0x56/0x90 [ 824.624090][ T31] __fput+0x44c/0xa70 [ 824.628134][ T31] task_work_run+0x1d1/0x260 [ 824.632734][ T31] ? __pfx_task_work_run+0x10/0x10 [ 824.637869][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 824.643322][ T31] exit_to_user_mode_loop+0xec/0x110 [ 824.648809][ T31] do_syscall_64+0x2bd/0x3b0 [ 824.653497][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.658718][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.664785][ T31] ? clear_bhb_loop+0x60/0xb0 [ 824.669504][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.675640][ T31] RIP: 0033:0x7fc9a3d8ec29 [ 824.680067][ T31] RSP: 002b:00007fff31fcd668 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 824.688549][ T31] RAX: 0000000000000000 RBX: 00007fc9a3fd7da0 RCX: 00007fc9a3d8ec29 [ 824.696540][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 824.704504][ T31] RBP: 00007fc9a3fd7da0 R08: 0000000000000000 R09: 0000000c31fcd95f [ 824.713041][ T31] R10: 000000000003fd6c R11: 0000000000000246 R12: 00000000000a55ba [ 824.721229][ T31] R13: 00007fc9a3fd5fa0 R14: ffffffffffffffff R15: 0000000000000003 [ 824.729246][ T31] [ 824.732269][ T31] INFO: task syz.4.5210:26108 blocked for more than 144 seconds. [ 824.745911][ T31] Not tainted syzkaller #0 [ 824.750866][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 824.759643][ T31] task:syz.4.5210 state:D stack:23400 pid:26108 tgid:26107 ppid:18008 task_flags:0x400140 flags:0x00004004 [ 824.771821][ T31] Call Trace: [ 824.775111][ T31] [ 824.778350][ T31] __schedule+0x1798/0x4cc0 [ 824.782888][ T31] ? __lock_acquire+0xab9/0xd20 [ 824.788022][ T31] ? __lock_acquire+0xab9/0xd20 [ 824.792882][ T31] ? __pfx___schedule+0x10/0x10 [ 824.797770][ T31] ? schedule+0x91/0x360 [ 824.801995][ T31] schedule+0x165/0x360 [ 824.806236][ T31] schedule_preempt_disabled+0x13/0x30 [ 824.811706][ T31] __mutex_lock+0x7e6/0x1350 [ 824.816460][ T31] ? __mutex_lock+0x5bb/0x1350 [ 824.821214][ T31] ? rfkill_register+0x37/0x8e0 [ 824.826203][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 824.831236][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 824.836256][ T31] ? nl80211_common_reg_change_event+0x55d/0x6b0 [ 824.842605][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 824.847935][ T31] ? __queue_delayed_work+0x212/0x2d0 [ 824.853298][ T31] rfkill_register+0x37/0x8e0 [ 824.858228][ T31] wiphy_register+0x2231/0x2aa0 [ 824.863190][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 824.868701][ T31] ? ieee80211_init_rate_ctrl_alg+0x114/0x5f0 [ 824.874789][ T31] ieee80211_register_hw+0x3442/0x40a0 [ 824.880536][ T31] ? ieee80211_register_hw+0x13b1/0x40a0 [ 824.886253][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 824.892059][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 824.898442][ T31] ? __hrtimer_setup+0x187/0x210 [ 824.903387][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 824.909336][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 824.915071][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 824.921184][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 824.926731][ T31] ? __sock_sendmsg+0x21c/0x270 [ 824.931561][ T31] ? ____sys_sendmsg+0x505/0x830 [ 824.936691][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 824.941816][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 824.947600][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 824.953149][ T31] ? __nla_parse+0x40/0x60 [ 824.957592][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 824.963911][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 824.969525][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 824.975585][ T31] ? bpf_lsm_capable+0x9/0x20 [ 824.980271][ T31] ? security_capable+0x7e/0x2e0 [ 824.985198][ T31] genl_rcv_msg+0x60e/0x790 [ 824.989720][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 824.994740][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 825.000340][ T31] netlink_rcv_skb+0x208/0x470 [ 825.005087][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.009949][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.014958][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.020502][ T31] ? down_read+0x1ad/0x2e0 [ 825.024944][ T31] genl_rcv+0x28/0x40 [ 825.028942][ T31] netlink_unicast+0x82f/0x9e0 [ 825.033691][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 825.038979][ T31] ? netlink_sendmsg+0x642/0xb30 [ 825.043903][ T31] ? skb_put+0x11b/0x210 [ 825.048181][ T31] netlink_sendmsg+0x805/0xb30 [ 825.052953][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.058254][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 825.063179][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 825.068488][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.073849][ T31] __sock_sendmsg+0x21c/0x270 [ 825.078559][ T31] ____sys_sendmsg+0x505/0x830 [ 825.083311][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.088610][ T31] ? import_iovec+0x74/0xa0 [ 825.093187][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 825.097947][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.103197][ T31] ? __fget_files+0x2a/0x420 [ 825.107816][ T31] ? __fget_files+0x3a0/0x420 [ 825.112512][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 825.117494][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 825.122956][ T31] ? rcu_is_watching+0x15/0xb0 [ 825.127891][ T31] ? do_syscall_64+0xbe/0x3b0 [ 825.132642][ T31] do_syscall_64+0xfa/0x3b0 [ 825.137151][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 825.142327][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.148490][ T31] ? clear_bhb_loop+0x60/0xb0 [ 825.153155][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.159058][ T31] RIP: 0033:0x7f6c2c38ec29 [ 825.163454][ T31] RSP: 002b:00007f6c2a5ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.171863][ T31] RAX: ffffffffffffffda RBX: 00007f6c2c5d5fa0 RCX: 00007f6c2c38ec29 [ 825.179925][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 825.187945][ T31] RBP: 00007f6c2c411e41 R08: 0000000000000000 R09: 0000000000000000 [ 825.195937][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.203928][ T31] R13: 00007f6c2c5d6038 R14: 00007f6c2c5d5fa0 R15: 00007ffd9d48f4c8 [ 825.211948][ T31] [ 825.214972][ T31] INFO: task syz.4.5210:26111 blocked for more than 144 seconds. [ 825.222838][ T31] Not tainted syzkaller #0 [ 825.227938][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 825.236694][ T31] task:syz.4.5210 state:D stack:26024 pid:26111 tgid:26107 ppid:18008 task_flags:0x400140 flags:0x00004004 [ 825.248730][ T31] Call Trace: [ 825.252028][ T31] [ 825.254953][ T31] __schedule+0x1798/0x4cc0 [ 825.259556][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.264402][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.269395][ T31] ? __pfx___schedule+0x10/0x10 [ 825.274261][ T31] ? schedule+0x91/0x360 [ 825.278584][ T31] schedule+0x165/0x360 [ 825.282750][ T31] schedule_preempt_disabled+0x13/0x30 [ 825.288225][ T31] __mutex_lock+0x7e6/0x1350 [ 825.292809][ T31] ? __mutex_lock+0x5bb/0x1350 [ 825.297608][ T31] ? genl_rcv_msg+0x10d/0x790 [ 825.302286][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 825.307361][ T31] ? stack_trace_save+0x9c/0xe0 [ 825.312205][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 825.317588][ T31] ? radix_tree_lookup+0x240/0x290 [ 825.322711][ T31] genl_rcv_msg+0x10d/0x790 [ 825.327235][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.332159][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.337278][ T31] netlink_rcv_skb+0x208/0x470 [ 825.342042][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.346929][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.351950][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.357288][ T31] ? down_read+0x1ad/0x2e0 [ 825.361698][ T31] genl_rcv+0x28/0x40 [ 825.365694][ T31] netlink_unicast+0x82f/0x9e0 [ 825.370487][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 825.375813][ T31] ? netlink_sendmsg+0x642/0xb30 [ 825.380746][ T31] ? skb_put+0x11b/0x210 [ 825.385003][ T31] netlink_sendmsg+0x805/0xb30 [ 825.389819][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.395093][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 825.400053][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 825.405321][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.410631][ T31] __sock_sendmsg+0x21c/0x270 [ 825.415291][ T31] __sys_sendto+0x3bd/0x520 [ 825.419830][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 825.424868][ T31] ? count_memcg_event_mm+0x21/0x260 [ 825.430175][ T31] ? exc_page_fault+0x76/0xf0 [ 825.434843][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 825.440163][ T31] __x64_sys_sendto+0xde/0x100 [ 825.444916][ T31] do_syscall_64+0xfa/0x3b0 [ 825.449418][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 825.454600][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.460678][ T31] ? clear_bhb_loop+0x60/0xb0 [ 825.465338][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.471297][ T31] RIP: 0033:0x7f6c2c390abc [ 825.475739][ T31] RSP: 002b:00007f6c2a5cbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 825.484149][ T31] RAX: ffffffffffffffda RBX: 00007f6c2a5cbfc0 RCX: 00007f6c2c390abc [ 825.492153][ T31] RDX: 0000000000000020 RSI: 00007f6c2a5cc010 RDI: 0000000000000007 [ 825.500233][ T31] RBP: 0000000000000000 R08: 00007f6c2a5cbf14 R09: 000000000000000c [ 825.508210][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 825.516298][ T31] R13: 00007f6c2a5cbf68 R14: 00007f6c2a5cc010 R15: 0000000000000000 [ 825.524273][ T31] [ 825.527360][ T31] INFO: task syz.2.5211:26110 blocked for more than 144 seconds. [ 825.535109][ T31] Not tainted syzkaller #0 [ 825.540081][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 825.548767][ T31] task:syz.2.5211 state:D stack:25864 pid:26110 tgid:26109 ppid:16856 task_flags:0x400140 flags:0x00004004 [ 825.560693][ T31] Call Trace: [ 825.563978][ T31] [ 825.566939][ T31] __schedule+0x1798/0x4cc0 [ 825.571432][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.576410][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.581269][ T31] ? __pfx___schedule+0x10/0x10 [ 825.586186][ T31] ? schedule+0x91/0x360 [ 825.590499][ T31] schedule+0x165/0x360 [ 825.594635][ T31] schedule_preempt_disabled+0x13/0x30 [ 825.600140][ T31] __mutex_lock+0x7e6/0x1350 [ 825.605065][ T31] ? __mutex_lock+0x5bb/0x1350 [ 825.609844][ T31] ? genl_rcv_msg+0x10d/0x790 [ 825.614510][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 825.619573][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 825.624678][ T31] ? radix_tree_lookup+0x240/0x290 [ 825.629801][ T31] genl_rcv_msg+0x10d/0x790 [ 825.634294][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.639329][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 825.644333][ T31] ? __asan_memcpy+0x40/0x70 [ 825.648984][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 825.654381][ T31] netlink_rcv_skb+0x208/0x470 [ 825.659360][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.664217][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.669249][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.674621][ T31] ? down_read+0x1ad/0x2e0 [ 825.679073][ T31] genl_rcv+0x28/0x40 [ 825.683039][ T31] netlink_unicast+0x82f/0x9e0 [ 825.687875][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 825.693144][ T31] ? netlink_sendmsg+0x642/0xb30 [ 825.698106][ T31] ? skb_put+0x11b/0x210 [ 825.702337][ T31] netlink_sendmsg+0x805/0xb30 [ 825.707122][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.712397][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 825.717352][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 825.722618][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.727913][ T31] __sock_sendmsg+0x21c/0x270 [ 825.732575][ T31] __sys_sendto+0x3bd/0x520 [ 825.737146][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 825.742184][ T31] ? count_memcg_event_mm+0x21/0x260 [ 825.747478][ T31] ? exc_page_fault+0x76/0xf0 [ 825.752138][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 825.757463][ T31] __x64_sys_sendto+0xde/0x100 [ 825.762216][ T31] do_syscall_64+0xfa/0x3b0 [ 825.766761][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 825.771961][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.778048][ T31] ? clear_bhb_loop+0x60/0xb0 [ 825.782714][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.788621][ T31] RIP: 0033:0x7fab33590abc [ 825.793016][ T31] RSP: 002b:00007fab344caec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 825.801501][ T31] RAX: ffffffffffffffda RBX: 00007fab344cafc0 RCX: 00007fab33590abc [ 825.809482][ T31] RDX: 0000000000000020 RSI: 00007fab344cb010 RDI: 0000000000000009 [ 825.819003][ T31] RBP: 0000000000000000 R08: 00007fab344caf14 R09: 000000000000000c [ 825.827034][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 825.834998][ T31] R13: 00007fab344caf68 R14: 00007fab344cb010 R15: 0000000000000000 [ 825.842997][ T31] [ 825.846057][ T31] INFO: task syz.1.5212:26115 blocked for more than 145 seconds. [ 825.853799][ T31] Not tainted syzkaller #0 [ 825.859414][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 825.868094][ T31] task:syz.1.5212 state:D stack:24360 pid:26115 tgid:26114 ppid:17325 task_flags:0x400140 flags:0x00004004 [ 825.880019][ T31] Call Trace: [ 825.883282][ T31] [ 825.886232][ T31] __schedule+0x1798/0x4cc0 [ 825.890728][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.895562][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.900636][ T31] ? __pfx___schedule+0x10/0x10 [ 825.905489][ T31] ? schedule+0x91/0x360 [ 825.909794][ T31] schedule+0x165/0x360 [ 825.913934][ T31] schedule_preempt_disabled+0x13/0x30 [ 825.919404][ T31] __mutex_lock+0x7e6/0x1350 [ 825.923998][ T31] ? __mutex_lock+0x5bb/0x1350 [ 825.928769][ T31] ? genl_rcv_msg+0x10d/0x790 [ 825.933432][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 825.938506][ T31] ? stack_trace_save+0x9c/0xe0 [ 825.943361][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 825.948754][ T31] ? radix_tree_lookup+0x240/0x290 [ 825.953857][ T31] genl_rcv_msg+0x10d/0x790 [ 825.958392][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.963228][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.968265][ T31] netlink_rcv_skb+0x208/0x470 [ 825.973028][ T31] ? __lock_acquire+0xab9/0xd20 [ 825.978085][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.983124][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.988457][ T31] ? down_read+0x1ad/0x2e0 [ 825.992860][ T31] genl_rcv+0x28/0x40 [ 825.996862][ T31] netlink_unicast+0x82f/0x9e0 [ 826.001618][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 826.006927][ T31] ? netlink_sendmsg+0x642/0xb30 [ 826.011849][ T31] ? skb_put+0x11b/0x210 [ 826.016175][ T31] netlink_sendmsg+0x805/0xb30 [ 826.020927][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.026225][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 826.031143][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 826.036454][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.041722][ T31] __sock_sendmsg+0x21c/0x270 [ 826.046404][ T31] __sys_sendto+0x3bd/0x520 [ 826.050899][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 826.056163][ T31] ? count_memcg_event_mm+0x21/0x260 [ 826.061458][ T31] ? exc_page_fault+0x76/0xf0 [ 826.066162][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 826.071438][ T31] __x64_sys_sendto+0xde/0x100 [ 826.076219][ T31] do_syscall_64+0xfa/0x3b0 [ 826.080702][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.085911][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.091980][ T31] ? clear_bhb_loop+0x60/0xb0 [ 826.096732][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.102642][ T31] RIP: 0033:0x7fb4dad90abc [ 826.107091][ T31] RSP: 002b:00007fb4dbc95ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 826.115514][ T31] RAX: ffffffffffffffda RBX: 00007fb4dbc95fc0 RCX: 00007fb4dad90abc [ 826.123530][ T31] RDX: 0000000000000020 RSI: 00007fb4dbc96010 RDI: 0000000000000008 [ 826.131607][ T31] RBP: 0000000000000000 R08: 00007fb4dbc95f14 R09: 000000000000000c [ 826.139612][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 826.147627][ T31] R13: 00007fb4dbc95f68 R14: 00007fb4dbc96010 R15: 0000000000000000 [ 826.155602][ T31] [ 826.158654][ T31] INFO: task syz.0.5213:26120 blocked for more than 145 seconds. [ 826.166416][ T31] Not tainted syzkaller #0 [ 826.171343][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 826.180022][ T31] task:syz.0.5213 state:D stack:27720 pid:26120 tgid:26119 ppid:17609 task_flags:0x400140 flags:0x00004004 [ 826.191978][ T31] Call Trace: [ 826.195252][ T31] [ 826.198204][ T31] __schedule+0x1798/0x4cc0 [ 826.202710][ T31] ? __lock_acquire+0xab9/0xd20 [ 826.207598][ T31] ? __lock_acquire+0xab9/0xd20 [ 826.212442][ T31] ? __pfx___schedule+0x10/0x10 [ 826.217359][ T31] ? schedule+0x91/0x360 [ 826.221593][ T31] schedule+0x165/0x360 [ 826.225786][ T31] schedule_preempt_disabled+0x13/0x30 [ 826.231376][ T31] __mutex_lock+0x7e6/0x1350 [ 826.236112][ T31] ? __mutex_lock+0x5bb/0x1350 [ 826.240904][ T31] ? genl_rcv_msg+0x10d/0x790 [ 826.245577][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 826.250643][ T31] ? stack_trace_save+0x9c/0xe0 [ 826.255483][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 826.260870][ T31] ? radix_tree_lookup+0x240/0x290 [ 826.266002][ T31] genl_rcv_msg+0x10d/0x790 [ 826.270642][ T31] ? __lock_acquire+0xab9/0xd20 [ 826.275488][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 826.280552][ T31] netlink_rcv_skb+0x208/0x470 [ 826.285317][ T31] ? __lock_acquire+0xab9/0xd20 [ 826.290223][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 826.295262][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 826.300584][ T31] ? down_read+0x1ad/0x2e0 [ 826.304994][ T31] genl_rcv+0x28/0x40 [ 826.309005][ T31] netlink_unicast+0x82f/0x9e0 [ 826.313783][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 826.319122][ T31] ? netlink_sendmsg+0x642/0xb30 [ 826.324047][ T31] ? skb_put+0x11b/0x210 [ 826.328314][ T31] netlink_sendmsg+0x805/0xb30 [ 826.333115][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.338470][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 826.343409][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 826.348791][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.354081][ T31] __sock_sendmsg+0x21c/0x270 [ 826.358779][ T31] __sys_sendto+0x3bd/0x520 [ 826.363267][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 826.368328][ T31] ? count_memcg_event_mm+0x21/0x260 [ 826.373607][ T31] ? exc_page_fault+0x76/0xf0 [ 826.378319][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 826.383598][ T31] __x64_sys_sendto+0xde/0x100 [ 826.388386][ T31] do_syscall_64+0xfa/0x3b0 [ 826.392884][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 826.398144][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.404211][ T31] ? clear_bhb_loop+0x60/0xb0 [ 826.408904][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.414777][ T31] RIP: 0033:0x7f3176190abc [ 826.419203][ T31] RSP: 002b:00007f3176fb0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 826.427667][ T31] RAX: ffffffffffffffda RBX: 00007f3176fb0fc0 RCX: 00007f3176190abc [ 826.435638][ T31] RDX: 0000000000000024 RSI: 00007f3176fb1010 RDI: 0000000000000007 [ 826.443633][ T31] RBP: 0000000000000000 R08: 00007f3176fb0f14 R09: 000000000000000c [ 826.451633][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 826.459703][ T31] R13: 00007f3176fb0f68 R14: 00007f3176fb1010 R15: 0000000000000000 [ 826.467692][ T31] [ 826.470732][ T31] [ 826.470732][ T31] Showing all locks held in the system: [ 826.478654][ T31] 1 lock held by khungtaskd/31: [ 826.483481][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 826.493367][ T31] 2 locks held by getty/5626: [ 826.498055][ T31] #0: ffff8880344880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 826.507842][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 826.517954][ T31] 4 locks held by kworker/0:28/8931: [ 826.523236][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 826.534203][ T31] #1: ffffc9000c1afbc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 826.546793][ T31] #2: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 826.556876][ T31] #3: ffff8880548fb100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 826.566669][ T31] 3 locks held by kworker/0:33/8937: [ 826.571952][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 826.582935][ T31] #1: ffffc9000c0cfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 826.596516][ T31] #2: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 826.607856][ T31] 4 locks held by kworker/u8:17/21506: [ 826.613321][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 826.624226][ T31] #1: ffffc9000d9cfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 826.634767][ T31] #2: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 826.644184][ T31] #3: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 826.654314][ T31] 1 lock held by syz.3.5184/25989: [ 826.659446][ T31] #0: ffff8880548fb100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 826.669235][ T31] 3 locks held by syz.4.5210/26108: [ 826.674409][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.682687][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 826.691705][ T31] #2: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 826.701798][ T31] 2 locks held by syz.4.5210/26111: [ 826.707010][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.715175][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 826.724151][ T31] 2 locks held by syz.2.5211/26110: [ 826.729356][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.737546][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 826.746519][ T31] 2 locks held by syz.1.5212/26115: [ 826.751692][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.759921][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 826.768892][ T31] 2 locks held by syz.0.5213/26120: [ 826.774069][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.782278][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 826.791316][ T31] 2 locks held by syz-executor/26123: [ 826.796712][ T31] #0: ffff88805983c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 826.806778][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 826.816806][ T31] 2 locks held by syz-executor/26128: [ 826.822153][ T31] #0: ffff888048079918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 826.832163][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 826.842173][ T31] 2 locks held by syz-executor/26129: [ 826.847565][ T31] #0: ffff88806216c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 826.858107][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 826.868047][ T31] 2 locks held by syz-executor/26130: [ 826.873394][ T31] #0: ffff888052812918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 826.883500][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 826.893457][ T31] 2 locks held by syz-executor/26131: [ 826.898901][ T31] #0: ffff888052813918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 826.908917][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 826.918848][ T31] 2 locks held by syz-executor/26133: [ 826.924195][ T31] #0: ffff888024c50118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 826.934198][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 826.944441][ T31] 2 locks held by syz-executor/26138: [ 826.949852][ T31] #0: ffff8880259d8118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 826.959880][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 826.969925][ T31] 2 locks held by syz-executor/26139: [ 826.975277][ T31] #0: ffff888034717118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 826.985292][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 826.995238][ T31] 2 locks held by syz-executor/26140: [ 827.000636][ T31] #0: ffff888068d11918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 827.010704][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 827.020762][ T31] 2 locks held by syz-executor/26141: [ 827.026155][ T31] #0: ffff888068d10918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 827.036179][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 827.046101][ T31] 2 locks held by syz-executor/26143: [ 827.051466][ T31] #0: ffff888031620918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 827.061522][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 827.071449][ T31] 2 locks held by syz-executor/26148: [ 827.076837][ T31] #0: ffff888079316918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 827.086852][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 827.097009][ T31] 2 locks held by syz-executor/26149: [ 827.102383][ T31] #0: ffff88807ce16118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 827.112417][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 827.122453][ T31] 2 locks held by syz-executor/26150: [ 827.127850][ T31] #0: ffff888079315918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 827.137901][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 827.147854][ T31] 2 locks held by syz-executor/26151: [ 827.153210][ T31] #0: ffff8880294e0918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 827.163285][ T31] #1: ffffffff8f8130c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 827.173223][ T31] [ 827.175541][ T31] ============================================= [ 827.175541][ T31] [ 827.183999][ T31] NMI backtrace for cpu 0 [ 827.184014][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 827.184025][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 827.184031][ T31] Call Trace: [ 827.184036][ T31] [ 827.184043][ T31] dump_stack_lvl+0x189/0x250 [ 827.184061][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.184073][ T31] ? __pfx__printk+0x10/0x10 [ 827.184093][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 827.184110][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 827.184125][ T31] ? __pfx__printk+0x10/0x10 [ 827.184141][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 827.184157][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 827.184173][ T31] watchdog+0xf93/0xfe0 [ 827.184190][ T31] ? watchdog+0x1de/0xfe0 [ 827.184207][ T31] kthread+0x70e/0x8a0 [ 827.184221][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.184233][ T31] ? __pfx_kthread+0x10/0x10 [ 827.184246][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.184256][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.184265][ T31] ? __pfx_kthread+0x10/0x10 [ 827.184278][ T31] ret_from_fork+0x439/0x7d0 [ 827.184289][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 827.184302][ T31] ? __switch_to_asm+0x39/0x70 [ 827.184314][ T31] ? __switch_to_asm+0x33/0x70 [ 827.184326][ T31] ? __pfx_kthread+0x10/0x10 [ 827.184338][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.184358][ T31] [ 827.184362][ T31] Sending NMI from CPU 0 to CPUs 1: [ 827.329168][ C1] NMI backtrace for cpu 1 [ 827.329185][ C1] CPU: 1 UID: 0 PID: 25978 Comm: kworker/u8:61 Not tainted syzkaller #0 PREEMPT(full) [ 827.329203][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 827.329220][ C1] Workqueue: events_unbound toggle_allocation_gate [ 827.329245][ C1] RIP: 0010:rcu_is_watching+0x44/0xb0 [ 827.329263][ C1] Code: 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 10 1d be 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 4c cd 7c 00 <48> c7 c3 98 ff a1 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 [ 827.329278][ C1] RSP: 0018:ffffc9000391f548 EFLAGS: 00000246 [ 827.329291][ C1] RAX: 1ffffffff1b7c3a3 RBX: 0000000000000001 RCX: f82f6bed661b7200 [ 827.329304][ C1] RDX: 0000000000000000 RSI: ffffffff8be33ee0 RDI: ffffffff8be33ea0 [ 827.329315][ C1] RBP: ffffffff821000d9 R08: 0000000000000000 R09: 0000000000000000 [ 827.329326][ C1] R10: dffffc0000000000 R11: fffff94000010c39 R12: 0000000000000002 [ 827.329338][ C1] R13: ffffffff8e13a0e0 R14: ffffffff8dbe1d18 R15: dffffc0000000000 [ 827.329351][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 827.329364][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.329376][ C1] CR2: 00005605ff31e000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 827.329391][ C1] Call Trace: [ 827.329397][ C1] [ 827.329406][ C1] lock_acquire+0x5f/0x360 [ 827.329428][ C1] ? flush_tlb_mm_range+0xbfb/0x12d0 [ 827.329449][ C1] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 827.329472][ C1] ___pte_offset_map+0x45/0x250 [ 827.329489][ C1] ? ___pte_offset_map+0x29/0x250 [ 827.329506][ C1] ? __pte_offset_map_lock+0x2d/0x210 [ 827.329523][ C1] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 827.329544][ C1] __pte_offset_map_lock+0x46/0x210 [ 827.329563][ C1] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 827.329584][ C1] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 827.329604][ C1] __text_poke+0x2e6/0xa10 [ 827.329627][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 827.329646][ C1] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 827.329666][ C1] ? __pfx___text_poke+0x10/0x10 [ 827.329683][ C1] ? rcu_is_watching+0x15/0xb0 [ 827.329698][ C1] ? trace_contention_end+0x39/0x120 [ 827.329722][ C1] smp_text_poke_batch_finish+0xd0f/0x1130 [ 827.329747][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 827.329769][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 827.329796][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 827.329816][ C1] static_key_enable_cpuslocked+0x128/0x250 [ 827.329838][ C1] static_key_enable+0x1a/0x20 [ 827.329869][ C1] toggle_allocation_gate+0xad/0x240 [ 827.329888][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 827.329908][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 827.329928][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 827.329942][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 827.329958][ C1] process_scheduled_works+0xae1/0x17b0 [ 827.329988][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 827.330012][ C1] worker_thread+0x8a0/0xda0 [ 827.330041][ C1] kthread+0x70e/0x8a0 [ 827.330060][ C1] ? __pfx_worker_thread+0x10/0x10 [ 827.330075][ C1] ? __pfx_kthread+0x10/0x10 [ 827.330093][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.330107][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.330123][ C1] ? __pfx_kthread+0x10/0x10 [ 827.330140][ C1] ret_from_fork+0x439/0x7d0 [ 827.330157][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 827.330176][ C1] ? __switch_to_asm+0x39/0x70 [ 827.330194][ C1] ? __switch_to_asm+0x33/0x70 [ 827.330216][ C1] ? __pfx_kthread+0x10/0x10 [ 827.330233][ C1] ret_from_fork_asm+0x1a/0x30 [ 827.330260][ C1] [ 827.331262][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 827.692338][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 827.701435][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 827.711474][ T31] Call Trace: [ 827.714746][ T31] [ 827.717666][ T31] dump_stack_lvl+0x99/0x250 [ 827.722248][ T31] ? __asan_memcpy+0x40/0x70 [ 827.726901][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.732096][ T31] ? __pfx__printk+0x10/0x10 [ 827.736683][ T31] vpanic+0x281/0x750 [ 827.740654][ T31] ? __pfx_vpanic+0x10/0x10 [ 827.745140][ T31] ? preempt_schedule+0xae/0xc0 [ 827.749975][ T31] ? preempt_schedule_common+0x83/0xd0 [ 827.755421][ T31] panic+0xb9/0xc0 [ 827.759127][ T31] ? __pfx_panic+0x10/0x10 [ 827.763528][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 827.768892][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 827.775045][ T31] watchdog+0xfd2/0xfe0 [ 827.779207][ T31] ? watchdog+0x1de/0xfe0 [ 827.783533][ T31] kthread+0x70e/0x8a0 [ 827.787596][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.792259][ T31] ? __pfx_kthread+0x10/0x10 [ 827.796862][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.802044][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.807227][ T31] ? __pfx_kthread+0x10/0x10 [ 827.811803][ T31] ret_from_fork+0x439/0x7d0 [ 827.816379][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 827.821481][ T31] ? __switch_to_asm+0x39/0x70 [ 827.826232][ T31] ? __switch_to_asm+0x33/0x70 [ 827.830979][ T31] ? __pfx_kthread+0x10/0x10 [ 827.835555][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.840321][ T31] [ 827.843585][ T31] Kernel Offset: disabled [ 827.847898][ T31] Rebooting in 86400 seconds..