last executing test programs: 31.461947753s ago: executing program 1 (id=3098): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xd, 0x47, 0x0, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x20000000) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1}, 0xf0) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7fff, 0xfffffffffffffffc, 0x0, 0x8, 0x9}, 0x0, &(0x7f00000026c0)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400000, 0x2}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) socket$packet(0x11, 0x0, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff8}, [@generic={0x91, 0x1, 0x1, 0x8a}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r5, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4840}, 0x40) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0xd, r3, 0x8}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xac}]}}]}, 0x3c}}, 0x0) 26.114165784s ago: executing program 4 (id=3144): r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070280000f00", 0x33a) (async, rerun: 32) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) (rerun: 32) 25.882705467s ago: executing program 4 (id=3146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0xfffffffe, 0x100, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x627}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000024601030000000000f4ffffff000000007300000014000780080008400000002005001400050000000500050002000000050001000600000002007600686173683a6970"], 0x58}}, 0x0) r2 = accept4(r0, &(0x7f0000000280)=@phonet, &(0x7f0000000080)=0x80, 0x40800) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "9447ce9ed1e95867", "e0cca9744fe9cbeeb132c86e46327f46058a02fcc84a75efd9a22de9e05885db", "88e7d962", "14230a312e34da89"}, 0x38) sendfile(r0, r1, 0x0, 0xe) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1a030}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200)=0x10001, 0x12) sendfile(r5, r4, 0x0, 0xf03a0005) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)={0x40, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1c, 0x2, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x3}]}, 0x14}], 0x1}, 0x0) write$cgroup_type(r8, &(0x7f00000000c0), 0x9) sendfile(r8, r7, 0x0, 0x10000) 25.860722322s ago: executing program 2 (id=3147): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x25, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000680)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x5, 0x400, 0x0, 0x2, 0xfffffffd}}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r6, 0x1) (async) shutdown(r6, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0xf00) (async) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0xf00) recvmmsg(r6, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000142, 0x0) socket$isdn(0x22, 0x2, 0x21) close(0x3) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000240)) (async) ioctl$SIOCGSTAMP(r6, 0x8906, &(0x7f0000000240)) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xffe0, 0x7fff}, {0xc, 0x1}, {0xffe4, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x200}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x3c}}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x78, r3, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x55ebfcb85a78e904}, 0x4004) 25.31794536s ago: executing program 2 (id=3151): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(nhpoly1305-sse2)\x00'}, 0x58) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1f, @remote}, 0x10) 24.73070303s ago: executing program 4 (id=3152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r2, 0x0, 0x0, 0xee) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000180009006cbd7000000000001c140002"], 0x30}}, 0x4000000) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) listen(r4, 0x898c) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x32, &(0x7f0000000240)=[{0x2000, 0x6, 0xaa, 0xb6c}, {0xf, 0x81, 0xc0, 0x3}, {0x40, 0xed, 0x4, 0x1}, {0x1ff, 0x2, 0xff, 0x1}, {0x410, 0x1c, 0xfd, 0x9}, {0x0, 0x1, 0xd, 0x6}, {0x2, 0x7f, 0x1, 0x7}, {0x6, 0x4, 0x0, 0x4}]}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) pipe(&(0x7f0000000500)) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000400000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10000}, 0x8080) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 24.506026384s ago: executing program 2 (id=3153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) syz_emit_ethernet(0x5a, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000240600fe8000000000000000000000000000bbfe8000000000000000000000000000aa08000000000000000703801a8f00000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000100000003"], 0x0) unshare(0x22020400) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, 'syz1\x00', @bcast, 0x5, 0x6, [@null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000000c0)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff050000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bind$alg(r3, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000f4e43f6642531e0800450000200000e00000119078000000000000000000004e20000c907861100000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000006c0)={0x0, @in={{0x2, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x9, 0x1, 0x9, 0x626, 0x8000, 0x8, 0x5, 0x6, 0x9, 0x81, 0x3, 0x9, 0x12, 0x6, 0xfffffffffffffff9]}, &(0x7f0000000340)=0x100) syz_emit_ethernet(0x2e, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaa304096e9c0efb682b1bfcff9dcf2067eaaaa0000000000000800450000200000020210119078dfc576b1", @ANYBLOB="a14fd6a0b99fc43285ec3708325eefe25350e6ad553aa2d8397944c677a7ac720f79a6ee797183ac3393dfb99d9f76f84db0ed9669c5309d370571b6ff18a5c7225bc3f696448db4676df5941b55d2e24dd2ae061ed6894984efd047a2236045bf77a5bd9f2cb7bf4d5b8d6d8daf5e710deeecd510f7fe39e5eb9197bd061b8b7da0afc67a91cbbebb09c5cfd0384fdbef8f64d3727173e4985294b6054207f9439bf083", @ANYRESHEX=r0, @ANYRES64=r4, @ANYRESDEC=r2], 0x0) r8 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@gettfilter={0x5c, 0x2e, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x6}, {0x2, 0x8}, {0xc, 0xfff1}}, [{0x8, 0xb, 0xfffffffd}, {0x8}, {0x8, 0xb, 0xfe6}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x165}, {0x8, 0xb, 0x3ff}]}, 0x5c}}, 0x0) 24.311775968s ago: executing program 4 (id=3154): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') (async) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080), 0x4) (async) unshare(0x6a040000) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYRES8=r0], 0x94}}, 0x0) 23.421304002s ago: executing program 2 (id=3156): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x6f) socket(0x1e, 0x805, 0x0) (async) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) sendto$packet(r4, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES16, @ANYBLOB='\x005\x00dummy0\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x4008850}, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 23.036198736s ago: executing program 2 (id=3159): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000056c4818153810b3843337f9600020601020000000000608ffe5fe1000005000500000000000900020073797a3000000000100003006269746d61703a706f72740014000780060005404e23000006000440c99f000005000100070200000500fc80d3f27be0697d65b64e3938"], 0x5c}}, 0x20040011) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYRESHEX=r1, @ANYRES16=r2], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x804) (async, rerun: 32) syz_emit_ethernet(0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000975f5167b8003a89200000aaaaaaaaa070300f220088fb"], 0x0) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x9) (rerun: 64) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000000ec0)=""/225, 0x0, 0xe1, 0x0, 0x5}, 0x28) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000007740)=[{{&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000980)="332e06f1a8d0a59fd4", 0x9}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000019c0)=[{&(0x7f00000008c0)="d677cb0d3d", 0x5}], 0x1}}], 0x2, 0x4050859) (async) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000280)=0x4) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={0x0}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000080)={r8}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="48000000100001040400"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000802800128008000100677265001c000280ff0010004e21000006000011004e230000"], 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="00006003aaaaaaaaaabbaaaaaaaaaa028100020008004a000034e22f6c00f5a2feeed14b2340010000032f907800001fe1e0000001440ce791ac1414bb00001f50440824500000a007a0"], 0x4a) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x1c}}, 0x800) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r11, 0x0) 22.669632803s ago: executing program 2 (id=3161): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r7, &(0x7f0000000100)=""/12, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000007110bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x2b, 0x1, 0x0) listen(r8, 0x0) accept4$nfc_llcp(r8, 0x0, 0x0, 0x0) r9 = socket(0x5, 0x1, 0x5) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xff7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10) r12 = socket$alg(0x26, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(r12, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) accept(r12, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 22.652015774s ago: executing program 0 (id=3162): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000ca8b9c0c732da71065ec9db04aa087c04d50247d0b45b48b766f4f64ffc3fad2a035c3e74dfa37e2919c6e5320b04a9cd05dc8761b6bd42834fb21fcc79870f5b31f61c1c5c89a900ddeca874582a84393bbde8ea534560de31f833a34bc4e0094b232aa6f2024895286444d5e157d22ade3f37fe11f8dfc6842b7f92b51d763fe573d1a5e9a2560935b2ceca8cc1a2565e9c70a973bc9735b41630a114fa11885fa089fe25b0167eec9b02376c5ef9d0a74ea549b68c85490434e7cfde14c84e51eec576363000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x19, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000010000000000000098110000378323082247a81de441d464714db59352fed759380f4ebd04103d70c6b1d98d4053b521cadb1a5714d756287b4d0000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09110000000000660901000000000006002020702500000000002020207b9af8ff00000000ad91000000000000370100ffffb702000008000000b70300000200000056000000060000002c95aaab6e6d6b8b897ac0ba8793000000000000b5030000000000008500000075fff800b700"/160], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x6a37, 0x7, 0xb, 0x20400, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x22, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80000000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf43}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9c92}}]}, &(0x7f00000001c0)='syzkaller\x00', 0xfc, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xb, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r3, r4, r5, 0xffffffffffffffff, r6, r7, r8], &(0x7f0000000740)=[{0x5, 0x1, 0x5, 0x6}, {0x0, 0x1, 0xd, 0x2}, {0x5, 0x2, 0x10, 0x5}, {0x4, 0x2, 0x2, 0x4}], 0x10, 0x3}, 0x94) socket$kcm(0x11, 0xa, 0x300) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x18) socket$kcm(0x2, 0xa, 0x73) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 22.246673252s ago: executing program 1 (id=3101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffe0, 0xfffffffffffffffc}]}, &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffe0, 0xfffffffffffffffc}]}, &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.178708596s ago: executing program 0 (id=3164): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="28040000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16=r3], &(0x7f0000000000)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x6c}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='neigh_create\x00'}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) unshare(0xc020400) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x30002022}) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0xb1, "f6fdc0d8cf065ec24a8b424e919e0d91e86dc47ff68aa5b2d564241bb0b3cb3fd5de7468951197ddbddb38c6b1e1046c926ed911604eba894a8d8498eb4a71daed057317e0223669a358ac7f46ad2f01c6b19011a1b0107a1842654e26461714dc45a4d2dc8b62a47be7bdf0e61ab15b0f7fa0d82da18e83fa65b83abdda1d49a03dfb5cf76f4572aa7215065871deef65bc673fcddf124b1e34f30819b5dbac125c55e1f7b877af72db9ae8e150def714"}, &(0x7f0000000080)=0xb9) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @empty}, 0x1c) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, 0x0, 0x20048800) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000000)=0xfffffdfb, 0x4) sendto$inet(r8, 0x0, 0xffef, 0x20048000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x26) recvmmsg(r8, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2040, 0x0) 22.163445441s ago: executing program 1 (id=3165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x64, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10000, 0x44}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, '\a\x00'}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9f7eaecd6a55d57e240b00139d9560ffff000000000000000000000400"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000000080), 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r4) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x2c, r5, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x480c0}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x10) unshare(0x60600) (async) unshare(0x60600) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3e}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3e}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000470000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)) (async) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r10, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r11}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r10, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r11}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r10, &(0x7f0000000600), &(0x7f0000000a40)=@udp=r11, 0x2}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) r12 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r12, 0x6a, 0x2, 0x0, &(0x7f0000000300)) 22.076526034s ago: executing program 0 (id=3166): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0x35}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0xfffffffffffffcfa, 0x2, "547d9ed0effe82c024750032ea49f09c72384049bcc87e42ca7e2c78d6a85178e447e32b5f4e4fabff6fb16a40901dc4221e42eb745b6332c476d0c3aefed8dc95af179570cf8cc43bc29eb93c6e78f5e1153d3d7c1542f77dc4b29877e2002685e850f2969cf2164fbf8db7e1713786899d2a8ab03ca5accb2e9b50e1fb7a4e3681b35f0f68461daa4f4e1583b9a02195dee35ae7c8bca085399157d5f30c2ec691c39267b28c0ce69f11f2db45ee16e2975a80664f687d01bd7444244a25bdb9ec5b0fa8b1afc0254ddbca2e22ca1b189502b74d7ec4665c23804df713183d428f50a0d64e31e110c707eb3fe69f43799200"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x401, 0xffff, 0x2, 0xc, 0xe, 0x24}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') unshare(0x6a040000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) close(0x4) 22.010691234s ago: executing program 4 (id=3167): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112bc000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0782010000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2ecc3841285ccfc0f1a424465c8136a49e90a848a35f2dd23dc3187c89859d5f96bf72"], 0x50}}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r5}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8000}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x800) 21.036441582s ago: executing program 1 (id=3170): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@updpolicy={0x13c, 0x13, 0x1, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x2b, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x4d6, 0x33}, 0xa, @in=@broadcast, 0x3501, 0x3, 0x3, 0x2, 0x4, 0x9, 0x9}, {{@in6=@mcast1, 0x4d3, 0x32}, 0x0, @in6=@mcast2, 0x3504, 0x4, 0x0, 0x6, 0x8320, 0x1, 0x8001}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) 20.886028876s ago: executing program 1 (id=3171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000008000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b01010000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa0, &(0x7f0000001a80)=""/160, 0x41000}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000a0000000000028000069880000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180000085000000ca0000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xc8, &(0x7f0000000440)=""/200, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) shutdown(r1, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000040)=0x9e, 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="041d6f3b1de4531490000000"], 0x8) 20.793415931s ago: executing program 1 (id=3172): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x6, 0x2) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0xffffffffffffffbb) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000002800), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000200000", @ANYRES32, @ANYBLOB="ffffffff00000000000000000000190500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6131, 0xffffffffffffffff, 0x0) r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x0) recvmmsg(r4, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/222, 0xde}, {&(0x7f0000000240)=""/165, 0xa5}], 0x2, &(0x7f0000000340)=""/14, 0xe}, 0x2}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000480)=""/85, 0x55}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000680)=""/31, 0x1f}, {&(0x7f00000006c0)=""/191, 0xbf}], 0x6, &(0x7f0000000b40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000000800)=@isdn, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/150, 0x96}, {&(0x7f0000000a00)=""/114, 0x72}], 0x2, &(0x7f0000000a80)=""/49, 0x31}, 0x400}, {{&(0x7f0000001b40)=@llc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/135, 0x87}], 0x1}, 0xffffffff}, {{&(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001d40)=""/82, 0x52}, {&(0x7f0000001dc0)=""/214, 0xd6}, {&(0x7f0000001ec0)=""/190, 0xbe}, {&(0x7f0000002a40)=""/159, 0x9f}], 0x4, &(0x7f0000002080)=""/221, 0xdd}, 0x3921}, {{&(0x7f0000002180)=@hci, 0x80, &(0x7f0000002540)=[{&(0x7f0000002200)=""/61, 0x3d}, {&(0x7f0000002240)=""/212, 0xd4}, {&(0x7f0000002340)=""/10, 0xa}, {&(0x7f0000002380)=""/192, 0xc0}, {&(0x7f0000002440)=""/201, 0xc9}], 0x5, &(0x7f00000025c0)=""/117, 0x75}, 0x81}], 0x6, 0x40010000, &(0x7f00000027c0)) unshare(0x22020400) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000028c0), 0xffffffffffffffff) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r9], 0x1c}}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002900)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000002a00)={&(0x7f0000002880), 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x44, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000002840)=0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f0000000600), &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) unshare(0x200) 20.558526487s ago: executing program 0 (id=3174): bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getnexthop={0xfffffffffffffe19, 0x6a, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x8044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r4 = epoll_create1(0x0) epoll_pwait(r4, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) unshare(0x40000080) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x84141, 0x0) epoll_create1(0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) write(r6, &(0x7f0000000000)="05000000010001", 0x7) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0xc0}}, 0x0) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000340)="07000000010000", 0x7) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x21, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x64af66bceeffae50, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) 20.0469053s ago: executing program 4 (id=3175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ffd7000008000340"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 16.303144566s ago: executing program 3 (id=3177): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r1, @ANYBLOB="06bb71aa735331c761dad330535650ed816c30369678906660ff893898c75d03ab614bce8e6d65712d42855237a5b33ea52da605aa33d7648e3f4b528fc8b57128b174262cc445e18a1ae64d9320bc4c0e0274df21c225dd23e65d6cf01090ce7dfeb5430b51cc14c5410879eeb957753916f5e8e33953b3487613d42b01"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r1, @ANYBLOB="06bb71aa735331c761dad330535650ed816c30369678906660ff893898c75d03ab614bce8e6d65712d42855237a5b33ea52da605aa33d7648e3f4b528fc8b57128b174262cc445e18a1ae64d9320bc4c0e0274df21c225dd23e65d6cf01090ce7dfeb5430b51cc14c5410879eeb957753916f5e8e33953b3487613d42b01"], 0x3c}}, 0x0) (async) 16.143489296s ago: executing program 3 (id=3178): mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'netdevsim0\x00', @broadcast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) r6 = socket(0x10, 0x80002, 0x2) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendto(r6, &(0x7f00000000c0)='\x00', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_DEFAULT_RATE={0x57, 0x6, 0x4}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x48}}, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 15.964093202s ago: executing program 3 (id=3179): r0 = socket(0x10, 0x803, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100)=0x5, 0x43) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x27}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 15.813731589s ago: executing program 3 (id=3180): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0", 0x3a}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15.736871879s ago: executing program 3 (id=3181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4844}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000ef00)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0xffc9, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x6, 0x7, 0x1}, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000001c0)=0x7, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) listen(r2, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="595d4feb976dd397a6709fef1d6043efd6f864f3000047650000000097080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb70300000800f9b4601d3d5fb70000b704000002ec00008500000082000000181100007f0e39", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500d6d0e608000000000000005509010000007f9a40e3a748d04e0000000000000000007727100c8b5d075e41c1a5c78a81be9e016a94bae7e5e569f7db0345891164795fe5", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.653652709s ago: executing program 0 (id=3182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x2}, 0x1) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="20a0218aa5", 0x5}, {&(0x7f0000000100)="3d682b1e2e948303206a1c7fc6c9386fa4dca836195f57d176245bbabff82f7a08733f793bdc7c8b30f7d0b744c745fcb2caeb0fe251fdd1de6a6423ac60931287c6e878d216f16a8c3579d231b3efbf9c72c113132bf88b9731f41a0273572305b510e94943a98c9dd18458696fa78fa7333c64762f1370d8910df46624bca10ed5", 0x82}, {&(0x7f0000000280)="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", 0xf79}], 0x3) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="0206630902000000020006ea09a1e8ff000000"], 0x10}}, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000001200)={0x7, 0x8, 0x2, 0x7, 0x3, [0x5, 0x13e3, 0x7, 0x7fffffff]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0x25, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYRES64=r0, @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4048080) sendmsg$nl_netfilter(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="18000000100a010125bd7000ffcbdf250700000525100000"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x44) 15.521896187s ago: executing program 0 (id=3183): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ff00000008005f9fc60d9e336fe94a32a900"/31, @ANYRES32=0x0, @ANYBLOB="02200000000000001c00128009000100626f6e64000000000c00028005000100fe000000"], 0x3c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCGSKNS(r2, 0x894c, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe49000000003f2dd090fc6889ae6b84", 0x14}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000cac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmsg(r0, &(0x7f0000000880)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000002c0)=""/83, 0x53}, {&(0x7f0000000600)=""/135, 0x87}, {&(0x7f0000000480)=""/53, 0x35}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000540)=""/123, 0x7b}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/176, 0xb0}], 0x8, &(0x7f0000000800)=""/103, 0x67}, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r7 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), 0x10) sendmmsg$alg(r7, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000340)="b26d690572229b79518bc99a83b9261b900257ebde89272f49ff848b82209c0c6c274077675226159cf5ee875ed28fa4acc0b31206dd94a00eeb6beb0f44afbf7cece64ccc61c504a3a858495a39", 0x4e}, {&(0x7f00000003c0)="3f90aea19573b6b0ecf82503c7e5a0bfc14a3bdceded2749d95675cfa0a1a6bc3bb98578220281c6c4eeadc50e299175ff4268b3b20ccd728a3d6b86f9c1233b134e24a940c751d221836735d59e62dbd1e6935745d3ed5439c271bab7b33458b6ffc8cc23b23f213cb34c3dc9ecebbf3870aafefcd1d5a3512fd40070ddf8b27615df8fefc4e2a7da740738b6e1343d8acd676a48f2f569d5544df403bdb234926e7a830891992e55e36d7c23c8c62243c33d5e87e5f1c5975b27db92", 0xbd}, {&(0x7f0000000c80)="8b538094ceb3d9051a444e5e60237105232689e6e380d38a87027bb1bc0ee00bd81bf5a1595018d90c9d125ef93481279326c76c463da75aa61eef65aff6e7c232cf358dc77a8fafe91a19df8bb5af3099d0e31fde9a44135fde1e526e59be8630dbda064eba8cbeaa39e5945b09ee5e1e2e930d91c15cc9fc63a4cdfa17eee9199b5f02275e6df63c5a3e66d9cdf839af47f6606ee7ba4692d22f50819671f9ed4cf9adcf0fc4f499c55063b9271ea457705b53c2831277354047f555aa2d3a4fe0c592fd665de11edd313ef70b5b77a55f0294aa6e9059151f6ffa", 0xdc}, {&(0x7f0000000d80)="383d251eab342bea3f6448a7d1aebf28a77b4deeb406065eb7", 0x19}], 0x4, 0x0, 0x0, 0x40000}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) close(r0) 15.470114899s ago: executing program 3 (id=3184): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r7, &(0x7f0000000100)=""/12, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000007110bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x2b, 0x1, 0x0) listen(r8, 0x0) accept4$nfc_llcp(r8, 0x0, 0x0, 0x0) r9 = socket(0x5, 0x1, 0x5) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xff7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10) r12 = socket$alg(0x26, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(r12, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) accept(r12, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 5.07749133s ago: executing program 32 (id=3172): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x6, 0x2) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0xffffffffffffffbb) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000002800), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000200000", @ANYRES32, @ANYBLOB="ffffffff00000000000000000000190500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6131, 0xffffffffffffffff, 0x0) r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x0) recvmmsg(r4, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/222, 0xde}, {&(0x7f0000000240)=""/165, 0xa5}], 0x2, &(0x7f0000000340)=""/14, 0xe}, 0x2}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=""/204, 0xcc}, {&(0x7f0000000480)=""/85, 0x55}, {&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000680)=""/31, 0x1f}, {&(0x7f00000006c0)=""/191, 0xbf}], 0x6, &(0x7f0000000b40)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000000800)=@isdn, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/150, 0x96}, {&(0x7f0000000a00)=""/114, 0x72}], 0x2, &(0x7f0000000a80)=""/49, 0x31}, 0x400}, {{&(0x7f0000001b40)=@llc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/135, 0x87}], 0x1}, 0xffffffff}, {{&(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001d40)=""/82, 0x52}, {&(0x7f0000001dc0)=""/214, 0xd6}, {&(0x7f0000001ec0)=""/190, 0xbe}, {&(0x7f0000002a40)=""/159, 0x9f}], 0x4, &(0x7f0000002080)=""/221, 0xdd}, 0x3921}, {{&(0x7f0000002180)=@hci, 0x80, &(0x7f0000002540)=[{&(0x7f0000002200)=""/61, 0x3d}, {&(0x7f0000002240)=""/212, 0xd4}, {&(0x7f0000002340)=""/10, 0xa}, {&(0x7f0000002380)=""/192, 0xc0}, {&(0x7f0000002440)=""/201, 0xc9}], 0x5, &(0x7f00000025c0)=""/117, 0x75}, 0x81}], 0x6, 0x40010000, &(0x7f00000027c0)) unshare(0x22020400) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r6, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000028c0), 0xffffffffffffffff) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r9], 0x1c}}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002900)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000002a00)={&(0x7f0000002880), 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x44, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000002840)=0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f0000000600), &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) unshare(0x200) 4.058802026s ago: executing program 33 (id=3175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ffd7000008000340"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d000c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 32.506103ms ago: executing program 34 (id=3183): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ff00000008005f9fc60d9e336fe94a32a900"/31, @ANYRES32=0x0, @ANYBLOB="02200000000000001c00128009000100626f6e64000000000c00028005000100fe000000"], 0x3c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCGSKNS(r2, 0x894c, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000600)="b9ed29d8fe49000000003f2dd090fc6889ae6b84", 0x14}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000cac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmsg(r0, &(0x7f0000000880)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000002c0)=""/83, 0x53}, {&(0x7f0000000600)=""/135, 0x87}, {&(0x7f0000000480)=""/53, 0x35}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000540)=""/123, 0x7b}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/176, 0xb0}], 0x8, &(0x7f0000000800)=""/103, 0x67}, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r7 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000000), 0x10) sendmmsg$alg(r7, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000340)="b26d690572229b79518bc99a83b9261b900257ebde89272f49ff848b82209c0c6c274077675226159cf5ee875ed28fa4acc0b31206dd94a00eeb6beb0f44afbf7cece64ccc61c504a3a858495a39", 0x4e}, {&(0x7f00000003c0)="3f90aea19573b6b0ecf82503c7e5a0bfc14a3bdceded2749d95675cfa0a1a6bc3bb98578220281c6c4eeadc50e299175ff4268b3b20ccd728a3d6b86f9c1233b134e24a940c751d221836735d59e62dbd1e6935745d3ed5439c271bab7b33458b6ffc8cc23b23f213cb34c3dc9ecebbf3870aafefcd1d5a3512fd40070ddf8b27615df8fefc4e2a7da740738b6e1343d8acd676a48f2f569d5544df403bdb234926e7a830891992e55e36d7c23c8c62243c33d5e87e5f1c5975b27db92", 0xbd}, {&(0x7f0000000c80)="8b538094ceb3d9051a444e5e60237105232689e6e380d38a87027bb1bc0ee00bd81bf5a1595018d90c9d125ef93481279326c76c463da75aa61eef65aff6e7c232cf358dc77a8fafe91a19df8bb5af3099d0e31fde9a44135fde1e526e59be8630dbda064eba8cbeaa39e5945b09ee5e1e2e930d91c15cc9fc63a4cdfa17eee9199b5f02275e6df63c5a3e66d9cdf839af47f6606ee7ba4692d22f50819671f9ed4cf9adcf0fc4f499c55063b9271ea457705b53c2831277354047f555aa2d3a4fe0c592fd665de11edd313ef70b5b77a55f0294aa6e9059151f6ffa", 0xdc}, {&(0x7f0000000d80)="383d251eab342bea3f6448a7d1aebf28a77b4deeb406065eb7", 0x19}], 0x4, 0x0, 0x0, 0x40000}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) close(r0) 0s ago: executing program 35 (id=3184): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$alg(r7, &(0x7f0000000100)=""/12, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000007110bb000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x2b, 0x1, 0x0) listen(r8, 0x0) accept4$nfc_llcp(r8, 0x0, 0x0, 0x0) r9 = socket(0x5, 0x1, 0x5) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x1, 0x2, 0xff7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10) r12 = socket$alg(0x26, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(r12, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) accept(r12, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) kernel console output (not intermixed with test programs): x765/0x950 [ 455.390652][T13562] ? __pfx_veth_newlink+0x10/0x10 [ 455.390667][T13562] rtnl_newlink_create+0x310/0xb00 [ 455.390681][T13562] ? __mutex_lock+0x5bb/0x1350 [ 455.390699][T13562] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 455.390713][T13562] ? __pfx___mutex_lock+0x10/0x10 [ 455.390737][T13562] ? ns_capable+0x8a/0xf0 [ 455.390751][T13562] rtnl_newlink+0x16e7/0x1c90 [ 455.390767][T13562] ? rb_commit+0x781/0x7e0 [ 455.390791][T13562] ? __pfx_rtnl_newlink+0x10/0x10 [ 455.390806][T13562] ? __lock_acquire+0x6b6/0x2cf0 [ 455.390818][T13562] ? __lock_acquire+0x6b6/0x2cf0 [ 455.390893][T13562] ? __pfx_rtnl_newlink+0x10/0x10 [ 455.390908][T13562] rtnetlink_rcv_msg+0x7cf/0xb70 [ 455.390926][T13562] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 455.390941][T13562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 455.390956][T13562] ? __lock_acquire+0x6b6/0x2cf0 [ 455.390976][T13562] netlink_rcv_skb+0x208/0x470 [ 455.390988][T13562] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 455.391005][T13562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 455.391024][T13562] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.391040][T13562] netlink_unicast+0x82f/0x9e0 [ 455.391063][T13562] ? __pfx_netlink_unicast+0x10/0x10 [ 455.391080][T13562] ? netlink_sendmsg+0x642/0xb30 [ 455.391090][T13562] ? skb_put+0x11b/0x210 [ 455.391108][T13562] netlink_sendmsg+0x805/0xb30 [ 455.391125][T13562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.391139][T13562] ? aa_sock_msg_perm+0xf1/0x1b0 [ 455.391152][T13562] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.391167][T13562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.391180][T13562] __sock_sendmsg+0x21c/0x270 [ 455.391196][T13562] ____sys_sendmsg+0x505/0x820 [ 455.391217][T13562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.391240][T13562] ? import_iovec+0x74/0xa0 [ 455.391258][T13562] ___sys_sendmsg+0x21f/0x2a0 [ 455.391276][T13562] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.391297][T13562] ? futex_wait+0x285/0x360 [ 455.391329][T13562] ? __fget_files+0x2a/0x420 [ 455.391339][T13562] ? __fget_files+0x3a0/0x420 [ 455.391356][T13562] __x64_sys_sendmsg+0x19b/0x260 [ 455.391374][T13562] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.391403][T13562] ? do_syscall_64+0xbe/0xf80 [ 455.391420][T13562] do_syscall_64+0xfa/0xf80 [ 455.391435][T13562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.391446][T13562] ? clear_bhb_loop+0x60/0xb0 [ 455.391460][T13562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.391484][T13562] RIP: 0033:0x7f223c58f749 [ 455.391497][T13562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.391507][T13562] RSP: 002b:00007f223d4b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.391522][T13562] RAX: ffffffffffffffda RBX: 00007f223c7e5fa0 RCX: 00007f223c58f749 [ 455.391530][T13562] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 455.391537][T13562] RBP: 00007f223c613f91 R08: 0000000000000000 R09: 0000000000000000 [ 455.391551][T13562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.391558][T13562] R13: 00007f223c7e6038 R14: 00007f223c7e5fa0 R15: 00007ffdb0b31df8 [ 455.391578][T13562] [ 455.391583][T13562] Mem-Info: [ 455.881839][T13562] active_anon:5592 inactive_anon:0 isolated_anon:0 [ 455.881839][T13562] active_file:3209 inactive_file:39966 isolated_file:0 [ 455.881839][T13562] unevictable:768 dirty:25 writeback:0 [ 455.881839][T13562] slab_reclaimable:12215 slab_unreclaimable:132976 [ 455.881839][T13562] mapped:31104 shmem:2890 pagetables:985 [ 455.881839][T13562] sec_pagetables:0 bounce:0 [ 455.881839][T13562] kernel_misc_reclaimable:0 [ 455.881839][T13562] free:1288531 free_pcp:9631 free_cma:0 [ 455.930894][T13562] Node 0 active_anon:22368kB inactive_anon:0kB active_file:12836kB inactive_file:159668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124416kB dirty:100kB writeback:0kB shmem:10024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13104kB pagetables:3796kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 455.967759][T13562] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 456.000736][T13562] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.031641][T13562] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 456.037456][T13562] Node 0 DMA32 free:1231192kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22368kB inactive_anon:0kB active_file:12836kB inactive_file:159668kB unevictable:1536kB writepending:100kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:27612kB local_pcp:18792kB free_cma:0kB [ 456.080354][T13562] lowmem_reserve[]: 0 0 0 0 0 [ 456.085315][T13562] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 456.115723][T13562] lowmem_reserve[]: 0 0 0 0 0 [ 456.120628][T13562] Node 1 Normal free:3907316kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11020kB local_pcp:7268kB free_cma:0kB [ 456.157317][T13562] lowmem_reserve[]: 0 0 0 0 0 [ 456.163444][T13562] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 456.183594][T13562] Node 0 DMA32: 1122*4kB (UE) 547*8kB (UM) 422*16kB (UM) 155*32kB (UME) 96*64kB (UME) 67*128kB (UME) 101*256kB (UM) 59*512kB (UME) 31*1024kB (UM) 15*2048kB (UME) 263*4096kB (UM) = 1231072kB [ 456.204947][T13562] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 456.217029][T13562] Node 1 Normal: 141*4kB (UME) 42*8kB (UME) 43*16kB (UME) 144*32kB (UME) 39*64kB (UME) 8*128kB (UM) 3*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 950*4096kB (M) = 3907316kB [ 456.235858][T13562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.246174][T13562] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 456.255944][T13562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 456.266531][T13562] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 456.276142][T13562] 46064 total pagecache pages [ 456.281120][T13562] 0 pages in swap cache [ 456.285287][T13562] Free swap = 124996kB [ 456.289990][T13562] Total swap = 124996kB [ 456.294263][T13562] 2097051 pages RAM [ 456.298165][T13562] 0 pages HighMem/MovableOnly [ 456.303007][T13562] 424280 pages reserved [ 456.307170][T13562] 0 pages cma reserved [ 458.035547][T13612] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1919'. [ 458.116083][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1921'. [ 458.366177][T13629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1926'. [ 458.388711][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1926'. [ 458.408082][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 459.371700][T13653] netlink: 'syz.0.1930': attribute type 1 has an invalid length. [ 459.389152][T13653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1930'. [ 460.820680][T13671] IPVS: Unknown mcast interface: syzkaller0 [ 460.856039][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'. [ 460.921203][T13673] nbd: must specify a size in bytes for the device [ 461.040198][T13687] netlink: 'syz.1.1941': attribute type 1 has an invalid length. [ 461.048225][T13687] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1941'. [ 461.274438][T13677] x_tables: unsorted underflow at hook 3 [ 461.294688][T13694] netlink: 'syz.1.1941': attribute type 10 has an invalid length. [ 461.424775][T13687] wg1 speed is unknown, defaulting to 1000 [ 461.515989][T13687] lo speed is unknown, defaulting to 1000 [ 461.569290][T13713] netlink: 'syz.2.1947': attribute type 1 has an invalid length. [ 461.589077][T13711] tipc: Enabled bearer , priority 0 [ 461.628178][T13711] syzkaller0: entered promiscuous mode [ 461.633751][T13711] syzkaller0: entered allmulticast mode [ 461.669002][T13711] netlink: 'syz.3.1946': attribute type 58 has an invalid length. [ 461.676888][T13711] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1946'. [ 461.687566][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'. [ 461.731607][T13711] tipc: Resetting bearer [ 461.782274][T13710] tipc: Resetting bearer [ 461.807584][T13710] tipc: Disabling bearer [ 462.047104][T13735] netlink: 'syz.2.1955': attribute type 10 has an invalid length. [ 462.215882][T13735] team0: Port device geneve0 added [ 462.246255][T13746] syz_tun: entered allmulticast mode [ 462.325838][T13748] netlink: 'syz.4.1957': attribute type 1 has an invalid length. [ 462.357181][T13732] syz_tun: left allmulticast mode [ 462.944302][T13788] bond0: Error: Cannot enslave bond to itself. [ 463.103902][T13742] vxcan0: entered allmulticast mode [ 463.231311][T13808] __nla_validate_parse: 3 callbacks suppressed [ 463.231333][T13808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 463.255171][T13808] team0: entered promiscuous mode [ 463.262434][T13808] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 463.289918][T13808] team0: left promiscuous mode [ 463.456866][T13819] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 463.566602][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 463.588744][T13821] syzkaller0: entered promiscuous mode [ 463.594447][T13821] syzkaller0: entered allmulticast mode [ 463.607321][ T30] audit: type=1800 audit(1765759588.209:6): pid=13825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1976" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2137 res=0 errno=0 [ 463.710880][T13834] tipc: Enabling of bearer rejected, failed to enable media [ 464.557579][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1985'. [ 464.584509][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1985'. [ 464.743131][T13866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1983'. [ 465.163814][T13880] netlink: 'syz.0.1987': attribute type 6 has an invalid length. [ 465.167524][T13862] wg1 speed is unknown, defaulting to 1000 [ 465.193148][T13875] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 465.205372][T13862] lo speed is unknown, defaulting to 1000 [ 465.286004][T13884] can: request_module (can-proto-0) failed. [ 465.361619][T13891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1992'. [ 465.379306][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 465.576321][T13898] netem: change failed [ 465.954254][T13912] bond3: option ad_user_port_key: invalid value (65535) [ 465.974196][T13912] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 465.985197][T13909] netlink: 'syz.4.1995': attribute type 30 has an invalid length. [ 466.002758][T13912] bond3 (unregistering): Released all slaves [ 466.070175][T13909] bond3: option arp_missed_max: invalid value (0) [ 466.077744][T13909] bond3: option arp_missed_max: allowed values 1 - 255 [ 466.103525][T13909] bond3 (unregistering): Released all slaves [ 466.295422][T13921] tipc: Enabled bearer , priority 0 [ 466.306562][T13921] syzkaller0: entered promiscuous mode [ 466.313093][T13921] syzkaller0: entered allmulticast mode [ 466.324122][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2000'. [ 466.575283][T13935] tipc: Resetting bearer [ 466.611331][T13920] tipc: Resetting bearer [ 466.696225][T13920] tipc: Disabling bearer [ 466.749287][T13944] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2005'. [ 466.844923][T13944] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2005'. [ 466.929024][T13953] bond0: (slave gre0): Error: Device type is different from other slaves [ 467.200198][T13964] netlink: 'syz.2.2011': attribute type 1 has an invalid length. [ 467.246691][T13964] 8021q: adding VLAN 0 to HW filter on device bond8 [ 467.285207][T13970] bond8: (slave ip6erspan1): making interface the new active one [ 467.296310][T13970] bond8: (slave ip6erspan1): Enslaving as an active interface with an up link [ 467.322855][T13967] tipc: Enabled bearer , priority 0 [ 467.341252][T13967] syzkaller0: entered promiscuous mode [ 467.358242][T13967] syzkaller0: entered allmulticast mode [ 467.403560][T13967] xt_connbytes: Forcing CT accounting to be enabled [ 467.451420][T13967] tipc: Resetting bearer [ 467.474978][T13965] tipc: Resetting bearer [ 467.500919][T13965] tipc: Disabling bearer [ 467.851066][T13991] wg1 speed is unknown, defaulting to 1000 [ 467.871210][T13991] lo speed is unknown, defaulting to 1000 [ 468.634176][T14046] netlink: 'syz.0.2031': attribute type 10 has an invalid length. [ 468.656391][T14046] team0: Port device dummy0 added [ 468.788290][T14044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.959133][T14069] __nla_validate_parse: 11 callbacks suppressed [ 468.959156][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2036'. [ 468.983231][T14057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.015012][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2036'. [ 469.021872][T14072] sctp: [Deprecated]: syz.4.2037 (pid 14072) Use of int in max_burst socket option. [ 469.021872][T14072] Use struct sctp_assoc_value instead [ 469.146401][T14057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.252460][T14083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2040'. [ 469.310989][T14057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.368581][T14087] wg1 speed is unknown, defaulting to 1000 [ 469.375120][T14093] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20001 [ 469.488946][T14057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.549155][T14087] lo speed is unknown, defaulting to 1000 [ 469.742644][T14111] geneve2: entered promiscuous mode [ 469.781033][T14104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'. [ 469.928290][ T3728] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 469.941853][ T3728] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 469.973352][ T3728] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 469.999811][ T3728] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 470.030244][T14120] syzkaller0: entered promiscuous mode [ 470.045624][T14120] syzkaller0: entered allmulticast mode [ 470.138157][ T1097] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.190872][T14057] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.229930][T14125] netlink: 'syz.2.2049': attribute type 4 has an invalid length. [ 470.308974][T14125] netlink: 'syz.2.2049': attribute type 4 has an invalid length. [ 470.323669][T14134] wg1 speed is unknown, defaulting to 1000 [ 470.357709][T14134] lo speed is unknown, defaulting to 1000 [ 470.498349][T14139] wg1 speed is unknown, defaulting to 1000 [ 470.519155][T14139] lo speed is unknown, defaulting to 1000 [ 470.893612][T14155] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2056'. [ 471.187020][T14164] wg1 speed is unknown, defaulting to 1000 [ 471.197130][T14164] lo speed is unknown, defaulting to 1000 [ 471.299227][T14139] netlink: 'syz.2.2053': attribute type 6 has an invalid length. [ 471.340237][T14169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.366840][T14173] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 471.619667][T14182] tipc: Enabling of bearer rejected, failed to enable media [ 471.682337][T14184] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 471.807466][T14187] xt_connbytes: Forcing CT accounting to be enabled [ 471.881490][T14197] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 472.168956][T14208] netlink: 'syz.3.2068': attribute type 10 has an invalid length. [ 472.312862][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2071'. [ 472.316557][T14208] syzkaller0: entered promiscuous mode [ 472.327554][T14208] syzkaller0: entered allmulticast mode [ 472.537625][T14221] netlink: 'syz.4.2072': attribute type 1 has an invalid length. [ 472.540687][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2071'. [ 472.712632][ T5850] Bluetooth: hci2: command tx timeout [ 473.645959][T14234] netlink: 'syz.0.2075': attribute type 1 has an invalid length. [ 474.150060][T14234] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 474.230287][T14236] gretap1: entered promiscuous mode [ 474.270708][T14242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2077'. [ 474.424272][T14254] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2080'. [ 474.813122][T14275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2086'. [ 474.818280][T14274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2086'. [ 474.922706][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2088'. [ 474.989552][T14278] wg1 speed is unknown, defaulting to 1000 [ 475.000058][T14278] lo speed is unknown, defaulting to 1000 [ 475.291967][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'. [ 475.603865][T14309] tipc: Enabling of bearer rejected, failed to enable media [ 475.668588][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 475.685465][T14309] bond2: option min_links: invalid value (18446744073709551612) [ 475.728090][T14309] bond2: option min_links: allowed values 0 - 2147483647 [ 475.739136][T14309] bond2 (unregistering): Released all slaves [ 475.916786][T14331] netlink: 'syz.1.2102': attribute type 83 has an invalid length. [ 476.248997][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 476.268875][T14341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 476.434515][T14350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2105'. [ 476.607340][ T30] audit: type=1804 audit(1765759601.209:7): pid=14353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2106" name="/newroot/440/cgroup.controllers" dev="tmpfs" ino=2289 res=1 errno=0 [ 476.653037][ T30] audit: type=1800 audit(1765759601.209:8): pid=14353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2106" name="cgroup.controllers" dev="tmpfs" ino=2289 res=0 errno=0 [ 476.834387][T14365] ip6t_srh: unknown srh match flags 4000 [ 476.972776][T14370] syzkaller0: entered promiscuous mode [ 476.978642][T14370] syzkaller0: entered allmulticast mode [ 477.011585][T14371] vlan2: entered allmulticast mode [ 477.016871][T14371] bridge0: entered allmulticast mode [ 477.054838][T14372] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 477.212725][T14375] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 477.335739][ T5850] Bluetooth: hci2: link tx timeout [ 477.341499][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 477.586000][T14390] netlink: 'syz.0.2118': attribute type 11 has an invalid length. [ 477.676901][T14397] wg1 speed is unknown, defaulting to 1000 [ 477.713136][T14397] lo speed is unknown, defaulting to 1000 [ 477.730874][T14399] netlink: 'syz.4.2119': attribute type 29 has an invalid length. [ 477.731103][T14398] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 477.811240][T14401] bond7: option resend_igmp: invalid value (2878) [ 477.818044][T14401] bond7: option resend_igmp: allowed values 0 - 255 [ 477.840445][T14401] bond7 (unregistering): Released all slaves [ 478.885687][T14426] wg1 speed is unknown, defaulting to 1000 [ 478.891973][ T5850] Bluetooth: hci2: link tx timeout [ 478.897271][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 478.907257][T14426] lo speed is unknown, defaulting to 1000 [ 479.428335][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 479.705180][T14464] __nla_validate_parse: 5 callbacks suppressed [ 479.705201][T14464] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2140'. [ 479.730527][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 479.778615][T14465] team0: Device ipvlan2 is already an upper device of the team interface [ 479.890032][T14471] tipc: Failed to remove unknown binding: 66,1,1/1175088830:2584471664/2584471667 [ 479.902581][T14472] tipc: Failed to remove unknown binding: 66,1,1/1175088830:2584471664/2584471667 [ 479.925649][T14472] tipc: Failed to remove unknown binding: 66,1,1/1175088830:2584471664/2584471667 [ 479.935363][T14474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2142'. [ 479.944696][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2142'. [ 480.130444][T14484] netlink: 'syz.0.2144': attribute type 10 has an invalid length. [ 480.143142][T14482] bond3: option miimon: invalid value (18446744073709551607) [ 480.151476][T14482] bond3: option miimon: allowed values 0 - 2147483647 [ 480.179122][T14482] bond3 (unregistering): Released all slaves [ 480.234883][T14484] wlan1: mtu less than device minimum [ 480.243966][T14484] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 480.326856][T14497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 480.503265][T14503] wg1 speed is unknown, defaulting to 1000 [ 480.520786][T14503] lo speed is unknown, defaulting to 1000 [ 480.649037][T14516] Unsupported ieee802154 address type: 0 [ 481.188594][T14550] netlink: 'syz.3.2164': attribute type 1 has an invalid length. [ 481.212125][T14545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2166'. [ 481.221711][T14545] bond0: invalid ARP target 0.0.0.0 specified for addition [ 481.229181][T14545] bond0: option arp_ip_target: invalid value (0) [ 481.237974][T14550] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2164'. [ 481.365644][T14558] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 481.394205][T14559] tipc: Enabled bearer , priority 0 [ 481.414202][T14559] syzkaller0: entered promiscuous mode [ 481.438440][T14559] syzkaller0: entered allmulticast mode [ 481.520173][T14559] tipc: Resetting bearer [ 481.529285][T14567] netlink: 'syz.0.2172': attribute type 1 has an invalid length. [ 481.580119][T14573] bridge_slave_0: default FDB implementation only supports local addresses [ 481.686664][T14571] bond2: (slave bridge4): making interface the new active one [ 481.736745][T14571] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 481.788481][T14579] tipc: Resetting bearer [ 481.817403][T14579] tipc: Disabling bearer [ 481.976114][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2177'. [ 482.012528][T14610] netlink: 'syz.0.2176': attribute type 13 has an invalid length. [ 482.040276][T14610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2176'. [ 482.121719][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2178'. [ 482.385769][T14630] netlink: 'syz.1.2182': attribute type 6 has an invalid length. [ 482.427516][T14630] netlink: 'syz.1.2182': attribute type 6 has an invalid length. [ 482.470391][T14633] netlink: 'syz.1.2182': attribute type 21 has an invalid length. [ 482.480538][T14630] netlink: 'syz.1.2182': attribute type 21 has an invalid length. [ 482.490069][T14633] netlink: 'syz.1.2182': attribute type 1 has an invalid length. [ 482.498370][T14630] netlink: 'syz.1.2182': attribute type 1 has an invalid length. [ 482.573162][T14636] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 483.030733][T14665] syzkaller0: entered promiscuous mode [ 483.036514][T14665] syzkaller0: entered allmulticast mode [ 483.213643][T14669] netlink: 'syz.0.2193': attribute type 1 has an invalid length. [ 483.387020][T14669] 8021q: adding VLAN 0 to HW filter on device bond3 [ 483.491560][T14674] bond3: (slave geneve2): making interface the new active one [ 483.505335][T14674] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 483.757734][T14693] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 484.770072][T14739] __nla_validate_parse: 13 callbacks suppressed [ 484.770095][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2212'. [ 484.946054][T14748] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2215'. [ 484.972937][T14748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.013443][T14757] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2214'. [ 485.071169][T14759] tc_dump_action: action bad kind [ 485.081496][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2217'. [ 485.174425][T14759] wg1 speed is unknown, defaulting to 1000 [ 485.181639][T14759] lo speed is unknown, defaulting to 1000 [ 485.205913][T14766] sctp: [Deprecated]: syz.2.2217 (pid 14766) Use of int in maxseg socket option. [ 485.205913][T14766] Use struct sctp_assoc_value instead [ 485.699483][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 485.709284][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2225'. [ 485.946186][T14783] tipc: Enabled bearer , priority 0 [ 486.046526][T14783] tipc: Disabling bearer [ 486.258746][T14808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2232'. [ 486.447335][T14818] validate_nla: 5 callbacks suppressed [ 486.447357][T14818] netlink: 'syz.1.2229': attribute type 10 has an invalid length. [ 486.486820][T14818] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.520405][T14818] bond0: (slave team0): Enslaving as an active interface with an up link [ 486.537433][T14830] netlink: 'syz.1.2229': attribute type 1 has an invalid length. [ 486.553894][T14829] sctp: [Deprecated]: syz.3.2237 (pid 14829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 486.553894][T14829] Use struct sctp_sack_info instead [ 486.808875][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2241'. [ 486.863081][T14825] wg1 speed is unknown, defaulting to 1000 [ 486.893582][T14825] lo speed is unknown, defaulting to 1000 [ 487.119752][T14855] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2244'. [ 487.335764][T14857] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2245'. [ 487.408988][T14857] wg1 speed is unknown, defaulting to 1000 [ 487.439896][T14857] lo speed is unknown, defaulting to 1000 [ 487.964945][T14883] wg1 speed is unknown, defaulting to 1000 [ 488.005671][T14883] lo speed is unknown, defaulting to 1000 [ 489.641184][T14954] netlink: 'syz.3.2266': attribute type 10 has an invalid length. [ 489.695166][T14958] netlink: 'syz.3.2266': attribute type 10 has an invalid length. [ 489.766043][T14954] bond0: (slave dummy0): Releasing backup interface [ 489.825669][T14954] team0: Port device dummy0 added [ 489.885075][T14958] team0: Port device dummy0 removed [ 489.909668][T14958] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 489.933812][T14964] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 490.092672][T14976] pimreg: entered allmulticast mode [ 490.196554][T14978] wg1 speed is unknown, defaulting to 1000 [ 490.232936][T14978] lo speed is unknown, defaulting to 1000 [ 490.246741][T14987] __nla_validate_parse: 4 callbacks suppressed [ 490.246759][T14987] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2274'. [ 490.390661][T14990] bond9: option primary_reselect: invalid value (6) [ 490.404197][T14990] bond9 (unregistering): Released all slaves [ 490.601925][T14995] netlink: 63 bytes leftover after parsing attributes in process `syz.2.2275'. [ 490.841636][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2277'. [ 491.042588][T15017] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 491.131233][T15014] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 491.145310][T15014] bond4 (unregistering): Released all slaves [ 491.166337][T15017] netlink: 'syz.4.2280': attribute type 41 has an invalid length. [ 491.559359][T15046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2289'. [ 491.595346][T15046] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 491.753706][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2291'. [ 491.788765][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2291'. [ 492.593436][T15086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2301'. [ 492.601632][T15079] bridge0: entered promiscuous mode [ 492.637110][T15079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.872608][T15079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.913639][ T5927] lo speed is unknown, defaulting to 1000 [ 492.931149][ T5927] syz1: Port: 1 Link ACTIVE [ 492.998132][T15083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.119747][T15081] wg1 speed is unknown, defaulting to 1000 [ 493.148645][T15081] lo speed is unknown, defaulting to 1000 [ 493.341550][T15110] tipc: Enabled bearer , priority 0 [ 493.364294][T15110] syzkaller0: entered promiscuous mode [ 493.386423][T15117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2309'. [ 493.395901][T15110] syzkaller0: entered allmulticast mode [ 493.493581][T15124] netlink: 'syz.4.2309': attribute type 1 has an invalid length. [ 493.531112][T15115] tipc: Resetting bearer [ 493.543936][T15108] tipc: Resetting bearer [ 493.602654][T15108] tipc: Disabling bearer [ 493.708363][T15133] netlink: 7076 bytes leftover after parsing attributes in process `syz.4.2312'. [ 493.722162][T15133] openvswitch: netlink: Flow key attr not present in new flow. [ 493.746743][T15135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'. [ 493.757593][T15135] tipc: Enabling of bearer rejected, failed to enable media [ 493.769428][T15138] tipc: Enabling of bearer rejected, failed to enable media [ 493.825628][T15095] wg1 speed is unknown, defaulting to 1000 [ 493.855191][T15095] lo speed is unknown, defaulting to 1000 [ 494.974066][T15195] bond3: Removing last ns target with arp_interval on [ 495.003321][T15200] netlink: 'syz.2.2330': attribute type 8 has an invalid length. [ 495.011911][T15200] sch_fq: defrate 0 ignored. [ 495.164115][T15210] netlink: 'syz.0.2332': attribute type 1 has an invalid length. [ 495.238422][T15207] block nbd1: server does not support multiple connections per device. [ 495.252465][T15207] block nbd1: shutting down sockets [ 495.435532][T15234] x_tables: duplicate underflow at hook 3 [ 495.538555][T15237] __nla_validate_parse: 4 callbacks suppressed [ 495.538581][T15237] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2339'. [ 495.633603][T15237] xt_CT: No such helper "syz0" [ 495.708572][T15244] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2340'. [ 495.959168][T15253] ipip2: entered promiscuous mode [ 495.964396][T15253] ipip2: entered allmulticast mode [ 496.066370][T15255] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2342'. [ 496.107249][T15259] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2342'. [ 496.241635][T15263] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2345'. [ 496.323545][T15265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2344'. [ 496.918509][T15296] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 496.925588][T15296] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 496.990917][T15296] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 497.131266][T15306] ip6erspan0: entered allmulticast mode [ 497.226591][T15313] 8021q: VLANs not supported on sit0 [ 497.253701][T15313] team0: Port device bridge5 added [ 497.260562][T15315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2361'. [ 497.311024][T15315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2361'. [ 497.518006][T15336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2368'. [ 497.579000][T15339] netlink: zone id is out of range [ 497.598312][T15339] netlink: zone id is out of range [ 497.603715][T15339] netlink: zone id is out of range [ 497.659297][T15339] netlink: zone id is out of range [ 497.693871][T15339] netlink: zone id is out of range [ 497.724968][T15339] netlink: zone id is out of range [ 497.743558][T15339] netlink: zone id is out of range [ 497.758243][T15348] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2369'. [ 497.776921][T15339] netlink: zone id is out of range [ 497.797922][T15339] netlink: zone id is out of range [ 498.166608][T15362] netlink: 'syz.4.2371': attribute type 12 has an invalid length. [ 498.753425][ T7509] IPVS: starting estimator thread 0... [ 498.841008][T15400] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:0 [ 498.848003][T15397] IPVS: using max 25 ests per chain, 60000 per kthread [ 498.888470][T15396] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 498.993118][T15405] bridge3: entered allmulticast mode [ 499.090105][T15405] bridge3: left allmulticast mode [ 499.394111][T15427] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20001 [ 499.700390][T15438] wg1 speed is unknown, defaulting to 1000 [ 499.780080][T15438] lo speed is unknown, defaulting to 1000 [ 500.489363][T15478] xt_hashlimit: overflow, try lower: 3/0 [ 501.067197][T15502] lo: entered allmulticast mode [ 501.167474][T15505] wg1 speed is unknown, defaulting to 1000 [ 501.175813][T15505] lo speed is unknown, defaulting to 1000 [ 501.195170][T15503] eql: remember to turn off Van-Jacobson compression on your slave devices [ 501.660605][T15533] tipc: Enabled bearer , priority 0 [ 501.674920][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.695266][T15533] syzkaller0: entered promiscuous mode [ 501.710243][T15533] syzkaller0: entered allmulticast mode [ 501.886063][T15540] tipc: Resetting bearer [ 501.961446][T15543] netlink: 'syz.0.2420': attribute type 39 has an invalid length. [ 502.016991][T15546] ip6gre1: entered promiscuous mode [ 502.022657][T15546] ip6gre1: entered allmulticast mode [ 502.032553][ T8937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.042171][ T8937] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.052314][T15547] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.061252][ T7517] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.196500][T15550] syzkaller0: entered promiscuous mode [ 502.210358][T15550] syzkaller0: entered allmulticast mode [ 502.443834][T15532] tipc: Resetting bearer [ 502.470619][T15559] __nla_validate_parse: 5 callbacks suppressed [ 502.470639][T15559] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2425'. [ 502.515204][T15532] tipc: Disabling bearer [ 502.521576][T15570] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2428'. [ 502.541513][T15570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2428'. [ 502.555249][T15573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2427'. [ 502.562352][T15563] wg1 speed is unknown, defaulting to 1000 [ 502.573515][T15563] lo speed is unknown, defaulting to 1000 [ 502.575173][T15570] net_ratelimit: 27 callbacks suppressed [ 502.575194][T15570] openvswitch: netlink: Flow key attr not present in new flow. [ 502.625031][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 502.644524][ T7517] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 502.645531][T15575] bond0: Caught tx_queue_len zero misconfig [ 502.773625][T15579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2428'. [ 503.028435][ T7517] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 503.034997][T15591] wg1 speed is unknown, defaulting to 1000 [ 503.076048][T15591] lo speed is unknown, defaulting to 1000 [ 503.098517][T15596] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2432'. [ 503.427701][T15600] wg1 speed is unknown, defaulting to 1000 [ 503.449786][T15600] lo speed is unknown, defaulting to 1000 [ 503.583162][T15609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2438'. [ 503.618405][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2437'. [ 503.710674][T15615] macvtap1: entered allmulticast mode [ 503.784358][T15611] veth1_to_bond: entered allmulticast mode [ 503.800221][T15618] veth1_to_bond: entered promiscuous mode [ 503.888816][T15610] veth1_to_bond: left promiscuous mode [ 503.894566][T15610] veth1_to_bond: left allmulticast mode [ 504.209187][T15634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.221803][T15635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2444'. [ 504.981734][T15685] wg1 speed is unknown, defaulting to 1000 [ 504.990282][T15685] lo speed is unknown, defaulting to 1000 [ 505.359134][T15694] 8021q: adding VLAN 0 to HW filter on device bond4 [ 505.908043][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 506.870885][T15717] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 506.877201][T15717] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 506.941777][T15717] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 506.978030][T15717] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 507.145780][T15717] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 507.178873][T15717] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 507.299423][T15717] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 507.322488][T15717] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 507.348631][T15717] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 507.363483][T15717] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 507.469120][T15747] bond0: (slave rose0): Releasing backup interface [ 508.016777][T15773] netlink: 'syz.2.2481': attribute type 12 has an invalid length. [ 508.413095][T15794] netlink: 'syz.2.2485': attribute type 1 has an invalid length. [ 508.458124][T15794] __nla_validate_parse: 3 callbacks suppressed [ 508.458147][T15794] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2485'. [ 508.513720][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'. [ 509.278655][T15809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 509.320425][T15809] netlink: 'syz.4.2488': attribute type 1 has an invalid length. [ 509.618785][T15818] No such timeout policy "syz1" [ 509.822652][T15831] syzkaller1: entered promiscuous mode [ 509.824576][ T30] audit: type=1804 audit(1765759634.429:9): pid=15833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2496" name="/newroot/509/cgroup.controllers" dev="tmpfs" ino=2644 res=1 errno=0 [ 509.838090][T15831] syzkaller1: entered allmulticast mode [ 509.888506][ T30] audit: type=1800 audit(1765759634.499:10): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2496" name="cgroup.controllers" dev="tmpfs" ino=2644 res=0 errno=0 [ 509.939164][ T30] audit: type=1800 audit(1765759634.519:11): pid=15833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2496" name="cgroup.controllers" dev="tmpfs" ino=2644 res=0 errno=0 [ 510.047111][T15836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2497'. [ 510.075388][T15836] nbd: must specify a size in bytes for the device [ 510.123280][T15843] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 510.183408][T15843] netlink: 'syz.4.2499': attribute type 3 has an invalid length. [ 510.195218][T15843] netlink: 'syz.4.2499': attribute type 3 has an invalid length. [ 510.494645][T15862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2504'. [ 510.573146][T15868] wg1 speed is unknown, defaulting to 1000 [ 510.640320][T15868] lo speed is unknown, defaulting to 1000 [ 510.663470][T15878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2506'. [ 510.885723][T15896] netlink: 'syz.0.2507': attribute type 3 has an invalid length. [ 511.067745][T15902] gretap0: entered promiscuous mode [ 511.097196][T15902] erspan0: entered promiscuous mode [ 513.832933][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 514.663223][T15902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.672525][T15902] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.697347][T15902] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.710664][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2513'. [ 514.787580][T15903] wg1 speed is unknown, defaulting to 1000 [ 514.944903][T15903] lo speed is unknown, defaulting to 1000 [ 515.022580][T15929] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2518'. [ 515.102479][T15926] tipc: Enabled bearer , priority 0 [ 515.221496][T15927] syzkaller0: entered promiscuous mode [ 515.227237][T15927] syzkaller0: entered allmulticast mode [ 515.329537][T15927] tipc: Resetting bearer [ 515.389631][T15927] tipc: Disabling bearer [ 515.502908][T15948] pimreg: entered allmulticast mode [ 515.834067][T15966] wg1 speed is unknown, defaulting to 1000 [ 515.877297][T15971] syzkaller0: entered promiscuous mode [ 515.886002][T15971] syzkaller0: entered allmulticast mode [ 515.892506][T15975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2526'. [ 515.910655][T15966] lo speed is unknown, defaulting to 1000 [ 516.543037][T16002] team0: Port device dummy0 removed [ 516.574495][T16002] bridge_slave_0: left allmulticast mode [ 516.606644][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2532'. [ 516.680378][T16002] bridge_slave_0: left promiscuous mode [ 516.686328][T16002] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.692876][T16011] nbd: must specify an index to disconnect [ 516.838152][T16002] bridge_slave_1: left allmulticast mode [ 516.844349][T16002] bridge_slave_1: left promiscuous mode [ 516.851777][T16002] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.899921][T16002] bond0: (slave bond_slave_0): Releasing backup interface [ 516.937731][T16002] bond_slave_0: left promiscuous mode [ 516.961066][T16002] bond0: (slave bond_slave_1): Releasing backup interface [ 516.979432][T16002] bond_slave_1: left promiscuous mode [ 517.068675][T16002] team0: Port device team_slave_0 removed [ 517.125200][T16002] team0: Port device team_slave_1 removed [ 517.149598][T16002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.181413][T16002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.239999][T16002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.258353][T16002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.280397][T16002] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 517.694441][T16046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2540'. [ 517.714053][T16046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2540'. [ 517.895800][T16048] wg1 speed is unknown, defaulting to 1000 [ 517.912041][T16048] lo speed is unknown, defaulting to 1000 [ 518.235790][T16069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 518.505496][T16078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2549'. [ 518.552925][T16078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'. [ 518.621742][T16078] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 518.632335][T16078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'. [ 519.234008][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 519.772646][T16142] netlink: 'syz.3.2566': attribute type 21 has an invalid length. [ 519.780926][T16142] __nla_validate_parse: 2 callbacks suppressed [ 519.780945][T16142] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2566'. [ 519.843267][T16142] netlink: 'syz.3.2566': attribute type 4 has an invalid length. [ 519.856750][T16142] netlink: 'syz.3.2566': attribute type 3 has an invalid length. [ 520.533353][T16180] wg1 speed is unknown, defaulting to 1000 [ 520.564781][T16180] lo speed is unknown, defaulting to 1000 [ 520.719030][T16193] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 520.785408][T16193] netlink: 'syz.2.2576': attribute type 3 has an invalid length. [ 520.806475][T16187] wg1 speed is unknown, defaulting to 1000 [ 520.843105][T16193] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2576'. [ 520.920707][T16187] lo speed is unknown, defaulting to 1000 [ 521.159704][T16183] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 521.175644][T16183] netlink: 'syz.0.2574': attribute type 1 has an invalid length. [ 521.254430][T16183] bond4: entered promiscuous mode [ 521.262085][T16183] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.342089][T16204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.386895][T16204] bond4: (slave gre3): The slave device specified does not support setting the MAC address [ 521.399712][T16208] netlink: 'syz.1.2579': attribute type 3 has an invalid length. [ 521.423221][T16204] bond4: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 521.440662][T16204] bond4: (slave gre3): making interface the new active one [ 521.454542][T16204] gre3: entered promiscuous mode [ 521.464887][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2581'. [ 521.476009][T16204] bond4: (slave gre3): Enslaving as an active interface with an up link [ 522.319937][T16244] ip6tnl0: Caught tx_queue_len zero misconfig [ 522.349850][T16255] vlan1: entered allmulticast mode [ 522.355192][T16255] bridge_slave_0: entered allmulticast mode [ 522.484299][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2593'. [ 522.676580][T16277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2597'. [ 522.679937][T16271] wg1 speed is unknown, defaulting to 1000 [ 522.711978][T16271] lo speed is unknown, defaulting to 1000 [ 522.778768][T16279] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 522.820147][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2599'. [ 523.025114][T16287] netlink: 'syz.4.2600': attribute type 4 has an invalid length. [ 523.093174][T16290] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2600'. [ 523.278381][T16290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2600'. [ 524.636966][T16356] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2616'. [ 524.929667][T16375] syzkaller1: entered promiscuous mode [ 524.951163][T16375] syzkaller1: entered allmulticast mode [ 525.071339][T16379] xfrm0 speed is unknown, defaulting to 1000 [ 525.080787][T16379] xfrm0 speed is unknown, defaulting to 1000 [ 525.089088][T16379] xfrm0 speed is unknown, defaulting to 1000 [ 525.288579][T16384] netlink: 'syz.4.2623': attribute type 1 has an invalid length. [ 525.373786][T16379] infiniband syz2: set active [ 525.398236][T16379] infiniband syz2: added xfrm0 [ 525.411431][ T6949] xfrm0 speed is unknown, defaulting to 1000 [ 525.414814][T16388] bond5: entered promiscuous mode [ 525.425814][T16388] bond5: entered allmulticast mode [ 525.432389][T16388] 8021q: adding VLAN 0 to HW filter on device bond5 [ 525.473680][T16384] 8021q: adding VLAN 0 to HW filter on device bond6 [ 525.486750][T16384] bond6: entered promiscuous mode [ 525.492637][T16384] bond6: entered allmulticast mode [ 525.499118][T16384] bond5: (slave bond6): Enslaving as a backup interface with a down link [ 525.544799][T16379] RDS/IB: syz2: added [ 525.549981][T16379] smc: adding ib device syz2 with port count 1 [ 525.570759][T16379] smc: ib device syz2 port 1 has no pnetid [ 525.586275][ T6949] xfrm0 speed is unknown, defaulting to 1000 [ 525.606225][T16379] xfrm0 speed is unknown, defaulting to 1000 [ 525.948840][ T30] audit: type=1804 audit(1765759650.539:12): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2627" name="/newroot/538/memory.events" dev="tmpfs" ino=2797 res=1 errno=0 [ 526.168357][T16418] xt_TCPMSS: Only works on TCP SYN packets [ 526.257034][T16379] xfrm0 speed is unknown, defaulting to 1000 [ 526.329817][T16422] syzkaller1: entered promiscuous mode [ 526.341826][T16422] syzkaller1: entered allmulticast mode [ 526.784190][T16379] xfrm0 speed is unknown, defaulting to 1000 [ 527.363541][T16456] wg1 speed is unknown, defaulting to 1000 [ 527.398772][T16456] lo speed is unknown, defaulting to 1000 [ 527.434271][T16456] xfrm0 speed is unknown, defaulting to 1000 [ 527.526816][T16463] netlink: zone id is out of range [ 527.543105][T16463] netlink: zone id is out of range [ 527.556341][T16463] netlink: zone id is out of range [ 527.570252][T16463] netlink: zone id is out of range [ 527.590070][T16463] netlink: get zone limit has 4 unknown bytes [ 527.680190][T16468] tipc: Enabled bearer , priority 0 [ 527.701184][T16468] syzkaller0: entered promiscuous mode [ 527.715798][T16468] syzkaller0: entered allmulticast mode [ 527.741239][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 527.818129][T16379] xfrm0 speed is unknown, defaulting to 1000 [ 527.836782][T16473] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 527.991156][T16468] tipc: Resetting bearer [ 528.001816][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2641'. [ 528.020199][T16467] tipc: Resetting bearer [ 528.084579][T16467] tipc: Disabling bearer [ 528.435956][T16379] xfrm0 speed is unknown, defaulting to 1000 [ 528.448716][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2648'. [ 528.515423][T16507] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2648'. [ 528.545400][T16509] netlink: 'syz.1.2649': attribute type 8 has an invalid length. [ 528.606818][T16510] netlink: 'syz.1.2649': attribute type 8 has an invalid length. [ 528.773431][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2650'. [ 529.361643][T16538] netlink: 'syz.2.2657': attribute type 21 has an invalid length. [ 529.387043][T16538] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2657'. [ 529.410340][T16538] netlink: 'syz.2.2657': attribute type 5 has an invalid length. [ 529.419563][T16538] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2657'. [ 529.429951][T16539] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2657'. [ 529.616822][T16549] 0ªî{X¹¦: left allmulticast mode [ 529.646471][T16549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.788737][T16554] wg1 speed is unknown, defaulting to 1000 [ 529.796610][T16554] lo speed is unknown, defaulting to 1000 [ 529.810815][T16554] xfrm0 speed is unknown, defaulting to 1000 [ 529.903931][T16560] netlink: 'syz.2.2662': attribute type 1 has an invalid length. [ 529.915543][T16564] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2663'. [ 529.968480][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2662'. [ 530.368425][T16576] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 530.468018][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.902846][T16599] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 530.974309][T16600] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 531.355175][T16629] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 531.373994][T16627] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 531.737950][T16639] wg1 speed is unknown, defaulting to 1000 [ 531.747246][T16639] lo speed is unknown, defaulting to 1000 [ 531.763492][T16639] xfrm0 speed is unknown, defaulting to 1000 [ 532.069594][T16646] tipc: Enabled bearer , priority 0 [ 532.088749][T16646] syzkaller0: entered promiscuous mode [ 532.094702][T16646] syzkaller0: entered allmulticast mode [ 532.163791][T16646] tipc: Resetting bearer [ 532.208389][T16645] tipc: Resetting bearer [ 532.254085][T16645] tipc: Disabling bearer [ 533.389827][T16669] netlink: 'syz.3.2691': attribute type 2 has an invalid length. [ 535.044284][T16557] Set syz1 is full, maxelem 65536 reached [ 535.589076][T16722] netlink: 'syz.4.2705': attribute type 8 has an invalid length. [ 535.861753][T16728] wg1 speed is unknown, defaulting to 1000 [ 535.878063][T16728] lo speed is unknown, defaulting to 1000 [ 535.899160][T16728] xfrm0 speed is unknown, defaulting to 1000 [ 536.193320][T16753] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 536.513736][T16760] netlink: 'syz.1.2716': attribute type 15 has an invalid length. [ 536.595070][T16760] syzkaller1: entered promiscuous mode [ 536.600823][T16760] syzkaller1: entered allmulticast mode [ 536.773280][T16762] __nla_validate_parse: 4 callbacks suppressed [ 536.773302][T16762] netlink: 63 bytes leftover after parsing attributes in process `syz.0.2717'. [ 536.811018][T16763] netlink: 63 bytes leftover after parsing attributes in process `syz.0.2717'. [ 536.883351][T16762] dvmrp0: entered allmulticast mode [ 537.038917][T16768] wg1 speed is unknown, defaulting to 1000 [ 537.058976][T16768] lo speed is unknown, defaulting to 1000 [ 537.077120][T16768] xfrm0 speed is unknown, defaulting to 1000 [ 537.522045][T16797] tipc: Enabled bearer , priority 0 [ 537.552775][T16797] syzkaller0: entered promiscuous mode [ 537.578130][T16797] syzkaller0: entered allmulticast mode [ 537.643341][T16797] tipc: Resetting bearer [ 537.698214][T16803] tipc: Enabling of bearer rejected, failed to enable media [ 537.718270][T16796] tipc: Resetting bearer [ 537.761072][T16796] tipc: Disabling bearer [ 537.783005][T16804] tipc: Enabling of bearer rejected, failed to enable media [ 538.022715][T16811] x_tables: duplicate underflow at hook 1 [ 538.125518][T16816] dummy0: entered promiscuous mode [ 538.134888][T16816] macsec1: entered promiscuous mode [ 538.149153][T16816] macsec1: entered allmulticast mode [ 538.154746][T16816] dummy0: entered allmulticast mode [ 538.169544][T16816] dummy0: left allmulticast mode [ 538.174899][T16816] dummy0: left promiscuous mode [ 538.498162][T16833] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2736'. [ 538.531251][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 538.763567][T16842] netlink: 'syz.2.2738': attribute type 6 has an invalid length. [ 538.774526][T16842] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2738'. [ 538.974025][T16842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2738'. [ 539.400344][T16856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2741'. [ 539.421136][T16855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2741'. [ 539.623746][T16868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.633611][T16866] wg1 speed is unknown, defaulting to 1000 [ 539.671472][T16866] lo speed is unknown, defaulting to 1000 [ 539.690967][T16866] xfrm0 speed is unknown, defaulting to 1000 [ 539.791301][T16877] tipc: Enabled bearer , priority 0 [ 539.916793][T16877] syzkaller0: entered promiscuous mode [ 539.941119][T16877] syzkaller0: entered allmulticast mode [ 539.954944][T16877] tipc: Resetting bearer [ 539.978590][T16876] tipc: Resetting bearer [ 541.682167][T16876] tipc: Disabling bearer [ 541.706642][T16884] tipc: Enabling of bearer rejected, failed to enable media [ 541.726538][ T7509] tipc: Node number set to 730950031 [ 541.864429][T16906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.258502][T16914] syzkaller1: entered promiscuous mode [ 542.264031][T16914] syzkaller1: entered allmulticast mode [ 542.333845][T16920] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2755'. [ 542.414275][T16923] IPVS: set_ctl: invalid protocol: 47 172.20.20.12:20000 [ 542.485702][ T6151] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.520153][T16928] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2754'. [ 542.651198][ T1097] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.701950][ T1097] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.741742][ T1097] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.881338][T16936] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2758'. [ 542.925423][T16938] IPVS: Error connecting to the multicast addr [ 542.951087][T16938] IPVS: Error connecting to the multicast addr [ 543.063987][T16947] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2763'. [ 543.073545][T16947] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 543.074314][T16945] netlink: 'syz.2.2762': attribute type 1 has an invalid length. [ 543.088194][T16945] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2762'. [ 543.089818][T16947] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 543.097170][T16945] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2762'. [ 543.097190][T16945] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2762'. [ 543.151607][T16945] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 543.521317][T16968] IPVS: Scheduler module ip_vs_sip not found [ 543.664411][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 545.668668][T17027] Bluetooth: MGMT ver 1.23 [ 545.705088][T17025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.721664][T17025] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 545.880185][T17037] openvswitch: netlink: Message has 8 unknown bytes. [ 545.889551][T17038] openvswitch: netlink: Message has 8 unknown bytes. [ 546.207618][T17043] 0ªî{X¹¦: entered promiscuous mode [ 547.086031][T17071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2798'. [ 547.097727][T17071] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 547.224884][T17079] syzkaller0: entered promiscuous mode [ 547.231359][T17079] syzkaller0: entered allmulticast mode [ 547.955613][T17110] bond10: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 547.977588][T17110] bond10 (unregistering): Released all slaves [ 548.269018][T17140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2811'. [ 548.340552][T17146] netlink: 'syz.0.2815': attribute type 1 has an invalid length. [ 548.340887][T17149] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2811'. [ 548.381480][T17145] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2813'. [ 548.430313][T17146] 8021q: adding VLAN 0 to HW filter on device bond6 [ 548.630366][T17166] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2819'. [ 548.857263][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2824'. [ 549.049595][T17192] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2826'. [ 549.331774][T17208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2830'. [ 549.362513][T17208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 549.369828][T17208] IPv6: NLM_F_CREATE should be set when creating new route [ 549.619886][T17222] netlink: 7076 bytes leftover after parsing attributes in process `syz.2.2833'. [ 549.629623][T17222] openvswitch: netlink: Flow key attr not present in new flow. [ 549.699392][T17224] netlink: 'syz.0.2834': attribute type 39 has an invalid length. [ 549.757476][T17230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2836'. [ 549.803910][T17226] wg1 speed is unknown, defaulting to 1000 [ 549.834039][T17226] lo speed is unknown, defaulting to 1000 [ 549.847647][T17226] xfrm0 speed is unknown, defaulting to 1000 [ 550.221993][T17248] tipc: Failed to remove unknown binding: 66,1,1/2718524169:2349281850/2349281852 [ 550.261976][T17248] tipc: Failed to remove unknown binding: 66,1,1/2718524169:2349281850/2349281852 [ 550.298596][T17248] tipc: Failed to remove unknown binding: 66,1,1/2718524169:2349281850/2349281852 [ 550.506898][T17254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.607352][T17258] pim6reg: entered allmulticast mode [ 550.678861][T17258] pim6reg: left allmulticast mode [ 550.687121][T17263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2844'. [ 551.110054][T17281] netlink: 'syz.2.2847': attribute type 16 has an invalid length. [ 551.136992][T17292] netlink: 'syz.2.2847': attribute type 16 has an invalid length. [ 551.156845][T17289] Cannot find set identified by id 0 to match [ 551.296389][T17280] team0 (unregistering): Port device team_slave_0 removed [ 551.315359][T17280] team0 (unregistering): Port device team_slave_1 removed [ 551.345409][T17280] team0 (unregistering): Port device syz_tun removed [ 551.363501][T17280] team0 (unregistering): Port device geneve0 removed [ 551.401472][T17286] macvtap1: entered promiscuous mode [ 551.406924][T17286] veth1: entered promiscuous mode [ 551.416049][T17286] macvtap1: entered allmulticast mode [ 551.423481][T17286] veth1: entered allmulticast mode [ 551.494786][T17285] veth1: left allmulticast mode [ 551.500481][T17285] veth1: left promiscuous mode [ 552.404048][T17333] syzkaller0: entered promiscuous mode [ 552.423010][T17333] syzkaller0: entered allmulticast mode [ 552.617354][T17341] netlink: 'syz.4.2864': attribute type 10 has an invalid length. [ 552.658286][T17342] netlink: 'syz.4.2864': attribute type 10 has an invalid length. [ 552.743596][T17342] team0: Port device dummy0 added [ 552.778797][T17340] wg1 speed is unknown, defaulting to 1000 [ 552.851490][T17340] lo speed is unknown, defaulting to 1000 [ 552.867665][T17340] xfrm0 speed is unknown, defaulting to 1000 [ 553.155326][T17351] wg1 speed is unknown, defaulting to 1000 [ 553.210578][T17351] lo speed is unknown, defaulting to 1000 [ 553.471993][T17371] syzkaller1: entered promiscuous mode [ 553.508133][T17371] syzkaller1: entered allmulticast mode [ 553.735639][T17351] xfrm0 speed is unknown, defaulting to 1000 [ 553.947651][T17394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.137117][T17407] __nla_validate_parse: 12 callbacks suppressed [ 554.137136][T17407] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2880'. [ 554.341990][T17412] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2882'. [ 554.963143][ T2968] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xe6 [ 555.436778][T17462] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2895'. [ 555.451313][T17462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2895'. [ 555.875167][T17481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 555.884425][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2902'. [ 555.893480][T17481] netlink: 'syz.2.2902': attribute type 7 has an invalid length. [ 555.900053][T17475] geneve3: entered promiscuous mode [ 555.970131][ T6932] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 555.981736][ T6932] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 556.029364][ T6932] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 556.040406][ T6932] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 556.185448][T17497] bond0: (slave bridge0): Releasing backup interface [ 556.235713][T17497] bridge0: left promiscuous mode [ 556.406019][T17497] bridge_slave_0: left allmulticast mode [ 556.438417][T17497] bridge_slave_0: left promiscuous mode [ 556.449920][T17497] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.775316][T17497] bridge_slave_1: left allmulticast mode [ 556.783545][T17497] bridge_slave_1: left promiscuous mode [ 556.800607][T17497] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.830010][T17497] bond0: (slave 30): Releasing backup interface [ 556.837674][T17497] : left promiscuous mode [ 556.851789][T17497] bond0: (slave bond_slave_1): Releasing backup interface [ 556.871331][T17497] bond_slave_1: left promiscuous mode [ 556.892436][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 556.893050][T17497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.907627][T17497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.917136][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 556.918395][T17497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.933739][T17497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.933736][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 556.950892][T17497] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 556.959519][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 556.976057][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 557.021139][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 557.038349][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 557.046106][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 557.062230][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 557.071295][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 557.089296][ T7509] xfrm0 speed is unknown, defaulting to 1000 [ 557.175666][T17528] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 557.194170][T17524] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2914'. [ 557.203837][T17516] wg1 speed is unknown, defaulting to 1000 [ 557.223449][T17528] bond7: entered promiscuous mode [ 557.229957][T17528] 8021q: adding VLAN 0 to HW filter on device bond7 [ 557.243303][T17516] lo speed is unknown, defaulting to 1000 [ 557.304097][T17531] 8021q: adding VLAN 0 to HW filter on device bond8 [ 557.315023][T17531] bond7: (slave bond8): making interface the new active one [ 557.322565][T17531] bond8: entered promiscuous mode [ 557.328613][T17531] bond7: (slave bond8): Enslaving as an active interface with an up link [ 557.337712][T17516] xfrm0 speed is unknown, defaulting to 1000 [ 557.362618][T17529] pim6reg1: entered promiscuous mode [ 557.382036][T17524] xt_connbytes: Forcing CT accounting to be enabled [ 557.406046][T17529] pim6reg1: entered allmulticast mode [ 557.466491][T17518] wg1 speed is unknown, defaulting to 1000 [ 557.492582][T17518] lo speed is unknown, defaulting to 1000 [ 557.659516][T17546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.692370][T17518] xfrm0 speed is unknown, defaulting to 1000 [ 557.711959][T17545] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 557.726545][T17546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2920'. [ 557.909501][T17552] syzkaller0: entered promiscuous mode [ 557.915501][T17552] syzkaller0: entered allmulticast mode [ 557.963962][T17552] netlink: 'syz.1.2921': attribute type 16 has an invalid length. [ 557.972332][T17552] netlink: 'syz.1.2921': attribute type 17 has an invalid length. [ 558.079435][T17552] 1ªî{X¹¦: left allmulticast mode [ 558.095249][T17552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.109136][ T5848] Bluetooth: hci4: command tx timeout [ 559.259888][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2927'. [ 560.276160][T17518] chnl_net:caif_netlink_parms(): no params data found [ 560.464889][T17604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'. [ 560.498561][T17518] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.508106][T17518] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.515459][T17518] bridge_slave_0: entered allmulticast mode [ 560.524137][T17518] bridge_slave_0: entered promiscuous mode [ 560.546649][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2936'. [ 560.549047][T17518] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.574759][T17518] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.584994][T17518] bridge_slave_1: entered allmulticast mode [ 560.597275][T17518] bridge_slave_1: entered promiscuous mode [ 560.600147][T17617] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2936'. [ 560.636166][T17607] netlink: 'syz.2.2934': attribute type 10 has an invalid length. [ 560.647268][T17607] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2934'. [ 560.785747][T17518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.922459][T17518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.974946][T17518] team0: Port device team_slave_0 added [ 560.995571][T17518] team0: Port device team_slave_1 added [ 561.143289][T17518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.153595][T17518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.180561][T17518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.197710][T17637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2939'. [ 561.207242][ T5848] Bluetooth: hci4: command tx timeout [ 561.214506][T17518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.267930][T17518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.323163][T17518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.504275][T17518] hsr_slave_0: entered promiscuous mode [ 561.530522][T17518] hsr_slave_1: entered promiscuous mode [ 561.537113][T17518] debugfs: 'hsr0' already exists in 'hsr' [ 561.548839][T17518] Cannot create hsr debugfs directory [ 561.554493][T17643] wg1 speed is unknown, defaulting to 1000 [ 561.598421][T17643] lo speed is unknown, defaulting to 1000 [ 561.631119][T17643] xfrm0 speed is unknown, defaulting to 1000 [ 561.815108][T17665] netlink: 'syz.2.2947': attribute type 1 has an invalid length. [ 561.827978][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 561.839399][T17665] netlink: 'syz.2.2947': attribute type 2 has an invalid length. [ 561.933707][T17518] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 561.955634][T17518] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 562.114645][T17672] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.133868][T17518] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 562.154695][T17518] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 562.178762][T17677] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2951'. [ 562.233204][T17518] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 562.243563][T17518] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 562.265871][T17680] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2953'. [ 562.276044][T17680] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2953'. [ 562.286218][T17680] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2953'. [ 562.343301][T17518] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 562.357265][T17518] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 562.737133][T17518] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 562.823284][T17518] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 562.846608][T17518] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 562.876763][T17518] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 563.057488][T17688] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 563.113303][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.244332][T17709] bond7: entered allmulticast mode [ 563.268058][ T5848] Bluetooth: hci4: command tx timeout [ 563.362675][T17518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.404116][T17715] syzkaller0: entered promiscuous mode [ 563.410515][T17715] syzkaller0: entered allmulticast mode [ 563.446381][T17721] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 563.463121][T17721] tipc: Enabled bearer , priority 10 [ 563.516903][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.535706][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.554327][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.578262][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 563.579621][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.673439][T17518] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.678928][T17735] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 563.678947][T17735] sctp: [Deprecated]: syz.0.2968 (pid 17735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.678947][T17735] Use struct sctp_sack_info instead [ 563.705028][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.712257][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.720125][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 563.781712][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.788954][ T3426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.857947][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 563.998951][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 564.138109][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 564.195198][T17759] geneve4: entered promiscuous mode [ 564.277942][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 564.288898][T17765] wg1 speed is unknown, defaulting to 1000 [ 564.321608][T17765] lo speed is unknown, defaulting to 1000 [ 564.345860][T17518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.383102][T17765] xfrm0 speed is unknown, defaulting to 1000 [ 564.417954][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 564.574662][ T7509] tipc: Node number set to 788037895 [ 564.620568][T17518] veth0_vlan: entered promiscuous mode [ 564.651735][T17518] veth1_vlan: entered promiscuous mode [ 564.688576][T17775] __nla_validate_parse: 7 callbacks suppressed [ 564.688595][T17775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2976'. [ 564.704199][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 564.715350][T17518] veth0_macvtap: entered promiscuous mode [ 564.727372][T17518] veth1_macvtap: entered promiscuous mode [ 564.911116][T17780] bond0: (slave rose0): Enslaving as an active interface with an up link [ 564.967866][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 564.970262][T17518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.043698][T17518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.126964][ T2968] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.142868][ T2968] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.218611][ T2968] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.252689][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2979'. [ 565.266372][ T2968] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.348205][ T5848] Bluetooth: hci4: command tx timeout [ 565.540333][T17790] wg1 speed is unknown, defaulting to 1000 [ 565.579877][T17794] wg1 speed is unknown, defaulting to 1000 [ 565.593175][T17790] lo speed is unknown, defaulting to 1000 [ 565.699019][T17790] xfrm0 speed is unknown, defaulting to 1000 [ 565.863425][ T3426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.882269][ T3426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.967217][ T8940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.995614][ T8940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.144423][T17820] erspan1: entered allmulticast mode [ 566.285973][T17830] IPVS: set_ctl: invalid protocol: 8 172.20.20.24:0 [ 566.400236][T17794] lo speed is unknown, defaulting to 1000 [ 566.416426][T17825] wg1 speed is unknown, defaulting to 1000 [ 566.748109][T17794] xfrm0 speed is unknown, defaulting to 1000 [ 566.772809][T17825] lo speed is unknown, defaulting to 1000 [ 566.978019][T17857] netlink: 'syz.0.2993': attribute type 2 has an invalid length. [ 566.992471][T17857] netlink: 'syz.0.2993': attribute type 1 has an invalid length. [ 567.002369][T17857] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2993'. [ 567.011957][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2993'. [ 567.061184][T17865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2995'. [ 567.115963][T17870] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2994'. [ 567.125067][T17859] tipc: Bearer : already 2 bearers with priority 10 [ 567.127896][T17870] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2994'. [ 567.134936][T17859] tipc: Bearer : trying with adjusted priority [ 567.155337][T17859] tipc: Enabled bearer , priority 9 [ 567.362207][T17825] xfrm0 speed is unknown, defaulting to 1000 [ 567.461567][T17880] netlink: 'syz.0.2998': attribute type 1 has an invalid length. [ 567.603638][T17880] 8021q: adding VLAN 0 to HW filter on device bond9 [ 567.653672][T17885] veth5: entered promiscuous mode [ 567.664363][T17887] erspan0: entered allmulticast mode [ 567.716882][T17864] wg1 speed is unknown, defaulting to 1000 [ 567.809612][T17864] lo speed is unknown, defaulting to 1000 [ 567.844623][T17864] xfrm0 speed is unknown, defaulting to 1000 [ 568.067033][T17898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3001'. [ 568.109439][T17899] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 568.426167][T17896] wg1 speed is unknown, defaulting to 1000 [ 568.468080][ C1] net_ratelimit: 10 callbacks suppressed [ 568.468101][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 568.565241][T17896] lo speed is unknown, defaulting to 1000 [ 568.627889][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 568.696848][T17896] xfrm0 speed is unknown, defaulting to 1000 [ 569.117854][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 569.508109][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 569.668140][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 570.147861][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 570.189518][T17928] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3007'. [ 570.225954][T17928] block nbd0: reconnected socket [ 570.283592][ T5848] block nbd0: Receive control failed (result -32) [ 570.508948][T17935] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 570.538155][T17935] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 570.547950][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 570.555012][T17935] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 570.567521][T17935] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 570.580750][T17935] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 570.707873][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 570.822145][T17943] lo: Caught tx_queue_len zero misconfig [ 570.935571][T17932] wg1 speed is unknown, defaulting to 1000 [ 571.047393][T17932] lo speed is unknown, defaulting to 1000 [ 571.083702][T17948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3014'. [ 571.133676][T17950] netlink: 'syz.2.3013': attribute type 1 has an invalid length. [ 571.187855][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 571.266617][T17955] sctp: [Deprecated]: syz.2.3013 (pid 17955) Use of int in maxseg socket option. [ 571.266617][T17955] Use struct sctp_assoc_value instead [ 571.587908][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 572.178294][ T3485] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 572.192010][ T3485] bond0 (unregistering): Released all slaves [ 572.303544][ T3485] bond1 (unregistering): Released all slaves [ 572.415089][ T3485] bond2 (unregistering): Released all slaves [ 572.432112][T17932] xfrm0 speed is unknown, defaulting to 1000 [ 572.517236][T17950] 8021q: adding VLAN 0 to HW filter on device bond10 [ 572.574148][T17952] bond10: (slave geneve5): making interface the new active one [ 572.585432][T17952] bond10: (slave geneve5): Enslaving as an active interface with an up link [ 572.607607][T17961] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 572.628452][T17935] Bluetooth: hci5: command tx timeout [ 572.659727][ T3485] : left promiscuous mode [ 572.932710][ T3485] tipc: Left network mode [ 573.186919][T17980] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3020'. [ 573.218326][T17980] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3020'. [ 573.362260][T17932] chnl_net:caif_netlink_parms(): no params data found [ 573.667892][ C1] net_ratelimit: 10 callbacks suppressed [ 573.667916][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 573.752805][T18008] geneve6: entered promiscuous mode [ 573.783937][T18010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3027'. [ 573.828114][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 574.123169][ T3485] hsr_slave_0: left promiscuous mode [ 574.142045][ T3485] hsr_slave_1: left promiscuous mode [ 574.161104][T18024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3029'. [ 574.218538][ T3485] pimreg (unregistering): left allmulticast mode [ 574.308599][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 574.708088][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 574.715262][T17935] Bluetooth: hci5: command tx timeout [ 574.867942][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 575.351679][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 575.491259][T18026] veth5: entered promiscuous mode [ 575.641401][T17932] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.658449][T17932] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.695340][T18060] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3035'. [ 575.702240][T17932] bridge_slave_0: entered allmulticast mode [ 575.720851][T17932] bridge_slave_0: entered promiscuous mode [ 575.745364][T17932] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.752726][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 575.760493][T17932] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.771318][T17932] bridge_slave_1: entered allmulticast mode [ 575.780397][T17932] bridge_slave_1: entered promiscuous mode [ 575.908579][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 575.911666][T17932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.936441][T17932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.126708][T18082] wg1 speed is unknown, defaulting to 1000 [ 576.129940][ T3485] IPVS: stop unused estimator thread 0... [ 576.135909][T17932] team0: Port device team_slave_0 added [ 576.158891][T18082] lo speed is unknown, defaulting to 1000 [ 576.159571][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3042'. [ 576.166672][T18082] xfrm0 speed is unknown, defaulting to 1000 [ 576.184600][T17932] team0: Port device team_slave_1 added [ 576.297977][T17932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.311358][T18091] xt_TPROXY: Can be used only with -p tcp or -p udp [ 576.328041][T17932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.367981][T17932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.388239][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 576.397408][T17932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.405234][T17932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.455367][T17932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.479370][T18095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'. [ 576.732590][T17932] hsr_slave_0: entered promiscuous mode [ 576.747859][T17932] hsr_slave_1: entered promiscuous mode [ 576.761582][T17932] debugfs: 'hsr0' already exists in 'hsr' [ 576.777536][T17932] Cannot create hsr debugfs directory [ 576.788046][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 576.797549][T17935] Bluetooth: hci5: command tx timeout [ 576.865127][T18110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3049'. [ 576.994818][T18111] bond10: option resend_igmp: invalid value (2878) [ 577.018241][T18111] bond10: option resend_igmp: allowed values 0 - 255 [ 577.028879][T18111] bond10 (unregistering): Released all slaves [ 577.179577][T18119] syzkaller0: entered promiscuous mode [ 577.187017][T18119] syzkaller0: entered allmulticast mode [ 577.647053][T17932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 39017 - 0 [ 577.664933][T18137] Unsupported ieee802154 address type: 0 [ 577.741751][T17932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 39017 - 0 [ 577.955850][T17932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 39017 - 0 [ 578.014298][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'. [ 578.287684][T17932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 39017 - 0 [ 578.341407][T18168] batadv1: entered promiscuous mode [ 578.359748][T18168] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 578.427552][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3064'. [ 578.580108][T18171] wg1 speed is unknown, defaulting to 1000 [ 578.619671][T18171] lo speed is unknown, defaulting to 1000 [ 578.635812][T17932] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 578.667399][T18171] xfrm0 speed is unknown, defaulting to 1000 [ 578.674670][T17932] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 578.702920][T17932] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 578.753911][T17932] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 578.867991][ C1] net_ratelimit: 5 callbacks suppressed [ 578.868014][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 578.881391][T17935] Bluetooth: hci5: command tx timeout [ 578.997675][T18197] wg1 speed is unknown, defaulting to 1000 [ 579.028050][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 579.030213][T18200] netlink: 'syz.1.3070': attribute type 13 has an invalid length. [ 579.037732][T18197] lo speed is unknown, defaulting to 1000 [ 579.508048][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 579.610418][T18200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.809374][T17809] lo speed is unknown, defaulting to 1000 [ 579.810876][T18197] xfrm0 speed is unknown, defaulting to 1000 [ 579.815348][T17809] syz1: Port: 1 Link DOWN [ 579.826552][T11485] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.866913][T11485] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.907981][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 579.933954][T18210] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 580.002545][T11485] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.026601][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3072'. [ 580.038720][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3072'. [ 580.050190][T18215] netlink: 'syz.0.3072': attribute type 11 has an invalid length. [ 580.067925][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 580.083889][T11485] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.096874][T18210] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3073'. [ 580.191338][T17932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.235232][T17932] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.363254][ T8927] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.370794][ T8927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.512846][T18219] syzkaller0: entered promiscuous mode [ 580.519298][T18219] syzkaller0: entered allmulticast mode [ 580.548270][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 580.620244][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.627526][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.948005][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 581.117917][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 581.294567][T18239] No such timeout policy "syz1" [ 581.597912][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 581.987882][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 583.134742][T17932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.191386][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 583.239953][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 583.436651][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3085'. [ 583.495466][T18287] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3089'. [ 584.067933][ C1] net_ratelimit: 5 callbacks suppressed [ 584.067955][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 584.228069][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 584.352291][T17932] veth0_vlan: entered promiscuous mode [ 584.391232][T17932] veth1_vlan: entered promiscuous mode [ 584.493430][T17932] veth0_macvtap: entered promiscuous mode [ 584.525567][T17932] veth1_macvtap: entered promiscuous mode [ 584.574941][T17932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.604404][T17932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.635361][T11485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.656615][T11485] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.694330][T11485] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.707861][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 584.722947][T11485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.825688][ T6151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.857845][ T6151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.962676][T11484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.979581][T11484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.108004][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 585.268070][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 585.319507][T18329] x_tables: duplicate underflow at hook 2 [ 585.747927][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 586.148008][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 586.307943][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 586.381100][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.392180][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.406945][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 586.419665][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 586.429606][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 586.495624][T18342] wg1 speed is unknown, defaulting to 1000 [ 586.496993][T18340] netlink: 'syz.2.3104': attribute type 10 has an invalid length. [ 586.505198][T18342] lo speed is unknown, defaulting to 1000 [ 586.522508][T18342] xfrm0 speed is unknown, defaulting to 1000 [ 586.787969][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 586.929932][T18360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 587.118626][T18362] veth1_to_bond: entered allmulticast mode [ 587.142124][T18362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3109'. [ 587.188058][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 587.237523][T18362] bond0: (slave bond_slave_1): Releasing backup interface [ 587.324691][T18362] veth1_to_bond (unregistering): left allmulticast mode [ 587.411558][T18375] netlink: 'syz.2.3113': attribute type 15 has an invalid length. [ 587.572032][T18379] Cannot find set identified by id 65534 to match [ 587.814178][T18342] chnl_net:caif_netlink_parms(): no params data found [ 587.854366][T18382] syzkaller0: entered promiscuous mode [ 587.860574][T18382] syzkaller0: entered allmulticast mode [ 588.326832][T18407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3123'. [ 588.351303][T18342] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.351727][T18401] netlink: 'syz.0.3121': attribute type 1 has an invalid length. [ 588.378016][T18342] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.389526][T18342] bridge_slave_0: entered allmulticast mode [ 588.405461][T18342] bridge_slave_0: entered promiscuous mode [ 588.429104][T18342] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.446662][T18342] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.467014][T18342] bridge_slave_1: entered allmulticast mode [ 588.473629][ T5848] Bluetooth: hci0: command tx timeout [ 588.488521][T18342] bridge_slave_1: entered promiscuous mode [ 588.718480][T18424] macvtap1: entered promiscuous mode [ 588.725272][T18424] syz_tun: entered promiscuous mode [ 588.739807][T18424] macvtap1: entered allmulticast mode [ 588.745242][T18424] syz_tun: entered allmulticast mode [ 588.787170][T18424] syz_tun: left allmulticast mode [ 588.802019][T18424] syz_tun: left promiscuous mode [ 588.884193][T18342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.941338][T18342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.053486][T18342] team0: Port device team_slave_0 added [ 589.065832][T18342] team0: Port device team_slave_1 added [ 589.147357][T18442] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 589.189240][T18442] bond1 (unregistering): Released all slaves [ 589.277990][ C1] net_ratelimit: 5 callbacks suppressed [ 589.278010][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 589.294772][T18455] pimreg3: entered allmulticast mode [ 589.328959][T18342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.341718][T18342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.378543][T18342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.393256][T18342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.402191][T18342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.428926][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 589.437622][T18342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.555481][T18342] hsr_slave_0: entered promiscuous mode [ 589.567012][T18342] hsr_slave_1: entered promiscuous mode [ 589.583477][T18342] debugfs: 'hsr0' already exists in 'hsr' [ 589.602652][T18342] Cannot create hsr debugfs directory [ 589.651114][T18466] netlink: 'syz.0.3138': attribute type 9 has an invalid length. [ 589.659843][T18466] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3138'. [ 589.800464][T18470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3139'. [ 589.908181][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 589.981453][T18473] netlink: 'syz.2.3137': attribute type 11 has an invalid length. [ 590.018209][T18473] netlink: 'syz.2.3137': attribute type 11 has an invalid length. [ 590.026355][T18473] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3137'. [ 590.194604][T18482] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 0, id = 0 [ 590.308045][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 590.334177][T18462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.468012][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 590.536173][T18490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'. [ 590.548099][ T5848] Bluetooth: hci0: command tx timeout [ 590.677572][T18497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.722940][T18501] netlink: 'syz.3.3148': attribute type 10 has an invalid length. [ 590.732435][T18501] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3148'. [ 590.750856][T18501] dummy0: entered promiscuous mode [ 590.757525][T18501] bridge0: port 3(dummy0) entered blocking state [ 590.767050][T18501] bridge0: port 3(dummy0) entered disabled state [ 590.771020][T18495] delete_channel: no stack [ 590.774901][T18501] dummy0: entered allmulticast mode [ 590.793121][T18501] bridge0: port 3(dummy0) entered blocking state [ 590.799830][T18501] bridge0: port 3(dummy0) entered forwarding state [ 590.947864][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 590.994446][T18501] wg1 speed is unknown, defaulting to 1000 [ 591.023996][T18501] lo speed is unknown, defaulting to 1000 [ 591.047653][T18501] xfrm0 speed is unknown, defaulting to 1000 [ 591.114672][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3148'. [ 591.347984][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 591.484672][T18342] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 591.507960][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 591.553416][T18342] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 591.613755][T18342] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 591.710352][T18342] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 591.726399][T18522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3152'. [ 591.956127][T18342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.966874][T18522] siw: device registration error -23 [ 591.987979][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 592.036432][T18342] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.100367][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.107863][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.161701][T18540] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3154'. [ 592.176363][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.183609][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.317530][T18539] wg1 speed is unknown, defaulting to 1000 [ 592.353547][T18539] lo speed is unknown, defaulting to 1000 [ 592.393464][T18539] xfrm0 speed is unknown, defaulting to 1000 [ 592.400519][T18543] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3155'. [ 592.628084][ T5848] Bluetooth: hci0: command tx timeout [ 592.661782][T18342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.728680][T18342] veth0_vlan: entered promiscuous mode [ 592.744712][T18342] veth1_vlan: entered promiscuous mode [ 592.797261][T18342] veth0_macvtap: entered promiscuous mode [ 592.904183][T18342] veth1_macvtap: entered promiscuous mode [ 592.950246][T18342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.971853][T18342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.007346][T11484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.092277][T18554] netlink: 'syz.2.3156': attribute type 1 has an invalid length. [ 593.118401][T11484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.127541][T11484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.176154][T11484] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.583990][ T6151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.600039][ T6151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.789879][ T8941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.806537][ T8941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.416656][T18586] __nla_validate_parse: 3 callbacks suppressed [ 594.416678][T18586] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3166'. [ 594.469285][ C1] net_ratelimit: 6 callbacks suppressed [ 594.469306][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 594.485383][T18591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3168'. [ 594.497081][T18589] vxcan3: entered allmulticast mode [ 594.627886][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 594.710317][ T5848] Bluetooth: hci0: command tx timeout [ 595.108970][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 595.440406][T17935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 595.451449][T17935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 595.459870][T17935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 595.469054][T17935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 595.478666][T17935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 595.507964][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 595.667853][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 595.697189][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 595.730508][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 595.764071][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 595.795409][T18605] wg1 speed is unknown, defaulting to 1000 [ 595.830217][T18605] lo speed is unknown, defaulting to 1000 [ 595.861876][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 595.890214][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 595.900837][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 595.923168][T18605] xfrm0 speed is unknown, defaulting to 1000 [ 595.975171][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 595.994927][T18624] Bluetooth: MGMT ver 1.23 [ 595.995141][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.027916][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 596.086595][T18622] wg1 speed is unknown, defaulting to 1000 [ 596.095805][T18622] lo speed is unknown, defaulting to 1000 [ 596.121463][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 596.132277][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.145280][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 596.262779][T18622] xfrm0 speed is unknown, defaulting to 1000 [ 596.383797][T18626] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3175'. [ 596.395187][T18626] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3175'. [ 596.456600][T18612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 596.548039][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 596.665329][ T12] macsec0: left allmulticast mode [ 596.671220][ T12] veth1_macvtap: left allmulticast mode [ 596.676993][ T12] macsec0: left promiscuous mode [ 596.683301][ T12] bridge0: port 3(macsec0) entered disabled state [ 596.707861][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 596.940359][ T12] bond8 (unregistering): (slave ip6erspan1): Releasing active interface [ 597.046733][ T3494] smc: removing ib device syz2 [ 597.410345][ T12] bond10 (unregistering): (slave geneve5): Releasing active interface [ 597.509479][T17935] Bluetooth: hci1: command tx timeout [ 597.755913][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 598.068086][T17935] Bluetooth: hci0: command 0x0c1a tx timeout [ 598.069669][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 598.671523][ T12] bond0 (unregistering): Released all slaves [ 598.740572][ T12] bond1 (unregistering): Released all slaves [ 598.787844][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 598.953309][ T12] bond2 (unregistering): Released all slaves [ 599.074096][ T12] bond3 (unregistering): Released all slaves [ 599.190804][ T12] bond4 (unregistering): (slave veth3): Releasing active interface [ 599.200635][ T12] bond4 (unregistering): Released all slaves [ 599.321917][ T12] bond5 (unregistering): Released all slaves [ 599.443805][ T12] bond6 (unregistering): Released all slaves [ 599.556940][ T12] bond7 (unregistering): (slave wireguard0): Releasing backup interface [ 599.565475][ T12] wireguard0: left promiscuous mode [ 599.572708][ T12] bond7 (unregistering): (slave wireguard1): Releasing backup interface [ 599.582475][ T12] bond7 (unregistering): Released all slaves [ 599.589659][ T5848] Bluetooth: hci1: command tx timeout [ 599.703541][ T12] bond8 (unregistering): Released all slaves [ 599.717814][ T12] bond9 (unregistering): Released all slaves [ 599.827972][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 599.846060][ T12] bond10 (unregistering): Released all slaves [ 599.907034][ T7514] xfrm0 speed is unknown, defaulting to 1000 [ 599.914702][ T7514] syz2: Port: 1 Link DOWN [ 600.077195][ T12] tipc: Disabling bearer [ 600.098606][ T12] tipc: Disabling bearer [ 600.123126][ T12] tipc: Disabling bearer [ 600.130590][ T12] tipc: Left network mode [ 600.316517][T18626] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 600.327847][T18626] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 600.422733][T18605] chnl_net:caif_netlink_parms(): no params data found [ 600.431609][T18626] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 600.437548][T18626] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 600.474355][T18642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3179'. [ 600.537148][T18626] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 600.549857][T18626] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 600.552049][T18644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3180'. [ 600.577011][T18644] netlink: 'syz.3.3180': attribute type 1 has an invalid length. [ 600.585198][T18644] netlink: 'syz.3.3180': attribute type 2 has an invalid length. [ 600.644747][T18626] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 600.657392][T18626] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 600.764880][T18648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3181'. [ 600.774098][T18648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3181'. [ 600.783549][T18605] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.791671][T18605] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.799140][T18605] bridge_slave_0: entered allmulticast mode [ 600.807351][T18605] bridge_slave_0: entered promiscuous mode [ 600.818933][T18648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3181'. [ 600.830002][T18648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3181'. [ 600.840922][T18605] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.858898][T18605] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.866413][T18605] bridge_slave_1: entered allmulticast mode [ 600.868014][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 600.874907][T18605] bridge_slave_1: entered promiscuous mode [ 600.944095][T18605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.957292][T18605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.995208][T18605] team0: Port device team_slave_0 added [ 601.008731][T18605] team0: Port device team_slave_1 added [ 601.045765][T18605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.053584][T18605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.081168][T18605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.094608][T18605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.101735][T18605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.129851][T18605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.181168][T18605] hsr_slave_0: entered promiscuous mode [ 601.188804][T18605] hsr_slave_1: entered promiscuous mode [ 601.195570][T18605] debugfs: 'hsr0' already exists in 'hsr' [ 601.201553][T18605] Cannot create hsr debugfs directory [ 601.907911][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 602.947884][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 603.987920][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 605.027912][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 606.067936][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 607.107944][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 608.147905][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 609.189836][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 610.227991][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 611.267904][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 612.307856][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 613.347870][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 614.387908][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 615.427887][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 616.467846][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 617.508612][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 618.547909][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 619.587894][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 620.627901][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 621.667925][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 622.707874][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 623.747886][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 624.551064][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.787900][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 625.828497][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 626.867903][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 627.907896][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 628.947888][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 629.987889][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 631.027891][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 632.067920][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 633.107887][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.148269][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 635.187899][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 636.227945][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 637.267892][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.307868][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 639.347885][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 640.387889][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 641.427927][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 642.467965][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 643.507892][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 644.547873][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 645.587879][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 646.627881][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 647.667873][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 648.707882][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 649.747890][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 650.787879][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 651.827882][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 652.867879][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 653.108432][ T7514] page_pool_release_retry() stalled pool shutdown: id 112, 1 inflight 60 sec [ 653.907896][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 654.947877][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.987879][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 657.027884][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 658.067884][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 659.108187][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.147875][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 661.187879][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 662.227902][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.267864][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 664.307888][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 665.347851][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 666.387872][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 667.427885][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 668.467872][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 669.507886][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 670.547851][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 671.587874][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 672.627884][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 673.667859][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.707857][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 675.749308][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 676.787947][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 677.827885][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 678.867866][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 679.907901][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 680.947872][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 681.987889][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.027880][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 684.067901][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 685.107872][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 685.991476][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.147857][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 687.187878][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 688.227865][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 689.267834][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 690.307858][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 691.347929][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.388254][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 693.427857][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 694.467867][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 695.507865][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 696.547858][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 697.587846][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 698.627861][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 699.667827][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 700.708003][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 701.747870][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 702.787838][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 703.827882][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 704.867849][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 705.907884][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 706.947865][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 707.987874][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 709.028007][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 710.067904][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 711.107855][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 712.147858][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 713.187887][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 713.428008][ T7517] page_pool_release_retry() stalled pool shutdown: id 112, 1 inflight 120 sec [ 714.227879][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 715.267862][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 716.307875][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 717.347850][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 718.387856][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 719.427853][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 720.467854][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 721.507847][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 722.547853][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 723.587840][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 724.627863][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 725.667954][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 726.707843][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 727.747854][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 728.787850][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 729.827859][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 730.867847][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 731.907832][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 732.947849][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 733.987969][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 735.027843][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 736.067898][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 737.107872][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 738.147819][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 739.187835][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 740.227839][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 741.267839][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 742.308211][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 743.347923][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 744.387838][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 745.427845][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 746.467833][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 747.430405][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.507854][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 748.547819][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 749.587849][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 750.627804][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 751.667863][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 752.707828][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 753.747899][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 754.787844][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 755.827955][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 756.388166][ T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 756.396200][ T31] Not tainted syzkaller #0 [ 756.401473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.410232][ T31] task:kworker/u8:0 state:D stack:21016 pid:12 tgid:12 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 756.422421][ T31] Workqueue: netns cleanup_net [ 756.427199][ T31] Call Trace: [ 756.430601][ T31] [ 756.433563][ T31] __schedule+0x14bc/0x5000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 756.438289][ T31] ? __pfx___schedule+0x10/0x10 [ 756.443168][ T31] ? schedule+0x91/0x360 [ 756.447445][ T31] schedule+0x165/0x360 [ 756.451833][ T31] schedule_preempt_disabled+0x13/0x30 [ 756.457432][ T31] __mutex_lock+0x7e6/0x1350 [ 756.462187][ T31] ? __mutex_lock+0x5bb/0x1350 [ 756.466997][ T31] ? rfkill_unregister+0xc8/0x220 [ 756.472453][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 756.477524][ T31] ? __pfx_device_del+0x10/0x10 [ 756.482570][ T31] rfkill_unregister+0xc8/0x220 [ 756.487546][ T31] wiphy_unregister+0x238/0xab0 [ 756.492768][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 756.499024][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 756.504431][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 756.509831][ T31] ? ieee80211_unregister_hw+0x144/0x2c0 [ 756.515507][ T31] ? kfree+0x1c0/0x660 [ 756.519722][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 756.525308][ T31] mac80211_hwsim_del_radio+0x275/0x460 [ 756.530957][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 756.537158][ T31] hwsim_exit_net+0xef4/0xfb0 [ 756.542129][ T31] ? hwsim_exit_net+0x333/0xfb0 [ 756.547019][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 756.552373][ T31] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 756.558393][ T31] ops_undo_list+0x49a/0x990 [ 756.563251][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 756.568520][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 756.573930][ T31] cleanup_net+0x4d8/0x7a0 [ 756.578516][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 756.583495][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 756.588827][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 756.594600][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 756.600718][ T31] process_scheduled_works+0xad1/0x1770 [ 756.606434][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 756.612791][ T31] worker_thread+0x8a0/0xda0 [ 756.617439][ T31] kthread+0x711/0x8a0 [ 756.623014][ T31] ? __pfx_worker_thread+0x10/0x10 [ 756.628498][ T31] ? __pfx_kthread+0x10/0x10 [ 756.657858][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 756.663222][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 756.685784][ T31] ? __pfx_kthread+0x10/0x10 [ 756.690926][ T31] ret_from_fork+0x599/0xb30 [ 756.695565][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 756.700877][ T31] ? __switch_to_asm+0x39/0x70 [ 756.705765][ T31] ? __switch_to_asm+0x33/0x70 [ 756.713693][ T31] ? __pfx_kthread+0x10/0x10 [ 756.719660][ T31] ret_from_fork_asm+0x1a/0x30 [ 756.724489][ T31] [ 756.727639][ T31] INFO: task kworker/0:16:7515 blocked for more than 143 seconds. [ 756.735745][ T31] Not tainted syzkaller #0 [ 756.740886][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.749635][ T31] task:kworker/0:16 state:D stack:22560 pid:7515 tgid:7515 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 756.761949][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 756.768876][ T31] Call Trace: [ 756.772148][ T31] [ 756.775072][ T31] __schedule+0x14bc/0x5000 [ 756.779726][ T31] ? __pfx___schedule+0x10/0x10 [ 756.784586][ T31] ? schedule+0x91/0x360 [ 756.789009][ T31] schedule+0x165/0x360 [ 756.793180][ T31] schedule_preempt_disabled+0x13/0x30 [ 756.798884][ T31] __mutex_lock+0x7e6/0x1350 [ 756.803511][ T31] ? __mutex_lock+0x5bb/0x1350 [ 756.808360][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 756.814637][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 756.819795][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 756.825517][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 756.831560][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 756.837648][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 756.843922][ T31] process_scheduled_works+0xad1/0x1770 [ 756.849840][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 756.855926][ T31] worker_thread+0x8a0/0xda0 [ 756.860837][ T31] ? __kthread_parkme+0x7b/0x200 [ 756.865780][ T31] kthread+0x711/0x8a0 [ 756.867796][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 756.870086][ T31] ? __pfx_worker_thread+0x10/0x10 [ 756.882162][ T31] ? __pfx_kthread+0x10/0x10 [ 756.886797][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 756.892166][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 756.897400][ T31] ? __pfx_kthread+0x10/0x10 [ 756.902176][ T31] ret_from_fork+0x599/0xb30 [ 756.906806][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 756.912194][ T31] ? __switch_to_asm+0x39/0x70 [ 756.917057][ T31] ? __switch_to_asm+0x33/0x70 [ 756.921947][ T31] ? __pfx_kthread+0x10/0x10 [ 756.926686][ T31] ret_from_fork_asm+0x1a/0x30 [ 756.931657][ T31] [ 756.934853][ T31] INFO: task syz-executor:18342 blocked for more than 143 seconds. [ 756.951482][ T31] Not tainted syzkaller #0 [ 756.956470][ T31] Blocked by coredump. [ 756.961417][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.970379][ T31] task:syz-executor state:D stack:20032 pid:18342 tgid:18342 ppid:1 task_flags:0x40054c flags:0x00080003 [ 756.982330][ T31] Call Trace: [ 756.985694][ T31] [ 756.988755][ T31] __schedule+0x14bc/0x5000 [ 756.993310][ T31] ? __pfx___schedule+0x10/0x10 [ 756.998724][ T31] ? schedule+0x91/0x360 [ 757.003053][ T31] schedule+0x165/0x360 [ 757.007305][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.012884][ T31] __mutex_lock+0x7e6/0x1350 [ 757.017502][ T31] ? __mutex_lock+0x5bb/0x1350 [ 757.022419][ T31] ? rfkill_unregister+0xc8/0x220 [ 757.027505][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.032892][ T31] ? __pfx_device_del+0x10/0x10 [ 757.038092][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 757.043430][ T31] ? __cancel_work_sync+0x5c/0x110 [ 757.048899][ T31] rfkill_unregister+0xc8/0x220 [ 757.053855][ T31] hci_unregister_dev+0x374/0x510 [ 757.058959][ T31] vhci_release+0x152/0x1a0 [ 757.063484][ T31] ? __pfx_vhci_release+0x10/0x10 [ 757.069997][ T31] __fput+0x44c/0xa70 [ 757.074110][ T31] task_work_run+0x1d4/0x260 [ 757.078906][ T31] ? __pfx_task_work_run+0x10/0x10 [ 757.084062][ T31] ? kmem_cache_free+0x197/0x620 [ 757.089194][ T31] ? do_exit+0x6c0/0x2310 [ 757.093538][ T31] do_exit+0x6c5/0x2310 [ 757.097874][ T31] ? do_raw_spin_lock+0x121/0x290 [ 757.103232][ T31] ? __pfx_do_exit+0x10/0x10 [ 757.108258][ T31] ? cgroup1_freezing+0x20/0x350 [ 757.113235][ T31] do_group_exit+0x21c/0x2d0 [ 757.118071][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 757.123300][ T31] get_signal+0x1285/0x1340 [ 757.128023][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 757.133567][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 757.139930][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 757.145521][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 757.150957][ T31] ? rcu_is_watching+0x15/0xb0 [ 757.155810][ T31] do_syscall_64+0x2e3/0xf80 [ 757.160519][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.166677][ T31] ? clear_bhb_loop+0x60/0xb0 [ 757.171474][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.177457][ T31] RIP: 0033:0x7feb49785897 [ 757.182038][ T31] RSP: 002b:00007ffefc29b660 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 757.191550][ T31] RAX: fffffffffffffe00 RBX: 0000000000000010 RCX: 00007feb49785897 [ 757.199714][ T31] RDX: 0000000040000000 RSI: 00007ffefc29b6cc RDI: 00000000ffffffff [ 757.207853][ T31] RBP: 00007ffefc29b6cc R08: 0000000000000000 R09: 0000000000000000 [ 757.215863][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 757.223881][ T31] R13: 0000555560247590 R14: 00000000000919b8 R15: 00007ffefc29b720 [ 757.232141][ T31] [ 757.235179][ T31] INFO: task syz-executor:18605 blocked for more than 144 seconds. [ 757.245046][ T31] Not tainted syzkaller #0 [ 757.250086][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.258849][ T31] task:syz-executor state:D stack:21800 pid:18605 tgid:18605 ppid:1 task_flags:0x400140 flags:0x00080002 [ 757.270980][ T31] Call Trace: [ 757.274274][ T31] [ 757.277202][ T31] __schedule+0x14bc/0x5000 [ 757.281767][ T31] ? __pfx___schedule+0x10/0x10 [ 757.286714][ T31] ? schedule+0x91/0x360 [ 757.291119][ T31] schedule+0x165/0x360 [ 757.295272][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.300802][ T31] __mutex_lock+0x7e6/0x1350 [ 757.305420][ T31] ? __mutex_lock+0x5bb/0x1350 [ 757.310304][ T31] ? genl_rcv_msg+0x10d/0x790 [ 757.315003][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.320163][ T31] ? stack_trace_save+0x9c/0xe0 [ 757.325014][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 757.330304][ T31] ? radix_tree_lookup+0x240/0x290 [ 757.335412][ T31] genl_rcv_msg+0x10d/0x790 [ 757.339953][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 757.344970][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 757.350356][ T31] netlink_rcv_skb+0x208/0x470 [ 757.355138][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 757.360212][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 757.365530][ T31] ? down_read+0x274/0x2e0 [ 757.370170][ T31] ? genl_rcv+0xd/0x40 [ 757.374238][ T31] genl_rcv+0x28/0x40 [ 757.378426][ T31] netlink_unicast+0x82f/0x9e0 [ 757.383201][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 757.388586][ T31] ? netlink_sendmsg+0x642/0xb30 [ 757.393527][ T31] ? skb_put+0x11b/0x210 [ 757.397895][ T31] netlink_sendmsg+0x805/0xb30 [ 757.402752][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.408156][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 757.413106][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 757.418532][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.423888][ T31] __sock_sendmsg+0x21c/0x270 [ 757.428729][ T31] __sys_sendto+0x3bd/0x520 [ 757.433267][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 757.438410][ T31] ? fd_install+0x95/0x3d0 [ 757.442858][ T31] ? fd_install+0x307/0x3d0 [ 757.447395][ T31] __x64_sys_sendto+0xde/0x100 [ 757.452271][ T31] do_syscall_64+0xfa/0xf80 [ 757.456777][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.462878][ T31] ? clear_bhb_loop+0x60/0xb0 [ 757.467558][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.473537][ T31] RIP: 0033:0x7f448d7915dc [ 757.478042][ T31] RSP: 002b:00007ffe44711770 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 757.486463][ T31] RAX: ffffffffffffffda RBX: 00007f448e514620 RCX: 00007f448d7915dc [ 757.494580][ T31] RDX: 0000000000000020 RSI: 00007f448e514670 RDI: 0000000000000005 [ 757.502591][ T31] RBP: 0000000000000000 R08: 00007ffe447117c4 R09: 000000000000000c [ 757.510770][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 757.518788][ T31] R13: 00007ffe44711818 R14: 00007f448e514670 R15: 0000000000000000 [ 757.526799][ T31] [ 757.529956][ T31] INFO: task syz.1.3172:18612 blocked for more than 144 seconds. [ 757.537725][ T31] Not tainted syzkaller #0 [ 757.542761][ T31] Blocked by coredump. [ 757.547423][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.556281][ T31] task:syz.1.3172 state:D stack:25848 pid:18612 tgid:18611 ppid:18342 task_flags:0x40054c flags:0x00080001 [ 757.568351][ T31] Call Trace: [ 757.571655][ T31] [ 757.574604][ T31] __schedule+0x14bc/0x5000 [ 757.579245][ T31] ? __pfx___schedule+0x10/0x10 [ 757.584134][ T31] ? schedule+0x91/0x360 [ 757.588588][ T31] schedule+0x165/0x360 [ 757.592764][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.598395][ T31] __mutex_lock+0x7e6/0x1350 [ 757.603077][ T31] ? __mutex_lock+0x5bb/0x1350 [ 757.608000][ T31] ? rfkill_unregister+0xc8/0x220 [ 757.613030][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.618095][ T31] ? __pfx_device_del+0x10/0x10 [ 757.623130][ T31] ? __cancel_work_sync+0x5c/0x110 [ 757.628337][ T31] rfkill_unregister+0xc8/0x220 [ 757.633190][ T31] nfc_unregister_device+0x96/0x2a0 [ 757.638569][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 757.644286][ T31] virtual_ncidev_close+0x56/0x90 [ 757.649395][ T31] __fput+0x44c/0xa70 [ 757.653381][ T31] task_work_run+0x1d4/0x260 [ 757.658025][ T31] ? __pfx_task_work_run+0x10/0x10 [ 757.663178][ T31] ? kmem_cache_free+0x197/0x620 [ 757.669692][ T31] ? do_exit+0x6c0/0x2310 [ 757.674061][ T31] do_exit+0x6c5/0x2310 [ 757.678298][ T31] ? cgroup1_freezing+0x20/0x350 [ 757.683538][ T31] ? __pfx_do_exit+0x10/0x10 [ 757.688505][ T31] ? cgroup1_freezing+0x20/0x350 [ 757.693552][ T31] ? cgroup1_freezing+0x20/0x350 [ 757.698597][ T31] do_group_exit+0x21c/0x2d0 [ 757.703191][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 757.708967][ T31] get_signal+0x1285/0x1340 [ 757.713583][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 757.719292][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 757.725480][ T31] ? __x64_sys_sendmsg+0x1b4/0x260 [ 757.730683][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 757.736140][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 757.741453][ T31] ? rcu_is_watching+0x15/0xb0 [ 757.746242][ T31] do_syscall_64+0x2e3/0xf80 [ 757.751275][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.757448][ T31] ? clear_bhb_loop+0x60/0xb0 [ 757.762165][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.768132][ T31] RIP: 0033:0x7feb4978f749 [ 757.772544][ T31] RSP: 002b:00007feb4a711038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.781108][ T31] RAX: 000000000000001c RBX: 00007feb499e5fa0 RCX: 00007feb4978f749 [ 757.789359][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 000000000000000b [ 757.797325][ T31] RBP: 00007feb49813f91 R08: 0000000000000000 R09: 0000000000000000 [ 757.805422][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.813578][ T31] R13: 00007feb499e6038 R14: 00007feb499e5fa0 R15: 00007ffefc29b308 [ 757.821827][ T31] [ 757.824872][ T31] INFO: task syz.4.3175:18626 blocked for more than 144 seconds. [ 757.832814][ T31] Not tainted syzkaller #0 [ 757.837829][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.846701][ T31] task:syz.4.3175 state:D stack:23880 pid:18626 tgid:18625 ppid:17932 task_flags:0x400140 flags:0x00080002 [ 757.859116][ T31] Call Trace: [ 757.862400][ T31] [ 757.865332][ T31] __schedule+0x14bc/0x5000 [ 757.869898][ T31] ? __pfx___schedule+0x10/0x10 [ 757.874772][ T31] ? schedule+0x91/0x360 [ 757.879153][ T31] schedule+0x165/0x360 [ 757.883304][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.888834][ T31] __mutex_lock+0x7e6/0x1350 [ 757.893522][ T31] ? __mutex_lock+0x5bb/0x1350 [ 757.898573][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 757.904047][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.909170][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 757.916048][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 757.921411][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 757.928010][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 757.934341][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 757.940299][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 757.945430][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 757.951216][ T31] rfkill_set_block+0x1d2/0x440 [ 757.956095][ T31] rfkill_fop_write+0x44b/0x570 [ 757.961153][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 757.966689][ T31] ? security_kernfs_init_security+0x270/0x290 [ 757.972908][ T31] ? rw_verify_area+0x255/0x4d0 [ 757.977906][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 757.983433][ T31] vfs_write+0x27e/0xb30 [ 757.991508][ T31] ? __pfx_vfs_write+0x10/0x10 [ 757.996280][ T31] ? __fget_files+0x2a/0x420 [ 758.000981][ T31] ? __fget_files+0x2a/0x420 [ 758.005575][ T31] ? __fget_files+0x3a0/0x420 [ 758.010283][ T31] ? __fget_files+0x2a/0x420 [ 758.014960][ T31] ksys_write+0x145/0x250 [ 758.019394][ T31] ? __pfx_ksys_write+0x10/0x10 [ 758.024349][ T31] ? do_syscall_64+0xbe/0xf80 [ 758.029242][ T31] do_syscall_64+0xfa/0xf80 [ 758.033772][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.040157][ T31] ? clear_bhb_loop+0x60/0xb0 [ 758.044897][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.051001][ T31] RIP: 0033:0x7fc0cd18f749 [ 758.055439][ T31] RSP: 002b:00007fc0cdfc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 758.063998][ T31] RAX: ffffffffffffffda RBX: 00007fc0cd3e5fa0 RCX: 00007fc0cd18f749 [ 758.072199][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 758.080280][ T31] RBP: 00007fc0cd213f91 R08: 0000000000000000 R09: 0000000000000000 [ 758.088291][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.096282][ T31] R13: 00007fc0cd3e6038 R14: 00007fc0cd3e5fa0 R15: 00007ffc100586b8 [ 758.104447][ T31] [ 758.107502][ T31] INFO: task syz.0.3183:18658 blocked for more than 145 seconds. [ 758.115341][ T31] Not tainted syzkaller #0 [ 758.120469][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.129205][ T31] task:syz.0.3183 state:D stack:23544 pid:18658 tgid:18657 ppid:11805 task_flags:0x400140 flags:0x00080002 [ 758.141345][ T31] Call Trace: [ 758.144915][ T31] [ 758.148035][ T31] __schedule+0x14bc/0x5000 [ 758.152825][ T31] ? __pfx___schedule+0x10/0x10 [ 758.157990][ T31] ? schedule+0x91/0x360 [ 758.162335][ T31] schedule+0x165/0x360 [ 758.166512][ T31] schedule_preempt_disabled+0x13/0x30 [ 758.172080][ T31] __mutex_lock+0x7e6/0x1350 [ 758.176690][ T31] ? rcu_is_watching+0x15/0xb0 [ 758.181571][ T31] ? __mutex_lock+0x5bb/0x1350 [ 758.186345][ T31] ? rfkill_register+0x37/0x8e0 [ 758.191231][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 758.196252][ T31] ? netdev_run_todo+0xe1b/0xea0 [ 758.201284][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 758.206572][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 758.212057][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 758.217936][ T31] rfkill_register+0x37/0x8e0 [ 758.222638][ T31] wiphy_register+0x246a/0x2d20 [ 758.227592][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 758.232902][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 758.238425][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 758.243602][ T31] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 758.249942][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 758.255438][ T31] ? ieee80211_register_hw+0x1451/0x40d0 [ 758.261244][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 758.267166][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 758.273195][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 758.279261][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 758.285685][ T31] ? __hrtimer_setup+0x181/0x200 [ 758.290748][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 758.296556][ T31] mac80211_hwsim_new_radio+0x2f8b/0x5240 [ 758.302390][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 758.308614][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 758.314269][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 758.319562][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 758.324852][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 758.330614][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 758.336156][ T31] ? rcu_is_watching+0x15/0xb0 [ 758.341002][ T31] ? __nla_parse+0x40/0x60 [ 758.345417][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 758.351785][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 758.357333][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 758.363626][ T31] ? bpf_lsm_capable+0x9/0x20 [ 758.368563][ T31] ? security_capable+0x7e/0x2e0 [ 758.373547][ T31] genl_rcv_msg+0x60e/0x790 [ 758.378236][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.383287][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 758.389113][ T31] netlink_rcv_skb+0x208/0x470 [ 758.393991][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.399134][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.404430][ T31] ? down_read+0x274/0x2e0 [ 758.408913][ T31] ? genl_rcv+0xd/0x40 [ 758.412980][ T31] genl_rcv+0x28/0x40 [ 758.416950][ T31] netlink_unicast+0x82f/0x9e0 [ 758.422092][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 758.427404][ T31] ? netlink_sendmsg+0x642/0xb30 [ 758.432404][ T31] ? skb_put+0x11b/0x210 [ 758.436654][ T31] netlink_sendmsg+0x805/0xb30 [ 758.441535][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.446905][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 758.452002][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.457306][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.462698][ T31] __sock_sendmsg+0x21c/0x270 [ 758.467394][ T31] ____sys_sendmsg+0x505/0x820 [ 758.472460][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 758.478132][ T31] ? import_iovec+0x74/0xa0 [ 758.482849][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 758.487566][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 758.492819][ T31] ? futex_wait+0x285/0x360 [ 758.497456][ T31] ? __fget_files+0x2a/0x420 [ 758.502156][ T31] ? __fget_files+0x3a0/0x420 [ 758.506836][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 758.511943][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 758.517551][ T31] ? do_syscall_64+0xbe/0xf80 [ 758.522379][ T31] do_syscall_64+0xfa/0xf80 [ 758.526903][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.533148][ T31] ? clear_bhb_loop+0x60/0xb0 [ 758.537996][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.544019][ T31] RIP: 0033:0x7fb02918f749 [ 758.548485][ T31] RSP: 002b:00007fb0273ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.557201][ T31] RAX: ffffffffffffffda RBX: 00007fb0293e5fa0 RCX: 00007fb02918f749 [ 758.565629][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 758.573645][ T31] RBP: 00007fb029213f91 R08: 0000000000000000 R09: 0000000000000000 [ 758.581888][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.589995][ T31] R13: 00007fb0293e6038 R14: 00007fb0293e5fa0 R15: 00007ffe050e8d68 [ 758.598131][ T31] [ 758.601198][ T31] INFO: task syz.3.3184:18661 blocked for more than 145 seconds. [ 758.609031][ T31] Not tainted syzkaller #0 [ 758.614004][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.623369][ T31] task:syz.3.3184 state:D stack:23400 pid:18661 tgid:18660 ppid:17518 task_flags:0x400140 flags:0x00080002 [ 758.635528][ T31] Call Trace: [ 758.640556][ T31] [ 758.643711][ T31] __schedule+0x14bc/0x5000 [ 758.648314][ T31] ? __pfx___schedule+0x10/0x10 [ 758.653276][ T31] ? schedule+0x91/0x360 [ 758.657533][ T31] schedule+0x165/0x360 [ 758.662026][ T31] schedule_preempt_disabled+0x13/0x30 [ 758.667639][ T31] __mutex_lock+0x7e6/0x1350 [ 758.672322][ T31] ? __mutex_lock+0x5bb/0x1350 [ 758.677092][ T31] ? genl_rcv_msg+0x10d/0x790 [ 758.681936][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 758.687015][ T31] ? radix_tree_lookup+0x240/0x290 [ 758.692677][ T31] genl_rcv_msg+0x10d/0x790 [ 758.697190][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.702374][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 758.707319][ T31] netlink_rcv_skb+0x208/0x470 [ 758.712274][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.717301][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.722714][ T31] ? down_read+0x274/0x2e0 [ 758.727168][ T31] ? genl_rcv+0xd/0x40 [ 758.731320][ T31] genl_rcv+0x28/0x40 [ 758.735417][ T31] netlink_unicast+0x82f/0x9e0 [ 758.740341][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 758.745827][ T31] ? netlink_sendmsg+0x642/0xb30 [ 758.750856][ T31] ? skb_put+0x11b/0x210 [ 758.755101][ T31] netlink_sendmsg+0x805/0xb30 [ 758.759968][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.765248][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 758.770227][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.775782][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.781168][ T31] __sock_sendmsg+0x21c/0x270 [ 758.785934][ T31] __sys_sendto+0x3bd/0x520 [ 758.790600][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 758.795736][ T31] ? count_memcg_event_mm+0x21/0x260 [ 758.801264][ T31] ? exc_page_fault+0x82/0x100 [ 758.806124][ T31] __x64_sys_sendto+0xde/0x100 [ 758.811012][ T31] do_syscall_64+0xfa/0xf80 [ 758.815620][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.821763][ T31] ? clear_bhb_loop+0x60/0xb0 [ 758.826461][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.832512][ T31] RIP: 0033:0x7fa99ab915dc [ 758.836935][ T31] RSP: 002b:00007fa99ba1eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 758.845628][ T31] RAX: ffffffffffffffda RBX: 00007fa99ba1efc0 RCX: 00007fa99ab915dc [ 758.853637][ T31] RDX: 0000000000000024 RSI: 00007fa99ba1f010 RDI: 0000000000000004 [ 758.861859][ T31] RBP: 0000000000000000 R08: 00007fa99ba1ef14 R09: 000000000000000c [ 758.870054][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 758.878173][ T31] R13: 00007fa99ba1ef68 R14: 00007fa99ba1f010 R15: 0000000000000000 [ 758.886289][ T31] [ 758.889567][ T31] INFO: task syz-executor:18668 blocked for more than 145 seconds. [ 758.897496][ T31] Not tainted syzkaller #0 [ 758.902542][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.911382][ T31] task:syz-executor state:D stack:27800 pid:18668 tgid:18668 ppid:1 task_flags:0x400040 flags:0x00080000 [ 758.923618][ T31] Call Trace: [ 758.926983][ T31] [ 758.929957][ T31] __schedule+0x14bc/0x5000 [ 758.934484][ T31] ? __pfx___schedule+0x10/0x10 [ 758.939833][ T31] ? schedule+0x91/0x360 [ 758.944114][ T31] schedule+0x165/0x360 [ 758.948340][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 758.955364][ T31] schedule_preempt_disabled+0x13/0x30 [ 758.961017][ T31] __mutex_lock+0x7e6/0x1350 [ 758.965653][ T31] ? __mutex_lock+0x5bb/0x1350 [ 758.970451][ T31] ? rfkill_register+0x37/0x8e0 [ 758.975327][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 758.980444][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 758.985738][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 758.991143][ T31] ? device_initialize+0x24b/0x440 [ 758.996264][ T31] rfkill_register+0x37/0x8e0 [ 759.001042][ T31] hci_register_dev+0x3f5/0x890 [ 759.005902][ T31] vhci_create_device+0x39c/0x650 [ 759.011090][ T31] vhci_write+0x3ce/0x4a0 [ 759.015540][ T31] vfs_write+0x5c9/0xb30 [ 759.020013][ T31] ? __pfx_vhci_write+0x10/0x10 [ 759.025029][ T31] ? __pfx_vfs_write+0x10/0x10 [ 759.033094][ T31] ? count_memcg_event_mm+0x21/0x260 [ 759.038563][ T31] ksys_write+0x145/0x250 [ 759.042926][ T31] ? __pfx_ksys_write+0x10/0x10 [ 759.047932][ T31] ? do_syscall_64+0xbe/0xf80 [ 759.052638][ T31] do_syscall_64+0xfa/0xf80 [ 759.057147][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.063329][ T31] ? clear_bhb_loop+0x60/0xb0 [ 759.068041][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.073925][ T31] RIP: 0033:0x7fe33ff8e1c0 [ 759.078432][ T31] RSP: 002b:00007ffdab772cd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 759.087047][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fe33ff8e1c0 [ 759.095305][ T31] RDX: 0000000000000002 RSI: 00007ffdab772cea RDI: 00000000000000ca [ 759.104046][ T31] RBP: 00007fe3401e67b8 R08: 0000000000000000 R09: 00007fe340d1d6c0 [ 759.112774][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 759.120911][ T31] R13: 0000000000000003 R14: 00007ffdab773038 R15: 0000000000000000 [ 759.129003][ T31] [ 759.132038][ T31] INFO: task syz-executor:18670 blocked for more than 146 seconds. [ 759.140271][ T31] Not tainted syzkaller #0 [ 759.145288][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.154073][ T31] task:syz-executor state:D stack:27800 pid:18670 tgid:18670 ppid:1 task_flags:0x400040 flags:0x00080000 [ 759.166251][ T31] Call Trace: [ 759.169578][ T31] [ 759.172621][ T31] __schedule+0x14bc/0x5000 [ 759.177167][ T31] ? __pfx___schedule+0x10/0x10 [ 759.182219][ T31] ? schedule+0x91/0x360 [ 759.186550][ T31] schedule+0x165/0x360 [ 759.191063][ T31] schedule_preempt_disabled+0x13/0x30 [ 759.196575][ T31] __mutex_lock+0x7e6/0x1350 [ 759.201360][ T31] ? __mutex_lock+0x5bb/0x1350 [ 759.206135][ T31] ? rfkill_register+0x37/0x8e0 [ 759.211044][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 759.216068][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 759.221632][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 759.227092][ T31] ? device_initialize+0x24b/0x440 [ 759.232245][ T31] rfkill_register+0x37/0x8e0 [ 759.237017][ T31] hci_register_dev+0x3f5/0x890 [ 759.242060][ T31] vhci_create_device+0x39c/0x650 [ 759.247085][ T31] vhci_write+0x3ce/0x4a0 [ 759.251543][ T31] vfs_write+0x5c9/0xb30 [ 759.255785][ T31] ? __pfx_vhci_write+0x10/0x10 [ 759.260726][ T31] ? __pfx_vfs_write+0x10/0x10 [ 759.265487][ T31] ? count_memcg_event_mm+0x21/0x260 [ 759.270972][ T31] ksys_write+0x145/0x250 [ 759.275448][ T31] ? __pfx_ksys_write+0x10/0x10 [ 759.280444][ T31] ? do_syscall_64+0xbe/0xf80 [ 759.285134][ T31] do_syscall_64+0xfa/0xf80 [ 759.289807][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.295900][ T31] ? clear_bhb_loop+0x60/0xb0 [ 759.300744][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.306754][ T31] RIP: 0033:0x7f8c3678e1c0 [ 759.311310][ T31] RSP: 002b:00007fff3397bd78 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 759.319817][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8c3678e1c0 [ 759.327832][ T31] RDX: 0000000000000002 RSI: 00007fff3397bd8a RDI: 00000000000000ca [ 759.335800][ T31] RBP: 00007f8c369e67b8 R08: 0000000000000000 R09: 00007f8c3751d6c0 [ 759.343864][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 759.352176][ T31] R13: 0000000000000003 R14: 00007fff3397c0d8 R15: 0000000000000000 [ 759.360868][ T31] [ 759.363898][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 759.373152][ T31] [ 759.373152][ T31] Showing all locks held in the system: [ 759.381038][ T31] 4 locks held by kworker/u8:0/12: [ 759.386228][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 759.397477][ T31] #1: ffffc90000117b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 759.408140][ T31] #2: ffffffff8f2e8510 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 759.417455][ T31] #3: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 759.427612][ T31] 1 lock held by khungtaskd/31: [ 759.432642][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 759.442845][ T31] 2 locks held by getty/5595: [ 759.447512][ T31] #0: ffff888030c8e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 759.457488][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 759.468060][ T31] 3 locks held by kworker/0:16/7515: [ 759.473685][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 759.484785][ T31] #1: ffffc900047b7b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 759.498399][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 759.509749][ T31] 1 lock held by syz-executor/18342: [ 759.515022][ T31] #0: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 759.525294][ T31] 2 locks held by syz-executor/18605: [ 759.530773][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.539152][ T31] #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 759.548270][ T31] 2 locks held by syz.1.3172/18612: [ 759.553479][ T31] #0: ffff88805694f100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 759.563550][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 759.573668][ T31] 2 locks held by syz.4.3175/18626: [ 759.579042][ T31] #0: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 759.589181][ T31] #1: ffff88805694f100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 759.598984][ T31] 3 locks held by syz.0.3183/18658: [ 759.604189][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.612574][ T31] #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 759.621840][ T31] #2: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.631846][ T31] 2 locks held by syz.3.3184/18661: [ 759.637065][ T31] #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.645541][ T31] #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 759.654640][ T31] 2 locks held by syz-executor/18668: [ 759.660096][ T31] #0: ffff88807de3c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.670177][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.680408][ T31] 2 locks held by syz-executor/18670: [ 759.685789][ T31] #0: ffff88807ae33118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.695956][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.706252][ T31] 2 locks held by syz-executor/18673: [ 759.711750][ T31] #0: ffff888032496918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.722046][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.732012][ T31] 2 locks held by syz-executor/18674: [ 759.737476][ T31] #0: ffff88807ab9a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.747612][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.757987][ T31] 2 locks held by syz-executor/18676: [ 759.763384][ T31] #0: ffff888032e25918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.773686][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.783817][ T31] 2 locks held by syz-executor/18678: [ 759.789237][ T31] #0: ffff888079438118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.799504][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.809496][ T31] 2 locks held by syz-executor/18680: [ 759.814861][ T31] #0: ffff888021fdd118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.825241][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.835464][ T31] 2 locks held by syz-executor/18683: [ 759.840922][ T31] #0: ffff888026c39118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.851136][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.861392][ T31] 2 locks held by syz-executor/18684: [ 759.866767][ T31] #0: ffff888026c3f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.876822][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.887054][ T31] 2 locks held by syz-executor/18686: [ 759.892491][ T31] #0: ffff88803465b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.902749][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.913182][ T31] 2 locks held by syz-executor/18688: [ 759.918795][ T31] #0: ffff888024898118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.928919][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.939401][ T31] 2 locks held by syz-executor/18690: [ 759.944772][ T31] #0: ffff888047abc918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.954856][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.964887][ T31] 2 locks held by syz-executor/18693: [ 759.970300][ T31] #0: ffff888024adc118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 759.980469][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 759.990763][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 759.997672][ T31] 2 locks held by syz-executor/18694: [ 760.003402][ T31] #0: ffff888054a03918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 760.013482][ T31] #1: ffffffff8f5e15e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 760.023922][ T31] [ 760.026452][ T31] ============================================= [ 760.026452][ T31] [ 760.035047][ T31] NMI backtrace for cpu 0 [ 760.035063][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 760.035076][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 760.035082][ T31] Call Trace: [ 760.035087][ T31] [ 760.035094][ T31] dump_stack_lvl+0x189/0x250 [ 760.035113][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.035129][ T31] ? __pfx__printk+0x10/0x10 [ 760.035154][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 760.035170][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 760.035184][ T31] ? __pfx__printk+0x10/0x10 [ 760.035201][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 760.035217][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 760.035233][ T31] watchdog+0xf3c/0xf80 [ 760.035251][ T31] ? watchdog+0x1e2/0xf80 [ 760.035269][ T31] kthread+0x711/0x8a0 [ 760.035287][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.035300][ T31] ? __pfx_kthread+0x10/0x10 [ 760.035317][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 760.035332][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 760.035347][ T31] ? __pfx_kthread+0x10/0x10 [ 760.035363][ T31] ret_from_fork+0x599/0xb30 [ 760.035380][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 760.035402][ T31] ? __switch_to_asm+0x39/0x70 [ 760.035414][ T31] ? __switch_to_asm+0x33/0x70 [ 760.035428][ T31] ? __pfx_kthread+0x10/0x10 [ 760.035443][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.035467][ T31] [ 760.035471][ T31] Sending NMI from CPU 0 to CPUs 1: [ 760.182482][ C1] NMI backtrace for cpu 1 [ 760.182501][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 760.182518][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 760.182528][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 760.182553][ C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 760.182566][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 760.182581][ C1] RAX: de5786fe2d766300 RBX: ffffffff8197438a RCX: de5786fe2d766300 [ 760.182592][ C1] RDX: 0000000000000001 RSI: ffffffff8d76bd39 RDI: ffffffff8bbfc660 [ 760.182602][ C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3 [ 760.182613][ C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805a70 [ 760.182623][ C1] R13: 1ffff11003952b70 R14: 0000000000000001 R15: 0000000000000001 [ 760.182634][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 760.182646][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.182656][ C1] CR2: 000055e0503db000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 760.182672][ C1] Call Trace: [ 760.182679][ C1] [ 760.182685][ C1] default_idle+0x13/0x20 [ 760.182706][ C1] default_idle_call+0x73/0xb0 [ 760.182728][ C1] do_idle+0x1ea/0x520 [ 760.182744][ C1] ? irqentry_exit+0x5ba/0x660 [ 760.182763][ C1] ? __pfx_do_idle+0x10/0x10 [ 760.182786][ C1] cpu_startup_entry+0x44/0x60 [ 760.182801][ C1] start_secondary+0x101/0x110 [ 760.182822][ C1] common_startup_64+0x13e/0x147 [ 760.182846][ C1] [ 761.027855][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 762.067866][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 763.107832][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 764.147863][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 765.187832][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 766.227910][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available