last executing test programs: 24.091250602s ago: executing program 0 (id=1839): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x148}, 0x10) write(r5, &(0x7f0000000480)="240000001e005f0214fffffffffffff8070000e6b700000000000001080008001d000000", 0x54) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000100)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@rand_addr=0x4, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d3, 0x32}, 0x0, @in6=@empty, 0x1, 0x0, 0x0, 0x8, 0x1}}, 0xe8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x40) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 23.577661191s ago: executing program 0 (id=1846): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd1f7, 0x4e}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="a1d036e16e42"}, @NL80211_ATTR_PMKID={0x14, 0x55, "c87b8c8ad462aff661a2aea40e53ec80"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2f}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18920000000000000000000000000000711079000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) (async) writev(r2, &(0x7f0000000040), 0x2) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d00400001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) close(r3) 22.751898596s ago: executing program 0 (id=1853): r0 = socket(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)="b8d3d8eb8974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1deb7f829432647d19f732f17e4769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c5727637f2e7a01e122b82e8976f5a4d980eaeb3b636630b8", 0x99}], 0x1, 0x0, 0x0, 0x84}, 0x4081) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) 22.477686827s ago: executing program 0 (id=1857): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0xff05, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r7, 0x4) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r9, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r9, 0x1000) (async) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x19, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1821}, [@call={0x85, 0x0, 0x0, 0xa2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x3, 0x3, 0x4, 0x2, 0x1, 0x20}, @call={0x85, 0x0, 0x0, 0x35}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x71, &(0x7f0000000140)=""/113, 0x40f00, 0x1, '\x00', r1, @fallback=0x33, r5, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x1, 0x3, 0xdc}, 0x10, r7, r8, 0x8, &(0x7f00000003c0), &(0x7f0000000480)=[{0x1, 0x4, 0x9, 0x7}, {0x5, 0x4, 0xd, 0x5}, {0x2, 0x3, 0x6, 0xb}, {0x3, 0x5, 0xd, 0x4}, {0x1, 0x5, 0xd, 0x2}, {0x4, 0x2, 0x7, 0x3}, {0x2, 0x5, 0x6, 0xf}, {0x1, 0x4, 0x7, 0xc}], 0x10, 0x3ff}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00') 22.179425428s ago: executing program 0 (id=1862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x54, 0x24, 0xf0b, 0x4000, 0x25dfdbfc, {0x0, 0x0, 0x12, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x11}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x200}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x54}}, 0x48004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r8 = gettid() sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @pid=r8}]}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0xf, 0x6, 0x0, 0x0, @str='^\x10+\x8a(\xa6X8\tc~'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008890}, 0xc000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000200000a38000000060a010e00000000000000100200ffff0900020000797a32000000000900010073797a30000000000c0006400000000000000002140000001100010000000000000000000700000a5840d79974d9eeeeb9815a0c165d62ac54283f3c3947003100b9d8b1649fbf0a7d0be57b2b259718a9ae90186147141509e700"/146], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900010026bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000fffd00000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000700f0ffffffffffffff00000000000000020000000000030000000000000000000700000000020000fbffffffffffa1cdc06264781ad3552990d835e0d2fc00009ab30000000000000000000000100000000000feffffffffff0300"], 0xb8}}, 0x10) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) close(0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x200}}}]}, 0x38}}, 0x4001) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r12, 0x1, 0x45, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) 21.523845103s ago: executing program 0 (id=1871): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0xa, 0x801}, 0x14}}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000008000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 20.589790267s ago: executing program 3 (id=1887): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x7) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close(r5) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) accept(r5, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000000)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) write$cgroup_int(r2, &(0x7f0000000140), 0xfffffdef) write$cgroup_subtree(r2, 0x0, 0x12) setsockopt$inet_opts(r1, 0x0, 0x1a, &(0x7f0000000780)="e9", 0x1) accept4$tipc(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x0) socket(0x10, 0x3, 0x0) 19.669516222s ago: executing program 3 (id=1903): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000009c988bb1f0aef4640000000000", @ANYRES32=r2, @ANYBLOB="0c009900070000002a0000001400040070696d367265673000000000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 19.527276099s ago: executing program 3 (id=1905): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='afs_silly_rename\x00', 0xffffffffffffffff, 0x0, 0xf5f9}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000080)='./file0\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000180)=0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24000) socket$netlink(0x10, 0x3, 0x4) (async) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = accept4$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14, 0x800) getsockopt$packet_buf(r4, 0x107, 0x5, &(0x7f0000000340)=""/138, &(0x7f0000000400)=0x8a) r6 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000440)={0x2001}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x30000044) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r7, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008005}, 0x2004d063) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, r9, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x74}}, 0x8011) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000880)={0x1, 'lo\x00', {}, 0x4}) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000880)={0x1, 'lo\x00', {}, 0x4}) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r10, 0x84, 0x1c, &(0x7f00000008c0), &(0x7f0000000900)=0x4) sendmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000940)="92d29e45b374ed57bbb359b983a26dae020c1d1c897955487e4d89e56f2f88b5ba0e384cef8287a57a6cba3048772cf1b73873d1ef72e87adfb892db6dbb031a97aef0300b006932e7a19edd3800950eb92f091d4c1ebeef98bc677112f4aa9e90ae6298138d524b1e5cf81899369cec3aa4db40ae56fc6e828a8f713af855ee864cee", 0x83}, {&(0x7f0000000a00)="4e20430b482bdfc6e6c6aa986847e4e608576b8c5cfb0e062738051842000c1c1d322d1faa9de569b0e185b979b559af8f3fdd42744a5daa94b36873206802a7a8b39d685880aa2146551ef8c654f0e764e872b363dc370e4c1bd8ddb1408c719c9f080ac03ffe4bcddd0106705d7da07d73e3bc88b56d6f4c1e419f138e2d762b05ccf039ca1ceba882c87869437d3f907c353ca012855c4353d47f71319a57111108057a1b843b8dbb90dac50ce208fd5f6daf28f31ae6ea6e41d6ef92b7bb6a46f57e0cda26264c969c9f88fcc4afbef6df6250c2983a8d0e620535", 0xdd}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="c54f1d7e5de600756bf040708c539927e1485dd52ebd8a09b35f1d2f28457fb4b8020c52b4593614e82197daf5842b1d8bbd046cc05dadd90fe12fd7a2a26e9fc97713fee8", 0x45}], 0x4}}], 0x1, 0x1) (async) sendmmsg(r3, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000940)="92d29e45b374ed57bbb359b983a26dae020c1d1c897955487e4d89e56f2f88b5ba0e384cef8287a57a6cba3048772cf1b73873d1ef72e87adfb892db6dbb031a97aef0300b006932e7a19edd3800950eb92f091d4c1ebeef98bc677112f4aa9e90ae6298138d524b1e5cf81899369cec3aa4db40ae56fc6e828a8f713af855ee864cee", 0x83}, {&(0x7f0000000a00)="4e20430b482bdfc6e6c6aa986847e4e608576b8c5cfb0e062738051842000c1c1d322d1faa9de569b0e185b979b559af8f3fdd42744a5daa94b36873206802a7a8b39d685880aa2146551ef8c654f0e764e872b363dc370e4c1bd8ddb1408c719c9f080ac03ffe4bcddd0106705d7da07d73e3bc88b56d6f4c1e419f138e2d762b05ccf039ca1ceba882c87869437d3f907c353ca012855c4353d47f71319a57111108057a1b843b8dbb90dac50ce208fd5f6daf28f31ae6ea6e41d6ef92b7bb6a46f57e0cda26264c969c9f88fcc4afbef6df6250c2983a8d0e620535", 0xdd}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="c54f1d7e5de600756bf040708c539927e1485dd52ebd8a09b35f1d2f28457fb4b8020c52b4593614e82197daf5842b1d8bbd046cc05dadd90fe12fd7a2a26e9fc97713fee8", 0x45}], 0x4}}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001c40)={'dvmrp1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001c40)={'dvmrp1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xc0, r9, 0x309, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0xc) socketpair(0x21, 0x6, 0xbcc, &(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001e40), r2) (async) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001e40), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r12, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, r13, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2804c001}, 0x4000800) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r12, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, r13, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2804c001}, 0x4000800) recvmmsg(r1, &(0x7f0000002740)=[{{&(0x7f0000001f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/119, 0x77}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/68, 0x44}, {&(0x7f0000002140)=""/172, 0xac}, {&(0x7f0000002200)=""/128, 0x80}, {&(0x7f0000002280)=""/65, 0x41}, {&(0x7f0000002300)=""/43, 0x2b}], 0x7, &(0x7f00000023c0)=""/154, 0x9a}, 0xf6}, {{&(0x7f0000002480)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002500)=""/148, 0x94}, {&(0x7f00000025c0)=""/30, 0x1e}], 0x2, &(0x7f0000002640)=""/193, 0xc1}, 0xfffffff8}], 0x2, 0x1, &(0x7f00000027c0)={0x0, 0x989680}) (async) recvmmsg(r1, &(0x7f0000002740)=[{{&(0x7f0000001f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001fc0)=""/119, 0x77}, {&(0x7f0000002040)=""/65, 0x41}, {&(0x7f00000020c0)=""/68, 0x44}, {&(0x7f0000002140)=""/172, 0xac}, {&(0x7f0000002200)=""/128, 0x80}, {&(0x7f0000002280)=""/65, 0x41}, {&(0x7f0000002300)=""/43, 0x2b}], 0x7, &(0x7f00000023c0)=""/154, 0x9a}, 0xf6}, {{&(0x7f0000002480)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002500)=""/148, 0x94}, {&(0x7f00000025c0)=""/30, 0x1e}], 0x2, &(0x7f0000002640)=""/193, 0xc1}, 0xfffffff8}], 0x2, 0x1, &(0x7f00000027c0)={0x0, 0x989680}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000002b80)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002840)={0x2d4, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0x33, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x6, @device_a, 0x7, @value=@broadcast, 0x81, 0x4, @device_a, 0x6}}, @channel_switch={0x25, 0x3, {0x0, 0x6, 0xa}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xf3c}, @NL80211_ATTR_IE={0x1ac, 0x2a, [@fast_bss_trans={0x37, 0x9d, {0x8, 0x4, "a6d910c2c36905863629c3981f5d80c3", "12a95bb74f726ea8a5a9fc36ef9c0d5f38603f44be0d8fa08c148c9574aad234", "793a166cc76c16b7d62bf85452ce798986793376bc8bca97f335126376aadd8e", [{0x1, 0x4, "adc383a6"}, {0x2, 0x11, "0084e045d83b60d629884a731e35e64e31"}, {0x2, 0x12, "23882aa79ac364606b60c9f74d75ebfe159f"}, {0x1, 0x1c, "002c0cf1d0241046707f1a57d1e90807fbc350e384ed2a842158ab03"}]}}, @mesh_chsw={0x76, 0x6, {0x4b, 0x5, 0x5, 0x1c}}, @link_id={0x65, 0x12, {@random="7a436469dc53", @broadcast}}, @ssid={0x0, 0x10, @random="53f9fdd40532820faea27955e45a005f"}, @mic={0x8c, 0x10, {0x40, "0d6b9f940c4f", @short="6a5a2e51534acce3"}}, @ssid={0x0, 0x13, @random="0377d92f02a4ef9be4fbbaab681fcaf9e2fc49"}, @challenge={0x10, 0x1, 0x8c}, @perr={0x84, 0xaf, {0xc, 0xb, [{{0x0, 0x1}, @device_b, 0x400, @value=@broadcast, 0x8}, {{}, @device_a, 0x1, @void, 0x2d}, {{}, @broadcast, 0x576, @void, 0x2c}, {{}, @broadcast, 0x6, @void, 0x12}, {{}, @device_a, 0x1, @void, 0x36}, {{}, @device_a, 0x7fffffff, @void, 0x9}, {{}, @broadcast, 0x7e6d, @void, 0x2c}, {{0x0, 0x1}, @device_b, 0xfffffffc, @value=@broadcast, 0x12}, {{0x0, 0x1}, @device_b, 0x8000, @value=@broadcast, 0x16}, {{0x0, 0x1}, @broadcast, 0x8000, @value, 0x6}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x2d}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xe6f8}, @NL80211_ATTR_IE={0x77, 0x2a, [@ht={0x2d, 0x1a, {0x40, 0x1, 0x2, 0x0, {0x9, 0x1ffa, 0x0, 0x1be, 0x0, 0x1, 0x1, 0x2}, 0x800, 0x7, 0x7}}, @ibss={0x6, 0x2, 0x9}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x4, 0x9f, @broadcast, 0x40, @value, 0x6, 0x200, @device_a, 0xb}}, @mic={0x8c, 0x10, {0x95a, "c94465859cbf", @short="695d5720675e3001"}}, @mic={0x8c, 0x18, {0x178, "b3f1bf292b55", @long="0f63f3005c1c948b27b5a17c3881afd4"}}]}, @NL80211_ATTR_IE={0x36, 0x2a, [@ibss={0x6, 0x2, 0x9d}, @dsss={0x3, 0x1, 0x64}, @dsss={0x3, 0x1, 0x78}, @random_vendor={0xdd, 0x20, "c0126ce10a1d503aad84174409a249d0c06d16cb198241c3115e6e2fb9e3e83c"}, @dsss={0x3, 0x1, 0x8}, @challenge={0x10, 0x1, 0xa3}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 19.336901988s ago: executing program 3 (id=1908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x4004897}, 0x400c090) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0xfffffffd, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x7}]}, 0x24}}, 0x0) 19.157856464s ago: executing program 3 (id=1912): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000fa00"/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="180100786127dd2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b00000008500000006000000b4b6400008000000"], &(0x7f0000000040)='GPL\x00', 0x716, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r4], &(0x7f00000004c0)=[{0x3, 0x2, 0x55, 0xa}, {0x1, 0x1, 0xe, 0x4}, {0x4, 0x3, 0x3, 0xb}, {0x2, 0x1, 0xf, 0x3}], 0x10, 0x7}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c00000049fc0d74b100010028bd7000fdcfdf25", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa0}, 0x2161) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 18.855850957s ago: executing program 3 (id=1919): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r2 = socket(0x15, 0x5, 0x0) (rerun: 64) bind$rds(r2, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x20000000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r4}, 0x18) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 18.563555283s ago: executing program 2 (id=1923): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r4, 0xfffffffffffffffc, r3, 0x0, 0x20, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d018f0008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r0], 0x24}}, 0x0) 18.495082354s ago: executing program 2 (id=1924): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40890}, 0x800) 18.399565877s ago: executing program 2 (id=1925): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x23c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x1fc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1e4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xb9, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2ae97714a5c600000"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xc8, 0x17, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x7d, 0x6, "fabf457a2783e01adba453eb6b12547e74ed3538e418b01eb76a9da3a965a965bd660b895bcde4e323c457657669f884ceb2303e38c045eabfb99180b31db5a5cedd27c3d1afe4f747fc7360d5f6b1392c380721711fe9ed4a9ad5ebc44f3515520c50cc1c0a8e07ec59e52c8a083d49257ed21038db9dde28"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d10002"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) writev(r1, &(0x7f0000000180), 0x100000000000003c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={r2, r3+10000000}) 18.211114647s ago: executing program 2 (id=1928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 18.128271485s ago: executing program 4 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="8f0bd929723b41b03397f326f1c06fb92704da3496dd810b2640ed5e6de615ab146ba7628fc42edc85a6aa824797e4aab7e4e8706fc2cedae54d4721f7d51f4b382ce7bd8181b53e44d1806914ab1035546a1ba502527d1f9fe98e4f6eee0f6047b7842499469ffca6915e90b89afe073b33ef8d475ca4742eedb8413e3b8b0b5140571a20a7ec87ae2b466483b4f495acd703f233e473ed60af3557a9a9f09f72ae063b945f2b3fba2d1115a5737b516b94a97dea4172bcc8b19563eaddebb4044691cf9fdb74cbf4de47440e7eb1621a1a41c8e56d9243a738", 0xda}, {&(0x7f0000000100)="a666c40847510d0356e9bf55759d9a721b1ce3414adca25042f5d6a2253c53521b655e0839f09ed4674667e870d4e6e7015ab570804ff65320", 0x39}], 0x2) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000540)=""/52, 0x34}, {&(0x7f0000000580)=""/37, 0x25}, {&(0x7f00000005c0)=""/101, 0x65}, {&(0x7f0000000640)=""/104, 0x68}], 0xa, &(0x7f0000000780)=""/213, 0xd5}}], 0x1, 0x20, &(0x7f00000008c0)={0x77359400}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r1) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', 0x0, 0x18}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x644]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8890) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r4, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0xa}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xd0, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff6}, {0x6, 0x11, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x92c4}, {0x6, 0x11, 0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x597783c2783d9f37}, 0x8014) ioctl$FICLONE(r1, 0x40049409, r0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000dc0)=0x6f9, 0x2) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r3}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000011c0)={0xffffffffffffffff, 0x20, &(0x7f0000001180)={&(0x7f00000010c0)=""/119, 0x77, 0x0, &(0x7f0000001140)=""/57, 0x39}}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000001200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x3, 0x30, 0x1}, @ldst={0x2, 0x3, 0x0, 0x7, 0xa, 0x4, 0x4}, @jmp={0x5, 0x1, 0x1f, 0x0, 0x1, 0x18, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x2, 0x3, 0x2, 0x2, 0x3, 0x80, 0x800000000000000e}, @generic={0x9, 0x2, 0x2, 0x6, 0x2f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc1}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9fc1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001300)='syzkaller\x00', 0x3ff, 0xd4, &(0x7f0000001340)=""/212, 0x40f00, 0x2c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x2, 0xb, 0xffffffff, 0x10000}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001480)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000014c0)=[{0x2, 0x5, 0x7, 0x2}], 0x10, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x7fa186f99b80a536, 0xf, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe}, [@map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xd05d}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000fc0)='syzkaller\x00', 0x5d, 0x37, &(0x7f0000001000)=""/55, 0x1e00, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001080)={0x3, 0x3, 0x9, 0x9}, 0x10, r7, r8, 0xa, &(0x7f00000015c0)=[0xffffffffffffffff], &(0x7f0000001600)=[{0x1, 0x3, 0xf}, {0x5, 0x2, 0x9, 0xb}, {0x4, 0x3, 0x3, 0x9}, {0x1, 0x4, 0x0, 0x1}, {0x4, 0x3, 0x5}, {0x2, 0x3, 0x7, 0x5}, {0x4, 0x5, 0x4, 0xb}, {0x0, 0x1, 0xc, 0x4}, {0x5, 0x2, 0x8, 0xc}, {0x0, 0x5, 0x7, 0x303ced4bb8b4f443}], 0x10, 0x4}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000017c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001880)={'syztnl1\x00', &(0x7f0000001800)={'syztnl0\x00', r9, 0x4, 0x7f, 0x8, 0x1, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}, @dev={0xfe, 0x80, '\x00', 0xb}, 0x7800, 0x7800, 0x8145, 0x7ff}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000001b00)={&(0x7f00000018c0), 0xc, &(0x7f0000001ac0)={&(0x7f0000001900)={0x184, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20008}, 0x8004) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r11, &(0x7f0000001d00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0xec, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_SSID={0x1c, 0x34, @random="e251be26afbd7b9ae0e0c953f2d133a3db3fb249e9b4c1c1"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x8dcacdc23de5e23e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}], @NL80211_ATTR_MAC={0xa, 0x6, @random="d7e4ab45683a"}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d80), r11) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000002f80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f40)={&(0x7f0000001dc0)={0x116c, r13, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x10c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd0a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "4a60533a6a74ef289ad8db699f88b201bf20d0f36b720738bfc8f1"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "d92a16e44e424fd10036e37e9510dd20ac7fe3178055038aa7eea1f61f7235"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x917}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2040}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x116c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40094) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000002fc0), &(0x7f0000003000)=0xc) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x30, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x1, 0x80}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000003140), &(0x7f0000003180)=0xc) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000033c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003380)={&(0x7f0000003200)={0x178, r4, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x3, 0x6}, {0x7, 0x4}, {0xf, 0x4}, {0xa}, {0x9}, {0xed, 0x6}, {0x1}, {0x6, 0x7}, {0x3, 0x2}, {0x0, 0x7}, {0xef, 0x4}, {0x6, 0x4}, {0x0, 0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x7}, {0xf, 0x5}], "5de67b899eae4179"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x4}], "1f8631c0d6fd177f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xb8, 0x2}, {0xd0, 0x1}, {0xfe, 0x7}, {0x3}, {0x6, 0x7}, {0x1, 0x7}, {0xf, 0x6}, {0x49, 0x5}, {0x0, 0x7}, {0x9, 0x3}, {0x3, 0x7}, {0x2, 0x7}, {0x2, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0xb, 0x7}, {0xa9, 0x2}, {0x81, 0x5}, {0x6, 0x6}], "b65e85e6ff4e9392"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x4, 0x5}, {0x80, 0x6}, {0x6, 0x2}, {0x9, 0x1}, {0x3, 0x6}, {0x19, 0x2}, {0x2, 0x1}, {0x81, 0x5}, {0x6, 0x1}, {0x3, 0x2}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x4}], "0c114ddcce4f5f65"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x0, 0x3}, {0xf, 0x5}, {0x80, 0x4}, {0xe3, 0x6}, {0x8, 0x5}, {0xfb, 0x4}, {0x8, 0x1}, {0xe}, {0x5, 0x6}, {0x6, 0x7}, {0x6b, 0x6}, {0x3, 0x4}, {0xfc, 0x2}, {0x0, 0x4}, {0x4, 0x1}, {0x1b, 0x1}], "fa76902a8c4a86f3"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x2, 0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x10, 0x2}, {0x7, 0x2}, {0x0, 0x7}, {0x8}], "99859a626202c611"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x80, 0x3}, {0xe, 0x2}, {0x7, 0x3}, {0x7}, {0x8, 0x4}, {0x4, 0x7}, {0x4}, {0xff, 0x1}, {0xf4}, {0x8, 0x5}, {0x6, 0x6}], "2d29d6bc8189b42d"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x9, 0x3}, {0x6, 0x1}, {0xd0}, {0x7, 0x1}, {0x7}, {0x8, 0x2}, {0x7, 0x2}, {0x7, 0x2}, {0x10, 0x2}, {0xa0, 0x3}, {0x7, 0x5}, {0x5, 0x6}, {0x28, 0x4}, {0xd4, 0x3}, {0x2, 0x1}, {0xc6}, {0x25, 0x2}, {0xe, 0x6}], "2ba1c109a8543796"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x3, 0x6}], "14ef79ae8c15d5d4"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x5, 0x7}, {0x2, 0x3}, {0x81, 0x7}, {0x3, 0x7}], "f7488d4662d8896e"}}]}, 0x178}, 0x1, 0x0, 0x0, 0x40011}, 0x40) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003440)=@generic={&(0x7f0000003400)='./file0\x00', 0x0, 0x10}, 0x18) sendfile(r14, r3, &(0x7f0000003480)=0xd0, 0x400000000000000) 17.983909514s ago: executing program 2 (id=1932): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000080)) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0800000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000009e5e74aeace6b3669151a3ba8000f3b132fcede30000000000"], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800900010068617368000000002400028008000640000000000800074000230001080002400000000008000440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000600), &(0x7f0000000980)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x19, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ffffffc}, 0x94) 17.919591313s ago: executing program 2 (id=1933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x5f501}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x4000) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x1b, r5, 0x1, 0xdf, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x6c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}]}}}}}}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001700), 0xffffffffffffffff) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r14, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bd7000fddbdf25100000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0xa}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x5, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 17.196621061s ago: executing program 4 (id=1941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x6, 0x1, '.\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x841) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x1, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x26, 0x6, "2c9144e2e7ac3dcc9e1a0161084c022044d2a3a7e379ed0137180f929b8604942f5c"}, @NFTA_TABLE_USERDATA={0x14, 0x6, "4b8b1d4f19ad5e2fbc53692100fba2ae"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000800)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELCHAIN={0x12c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc418}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64ddcbf3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc360}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffd569}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x164, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0xf4, 0xc, "6a3b5aeb1438f78d21c9e9f59194137e56033b302eafeebfa1538e299e6432bcbe3f06a9111a54c196770f41ba26dacbd9e1f231d660989f85ae0e46cf4f4331eb5815a6ab60c02ba585b82a7435fad85b1dd666580724bc2e9ac9d8a0bd96473e7fd03e73fca349e794e247849154275db3c6fb492e9fc9fc94a828ec53145e8d1231d59ca0b1580ec615c285df6cc6ca61bd2faf8af689c9ce065d0c88da4f505f05f13528a39d6c357a550a9081a7897335de753ef1be2a487b40b74e379fa72401ca828273dcf3d2db196afc16b241a1e26faeede3cd352fd0d65938506e1b919f870b4ff47062583a4da9b2b4d8"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_DELOBJ={0xc0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x96, 0x8, "4a86f26d7ee3ad65b794269f515796aa4e9116fd447301e666e81018c88ed16b50f24c9288deae8e1f70c79f85e36c1c56462543102762513036c6f06bb3a66ce9ce793dc1a244d84761cb87082cee44e126c7d5f86448afba6747df15b103f87eb2549a5a8fbd6e7bef6e92cc825081fbf3f8782b2f876d259ef9bcc543919a76447d2cea2a547be9924bd464c8b31b9b60"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x378}, 0x1, 0x0, 0x0, 0x4004014}, 0xc000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000840)={r3, 0x9, 0x6, 0x7}) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r1, 0x2, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000b80)={'sit0\x00', &(0x7f0000000a40)={'gre0\x00', r2, 0x7, 0x7, 0x2a9100, 0xb4cf, {{0x42, 0x4, 0x1, 0x2, 0x108, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local, {[@timestamp_prespec={0x44, 0x14, 0x77, 0x3, 0x9, [{@multicast2, 0x3}, {@rand_addr=0x64010101, 0xa7}]}, @timestamp_addr={0x44, 0x1c, 0xa0, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x21}, 0xc06}, {@private=0xa010102, 0x2}, {@multicast1, 0x57}]}, @ra={0x94, 0x4}, @generic={0x86, 0x11, "61b10cd8ecf3d2eafcfe144d6669ee"}, @timestamp_addr={0x44, 0xc, 0x9c, 0x1, 0x5, [{@rand_addr=0x64010100, 0x101}]}, @timestamp_prespec={0x44, 0x2c, 0xef, 0x3, 0x6, [{@broadcast, 0x8}, {@loopback, 0x3}, {@multicast2, 0xe}, {@loopback, 0x8}, {@private=0xa010100, 0x1}]}, @generic={0x83, 0x11, "ec771645dfb7eeec7d3db55e4ee22a"}, @rr={0x7, 0x23, 0xf0, [@loopback, @loopback, @multicast2, @multicast2, @local, @loopback, @rand_addr=0x64010102, @remote]}, @cipso={0x86, 0x40, 0x3, [{0x2, 0xc, "af01650262c209dd8d20"}, {0x7, 0x7, "af1fccb94e"}, {0x3, 0x3, '\f'}, {0x7, 0x12, "87cebebd8fde334e8521eef8c7f6b49f"}, {0x61f53ed291b5a9b7, 0x12, "17caf77b384044f823af74ae43d51e14"}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000dc0)={r4, 0x20, &(0x7f0000000d80)={&(0x7f0000000c40)=""/72, 0x48, 0x0, &(0x7f0000000cc0)=""/188, 0xbc}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0x6, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xbda}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f00000009c0)='syzkaller\x00', 0x6, 0x25, &(0x7f0000000a00)=""/37, 0x41100, 0x2, '\x00', r5, @cgroup_device=0x6, r4, 0x8, &(0x7f0000000bc0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x4, 0x6, 0x763, 0x100}, 0x10, r6, r4, 0x4, &(0x7f0000000e00)=[r4, r4, r4, r4, r4], &(0x7f0000000e40)=[{0x3, 0x5, 0xe, 0x3}, {0x2, 0x3, 0x7, 0x3}, {0x3, 0x1, 0x4, 0x7}, {0x5, 0x1, 0xf, 0xc}], 0x10, 0x8}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r4, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x2000c080) r7 = accept4(r4, &(0x7f0000001080)=@l2, &(0x7f0000001100)=0x80, 0x0) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000001140)) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000001180)="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") sendmsg$AUDIT_GET(r4, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x10, 0x3e8, 0x1, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4400}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002280)={'batadv_slave_1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r8 = accept4$nfc_llcp(r7, &(0x7f00000022c0), &(0x7f0000002340)=0x60, 0x80800) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000002380)=0x20) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f0000002400)={'sit0\x00', &(0x7f00000023c0)={@local, 0x1, 0x0, 0x20, 0x0, [{@loopback}, {@initdev}]}}) recvmmsg(r3, &(0x7f0000005200)=[{{&(0x7f0000002440)=@generic, 0x80, &(0x7f0000002940)=[{&(0x7f00000024c0)=""/93, 0x5d}, {&(0x7f0000002540)=""/95, 0x5f}, {&(0x7f00000025c0)=""/182, 0xb6}, {&(0x7f0000002680)=""/202, 0xca}, {&(0x7f0000002780)=""/134, 0x86}, {&(0x7f0000002840)=""/247, 0xf7}], 0x6, &(0x7f00000029c0)=""/174, 0xae}, 0x9}, {{&(0x7f0000002a80)=@nfc, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002b00)=""/70, 0x46}, {&(0x7f0000002b80)=""/208, 0xd0}, {&(0x7f0000002c80)=""/81, 0x51}], 0x3, &(0x7f0000002d40)=""/170, 0xaa}, 0x7f}, {{&(0x7f0000002e00)=@phonet, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e80)=""/21, 0x15}, {&(0x7f0000002ec0)=""/49, 0x31}], 0x2, &(0x7f0000002f40)=""/81, 0x51}, 0x400}, {{&(0x7f0000002fc0)=@phonet, 0x80, &(0x7f0000004380)=[{&(0x7f0000003040)=""/38, 0x26}, {&(0x7f0000003080)=""/49, 0x31}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/153, 0x99}, {&(0x7f0000004180)=""/175, 0xaf}, {&(0x7f0000004240)=""/39, 0x27}, {&(0x7f0000004280)=""/31, 0x1f}, {&(0x7f00000042c0)=""/192, 0xc0}], 0x8, &(0x7f0000004400)=""/123, 0x7b}, 0x800}, {{&(0x7f0000004480)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004500)=""/199, 0xc7}, {&(0x7f0000004600)=""/147, 0x93}, {&(0x7f00000046c0)=""/170, 0xaa}, {&(0x7f0000004780)=""/192, 0xc0}, {&(0x7f0000004840)=""/109, 0x6d}], 0x5, &(0x7f0000004940)=""/93, 0x5d}, 0x5}, {{&(0x7f00000049c0)=@hci, 0x80, &(0x7f0000005140)=[{&(0x7f0000004a40)=""/251, 0xfb}, {&(0x7f0000004b40)=""/93, 0x5d}, {&(0x7f0000004bc0)=""/66, 0x42}, {&(0x7f0000004c40)=""/101, 0x65}, {&(0x7f0000004cc0)=""/180, 0xb4}, {&(0x7f0000004d80)=""/20, 0x14}, {&(0x7f0000004dc0)=""/161, 0xa1}, {&(0x7f0000004e80)=""/254, 0xfe}, {&(0x7f0000004f80)=""/139, 0x8b}, {&(0x7f0000005040)=""/234, 0xea}], 0xa}, 0x7}], 0x6, 0x10100, &(0x7f0000005380)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000053c0), r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r10, &(0x7f0000005580)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005540)={&(0x7f0000005480)={0x88, r11, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "e7d381ef3fc71a70b16215664cf24df78643d6e64f88baae4d180c00323c0d9580ea"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) 17.071184464s ago: executing program 4 (id=1943): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000001d80)) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000600)={@in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x2f, 0x0, "9178078ac2b99582de635ea4b961f19e5819fe7c55b7f9a70d8d4298f40ed0f32e7ab813a32c73209a167d4a26353f635a92c6871fbb9853787f936f4c0d04617ab508547e8ea1066ab648f11687a9bf"}, 0xd8) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000040)=0xfcc, 0x4) (async) sendmsg$OSF_MSG_ADD(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x4bc, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [{{0x254, 0x1, {{0x0, 0x7}, 0x4b, 0x1, 0x9, 0x0, 0x11, 'syz1\x00', "4754da41fe62eb4edd1ab363fc43bfa5132c13142cb5dad631c3e3d1633c1b25", "854ebef11b9e0bc9d1be7afcf2d4b9c612ee7c55d5b48477f03de02df2f03060", [{0x0, 0xd, {0x2, 0x8}}, {0x5, 0x7, {0x2, 0x1}}, {0x6, 0x1, {0x3, 0x7}}, {0x2, 0x7, {0x3, 0x1}}, {0x2, 0x6, {0x0, 0x8}}, {0x3, 0x9, {0x2, 0x7}}, {0x4, 0xd, {0x1}}, {0x9, 0x5, {0x1, 0x4}}, {0x8, 0x7, {0x3, 0x52}}, {0x81, 0xf78, {0x2, 0x4}}, {0x1, 0x5, {0x3, 0x5}}, {0x7, 0x5, {0x0, 0x8}}, {0x8, 0x5, {0x3, 0x6}}, {0x8001, 0xd447, {0x3, 0x7}}, {0xc52, 0x5, {0x0, 0xf0}}, {0x56, 0x9, {0x2, 0x6}}, {0x3, 0x8, {0x2}}, {0x5, 0x7, {0x1, 0x4c}}, {0x5, 0xff0a, {0x1, 0x3}}, {0x2, 0x6, {0x2, 0x9}}, {0xffff, 0x6d30, {0x0, 0xf2ff}}, {0x2, 0x9fc, {0x2, 0x1}}, {0x9, 0x4, {0x3, 0x7}}, {0x88d5, 0x4, {0x3, 0xff}}, {0x4, 0x6, {0x3, 0xc}}, {0x4, 0x8, {0x0, 0x6}}, {0x0, 0x0, {0x0, 0xffffffff}}, {0x2d5, 0x7, {0x2, 0xdc2}}, {0x9, 0x7, {0x1, 0x5}}, {0x6, 0x2, {0x1, 0x7}}, {0x0, 0x9, {0x2, 0x4}}, {0x2, 0x8001, {0x2, 0x8}}, {0x8, 0x3, {0x3, 0x3}}, {0x2115, 0x0, {0x2, 0x2}}, {0xfffe, 0x7, {0x0, 0x1}}, {0x200, 0x7, {0x1, 0x1}}, {0x2, 0x6, {0x1, 0x8b}}, {0x2, 0x4, {0x0, 0x7}}, {0x6, 0x1, {0x2, 0x80000000}}, {0x5, 0x1, {0x1, 0xb}}]}}}, {{0x254, 0x1, {{0x2}, 0xf1, 0x8, 0x5, 0xd1, 0x2, 'syz0\x00', "690c4cd69cecb43c1d2e14624b4e6f5cd6005456c643833ffbdbb7dc3da00978", "67a251b8dfda46596a00c27d406ef3e022de2f3b5014e98c765ab393ee612412", [{0x5, 0x4, {0x3, 0x6}}, {0x8, 0x5, {0x1, 0xd}}, {0x9, 0x32f7, {0x0, 0x3}}, {0x7, 0x8, {0x0, 0x1}}, {0x3ff, 0x7, {0x3, 0xe}}, {0x1, 0x2, {0x3, 0x3fee}}, {0x80, 0x4, {0x0, 0x7}}, {0x51, 0x5, {0x3, 0x10}}, {0x3, 0x1, {0x2, 0x7fff}}, {0xce24, 0x7, {0x3, 0x7}}, {0x81, 0x7, {0x2, 0x7ff}}, {0x3ff, 0x6, {0x3, 0x3e17}}, {0x7ff, 0x3, {0x3, 0xc5e}}, {0x40b2, 0x5, {0x3, 0x1ff}}, {0x7, 0xff, {0x2, 0x9}}, {0x4, 0x0, {0x2, 0xb}}, {0x7, 0x1, {0x0, 0x1}}, {0x401, 0x400, {0x3, 0xe}}, {0x6, 0x8000, {0x0, 0x5}}, {0x1, 0xfffd, {0x0, 0x7}}, {0xc, 0x7, {0x2, 0x9}}, {0x400, 0x3, {0x3, 0xe}}, {0x5a9d, 0x8, {0x2, 0x9}}, {0x7ff, 0x2, {0x2, 0x7fff}}, {0x4d, 0x0, {0x0, 0x7}}, {0x9, 0x80, {0x1, 0x4}}, {0x4, 0x1000, {0x0, 0x1c60}}, {0x9, 0xf00c, {0x3}}, {0x4, 0x3, {0x1, 0x5}}, {0x31, 0x0, {0x2, 0xfffffffc}}, {0x8, 0x4}, {0x101, 0x9, {0x2, 0x7ff}}, {0x4, 0x7, {0x1, 0x4000}}, {0x784, 0x4, {0x1, 0x7f}}, {0x2, 0x8, {0x1, 0x86}}, {0x2, 0xfff9, {0x0, 0x3}}, {0x7fff, 0x2, {0x3, 0x2}}, {0x5, 0x3, {0x0, 0x9}}, {0x9, 0x3a, {0x1, 0x3}}, {0x6, 0x7ac, {0x1}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) 17.003947376s ago: executing program 4 (id=1945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 16.899430188s ago: executing program 4 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) getpid() sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000010000104000002000000000000000000", @ANYRES32=r1, @ANYBLOB="03c000000000000008000a00", @ANYRES32=r1, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 16.865806912s ago: executing program 4 (id=1950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x201, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) close(r4) (async) close(r4) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r8, 0x11, 0xb, &(0x7f0000000000)=0x8000, 0x4) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) (async) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0x4e20, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x3, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "d8e4ad6fc1d3b573e94331d0b791a724"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffd, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xb, 0xb}, {0xe, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xd600}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c065}, 0x4008000) ioctl$EXT4_IOC_SETFSUUID(r8, 0x4008662c, &(0x7f0000000400)={0x0, 0x0, "ad2f504f4430b65d847fa17df6459312"}) (async) ioctl$EXT4_IOC_SETFSUUID(r8, 0x4008662c, &(0x7f0000000400)={0x0, 0x0, "ad2f504f4430b65d847fa17df6459312"}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}], @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}, 0x1, 0x2000000000000000}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}], @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}, 0x1, 0x2000000000000000}, 0x0) 16.453276078s ago: executing program 1 (id=1954): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read(r0, &(0x7f0000000240)=""/122, 0x7a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = socket(0x14, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0x42000004, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 15.487707956s ago: executing program 1 (id=1955): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@bridge_getneigh={0xac, 0x1e, 0x4, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r2, 0xa2, 0x40000}, [@IFLA_AF_SPEC={0x74, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x81}, {0x8, 0x20, 0x0, 0x0, 0x8000}, {0x8, 0x1e, 0x0, 0x0, 0x1}, {0x8, 0x15, 0x0, 0x0, 0x4}, {0x8, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x8, 0x0, 0x0, 0x7}, {0x8, 0x13, 0x0, 0x0, 0xd0}]}}, @AF_MPLS={0x4}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x7, 0x0, 0x0, 0x67df}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, @IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xc}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0xac}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$packet(r1, &(0x7f00000000c0)="3070f4e3e9a5579056d1809d806bfb1c9ff5c35cd1e0a0e4c375dc16558672a7bce245e6c16014ba9de8db8dc18be31da4ed1e0d58ea4d164d6ea11164884bf1d334eeaf01f14012b38bbe155f4df677cc6b365438f84adb15b2fd8f3b8b4fc9e597002c6ffbf80da27d31f047f4cfcd2dd45d2995aa54cb593d15fb01b94a3dd1c5836c084cb56a6ae3cd7307c7904ddacac709974e374e37819053f8a7c8d941267a8e1c37c748294817e52751970d79681542049fc3505221a86b2c36660da8f4b85fcecb51180bca929d4251", 0xce, 0x2000c080, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0xff, 0x6, @random="c9144fa01fab"}, 0x14) write(r4, &(0x7f0000000040)="0d000000010001", 0x7) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x24445, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x21022, 0x4) 15.484608221s ago: executing program 1 (id=1956): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1f59}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWTABLE={0xb8, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x75, 0x6, "3475357ffdc93350aa79a2c3df2f3ede90e0df498fa6b579c8fd5b1a8b5929a87658b42f6ea5cec0447630734385de58c65148a91956a8bdeda9c8c39e0d5278f1aad30c0c0db9e9b882755fcfa8a554278e7ad656628254452145b09b68eba6f4d03915662f753f97d363f822a373dc75"}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd7c6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1a4}, 0x1, 0x0, 0x0, 0x4}, 0x40) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0x2, 0x18, 0xc0, 0x2, r2}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0xffbb, 0x0, 0x0, 0x10001}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) close(0x3) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4040810) 15.444126491s ago: executing program 1 (id=1957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000340)) socket$vsock_stream(0x28, 0x1, 0x0) (async) close(r0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15.39709198s ago: executing program 1 (id=1958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xf100}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2, {}, {0x6, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x24, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0xbd4}, @TCA_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_CODEL_TARGET={0x8, 0x1, 0x5}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x54}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x401c5820, &(0x7f0000000080)) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r7, &(0x7f0000000040), 0x2) close(r7) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0380000088030600140012800a00010069706f69620000000400028008000500", @ANYRES32=0x0, @ANYBLOB="fd255fd0f2e93f6788c3d2d514575325f21f5755e3f00f4a75334b794275d58e035e4cb7823088037d7bef71bd297ad3aa514fa91ca4e1ca16f88f26a481cb4b80df6309e8cb60207227f4f022760cd14daedb4903860155762c9d531c87737f1398cdd9c589a6f717075f9d9998a400fd2bf609c32e0ee2d89eed9fb15a3abb46b304b172a7154fc7c0345025ffaa644187e8d81b7bcb13620d0b51be2f14d943ddfe75909f4e26ce53eae95e7f18ba2c949c26"], 0x3c}}, 0x0) 15.307652518s ago: executing program 1 (id=1959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x60}}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x201c2, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000300)={{r1}, {@void, @max}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xe0, r6, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x920c}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @remote, 0x0, 0x0, 'rr\x00', 0xe, 0xff, 0x36}, 0x2c) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200fff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x24008881) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.02731678s ago: executing program 32 (id=1871): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1, 0xa, 0x801}, 0x14}}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000008000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 3.523295579s ago: executing program 33 (id=1919): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r2 = socket(0x15, 0x5, 0x0) (rerun: 64) bind$rds(r2, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x20000000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r4}, 0x18) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r6], 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2.501124546s ago: executing program 34 (id=1933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x5f501}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x4000) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x1b, r5, 0x1, 0xdf, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x6c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}]}}}}}}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001700), 0xffffffffffffffff) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r14, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010029bd7000fddbdf25100000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0xa}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x5, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.019096382s ago: executing program 35 (id=1950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x201, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) close(r4) (async) close(r4) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r8, 0x11, 0xb, &(0x7f0000000000)=0x8000, 0x4) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) (async) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0x4e20, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x3, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "d8e4ad6fc1d3b573e94331d0b791a724"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffd, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xb, 0xb}, {0xe, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xd600}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2001c065}, 0x4008000) ioctl$EXT4_IOC_SETFSUUID(r8, 0x4008662c, &(0x7f0000000400)={0x0, 0x0, "ad2f504f4430b65d847fa17df6459312"}) (async) ioctl$EXT4_IOC_SETFSUUID(r8, 0x4008662c, &(0x7f0000000400)={0x0, 0x0, "ad2f504f4430b65d847fa17df6459312"}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}], @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}, 0x1, 0x2000000000000000}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}], @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}, 0x1, 0x2000000000000000}, 0x0) 0s ago: executing program 36 (id=1959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x60}}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x201c2, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000300)={{r1}, {@void, @max}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xe0, r6, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x920c}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @remote, 0x0, 0x0, 'rr\x00', 0xe, 0xff, 0x36}, 0x2c) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e2e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200fff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040004}, 0x24008881) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): pressed [ 138.884129][ T7926] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 138.940268][ T7926] netlink: 'syz.3.547': attribute type 9 has an invalid length. [ 138.972532][ T7926] netlink: 'syz.3.547': attribute type 11 has an invalid length. [ 139.029526][ T7926] netlink: 'syz.3.547': attribute type 12 has an invalid length. [ 139.091899][ T7926] netlink: 210060 bytes leftover after parsing attributes in process `syz.3.547'. [ 139.130544][ T7926] openvswitch: netlink: Message has 4 unknown bytes. [ 139.183283][ T7937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.213729][ T7942] FAULT_INJECTION: forcing a failure. [ 139.213729][ T7942] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.230533][ T7942] CPU: 0 UID: 0 PID: 7942 Comm: syz.2.552 Not tainted syzkaller #0 PREEMPT(full) [ 139.230558][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.230576][ T7942] Call Trace: [ 139.230584][ T7942] [ 139.230591][ T7942] dump_stack_lvl+0x189/0x250 [ 139.230621][ T7942] ? __pfx____ratelimit+0x10/0x10 [ 139.230645][ T7942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.230670][ T7942] ? __pfx__printk+0x10/0x10 [ 139.230689][ T7942] ? __might_fault+0xb0/0x130 [ 139.230725][ T7942] should_fail_ex+0x414/0x560 [ 139.230758][ T7942] _copy_from_iter+0x1de/0x1790 [ 139.230784][ T7942] ? rcu_is_watching+0x15/0xb0 [ 139.230809][ T7942] ? kmalloc_reserve+0xbd/0x290 [ 139.230833][ T7942] ? __pfx__copy_from_iter+0x10/0x10 [ 139.230856][ T7942] ? __build_skb_around+0x262/0x3f0 [ 139.230887][ T7942] ? netlink_sendmsg+0x642/0xb30 [ 139.230903][ T7942] ? skb_put+0x11b/0x210 [ 139.230923][ T7942] netlink_sendmsg+0x6b2/0xb30 [ 139.230949][ T7942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.230971][ T7942] ? aa_sock_msg_perm+0xf1/0x1d0 [ 139.231001][ T7942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.231019][ T7942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.231038][ T7942] __sock_sendmsg+0x21c/0x270 [ 139.231065][ T7942] ____sys_sendmsg+0x505/0x830 [ 139.231091][ T7942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.231120][ T7942] ? import_iovec+0x74/0xa0 [ 139.231146][ T7942] ___sys_sendmsg+0x21f/0x2a0 [ 139.231168][ T7942] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.231224][ T7942] ? __fget_files+0x2a/0x420 [ 139.231240][ T7942] ? __fget_files+0x3a0/0x420 [ 139.231268][ T7942] __x64_sys_sendmsg+0x19b/0x260 [ 139.231291][ T7942] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.231321][ T7942] ? __pfx_ksys_write+0x10/0x10 [ 139.231351][ T7942] ? do_syscall_64+0xbe/0xfa0 [ 139.231380][ T7942] do_syscall_64+0xfa/0xfa0 [ 139.231404][ T7942] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.231429][ T7942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.231447][ T7942] ? clear_bhb_loop+0x60/0xb0 [ 139.231469][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.231487][ T7942] RIP: 0033:0x7fef3cf8f6c9 [ 139.231512][ T7942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.231527][ T7942] RSP: 002b:00007fef3ddfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.231546][ T7942] RAX: ffffffffffffffda RBX: 00007fef3d1e5fa0 RCX: 00007fef3cf8f6c9 [ 139.231559][ T7942] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000004 [ 139.231570][ T7942] RBP: 00007fef3ddfc090 R08: 0000000000000000 R09: 0000000000000000 [ 139.231608][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.231619][ T7942] R13: 00007fef3d1e6038 R14: 00007fef3d1e5fa0 R15: 00007ffc60e4f378 [ 139.231651][ T7942] [ 139.674722][ T7947] netlink: 60 bytes leftover after parsing attributes in process `syz.3.553'. [ 139.869135][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 139.892613][ T7959] netlink: 272 bytes leftover after parsing attributes in process `syz.1.557'. [ 139.930407][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 139.948087][ T7961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 140.008369][ T7959] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 140.076154][ T7959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.336396][ T7990] macvlan2: entered promiscuous mode [ 140.343169][ T7990] macvlan2: entered allmulticast mode [ 140.349053][ T7990] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 141.214387][ T8012] xt_connbytes: Forcing CT accounting to be enabled [ 141.302094][ T8023] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 141.349712][ T8023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.501121][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 141.677490][ T8043] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 142.259319][ T8072] netlink: 'syz.3.585': attribute type 2 has an invalid length. [ 142.282343][ T8069] xt_connbytes: Forcing CT accounting to be enabled [ 142.303702][ T8072] 9: entered promiscuous mode [ 142.691446][ T8092] netlink: 'syz.2.592': attribute type 12 has an invalid length. [ 142.739411][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 142.768250][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.594'. [ 142.794697][ T3549] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.814194][ T8092] netlink: 'syz.2.592': attribute type 12 has an invalid length. [ 142.835731][ T3549] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.837009][ T8096] netlink: 144 bytes leftover after parsing attributes in process `syz.3.594'. [ 142.859498][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 142.878591][ T3549] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.894814][ T8104] netlink: 144 bytes leftover after parsing attributes in process `syz.3.594'. [ 142.904976][ T3549] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.978916][ T8097] team1: entered promiscuous mode [ 142.985076][ T8097] team1: entered allmulticast mode [ 143.144439][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 143.288544][ T8126] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 143.318013][ T8130] netlink: 666 bytes leftover after parsing attributes in process `syz.1.602'. [ 143.392831][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 143.422403][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 143.478392][ T8140] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.481644][ T8127] dvmrp0: entered allmulticast mode [ 143.629770][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 143.960217][ T8169] IPVS: set_ctl: invalid protocol: 5207 172.20.20.42:20004 [ 144.187799][ T8179] ipvlan2: entered promiscuous mode [ 144.315749][ T8185] tipc: Enabled bearer , priority 0 [ 144.362041][ T8185] syzkaller0: entered promiscuous mode [ 144.367570][ T8185] syzkaller0: entered allmulticast mode [ 144.410120][ T8185] tipc: Resetting bearer [ 144.421597][ T8190] tipc: Started in network mode [ 144.432597][ T8190] tipc: Node identity ac1414aa, cluster identity 4711 [ 144.442464][ T8190] tipc: Enabled bearer , priority 10 [ 144.506161][ T8197] tipc: Started in network mode [ 144.512670][ T8197] tipc: Node identity e683161ed201, cluster identity 4711 [ 144.523799][ T8197] tipc: Enabled bearer , priority 0 [ 144.623190][ T8197] tipc: Disabling bearer [ 145.123882][ T8184] tipc: Resetting bearer [ 145.156546][ T8184] tipc: Disabling bearer [ 145.196073][ T8237] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 145.232178][ T8234] bridge_slave_1: left allmulticast mode [ 145.237885][ T8234] bridge_slave_1: left promiscuous mode [ 145.283369][ T8234] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.352121][ T8234] bridge_slave_0: left allmulticast mode [ 145.360042][ T8234] bridge_slave_0: left promiscuous mode [ 145.377359][ T8234] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.455124][ T8244] delete_channel: no stack [ 145.643829][ T24] tipc: Node number set to 2886997162 [ 145.693288][ T8252] gre0: entered promiscuous mode [ 145.698424][ T8252] gre0: entered allmulticast mode [ 146.030787][ T8273] syzkaller0: entered promiscuous mode [ 146.036797][ T8273] syzkaller0: entered allmulticast mode [ 146.200130][ T8279] tipc: Enabled bearer , priority 0 [ 146.292582][ T8280] tipc: Resetting bearer [ 146.351203][ T8280] tipc: Disabling bearer [ 146.542273][ T8290] netlink: 'syz.3.649': attribute type 1 has an invalid length. [ 146.752343][ T8300] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 146.977547][ T8312] netlink: 'syz.3.657': attribute type 11 has an invalid length. [ 147.435919][ T8341] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 148.435734][ T8390] __nla_validate_parse: 58 callbacks suppressed [ 148.435753][ T8390] netlink: 156 bytes leftover after parsing attributes in process `syz.4.679'. [ 148.465558][ T8392] netlink: 'syz.3.677': attribute type 5 has an invalid length. [ 148.587989][ T8401] xt_bpf: check failed: parse error [ 148.628898][ T8401] syzkaller0: entered promiscuous mode [ 148.650611][ T8401] syzkaller0: entered allmulticast mode [ 148.686501][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.682'. [ 148.934239][ T8415] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 148.985842][ T8415] netlink: 100 bytes leftover after parsing attributes in process `syz.3.686'. [ 149.105554][ T8417] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 149.122200][ T8417] syzkaller1: Refused to change device type [ 149.150651][ T8417] netlink: 'syz.1.685': attribute type 1 has an invalid length. [ 149.354445][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.691'. [ 149.555377][ T8449] netlink: 220 bytes leftover after parsing attributes in process `syz.3.696'. [ 149.578511][ T8444] syzkaller0: entered promiscuous mode [ 149.586886][ T8444] syzkaller0: entered allmulticast mode [ 149.890627][ T8460] syz.2.699: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 149.927022][ T8460] CPU: 0 UID: 0 PID: 8460 Comm: syz.2.699 Not tainted syzkaller #0 PREEMPT(full) [ 149.927046][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.927057][ T8460] Call Trace: [ 149.927080][ T8460] [ 149.927093][ T8460] dump_stack_lvl+0x189/0x250 [ 149.927126][ T8460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.927152][ T8460] ? __pfx__printk+0x10/0x10 [ 149.927172][ T8460] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 149.927199][ T8460] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 149.927226][ T8460] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 149.927255][ T8460] warn_alloc+0x214/0x310 [ 149.927291][ T8460] ? __pfx_warn_alloc+0x10/0x10 [ 149.927348][ T8460] ? __get_vm_area_node+0x28f/0x300 [ 149.927419][ T8460] ? nf_tables_newset+0x1330/0x2540 [ 149.927449][ T8460] __vmalloc_node_range_noprof+0x690/0x12d0 [ 149.927514][ T8460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.927543][ T8460] ? nf_tables_newset+0x1330/0x2540 [ 149.927572][ T8460] ? rcu_is_watching+0x15/0xb0 [ 149.927597][ T8460] ? nf_tables_newset+0x1330/0x2540 [ 149.927627][ T8460] __kvmalloc_node_noprof+0x674/0x910 [ 149.927661][ T8460] ? nf_tables_newset+0x1330/0x2540 [ 149.927690][ T8460] ? nft_set_lookup+0x128/0x150 [ 149.927716][ T8460] ? nft_hash_privsize+0x6f/0xf0 [ 149.927741][ T8460] nf_tables_newset+0x1330/0x2540 [ 149.927781][ T8460] ? __pfx_nf_tables_newset+0x10/0x10 [ 149.927832][ T8460] ? __nla_parse+0x40/0x60 [ 149.927860][ T8460] nfnetlink_rcv+0x11d9/0x2590 [ 149.927927][ T8460] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 149.927974][ T8460] ? ref_tracker_free+0x63a/0x7d0 [ 149.928027][ T8460] ? __netlink_deliver_tap+0x807/0x850 [ 149.928048][ T8460] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.928089][ T8460] netlink_unicast+0x82f/0x9e0 [ 149.928130][ T8460] ? __pfx_netlink_unicast+0x10/0x10 [ 149.928162][ T8460] ? netlink_sendmsg+0x642/0xb30 [ 149.928180][ T8460] ? skb_put+0x11b/0x210 [ 149.928205][ T8460] netlink_sendmsg+0x805/0xb30 [ 149.928238][ T8460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.928262][ T8460] ? aa_sock_msg_perm+0xf1/0x1d0 [ 149.928296][ T8460] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.928316][ T8460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.928337][ T8460] __sock_sendmsg+0x21c/0x270 [ 149.928378][ T8460] ____sys_sendmsg+0x505/0x830 [ 149.928408][ T8460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.928442][ T8460] ? import_iovec+0x74/0xa0 [ 149.928474][ T8460] ___sys_sendmsg+0x21f/0x2a0 [ 149.928499][ T8460] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.928565][ T8460] ? __fget_files+0x2a/0x420 [ 149.928585][ T8460] ? __fget_files+0x3a0/0x420 [ 149.928617][ T8460] __x64_sys_sendmsg+0x19b/0x260 [ 149.928644][ T8460] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.928686][ T8460] ? do_syscall_64+0xbe/0xfa0 [ 149.928721][ T8460] do_syscall_64+0xfa/0xfa0 [ 149.928748][ T8460] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.928777][ T8460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.928797][ T8460] ? clear_bhb_loop+0x60/0xb0 [ 149.928823][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.928842][ T8460] RIP: 0033:0x7fef3cf8f6c9 [ 149.928861][ T8460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.928877][ T8460] RSP: 002b:00007fef3dddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.928899][ T8460] RAX: ffffffffffffffda RBX: 00007fef3d1e6090 RCX: 00007fef3cf8f6c9 [ 149.928913][ T8460] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 149.928925][ T8460] RBP: 00007fef3d011f91 R08: 0000000000000000 R09: 0000000000000000 [ 149.928936][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.928947][ T8460] R13: 00007fef3d1e6128 R14: 00007fef3d1e6090 R15: 00007ffc60e4f378 [ 149.928982][ T8460] [ 149.929204][ T8460] Mem-Info: [ 150.317643][ T8460] active_anon:5006 inactive_anon:0 isolated_anon:0 [ 150.317643][ T8460] active_file:3204 inactive_file:39899 isolated_file:0 [ 150.317643][ T8460] unevictable:768 dirty:42 writeback:0 [ 150.317643][ T8460] slab_reclaimable:10667 slab_unreclaimable:97505 [ 150.317643][ T8460] mapped:29286 shmem:1358 pagetables:1062 [ 150.317643][ T8460] sec_pagetables:0 bounce:0 [ 150.317643][ T8460] kernel_misc_reclaimable:0 [ 150.317643][ T8460] free:1328473 free_pcp:14972 free_cma:0 [ 150.365846][ T8460] Node 0 active_anon:20024kB inactive_anon:0kB active_file:12816kB inactive_file:159392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117144kB dirty:168kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11848kB pagetables:4108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.398136][ T8460] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.430430][ T8460] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.460713][ T8460] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 150.466513][ T8460] Node 0 DMA32 free:1396760kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20024kB inactive_anon:0kB active_file:12816kB inactive_file:159392kB unevictable:1536kB writepending:168kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:45784kB local_pcp:26760kB free_cma:0kB [ 150.500574][ T8460] lowmem_reserve[]: 0 0 0 0 0 [ 150.506325][ T8460] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.535945][ T8460] lowmem_reserve[]: 0 0 0 0 0 [ 150.540935][ T8460] Node 1 Normal free:3902280kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14632kB local_pcp:7812kB free_cma:0kB [ 150.573338][ T8460] lowmem_reserve[]: 0 0 0 0 0 [ 150.578244][ T8460] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.591489][ T8460] Node 0 DMA32: 430*4kB (ME) 280*8kB (ME) 158*16kB (UM) 46*32kB (UM) 6*64kB (M) 21*128kB (UM) 23*256kB (UME) 19*512kB (UM) 6*1024kB (UME) 6*2048kB (M) 330*4096kB (M) = 1396760kB [ 150.610343][ T8460] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 150.621927][ T8460] Node 1 Normal: 150*4kB (U) 36*8kB (UME) 53*16kB (UME) 90*32kB (UME) 23*64kB (UME) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 950*4096kB (ME) = 3902280kB [ 150.639489][ T8460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.649082][ T8460] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.669404][ T8460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.678988][ T8460] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.696503][ T8460] 44458 total pagecache pages [ 150.707949][ T8460] 0 pages in swap cache [ 150.713783][ T8460] Free swap = 124996kB [ 150.718046][ T8460] Total swap = 124996kB [ 150.722889][ T8460] 2097051 pages RAM [ 150.726851][ T8460] 0 pages HighMem/MovableOnly [ 150.731686][ T8460] 424119 pages reserved [ 150.735850][ T8460] 0 pages cma reserved [ 150.912450][ T8485] sctp: [Deprecated]: syz.3.705 (pid 8485) Use of int in maxseg socket option. [ 150.912450][ T8485] Use struct sctp_assoc_value instead [ 150.935967][ T8479] bond4: option resend_igmp: invalid value (32767) [ 150.948947][ T8479] bond4: option resend_igmp: allowed values 0 - 255 [ 150.971829][ T8486] ip6t_srh: unknown srh match flags 4000 [ 150.985134][ T8479] bond4 (unregistering): Released all slaves [ 150.994801][ T8485] ip6t_srh: unknown srh match flags 4000 [ 151.099137][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 151.430738][ T8501] dvmrp0: entered allmulticast mode [ 151.711105][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 151.715476][ T8527] netlink: 104 bytes leftover after parsing attributes in process `syz.1.719'. [ 151.749167][ T8524] netlink: 'syz.3.718': attribute type 4 has an invalid length. [ 151.859091][ T8536] openvswitch: netlink: EtherType 50a is less than min 600 [ 151.878383][ T8537] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 151.895851][ T8537] syzkaller0: Linktype set failed because interface is up [ 151.924818][ T36] syzkaller0: tun_net_xmit 76 [ 151.933572][ T36] syzkaller0: tun_net_xmit 48 [ 151.949575][ T5900] syzkaller0: tun_net_xmit 76 [ 152.156790][ T8552] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 153.616163][ T8584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.730'. [ 153.775075][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 153.812756][ T8604] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 154.368301][ T8627] netlink: 'syz.4.742': attribute type 9 has an invalid length. [ 154.414592][ T8627] netlink: 'syz.4.742': attribute type 6 has an invalid length. [ 154.693060][ T8645] netlink: 'syz.0.749': attribute type 1 has an invalid length. [ 154.758533][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.749'. [ 154.760189][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 154.782461][ T8645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.749'. [ 155.139621][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 155.260192][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 155.280457][ T8659] ip6gretap0: entered promiscuous mode [ 155.523998][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 155.683554][ T8684] IPVS: set_ctl: invalid protocol: 51 172.20.20.52:20002 [ 155.945013][ T8699] netlink: zone id is out of range [ 155.960697][ T8699] netlink: zone id is out of range [ 155.966225][ T8699] netlink: zone id is out of range [ 155.974516][ T8699] netlink: zone id is out of range [ 155.995092][ T8699] netlink: zone id is out of range [ 156.029547][ T8699] netlink: del zone limit has 4 unknown bytes [ 156.264058][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 156.608709][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 157.415606][ T8771] IPv6: sit1: Disabled Multicast RS [ 157.427644][ T8771] sit1: entered allmulticast mode [ 158.384140][ T8832] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 158.537865][ T8842] netlink: 'syz.0.808': attribute type 21 has an invalid length. [ 158.562502][ T8840] xt_l2tp: missing protocol rule (udp|l2tpip) [ 158.585400][ T8840] netlink: 'syz.3.807': attribute type 4 has an invalid length. [ 158.960874][ T8863] __nla_validate_parse: 8 callbacks suppressed [ 158.960892][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 158.961974][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 159.459833][ T8882] netlink: 'syz.3.822': attribute type 29 has an invalid length. [ 159.584806][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 159.622579][ T8898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.630148][ T8898] IPv6: NLM_F_CREATE should be set when creating new route [ 159.777296][ T8904] netlink: 256 bytes leftover after parsing attributes in process `syz.2.827'. [ 159.913601][ T8908] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 160.171304][ T8915] syzkaller0: entered promiscuous mode [ 160.177024][ T8915] syzkaller0: entered allmulticast mode [ 160.316865][ T8915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.830'. [ 160.642864][ T8924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.833'. [ 160.885913][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 160.911128][ T8937] FAULT_INJECTION: forcing a failure. [ 160.911128][ T8937] name failslab, interval 1, probability 0, space 0, times 1 [ 160.994753][ T8937] CPU: 1 UID: 0 PID: 8937 Comm: syz.2.835 Not tainted syzkaller #0 PREEMPT(full) [ 160.994780][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.994791][ T8937] Call Trace: [ 160.994798][ T8937] [ 160.994806][ T8937] dump_stack_lvl+0x189/0x250 [ 160.994837][ T8937] ? __pfx____ratelimit+0x10/0x10 [ 160.994862][ T8937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.994887][ T8937] ? __pfx__printk+0x10/0x10 [ 160.994912][ T8937] ? __pfx___might_resched+0x10/0x10 [ 160.994931][ T8937] ? fs_reclaim_acquire+0x7d/0x100 [ 160.994955][ T8937] should_fail_ex+0x414/0x560 [ 160.994990][ T8937] should_failslab+0xa8/0x100 [ 160.995011][ T8937] __kmalloc_noprof+0xcb/0x7f0 [ 160.995036][ T8937] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 160.995069][ T8937] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 160.995101][ T8937] genl_start+0x180/0x6c0 [ 160.995124][ T8937] ? netlink_lookup+0x30/0x200 [ 160.995158][ T8937] __netlink_dump_start+0x469/0x7e0 [ 160.995195][ T8937] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 160.995224][ T8937] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 160.995246][ T8937] ? genl_get_cmd+0x67f/0x910 [ 160.995270][ T8937] ? __pfx___mutex_lock+0x10/0x10 [ 160.995299][ T8937] ? __pfx_genl_start+0x10/0x10 [ 160.995319][ T8937] ? __pfx_genl_dumpit+0x10/0x10 [ 160.995339][ T8937] ? __pfx_genl_done+0x10/0x10 [ 160.995383][ T8937] genl_rcv_msg+0x5da/0x790 [ 160.995414][ T8937] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.995436][ T8937] ? __pfx_tipc_udp_nl_dump_remoteip+0x10/0x10 [ 160.995459][ T8937] ? __asan_memcpy+0x40/0x70 [ 160.995483][ T8937] ? __pfx_ref_tracker_free+0x10/0x10 [ 160.995510][ T8937] netlink_rcv_skb+0x208/0x470 [ 160.995525][ T8937] ? __lock_acquire+0xab9/0xd20 [ 160.995544][ T8937] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.995569][ T8937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.995607][ T8937] ? down_read+0x1ad/0x2e0 [ 160.995628][ T8937] genl_rcv+0x28/0x40 [ 160.995648][ T8937] netlink_unicast+0x82f/0x9e0 [ 160.995685][ T8937] ? __pfx_netlink_unicast+0x10/0x10 [ 160.995714][ T8937] ? netlink_sendmsg+0x642/0xb30 [ 160.995730][ T8937] ? skb_put+0x11b/0x210 [ 160.995756][ T8937] netlink_sendmsg+0x805/0xb30 [ 160.995785][ T8937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.995807][ T8937] ? aa_sock_msg_perm+0xf1/0x1d0 [ 160.995837][ T8937] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.995855][ T8937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.995874][ T8937] __sock_sendmsg+0x21c/0x270 [ 160.995902][ T8937] ____sys_sendmsg+0x505/0x830 [ 160.995928][ T8937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.995957][ T8937] ? import_iovec+0x74/0xa0 [ 160.995984][ T8937] ___sys_sendmsg+0x21f/0x2a0 [ 160.996006][ T8937] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.996065][ T8937] ? __fget_files+0x2a/0x420 [ 160.996082][ T8937] ? __fget_files+0x3a0/0x420 [ 160.996111][ T8937] __x64_sys_sendmsg+0x19b/0x260 [ 160.996135][ T8937] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.996165][ T8937] ? __pfx_ksys_write+0x10/0x10 [ 160.996196][ T8937] ? do_syscall_64+0xbe/0xfa0 [ 160.996227][ T8937] do_syscall_64+0xfa/0xfa0 [ 160.996251][ T8937] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.996276][ T8937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.996295][ T8937] ? clear_bhb_loop+0x60/0xb0 [ 160.996317][ T8937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.996352][ T8937] RIP: 0033:0x7fef3cf8f6c9 [ 160.996376][ T8937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.996392][ T8937] RSP: 002b:00007fef3ddfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.996412][ T8937] RAX: ffffffffffffffda RBX: 00007fef3d1e5fa0 RCX: 00007fef3cf8f6c9 [ 160.996426][ T8937] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 160.996438][ T8937] RBP: 00007fef3ddfc090 R08: 0000000000000000 R09: 0000000000000000 [ 160.996449][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.996459][ T8937] R13: 00007fef3d1e6038 R14: 00007fef3d1e5fa0 R15: 00007ffc60e4f378 [ 160.996494][ T8937] [ 161.798121][ T8945] netem: change failed [ 162.626606][ T8997] FAULT_INJECTION: forcing a failure. [ 162.626606][ T8997] name failslab, interval 1, probability 0, space 0, times 0 [ 162.656485][ T8999] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 162.682661][ T9003] netlink: 52 bytes leftover after parsing attributes in process `syz.1.852'. [ 162.709560][ T8997] CPU: 1 UID: 0 PID: 8997 Comm: syz.4.850 Not tainted syzkaller #0 PREEMPT(full) [ 162.709587][ T8997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.709600][ T8997] Call Trace: [ 162.709608][ T8997] [ 162.709617][ T8997] dump_stack_lvl+0x189/0x250 [ 162.709649][ T8997] ? __pfx____ratelimit+0x10/0x10 [ 162.709677][ T8997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.709704][ T8997] ? __pfx__printk+0x10/0x10 [ 162.709727][ T8997] ? __pfx___might_resched+0x10/0x10 [ 162.709749][ T8997] ? fs_reclaim_acquire+0x7d/0x100 [ 162.709773][ T8997] should_fail_ex+0x414/0x560 [ 162.709810][ T8997] should_failslab+0xa8/0x100 [ 162.709832][ T8997] __kmalloc_cache_noprof+0x6f/0x6f0 [ 162.709860][ T8997] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 162.709894][ T8997] ? genl_start+0x1c9/0x6c0 [ 162.709924][ T8997] genl_start+0x1c9/0x6c0 [ 162.709948][ T8997] ? netlink_lookup+0x30/0x200 [ 162.710003][ T8997] __netlink_dump_start+0x469/0x7e0 [ 162.710045][ T8997] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 162.710076][ T8997] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 162.710101][ T8997] ? genl_get_cmd+0x67f/0x910 [ 162.710128][ T8997] ? __pfx___mutex_lock+0x10/0x10 [ 162.710160][ T8997] ? __pfx_genl_start+0x10/0x10 [ 162.710182][ T8997] ? __pfx_genl_dumpit+0x10/0x10 [ 162.710205][ T8997] ? __pfx_genl_done+0x10/0x10 [ 162.710248][ T8997] genl_rcv_msg+0x5da/0x790 [ 162.710281][ T8997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.710305][ T8997] ? __pfx_tipc_udp_nl_dump_remoteip+0x10/0x10 [ 162.710330][ T8997] ? __asan_memcpy+0x40/0x70 [ 162.710356][ T8997] ? __pfx_ref_tracker_free+0x10/0x10 [ 162.710386][ T8997] netlink_rcv_skb+0x208/0x470 [ 162.710403][ T8997] ? __lock_acquire+0xab9/0xd20 [ 162.710424][ T8997] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.710455][ T8997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.710499][ T8997] ? down_read+0x1ad/0x2e0 [ 162.710521][ T8997] genl_rcv+0x28/0x40 [ 162.710544][ T8997] netlink_unicast+0x82f/0x9e0 [ 162.710584][ T8997] ? __pfx_netlink_unicast+0x10/0x10 [ 162.710616][ T8997] ? netlink_sendmsg+0x642/0xb30 [ 162.710634][ T8997] ? skb_put+0x11b/0x210 [ 162.710658][ T8997] netlink_sendmsg+0x805/0xb30 [ 162.710690][ T8997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.710714][ T8997] ? aa_sock_msg_perm+0xf1/0x1d0 [ 162.710748][ T8997] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.710768][ T8997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.710789][ T8997] __sock_sendmsg+0x21c/0x270 [ 162.710821][ T8997] ____sys_sendmsg+0x505/0x830 [ 162.710862][ T8997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.710901][ T8997] ? import_iovec+0x74/0xa0 [ 162.710931][ T8997] ___sys_sendmsg+0x21f/0x2a0 [ 162.710955][ T8997] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.711019][ T8997] ? __fget_files+0x2a/0x420 [ 162.711037][ T8997] ? __fget_files+0x3a0/0x420 [ 162.711068][ T8997] __x64_sys_sendmsg+0x19b/0x260 [ 162.711093][ T8997] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.711126][ T8997] ? __pfx_ksys_write+0x10/0x10 [ 162.711160][ T8997] ? do_syscall_64+0xbe/0xfa0 [ 162.711193][ T8997] do_syscall_64+0xfa/0xfa0 [ 162.711218][ T8997] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.711246][ T8997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.711265][ T8997] ? clear_bhb_loop+0x60/0xb0 [ 162.711290][ T8997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.711308][ T8997] RIP: 0033:0x7f70a638f6c9 [ 162.711326][ T8997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.711341][ T8997] RSP: 002b:00007f70a7310038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.711362][ T8997] RAX: ffffffffffffffda RBX: 00007f70a65e5fa0 RCX: 00007f70a638f6c9 [ 162.711376][ T8997] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 162.711388][ T8997] RBP: 00007f70a7310090 R08: 0000000000000000 R09: 0000000000000000 [ 162.711400][ T8997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.711411][ T8997] R13: 00007f70a65e6038 R14: 00007f70a65e5fa0 R15: 00007fffebc839d8 [ 162.711446][ T8997] [ 163.651471][ T9021] openvswitch: netlink: Message has 4 unknown bytes. [ 163.688006][ T9036] tipc: Enabling of bearer rejected, failed to enable media [ 163.993787][ T9055] netlink: 'syz.0.867': attribute type 1 has an invalid length. [ 164.118319][ T9062] FAULT_INJECTION: forcing a failure. [ 164.118319][ T9062] name failslab, interval 1, probability 0, space 0, times 0 [ 164.195448][ T9062] CPU: 1 UID: 0 PID: 9062 Comm: syz.4.868 Not tainted syzkaller #0 PREEMPT(full) [ 164.195475][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.195487][ T9062] Call Trace: [ 164.195495][ T9062] [ 164.195503][ T9062] dump_stack_lvl+0x189/0x250 [ 164.195535][ T9062] ? __pfx____ratelimit+0x10/0x10 [ 164.195563][ T9062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.195590][ T9062] ? __pfx__printk+0x10/0x10 [ 164.195616][ T9062] ? __pfx___might_resched+0x10/0x10 [ 164.195637][ T9062] ? fs_reclaim_acquire+0x7d/0x100 [ 164.195661][ T9062] should_fail_ex+0x414/0x560 [ 164.195698][ T9062] should_failslab+0xa8/0x100 [ 164.195721][ T9062] kmem_cache_alloc_node_noprof+0x77/0x710 [ 164.195749][ T9062] ? __alloc_skb+0x112/0x2d0 [ 164.195774][ T9062] __alloc_skb+0x112/0x2d0 [ 164.195797][ T9062] netlink_dump+0x1b7/0xe90 [ 164.195842][ T9062] ? __pfx_netlink_dump+0x10/0x10 [ 164.195891][ T9062] ? genl_start+0x499/0x6c0 [ 164.195925][ T9062] __netlink_dump_start+0x5cb/0x7e0 [ 164.195964][ T9062] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 164.195994][ T9062] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 164.196025][ T9062] ? genl_get_cmd+0x67f/0x910 [ 164.196052][ T9062] ? __pfx___mutex_lock+0x10/0x10 [ 164.196082][ T9062] ? __pfx_genl_start+0x10/0x10 [ 164.196103][ T9062] ? __pfx_genl_dumpit+0x10/0x10 [ 164.196124][ T9062] ? __pfx_genl_done+0x10/0x10 [ 164.196165][ T9062] genl_rcv_msg+0x5da/0x790 [ 164.196197][ T9062] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.196220][ T9062] ? __pfx_tipc_udp_nl_dump_remoteip+0x10/0x10 [ 164.196244][ T9062] ? __asan_memcpy+0x40/0x70 [ 164.196269][ T9062] ? __pfx_ref_tracker_free+0x10/0x10 [ 164.196297][ T9062] netlink_rcv_skb+0x208/0x470 [ 164.196313][ T9062] ? __lock_acquire+0xab9/0xd20 [ 164.196333][ T9062] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.196360][ T9062] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.196401][ T9062] ? down_read+0x1ad/0x2e0 [ 164.196422][ T9062] genl_rcv+0x28/0x40 [ 164.196444][ T9062] netlink_unicast+0x82f/0x9e0 [ 164.196483][ T9062] ? __pfx_netlink_unicast+0x10/0x10 [ 164.196514][ T9062] ? netlink_sendmsg+0x642/0xb30 [ 164.196531][ T9062] ? skb_put+0x11b/0x210 [ 164.196565][ T9062] netlink_sendmsg+0x805/0xb30 [ 164.196594][ T9062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.196616][ T9062] ? aa_sock_msg_perm+0xf1/0x1d0 [ 164.196645][ T9062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 164.196663][ T9062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.196682][ T9062] __sock_sendmsg+0x21c/0x270 [ 164.196711][ T9062] ____sys_sendmsg+0x505/0x830 [ 164.196738][ T9062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.196768][ T9062] ? import_iovec+0x74/0xa0 [ 164.196797][ T9062] ___sys_sendmsg+0x21f/0x2a0 [ 164.196820][ T9062] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.196879][ T9062] ? __fget_files+0x2a/0x420 [ 164.196896][ T9062] ? __fget_files+0x3a0/0x420 [ 164.196924][ T9062] __x64_sys_sendmsg+0x19b/0x260 [ 164.196948][ T9062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.196979][ T9062] ? __pfx_ksys_write+0x10/0x10 [ 164.197010][ T9062] ? do_syscall_64+0xbe/0xfa0 [ 164.197046][ T9062] do_syscall_64+0xfa/0xfa0 [ 164.197070][ T9062] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.197095][ T9062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.197114][ T9062] ? clear_bhb_loop+0x60/0xb0 [ 164.197137][ T9062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.197154][ T9062] RIP: 0033:0x7f70a638f6c9 [ 164.197171][ T9062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.197186][ T9062] RSP: 002b:00007f70a7310038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.197205][ T9062] RAX: ffffffffffffffda RBX: 00007f70a65e5fa0 RCX: 00007f70a638f6c9 [ 164.197218][ T9062] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 164.197229][ T9062] RBP: 00007f70a7310090 R08: 0000000000000000 R09: 0000000000000000 [ 164.197240][ T9062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.197250][ T9062] R13: 00007f70a65e6038 R14: 00007f70a65e5fa0 R15: 00007fffebc839d8 [ 164.197283][ T9062] [ 164.686721][ T9073] netlink: 'syz.4.874': attribute type 3 has an invalid length. [ 164.695833][ T9067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.072615][ T9098] netlink: 'syz.2.877': attribute type 39 has an invalid length. [ 165.217241][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.882'. [ 165.283792][ T9103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.367311][ T9112] sch_fq: defrate 0 ignored. [ 165.534877][ T9114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.571672][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'. [ 165.582255][ T9122] netlink: 96 bytes leftover after parsing attributes in process `syz.3.890'. [ 165.607539][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'. [ 165.640121][ T9116] netlink: 'syz.4.889': attribute type 5 has an invalid length. [ 165.830392][ T9131] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20001 [ 165.853279][ T9131] sctp: [Deprecated]: syz.0.893 (pid 9131) Use of int in maxseg socket option. [ 165.853279][ T9131] Use struct sctp_assoc_value instead [ 165.901998][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.894'. [ 165.934906][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'. [ 165.991047][ T9142] FAULT_INJECTION: forcing a failure. [ 165.991047][ T9142] name failslab, interval 1, probability 0, space 0, times 0 [ 166.022449][ T9142] CPU: 0 UID: 0 PID: 9142 Comm: syz.0.896 Not tainted syzkaller #0 PREEMPT(full) [ 166.022478][ T9142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.022490][ T9142] Call Trace: [ 166.022498][ T9142] [ 166.022507][ T9142] dump_stack_lvl+0x189/0x250 [ 166.022541][ T9142] ? __pfx____ratelimit+0x10/0x10 [ 166.022578][ T9142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.022606][ T9142] ? __pfx__printk+0x10/0x10 [ 166.022624][ T9142] ? netdev_run_todo+0xe1d/0xea0 [ 166.022665][ T9142] should_fail_ex+0x414/0x560 [ 166.022702][ T9142] should_failslab+0xa8/0x100 [ 166.022726][ T9142] kmem_cache_alloc_noprof+0x74/0x6e0 [ 166.022756][ T9142] ? skb_clone+0x212/0x3a0 [ 166.022785][ T9142] skb_clone+0x212/0x3a0 [ 166.022813][ T9142] __netlink_deliver_tap+0x404/0x850 [ 166.022849][ T9142] ? netlink_deliver_tap+0x2e/0x1b0 [ 166.022871][ T9142] netlink_deliver_tap+0x19c/0x1b0 [ 166.022892][ T9142] __netlink_sendskb+0x47/0x90 [ 166.022923][ T9142] netlink_dump+0xa84/0xe90 [ 166.022980][ T9142] ? __pfx_netlink_dump+0x10/0x10 [ 166.023030][ T9142] ? genl_start+0x499/0x6c0 [ 166.023064][ T9142] __netlink_dump_start+0x5cb/0x7e0 [ 166.023104][ T9142] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 166.023134][ T9142] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 166.023158][ T9142] ? genl_get_cmd+0x67f/0x910 [ 166.023184][ T9142] ? __pfx___mutex_lock+0x10/0x10 [ 166.023215][ T9142] ? __pfx_genl_start+0x10/0x10 [ 166.023236][ T9142] ? __pfx_genl_dumpit+0x10/0x10 [ 166.023258][ T9142] ? __pfx_genl_done+0x10/0x10 [ 166.023299][ T9142] genl_rcv_msg+0x5da/0x790 [ 166.023332][ T9142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.023355][ T9142] ? __pfx_tipc_udp_nl_dump_remoteip+0x10/0x10 [ 166.023379][ T9142] ? __asan_memcpy+0x40/0x70 [ 166.023405][ T9142] ? __pfx_ref_tracker_free+0x10/0x10 [ 166.023433][ T9142] netlink_rcv_skb+0x208/0x470 [ 166.023454][ T9142] ? __lock_acquire+0xab9/0xd20 [ 166.023474][ T9142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.023501][ T9142] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 166.023542][ T9142] ? down_read+0x1ad/0x2e0 [ 166.023568][ T9142] genl_rcv+0x28/0x40 [ 166.023590][ T9142] netlink_unicast+0x82f/0x9e0 [ 166.023627][ T9142] ? __pfx_netlink_unicast+0x10/0x10 [ 166.023657][ T9142] ? netlink_sendmsg+0x642/0xb30 [ 166.023674][ T9142] ? skb_put+0x11b/0x210 [ 166.023697][ T9142] netlink_sendmsg+0x805/0xb30 [ 166.023729][ T9142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.023753][ T9142] ? aa_sock_msg_perm+0xf1/0x1d0 [ 166.023785][ T9142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.023805][ T9142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.023826][ T9142] __sock_sendmsg+0x21c/0x270 [ 166.023857][ T9142] ____sys_sendmsg+0x505/0x830 [ 166.023886][ T9142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.023919][ T9142] ? import_iovec+0x74/0xa0 [ 166.023949][ T9142] ___sys_sendmsg+0x21f/0x2a0 [ 166.023974][ T9142] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.024039][ T9142] ? __fget_files+0x2a/0x420 [ 166.024057][ T9142] ? __fget_files+0x3a0/0x420 [ 166.024088][ T9142] __x64_sys_sendmsg+0x19b/0x260 [ 166.024113][ T9142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.024146][ T9142] ? __pfx_ksys_write+0x10/0x10 [ 166.024179][ T9142] ? do_syscall_64+0xbe/0xfa0 [ 166.024212][ T9142] do_syscall_64+0xfa/0xfa0 [ 166.024238][ T9142] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.024265][ T9142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.024285][ T9142] ? clear_bhb_loop+0x60/0xb0 [ 166.024310][ T9142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.024329][ T9142] RIP: 0033:0x7f2b04b8f6c9 [ 166.024347][ T9142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.024362][ T9142] RSP: 002b:00007f2b05a1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.024383][ T9142] RAX: ffffffffffffffda RBX: 00007f2b04de5fa0 RCX: 00007f2b04b8f6c9 [ 166.024397][ T9142] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 166.024408][ T9142] RBP: 00007f2b05a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 166.024419][ T9142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.024430][ T9142] R13: 00007f2b04de6038 R14: 00007f2b04de5fa0 R15: 00007fff44bec648 [ 166.024465][ T9142] [ 166.689064][ T9157] net veth1_virt_wifi .: renamed from virt_wifi0 [ 167.060577][ T9178] netlink: 220 bytes leftover after parsing attributes in process `syz.4.911'. [ 167.401837][ T9206] bridge0: port 3(dummy0) entered disabled state [ 167.408465][ T9206] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.416063][ T9206] bridge0: port 1() entered disabled state [ 167.434132][ T9206] bridge0: entered allmulticast mode [ 167.471028][ T9205] SET target dimension over the limit! [ 167.590630][ T9215] netlink: 'syz.0.921': attribute type 1 has an invalid length. [ 167.695028][ T9226] netlink: 'syz.2.924': attribute type 10 has an invalid length. [ 167.722769][ T9215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.768613][ T9233] netlink: 'syz.1.926': attribute type 1 has an invalid length. [ 167.812291][ T9235] netlink: 36 bytes leftover after parsing attributes in process `syz.4.927'. [ 167.835201][ T9227] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.842483][ T9227] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 167.855491][ T9227] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 167.877616][ T9226] bridge0: port 4(team0) entered blocking state [ 167.889527][ T9226] bridge0: port 4(team0) entered disabled state [ 167.896944][ T9226] team0: entered allmulticast mode [ 167.903042][ T9226] team_slave_0: entered allmulticast mode [ 167.908776][ T9226] team_slave_1: entered allmulticast mode [ 167.918027][ T9226] team0: entered promiscuous mode [ 167.923202][ T9226] team_slave_0: entered promiscuous mode [ 167.933547][ T9226] team_slave_1: entered promiscuous mode [ 167.941533][ T9226] bridge0: port 4(team0) entered blocking state [ 167.947893][ T9226] bridge0: port 4(team0) entered forwarding state [ 167.962460][ T9231] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 167.964224][ T9226] netlink: 'syz.2.924': attribute type 10 has an invalid length. [ 167.994692][ T9231] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 168.027892][ T9233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.056057][ T9236] veth7: entered promiscuous mode [ 168.070864][ T9236] bond1: (slave veth7): Enslaving as an active interface with a down link [ 168.082738][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.091582][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.147759][ T9239] bond1: entered allmulticast mode [ 168.186871][ T9226] netlink: 'syz.2.924': attribute type 10 has an invalid length. [ 168.205512][ T9226] netlink: 'syz.2.924': attribute type 10 has an invalid length. [ 168.375966][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 168.612869][ T9270] xt_connbytes: Forcing CT accounting to be enabled [ 169.122093][ T9250] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 169.150396][ T9305] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 (while UP) [ 169.223136][ T9307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.358299][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'. [ 169.392045][ T9318] syzkaller1: entered promiscuous mode [ 169.437900][ T9318] syzkaller1: entered allmulticast mode [ 169.454206][ T9313] validate_nla: 61 callbacks suppressed [ 169.454226][ T9313] netlink: 'syz.1.947': attribute type 8 has an invalid length. [ 169.678295][ T9324] bridge0: port 3(syz_tun) entered disabled state [ 169.689251][ T9324] bridge0: port 4(team0) entered disabled state [ 169.740730][ T9335] netlink: 'syz.2.950': attribute type 16 has an invalid length. [ 169.748511][ T9335] netlink: 'syz.2.950': attribute type 17 has an invalid length. [ 169.770623][ T9324] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.781088][ T9324] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.849918][ T9335] erspan0: left promiscuous mode [ 169.854940][ T9335] erspan0: left allmulticast mode [ 169.915686][ T9335] bridge0: port 3(syz_tun) entered blocking state [ 169.922367][ T9335] bridge0: port 3(syz_tun) entered forwarding state [ 169.955393][ T9335] bridge0: port 4(team0) entered blocking state [ 169.961848][ T9335] bridge0: port 4(team0) entered forwarding state [ 169.993275][ T9335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.015177][ T3467] bridge0: port 4(team0) entered disabled state [ 170.200377][ T9367] netlink: 'syz.3.962': attribute type 5 has an invalid length. [ 170.216261][ T9366] netlink: 'syz.3.962': attribute type 5 has an invalid length. [ 170.226777][ T9366] __nla_validate_parse: 3 callbacks suppressed [ 170.226793][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.962'. [ 170.275322][ T9367] netlink: 'syz.3.962': attribute type 5 has an invalid length. [ 170.299729][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 170.326980][ T9366] netlink: 'syz.3.962': attribute type 5 has an invalid length. [ 170.335040][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.962'. [ 170.792520][ T9386] netlink: 'syz.1.967': attribute type 1 has an invalid length. [ 170.961608][ T9388] bond2: (slave gretap1): making interface the new active one [ 170.970527][ T9388] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 171.139620][ T9399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.970'. [ 171.208604][ T9400] bond1: entered promiscuous mode [ 171.222248][ T9400] bond1: entered allmulticast mode [ 171.248852][ T9400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.524074][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 171.576656][ T9421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.976'. [ 171.850324][ T9435] geneve2: entered promiscuous mode [ 172.022837][ T9435] geneve2: entered promiscuous mode [ 172.046490][ T9442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.981'. [ 172.106271][ T9444] netlink: 'syz.4.982': attribute type 3 has an invalid length. [ 172.149020][ T9435] geneve2: entered promiscuous mode [ 172.217640][ T9435] geneve2: entered promiscuous mode [ 172.345976][ T9435] geneve2: entered promiscuous mode [ 172.376578][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'. [ 172.436745][ T9435] geneve2: entered promiscuous mode [ 172.634201][ T9475] netlink: 32 bytes leftover after parsing attributes in process `syz.2.993'. [ 172.708915][ T9476] block nbd0: NBD_DISCONNECT [ 172.710965][ T9479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.994'. [ 172.724774][ T9476] block nbd0: shutting down sockets [ 172.823256][ T9481] team0: Device wireguard0 is of different type [ 172.962742][ T9497] rdma_op ffff888032bda1f0 conn xmit_rdma 0000000000000000 [ 173.004271][ T9480] wg2: entered promiscuous mode [ 173.009261][ T9480] wg2: entered allmulticast mode [ 173.126713][ T9501] netlink: 'syz.0.1000': attribute type 4 has an invalid length. [ 174.635302][ T9585] netlink: 'syz.3.1025': attribute type 1 has an invalid length. [ 174.819849][ T9593] syz.0.1028 uses old SIOCAX25GETINFO [ 175.364844][ T9620] __nla_validate_parse: 10 callbacks suppressed [ 175.364865][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1039'. [ 175.484604][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 175.642670][ T9638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1042'. [ 175.728720][ T9634] syzkaller0: entered promiscuous mode [ 175.745329][ T9634] syzkaller0: entered allmulticast mode [ 175.790811][ T9637] tipc: New replicast peer: 255.255.255.255 [ 175.819009][ T9637] tipc: Enabled bearer , priority 10 [ 177.084215][ T9659] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 177.093530][ T897] tipc: Node number set to 1118658138 [ 177.281699][ T9672] netlink: 'syz.4.1053': attribute type 4 has an invalid length. [ 177.469430][ T9685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1058'. [ 177.480670][ T9685] netlink: 'syz.0.1058': attribute type 2 has an invalid length. [ 177.524327][ T9688] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1059'. [ 177.720055][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 177.803701][ T9706] netlink: 'syz.4.1065': attribute type 27 has an invalid length. [ 177.824403][ T9701] bridge_slave_1: left allmulticast mode [ 177.830702][ T9701] bridge_slave_1: left promiscuous mode [ 177.836687][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.848363][ T9701] bridge_slave_0: left allmulticast mode [ 177.858011][ T9701] bridge_slave_0: left promiscuous mode [ 177.866395][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.975625][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 178.033658][ T9713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1063'. [ 178.063102][ T9706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1065'. [ 178.142570][ T9715] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1066'. [ 178.631598][ T3467] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.702177][ T3427] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.752222][ T3427] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.820492][ T3427] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.149405][ T9771] netlink: 'syz.4.1082': attribute type 13 has an invalid length. [ 179.159244][ T9765] warn_alloc: 1 callbacks suppressed [ 179.159261][ T9765] syz.3.1084: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 179.217432][ T9771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.266847][ T9765] CPU: 1 UID: 0 PID: 9765 Comm: syz.3.1084 Not tainted syzkaller #0 PREEMPT(full) [ 179.266874][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.266885][ T9765] Call Trace: [ 179.266893][ T9765] [ 179.266902][ T9765] dump_stack_lvl+0x189/0x250 [ 179.266938][ T9765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.266965][ T9765] ? __pfx__printk+0x10/0x10 [ 179.266986][ T9765] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 179.267014][ T9765] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 179.267044][ T9765] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 179.267083][ T9765] warn_alloc+0x214/0x310 [ 179.267140][ T9765] ? __pfx_warn_alloc+0x10/0x10 [ 179.267182][ T9765] ? __get_vm_area_node+0x28f/0x300 [ 179.267212][ T9765] ? hash_ipportip_create+0x358/0xfe0 [ 179.267242][ T9765] __vmalloc_node_range_noprof+0x690/0x12d0 [ 179.267273][ T9765] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 179.267323][ T9765] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 179.267354][ T9765] ? hash_ipportip_create+0x358/0xfe0 [ 179.267383][ T9765] ? rcu_is_watching+0x15/0xb0 [ 179.267407][ T9765] ? hash_ipportip_create+0x358/0xfe0 [ 179.267431][ T9765] __kvmalloc_node_noprof+0x674/0x910 [ 179.267463][ T9765] ? hash_ipportip_create+0x358/0xfe0 [ 179.267487][ T9765] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 179.267516][ T9765] ? hash_ipportip_create+0x2fe/0xfe0 [ 179.267545][ T9765] hash_ipportip_create+0x358/0xfe0 [ 179.267578][ T9765] ? __nla_parse+0x40/0x60 [ 179.267601][ T9765] ? __pfx_hash_ipportip_create+0x10/0x10 [ 179.267635][ T9765] ip_set_create+0xa97/0x1940 [ 179.267664][ T9765] ? ip_set_create+0x4a2/0x1940 [ 179.267708][ T9765] ? __pfx_ip_set_create+0x10/0x10 [ 179.267778][ T9765] nfnetlink_rcv_msg+0xb4d/0x1130 [ 179.267810][ T9765] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 179.267862][ T9765] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 179.267888][ T9765] ? kasan_save_track+0x4f/0x80 [ 179.267972][ T9765] netlink_rcv_skb+0x208/0x470 [ 179.267990][ T9765] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.268020][ T9765] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 179.268052][ T9765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.268093][ T9765] ? bpf_lsm_capable+0x9/0x20 [ 179.268118][ T9765] ? security_capable+0x7e/0x2e0 [ 179.268154][ T9765] nfnetlink_rcv+0x282/0x2590 [ 179.268187][ T9765] ? __dev_queue_xmit+0x27b/0x3b50 [ 179.268214][ T9765] ? __dev_queue_xmit+0x1d79/0x3b50 [ 179.268236][ T9765] ? kasan_save_track+0x3e/0x80 [ 179.268262][ T9765] ? __kasan_slab_alloc+0x6c/0x80 [ 179.268303][ T9765] ? __dev_queue_xmit+0x27b/0x3b50 [ 179.268343][ T9765] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 179.268371][ T9765] ? __pfx___dev_queue_xmit+0x10/0x10 [ 179.268412][ T9765] ? ref_tracker_free+0x63a/0x7d0 [ 179.268433][ T9765] ? __asan_memcpy+0x40/0x70 [ 179.268460][ T9765] ? __pfx_ref_tracker_free+0x10/0x10 [ 179.268497][ T9765] ? skb_clone+0x246/0x3a0 [ 179.268523][ T9765] ? __netlink_deliver_tap+0x807/0x850 [ 179.268542][ T9765] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.268569][ T9765] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.268597][ T9765] netlink_unicast+0x82f/0x9e0 [ 179.268637][ T9765] ? __pfx_netlink_unicast+0x10/0x10 [ 179.268669][ T9765] ? netlink_sendmsg+0x642/0xb30 [ 179.268687][ T9765] ? skb_put+0x11b/0x210 [ 179.268711][ T9765] netlink_sendmsg+0x805/0xb30 [ 179.268742][ T9765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.268767][ T9765] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.268800][ T9765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.268820][ T9765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.268842][ T9765] __sock_sendmsg+0x21c/0x270 [ 179.268886][ T9765] ____sys_sendmsg+0x505/0x830 [ 179.268913][ T9765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.268944][ T9765] ? import_iovec+0x74/0xa0 [ 179.268972][ T9765] ___sys_sendmsg+0x21f/0x2a0 [ 179.268995][ T9765] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.269054][ T9765] ? __fget_files+0x2a/0x420 [ 179.269079][ T9765] ? __fget_files+0x3a0/0x420 [ 179.269108][ T9765] __x64_sys_sendmsg+0x19b/0x260 [ 179.269133][ T9765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.269175][ T9765] ? do_syscall_64+0xbe/0xfa0 [ 179.269208][ T9765] do_syscall_64+0xfa/0xfa0 [ 179.269234][ T9765] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.269262][ T9765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.269282][ T9765] ? clear_bhb_loop+0x60/0xb0 [ 179.269310][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.269329][ T9765] RIP: 0033:0x7f241018f6c9 [ 179.269348][ T9765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.269364][ T9765] RSP: 002b:00007f2410f4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.269386][ T9765] RAX: ffffffffffffffda RBX: 00007f24103e5fa0 RCX: 00007f241018f6c9 [ 179.269400][ T9765] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 179.269412][ T9765] RBP: 00007f2410211f91 R08: 0000000000000000 R09: 0000000000000000 [ 179.269424][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.269436][ T9765] R13: 00007f24103e6038 R14: 00007f24103e5fa0 R15: 00007ffdb850dd88 [ 179.269471][ T9765] [ 179.786241][ T9765] Mem-Info: [ 179.791593][ T9765] active_anon:4760 inactive_anon:0 isolated_anon:0 [ 179.791593][ T9765] active_file:3204 inactive_file:39912 isolated_file:0 [ 179.791593][ T9765] unevictable:768 dirty:69 writeback:0 [ 179.791593][ T9765] slab_reclaimable:10900 slab_unreclaimable:106574 [ 179.791593][ T9765] mapped:29273 shmem:1358 pagetables:1065 [ 179.791593][ T9765] sec_pagetables:0 bounce:0 [ 179.791593][ T9765] kernel_misc_reclaimable:0 [ 179.791593][ T9765] free:1317050 free_pcp:17031 free_cma:0 [ 179.882846][ T9765] Node 0 active_anon:19040kB inactive_anon:0kB active_file:12816kB inactive_file:159444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117084kB dirty:232kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11952kB pagetables:4148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 179.946459][ T9771] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 179.985166][ T9765] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.016046][ T9765] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.055145][ T9765] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 180.061077][ T9765] Node 0 DMA32 free:1304276kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19240kB inactive_anon:0kB active_file:12816kB inactive_file:159444kB unevictable:1536kB writepending:232kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:50832kB local_pcp:22524kB free_cma:0kB [ 180.094479][ T9765] lowmem_reserve[]: 0 0 0 0 0 [ 180.100006][ T9765] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.147697][ T9765] lowmem_reserve[]: 0 0 0 0 0 [ 180.152666][ T9765] Node 1 Normal free:3902280kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14632kB local_pcp:6820kB free_cma:0kB [ 180.189206][ T9765] lowmem_reserve[]: 0 0 0 0 0 [ 180.194078][ T9765] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 180.208078][ T9765] Node 0 DMA32: 1194*4kB (UME) 1054*8kB (UME) 363*16kB (UME) 256*32kB (UME) 133*64kB (UM) 105*128kB (UME) 73*256kB (UM) 53*512kB (UM) 27*1024kB (UME) 3*2048kB (M) 287*4096kB (M) = 1304328kB [ 180.227458][ T9765] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 180.247436][ T9765] Node 1 Normal: 150*4kB (U) 36*8kB (UME) 53*16kB (UME) 90*32kB (UME) 23*64kB (UME) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 950*4096kB (ME) = 3902280kB [ 180.275534][ T9765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.312383][ T9765] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.335568][ T9765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.358174][ T9765] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.389642][ T9765] 44470 total pagecache pages [ 180.394374][ T9765] 0 pages in swap cache [ 180.398549][ T9765] Free swap = 124996kB [ 180.443543][ T9765] Total swap = 124996kB [ 180.447812][ T9765] 2097051 pages RAM [ 180.456996][ T9765] 0 pages HighMem/MovableOnly [ 180.466450][ T9765] 424119 pages reserved [ 180.482113][ T9765] 0 pages cma reserved [ 180.561721][ T9810] __nla_validate_parse: 2 callbacks suppressed [ 180.561741][ T9810] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1092'. [ 180.713928][ T9816] netlink: 'syz.4.1095': attribute type 11 has an invalid length. [ 180.878654][ T9825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1097'. [ 181.079597][ T9840] gre0: entered promiscuous mode [ 181.084608][ T9840] gre0: entered allmulticast mode [ 181.118997][ T9843] dvmrp0: entered allmulticast mode [ 181.436632][ T9857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1106'. [ 181.479510][ T9857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1106'. [ 181.535448][ T9857] gretap0: entered promiscuous mode [ 181.540289][ T9865] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1108'. [ 181.542813][ T9857] batadv_slave_1: entered promiscuous mode [ 181.556536][ T9857] batadv_slave_1: left promiscuous mode [ 181.564432][ T9857] gretap0: left promiscuous mode [ 181.769165][ T9879] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1113'. [ 181.871288][ T9889] netlink: 'syz.4.1115': attribute type 4 has an invalid length. [ 182.007047][ T9895] Bluetooth: MGMT ver 1.23 [ 182.341449][ T9920] netlink: 'syz.2.1125': attribute type 1 has an invalid length. [ 182.352146][ T9922] netlink: 'syz.4.1126': attribute type 10 has an invalid length. [ 182.367277][ T9920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.446528][ T9925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 182.481360][ T9927] SET target dimension over the limit! [ 182.567079][ T9931] syzkaller0: entered promiscuous mode [ 182.577825][ T9931] syzkaller0: entered allmulticast mode [ 183.469760][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 183.542553][ T9964] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 183.554930][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1141'. [ 183.565827][ T9974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1141'. [ 183.576209][ T9972] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 183.622491][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 183.730024][ T9983] Cannot find del_set index 49151 as target [ 183.770258][ T9987] vxcan4: entered allmulticast mode [ 183.818017][ T9987] netlink: 'syz.4.1144': attribute type 4 has an invalid length. [ 184.112094][T10020] sctp: [Deprecated]: syz.1.1146 (pid 10020) Use of int in maxseg socket option. [ 184.112094][T10020] Use struct sctp_assoc_value instead [ 184.616396][T10023] veth0: entered promiscuous mode [ 184.622717][ T30] audit: type=1107 audit(1763486095.367:4): pid=10025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¼Ì4*«h×@)@0 ¸éòE?\{ºm\;‚R¡' [ 184.638275][T10026] 8021q: VLANs not supported on ipvlan1 [ 184.678489][T10030] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 184.874723][T10036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.927865][T10036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.938293][T10038] netlink: 'syz.4.1154': attribute type 2 has an invalid length. [ 185.167941][T10046] sctp: [Deprecated]: syz.4.1157 (pid 10046) Use of int in max_burst socket option deprecated. [ 185.167941][T10046] Use struct sctp_assoc_value instead [ 185.285146][T10055] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 186.184981][T10096] sctp: [Deprecated]: syz.0.1171 (pid 10096) Use of int in max_burst socket option deprecated. [ 186.184981][T10096] Use struct sctp_assoc_value instead [ 187.052132][T10098] bond3: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 187.085652][T10103] __nla_validate_parse: 7 callbacks suppressed [ 187.085671][T10103] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1174'. [ 187.141159][T10102] syzkaller0: entered promiscuous mode [ 187.172782][T10105] netlink: 'syz.4.1175': attribute type 8 has an invalid length. [ 187.173175][T10102] syzkaller0: entered allmulticast mode [ 187.192820][T10105] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 187.213531][T10108] netlink: 'syz.0.1177': attribute type 1 has an invalid length. [ 187.224414][T10108] netlink: 'syz.0.1177': attribute type 2 has an invalid length. [ 187.243567][T10108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.292592][T10109] lo: entered allmulticast mode [ 187.330888][T10109] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1176'. [ 187.341885][T10106] lo: left allmulticast mode [ 187.770912][T10143] tunl0: entered promiscuous mode [ 187.782644][T10143] netlink: 'syz.1.1186': attribute type 3 has an invalid length. [ 187.815517][T10143] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1186'. [ 187.826904][T10147] netlink: 'syz.4.1188': attribute type 1 has an invalid length. [ 187.829692][T10142] netlink: 'syz.1.1186': attribute type 3 has an invalid length. [ 187.845246][T10142] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1186'. [ 188.208181][T10163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1190'. [ 188.229802][T10163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1190'. [ 188.470507][T10175] netlink: 'syz.0.1195': attribute type 21 has an invalid length. [ 188.489534][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1195'. [ 188.620919][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 188.640191][T10189] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1199'. [ 188.677498][T10187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 188.904467][T10205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.915342][T10200] team0: Device ip6gre1 is of different type [ 188.986485][T10205] netlink: 'syz.1.1204': attribute type 4 has an invalid length. [ 189.667065][T10243] syzkaller1: entered promiscuous mode [ 189.672973][T10243] syzkaller1: entered allmulticast mode [ 189.742979][T10252] netlink: 'syz.3.1217': attribute type 13 has an invalid length. [ 189.764393][T10252] netlink: 'syz.3.1217': attribute type 17 has an invalid length. [ 189.807656][T10252] gre0: left promiscuous mode [ 189.818512][T10252] gre0: left allmulticast mode [ 189.917265][T10252] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.928785][T10252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.962805][T10254] IPVS: Error connecting to the multicast addr [ 190.273345][T10265] geneve2: entered promiscuous mode [ 190.278720][T10265] geneve2: entered allmulticast mode [ 190.362606][T10269] netlink: 'syz.1.1225': attribute type 11 has an invalid length. [ 190.481262][T10272] syzkaller1: entered promiscuous mode [ 190.500140][T10272] syzkaller1: entered allmulticast mode [ 190.559206][T10276] nft_compat: unsupported protocol 5 [ 191.992421][T10361] syzkaller0: entered promiscuous mode [ 192.002438][T10361] syzkaller0: entered allmulticast mode [ 192.031941][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.047730][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.089447][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.159768][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.164273][T10355] __nla_validate_parse: 6 callbacks suppressed [ 192.164296][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1250'. [ 192.445827][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 192.545449][T10380] validate_nla: 1 callbacks suppressed [ 192.545469][T10380] netlink: 'syz.3.1259': attribute type 33 has an invalid length. [ 192.584671][T10380] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1259'. [ 192.615939][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1259'. [ 192.754847][T10387] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 192.758519][T10391] netlink: 'syz.0.1262': attribute type 11 has an invalid length. [ 192.779571][T10393] netlink: 'syz.0.1262': attribute type 11 has an invalid length. [ 192.790701][T10387] bond4 (unregistering): Released all slaves [ 193.055112][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 193.074665][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1267'. [ 193.205421][T10419] tipc: New replicast peer: 255.255.255.255 [ 193.222779][T10419] tipc: Enabled bearer , priority 10 [ 193.450176][T10429] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 193.571817][T10429] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1270'. [ 193.606089][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1272'. [ 193.617088][T10443] sctp: [Deprecated]: syz.4.1273 (pid 10443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.617088][T10443] Use struct sctp_sack_info instead [ 193.644152][T10444] bridge0: left allmulticast mode [ 193.659961][T10436] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1273'. [ 194.264229][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.275114][T10477] x_tables: duplicate entry at hook 1 [ 194.393604][T10482] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1290'. [ 196.017654][T10569] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 196.068325][T10577] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 196.082511][T10577] bond7 (unregistering): Released all slaves [ 196.127925][T10576] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 196.140158][T10576] syzkaller0: entered promiscuous mode [ 196.145740][T10576] syzkaller0: entered allmulticast mode [ 196.180151][T10580] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 196.194027][T10576] tipc: Disabling bearer [ 196.593590][T10586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.826336][T10588] geneve2: entered promiscuous mode [ 196.832005][T10588] geneve2: entered allmulticast mode [ 196.845717][T10590] : entered promiscuous mode [ 196.866512][ T3549] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.876433][ T3549] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.898045][ T3549] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 196.911463][ T3549] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.920195][ T3549] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.928564][ T3549] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 196.998618][ T3549] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.018393][ T3549] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.036969][ T3549] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 197.055242][ T3549] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.075434][ T3549] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.086678][ T3549] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 197.212666][T10627] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 197.240572][T10627] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 197.271158][T10627] gretap1: entered promiscuous mode [ 197.290022][T10627] gretap1: entered allmulticast mode [ 197.330447][T10635] __nla_validate_parse: 7 callbacks suppressed [ 197.330465][T10635] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1326'. [ 197.358205][T10635] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 197.943653][T10676] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1337'. [ 197.980853][T10676] netlink: 372 bytes leftover after parsing attributes in process `syz.2.1337'. [ 198.004866][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 198.039708][T10676] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1337'. [ 198.054363][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 198.315752][T10697] netlink: 'syz.0.1343': attribute type 1 has an invalid length. [ 198.406771][T10699] bond7: (slave vxcan39): The slave device specified does not support setting the MAC address [ 198.467413][T10699] bond7: (slave vxcan39): Error -95 calling set_mac_address [ 198.494411][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.511235][T10697] bond7: (slave gretap1): making interface the new active one [ 198.522660][T10697] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 198.525739][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.539743][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.546315][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.554285][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.560762][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.567215][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.571380][T10699] gretap2: entered promiscuous mode [ 198.573755][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.590949][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.597453][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.602171][T10699] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 198.604613][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.618864][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.625679][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.634411][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.638088][T10697] macvlan2: entered promiscuous mode [ 198.641457][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.653372][T10697] macvlan2: entered allmulticast mode [ 198.661159][T10697] bond7: entered promiscuous mode [ 198.664226][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.666842][T10697] gretap1: entered promiscuous mode [ 198.674402][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.680019][T10697] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 198.686382][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.691688][T10708] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1346'. [ 198.708173][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.714890][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.721716][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.728320][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.736556][T10697] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 198.736944][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.758251][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.765426][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.772976][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.781006][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.783202][T10697] bond7: left promiscuous mode [ 198.787636][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.795370][T10697] gretap1: left promiscuous mode [ 198.799339][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.811458][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.817867][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.826123][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.832570][T10704] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.859818][T10711] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1347'. [ 199.041308][T10697] syz.0.1343 (10697) used greatest stack depth: 18312 bytes left [ 199.128488][T10722] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 199.147625][T10722] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 199.193827][T10722] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 199.217187][T10722] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 199.226692][T10722] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 199.247983][T10722] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 199.256952][T10722] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 199.265665][T10722] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 199.283282][T10722] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 199.293403][T10722] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 199.801065][T10758] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1362'. [ 200.118595][T10739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 200.343632][T10786] netlink: 'syz.1.1370': attribute type 4 has an invalid length. [ 200.404756][T10786] `: renamed from bond0 (while UP) [ 200.410456][T10788] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 200.559861][T10794] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 200.612358][T10795] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 200.716220][T10795] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.728529][T10795] bond0: (slave bond4): making interface the new active one [ 200.738055][T10795] bond0: (slave bond4): Enslaving as an active interface with an up link [ 200.772243][T10808] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.798609][T10808] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 201.101576][T10822] bond5 (unregistering): Released all slaves [ 201.295196][T10835] tipc: Enabled bearer , priority 0 [ 201.327541][T10835] syzkaller0: entered promiscuous mode [ 201.337359][T10835] syzkaller0: entered allmulticast mode [ 201.357514][T10835] tipc: Resetting bearer [ 201.403574][T10834] tipc: Resetting bearer [ 201.451462][T10834] tipc: Disabling bearer [ 201.668490][T10856] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 201.672718][T10857] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.685316][T10857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.692603][T10857] IPv6: NLM_F_CREATE should be set when creating new route [ 202.016983][T10869] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 202.030199][ T3549] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.059757][ T3549] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.068626][ T3549] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.078442][ T3549] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 202.108173][T10880] veth0: entered promiscuous mode [ 202.417309][T10902] __nla_validate_parse: 4 callbacks suppressed [ 202.417327][T10902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1405'. [ 202.599511][T10914] netlink: 'syz.1.1408': attribute type 10 has an invalid length. [ 202.607475][T10914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1408'. [ 202.625936][T10914] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 202.640114][T10914] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 202.695327][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 202.781459][T10918] syzkaller0: entered allmulticast mode [ 202.827151][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.872696][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 202.896265][T10918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1410'. [ 202.911508][T10918] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1410'. [ 203.011614][T10934] netlink: 'syz.1.1415': attribute type 4 has an invalid length. [ 203.076736][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 203.095680][T10938] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1417'. [ 203.213419][T10943] pim6reg1: entered promiscuous mode [ 203.218779][T10943] pim6reg1: entered allmulticast mode [ 203.483972][T10960] netlink: 'syz.0.1422': attribute type 1 has an invalid length. [ 203.492520][T10958] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1421'. [ 203.576075][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'. [ 203.615090][T10965] 8021q: adding VLAN 0 to HW filter on device bond9 [ 203.633223][T10965] bond8: (slave bond9): making interface the new active one [ 203.644388][T10965] bond8: (slave bond9): Enslaving as an active interface with an up link [ 203.730961][T10960] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.744499][T10960] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 203.984929][T10989] netlink: 'syz.0.1430': attribute type 10 has an invalid length. [ 204.279969][T11006] netlink: 'syz.0.1437': attribute type 32 has an invalid length. [ 204.309811][T11006] bond10: Setting coupled_control to off (0) [ 204.557592][T11026] xt_policy: too many policy elements [ 204.736222][T11027] pimreg: entered allmulticast mode [ 204.749134][T11035] bridge_slave_1: left allmulticast mode [ 204.777765][T11035] bridge_slave_1: left promiscuous mode [ 204.799071][T11035] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.814855][T11035] bridge_slave_0: left allmulticast mode [ 204.821443][T11035] bridge_slave_0: left promiscuous mode [ 204.827407][T11035] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.291166][T11077] netlink: 'syz.1.1452': attribute type 3 has an invalid length. [ 205.299031][T11077] netlink: 'syz.1.1452': attribute type 1 has an invalid length. [ 205.830708][T11113] netlink: 'syz.2.1463': attribute type 18 has an invalid length. [ 206.061765][T11132] netlink: 'syz.4.1469': attribute type 1 has an invalid length. [ 206.079683][T11132] netlink: 'syz.4.1469': attribute type 3 has an invalid length. [ 206.126091][T11136] net_ratelimit: 56 callbacks suppressed [ 206.126112][T11136] openvswitch: netlink: Message has 4 unknown bytes. [ 206.346778][T11145] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 206.377842][T11145] netlink: 'syz.4.1473': attribute type 2 has an invalid length. [ 206.588213][T11160] geneve2: entered promiscuous mode [ 206.593843][T11160] geneve2: entered allmulticast mode [ 207.494751][T11221] syzkaller0: entered promiscuous mode [ 207.501050][T11221] syzkaller0: entered allmulticast mode [ 207.847870][T11256] __nla_validate_parse: 22 callbacks suppressed [ 207.847892][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1508'. [ 208.036498][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'. [ 208.320755][T11284] bond2 (unregistering): Released all slaves [ 208.375119][T11292] veth0: entered promiscuous mode [ 208.386327][T11292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1521'. [ 208.420667][T11290] veth0: left promiscuous mode [ 208.611412][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1522'. [ 208.669172][T11312] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1522'. [ 208.711902][T11317] netlink: 'syz.0.1526': attribute type 1 has an invalid length. [ 208.720142][T11317] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1526'. [ 208.729261][T11317] NCSI netlink: No device for ifindex 0 [ 208.955595][T11332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 209.114695][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 209.144676][T11347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1535'. [ 209.266586][T11355] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 209.272361][T11354] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 209.290031][T11354] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 209.319705][T11354] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 209.487701][T11362] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1541'. [ 209.795656][T11384] netlink: 'syz.1.1548': attribute type 11 has an invalid length. [ 209.828113][T11374] sctp: [Deprecated]: syz.4.1546 (pid 11374) Use of int in maxseg socket option. [ 209.828113][T11374] Use struct sctp_assoc_value instead [ 210.015765][T11388] netlink: 'syz.3.1550': attribute type 2 has an invalid length. [ 210.265760][T11403] netlink: 'syz.3.1557': attribute type 1 has an invalid length. [ 210.489978][T11408] bond2: (slave gretap2): making interface the new active one [ 210.498445][T11408] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 211.088353][T11453] netlink: 'syz.4.1572': attribute type 1 has an invalid length. [ 211.245229][T11458] openvswitch: netlink: nsh attribute has 65276 unknown bytes. [ 211.253047][T11458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.431069][T11473] netlink: 'syz.1.1578': attribute type 2 has an invalid length. [ 211.679658][T11491] netlink: 'syz.0.1582': attribute type 1 has an invalid length. [ 211.705486][T11491] netlink: 'syz.0.1582': attribute type 1 has an invalid length. [ 211.739420][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 211.745888][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 211.753488][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 211.775651][T11491] netlink: 'syz.0.1582': attribute type 2 has an invalid length. [ 211.996061][T11504] netlink: 'syz.1.1585': attribute type 10 has an invalid length. [ 212.020030][T11504] syz_tun: entered promiscuous mode [ 212.043758][T11504] `: (slave syz_tun): Enslaving as an active interface with an up link [ 212.167620][T11518] warn_alloc: 1 callbacks suppressed [ 212.167645][T11518] syz.2.1588: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.201244][T11518] CPU: 1 UID: 0 PID: 11518 Comm: syz.2.1588 Not tainted syzkaller #0 PREEMPT(full) [ 212.201273][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.201294][T11518] Call Trace: [ 212.201302][T11518] [ 212.201311][T11518] dump_stack_lvl+0x189/0x250 [ 212.201345][T11518] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 212.201379][T11518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.201407][T11518] ? __pfx__printk+0x10/0x10 [ 212.201439][T11518] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 212.201478][T11518] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 212.201511][T11518] warn_alloc+0x214/0x310 [ 212.201547][T11518] ? __pfx_warn_alloc+0x10/0x10 [ 212.201585][T11518] ? __get_vm_area_node+0x28f/0x300 [ 212.201611][T11518] ? hash_ip_create+0x741/0x1410 [ 212.201637][T11518] __vmalloc_node_range_noprof+0x690/0x12d0 [ 212.201663][T11518] ? do_syscall_64+0xfa/0xfa0 [ 212.201719][T11518] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.201746][T11518] ? hash_ip_create+0x741/0x1410 [ 212.201770][T11518] ? rcu_is_watching+0x15/0xb0 [ 212.201791][T11518] ? hash_ip_create+0x741/0x1410 [ 212.201812][T11518] __kvmalloc_node_noprof+0x674/0x910 [ 212.201841][T11518] ? hash_ip_create+0x741/0x1410 [ 212.201860][T11518] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 212.201886][T11518] ? hash_ip_create+0x6d5/0x1410 [ 212.201929][T11518] hash_ip_create+0x741/0x1410 [ 212.201950][T11518] ? __lock_acquire+0xab9/0xd20 [ 212.201986][T11518] ? __pfx_hash_ip_create+0x10/0x10 [ 212.202011][T11518] ? __nla_parse+0x40/0x60 [ 212.202033][T11518] ? __pfx_hash_ip_create+0x10/0x10 [ 212.202057][T11518] ip_set_create+0xa97/0x1940 [ 212.202086][T11518] ? ip_set_create+0x4a2/0x1940 [ 212.202127][T11518] ? __pfx_ip_set_create+0x10/0x10 [ 212.202195][T11518] nfnetlink_rcv_msg+0xb4d/0x1130 [ 212.202231][T11518] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 212.202280][T11518] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 212.202313][T11518] ? kasan_save_track+0x4f/0x80 [ 212.202395][T11518] netlink_rcv_skb+0x208/0x470 [ 212.202413][T11518] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.202441][T11518] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 212.202472][T11518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.202505][T11518] ? bpf_lsm_capable+0x9/0x20 [ 212.202530][T11518] ? security_capable+0x7e/0x2e0 [ 212.202567][T11518] nfnetlink_rcv+0x282/0x2590 [ 212.202598][T11518] ? __dev_queue_xmit+0x27b/0x3b50 [ 212.202623][T11518] ? __dev_queue_xmit+0x1d79/0x3b50 [ 212.202645][T11518] ? kasan_save_track+0x3e/0x80 [ 212.202671][T11518] ? __kasan_slab_alloc+0x6c/0x80 [ 212.202710][T11518] ? __dev_queue_xmit+0x27b/0x3b50 [ 212.202748][T11518] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 212.202776][T11518] ? __pfx___dev_queue_xmit+0x10/0x10 [ 212.202816][T11518] ? ref_tracker_free+0x63a/0x7d0 [ 212.202836][T11518] ? __asan_memcpy+0x40/0x70 [ 212.202862][T11518] ? __pfx_ref_tracker_free+0x10/0x10 [ 212.202899][T11518] ? skb_clone+0x246/0x3a0 [ 212.202926][T11518] ? __netlink_deliver_tap+0x807/0x850 [ 212.202945][T11518] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.202972][T11518] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.203000][T11518] netlink_unicast+0x82f/0x9e0 [ 212.203039][T11518] ? __pfx_netlink_unicast+0x10/0x10 [ 212.203070][T11518] ? netlink_sendmsg+0x642/0xb30 [ 212.203088][T11518] ? skb_put+0x11b/0x210 [ 212.203111][T11518] netlink_sendmsg+0x805/0xb30 [ 212.203141][T11518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.203176][T11518] ? aa_sock_msg_perm+0xf1/0x1d0 [ 212.203205][T11518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.203223][T11518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.203242][T11518] __sock_sendmsg+0x21c/0x270 [ 212.203271][T11518] ____sys_sendmsg+0x505/0x830 [ 212.203303][T11518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.203333][T11518] ? import_iovec+0x74/0xa0 [ 212.203360][T11518] ___sys_sendmsg+0x21f/0x2a0 [ 212.203382][T11518] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.203436][T11518] ? __fget_files+0x2a/0x420 [ 212.203453][T11518] ? __fget_files+0x3a0/0x420 [ 212.203480][T11518] __x64_sys_sendmsg+0x19b/0x260 [ 212.203504][T11518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.203534][T11518] ? rcu_is_watching+0x15/0xb0 [ 212.203560][T11518] ? do_syscall_64+0xbe/0xfa0 [ 212.203589][T11518] do_syscall_64+0xfa/0xfa0 [ 212.203614][T11518] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.203640][T11518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.203658][T11518] ? clear_bhb_loop+0x60/0xb0 [ 212.203681][T11518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.203699][T11518] RIP: 0033:0x7fef3cf8f6c9 [ 212.203716][T11518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.203733][T11518] RSP: 002b:00007fef3dddb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.203753][T11518] RAX: ffffffffffffffda RBX: 00007fef3d1e6090 RCX: 00007fef3cf8f6c9 [ 212.203767][T11518] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 212.203778][T11518] RBP: 00007fef3d011f91 R08: 0000000000000000 R09: 0000000000000000 [ 212.203790][T11518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.203800][T11518] R13: 00007fef3d1e6128 R14: 00007fef3d1e6090 R15: 00007ffc60e4f378 [ 212.203833][T11518] [ 212.203948][T11518] Mem-Info: [ 212.732573][T11518] active_anon:4028 inactive_anon:0 isolated_anon:0 [ 212.732573][T11518] active_file:3204 inactive_file:39925 isolated_file:0 [ 212.732573][T11518] unevictable:768 dirty:189 writeback:0 [ 212.732573][T11518] slab_reclaimable:11599 slab_unreclaimable:129558 [ 212.732573][T11518] mapped:29020 shmem:1407 pagetables:1142 [ 212.732573][T11518] sec_pagetables:0 bounce:0 [ 212.732573][T11518] kernel_misc_reclaimable:0 [ 212.732573][T11518] free:1297449 free_pcp:13212 free_cma:0 [ 212.790400][T11518] Node 0 active_anon:16012kB inactive_anon:0kB active_file:12816kB inactive_file:159496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116080kB dirty:756kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12532kB pagetables:4428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 212.828240][T11518] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 212.876147][T11539] __nla_validate_parse: 18 callbacks suppressed [ 212.876168][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 212.941661][T11518] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.005140][T11518] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 213.013593][T11518] Node 0 DMA32 free:1271344kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16056kB inactive_anon:0kB active_file:12816kB inactive_file:159496kB unevictable:1536kB writepending:832kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:39648kB local_pcp:18620kB free_cma:0kB [ 213.092097][T11518] lowmem_reserve[]: 0 0 0 0 0 [ 213.103021][T11518] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.137388][T11518] lowmem_reserve[]: 0 0 0 0 0 [ 213.142621][T11518] Node 1 Normal free:3902280kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14632kB local_pcp:7812kB free_cma:0kB [ 213.144407][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1599'. [ 213.186466][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1599'. [ 213.214864][T11518] lowmem_reserve[]: 0 0 0 0 0 [ 213.220553][T11518] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.233403][T11518] Node 0 DMA32: 846*4kB (ME) 187*8kB (UM) 256*16kB (UME) 556*32kB (UME) 105*64kB (UM) 106*128kB (UME) 79*256kB (UM) 54*512kB (UM) 33*1024kB (UME) 8*2048kB (ME) 275*4096kB (UM) = 1271504kB [ 213.256450][T11518] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 213.268761][T11518] Node 1 Normal: 150*4kB (U) 36*8kB (UME) 53*16kB (UME) 90*32kB (UME) 23*64kB (UME) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 950*4096kB (ME) = 3902280kB [ 213.289722][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 213.304307][T11558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1597'. [ 213.320748][T11518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.324790][T11561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1600'. [ 213.331192][T11518] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.348976][T11518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.360396][T11518] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.369912][T11518] 44534 total pagecache pages [ 213.374707][T11518] 0 pages in swap cache [ 213.389628][T11518] Free swap = 124996kB [ 213.394305][T11518] Total swap = 124996kB [ 213.398966][T11518] 2097051 pages RAM [ 213.403533][T11518] 0 pages HighMem/MovableOnly [ 213.408755][T11518] 424119 pages reserved [ 213.413429][T11518] 0 pages cma reserved [ 213.584435][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 213.730647][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 213.760513][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 213.854839][T11595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1611'. [ 213.947500][T11602] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 214.142289][T11619] sctp: [Deprecated]: syz.4.1615 (pid 11619) Use of int in maxseg socket option. [ 214.142289][T11619] Use struct sctp_assoc_value instead [ 214.296635][T11627] validate_nla: 1 callbacks suppressed [ 214.296654][T11627] netlink: 'syz.3.1619': attribute type 10 has an invalid length. [ 214.323601][T11627] batman_adv: batadv0: Adding interface: netdevsim0 [ 214.330614][T11627] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.356976][T11627] batman_adv: batadv0: Interface activated: netdevsim0 [ 214.661421][T11652] netlink: 'syz.0.1625': attribute type 1 has an invalid length. [ 214.927142][T11674] ipt_ECN: cannot use operation on non-tcp rule [ 215.589749][T11719] batman_adv: batadv0: Adding interface: dummy0 [ 215.596055][T11719] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.621983][T11719] batman_adv: batadv0: Interface activated: dummy0 [ 215.652175][T11719] batadv0: mtu less than device minimum [ 215.659919][T11719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.672113][T11719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.684040][T11719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.695931][T11719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.707870][T11719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.719836][T11719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.731716][T11719] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 215.753056][T11727] netlink: 'syz.1.1646': attribute type 1 has an invalid length. [ 215.772687][T11727] netlink: 'syz.1.1646': attribute type 2 has an invalid length. [ 215.810553][T11724] netlink: 'syz.1.1646': attribute type 1 has an invalid length. [ 215.818332][T11724] netlink: 'syz.1.1646': attribute type 2 has an invalid length. [ 215.917117][T11732] netlink: 'syz.3.1650': attribute type 1 has an invalid length. [ 216.464281][T11768] tipc: Started in network mode [ 216.469220][T11768] tipc: Node identity ac14140f, cluster identity 4711 [ 216.483143][T11768] tipc: New replicast peer: 255.255.255.255 [ 216.491611][T11768] tipc: Enabled bearer , priority 10 [ 216.603205][T11779] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 216.712215][T11787] bond4: Unable to set down delay as MII monitoring is disabled [ 216.742707][T11787] bond4 (unregistering): Released all slaves [ 216.843974][T11801] netlink: 'syz.1.1666': attribute type 1 has an invalid length. [ 216.879540][T11801] netlink: 'syz.1.1666': attribute type 3 has an invalid length. [ 217.279520][T11829] netlink: 'syz.2.1674': attribute type 5 has an invalid length. [ 217.307887][T11828] geneve3: entered promiscuous mode [ 217.313462][T11828] geneve3: entered allmulticast mode [ 217.321581][ T3531] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 217.331117][ T3531] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 217.343434][ T3531] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 217.358445][ T3531] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 217.617048][T11843] ip6gre1: entered promiscuous mode [ 217.642362][T11843] ip6gre1: entered allmulticast mode [ 217.654081][ T3549] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.663218][ T3549] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.680096][T10596] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.702533][ T43] tipc: Node number set to 2886997007 [ 217.985206][T11863] tipc: Enabled bearer , priority 0 [ 218.025812][T11872] __nla_validate_parse: 17 callbacks suppressed [ 218.025835][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1686'. [ 218.052345][T11869] syzkaller0: entered promiscuous mode [ 218.081746][T11869] syzkaller0: entered allmulticast mode [ 218.158487][T11872] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1686'. [ 218.190011][T11869] tipc: Resetting bearer [ 218.252827][T11869] tipc: Disabling bearer [ 218.267224][T11878] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1688'. [ 218.299952][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.407539][T11882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.420367][T11882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.439190][T11882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 218.505325][ T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.563795][T11898] bond12: option primary_reselect: invalid value (255) [ 218.577104][T11898] bond12 (unregistering): Released all slaves [ 218.612971][T11893] tipc: Enabling of bearer rejected, already enabled [ 218.650380][T11882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.710174][T11882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.745185][T11882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 218.867200][T11882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.878316][T11882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.889929][T11882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 218.925076][T11911] syzkaller0: entered promiscuous mode [ 218.931522][T11911] syzkaller0: entered allmulticast mode [ 218.983036][T11882] bond0: (slave netdevsim0): Releasing backup interface [ 218.993130][T11911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1697'. [ 219.014229][T11882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.028434][T11882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.039722][T11882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 219.117144][T11925] nbd: must specify at least one socket [ 219.405358][ T50] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.418402][ T50] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 219.452911][ T50] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 219.532517][ T50] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.568644][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 219.587175][ T50] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 219.682061][ T3531] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.690631][ T3531] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 219.722029][ T3531] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 219.737590][ T3531] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.748652][ T3531] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 219.759552][ T3531] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 219.974006][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'. [ 220.012567][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'. [ 220.227305][T11976] validate_nla: 5 callbacks suppressed [ 220.227323][T11976] netlink: 'syz.2.1720': attribute type 10 has an invalid length. [ 220.258994][T11976] bridge0: port 3(syz_tun) entered disabled state [ 220.273881][T11976] bridge0: port 3(syz_tun) entered blocking state [ 220.280612][T11976] bridge0: port 3(syz_tun) entered forwarding state [ 220.295294][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 220.353290][T11976] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 220.402744][T11979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1721'. [ 220.420432][T11979] tipc: Invalid UDP bearer configuration [ 220.420495][T11979] tipc: Enabling of bearer rejected, failed to enable media [ 220.471879][T11983] team0: left allmulticast mode [ 220.476799][T11983] team_slave_0: left allmulticast mode [ 220.486518][T11983] team_slave_1: left allmulticast mode [ 220.494092][T11983] team0: left promiscuous mode [ 220.499092][T11983] team_slave_0: left promiscuous mode [ 220.505830][T11983] team_slave_1: left promiscuous mode [ 220.511995][T11983] bridge0: port 4(team0) entered disabled state [ 220.523189][T11983] syz_tun: left allmulticast mode [ 220.528756][T11983] syz_tun: left promiscuous mode [ 220.535720][T11983] bridge0: port 3(syz_tun) entered disabled state [ 220.548505][T11983] bridge_slave_1: left allmulticast mode [ 220.554537][T11983] bridge_slave_1: left promiscuous mode [ 220.564284][T11983] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.577326][T11983] bridge_slave_0: left allmulticast mode [ 220.588090][T11983] bridge_slave_0: left promiscuous mode [ 220.594345][T11983] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.656508][T11983] bond0: (slave bridge0): Releasing backup interface [ 220.673759][T11983] bridge0 (unregistering): left allmulticast mode [ 220.779889][T11999] tipc: Enabling of bearer rejected, failed to enable media [ 220.809108][T12009] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 220.964117][T12018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1729'. [ 221.038821][T12020] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 221.092410][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 221.255928][T12029] netlink: 'syz.0.1735': attribute type 12 has an invalid length. [ 221.297236][T12038] FAULT_INJECTION: forcing a failure. [ 221.297236][T12038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.316841][T12038] CPU: 1 UID: 0 PID: 12038 Comm: syz.4.1737 Not tainted syzkaller #0 PREEMPT(full) [ 221.316871][T12038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.316884][T12038] Call Trace: [ 221.316892][T12038] [ 221.316901][T12038] dump_stack_lvl+0x189/0x250 [ 221.316934][T12038] ? __pfx____ratelimit+0x10/0x10 [ 221.316963][T12038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.316991][T12038] ? __pfx__printk+0x10/0x10 [ 221.317013][T12038] ? __might_fault+0xb0/0x130 [ 221.317055][T12038] should_fail_ex+0x414/0x560 [ 221.317093][T12038] _copy_from_iter+0x1de/0x1790 [ 221.317121][T12038] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 221.317153][T12038] ? policy_nodemask+0x27c/0x720 [ 221.317172][T12038] ? __pfx__copy_from_iter+0x10/0x10 [ 221.317204][T12038] ? set_page_refcounted+0xa0/0x1e0 [ 221.317225][T12038] ? page_copy_sane+0x4e/0x280 [ 221.317251][T12038] copy_page_from_iter+0xdd/0x170 [ 221.317280][T12038] tun_get_user+0x1d7b/0x3e90 [ 221.317315][T12038] ? tun_get_user+0x6f6/0x3e90 [ 221.317350][T12038] ? aa_file_perm+0x44d/0x1550 [ 221.317371][T12038] ? __pfx_tun_get_user+0x10/0x10 [ 221.317394][T12038] ? _parse_integer_limit+0x1ae/0x1f0 [ 221.317425][T12038] ? __lock_acquire+0xab9/0xd20 [ 221.317453][T12038] ? ref_tracker_alloc+0x318/0x460 [ 221.317470][T12038] ? __lock_acquire+0xab9/0xd20 [ 221.317493][T12038] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 221.317520][T12038] ? tun_get+0x1c/0x2f0 [ 221.317557][T12038] ? tun_get+0x1c/0x2f0 [ 221.317581][T12038] ? tun_get+0x1c/0x2f0 [ 221.317610][T12038] tun_chr_write_iter+0x113/0x200 [ 221.317643][T12038] vfs_write+0x5c9/0xb30 [ 221.317678][T12038] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 221.317704][T12038] ? __pfx_vfs_write+0x10/0x10 [ 221.317745][T12038] ? __fget_files+0x2a/0x420 [ 221.317776][T12038] ksys_write+0x145/0x250 [ 221.317807][T12038] ? __pfx_ksys_write+0x10/0x10 [ 221.317840][T12038] ? do_syscall_64+0xbe/0xfa0 [ 221.317874][T12038] do_syscall_64+0xfa/0xfa0 [ 221.317900][T12038] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.317929][T12038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.317950][T12038] ? clear_bhb_loop+0x60/0xb0 [ 221.317974][T12038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.317994][T12038] RIP: 0033:0x7f70a638e17f [ 221.318012][T12038] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 221.318029][T12038] RSP: 002b:00007f70a7310000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 221.318051][T12038] RAX: ffffffffffffffda RBX: 00007f70a65e5fa0 RCX: 00007f70a638e17f [ 221.318067][T12038] RDX: 000000000000002a RSI: 00002000000001c0 RDI: 00000000000000c8 [ 221.318080][T12038] RBP: 00007f70a7310090 R08: 0000000000000000 R09: 0000000000000000 [ 221.318093][T12038] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 221.318105][T12038] R13: 00007f70a65e6038 R14: 00007f70a65e5fa0 R15: 00007fffebc839d8 [ 221.318140][T12038] [ 221.608344][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.760298][T12051] netlink: 'syz.4.1742': attribute type 12 has an invalid length. [ 223.442568][T12155] __nla_validate_parse: 8 callbacks suppressed [ 223.442590][T12155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1768'. [ 223.641189][T12168] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 223.745609][T12168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1772'. [ 224.014814][T12189] netlink: 'syz.0.1779': attribute type 3 has an invalid length. [ 224.126569][T12195] tipc: Enabled bearer , priority 0 [ 224.140115][T12195] syzkaller0: entered promiscuous mode [ 224.150799][T12195] syzkaller0: entered allmulticast mode [ 224.182938][T12200] wireguard: wg1: Could not create IPv4 socket [ 224.248887][T12203] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1786'. [ 224.278406][T12203] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1786'. [ 224.287631][T12203] net_ratelimit: 13 callbacks suppressed [ 224.287656][T12203] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 224.387035][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 224.646668][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'. [ 224.692019][T12228] netlink: 'syz.3.1796': attribute type 21 has an invalid length. [ 224.700098][T12228] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1796'. [ 224.709229][T12228] netlink: 'syz.3.1796': attribute type 4 has an invalid length. [ 224.717245][T12228] netlink: 'syz.3.1796': attribute type 5 has an invalid length. [ 224.728687][T12228] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1796'. [ 224.739811][T12228] netlink: 'syz.3.1796': attribute type 21 has an invalid length. [ 224.748619][T12228] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1796'. [ 224.778526][T12228] netlink: 'syz.3.1796': attribute type 4 has an invalid length. [ 224.796367][T12228] netlink: 'syz.3.1796': attribute type 5 has an invalid length. [ 224.807501][T12228] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1796'. [ 224.892707][T12236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.906435][T12238] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff [ 224.906699][T12238] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff [ 224.962113][T12238] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff [ 224.976626][T12238] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff [ 224.996517][T12238] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff [ 225.010885][T12238] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff [ 225.025287][T12238] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff [ 225.039769][T12238] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff [ 225.054765][T12238] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 66:ff:f2:fc:ff:ff [ 225.526269][T12192] tipc: Resetting bearer [ 227.017011][T12192] tipc: Disabling bearer [ 227.027220][T12240] tipc: Enabled bearer , priority 10 [ 227.231544][T12261] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 227.354461][T12272] veth0_to_team: entered promiscuous mode [ 227.365814][T12267] sctp: [Deprecated]: syz.3.1809 (pid 12267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.365814][T12267] Use struct sctp_sack_info instead [ 227.432138][T12272] vxcan38: entered allmulticast mode [ 227.447262][T12275] netlink: 'syz.4.1812': attribute type 3 has an invalid length. [ 227.652846][T12289] netlink: 'syz.4.1817': attribute type 8 has an invalid length. [ 228.153511][T10614] tipc: Node number set to 880940574 [ 228.174365][T10614] IPVS: starting estimator thread 0... [ 228.312001][T12338] IPVS: using max 28 ests per chain, 67200 per kthread [ 228.372999][T12346] netlink: 'syz.1.1831': attribute type 32 has an invalid length. [ 228.419165][T12353] netlink: 'syz.1.1831': attribute type 32 has an invalid length. [ 228.445025][T12353] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 228.451211][T12346] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 228.621067][T12370] __nla_validate_parse: 10 callbacks suppressed [ 228.621089][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 228.656352][T12372] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1839'. [ 228.758510][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1837'. [ 228.819505][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.920547][T12372] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.945592][T12372] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.961123][T12372] bond0 (unregistering): Released all slaves [ 229.134582][T12394] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1844'. [ 229.283116][T12403] netlink: 'syz.0.1846': attribute type 64 has an invalid length. [ 229.328568][T12403] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1846'. [ 229.394106][T12419] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1849'. [ 229.566242][T12409] batman_adv: batadv0: Interface deactivated: dummy0 [ 229.661513][T12409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.678944][T12409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.862179][T12419] 8021q: VLANs not supported on gre0 [ 229.869408][ T3531] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.929929][ T3531] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.938876][ T3531] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.013453][ T3531] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.040492][T12427] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1851'. [ 230.066997][T12428] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 230.104469][T12428] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 230.195957][T12439] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 230.395157][T12448] bridge5: entered promiscuous mode [ 230.403188][T12448] bridge5: entered allmulticast mode [ 230.417023][T12448] team0: Port device bridge5 added [ 230.624077][T12467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1863'. [ 230.784857][T12483] net_ratelimit: 33019 callbacks suppressed [ 230.784877][T12483] openvswitch: netlink: Key 6 has unexpected len 11 expected 2 [ 230.851030][T12483] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1862'. [ 231.341521][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1873'. [ 231.445198][T12519] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 231.454175][T12519] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 231.848542][T12548] netlink: 'syz.2.1882': attribute type 1 has an invalid length. [ 231.947318][T12556] `: (slave syz_tun): Releasing backup interface [ 231.959133][T12556] batman_adv: batadv0: Removing interface: dummy0 [ 231.996603][T12556] `: (slave bond_slave_0): Releasing backup interface [ 232.011889][T12556] bond_slave_0: left promiscuous mode [ 232.034584][T12556] `: (slave bond_slave_1): Releasing backup interface [ 232.081033][T12556] bond_slave_1: left promiscuous mode [ 232.121604][T12556] team0: Port device team_slave_0 removed [ 232.166304][T12556] team0: Port device team_slave_1 removed [ 232.187463][T12556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.196636][T12556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.211785][T12556] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 232.230478][T12541] netlink: 'syz.4.1879': attribute type 11 has an invalid length. [ 232.252966][T12541] netlink: 'syz.4.1879': attribute type 11 has an invalid length. [ 232.414518][T12575] netlink: 'syz.1.1889': attribute type 4 has an invalid length. [ 232.452148][T12573] netlink: 'syz.1.1889': attribute type 4 has an invalid length. [ 232.779157][T12590] tap0: tun_chr_ioctl cmd 1074025677 [ 232.792757][T12590] tap0: linktype set to 65534 [ 233.469686][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 233.470674][T12514] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 233.493759][T12514] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 233.832246][T12656] __nla_validate_parse: 11 callbacks suppressed [ 233.832268][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 234.157703][T12680] netlink: 'syz.4.1922': attribute type 64 has an invalid length. [ 234.167386][T12680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1922'. [ 234.197469][T12680] netlink: 'syz.4.1922': attribute type 64 has an invalid length. [ 234.213492][T12680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1922'. [ 234.267944][T12688] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1924'. [ 234.287933][T12689] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1922'. [ 234.298553][T12514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.314738][T12514] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 234.336287][T12514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.360290][T12514] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 234.383822][T12514] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 234.390689][T12514] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 234.407437][T12692] netlink: 'syz.2.1925': attribute type 2 has an invalid length. [ 234.500960][T12694] netlink: 'syz.4.1926': attribute type 1 has an invalid length. [ 234.588737][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1928'. [ 234.633174][T12697] hsr_slave_0: left promiscuous mode [ 234.640064][T12697] hsr_slave_1: left promiscuous mode [ 234.871363][T12714] can: request_module (can-proto-5) failed. [ 234.927409][T12719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1935'. [ 235.127226][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'. [ 235.434316][T12742] netlink: 'syz.1.1939': attribute type 29 has an invalid length. [ 235.524292][T12749] nft_compat: unsupported protocol 1 [ 235.596183][T12757] netlink: 'syz.1.1942': attribute type 39 has an invalid length. [ 235.818168][T12771] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.830225][T12771] team0: Cannot enslave team device to itself [ 235.992399][T12784] tipc: Enabled bearer , priority 0 [ 236.014493][T12786] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 236.067469][T12789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1952'. [ 236.083647][T12789] vxcan2: entered allmulticast mode [ 236.183793][T12791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.999470][T10603] tipc: Node number set to 3633572657 [ 242.899896][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 272.339652][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.499527][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.379604][ T31] INFO: task kworker/0:7:5993 blocked for more than 143 seconds. [ 391.387422][ T31] Not tainted syzkaller #0 [ 391.393860][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.402730][ T31] task:kworker/0:7 state:D stack:24456 pid:5993 tgid:5993 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 391.414902][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 391.421962][ T31] Call Trace: [ 391.425258][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 391.428192][ T31] __schedule+0x1798/0x4cc0 [ 391.433157][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 391.438588][ T31] ? __pfx___schedule+0x10/0x10 [ 391.443572][ T31] ? schedule+0x91/0x360 [ 391.447866][ T31] schedule+0x165/0x360 [ 391.452547][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.458135][ T31] __mutex_lock+0x7e6/0x1350 [ 391.479636][ T31] ? __mutex_lock+0x5bb/0x1350 [ 391.484473][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 391.519507][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.524620][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 391.533827][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 391.540205][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 391.546323][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 391.552691][ T31] process_scheduled_works+0xae1/0x17b0 [ 391.558299][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 391.564408][ T31] worker_thread+0x8a0/0xda0 [ 391.569034][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 391.575809][ T31] ? __kthread_parkme+0x7b/0x200 [ 391.580899][ T31] kthread+0x711/0x8a0 [ 391.585009][ T31] ? __pfx_worker_thread+0x10/0x10 [ 391.590379][ T31] ? __pfx_kthread+0x10/0x10 [ 391.594998][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.600702][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.605933][ T31] ? __pfx_kthread+0x10/0x10 [ 391.610831][ T31] ret_from_fork+0x4bc/0x870 [ 391.615451][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 391.620878][ T31] ? __switch_to_asm+0x39/0x70 [ 391.625706][ T31] ? __switch_to_asm+0x33/0x70 [ 391.631138][ T31] ? __pfx_kthread+0x10/0x10 [ 391.635783][ T31] ret_from_fork_asm+0x1a/0x30 [ 391.640943][ T31] [ 391.644036][ T31] INFO: task syz.0.1871:12512 blocked for more than 143 seconds. [ 391.652818][ T31] Not tainted syzkaller #0 [ 391.657779][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.666514][ T31] task:syz.0.1871 state:D stack:25848 pid:12512 tgid:12512 ppid:5833 task_flags:0x400040 flags:0x00080003 [ 391.678578][ T31] Call Trace: [ 391.681921][ T31] [ 391.684876][ T31] __schedule+0x1798/0x4cc0 [ 391.689883][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.694788][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.699717][ T31] ? __pfx___schedule+0x10/0x10 [ 391.704608][ T31] ? schedule+0x91/0x360 [ 391.708856][ T31] schedule+0x165/0x360 [ 391.713431][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.718933][ T31] __mutex_lock+0x7e6/0x1350 [ 391.723980][ T31] ? __mutex_lock+0x5bb/0x1350 [ 391.728784][ T31] ? rfkill_unregister+0xc8/0x220 [ 391.734149][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.739276][ T31] ? __pfx_device_del+0x10/0x10 [ 391.744158][ T31] rfkill_unregister+0xc8/0x220 [ 391.749018][ T31] nfc_unregister_device+0x96/0x2a0 [ 391.754338][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 391.760139][ T31] virtual_ncidev_close+0x56/0x90 [ 391.765202][ T31] __fput+0x44c/0xa70 [ 391.769279][ T31] task_work_run+0x1d4/0x260 [ 391.773909][ T31] ? __pfx_task_work_run+0x10/0x10 [ 391.779068][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 391.784582][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 391.789930][ T31] do_syscall_64+0x2bd/0xfa0 [ 391.794544][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.799787][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.805901][ T31] ? clear_bhb_loop+0x60/0xb0 [ 391.810635][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.816550][ T31] RIP: 0033:0x7f2b04b8f6c9 [ 391.821109][ T31] RSP: 002b:00007fff44bec7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 391.829600][ T31] RAX: 0000000000000000 RBX: 00007f2b04de7da0 RCX: 00007f2b04b8f6c9 [ 391.837582][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 391.845627][ T31] RBP: 00007f2b04de7da0 R08: 0000000000000100 R09: 0000001044beca9f [ 391.853660][ T31] R10: 00007f2b04de7cb0 R11: 0000000000000246 R12: 0000000000038a88 [ 391.862144][ T31] R13: 00007f2b04de6090 R14: ffffffffffffffff R15: 00007fff44bec8c0 [ 391.870710][ T31] [ 391.873764][ T31] INFO: task syz.0.1871:12514 blocked for more than 143 seconds. [ 391.882531][ T31] Not tainted syzkaller #0 [ 391.887495][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.896381][ T31] task:syz.0.1871 state:D stack:25000 pid:12514 tgid:12512 ppid:5833 task_flags:0x400140 flags:0x00080003 [ 391.908719][ T31] Call Trace: [ 391.912268][ T31] [ 391.915227][ T31] __schedule+0x1798/0x4cc0 [ 391.920044][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.924930][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.930364][ T31] ? __pfx___schedule+0x10/0x10 [ 391.935263][ T31] ? schedule+0x91/0x360 [ 391.939792][ T31] schedule+0x165/0x360 [ 391.944000][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.949846][ T31] __mutex_lock+0x7e6/0x1350 [ 391.954485][ T31] ? __mutex_lock+0x5bb/0x1350 [ 391.959768][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 391.965087][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.970314][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.975541][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 391.981629][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 391.987988][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 391.994179][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 391.999538][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 392.005285][ T31] rfkill_set_block+0x1d2/0x440 [ 392.010293][ T31] rfkill_fop_write+0x44b/0x570 [ 392.015172][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 392.021034][ T31] ? security_kernfs_init_security+0x250/0x290 [ 392.027226][ T31] ? rw_verify_area+0x255/0x4d0 [ 392.032157][ T31] ? __lock_acquire+0xab9/0xd20 [ 392.037029][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 392.042576][ T31] vfs_write+0x27e/0xb30 [ 392.046866][ T31] ? __pfx_vfs_write+0x10/0x10 [ 392.051979][ T31] ? __fget_files+0x2a/0x420 [ 392.056580][ T31] ? __fget_files+0x2a/0x420 [ 392.061397][ T31] ? __fget_files+0x3a0/0x420 [ 392.066108][ T31] ? __fget_files+0x2a/0x420 [ 392.070966][ T31] ksys_write+0x145/0x250 [ 392.075327][ T31] ? __pfx_ksys_write+0x10/0x10 [ 392.080648][ T31] ? do_syscall_64+0xbe/0xfa0 [ 392.085345][ T31] do_syscall_64+0xfa/0xfa0 [ 392.089917][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.095150][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.101523][ T31] ? clear_bhb_loop+0x60/0xb0 [ 392.106234][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.112418][ T31] RIP: 0033:0x7f2b04b8f6c9 [ 392.116861][ T31] RSP: 002b:00007f2b05a1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 392.125434][ T31] RAX: ffffffffffffffda RBX: 00007f2b04de5fa0 RCX: 00007f2b04b8f6c9 [ 392.133527][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000008 [ 392.141879][ T31] RBP: 00007f2b04c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 392.150103][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.158113][ T31] R13: 00007f2b04de6038 R14: 00007f2b04de5fa0 R15: 00007fff44bec648 [ 392.166191][ T31] [ 392.169734][ T31] INFO: task syz.3.1919:12661 blocked for more than 144 seconds. [ 392.177481][ T31] Not tainted syzkaller #0 [ 392.182926][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.191815][ T31] task:syz.3.1919 state:D stack:26088 pid:12661 tgid:12660 ppid:5846 task_flags:0x400140 flags:0x00080002 [ 392.204112][ T31] Call Trace: [ 392.207406][ T31] [ 392.210505][ T31] __schedule+0x1798/0x4cc0 [ 392.215049][ T31] ? __lock_acquire+0xab9/0xd20 [ 392.219987][ T31] ? __lock_acquire+0xab9/0xd20 [ 392.224862][ T31] ? __pfx___schedule+0x10/0x10 [ 392.230204][ T31] ? schedule+0x91/0x360 [ 392.234473][ T31] schedule+0x165/0x360 [ 392.238631][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.244174][ T31] __mutex_lock+0x7e6/0x1350 [ 392.248800][ T31] ? __mutex_lock+0x5bb/0x1350 [ 392.253774][ T31] ? rfkill_register+0x37/0x8e0 [ 392.258669][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.264651][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 392.270249][ T31] ? device_initialize+0x24b/0x440 [ 392.275391][ T31] rfkill_register+0x37/0x8e0 [ 392.280172][ T31] nfc_register_device+0x14a/0x320 [ 392.285319][ T31] nci_register_device+0x87f/0x9d0 [ 392.291065][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 392.296749][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 392.302185][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 392.307659][ T31] virtual_ncidev_open+0x129/0x1a0 [ 392.312979][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 392.318654][ T31] misc_open+0x2d5/0x350 [ 392.323273][ T31] chrdev_open+0x4cc/0x5e0 [ 392.327708][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 392.332928][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 392.341689][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 392.346643][ T31] do_dentry_open+0x953/0x13f0 [ 392.351907][ T31] vfs_open+0x3b/0x340 [ 392.355993][ T31] ? path_openat+0x2ecd/0x3830 [ 392.360849][ T31] path_openat+0x2ee5/0x3830 [ 392.365493][ T31] ? __pfx_path_openat+0x10/0x10 [ 392.370664][ T31] do_filp_open+0x1fa/0x410 [ 392.375198][ T31] ? __lock_acquire+0xab9/0xd20 [ 392.380429][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 392.385491][ T31] ? _raw_spin_unlock+0x28/0x50 [ 392.390517][ T31] ? alloc_fd+0x64c/0x6c0 [ 392.394887][ T31] do_sys_openat2+0x121/0x1c0 [ 392.399843][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 392.405082][ T31] ? rcu_is_watching+0x15/0xb0 [ 392.410355][ T31] __x64_sys_openat+0x138/0x170 [ 392.415258][ T31] do_syscall_64+0xfa/0xfa0 [ 392.419956][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.425196][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.431469][ T31] ? clear_bhb_loop+0x60/0xb0 [ 392.436172][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.442331][ T31] RIP: 0033:0x7f241018f6c9 [ 392.446753][ T31] RSP: 002b:00007f2410f4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 392.455464][ T31] RAX: ffffffffffffffda RBX: 00007f24103e5fa0 RCX: 00007f241018f6c9 [ 392.463518][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 392.471899][ T31] RBP: 00007f2410211f91 R08: 0000000000000000 R09: 0000000000000000 [ 392.479948][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.487944][ T31] R13: 00007f24103e6038 R14: 00007f24103e5fa0 R15: 00007ffdb850dd88 [ 392.496192][ T31] [ 392.499518][ T31] INFO: task syz.2.1933:12712 blocked for more than 144 seconds. [ 392.507246][ T31] Not tainted syzkaller #0 [ 392.512539][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.521335][ T31] task:syz.2.1933 state:D stack:27712 pid:12712 tgid:12710 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 392.533711][ T31] Call Trace: [ 392.537001][ T31] [ 392.539982][ T31] __schedule+0x1798/0x4cc0 [ 392.544701][ T31] ? security_file_open+0xb1/0x270 [ 392.550002][ T31] ? __lock_acquire+0xab9/0xd20 [ 392.554900][ T31] ? __lock_acquire+0xab9/0xd20 [ 392.560350][ T31] ? __pfx___schedule+0x10/0x10 [ 392.565246][ T31] ? schedule+0x91/0x360 [ 392.569662][ T31] schedule+0x165/0x360 [ 392.573850][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.579424][ T31] __mutex_lock+0x7e6/0x1350 [ 392.584054][ T31] ? __mutex_lock+0x5bb/0x1350 [ 392.588828][ T31] ? misc_open+0x51/0x350 [ 392.593640][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.598718][ T31] misc_open+0x51/0x350 [ 392.602971][ T31] chrdev_open+0x4cc/0x5e0 [ 392.607411][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 392.612534][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 392.618890][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 392.624326][ T31] do_dentry_open+0x953/0x13f0 [ 392.629114][ T31] vfs_open+0x3b/0x340 [ 392.633371][ T31] ? path_openat+0x2ecd/0x3830 [ 392.638169][ T31] path_openat+0x2ee5/0x3830 [ 392.642859][ T31] ? __pfx_path_openat+0x10/0x10 [ 392.647851][ T31] do_filp_open+0x1fa/0x410 [ 392.652830][ T31] ? __lock_acquire+0xab9/0xd20 [ 392.657699][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 392.663047][ T31] ? _raw_spin_unlock+0x28/0x50 [ 392.667937][ T31] ? alloc_fd+0x64c/0x6c0 [ 392.672459][ T31] do_sys_openat2+0x121/0x1c0 [ 392.677172][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 392.682819][ T31] ? exc_page_fault+0x82/0x100 [ 392.688068][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 392.693567][ T31] __x64_sys_openat+0x138/0x170 [ 392.698461][ T31] do_syscall_64+0xfa/0xfa0 [ 392.703065][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.708288][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.714784][ T31] ? clear_bhb_loop+0x60/0xb0 [ 392.719641][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.725556][ T31] RIP: 0033:0x7fef3cf8f6c9 [ 392.730238][ T31] RSP: 002b:00007fef3ddfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 392.738690][ T31] RAX: ffffffffffffffda RBX: 00007fef3d1e5fa0 RCX: 00007fef3cf8f6c9 [ 392.747851][ T31] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 392.755997][ T31] RBP: 00007fef3d011f91 R08: 0000000000000000 R09: 0000000000000000 [ 392.764105][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.772437][ T31] R13: 00007fef3d1e6038 R14: 00007fef3d1e5fa0 R15: 00007ffc60e4f378 [ 392.780660][ T31] [ 392.783711][ T31] INFO: task syz.4.1950:12779 blocked for more than 144 seconds. [ 392.791527][ T31] Not tainted syzkaller #0 [ 392.796472][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.805521][ T31] task:syz.4.1950 state:D stack:28296 pid:12779 tgid:12776 ppid:5848 task_flags:0x400040 flags:0x00080002 [ 392.817529][ T31] Call Trace: [ 392.821089][ T31] [ 392.824038][ T31] __schedule+0x1798/0x4cc0 [ 392.828549][ T31] ? security_file_open+0xb1/0x270 [ 392.834031][ T31] ? __lock_acquire+0xab9/0xd20 [ 392.838939][ T31] ? __lock_acquire+0xab9/0xd20 [ 392.844129][ T31] ? __pfx___schedule+0x10/0x10 [ 392.849037][ T31] ? schedule+0x91/0x360 [ 392.853550][ T31] schedule+0x165/0x360 [ 392.857738][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.863657][ T31] __mutex_lock+0x7e6/0x1350 [ 392.868282][ T31] ? __mutex_lock+0x5bb/0x1350 [ 392.873130][ T31] ? misc_open+0x51/0x350 [ 392.877482][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.882718][ T31] misc_open+0x51/0x350 [ 392.886907][ T31] chrdev_open+0x4cc/0x5e0 [ 392.891659][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 392.896617][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 392.903116][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 392.908073][ T31] do_dentry_open+0x953/0x13f0 [ 392.912934][ T31] vfs_open+0x3b/0x340 [ 392.917025][ T31] ? path_openat+0x2ecd/0x3830 [ 392.922229][ T31] path_openat+0x2ee5/0x3830 [ 392.926866][ T31] ? __pfx_path_openat+0x10/0x10 [ 392.931901][ T31] do_filp_open+0x1fa/0x410 [ 392.936427][ T31] ? __lock_acquire+0xab9/0xd20 [ 392.941490][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 392.946577][ T31] ? _raw_spin_unlock+0x28/0x50 [ 392.951996][ T31] ? alloc_fd+0x64c/0x6c0 [ 392.956381][ T31] do_sys_openat2+0x121/0x1c0 [ 392.962208][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 392.967456][ T31] ? exc_page_fault+0x82/0x100 [ 392.972270][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 392.977579][ T31] __x64_sys_openat+0x138/0x170 [ 392.982571][ T31] do_syscall_64+0xfa/0xfa0 [ 392.987108][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.992416][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.998504][ T31] ? clear_bhb_loop+0x60/0xb0 [ 393.003265][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.009179][ T31] RIP: 0033:0x7f70a638f6c9 [ 393.013646][ T31] RSP: 002b:00007f70a7310038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.022119][ T31] RAX: ffffffffffffffda RBX: 00007f70a65e5fa0 RCX: 00007f70a638f6c9 [ 393.030190][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 393.038173][ T31] RBP: 00007f70a6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 393.046207][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.054234][ T31] R13: 00007f70a65e6038 R14: 00007f70a65e5fa0 R15: 00007fffebc839d8 [ 393.063514][ T31] [ 393.066603][ T31] INFO: task syz.4.1950:12783 blocked for more than 145 seconds. [ 393.074874][ T31] Not tainted syzkaller #0 [ 393.080207][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.088900][ T31] task:syz.4.1950 state:D stack:28296 pid:12783 tgid:12776 ppid:5848 task_flags:0x400040 flags:0x00080002 [ 393.101002][ T31] Call Trace: [ 393.104308][ T31] [ 393.107241][ T31] __schedule+0x1798/0x4cc0 [ 393.111870][ T31] ? security_file_open+0xb1/0x270 [ 393.117016][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.121958][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.126865][ T31] ? __pfx___schedule+0x10/0x10 [ 393.131788][ T31] ? schedule+0x91/0x360 [ 393.136087][ T31] schedule+0x165/0x360 [ 393.140357][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.145848][ T31] __mutex_lock+0x7e6/0x1350 [ 393.150563][ T31] ? __mutex_lock+0x5bb/0x1350 [ 393.155359][ T31] ? misc_open+0x51/0x350 [ 393.159803][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.164875][ T31] misc_open+0x51/0x350 [ 393.169090][ T31] chrdev_open+0x4cc/0x5e0 [ 393.173572][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 393.178532][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 393.184959][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 393.190096][ T31] do_dentry_open+0x953/0x13f0 [ 393.194915][ T31] vfs_open+0x3b/0x340 [ 393.199010][ T31] ? path_openat+0x2ecd/0x3830 [ 393.203881][ T31] path_openat+0x2ee5/0x3830 [ 393.208525][ T31] ? __pfx_path_openat+0x10/0x10 [ 393.213546][ T31] do_filp_open+0x1fa/0x410 [ 393.218070][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.223249][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 393.228323][ T31] ? _raw_spin_unlock+0x28/0x50 [ 393.233449][ T31] ? alloc_fd+0x64c/0x6c0 [ 393.237845][ T31] do_sys_openat2+0x121/0x1c0 [ 393.242616][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.247858][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.252694][ T31] __x64_sys_openat+0x138/0x170 [ 393.257592][ T31] do_syscall_64+0xfa/0xfa0 [ 393.262200][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.267429][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.273624][ T31] ? clear_bhb_loop+0x60/0xb0 [ 393.278340][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.284320][ T31] RIP: 0033:0x7f70a638f6c9 [ 393.288755][ T31] RSP: 002b:00007f70a72ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.297221][ T31] RAX: ffffffffffffffda RBX: 00007f70a65e6090 RCX: 00007f70a638f6c9 [ 393.305899][ T31] RDX: 0000000000000201 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 393.314036][ T31] RBP: 00007f70a6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 393.322102][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.330149][ T31] R13: 00007f70a65e6128 R14: 00007f70a65e6090 R15: 00007fffebc839d8 [ 393.338164][ T31] [ 393.341257][ T31] INFO: task syz.4.1950:12784 blocked for more than 145 seconds. [ 393.348999][ T31] Not tainted syzkaller #0 [ 393.354146][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.362864][ T31] task:syz.4.1950 state:D stack:24920 pid:12784 tgid:12776 ppid:5848 task_flags:0x400140 flags:0x00080002 [ 393.374833][ T31] Call Trace: [ 393.378148][ T31] [ 393.381382][ T31] __schedule+0x1798/0x4cc0 [ 393.385932][ T31] ? security_file_open+0xb1/0x270 [ 393.391229][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.396207][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.401106][ T31] ? __pfx___schedule+0x10/0x10 [ 393.406080][ T31] ? schedule+0x91/0x360 [ 393.410427][ T31] schedule+0x165/0x360 [ 393.414627][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.420427][ T31] __mutex_lock+0x7e6/0x1350 [ 393.425059][ T31] ? __mutex_lock+0x5bb/0x1350 [ 393.429954][ T31] ? misc_open+0x51/0x350 [ 393.434318][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.439492][ T31] misc_open+0x51/0x350 [ 393.443692][ T31] chrdev_open+0x4cc/0x5e0 [ 393.448113][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 393.453130][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 393.459936][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 393.464907][ T31] do_dentry_open+0x953/0x13f0 [ 393.470126][ T31] vfs_open+0x3b/0x340 [ 393.474230][ T31] ? path_openat+0x2ecd/0x3830 [ 393.479015][ T31] path_openat+0x2ee5/0x3830 [ 393.483795][ T31] ? __pfx_path_openat+0x10/0x10 [ 393.488780][ T31] do_filp_open+0x1fa/0x410 [ 393.493669][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.498543][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 393.503938][ T31] ? _raw_spin_unlock+0x28/0x50 [ 393.508821][ T31] ? alloc_fd+0x64c/0x6c0 [ 393.513590][ T31] do_sys_openat2+0x121/0x1c0 [ 393.518310][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 393.523692][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.528517][ T31] __x64_sys_openat+0x138/0x170 [ 393.533499][ T31] do_syscall_64+0xfa/0xfa0 [ 393.538039][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.543386][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.549814][ T31] ? clear_bhb_loop+0x60/0xb0 [ 393.554526][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.560507][ T31] RIP: 0033:0x7f70a638f6c9 [ 393.564936][ T31] RSP: 002b:00007f70a72ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 393.573406][ T31] RAX: ffffffffffffffda RBX: 00007f70a65e6180 RCX: 00007f70a638f6c9 [ 393.581467][ T31] RDX: 0000000000000100 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 393.589611][ T31] RBP: 00007f70a6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 393.597600][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.605622][ T31] R13: 00007f70a65e6218 R14: 00007f70a65e6180 R15: 00007fffebc839d8 [ 393.613683][ T31] [ 393.616714][ T31] INFO: task syz.1.1959:12812 blocked for more than 145 seconds. [ 393.624878][ T31] Not tainted syzkaller #0 [ 393.629956][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.638648][ T31] task:syz.1.1959 state:D stack:23592 pid:12812 tgid:12811 ppid:5844 task_flags:0x400140 flags:0x00080002 [ 393.651119][ T31] Call Trace: [ 393.654427][ T31] [ 393.657362][ T31] __schedule+0x1798/0x4cc0 [ 393.662014][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.666909][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.672038][ T31] ? __pfx___schedule+0x10/0x10 [ 393.676950][ T31] ? schedule+0x91/0x360 [ 393.681595][ T31] schedule+0x165/0x360 [ 393.685804][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.691469][ T31] __mutex_lock+0x7e6/0x1350 [ 393.696092][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.701152][ T31] ? __mutex_lock+0x5bb/0x1350 [ 393.705955][ T31] ? rfkill_register+0x37/0x8e0 [ 393.711288][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.716334][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 393.721579][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.726818][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 393.732450][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 393.738122][ T31] rfkill_register+0x37/0x8e0 [ 393.743272][ T31] wiphy_register+0x2231/0x2aa0 [ 393.748178][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 393.753560][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 393.758704][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 393.764878][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 393.770764][ T31] ? ieee80211_register_hw+0x1401/0x40d0 [ 393.776415][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 393.782398][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 393.788321][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 393.794401][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 393.801115][ T31] ? __hrtimer_setup+0x187/0x210 [ 393.806081][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 393.812098][ T31] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 393.817917][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 393.824118][ T31] ? trace_kmalloc+0x1f/0xd0 [ 393.828745][ T31] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 393.835913][ T31] ? kstrndup+0xbf/0x160 [ 393.840271][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 393.845424][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 393.851336][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 393.856921][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.862071][ T31] ? __nla_parse+0x40/0x60 [ 393.866500][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 393.873002][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 393.878581][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 393.884750][ T31] ? bpf_lsm_capable+0x9/0x20 [ 393.889890][ T31] ? security_capable+0x7e/0x2e0 [ 393.894873][ T31] genl_rcv_msg+0x60e/0x790 [ 393.899487][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.904533][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 393.910320][ T31] netlink_rcv_skb+0x208/0x470 [ 393.915104][ T31] ? __lock_acquire+0xab9/0xd20 [ 393.920314][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.925357][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.930835][ T31] ? down_read+0x1ad/0x2e0 [ 393.935304][ T31] genl_rcv+0x28/0x40 [ 393.941960][ T31] netlink_unicast+0x82f/0x9e0 [ 393.946776][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 393.953481][ T31] ? netlink_sendmsg+0x642/0xb30 [ 393.958458][ T31] ? skb_put+0x11b/0x210 [ 393.963110][ T31] netlink_sendmsg+0x805/0xb30 [ 393.967934][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.973651][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 393.978631][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.984343][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.990041][ T31] __sock_sendmsg+0x21c/0x270 [ 393.994756][ T31] ____sys_sendmsg+0x505/0x830 [ 394.001035][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.006364][ T31] ? import_iovec+0x74/0xa0 [ 394.011187][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 394.015904][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.021734][ T31] ? __fget_files+0x2a/0x420 [ 394.026352][ T31] ? __fget_files+0x3a0/0x420 [ 394.031554][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 394.036540][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.042458][ T31] ? do_syscall_64+0xbe/0xfa0 [ 394.047183][ T31] do_syscall_64+0xfa/0xfa0 [ 394.052204][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.057452][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.064002][ T31] ? clear_bhb_loop+0x60/0xb0 [ 394.068715][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.075179][ T31] RIP: 0033:0x7f650518f6c9 [ 394.079931][ T31] RSP: 002b:00007f65060aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.088375][ T31] RAX: ffffffffffffffda RBX: 00007f65053e5fa0 RCX: 00007f650518f6c9 [ 394.096741][ T31] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 394.105108][ T31] RBP: 00007f6505211f91 R08: 0000000000000000 R09: 0000000000000000 [ 394.113507][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.122285][ T31] R13: 00007f65053e6038 R14: 00007f65053e5fa0 R15: 00007ffcc56245e8 [ 394.130551][ T31] [ 394.133646][ T31] INFO: task syz-executor:12815 blocked for more than 146 seconds. [ 394.142104][ T31] Not tainted syzkaller #0 [ 394.147056][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.156374][ T31] task:syz-executor state:D stack:27736 pid:12815 tgid:12815 ppid:1 task_flags:0x400040 flags:0x00080000 [ 394.168669][ T31] Call Trace: [ 394.172185][ T31] [ 394.175138][ T31] __schedule+0x1798/0x4cc0 [ 394.180078][ T31] ? security_file_open+0xb1/0x270 [ 394.185250][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.190646][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.195528][ T31] ? __pfx___schedule+0x10/0x10 [ 394.200807][ T31] ? schedule+0x91/0x360 [ 394.205108][ T31] schedule+0x165/0x360 [ 394.209669][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.215162][ T31] __mutex_lock+0x7e6/0x1350 [ 394.220191][ T31] ? __mutex_lock+0x5bb/0x1350 [ 394.224998][ T31] ? misc_open+0x51/0x350 [ 394.229757][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 394.234846][ T31] misc_open+0x51/0x350 [ 394.239048][ T31] chrdev_open+0x4cc/0x5e0 [ 394.243870][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 394.248837][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 394.255709][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 394.260995][ T31] do_dentry_open+0x953/0x13f0 [ 394.265811][ T31] vfs_open+0x3b/0x340 [ 394.270399][ T31] ? path_openat+0x2ecd/0x3830 [ 394.275200][ T31] path_openat+0x2ee5/0x3830 [ 394.280179][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 394.285693][ T31] ? count_memcg_event_mm+0x21/0x260 [ 394.291570][ T31] ? __pfx_path_openat+0x10/0x10 [ 394.296548][ T31] ? __pfx___up_read+0x10/0x10 [ 394.301843][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 394.307180][ T31] do_filp_open+0x1fa/0x410 [ 394.312102][ T31] ? __lock_acquire+0xab9/0xd20 [ 394.316990][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 394.322501][ T31] ? _raw_spin_unlock+0x28/0x50 [ 394.327406][ T31] ? alloc_fd+0x64c/0x6c0 [ 394.332178][ T31] do_sys_openat2+0x121/0x1c0 [ 394.336897][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 394.342682][ T31] ? fd_install+0x97/0x540 [ 394.347128][ T31] ? fd_install+0x30d/0x540 [ 394.351809][ T31] __x64_sys_openat+0x138/0x170 [ 394.356723][ T31] do_syscall_64+0xfa/0xfa0 [ 394.361279][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.366503][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.372647][ T31] ? clear_bhb_loop+0x60/0xb0 [ 394.377352][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.383335][ T31] RIP: 0033:0x7f92ed18de91 [ 394.387784][ T31] RSP: 002b:00007fff4f58a020 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 394.396397][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f92ed18de91 [ 394.404420][ T31] RDX: 0000000000000002 RSI: 00007f92ed2129b7 RDI: 00000000ffffff9c [ 394.412425][ T31] RBP: 00007f92ed2129b7 R08: 0000000000000000 R09: 00007f92edf1d6c0 [ 394.420650][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 394.428649][ T31] R13: 0000000000000003 R14: 00007fff4f58a3f8 R15: 0000000000000000 [ 394.436834][ T31] [ 394.439906][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 394.449000][ T31] [ 394.449000][ T31] Showing all locks held in the system: [ 394.456774][ T31] 1 lock held by khungtaskd/31: [ 394.461716][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 394.471785][ T31] 2 locks held by getty/5589: [ 394.476508][ T31] #0: ffff88803056b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 394.486426][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 394.497034][ T31] 3 locks held by kworker/0:7/5993: [ 394.502387][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 394.514457][ T31] #1: ffffc9000483fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 394.528444][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 394.540112][ T31] 2 locks held by syz.0.1871/12512: [ 394.545327][ T31] #0: ffff8880279db100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 394.555335][ T31] #1: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 394.565529][ T31] 2 locks held by syz.0.1871/12514: [ 394.570851][ T31] #0: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 394.581079][ T31] #1: ffff8880279db100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 394.590958][ T31] 3 locks held by syz.3.1919/12661: [ 394.596188][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.604677][ T31] #1: ffff888055731100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 394.614364][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 394.624403][ T31] 1 lock held by syz.2.1933/12712: [ 394.629635][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.638109][ T31] 1 lock held by syz.4.1950/12779: [ 394.643711][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.652246][ T31] 1 lock held by syz.4.1950/12783: [ 394.657373][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.665961][ T31] 1 lock held by syz.4.1950/12784: [ 394.671162][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.679675][ T31] 3 locks held by syz.1.1959/12812: [ 394.684880][ T31] #0: ffffffff8f331690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.693106][ T31] #1: ffffffff8f3314a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 394.702188][ T31] #2: ffffffff8f5ab6a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 394.712225][ T31] 1 lock held by syz-executor/12815: [ 394.717527][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.726067][ T31] 1 lock held by syz-executor/12817: [ 394.731391][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.740214][ T31] 1 lock held by syz-executor/12819: [ 394.745514][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.754075][ T31] 1 lock held by syz-executor/12821: [ 394.759459][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.767993][ T31] 1 lock held by syz-executor/12823: [ 394.773323][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.781858][ T31] 1 lock held by syz-executor/12825: [ 394.787162][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.795712][ T31] 1 lock held by syz-executor/12827: [ 394.801055][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.809561][ T31] 1 lock held by syz-executor/12829: [ 394.814877][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.823417][ T31] 1 lock held by syz-executor/12831: [ 394.828716][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.837330][ T31] 1 lock held by syz-executor/12833: [ 394.843088][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.851989][ T31] 1 lock held by syz-executor/12835: [ 394.857300][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.865951][ T31] 1 lock held by syz-executor/12837: [ 394.871484][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.880414][ T31] 1 lock held by syz-executor/12839: [ 394.885718][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.894240][ T31] 1 lock held by syz-executor/12841: [ 394.899868][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.908371][ T31] 1 lock held by syz-executor/12843: [ 394.914044][ T31] #0: ffffffff8e775528 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 394.922683][ T31] [ 394.925029][ T31] ============================================= [ 394.925029][ T31] [ 394.933845][ T31] NMI backtrace for cpu 1 [ 394.933868][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 394.933891][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 394.933903][ T31] Call Trace: [ 394.933912][ T31] [ 394.933920][ T31] dump_stack_lvl+0x189/0x250 [ 394.933957][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.933986][ T31] ? __pfx__printk+0x10/0x10 [ 394.934023][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 394.934063][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 394.934089][ T31] ? __pfx__printk+0x10/0x10 [ 394.934115][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 394.934150][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 394.934177][ T31] watchdog+0xf60/0xfa0 [ 394.934204][ T31] ? watchdog+0x1e2/0xfa0 [ 394.934231][ T31] kthread+0x711/0x8a0 [ 394.934263][ T31] ? __pfx_watchdog+0x10/0x10 [ 394.934282][ T31] ? __pfx_kthread+0x10/0x10 [ 394.934311][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.934337][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.934363][ T31] ? __pfx_kthread+0x10/0x10 [ 394.934390][ T31] ret_from_fork+0x4bc/0x870 [ 394.934415][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 394.934443][ T31] ? __switch_to_asm+0x39/0x70 [ 394.934459][ T31] ? __switch_to_asm+0x33/0x70 [ 394.934475][ T31] ? __pfx_kthread+0x10/0x10 [ 394.934511][ T31] ret_from_fork_asm+0x1a/0x30 [ 394.934557][ T31] [ 394.934564][ T31] Sending NMI from CPU 1 to CPUs 0: [ 395.081557][ C0] NMI backtrace for cpu 0 [ 395.081586][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 395.081604][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.081615][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 395.081643][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 e0 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 395.081658][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 395.081673][ C0] RAX: f6d86f9e13105100 RBX: ffffffff81967b47 RCX: f6d86f9e13105100 [ 395.081686][ C0] RDX: 0000000000000001 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 395.081698][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 395.081710][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce870 [ 395.081722][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 395.081733][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 395.081746][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.081757][ C0] CR2: 000055d4405cb000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 395.081772][ C0] Call Trace: [ 395.081781][ C0] [ 395.081787][ C0] default_idle+0x13/0x20 [ 395.081802][ C0] default_idle_call+0x73/0xb0 [ 395.081820][ C0] do_idle+0x1e7/0x510 [ 395.081843][ C0] ? __pfx_do_idle+0x10/0x10 [ 395.081860][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.081884][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 395.081906][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 395.081932][ C0] cpu_startup_entry+0x44/0x60 [ 395.081950][ C0] rest_init+0x2de/0x300 [ 395.081968][ C0] start_kernel+0x3ae/0x410 [ 395.081988][ C0] x86_64_start_reservations+0x24/0x30 [ 395.082012][ C0] x86_64_start_kernel+0x143/0x1c0 [ 395.082035][ C0] common_startup_64+0x13e/0x147 [ 395.082068][ C0]