last executing test programs: 52.156361746s ago: executing program 0 (id=3842): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000000100)=""/28, 0x1c}], 0x2}, 0x5}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@loopback}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000001600)={'syztnl2\x00', r2, 0x29, 0x6, 0x5, 0x9b, 0x28, @rand_addr=' \x01\x00', @private1, 0x20, 0x10, 0x5, 0x80000001}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10003020}, 0xc, &(0x7f0000001a00)={&(0x7f0000001680)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000014c0)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x48884) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) close(r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000001a80)=0x8, 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0200000002"], 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32, @ANYRES32=r8], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4) 51.915441036s ago: executing program 0 (id=3844): socket$packet(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) 51.654146139s ago: executing program 0 (id=3848): unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="93b83bb8a80b85b6a239cb60af208fa9b81911dd73a94cf3797273ee200696f0642aa7fa7dc93b37366da2122e8620ff630c8bfa83e7475edaa4dbb208248360c1af30e767bb050828508636f18f80fdd58b81c506d4fa1184fa0da40055f49e625e9f92c464845f1c066d262889f291407a5de81ea938253fff9ed873f29f284c1d27b84dd6f2ffb284e7bbe17c4c79271a36f15dd6742b8271770b37000000", @ANYRES16=r1, @ANYBLOB="0b0d28bd7000fcdbdf250200000014000180060005004e2000000500020001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @local, 0x9}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="edc9e12a4f524c40d91b6daeb61bcf3deb5536c0fe1c7db0ece67d78ce6c2ab9072d7e8afa8a5a2b9aa224d93df8a17e91cd2bfd76d57cfbf13e7819d958f7103951b7bedcebabe3e51d89cab1f3032587602946ad48d8ea645a8d170b4a66ff7a508589d7bc5d70e3aa2b08a5a53dd44a97aa700badaa2793055330428ec475c9988cfbbb4c186fd5a6627ceb34c68436b898d6b70a28eb39f4816157d34da06d05233e292e87b42f451a753babe3e13e446b8f035d20ab192b", @ANYRES16=r2, @ANYRES8=r3, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES8=r4, @ANYRES8=r2, @ANYBLOB="27d5ca5569e4a24f37a0f3d22c54a6b79c009a818a4fb7d14fd1c879ecb00ae80d8f5296f9eac03ec8cd2ed6a91bbda7ea6bc3724a2b562cd246821ff09b6c36ecd29a8cf44bbb30dfaffaed8c5618d212e77e26813948314f2d66edba368845130f7de5ae661c80e9d165092f921befb1338815afd17f05f4a71a38c1b6c544662525b8c595dd348c3d846dc291e138dae5983f8518f5b465bac3e1a4edb9a9e9e9183adb9036f942bc3bfcf5810b0f8d419d8b7ca5f4ba4e85c06a01f097791abee3add9cc17f0ff54696dc51f8b229fc21f8690d4808fce1f44f44708e47639b2410024208f9aff8989f04d95b003d08135d2fa8269dce92c7478a35510b565e568b364", @ANYRES16=r3, @ANYRESDEC=r4], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r5, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000052c00048028000180080001006e6174001c0002800800014000000001080002400000000208000340ffff00160900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x0) 39.649523168s ago: executing program 0 (id=3848): unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="93b83bb8a80b85b6a239cb60af208fa9b81911dd73a94cf3797273ee200696f0642aa7fa7dc93b37366da2122e8620ff630c8bfa83e7475edaa4dbb208248360c1af30e767bb050828508636f18f80fdd58b81c506d4fa1184fa0da40055f49e625e9f92c464845f1c066d262889f291407a5de81ea938253fff9ed873f29f284c1d27b84dd6f2ffb284e7bbe17c4c79271a36f15dd6742b8271770b37000000", @ANYRES16=r1, @ANYBLOB="0b0d28bd7000fcdbdf250200000014000180060005004e2000000500020001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @local, 0x9}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="edc9e12a4f524c40d91b6daeb61bcf3deb5536c0fe1c7db0ece67d78ce6c2ab9072d7e8afa8a5a2b9aa224d93df8a17e91cd2bfd76d57cfbf13e7819d958f7103951b7bedcebabe3e51d89cab1f3032587602946ad48d8ea645a8d170b4a66ff7a508589d7bc5d70e3aa2b08a5a53dd44a97aa700badaa2793055330428ec475c9988cfbbb4c186fd5a6627ceb34c68436b898d6b70a28eb39f4816157d34da06d05233e292e87b42f451a753babe3e13e446b8f035d20ab192b", @ANYRES16=r2, @ANYRES8=r3, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES8=r4, @ANYRES8=r2, @ANYBLOB="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", @ANYRES16=r3, @ANYRESDEC=r4], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r5, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000052c00048028000180080001006e6174001c0002800800014000000001080002400000000208000340ffff00160900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x0) 28.357973689s ago: executing program 0 (id=3848): unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="93b83bb8a80b85b6a239cb60af208fa9b81911dd73a94cf3797273ee200696f0642aa7fa7dc93b37366da2122e8620ff630c8bfa83e7475edaa4dbb208248360c1af30e767bb050828508636f18f80fdd58b81c506d4fa1184fa0da40055f49e625e9f92c464845f1c066d262889f291407a5de81ea938253fff9ed873f29f284c1d27b84dd6f2ffb284e7bbe17c4c79271a36f15dd6742b8271770b37000000", @ANYRES16=r1, @ANYBLOB="0b0d28bd7000fcdbdf250200000014000180060005004e2000000500020001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @local, 0x9}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="edc9e12a4f524c40d91b6daeb61bcf3deb5536c0fe1c7db0ece67d78ce6c2ab9072d7e8afa8a5a2b9aa224d93df8a17e91cd2bfd76d57cfbf13e7819d958f7103951b7bedcebabe3e51d89cab1f3032587602946ad48d8ea645a8d170b4a66ff7a508589d7bc5d70e3aa2b08a5a53dd44a97aa700badaa2793055330428ec475c9988cfbbb4c186fd5a6627ceb34c68436b898d6b70a28eb39f4816157d34da06d05233e292e87b42f451a753babe3e13e446b8f035d20ab192b", @ANYRES16=r2, @ANYRES8=r3, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES8=r4, @ANYRES8=r2, @ANYBLOB="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", @ANYRES16=r3, @ANYRESDEC=r4], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r5, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000052c00048028000180080001006e6174001c0002800800014000000001080002400000000208000340ffff00160900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x0) 19.409290457s ago: executing program 0 (id=3848): unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="93b83bb8a80b85b6a239cb60af208fa9b81911dd73a94cf3797273ee200696f0642aa7fa7dc93b37366da2122e8620ff630c8bfa83e7475edaa4dbb208248360c1af30e767bb050828508636f18f80fdd58b81c506d4fa1184fa0da40055f49e625e9f92c464845f1c066d262889f291407a5de81ea938253fff9ed873f29f284c1d27b84dd6f2ffb284e7bbe17c4c79271a36f15dd6742b8271770b37000000", @ANYRES16=r1, @ANYBLOB="0b0d28bd7000fcdbdf250200000014000180060005004e2000000500020001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @local, 0x9}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x14, &(0x7f0000000040), 0x50) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="edc9e12a4f524c40d91b6daeb61bcf3deb5536c0fe1c7db0ece67d78ce6c2ab9072d7e8afa8a5a2b9aa224d93df8a17e91cd2bfd76d57cfbf13e7819d958f7103951b7bedcebabe3e51d89cab1f3032587602946ad48d8ea645a8d170b4a66ff7a508589d7bc5d70e3aa2b08a5a53dd44a97aa700badaa2793055330428ec475c9988cfbbb4c186fd5a6627ceb34c68436b898d6b70a28eb39f4816157d34da06d05233e292e87b42f451a753babe3e13e446b8f035d20ab192b", @ANYRES16=r2, @ANYRES8=r3, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRES8=r4, @ANYRES8=r2, @ANYBLOB="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", @ANYRES16=r3, @ANYRESDEC=r4], 0x7c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r5, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000052c00048028000180080001006e6174001c0002800800014000000001080002400000000208000340ffff00160900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x0) 18.72257617s ago: executing program 2 (id=4193): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380), 0x0, 0x0, 0xffffffff}, 0x50) 18.567486596s ago: executing program 2 (id=4196): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) r0 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) (fail_nth: 2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x1}, 0xc) socket(0x1d, 0x2, 0x6) 17.897385597s ago: executing program 1 (id=4203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1d, 0x0, 0x3, 0x80ffffff}, {}, {}, {}, {0x6}]}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = accept4(r4, 0x0, 0x0, 0x80800) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r7, 0x89e7, &(0x7f00000000c0)={@default, @bcast, 0x2, 0x56}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x0, 0x0, 0x0, 0x2, 0xb3, &(0x7f0000000900)=""/179, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) unshare(0x400) pread64(r8, &(0x7f00000000c0)=""/29, 0xffffffffffffffa0, 0x4004) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x8}}, 0x5, 0xfdf, 0x5, 0xfff, 0x0, 0x8, 0x6}, &(0x7f0000000240)=0x9c) sendmmsg$inet(r9, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f4", 0x1}, {0x0, 0xfffd}], 0x2}}], 0x2, 0xc080) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000100)={r11, 0x1}, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYRES16=r7], 0xaf) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x8000800) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001400350073797a5f74756e000000000000000000340019802f0002"], 0x70}}, 0x24044800) 17.569706677s ago: executing program 1 (id=4207): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x500}, 0x57) 17.357359321s ago: executing program 1 (id=4210): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r2, @ANYBLOB="0107000000000000000020000000040003", @ANYRESDEC, @ANYRESOCT, @ANYRESOCT=r3, @ANYRESDEC=r0], 0x1c}}, 0x885) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008004) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x29, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40091) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa10000c60000000701e700f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='generic_add_lease\x00', r8, 0x0, 0xd}, 0x18) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x8}) write$bt_hci(r9, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') r12 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES64=r12, @ANYRESOCT=r4, @ANYRES32=r10, @ANYRESDEC=r5, @ANYRES32=r11, @ANYBLOB="0c00990009000005000000000000000014bb85c20299607a2c768594a40af7da650377488410729b0a507af5bcf03aa273f13a8b9534af638ed023472c46d25308a7e904860f6507b09e77ef1490ea4e9bf9952109bfe8af557e10c02c3557b696378c1f1938cb890584c5ec9f6a586ef50334baf6cd53991e45fbf5f0e86fedf8a2f267208056c3b7ce220e8d057dc372fa995f49cb1f82b1a1730aaf4c394e9ef0f6dac56e31814626a831e265daee6f41f8043324ab06c219166b5e0100755e730655eaf0149d7f61c268672c668197b50ca6f2de0c43dc0adee718950538953a47232c2fc1", @ANYRES32=r12, @ANYBLOB="0c0099000b000000630000000c00990005000000130000000c009900040000005c0000000800010043000000", @ANYRESDEC=r12], 0x78}, 0x1, 0x0, 0x0, 0x20048010}, 0x4) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xc}, {0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x3], 0xff, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3], [0x1200, 0x8, 0x0, 0x4, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) 17.348789376s ago: executing program 4 (id=4211): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x24040010, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}], 0x1}], 0x1, 0x40800) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 17.1212238s ago: executing program 3 (id=4214): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000a000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) 17.001595618s ago: executing program 3 (id=4215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000064000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) 16.883246467s ago: executing program 3 (id=4216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) (async) r1 = socket$kcm(0x10, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000200000000000000000000000023030000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020"], 0x1ac}}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 16.855480466s ago: executing program 3 (id=4217): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000020000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0003"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 16.603790831s ago: executing program 1 (id=4218): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00655802800000121f", 0x2e}], 0x1}, 0x0) 16.494359557s ago: executing program 3 (id=4219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x470bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x20000880) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7d9f4ed7ca35e065140000002000010300000065ada786c5c98772f05acd3e5b6d01f7ae9567819ee421a11053e5d6085f44478b342de9a9cd1a1294"], 0x14}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000000c0)=0x5, 0x4) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}], 0x1}], 0x1, 0x40800) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x38) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000540)) sendmsg$netlink(r9, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000000300)={0x214, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x201, 0x0, 0x0, 0x1, [@typed={0x4}, @generic="f3ff97e605beecf09d797624d96a6d92569241c669a8ce925db0d169dab9ad179b02d2536f90380573f2541b6af0c245a07b72d88f088b1b2763e9e3e877a2a3be9a0cff07555ce785d5bd1f9fcc01614188ffc727697c1f5a8c29be96c16f64616782cd6f553add40f876db528b770ff98d1c9cd8d2e14be25c330c1a10876fdce0eb30f38c7563bc86804ef55e36099079ed516bc1326c49de5f9a8d67c8441c74988b94a2536ff36a7348c32ac257", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x4}, @typed={0x4}, @generic="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", @generic="c0f8b4f24a85cee1f7418d6b7cc1baa61925e398566aef0534cae00f1a399431cf29d9f506fa8eed95f6f53ff85e8530f492743c0f265c1cd1606dfe60e1"]}]}, 0x214}], 0x1}, 0x0) r11 = socket(0x10, 0x803, 0x2) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000004080108000000000000000000000000060002400000311b7823940000050003003a000000"], 0x24}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x9c}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 16.49121492s ago: executing program 4 (id=4220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x128, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xdc, 0x3}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_LOSS={0xd0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x3, 0x1, 0xedff, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x9, 0x7, 0xfffff000, 0x3a2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x4, 0x3, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4, 0x7, 0x200, 0x40}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffffff54, 0x3, 0x1, 0x3c9, 0xc}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x5, 0x5, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x9, 0x9, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x9da, 0x1, 0x141, 0xffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x40ae, 0x3, 0x3, 0x6}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x100, 0x40, 0x9, 0x2, 0x94}}]}}}]}, 0x158}}, 0x0) 16.400114419s ago: executing program 2 (id=4221): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0, 0xffffffffffffffff, 0x500}, 0x57) 16.350048511s ago: executing program 1 (id=4222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a01010000000000000002020000000900020073797a3200000000090001"], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) 16.348555865s ago: executing program 4 (id=4223): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x7, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf", 0x0, 0x0, 0xffffffff}, 0x50) 16.253455201s ago: executing program 4 (id=4224): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x9}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000001000000000000005d00000085000000300000009500000000020000"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) 16.232633889s ago: executing program 2 (id=4225): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000001000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.177005642s ago: executing program 2 (id=4226): r0 = socket$kcm(0x10, 0x2, 0x10) syz_emit_ethernet(0xba, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x76, 0xffffffffffffffff, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x8, "020007651442"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 16.12182054s ago: executing program 1 (id=4227): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x464, 0xa11, 0x70bd27, 0x25dfdbfc, "f28261112b6dd8ee3eef2ec5131da857e1d4e836ecf442f0a60d1f8163b71d163a3a966261fce188f20b4e758e564a7c5c7439998f7c203167fcacea59940e30fa6237c2d3994b3201797fbf6e7e4584a25bc70a643a99951b72dc0785e4f6ff933fe120ef58fb1866c6746ca4ec17dfa6d81f31a7279c774e5419", ["", "", "", "", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x8810}, 0x48804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x110, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xefd}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa6f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x39}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008014}, 0x1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x2000c045) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan4\x00'}) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f00000006c0)={0x424, 0x3f4, 0x0, 0x70bd2b, 0x25dfdbff, {0x3, 0x2, 0x3, [0x4, 0x6, 0x8, 0x8001, 0x1, 0x7, 0x2b, 0x5, 0x7, 0x8, 0x8, 0x8, 0x3, 0xffff, 0x4, 0x0, 0x5, 0x7, 0x2f0f, 0x7, 0x5, 0xe6e7, 0x9, 0xff, 0x100, 0x2, 0x3, 0xf1, 0x7fffffff, 0x800, 0x8, 0x5, 0x2, 0xf, 0x1, 0x4, 0x7, 0x5, 0x89, 0x4, 0x0, 0x6d, 0x10000, 0x7, 0x0, 0x2, 0x4, 0x4, 0xcf0, 0x100, 0x5, 0x4, 0x3, 0x40, 0x8, 0x1, 0x1ff, 0x8, 0x0, 0xf, 0x2, 0x0, 0x4, 0x100], [0x8936, 0xfffffffa, 0x9, 0x40, 0x0, 0x7, 0x5, 0x5, 0x60, 0x6, 0x2e746518, 0xa0, 0xce4a, 0x3, 0x80, 0xf48b, 0x7, 0x2, 0xa, 0x3, 0x6, 0x2, 0x895, 0x8, 0x6, 0x0, 0x33cd, 0xff, 0xffffffff, 0xffff7fff, 0xcd1, 0x1, 0xfffff977, 0x95, 0x80, 0x7fffffff, 0x4, 0x1, 0x1a8, 0x7, 0x70d, 0x5, 0x80000, 0x1, 0x5, 0x1, 0xc56, 0x80000000, 0x3, 0x10001, 0x0, 0x6, 0x1, 0x7fff, 0xffffffff, 0x0, 0x180000, 0x4, 0xf7a, 0xfffffff9, 0x5, 0x6, 0x6, 0xe], [0xffff, 0x5, 0x0, 0x2, 0x0, 0x1, 0x7, 0x9, 0x7f, 0xf1f2, 0x0, 0xe, 0x9a, 0x6, 0x7, 0x80, 0x8, 0x0, 0x3, 0x2, 0x1, 0x5, 0x6, 0x8, 0x4, 0x2, 0xc, 0x9, 0x9, 0x4, 0x8, 0x6, 0xd, 0x5, 0x0, 0xcc1, 0x0, 0x7, 0x3, 0x26, 0xfe50, 0x8, 0x0, 0x8, 0x4, 0x400, 0x8, 0x7, 0xdc, 0xb, 0xfffffffa, 0x800, 0x1, 0x8, 0x8, 0x32, 0xfff, 0x6, 0x8, 0xffff, 0x5, 0xa2b, 0x5, 0x6], [0xffffffff, 0xffffff00, 0x7f0, 0x5, 0x3, 0x7, 0x8000, 0x7ff, 0x6, 0x0, 0x4, 0xf, 0x1, 0x8, 0x8, 0xed6, 0x8, 0x0, 0x0, 0x7, 0x2, 0x1000, 0x9, 0x3, 0x5, 0x4, 0x4e, 0x8, 0x2, 0x1ff, 0x0, 0x6, 0xfffffff0, 0x5, 0x2, 0x1, 0x1, 0x10000, 0x2, 0x1ede, 0x9, 0x80000000, 0xfffffffa, 0xc2c, 0x3fb1, 0xfff, 0xb1, 0x5, 0x97, 0x4, 0x5e45, 0x9, 0x3, 0x9000000, 0x2, 0x39c, 0x5, 0x3, 0xfffffff8, 0x3, 0x27a, 0x817, 0x3, 0x6], 0x1, ['\x00']}, [""]}, 0x424}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r6) sendmsg$NFC_CMD_GET_DEVICE(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x8, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000811}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), r6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x81, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000d40)={'wg2\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000dc0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e80)={'sit0\x00', &(0x7f0000000e00)={'gre0\x00', r1, 0x8000, 0x8, 0x400, 0x21, {{0xa, 0x4, 0x3, 0x4, 0x28, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x14, 0xf4, 0x3, 0xe, [{@remote, 0xff}, {@multicast1, 0x1}]}]}}}}}) bind$packet(r9, &(0x7f0000000ec0)={0x11, 0xc, r10, 0x1, 0x26, 0x6, @local}, 0x14) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f80)={'ip6gre0\x00', &(0x7f0000000f00)={'ip6tnl0\x00', r1, 0x29, 0x98, 0xd, 0x6, 0x22, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x0, 0x40, 0x6, 0xfffffffb}}) bind$packet(r9, &(0x7f0000000fc0)={0x11, 0x1c, r12, 0x1, 0xf, 0x6, @link_local}, 0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x78, r14, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6a}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x400}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x8880) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001180)={'wpan1\x00'}) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000001200), r11) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x64, r15, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x84) 16.121380748s ago: executing program 4 (id=4228): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @empty, 0x6}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000455502000000000104004e200023b0"], 0x0) 16.120888727s ago: executing program 3 (id=4229): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000000100)=""/28, 0x1c}], 0x2}, 0x5}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@loopback}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000001600)={'syztnl2\x00', r2, 0x29, 0x6, 0x5, 0x9b, 0x28, @rand_addr=' \x01\x00', @private1, 0x20, 0x10, 0x5, 0x80000001}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10003020}, 0xc, &(0x7f0000001a00)={&(0x7f0000001680)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000014c0)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x48884) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) close(r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32, @ANYRES32=r7], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4) 16.03663678s ago: executing program 2 (id=4230): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000000100)=""/28, 0x1c}], 0x2}, 0x5}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@loopback}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000001600)={'syztnl2\x00', r2, 0x29, 0x6, 0x5, 0x9b, 0x28, @rand_addr=' \x01\x00', @private1, 0x20, 0x10, 0x5, 0x80000001}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10003020}, 0xc, &(0x7f0000001a00)={&(0x7f0000001680)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000014c0)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x48884) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) close(r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32, @ANYRES32=r7], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4) 15.929477372s ago: executing program 4 (id=4231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="a0000000907800001d02000000000000000200"/28], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000001400)={'filter\x00', 0x1000, "94fce4143d475bce070b17b613a5ef9fe19987c4204918ff1b1fe7acc270344e0a910441440bc9c5512212ab9bbb2d655eaf395907effea586351f952360dbccb281e0b557047ea57395bc459ec66db0c98e64642cda49e5d3548c8e33ebaad25c9aa1a504ddb73dfd594f5c2229be6a02a94ad87c363658196476d8a57abfb7528a57108e8812d6dcb50f8475387b332a6ca81a8eca54429b55d07306b1b4e9de06030209b42af837f96a105be87953705fdae580fb39eab16c6ab2d0956923cc4448d49dbda9cbc28c41036e895a0e8f22328c2f123b1865fc2225fc5c7e06a0e49cbfa5b95bc3128ae33ea269cc81183612807cc10d07128c06b74f123127ff6486d66201a48d5489c26352136ea45971eb4f52d2b13be1fe3464e67a82477ad97c6a21b232af4e84fab46712e7edf12ea4894bd46f30cafab8374ca2b327c90ae3b2bad9eb582d41bc9816e597b202069f03212e07a6cb4544331383f13146ae85a37e09a6c4cae0397d1c97e9a1b8ce4d553351336aba9028caf5ac8f57952f82eb321c46db3b47da4ec6b7d2336913bb3b76039b99424d48557772de08d4bc325820bfb56721a08adb41447c9e62ba6d56c795c51430820bf9471c5431ec262d59ba499275e6b020e0f4a4ffbc2b3aa2b0fe2c1e85ecca1bd726b57585f6a7b9f57c62bf270f68685e70f030334b5da43a8f1ec45c94dc62d25fe422289fc116f1a296274097a14189e2cda442fc41a9e15d0b0983be53dab3c38ca8c9aad49a675cddf25b1fd6313d23b88c2c62a7610f0fdf7f43cde6f2ce639262e73cdba73af7ceb8574136056d572cb2f74f9bc676fe79b0b5f0e8116af1f6de2caee71bdd4a7cfc0fb2e3fc57d90223d2cbcd73a6ed9708c2e4b28cfbee51e5f332bc109261fd17858dcc3cc4862212ee07cf888ada31c2cd115bddfdafa28385b549c9123ff5a80e2efe92e71ce423a89638215f3369a488bbad2fbdc7ec17d839036072347fd2c26e80df2e22058657db36ffaa90f0a1abda5c89c55bb45b5247834a30391103fb3afb4f900fa2e99ff29fc248bfd1a45b7cdfdc6f0f25da0f394e5fadefba16fb55ffedbdbad93792877aa697eddc81d9ad0254121f4bf071864415479f07d6cc100057493d1e9b37ebdd60ca7a97f6585742fc2e9aa1be2c11fe6706c86ba391cdb124953730147b1e4e5b23fc05d6cae347ee55808853b25cd6722878a206043fb24b637e5f9b389d99366eaffcb7de0de647e2d25b499dab4737945920465646df67f40ed53ed622d7465b66d02de17f450388663a4adbf9ea814363c689ef0ecef3f4e34654868c554dea41479c74547231a56a0d1669561bdc9f68d92d6f68f52b4c54b08dcfa6875994c367ea8d53974bd4dab25c1c865d2231c6d6ccddf3b4ab4f7c2de8c46602bfc134d4aa45488351c703edaabd5c24f7e2077438c5fc07ba1db38bc43cc9a7a52743b4ce477e61f834d90e0b24b9b5d360e17f51678acde349b61e081cab29f51474be8cc3972bd77effb2a392dfa5d2dd2c3abe05c0c0a06d1ecad50a89b639f6248dc7376e2f83837a5958b33c343ffeb924466d6c25d0d02224cb50f405b7cf338226c5581a660ff02629450c3801934ba157d6b43f236b9b5e88ab450c574673d863143c39adcb8670bd7bb2c9123e2a1e286f1784b35ab419319a76c06180bd147c79d71f39e5ebc273026ea73298673d564e5750ca0ba88ddfe236cac2c937709b1222f5f0199d39a4bf8cb619bb91dbec77598f5bd2f7eca063ec0fe8fd6289a4de39d1b25af100b39d0e2f15ffb6dde3d944db6b6dac269541f67d832b4bacfcf4732bc48109cb64fe402a1ad9a616773cc85e901b396065e65bb8606351832b2bc413923efd11704fa0f65a2f2577b9c7bfe6bce720e8529532a1ed91aed0953be59c2fb092f8d90f59e86428b03b891d365bec3d5db2ece02de2cc2dda3afdf370c037f01b139551940a4d57d70a4f36c5b063a32d8c5d14226c027c2a42f9af18b16dbd0c5a8b9aaaac1320b2176931c561cee4fb9becdbc90ded0e4300e90bb705da33e208cb8d71e8e8d922c419bc2c2383b74586fa109ca415e2941f1c63349f339d66f12b8b2a6e5e1be97dc7e2f189e9feefdc10c697d2127f8bbfbd6cbd5c18c10c42c8994e6d534cc4ec78b2ac2cc596a146863ff35b1a56465351384c7681d67ac38fec5dd21ceb04791c65e99f771832969a0a8599bedd4191a3cad313336acd967dec447eea27391e611ee06f630f6ce5d6d6525fb88f04d0bd024b10aec0d4caa6aeba2a84f506e7969142a0b9e33c5635a3b7ff10a7dd7f83087f2f8fc64c68d7a5950142aeac2ba288c1530aed0e2330417b8a1ec11563cde6629d2e6256d11e3cbaf54a2fb6e947ba6fb91e8b87e1651450e4a238ad794ed76049e5483e544e2810090ca632896e553188d6fc58ad58c09229b81c5c488972d6923373dd6ecc06499e376184ecf6d0a2570acffcef9d709881b5d2f34d92041b9e54706fad57c28fa9113c9eb42fd4f070b7cddb3ddd3f5aafed1060416550d2e611b0581449f5e626f481949ca1a988178129635aa5c6b71f9b545c9f8b3e5adab91552d65627c19e5450b92d08fc5a2fe52b576efa69fc2c7c4db0ddfc9af092ca550f1f83e505675e6f6ce8a902deb67d5ae66a0c9c2b3d55d0a203db0abc0722c3aea05475cdd1d8b6be54bb4b660f4bc926b24e325ef5649331d757669b539107ff7e73d038d5ba4438cf2b8ccd1e844e4ba86750dea786f8004c252c569f69b08461f1befdb50c5374379785324d8742fb2b347c0add36e6e1307dde166878f110eeffedcadf808f27ab7f4f22393660003b82ef734b1b62a37d9c0e810f14172a8789481caca167e95c7e5865e983500b5b8921d07cb7543d87bfe6dacaa49ad5a7ca4e27438910d579fd9174559d56375225e599fc0888a0b000d549bcb4e81b8fe5d034153a85d223817cc843d8a9f1639cedf9d41ee010769ac65972f1f26d200849d74f7840392890a9c6b5296c9b965e764120bea5c2be20f5785f8cf81d76576a6f48295949be68c4aa3420545948abd90f8caf1947611f8f5f9a7a1860a49e93b1481c9eb292f637d6ff62fdecd655c530f064be15f6d2779d7bde5919f156217a639d8ddf96dd68cc1082a607b904a8bd0d5cead2f83f16b5c114d4abd2d1ca7d4d8be31284b83e312056861540307b78e9a195f3f591e1ec519c8d321e783de4bd7bd24ceb380bc8a09b9cf98f9cda2cbfe44fe13834dfa24a32c2a45a849a2bdc23eadeabddf16eb1c7fc482e675d77e060e5595eecd324a7c97bc403596e84d15e8c749681a32c548bb0d8b9007e51e9e82dd264279d1b1db4485749252b970a10bc943f4b8a36103fcc2f4a5f62f8c460d9819e78628fd8668181e58b459d35a152426368a90cfa89f053c33c0e890b9c85f9d5fdc29e6349722ab06f6d7864dc6847505e79be45c5d1875b0d9bbf2d95cc7cae2de6c9a154721d70bb5b2d8e5fd1a7bef8b02d1bd6c5c4268e815fcf334090bba19a6feed330465b2fd27996c41a3e8e43a626008b3b86fa042fbfe2e1bdba69ea5492c327550588116850322eda651f825f0070a0e735996f56e46bb67b1e72178fab32501ffdea4e998f3913598678bd662c298c2deed8d78e7762c3041b5b89f359e7a2d8eb471c313df8708790d8ae0f0d5b08c9b647f3ccbaa034010a10a503b3416bb53861011d2af350d28a51bd8c879f6dbfa4e06af6a84e5f4e4454262655daab1573fa9987a581d535537e2fedb82d2f9dd4a6cb2542a5bd42034238b165c1e3a48038937024c4906ea97b52c606770c3bd6c69e69419644eddee116b7ebaf3732f18fa4e4ea386ecff50c58f39cf30ef0087be7fd7beb34228fc7b47110ba13f43b1b90fdca88297dfff9804bcf8f432d79f1353e5e28b00c7c5e1ea340a019ebdf258db678dc809350b1a0c153f5c1142b5a4d4159b5f143d037961fdadfc9bad98bbbeab982f89612fcdae49f2dd858d802920ca7ec23e651c68f722840fe37ffbfa254dc0345d589d39abb14af6db7191bc2951ade8e647d22ba9a60a9e83ae82e84d78a367281ec431c6ea34ede6445d43c2edc0e42320abe305fd7b961121a287b96d2cb393df9224595d71dd7f344da58116805672e943f52549482a8f4a12d154ff7a03232d984e66505f072bb5e80b7e55a0df263d3d0186de4bac06484fcf235745252d92c296c4dc82b7c677d51f19ca94b11ef6d6e6fe7cc02758fd694c184321d3e7685f771c16c99ab67b8772a1a09660e2352fcbc1faf18026ddee95fada23b90f85cdad7dde90571a046ecc04ce30da9fc427d976a63a867de84e7b57bd0b9869802c8e7c43ab1a58de0680d1abaedc28952b4974ad3735e1eb307d50ca26b076274956cb572b37c843104ef6236bdc0003f74272c7f3c0572402a8313c848b8f384ff82bb0b01911dd45785694241b191f304d2c8a0f46ddb4f936dcc68f067c9abc8255d8963e74febf1b7f2f995d0549983159f7c79f6c23b610b9509d88df807424e5faf9c4c5e3c94fad0f02ba13d437e8799a771a6aa1d609de1d9abdf7db5905d9f0c517a6444eff29b84d4a0972e534fc2287340ef6216d8971e7e81646e9d5b2815fba04936a1b9032af05f41b9bea9d6824f3e2b9f4ce84fdf9ad5b79ea4c3c297bc54d9347c53a043e7286fda7391c38c2137632fead0ab8551dc9f099a71345d7199705a6be5306604db1660b73af87e4ea5e0a97166d8a3e36ac182d20066da16a1d810e9463434537783c09338ac558b9f5baabfbb673fb75110b1e0357b21415030cd8e6bddc9ba8c892a1a1e5d9ad4bb6aa98f413eec3bd8c38ecde971f5784c46dee29f15b88bd6b9903a3b4d9e879be70e8e4693f63e6b5928333f2a4eea310fddfdf62674973d0a1bc1ddae0997d7358dc16c850663ac8e8060ed2be785d6eb7f598f7aef1bddea3be5f034596e64948cbf86c566bd1299b974e827e0006685c9ba27409c85ad15a3c1f1efabbdef42774cf1b0a35d2338c69f24afc7f50b9dab5631425cd1fda888b711a77d5720d8d527b1c8f296c1559946c05aee0989b5b521877af696414a0d79823d36d2006f041cf0174da57a610ed178a6922ab55d58d48c6f3eb206bcbe3ef1af7fdd847fc16f97e96fc54bd45e987022b2c72ce5476b0b9e75e9b4938d494a98248920d51882093b964f528e5211de590e3f629cd2b6aafb2caec52a772518bce55497004eb3ee4280c0ee4b4efcf0ae011a0ccdecfef17d50b63fabcd505fbe66535d71396111be6f2c8ac1099d7ce8b09ab4ab8d122aafc7b8f49f9352288d1f5561257eec26f76a57e588b26042799841bd4f8643b27f5b3712ab1dcf1365a0d6c2a1e6d55030192a7db458f220a08cf81c2bd7721ce1dc459b67b74e38cc206e9f28fd48380aed3c4eb338e5571ef9f8bb65c8c7c3369c922eefa8e909e9cd2ff8ebcb8eb9a5f877fab0e868a19739d71c3610be1f1a08ade73320b7a8faf6d15555a941236b091469a5618201886cd3b6b9fb1510dad098352547f05bfd43ea2b5bd0181691f05288bd2dff7da80abdf97a41fdb3703f7166b3468c0a5da8b3200b0d388e4edf967048fd778bf2d3862ca8e995e72396f744aede87a94639a075b68ca7653034a1c7f18b03cb8100b7842a00a43eda78fcb6b4db28fa17bd6b045d3acf5117eb9f7c836d7cc41e066b9b3f071e02de82401175c3eeaee0013429ccdecdd7a8"}, &(0x7f00000002c0)=0x1024) 1.069357834s ago: executing program 32 (id=4227): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x464, 0xa11, 0x70bd27, 0x25dfdbfc, "f28261112b6dd8ee3eef2ec5131da857e1d4e836ecf442f0a60d1f8163b71d163a3a966261fce188f20b4e758e564a7c5c7439998f7c203167fcacea59940e30fa6237c2d3994b3201797fbf6e7e4584a25bc70a643a99951b72dc0785e4f6ff933fe120ef58fb1866c6746ca4ec17dfa6d81f31a7279c774e5419", ["", "", "", "", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x8810}, 0x48804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x110, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xefd}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa6f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x39}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008014}, 0x1) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x2000c045) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan4\x00'}) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000b40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f00000006c0)={0x424, 0x3f4, 0x0, 0x70bd2b, 0x25dfdbff, {0x3, 0x2, 0x3, [0x4, 0x6, 0x8, 0x8001, 0x1, 0x7, 0x2b, 0x5, 0x7, 0x8, 0x8, 0x8, 0x3, 0xffff, 0x4, 0x0, 0x5, 0x7, 0x2f0f, 0x7, 0x5, 0xe6e7, 0x9, 0xff, 0x100, 0x2, 0x3, 0xf1, 0x7fffffff, 0x800, 0x8, 0x5, 0x2, 0xf, 0x1, 0x4, 0x7, 0x5, 0x89, 0x4, 0x0, 0x6d, 0x10000, 0x7, 0x0, 0x2, 0x4, 0x4, 0xcf0, 0x100, 0x5, 0x4, 0x3, 0x40, 0x8, 0x1, 0x1ff, 0x8, 0x0, 0xf, 0x2, 0x0, 0x4, 0x100], [0x8936, 0xfffffffa, 0x9, 0x40, 0x0, 0x7, 0x5, 0x5, 0x60, 0x6, 0x2e746518, 0xa0, 0xce4a, 0x3, 0x80, 0xf48b, 0x7, 0x2, 0xa, 0x3, 0x6, 0x2, 0x895, 0x8, 0x6, 0x0, 0x33cd, 0xff, 0xffffffff, 0xffff7fff, 0xcd1, 0x1, 0xfffff977, 0x95, 0x80, 0x7fffffff, 0x4, 0x1, 0x1a8, 0x7, 0x70d, 0x5, 0x80000, 0x1, 0x5, 0x1, 0xc56, 0x80000000, 0x3, 0x10001, 0x0, 0x6, 0x1, 0x7fff, 0xffffffff, 0x0, 0x180000, 0x4, 0xf7a, 0xfffffff9, 0x5, 0x6, 0x6, 0xe], [0xffff, 0x5, 0x0, 0x2, 0x0, 0x1, 0x7, 0x9, 0x7f, 0xf1f2, 0x0, 0xe, 0x9a, 0x6, 0x7, 0x80, 0x8, 0x0, 0x3, 0x2, 0x1, 0x5, 0x6, 0x8, 0x4, 0x2, 0xc, 0x9, 0x9, 0x4, 0x8, 0x6, 0xd, 0x5, 0x0, 0xcc1, 0x0, 0x7, 0x3, 0x26, 0xfe50, 0x8, 0x0, 0x8, 0x4, 0x400, 0x8, 0x7, 0xdc, 0xb, 0xfffffffa, 0x800, 0x1, 0x8, 0x8, 0x32, 0xfff, 0x6, 0x8, 0xffff, 0x5, 0xa2b, 0x5, 0x6], [0xffffffff, 0xffffff00, 0x7f0, 0x5, 0x3, 0x7, 0x8000, 0x7ff, 0x6, 0x0, 0x4, 0xf, 0x1, 0x8, 0x8, 0xed6, 0x8, 0x0, 0x0, 0x7, 0x2, 0x1000, 0x9, 0x3, 0x5, 0x4, 0x4e, 0x8, 0x2, 0x1ff, 0x0, 0x6, 0xfffffff0, 0x5, 0x2, 0x1, 0x1, 0x10000, 0x2, 0x1ede, 0x9, 0x80000000, 0xfffffffa, 0xc2c, 0x3fb1, 0xfff, 0xb1, 0x5, 0x97, 0x4, 0x5e45, 0x9, 0x3, 0x9000000, 0x2, 0x39c, 0x5, 0x3, 0xfffffff8, 0x3, 0x27a, 0x817, 0x3, 0x6], 0x1, ['\x00']}, [""]}, 0x424}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r6) sendmsg$NFC_CMD_GET_DEVICE(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x8, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000811}, 0x80) syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), r6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x81, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000d40)={'wg2\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000dc0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e80)={'sit0\x00', &(0x7f0000000e00)={'gre0\x00', r1, 0x8000, 0x8, 0x400, 0x21, {{0xa, 0x4, 0x3, 0x4, 0x28, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x14, 0xf4, 0x3, 0xe, [{@remote, 0xff}, {@multicast1, 0x1}]}]}}}}}) bind$packet(r9, &(0x7f0000000ec0)={0x11, 0xc, r10, 0x1, 0x26, 0x6, @local}, 0x14) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f80)={'ip6gre0\x00', &(0x7f0000000f00)={'ip6tnl0\x00', r1, 0x29, 0x98, 0xd, 0x6, 0x22, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast1, 0x0, 0x40, 0x6, 0xfffffffb}}) bind$packet(r9, &(0x7f0000000fc0)={0x11, 0x1c, r12, 0x1, 0xf, 0x6, @link_local}, 0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x78, r14, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6a}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x400}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x8880) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001180)={'wpan1\x00'}) r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000001200), r11) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x64, r15, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x84) 1.030302278s ago: executing program 33 (id=4229): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000000100)=""/28, 0x1c}], 0x2}, 0x5}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@loopback}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000001600)={'syztnl2\x00', r2, 0x29, 0x6, 0x5, 0x9b, 0x28, @rand_addr=' \x01\x00', @private1, 0x20, 0x10, 0x5, 0x80000001}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10003020}, 0xc, &(0x7f0000001a00)={&(0x7f0000001680)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000014c0)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x48884) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) close(r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32, @ANYRES32=r7], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4) 24.896053ms ago: executing program 34 (id=4230): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000000100)=""/28, 0x1c}], 0x2}, 0x5}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@loopback}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000001600)={'syztnl2\x00', r2, 0x29, 0x6, 0x5, 0x9b, 0x28, @rand_addr=' \x01\x00', @private1, 0x20, 0x10, 0x5, 0x80000001}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10003020}, 0xc, &(0x7f0000001a00)={&(0x7f0000001680)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000014c0)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x48884) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) close(r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32, @ANYRES32=r7], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4) 0s ago: executing program 35 (id=4231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500280600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="a0000000907800001d02000000000000000200"/28], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000001400)={'filter\x00', 0x1000, "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"}, &(0x7f00000002c0)=0x1024) kernel console output (not intermixed with test programs): sr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.283697][T16281] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 368.486334][ T30] audit: type=1107 audit(1752306982.191:17): pid=16300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 368.814710][T16315] netlink: 'syz.4.3682': attribute type 2 has an invalid length. [ 368.901516][T16315] : entered promiscuous mode [ 369.185439][T16330] vlan2: entered promiscuous mode [ 369.233746][T16329] macsec2: entered allmulticast mode [ 369.253029][T16329] bond0: entered allmulticast mode [ 369.285802][T16329] bond_slave_0: entered allmulticast mode [ 369.292080][T16329] bond_slave_1: entered allmulticast mode [ 369.359991][T16329] bond0: left allmulticast mode [ 369.364878][T16329] bond_slave_0: left allmulticast mode [ 369.376471][T16336] FAULT_INJECTION: forcing a failure. [ 369.376471][T16336] name failslab, interval 1, probability 0, space 0, times 0 [ 369.404041][T16336] CPU: 0 UID: 0 PID: 16336 Comm: syz.3.3692 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 369.404067][T16336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.404082][T16336] Call Trace: [ 369.404090][T16336] [ 369.404098][T16336] dump_stack_lvl+0x189/0x250 [ 369.404124][T16336] ? __pfx____ratelimit+0x10/0x10 [ 369.404148][T16336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.404170][T16336] ? __pfx__printk+0x10/0x10 [ 369.404197][T16336] ? __pfx___might_resched+0x10/0x10 [ 369.404218][T16336] ? fs_reclaim_acquire+0x7d/0x100 [ 369.404247][T16336] should_fail_ex+0x414/0x560 [ 369.404278][T16336] should_failslab+0xa8/0x100 [ 369.404303][T16336] __kmalloc_noprof+0xcb/0x4f0 [ 369.404322][T16336] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 369.404349][T16336] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 369.404377][T16336] genl_family_rcv_msg_doit+0xb8/0x300 [ 369.404403][T16336] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 369.404425][T16336] ? rcu_is_watching+0x15/0xb0 [ 369.404449][T16336] ? apparmor_capable+0x137/0x1b0 [ 369.404472][T16336] ? bpf_lsm_capable+0x9/0x20 [ 369.404497][T16336] ? security_capable+0x7e/0x2e0 [ 369.404529][T16336] genl_rcv_msg+0x60e/0x790 [ 369.404555][T16336] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.404574][T16336] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 369.404615][T16336] netlink_rcv_skb+0x205/0x470 [ 369.404641][T16336] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.404661][T16336] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.404703][T16336] ? down_read+0x1ad/0x2e0 [ 369.404732][T16336] genl_rcv+0x28/0x40 [ 369.404748][T16336] netlink_unicast+0x75c/0x8e0 [ 369.404782][T16336] netlink_sendmsg+0x805/0xb30 [ 369.404816][T16336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.404845][T16336] ? aa_sock_msg_perm+0x94/0x160 [ 369.404873][T16336] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 369.404901][T16336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.404927][T16336] __sock_sendmsg+0x219/0x270 [ 369.404953][T16336] ____sys_sendmsg+0x505/0x830 [ 369.404987][T16336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.405024][T16336] ? import_iovec+0x74/0xa0 [ 369.405048][T16336] ___sys_sendmsg+0x21f/0x2a0 [ 369.405068][T16336] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.405121][T16336] ? __fget_files+0x2a/0x420 [ 369.405144][T16336] ? __fget_files+0x3a0/0x420 [ 369.405179][T16336] __x64_sys_sendmsg+0x19b/0x260 [ 369.405200][T16336] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.405227][T16336] ? __pfx_ksys_write+0x10/0x10 [ 369.405245][T16336] ? rcu_is_watching+0x15/0xb0 [ 369.405272][T16336] ? do_syscall_64+0xbe/0x3b0 [ 369.405301][T16336] do_syscall_64+0xfa/0x3b0 [ 369.405323][T16336] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.405347][T16336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.405364][T16336] ? clear_bhb_loop+0x60/0xb0 [ 369.405387][T16336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.405411][T16336] RIP: 0033:0x7fe20898e929 [ 369.405428][T16336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.405445][T16336] RSP: 002b:00007fe209761038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.405464][T16336] RAX: ffffffffffffffda RBX: 00007fe208bb5fa0 RCX: 00007fe20898e929 [ 369.405478][T16336] RDX: 0000000020000086 RSI: 0000200000000100 RDI: 0000000000000004 [ 369.405495][T16336] RBP: 00007fe209761090 R08: 0000000000000000 R09: 0000000000000000 [ 369.405507][T16336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.405518][T16336] R13: 0000000000000000 R14: 00007fe208bb5fa0 R15: 00007ffe64399cb8 [ 369.405548][T16336] [ 369.406392][T16329] bond_slave_1: left allmulticast mode [ 369.837365][T16342] __nla_validate_parse: 6 callbacks suppressed [ 369.837383][T16342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3693'. [ 369.867749][T16342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3693'. [ 369.869128][T16340] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.3690'. [ 369.904357][T16342] !: entered promiscuous mode [ 369.918904][T16342] !: left promiscuous mode [ 370.255991][T16358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.760429][T16381] Cannot find add_set index 0 as target [ 370.844379][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3707'. [ 371.032497][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3708'. [ 371.465588][T16415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3716'. [ 371.483830][T16415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3716'. [ 371.493498][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3717'. [ 371.505429][T16419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3716'. [ 372.022867][T16447] netlink: 'syz.4.3727': attribute type 7 has an invalid length. [ 372.050359][T16447] netlink: 'syz.4.3727': attribute type 7 has an invalid length. [ 372.067624][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3728'. [ 372.085925][T16447] netlink: 'syz.4.3727': attribute type 7 has an invalid length. [ 372.114771][T16447] netlink: 'syz.4.3727': attribute type 7 has an invalid length. [ 372.146096][T16447] netlink: 'syz.4.3727': attribute type 7 has an invalid length. [ 372.165286][T16447] netlink: 'syz.4.3727': attribute type 7 has an invalid length. [ 372.235956][T16447] netlink: 'syz.4.3727': attribute type 7 has an invalid length. [ 372.272964][T16447] netlink: 'syz.4.3727': attribute type 7 has an invalid length. [ 372.282446][T16460] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 372.292118][T16447] netlink: 'syz.4.3727': attribute type 7 has an invalid length. [ 372.326168][T16447] netlink: 'syz.4.3727': attribute type 7 has an invalid length. [ 372.334952][T16460] bridge_slave_0: left allmulticast mode [ 372.340838][T16460] bridge_slave_0: left promiscuous mode [ 372.359377][T16460] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.381500][T16460] bridge_slave_1: left allmulticast mode [ 372.388186][T16460] bridge_slave_1: left promiscuous mode [ 372.397383][T16460] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.433582][T16460] bond0: (slave bond_slave_0): Releasing backup interface [ 372.444234][T16460] bond0: (slave bond_slave_1): Releasing backup interface [ 372.474270][T16460] team0: Port device team_slave_0 removed [ 372.483193][T16460] team0: Port device team_slave_1 removed [ 372.546206][T16460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.554777][T16460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.350064][ T30] audit: type=1107 audit(1752306987.051:18): pid=16512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 373.542416][T16516] xfrm1: entered promiscuous mode [ 373.561067][T16516] xfrm1: entered allmulticast mode [ 373.631550][T16531] FAULT_INJECTION: forcing a failure. [ 373.631550][T16531] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 373.654206][T16531] CPU: 0 UID: 0 PID: 16531 Comm: syz.2.3758 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 373.654232][T16531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.654244][T16531] Call Trace: [ 373.654252][T16531] [ 373.654260][T16531] dump_stack_lvl+0x189/0x250 [ 373.654286][T16531] ? __pfx____ratelimit+0x10/0x10 [ 373.654311][T16531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.654333][T16531] ? __pfx__printk+0x10/0x10 [ 373.654358][T16531] ? fs_reclaim_acquire+0x7d/0x100 [ 373.654392][T16531] should_fail_ex+0x414/0x560 [ 373.654422][T16531] prepare_alloc_pages+0x213/0x610 [ 373.654455][T16531] __alloc_frozen_pages_noprof+0x123/0x370 [ 373.654485][T16531] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 373.654510][T16531] ? __sock_sendmsg+0x219/0x270 [ 373.654533][T16531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.654556][T16531] ? policy_nodemask+0x27c/0x720 [ 373.654583][T16531] alloc_pages_mpol+0x232/0x4a0 [ 373.654611][T16531] vma_alloc_folio_noprof+0xe4/0x200 [ 373.654637][T16531] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 373.654671][T16531] folio_prealloc+0x30/0x180 [ 373.654695][T16531] do_wp_page+0x1231/0x5800 [ 373.654736][T16531] ? __pfx_do_wp_page+0x10/0x10 [ 373.654752][T16531] ? do_raw_spin_lock+0x121/0x290 [ 373.654780][T16531] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 373.654820][T16531] __handle_mm_fault+0x1144/0x5620 [ 373.654859][T16531] ? __pfx___handle_mm_fault+0x10/0x10 [ 373.654924][T16531] ? find_vma+0xe7/0x160 [ 373.654945][T16531] ? __pfx_find_vma+0x10/0x10 [ 373.654979][T16531] handle_mm_fault+0x40a/0x8e0 [ 373.655010][T16531] do_user_addr_fault+0x764/0x1390 [ 373.655043][T16531] exc_page_fault+0x76/0xf0 [ 373.655069][T16531] asm_exc_page_fault+0x26/0x30 [ 373.655091][T16531] RIP: 0010:__put_user_4+0xd/0x20 [ 373.655115][T16531] Code: 66 89 01 31 c9 0f 01 ca e9 40 3b 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 17 3b 03 00 90 90 90 90 90 90 90 90 90 90 [ 373.655135][T16531] RSP: 0018:ffffc900119d7c98 EFLAGS: 00050202 [ 373.655151][T16531] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000002038 [ 373.655164][T16531] RDX: 0000000000000000 RSI: ffffffff8db8e292 RDI: ffffffff8be29e00 [ 373.655176][T16531] RBP: ffffc900119d7eb0 R08: 0000000000000000 R09: ffffffff820c2f20 [ 373.655189][T16531] R10: dffffc0000000000 R11: fffffbfff1f4477f R12: 0000200000002000 [ 373.655202][T16531] R13: 0000000000040840 R14: 0000200000001c00 R15: 0000000000000010 [ 373.655220][T16531] ? __might_fault+0xb0/0x130 [ 373.655249][T16531] __sys_sendmmsg+0x25f/0x430 [ 373.655272][T16531] ? __pfx___sys_sendmmsg+0x10/0x10 [ 373.655287][T16531] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 373.655338][T16531] ? ksys_write+0x22a/0x250 [ 373.655361][T16531] ? __pfx_ksys_write+0x10/0x10 [ 373.655388][T16531] __x64_sys_sendmmsg+0xa0/0xc0 [ 373.655407][T16531] do_syscall_64+0xfa/0x3b0 [ 373.655430][T16531] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.655452][T16531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.655470][T16531] ? clear_bhb_loop+0x60/0xb0 [ 373.655492][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.655509][T16531] RIP: 0033:0x7f4538d8e929 [ 373.655525][T16531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.655539][T16531] RSP: 002b:00007f4539bbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 373.655573][T16531] RAX: ffffffffffffffda RBX: 00007f4538fb5fa0 RCX: 00007f4538d8e929 [ 373.655587][T16531] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 373.655601][T16531] RBP: 00007f4539bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 373.655612][T16531] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 373.655624][T16531] R13: 0000000000000000 R14: 00007f4538fb5fa0 R15: 00007ffc8244bb88 [ 373.655653][T16531] [ 374.268376][T16542] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 374.347275][T16534] bond0: (slave wlan1): Releasing backup interface [ 374.511495][T16558] macsec3: entered allmulticast mode [ 374.528152][T16558] bond0: entered allmulticast mode [ 374.673356][T16565] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 374.709696][T16565] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 374.909420][T16580] FAULT_INJECTION: forcing a failure. [ 374.909420][T16580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.921036][T16578] xt_connbytes: Forcing CT accounting to be enabled [ 374.922992][T16580] CPU: 0 UID: 0 PID: 16580 Comm: syz.0.3775 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 374.923032][T16580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 374.923046][T16580] Call Trace: [ 374.923058][T16580] [ 374.923068][T16580] dump_stack_lvl+0x189/0x250 [ 374.923101][T16580] ? __pfx____ratelimit+0x10/0x10 [ 374.923134][T16580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.923162][T16580] ? __pfx__printk+0x10/0x10 [ 374.923195][T16580] ? __might_fault+0xb0/0x130 [ 374.923236][T16580] should_fail_ex+0x414/0x560 [ 374.923276][T16580] _copy_from_user+0x2d/0xb0 [ 374.923304][T16580] __sys_bpf+0x1ed/0x860 [ 374.923342][T16580] ? __pfx___sys_bpf+0x10/0x10 [ 374.923393][T16580] ? ksys_write+0x22a/0x250 [ 374.923422][T16580] ? __pfx_ksys_write+0x10/0x10 [ 374.923446][T16580] ? rcu_is_watching+0x15/0xb0 [ 374.923483][T16580] __x64_sys_bpf+0x7c/0x90 [ 374.923516][T16580] do_syscall_64+0xfa/0x3b0 [ 374.923547][T16580] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.923576][T16580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.923600][T16580] ? clear_bhb_loop+0x60/0xb0 [ 374.923628][T16580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.923651][T16580] RIP: 0033:0x7efe5658e929 [ 374.923672][T16580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.923693][T16580] RSP: 002b:00007efe574af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.923717][T16580] RAX: ffffffffffffffda RBX: 00007efe567b5fa0 RCX: 00007efe5658e929 [ 374.923735][T16580] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 374.923751][T16580] RBP: 00007efe574af090 R08: 0000000000000000 R09: 0000000000000000 [ 374.923764][T16580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.923780][T16580] R13: 0000000000000000 R14: 00007efe567b5fa0 R15: 00007fff4a3a8b18 [ 374.923816][T16580] [ 374.933800][T16581] __nla_validate_parse: 11 callbacks suppressed [ 374.933822][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3769'. [ 375.103528][T16584] FAULT_INJECTION: forcing a failure. [ 375.103528][T16584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.117953][T16578] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 375.165006][T16584] CPU: 1 UID: 0 PID: 16584 Comm: syz.1.3776 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 375.165038][T16584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.165053][T16584] Call Trace: [ 375.165062][T16584] [ 375.165072][T16584] dump_stack_lvl+0x189/0x250 [ 375.165104][T16584] ? __pfx____ratelimit+0x10/0x10 [ 375.165134][T16584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.165160][T16584] ? __pfx__printk+0x10/0x10 [ 375.165188][T16584] ? __might_fault+0xb0/0x130 [ 375.165228][T16584] should_fail_ex+0x414/0x560 [ 375.165265][T16584] _copy_from_iter+0x1db/0x16f0 [ 375.165291][T16584] ? rcu_is_watching+0x15/0xb0 [ 375.165319][T16584] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 375.165348][T16584] ? __pfx__copy_from_iter+0x10/0x10 [ 375.165372][T16584] ? __build_skb_around+0x257/0x3e0 [ 375.165407][T16584] ? netlink_sendmsg+0x642/0xb30 [ 375.165436][T16584] ? skb_put+0x11b/0x210 [ 375.165470][T16584] netlink_sendmsg+0x6b2/0xb30 [ 375.165511][T16584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.165544][T16584] ? aa_sock_msg_perm+0x94/0x160 [ 375.165578][T16584] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.165614][T16584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.165645][T16584] __sock_sendmsg+0x219/0x270 [ 375.165677][T16584] ____sys_sendmsg+0x505/0x830 [ 375.165715][T16584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.165769][T16584] ? import_iovec+0x74/0xa0 [ 375.165798][T16584] ___sys_sendmsg+0x21f/0x2a0 [ 375.165822][T16584] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.165885][T16584] ? __fget_files+0x2a/0x420 [ 375.165913][T16584] ? __fget_files+0x3a0/0x420 [ 375.165952][T16584] __x64_sys_sendmsg+0x19b/0x260 [ 375.165976][T16584] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.166009][T16584] ? __pfx_ksys_write+0x10/0x10 [ 375.166030][T16584] ? rcu_is_watching+0x15/0xb0 [ 375.166061][T16584] ? do_syscall_64+0xbe/0x3b0 [ 375.166095][T16584] do_syscall_64+0xfa/0x3b0 [ 375.166123][T16584] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.166150][T16584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.166171][T16584] ? clear_bhb_loop+0x60/0xb0 [ 375.166198][T16584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.166218][T16584] RIP: 0033:0x7fe20f58e929 [ 375.166238][T16584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.166256][T16584] RSP: 002b:00007fe210392038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.166278][T16584] RAX: ffffffffffffffda RBX: 00007fe20f7b6080 RCX: 00007fe20f58e929 [ 375.166295][T16584] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 375.166309][T16584] RBP: 00007fe210392090 R08: 0000000000000000 R09: 0000000000000000 [ 375.166323][T16584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.166335][T16584] R13: 0000000000000000 R14: 00007fe20f7b6080 R15: 00007ffd2bcb6d78 [ 375.166369][T16584] [ 375.610665][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'. [ 375.628514][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3782'. [ 375.639325][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'. [ 375.648967][T16597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3781'. [ 375.711204][T16603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3784'. [ 375.871377][T16608] syzkaller0 speed is unknown, defaulting to 1000 [ 375.887450][T16611] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3787'. [ 375.913773][T16611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3787'. [ 375.929902][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3787'. [ 375.973638][T16617] FAULT_INJECTION: forcing a failure. [ 375.973638][T16617] name failslab, interval 1, probability 0, space 0, times 0 [ 375.992825][T16617] CPU: 1 UID: 0 PID: 16617 Comm: syz.2.3786 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 375.992850][T16617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.992861][T16617] Call Trace: [ 375.992869][T16617] [ 375.992877][T16617] dump_stack_lvl+0x189/0x250 [ 375.992901][T16617] ? __pfx____ratelimit+0x10/0x10 [ 375.992924][T16617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.992946][T16617] ? __pfx__printk+0x10/0x10 [ 375.992974][T16617] ? __pfx___might_resched+0x10/0x10 [ 375.992993][T16617] ? fs_reclaim_acquire+0x7d/0x100 [ 375.993023][T16617] should_fail_ex+0x414/0x560 [ 375.993052][T16617] ? __pfx_sock_alloc_inode+0x10/0x10 [ 375.993073][T16617] should_failslab+0xa8/0x100 [ 375.993097][T16617] ? __pfx_sock_alloc_inode+0x10/0x10 [ 375.993116][T16617] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 375.993137][T16617] ? sock_alloc_inode+0x28/0xc0 [ 375.993161][T16617] ? __pfx_sock_alloc_inode+0x10/0x10 [ 375.993181][T16617] sock_alloc_inode+0x28/0xc0 [ 375.993201][T16617] alloc_inode+0x67/0x1b0 [ 375.993225][T16617] __sock_create+0x12d/0x9f0 [ 375.993247][T16617] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 375.993272][T16617] mptcp_subflow_create_socket+0xfd/0xb40 [ 375.993301][T16617] ? snprintf+0xda/0x120 [ 375.993326][T16617] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 375.993355][T16617] ? aa_label_sk_perm+0x413/0x560 [ 375.993385][T16617] __mptcp_nmpc_sk+0x150/0x720 [ 375.993406][T16617] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 375.993427][T16617] ? look_up_lock_class+0x74/0x170 [ 375.993456][T16617] mptcp_connect+0x70/0xc10 [ 375.993485][T16617] __inet_stream_connect+0x295/0xf10 [ 375.993517][T16617] ? __local_bh_enable_ip+0x12d/0x1c0 [ 375.993537][T16617] ? __pfx___inet_stream_connect+0x10/0x10 [ 375.993559][T16617] ? __local_bh_enable_ip+0x12d/0x1c0 [ 375.993578][T16617] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 375.993610][T16617] inet_stream_connect+0x66/0xa0 [ 375.993634][T16617] __sys_connect+0x313/0x440 [ 375.993658][T16617] ? __fget_files+0x3a0/0x420 [ 375.993687][T16617] ? __pfx___sys_connect+0x10/0x10 [ 375.993724][T16617] ? __pfx_ksys_write+0x10/0x10 [ 375.993753][T16617] __x64_sys_connect+0x7a/0x90 [ 375.993780][T16617] do_syscall_64+0xfa/0x3b0 [ 375.993804][T16617] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.993827][T16617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.993845][T16617] ? clear_bhb_loop+0x60/0xb0 [ 375.993867][T16617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.993885][T16617] RIP: 0033:0x7f4538d8e929 [ 375.993901][T16617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.993917][T16617] RSP: 002b:00007f4539b7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 375.993936][T16617] RAX: ffffffffffffffda RBX: 00007f4538fb6160 RCX: 00007f4538d8e929 [ 375.993949][T16617] RDX: 0000000000000010 RSI: 00002000000009c0 RDI: 0000000000000003 [ 375.993961][T16617] RBP: 00007f4539b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 375.993972][T16617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.993982][T16617] R13: 0000000000000001 R14: 00007f4538fb6160 R15: 00007ffc8244bb88 [ 375.994012][T16617] [ 375.994022][T16617] socket: no more sockets [ 376.352897][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'. [ 376.961481][ T30] audit: type=1107 audit(1752306990.661:19): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 377.533467][T16681] validate_nla: 26 callbacks suppressed [ 377.533487][T16681] netlink: 'syz.1.3809': attribute type 1 has an invalid length. [ 377.557374][T16678] syzkaller0 speed is unknown, defaulting to 1000 [ 377.582039][T16684] netlink: 'syz.3.3810': attribute type 13 has an invalid length. [ 377.652364][T16684] gretap0: refused to change device tx_queue_len [ 377.659363][T16684] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 377.808799][T16691] netlink: 'syz.4.3812': attribute type 10 has an invalid length. [ 377.868886][T16691] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 377.923703][T16697] bond_slave_0: entered promiscuous mode [ 377.929451][T16697] bond_slave_1: entered promiscuous mode [ 377.945591][T16698] Bluetooth: MGMT ver 1.23 [ 377.955884][T16697] macsec3: entered allmulticast mode [ 377.965916][T16697] bond0: entered allmulticast mode [ 377.985352][T16697] bond_slave_0: entered allmulticast mode [ 378.002031][T16697] bond_slave_1: entered allmulticast mode [ 378.391918][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.733980][ T30] audit: type=1107 audit(1752306992.431:20): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 379.319769][T16755] syz_tun: entered promiscuous mode [ 379.374754][T16755] syz_tun: left promiscuous mode [ 379.558421][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.586139][T16766] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.808433][T16774] pim6reg: left allmulticast mode [ 380.059505][T16784] tipc: Enabling of bearer rejected, already enabled [ 380.198822][T16789] netlink: 'syz.2.3839': attribute type 10 has an invalid length. [ 380.231223][T16789] __nla_validate_parse: 14 callbacks suppressed [ 380.231244][T16789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3839'. [ 380.264627][T16780] tipc: Resetting bearer [ 380.283984][T16789] dummy0: entered allmulticast mode [ 380.290929][T16789] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 380.639632][T16796] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3841'. [ 380.676845][T16796] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3841'. [ 380.845992][T16800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3842'. [ 381.044521][T16808] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 381.103752][T16811] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3846'. [ 381.850840][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3855'. [ 381.964071][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3855'. [ 381.973334][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3855'. [ 382.072475][T16841] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3857'. [ 382.123819][T16841] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3857'. [ 382.145228][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.156500][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.171704][ T36] erspan0 (unregistering): left promiscuous mode [ 382.179434][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.188364][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.202756][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.244523][ T36] gretap0 (unregistering): left promiscuous mode [ 382.597469][ T36] bond0 (unregistering): Released all slaves [ 382.696680][T16831] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.929387][T16831] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.093926][T16831] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.134604][T16845] syzkaller0 speed is unknown, defaulting to 1000 [ 383.358049][T16831] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.643349][T16864] syzkaller0 speed is unknown, defaulting to 1000 [ 383.657492][ T6808] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.702288][ T3449] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.761767][ T3449] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.801180][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.119783][T16845] chnl_net:caif_netlink_parms(): no params data found [ 384.296288][ T5849] Bluetooth: hci1: command tx timeout [ 384.411087][T16876] syzkaller0 speed is unknown, defaulting to 1000 [ 384.417977][T16845] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.429609][T16845] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.436947][T16845] bridge_slave_0: entered allmulticast mode [ 384.444614][T16845] bridge_slave_0: entered promiscuous mode [ 384.468958][T16894] veth0: entered promiscuous mode [ 384.478922][T16894] veth0: left promiscuous mode [ 384.525603][T16845] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.546376][T16845] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.553573][T16845] bridge_slave_1: entered allmulticast mode [ 384.567868][T16845] bridge_slave_1: entered promiscuous mode [ 384.681953][T16845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.699416][T16845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.900206][T16845] team0: Port device team_slave_0 added [ 385.065824][T16845] team0: Port device team_slave_1 added [ 385.233777][ T36] batadv_slave_1: left promiscuous mode [ 385.243769][ T36] hsr_slave_0: left promiscuous mode [ 385.263289][ T36] hsr_slave_1: left promiscuous mode [ 385.510931][T16914] netlink: 'syz.3.3875': attribute type 6 has an invalid length. [ 385.560731][T16912] netlink: 'syz.3.3875': attribute type 6 has an invalid length. [ 386.061034][T16845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.078171][T16845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.114125][T16920] __nla_validate_parse: 8 callbacks suppressed [ 386.114141][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3877'. [ 386.120238][T16845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.149794][T16845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.162735][T16845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.196016][T16845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.375868][ T5849] Bluetooth: hci1: command tx timeout [ 386.392378][T16845] hsr_slave_0: entered promiscuous mode [ 386.420935][T16845] hsr_slave_1: entered promiscuous mode [ 386.462534][T16845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.484031][T16845] Cannot create hsr debugfs directory [ 386.545816][T16934] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.678332][T16934] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.815245][T16934] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.868797][ T36] IPVS: stop unused estimator thread 0... [ 386.890541][T16934] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.974860][T16942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3883'. [ 386.998240][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'. [ 387.007342][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'. [ 387.135876][ T36] ip6gretap0 (unregistering): left allmulticast mode [ 387.336574][ T30] audit: type=1107 audit(1752307001.031:21): pid=16948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 387.394148][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3886'. [ 387.427819][ T36] dvmrp8 (unregistering): left allmulticast mode [ 387.694262][ T36] bond4 (unregistering): (slave bridge4): Releasing active interface [ 387.812675][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 387.828255][ T36] bond0 (unregistering): Released all slaves [ 387.918725][ T36] bond1 (unregistering): Released all slaves [ 388.042821][ T36] bond2 (unregistering): Released all slaves [ 388.143601][ T36] bond3 (unregistering): Released all slaves [ 388.236244][ T36] bond4 (unregistering): Released all slaves [ 388.262880][T16945] vlan2: entered promiscuous mode [ 388.272773][T16945] gretap0: entered promiscuous mode [ 388.333405][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3886'. [ 388.347461][ T36] : left promiscuous mode [ 388.455777][ T5849] Bluetooth: hci1: command tx timeout [ 388.462624][ T36] tipc: Disabling bearer [ 388.483734][ T36] tipc: Left network mode [ 388.542071][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.614949][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.684878][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.749314][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3893'. [ 388.789056][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.943809][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3895'. [ 389.075977][T16845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 389.093124][T16845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 389.161696][T16845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 389.187343][T16845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 389.227678][T16992] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3900'. [ 389.238820][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3900'. [ 389.259206][T16992] netlink: 'syz.1.3900': attribute type 2 has an invalid length. [ 389.624317][T16845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.682261][T16845] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.710446][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.717750][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.750792][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.757967][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.025411][ T36] dummy0: left promiscuous mode [ 390.051181][ T36] hsr_slave_0: left promiscuous mode [ 390.145472][ T36] pim6reg (unregistering): left allmulticast mode [ 390.536095][ T5849] Bluetooth: hci1: command tx timeout [ 390.740304][T17017] vlan2: entered promiscuous mode [ 390.984863][T17031] FAULT_INJECTION: forcing a failure. [ 390.984863][T17031] name failslab, interval 1, probability 0, space 0, times 0 [ 391.018828][T17031] CPU: 1 UID: 0 PID: 17031 Comm: syz.4.3912 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 391.018856][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.018867][T17031] Call Trace: [ 391.018875][T17031] [ 391.018883][T17031] dump_stack_lvl+0x189/0x250 [ 391.018910][T17031] ? __pfx____ratelimit+0x10/0x10 [ 391.018935][T17031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.018956][T17031] ? __pfx__printk+0x10/0x10 [ 391.018984][T17031] ? __pfx___might_resched+0x10/0x10 [ 391.019005][T17031] ? fs_reclaim_acquire+0x7d/0x100 [ 391.019035][T17031] should_fail_ex+0x414/0x560 [ 391.019065][T17031] should_failslab+0xa8/0x100 [ 391.019089][T17031] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 391.019110][T17031] ? __alloc_skb+0x112/0x2d0 [ 391.019140][T17031] __alloc_skb+0x112/0x2d0 [ 391.019187][T17031] alloc_skb_with_frags+0xca/0x890 [ 391.019223][T17031] ? __lock_acquire+0xab9/0xd20 [ 391.019247][T17031] sock_alloc_send_pskb+0x857/0x990 [ 391.019286][T17031] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 391.019318][T17031] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 391.019351][T17031] unix_dgram_sendmsg+0x4f6/0x1870 [ 391.019432][T17031] ? aa_sk_perm+0x81e/0x950 [ 391.019467][T17031] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 391.019507][T17031] ? aa_sock_msg_perm+0x94/0x160 [ 391.019539][T17031] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 391.019559][T17031] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 391.019581][T17031] __sock_sendmsg+0x219/0x270 [ 391.019610][T17031] ____sys_sendmsg+0x52d/0x830 [ 391.019659][T17031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.019703][T17031] ? import_iovec+0x74/0xa0 [ 391.019731][T17031] ___sys_sendmsg+0x21f/0x2a0 [ 391.019754][T17031] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.019821][T17031] ? __might_fault+0xb0/0x130 [ 391.019854][T17031] __sys_sendmmsg+0x227/0x430 [ 391.019881][T17031] ? __pfx___sys_sendmmsg+0x10/0x10 [ 391.019898][T17031] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 391.019959][T17031] ? ksys_write+0x22a/0x250 [ 391.019985][T17031] ? __pfx_ksys_write+0x10/0x10 [ 391.020017][T17031] __x64_sys_sendmmsg+0xa0/0xc0 [ 391.020039][T17031] do_syscall_64+0xfa/0x3b0 [ 391.020067][T17031] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.020093][T17031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.020114][T17031] ? clear_bhb_loop+0x60/0xb0 [ 391.020140][T17031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.020160][T17031] RIP: 0033:0x7f64fa58e929 [ 391.020179][T17031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.020198][T17031] RSP: 002b:00007f64fb3fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 391.020231][T17031] RAX: ffffffffffffffda RBX: 00007f64fa7b5fa0 RCX: 00007f64fa58e929 [ 391.020246][T17031] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 391.020261][T17031] RBP: 00007f64fb3fa090 R08: 0000000000000000 R09: 0000000000000000 [ 391.020274][T17031] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 391.020287][T17031] R13: 0000000000000000 R14: 00007f64fa7b5fa0 R15: 00007ffe6a5f1c48 [ 391.020319][T17031] [ 391.368634][T16845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.400847][T17038] __nla_validate_parse: 4 callbacks suppressed [ 391.400866][T17038] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3916'. [ 391.505933][T17040] vlan0: entered promiscuous mode [ 391.511088][T17040] team0: entered promiscuous mode [ 391.572780][T16845] veth0_vlan: entered promiscuous mode [ 391.597121][ T36] IPVS: stop unused estimator thread 0... [ 391.771420][T16845] veth1_vlan: entered promiscuous mode [ 391.782948][T17058] netem: change failed [ 391.857527][T16845] veth0_macvtap: entered promiscuous mode [ 391.894151][T16845] veth1_macvtap: entered promiscuous mode [ 392.003374][T16845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.052611][T16845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.073406][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.116484][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.149300][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.174385][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.223156][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.252773][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.307255][ T3449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.324842][ T3449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.481770][T17079] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3927'. [ 393.050611][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3935'. [ 393.053721][T17098] netlink: 'syz.2.3936': attribute type 10 has an invalid length. [ 393.065842][T17096] openvswitch: netlink: Unknown nsh attribute 0 [ 393.085725][T17096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.104641][T17102] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3938'. [ 393.184119][T17106] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3941'. [ 393.361616][T17114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3942'. [ 393.376622][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.400141][T17114] pim6reg: entered allmulticast mode [ 393.412449][T17114] pim6reg: left allmulticast mode [ 393.488003][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.682947][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.892177][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.166461][T17139] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3952'. [ 394.261964][ T13] bridge_slave_1: left allmulticast mode [ 394.287472][ T13] bridge_slave_1: left promiscuous mode [ 394.294187][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.304667][T17142] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3953'. [ 394.347776][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.359222][ T13] bridge_slave_0: left allmulticast mode [ 394.364967][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.372833][ T13] bridge_slave_0: left promiscuous mode [ 394.378699][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.387178][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.396112][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.433604][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.653619][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3956'. [ 394.701582][T17157] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3959'. [ 394.887955][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.898921][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.910796][ T13] bond0 (unregistering): Released all slaves [ 394.943124][T17152] pim6reg: entered allmulticast mode [ 394.953057][T17155] pim6reg: left allmulticast mode [ 395.034269][T17162] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 395.060411][T17164] bond0: (slave wlan1): Releasing backup interface [ 395.174506][T17145] syzkaller0 speed is unknown, defaulting to 1000 [ 395.294235][T17179] syz_tun: entered promiscuous mode [ 395.303704][T17179] syz_tun: left promiscuous mode [ 395.974800][ T13] hsr_slave_0: left promiscuous mode [ 395.988198][ T13] hsr_slave_1: left promiscuous mode [ 395.994127][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.004977][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.014856][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.022614][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.053272][ T13] veth1_macvtap: left promiscuous mode [ 396.059310][ T13] veth0_macvtap: left promiscuous mode [ 396.065023][ T13] veth1_vlan: left promiscuous mode [ 396.070783][ T13] veth0_vlan: left promiscuous mode [ 396.458196][ T5861] Bluetooth: hci1: command tx timeout [ 396.553774][T17213] __nla_validate_parse: 3 callbacks suppressed [ 396.553786][T17213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3978'. [ 396.586703][ T13] team0 (unregistering): Port device team_slave_1 removed [ 396.633234][ T13] team0 (unregistering): Port device team_slave_0 removed [ 396.681427][T17216] netlink: 'syz.1.3979': attribute type 10 has an invalid length. [ 396.690419][T17216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3979'. [ 397.029797][T17213] pim6reg: entered allmulticast mode [ 397.035303][T17214] pim6reg: left allmulticast mode [ 397.084446][T17216] dummy0: entered promiscuous mode [ 397.095910][T17216] dummy0: entered allmulticast mode [ 397.103653][T17216] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 397.292414][T17224] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3981'. [ 397.310006][T17223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'. [ 397.319057][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3983'. [ 397.342151][T17223] netlink: 'syz.1.3983': attribute type 1 has an invalid length. [ 397.388334][T17223] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3983'. [ 397.495207][T17145] chnl_net:caif_netlink_parms(): no params data found [ 397.682692][T17240] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3987'. [ 397.809589][T17247] wg2: entered promiscuous mode [ 397.848307][T17145] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.863693][T17145] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.871122][T17145] bridge_slave_0: entered allmulticast mode [ 397.883431][T17145] bridge_slave_0: entered promiscuous mode [ 397.908994][T17145] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.926874][T17145] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.935268][T17145] bridge_slave_1: entered allmulticast mode [ 397.947381][T17145] bridge_slave_1: entered promiscuous mode [ 398.058630][T17145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.078219][T17145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.142128][T17145] team0: Port device team_slave_0 added [ 398.163173][T17145] team0: Port device team_slave_1 added [ 398.226334][T17271] FAULT_INJECTION: forcing a failure. [ 398.226334][T17271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.247394][T17271] CPU: 0 UID: 0 PID: 17271 Comm: syz.2.3999 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 398.247420][T17271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 398.247432][T17271] Call Trace: [ 398.247439][T17271] [ 398.247448][T17271] dump_stack_lvl+0x189/0x250 [ 398.247474][T17271] ? __pfx____ratelimit+0x10/0x10 [ 398.247499][T17271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.247521][T17271] ? __pfx__printk+0x10/0x10 [ 398.247545][T17271] ? __might_fault+0xb0/0x130 [ 398.247578][T17271] should_fail_ex+0x414/0x560 [ 398.247627][T17271] _copy_from_user+0x2d/0xb0 [ 398.247651][T17271] ___sys_sendmsg+0x158/0x2a0 [ 398.247672][T17271] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.247738][T17271] ? __fget_files+0x2a/0x420 [ 398.247768][T17271] ? __fget_files+0x3a0/0x420 [ 398.247802][T17271] __x64_sys_sendmsg+0x19b/0x260 [ 398.247822][T17271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.247866][T17271] ? __pfx_ksys_write+0x10/0x10 [ 398.247886][T17271] ? rcu_is_watching+0x15/0xb0 [ 398.247914][T17271] ? do_syscall_64+0xbe/0x3b0 [ 398.247944][T17271] do_syscall_64+0xfa/0x3b0 [ 398.247978][T17271] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.248000][T17271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.248019][T17271] ? clear_bhb_loop+0x60/0xb0 [ 398.248042][T17271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.248059][T17271] RIP: 0033:0x7f4538d8e929 [ 398.248074][T17271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.248090][T17271] RSP: 002b:00007f4539bbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.248108][T17271] RAX: ffffffffffffffda RBX: 00007f4538fb5fa0 RCX: 00007f4538d8e929 [ 398.248122][T17271] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 398.248133][T17271] RBP: 00007f4539bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 398.248145][T17271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.248155][T17271] R13: 0000000000000000 R14: 00007f4538fb5fa0 R15: 00007ffc8244bb88 [ 398.248184][T17271] [ 398.475397][T17145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.489951][T17145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.536290][ T5861] Bluetooth: hci1: command tx timeout [ 398.608451][T17145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.646310][T17145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.653286][T17145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.720280][T17145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.917878][T17287] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4003'. [ 398.950783][T17145] hsr_slave_0: entered promiscuous mode [ 398.994068][T17145] hsr_slave_1: entered promiscuous mode [ 399.030265][T17145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.055804][T17145] Cannot create hsr debugfs directory [ 399.351813][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4010'. [ 399.449338][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4012'. [ 399.491037][T17310] veth0: entered promiscuous mode [ 399.517781][T17310] veth0: left promiscuous mode [ 399.602968][T17314] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 399.853343][T17326] macsec2: entered allmulticast mode [ 399.886012][T17326] team0: entered allmulticast mode [ 399.891231][T17326] team_slave_1: entered allmulticast mode [ 399.918850][T17326] team0: left allmulticast mode [ 399.924001][T17326] team_slave_1: left allmulticast mode [ 400.280939][T17340] netlink: 'syz.4.4023': attribute type 2 has an invalid length. [ 400.322268][T17342] macsec2: entered allmulticast mode [ 400.327992][T17342] bond0: entered allmulticast mode [ 400.333249][T17342] bond_slave_0: entered allmulticast mode [ 400.339170][T17342] bond_slave_1: entered allmulticast mode [ 400.347676][T17342] bond0: left allmulticast mode [ 400.352667][T17342] bond_slave_0: left allmulticast mode [ 400.358308][T17342] bond_slave_1: left allmulticast mode [ 400.417602][T17145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 400.429821][T17145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 400.443296][T17145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 400.480089][T17145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 400.616047][ T5861] Bluetooth: hci1: command tx timeout [ 400.737098][T17145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.747569][T17367] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 400.791126][T17367] bridge_slave_0: left allmulticast mode [ 400.803880][T17367] bridge_slave_0: left promiscuous mode [ 400.815637][T17367] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.838212][T17367] bridge_slave_1: left allmulticast mode [ 400.844628][T17367] bridge_slave_1: left promiscuous mode [ 400.852590][T17367] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.865284][T17367] bond0: (slave bond_slave_0): Releasing backup interface [ 400.874764][T17367] bond_slave_0: left allmulticast mode [ 400.880704][T17367] bond_slave_0: left promiscuous mode [ 400.891940][T17367] bond0: (slave bond_slave_1): Releasing backup interface [ 400.900887][T17367] bond_slave_1: left allmulticast mode [ 400.906591][T17367] bond_slave_1: left promiscuous mode [ 400.915098][T17367] team_slave_0: left allmulticast mode [ 400.932974][T17367] team_slave_0: left promiscuous mode [ 400.942702][T17367] team0: Port device team_slave_0 removed [ 400.951370][T17367] team_slave_1: left allmulticast mode [ 400.966951][T17367] team_slave_1: left promiscuous mode [ 400.978947][T17367] team0: Port device team_slave_1 removed [ 400.992065][T17367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.021265][T17367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.036441][T17367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.044067][T17367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.080674][T17145] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.103525][T17371] pim6reg: entered allmulticast mode [ 401.131285][T17375] pim6reg: left allmulticast mode [ 401.205149][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.212330][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.304672][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.311910][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.351686][T17389] macsec4: entered allmulticast mode [ 401.397825][T17391] 8021q: VLANs not supported on bond0 [ 401.558319][T17398] __nla_validate_parse: 10 callbacks suppressed [ 401.558337][T17398] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4044'. [ 401.623537][T17402] netlink: 'syz.1.4046': attribute type 10 has an invalid length. [ 401.652691][T17402] dummy0: left promiscuous mode [ 401.665099][T17402] dummy0: left allmulticast mode [ 401.711779][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4047'. [ 401.751803][T17411] FAULT_INJECTION: forcing a failure. [ 401.751803][T17411] name failslab, interval 1, probability 0, space 0, times 0 [ 401.775965][T17411] CPU: 0 UID: 0 PID: 17411 Comm: syz.3.4049 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 401.775990][T17411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 401.776002][T17411] Call Trace: [ 401.776010][T17411] [ 401.776017][T17411] dump_stack_lvl+0x189/0x250 [ 401.776045][T17411] ? __pfx____ratelimit+0x10/0x10 [ 401.776069][T17411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.776090][T17411] ? __pfx__printk+0x10/0x10 [ 401.776122][T17411] ? __pfx___might_resched+0x10/0x10 [ 401.776149][T17411] should_fail_ex+0x414/0x560 [ 401.776180][T17411] should_failslab+0xa8/0x100 [ 401.776205][T17411] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 401.776228][T17411] ? xfrm_do_migrate+0x667/0x900 [ 401.776261][T17411] kmemdup_noprof+0x2b/0x70 [ 401.776289][T17411] xfrm_do_migrate+0x667/0x900 [ 401.776313][T17411] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 401.776331][T17411] ? __netlink_deliver_tap+0x5ad/0x850 [ 401.776364][T17411] ? __pfx_xfrm_do_migrate+0x10/0x10 [ 401.776437][T17411] ? rcu_is_watching+0x15/0xb0 [ 401.776497][T17411] ? __nla_parse+0x40/0x60 [ 401.776522][T17411] xfrm_user_rcv_msg+0x7a3/0xab0 [ 401.776555][T17411] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 401.776618][T17411] ? __mutex_trylock_common+0x153/0x260 [ 401.776647][T17411] ? __pfx___mutex_trylock_common+0x10/0x10 [ 401.776677][T17411] ? rcu_is_watching+0x15/0xb0 [ 401.776700][T17411] ? trace_contention_end+0x39/0x120 [ 401.776733][T17411] netlink_rcv_skb+0x205/0x470 [ 401.776760][T17411] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 401.776789][T17411] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.776833][T17411] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.776859][T17411] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.776888][T17411] xfrm_netlink_rcv+0x79/0x90 [ 401.776915][T17411] netlink_unicast+0x75c/0x8e0 [ 401.776951][T17411] netlink_sendmsg+0x805/0xb30 [ 401.776988][T17411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.777019][T17411] ? aa_sock_msg_perm+0x94/0x160 [ 401.777049][T17411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.777076][T17411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.777105][T17411] __sock_sendmsg+0x219/0x270 [ 401.777131][T17411] ____sys_sendmsg+0x505/0x830 [ 401.777167][T17411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.777207][T17411] ? import_iovec+0x74/0xa0 [ 401.777233][T17411] ___sys_sendmsg+0x21f/0x2a0 [ 401.777254][T17411] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.777312][T17411] ? __fget_files+0x2a/0x420 [ 401.777335][T17411] ? __fget_files+0x3a0/0x420 [ 401.777372][T17411] __x64_sys_sendmsg+0x19b/0x260 [ 401.777393][T17411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.777423][T17411] ? __pfx_ksys_write+0x10/0x10 [ 401.777442][T17411] ? rcu_is_watching+0x15/0xb0 [ 401.777495][T17411] ? do_syscall_64+0xbe/0x3b0 [ 401.777528][T17411] do_syscall_64+0xfa/0x3b0 [ 401.777554][T17411] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.777579][T17411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.777600][T17411] ? clear_bhb_loop+0x60/0xb0 [ 401.777626][T17411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.777645][T17411] RIP: 0033:0x7fe20898e929 [ 401.777664][T17411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.777681][T17411] RSP: 002b:00007fe209761038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.777702][T17411] RAX: ffffffffffffffda RBX: 00007fe208bb5fa0 RCX: 00007fe20898e929 [ 401.777717][T17411] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 401.777731][T17411] RBP: 00007fe209761090 R08: 0000000000000000 R09: 0000000000000000 [ 401.777754][T17411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.777764][T17411] R13: 0000000000000000 R14: 00007fe208bb5fa0 R15: 00007ffe64399cb8 [ 401.777794][T17411] [ 402.213905][T17416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4051'. [ 402.231795][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4047'. [ 402.240843][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4047'. [ 402.262080][T17145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.342240][T17145] veth0_vlan: entered promiscuous mode [ 402.354245][T17145] veth1_vlan: entered promiscuous mode [ 402.405278][T17145] veth0_macvtap: entered promiscuous mode [ 402.412314][T17419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4053'. [ 402.417536][T17145] veth1_macvtap: entered promiscuous mode [ 402.440218][T17145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.454515][T17145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.466905][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.519771][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.553417][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.575773][ T6808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.614276][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4055'. [ 402.677564][T17431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4056'. [ 402.696288][ T5861] Bluetooth: hci1: command tx timeout [ 402.715127][T17431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4056'. [ 402.826171][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.843251][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.902586][T17440] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4059'. [ 402.921191][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.949801][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.060306][T17448] vlan2: entered promiscuous mode [ 403.094889][T17450] FAULT_INJECTION: forcing a failure. [ 403.094889][T17450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.110459][T17450] CPU: 0 UID: 0 PID: 17450 Comm: syz.4.4063 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 403.110488][T17450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.110501][T17450] Call Trace: [ 403.110510][T17450] [ 403.110519][T17450] dump_stack_lvl+0x189/0x250 [ 403.110549][T17450] ? __pfx____ratelimit+0x10/0x10 [ 403.110577][T17450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.110602][T17450] ? __pfx__printk+0x10/0x10 [ 403.110648][T17450] should_fail_ex+0x414/0x560 [ 403.110694][T17450] _copy_to_user+0x31/0xb0 [ 403.110719][T17450] simple_read_from_buffer+0xe1/0x170 [ 403.110749][T17450] proc_fail_nth_read+0x1df/0x250 [ 403.110778][T17450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.110809][T17450] ? rw_verify_area+0x258/0x650 [ 403.110830][T17450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.110858][T17450] vfs_read+0x200/0x980 [ 403.110884][T17450] ? __pfx___mutex_lock+0x10/0x10 [ 403.110911][T17450] ? __pfx_vfs_read+0x10/0x10 [ 403.110934][T17450] ? __fget_files+0x2a/0x420 [ 403.110982][T17450] ? __fget_files+0x3a0/0x420 [ 403.111008][T17450] ? __fget_files+0x2a/0x420 [ 403.111046][T17450] ksys_read+0x145/0x250 [ 403.111072][T17450] ? __pfx_ksys_read+0x10/0x10 [ 403.111093][T17450] ? rcu_is_watching+0x15/0xb0 [ 403.111124][T17450] ? do_syscall_64+0xbe/0x3b0 [ 403.111158][T17450] do_syscall_64+0xfa/0x3b0 [ 403.111185][T17450] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.111211][T17450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.111233][T17450] ? clear_bhb_loop+0x60/0xb0 [ 403.111259][T17450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.111280][T17450] RIP: 0033:0x7f64fa58d33c [ 403.111299][T17450] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 403.111317][T17450] RSP: 002b:00007f64fb3fa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 403.111339][T17450] RAX: ffffffffffffffda RBX: 00007f64fa7b5fa0 RCX: 00007f64fa58d33c [ 403.111360][T17450] RDX: 000000000000000f RSI: 00007f64fb3fa0a0 RDI: 0000000000000003 [ 403.111374][T17450] RBP: 00007f64fb3fa090 R08: 0000000000000000 R09: 0000000000000000 [ 403.111387][T17450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.111400][T17450] R13: 0000000000000000 R14: 00007f64fa7b5fa0 R15: 00007ffe6a5f1c48 [ 403.111435][T17450] [ 403.542745][T17457] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 403.564844][T17457] bridge_slave_0: left allmulticast mode [ 403.571114][T17457] bridge_slave_0: left promiscuous mode [ 403.580416][T17457] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.608932][T17457] bridge_slave_1: left allmulticast mode [ 403.616105][T17457] bridge_slave_1: left promiscuous mode [ 403.623918][T17457] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.651303][T17457] bond0: (slave bond_slave_0): Releasing backup interface [ 403.665047][T17457] bond0: (slave bond_slave_1): Releasing backup interface [ 403.690637][T17457] team_slave_1: left promiscuous mode [ 403.700342][T17457] team0: Port device team_slave_1 removed [ 403.709711][T17457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.718452][T17457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.745304][T17457] bond1: (slave gretap1): Releasing active interface [ 403.821469][T17463] netlink: 'syz.3.4068': attribute type 3 has an invalid length. [ 404.068858][T17469] netlink: 'syz.3.4071': attribute type 1 has an invalid length. [ 404.170188][ T30] audit: type=1800 audit(1752307017.871:22): pid=17487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4077" name="memory.events" dev="tmpfs" ino=840 res=0 errno=0 [ 404.174812][T17469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.263749][T17474] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 404.274406][T17474] bond1: (slave batadv1): making interface the new active one [ 404.283365][T17474] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 404.441690][T17496] pim6reg: entered allmulticast mode [ 404.453460][T17496] pim6reg: left allmulticast mode [ 404.611204][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.961956][T17510] netlink: 'syz.4.4085': attribute type 4 has an invalid length. [ 405.012081][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.021674][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.034786][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.047071][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.062559][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 405.146664][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.317447][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.394784][T17511] syzkaller0 speed is unknown, defaulting to 1000 [ 405.508057][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.615914][T17536] pim6reg: entered allmulticast mode [ 405.652826][T17544] pim6reg: left allmulticast mode [ 405.945540][ T49] bridge_slave_1: left allmulticast mode [ 405.952195][ T49] bridge_slave_1: left promiscuous mode [ 405.959461][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.971660][ T49] bridge_slave_0: left allmulticast mode [ 405.983363][ T49] bridge_slave_0: left promiscuous mode [ 405.995912][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.057487][ T5861] Bluetooth: hci5: command 0x0406 tx timeout [ 406.145900][T17557] netlink: 'syz.4.4101': attribute type 1 has an invalid length. [ 406.218714][T17557] xt_CT: No such helper "snmp" [ 406.639896][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.656922][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.672683][ T49] bond0 (unregistering): Released all slaves [ 406.914548][T17576] __nla_validate_parse: 17 callbacks suppressed [ 406.914567][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4106'. [ 406.948912][T17580] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4107'. [ 406.995568][T17511] chnl_net:caif_netlink_parms(): no params data found [ 407.061015][T17582] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4109'. [ 407.096255][ T5849] Bluetooth: hci1: command tx timeout [ 407.128605][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4111'. [ 407.148910][T17585] vlan2: entered promiscuous mode [ 407.154032][T17585] team0: entered promiscuous mode [ 407.454341][T17595] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4112'. [ 407.598951][ T49] hsr_slave_0: left promiscuous mode [ 407.604915][ T49] hsr_slave_1: left promiscuous mode [ 407.611228][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.618827][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.628068][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.635528][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.644683][T17597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4113'. [ 407.679554][ T49] veth1_macvtap: left promiscuous mode [ 407.685118][ T49] veth0_macvtap: left promiscuous mode [ 407.695293][ T49] veth1_vlan: left promiscuous mode [ 407.701222][ T49] veth0_vlan: left promiscuous mode [ 407.705312][T17607] FAULT_INJECTION: forcing a failure. [ 407.705312][T17607] name failslab, interval 1, probability 0, space 0, times 0 [ 407.728921][T17607] CPU: 0 UID: 0 PID: 17607 Comm: syz.1.4115 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 407.728951][T17607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 407.728963][T17607] Call Trace: [ 407.728971][T17607] [ 407.728978][T17607] dump_stack_lvl+0x189/0x250 [ 407.729004][T17607] ? __pfx____ratelimit+0x10/0x10 [ 407.729028][T17607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.729050][T17607] ? __pfx__printk+0x10/0x10 [ 407.729080][T17607] ? __pfx___might_resched+0x10/0x10 [ 407.729107][T17607] should_fail_ex+0x414/0x560 [ 407.729136][T17607] should_failslab+0xa8/0x100 [ 407.729161][T17607] kmem_cache_alloc_noprof+0x73/0x3c0 [ 407.729182][T17607] ? sk_prot_alloc+0x57/0x220 [ 407.729214][T17607] sk_prot_alloc+0x57/0x220 [ 407.729238][T17607] ? sk_alloc+0x24/0x370 [ 407.729266][T17607] sk_alloc+0x3a/0x370 [ 407.729296][T17607] inet_create+0x76b/0x1000 [ 407.729320][T17607] ? inet_create+0x97/0x1000 [ 407.729344][T17607] __sock_create+0x4b3/0x9f0 [ 407.729377][T17607] mptcp_subflow_create_socket+0xfd/0xb40 [ 407.729406][T17607] ? snprintf+0xda/0x120 [ 407.729430][T17607] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 407.729458][T17607] ? aa_label_sk_perm+0x413/0x560 [ 407.729489][T17607] __mptcp_nmpc_sk+0x150/0x720 [ 407.729510][T17607] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 407.729530][T17607] ? look_up_lock_class+0x74/0x170 [ 407.729560][T17607] mptcp_connect+0x70/0xc10 [ 407.729589][T17607] __inet_stream_connect+0x295/0xf10 [ 407.729620][T17607] ? __local_bh_enable_ip+0x12d/0x1c0 [ 407.729640][T17607] ? __pfx___inet_stream_connect+0x10/0x10 [ 407.729662][T17607] ? __local_bh_enable_ip+0x12d/0x1c0 [ 407.729682][T17607] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 407.729713][T17607] inet_stream_connect+0x66/0xa0 [ 407.729744][T17607] __sys_connect+0x313/0x440 [ 407.729768][T17607] ? __fget_files+0x3a0/0x420 [ 407.729792][T17607] ? __pfx___sys_connect+0x10/0x10 [ 407.729829][T17607] ? __pfx_ksys_write+0x10/0x10 [ 407.729857][T17607] __x64_sys_connect+0x7a/0x90 [ 407.729883][T17607] do_syscall_64+0xfa/0x3b0 [ 407.729905][T17607] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.729928][T17607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.729950][T17607] ? clear_bhb_loop+0x60/0xb0 [ 407.729972][T17607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.729989][T17607] RIP: 0033:0x7fe20f58e929 [ 407.730006][T17607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.730021][T17607] RSP: 002b:00007fe210371038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 407.730039][T17607] RAX: ffffffffffffffda RBX: 00007fe20f7b6160 RCX: 00007fe20f58e929 [ 407.730053][T17607] RDX: 0000000000000010 RSI: 00002000000009c0 RDI: 0000000000000003 [ 407.730065][T17607] RBP: 00007fe210371090 R08: 0000000000000000 R09: 0000000000000000 [ 407.730076][T17607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.730087][T17607] R13: 0000000000000001 R14: 00007fe20f7b6160 R15: 00007ffd2bcb6d78 [ 407.730116][T17607] [ 408.525005][ T49] team0 (unregistering): Port device team_slave_1 removed [ 408.579460][ T49] team0 (unregistering): Port device team_slave_0 removed [ 408.839915][T17630] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4121'. [ 409.051709][T17511] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.059422][T17511] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.066829][T17511] bridge_slave_0: entered allmulticast mode [ 409.073946][T17511] bridge_slave_0: entered promiscuous mode [ 409.086879][T17597] pim6reg: entered allmulticast mode [ 409.094494][T17511] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.101840][T17511] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.109099][T17511] bridge_slave_1: entered allmulticast mode [ 409.116884][T17511] bridge_slave_1: entered promiscuous mode [ 409.123710][T17604] pim6reg: left allmulticast mode [ 409.176054][ T5849] Bluetooth: hci1: command tx timeout [ 409.332834][T17511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.368063][T17511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.383752][T17639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4125'. [ 409.469355][T17641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4126'. [ 409.506667][T17511] team0: Port device team_slave_0 added [ 409.535721][T17511] team0: Port device team_slave_1 added [ 409.657359][T17511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.678974][T17511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.733934][T17511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.760675][T17511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.775806][T17511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.809180][T17511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.887268][T17662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4133'. [ 409.905429][T17662] netlink: 'syz.1.4133': attribute type 13 has an invalid length. [ 409.921746][T17511] hsr_slave_0: entered promiscuous mode [ 409.929207][T17511] hsr_slave_1: entered promiscuous mode [ 409.935278][T17511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.943446][T17511] Cannot create hsr debugfs directory [ 409.949890][T17662] gretap0: refused to change device tx_queue_len [ 409.958308][T17662] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 410.089944][T17670] pim6reg: entered allmulticast mode [ 410.101153][T17670] pim6reg: left allmulticast mode [ 410.739631][T17511] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.755178][T17511] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.779015][T17511] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.796362][T17511] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.003862][T17511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.050505][T17511] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.072585][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.079819][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.123570][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.130771][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.261532][ T5849] Bluetooth: hci1: command tx timeout [ 411.683815][T17747] vlan2: entered allmulticast mode [ 411.704792][T17747] bridge_slave_0: entered allmulticast mode [ 411.783859][T17511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.894636][T17511] veth0_vlan: entered promiscuous mode [ 411.919715][T17511] veth1_vlan: entered promiscuous mode [ 411.986585][T17511] veth0_macvtap: entered promiscuous mode [ 412.022531][T17511] veth1_macvtap: entered promiscuous mode [ 412.052069][T17511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.066603][T17764] netlink: 'syz.3.4171': attribute type 10 has an invalid length. [ 412.076641][T17764] __nla_validate_parse: 10 callbacks suppressed [ 412.076658][T17764] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4171'. [ 412.099868][T17764] !: entered promiscuous mode [ 412.110780][T17764] !: entered allmulticast mode [ 412.121925][T17764] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 412.152563][T17511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.186237][ T7996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.208035][ T7996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.242524][T17771] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 412.250485][T17771] syzkaller1: linktype set to 257 [ 412.267552][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4175'. [ 412.276684][ T7996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.276891][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4175'. [ 412.294459][ T7996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.303541][T17773] netlink: 'syz.2.4175': attribute type 1 has an invalid length. [ 412.312405][T17773] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4175'. [ 412.461523][ T7996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.487278][ T7996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.535297][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.556481][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.589280][T17781] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4178'. [ 412.705527][T17783] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4179'. [ 412.711393][T17779] syzkaller0 speed is unknown, defaulting to 1000 [ 413.092439][T17794] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 413.239328][T17800] syz_tun: entered promiscuous mode [ 413.247570][T17800] batadv_slave_0: entered promiscuous mode [ 413.254481][T17800] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 413.267358][T17800] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 413.284257][T17800] hsr1: entered allmulticast mode [ 413.294546][T17800] syz_tun: entered allmulticast mode [ 413.304249][T17800] batadv_slave_0: entered allmulticast mode [ 413.550633][ T6808] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.198679][T17816] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4192'. [ 414.374728][ T6808] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.406739][T17825] FAULT_INJECTION: forcing a failure. [ 414.406739][T17825] name failslab, interval 1, probability 0, space 0, times 0 [ 414.409949][T17824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4198'. [ 414.436294][T17825] CPU: 1 UID: 0 PID: 17825 Comm: syz.2.4196 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 414.436323][T17825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.436335][T17825] Call Trace: [ 414.436344][T17825] [ 414.436362][T17825] dump_stack_lvl+0x189/0x250 [ 414.436391][T17825] ? __pfx____ratelimit+0x10/0x10 [ 414.436419][T17825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.436444][T17825] ? __pfx__printk+0x10/0x10 [ 414.436478][T17825] ? __pfx___might_resched+0x10/0x10 [ 414.436508][T17825] should_fail_ex+0x414/0x560 [ 414.436543][T17825] should_failslab+0xa8/0x100 [ 414.436570][T17825] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 414.436596][T17825] ? __alloc_skb+0x112/0x2d0 [ 414.436629][T17825] __alloc_skb+0x112/0x2d0 [ 414.436663][T17825] netlink_sendmsg+0x5c6/0xb30 [ 414.436703][T17825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.436735][T17825] ? aa_sock_msg_perm+0x94/0x160 [ 414.436768][T17825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.436799][T17825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.436828][T17825] __sock_sendmsg+0x219/0x270 [ 414.436856][T17825] ____sys_sendmsg+0x505/0x830 [ 414.436894][T17825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.436936][T17825] ? import_iovec+0x74/0xa0 [ 414.436964][T17825] ___sys_sendmsg+0x21f/0x2a0 [ 414.436986][T17825] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.437045][T17825] ? __fget_files+0x2a/0x420 [ 414.437071][T17825] ? __fget_files+0x3a0/0x420 [ 414.437109][T17825] __x64_sys_sendmsg+0x19b/0x260 [ 414.437132][T17825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.437162][T17825] ? __pfx_ksys_write+0x10/0x10 [ 414.437182][T17825] ? rcu_is_watching+0x15/0xb0 [ 414.437212][T17825] ? do_syscall_64+0xbe/0x3b0 [ 414.437245][T17825] do_syscall_64+0xfa/0x3b0 [ 414.437271][T17825] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.437296][T17825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.437316][T17825] ? clear_bhb_loop+0x60/0xb0 [ 414.437342][T17825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.437377][T17825] RIP: 0033:0x7f4538d8e929 [ 414.437412][T17825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.437430][T17825] RSP: 002b:00007f4539bbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.437453][T17825] RAX: ffffffffffffffda RBX: 00007f4538fb5fa0 RCX: 00007f4538d8e929 [ 414.437469][T17825] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 414.437483][T17825] RBP: 00007f4539bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 414.437496][T17825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.437509][T17825] R13: 0000000000000000 R14: 00007f4538fb5fa0 R15: 00007ffc8244bb88 [ 414.437544][T17825] [ 414.782047][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.791049][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.798936][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.809699][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.818871][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.937145][ T6808] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.038509][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4203'. [ 415.063700][ T6808] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.109701][T17834] syzkaller0 speed is unknown, defaulting to 1000 [ 415.202664][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4205'. [ 415.394291][T17853] netlink: 'syz.4.4208': attribute type 2 has an invalid length. [ 415.446239][ T6808] bridge_slave_1: left allmulticast mode [ 415.451931][ T6808] bridge_slave_1: left promiscuous mode [ 415.478066][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.536074][ T6808] bridge_slave_0: left allmulticast mode [ 415.541742][ T6808] bridge_slave_0: left promiscuous mode [ 415.569757][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.952923][T17875] netlink: 'syz.3.4216': attribute type 32 has an invalid length. [ 416.131622][ T6808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.144822][ T6808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.154969][ T6808] bond0 (unregistering): Released all slaves [ 416.340323][T17880] netlink: 'syz.1.4218': attribute type 10 has an invalid length. [ 416.848856][T17901] block nbd1: NBD_DISCONNECT [ 416.853493][T17901] block nbd1: Send disconnect failed -22 [ 416.859568][ T5861] Bluetooth: hci1: command tx timeout [ 416.902965][T17901] block nbd1: Disconnected due to user request. [ 416.929880][T17901] block nbd1: shutting down sockets [ 417.151730][ T6808] hsr_slave_0: left promiscuous mode [ 417.159457][ T6808] hsr_slave_1: left promiscuous mode [ 417.165385][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.176695][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.189281][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.197009][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.223968][ T6808] veth1_macvtap: left promiscuous mode [ 417.230052][ T6808] veth0_macvtap: left promiscuous mode [ 417.235852][ T6808] veth1_vlan: left promiscuous mode [ 417.241204][ T6808] veth0_vlan: left promiscuous mode [ 417.661225][ T6808] team0 (unregistering): Port device team_slave_1 removed [ 417.701934][ T6808] team0 (unregistering): Port device team_slave_0 removed [ 418.081844][T17834] chnl_net:caif_netlink_parms(): no params data found [ 418.184446][T17834] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.192035][T17834] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.199316][T17834] bridge_slave_0: entered allmulticast mode [ 418.207402][T17834] bridge_slave_0: entered promiscuous mode [ 418.218370][T17834] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.225610][T17834] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.232811][T17834] bridge_slave_1: entered allmulticast mode [ 418.240443][T17834] bridge_slave_1: entered promiscuous mode [ 418.294356][T17834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.309541][T17834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.345509][T17834] team0: Port device team_slave_0 added [ 418.354408][T17834] team0: Port device team_slave_1 added [ 418.389702][T17834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.397219][T17834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.423314][T17834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.437434][T17834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.444533][T17834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.471039][T17834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.531170][T17834] hsr_slave_0: entered promiscuous mode [ 418.539215][T17834] hsr_slave_1: entered promiscuous mode [ 418.545311][T17834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.553024][T17834] Cannot create hsr debugfs directory [ 418.945760][ T5861] Bluetooth: hci1: command tx timeout [ 421.015900][ T5861] Bluetooth: hci1: command tx timeout [ 423.095816][ T5861] Bluetooth: hci1: command tx timeout [ 426.535794][ T5861] Bluetooth: hci0: command 0x0c1a tx timeout [ 431.656135][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 432.124706][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.134789][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 432.144173][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 432.152802][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 432.154150][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 432.165792][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 432.168164][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 432.174744][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 432.189169][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 432.197150][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 432.224426][T17924] syzkaller0 speed is unknown, defaulting to 1000 [ 432.379038][T17926] syzkaller0 speed is unknown, defaulting to 1000 [ 432.629551][T17924] chnl_net:caif_netlink_parms(): no params data found [ 432.742532][T17924] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.749803][T17924] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.757816][T17924] bridge_slave_0: entered allmulticast mode [ 432.769745][T17924] bridge_slave_0: entered promiscuous mode [ 432.809749][T17924] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.844428][T17924] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.866136][T17924] bridge_slave_1: entered allmulticast mode [ 432.873916][T17924] bridge_slave_1: entered promiscuous mode [ 432.987219][T17924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.070519][T17924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.275952][ T9976] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 433.284472][ T9976] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 433.287194][T17926] chnl_net:caif_netlink_parms(): no params data found [ 433.292489][ T9976] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 433.306863][ T9976] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 433.315156][ T9976] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 433.333822][T17924] team0: Port device team_slave_0 added [ 433.347215][ T9976] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 433.355892][ T9976] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 433.363548][ T9976] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 433.371676][ T9976] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 433.379910][ T9976] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 433.403539][T17924] team0: Port device team_slave_1 added [ 433.476639][T17924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.483609][T17924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.510300][T17924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.526757][T17939] syzkaller0 speed is unknown, defaulting to 1000 [ 433.528384][T17924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.540197][T17924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.566509][T17924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.684455][T17926] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.691975][T17926] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.699286][T17926] bridge_slave_0: entered allmulticast mode [ 433.706899][T17926] bridge_slave_0: entered promiscuous mode [ 433.745371][T17926] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.752631][T17926] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.759874][T17926] bridge_slave_1: entered allmulticast mode [ 433.767810][T17926] bridge_slave_1: entered promiscuous mode [ 433.814726][T17924] hsr_slave_0: entered promiscuous mode [ 433.821473][T17924] hsr_slave_1: entered promiscuous mode [ 433.827740][T17924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.835292][T17924] Cannot create hsr debugfs directory [ 433.862667][T17941] syzkaller0 speed is unknown, defaulting to 1000 [ 433.869091][T17926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.931986][T17926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.083258][T17926] team0: Port device team_slave_0 added [ 434.100308][T17926] team0: Port device team_slave_1 added [ 434.188296][T17926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.195241][T17926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.220381][ T9976] Bluetooth: hci4: command tx timeout [ 434.221796][T17926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.239189][T17926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.246228][T17926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.272514][T17926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.296139][ T9976] Bluetooth: hci6: command tx timeout [ 434.472097][T17926] hsr_slave_0: entered promiscuous mode [ 434.478893][T17926] hsr_slave_1: entered promiscuous mode [ 434.485233][T17926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.493173][T17926] Cannot create hsr debugfs directory [ 434.538625][T17939] chnl_net:caif_netlink_parms(): no params data found [ 434.830167][T17939] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.854213][T17939] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.862554][T17939] bridge_slave_0: entered allmulticast mode [ 434.870211][T17939] bridge_slave_0: entered promiscuous mode [ 434.879224][T17939] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.889186][T17939] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.896960][T17939] bridge_slave_1: entered allmulticast mode [ 434.903981][T17939] bridge_slave_1: entered promiscuous mode [ 434.941060][T17941] chnl_net:caif_netlink_parms(): no params data found [ 434.985212][T17939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.999431][T17939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.097198][T17939] team0: Port device team_slave_0 added [ 435.119342][T17939] team0: Port device team_slave_1 added [ 435.167741][T17941] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.174894][T17941] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.182544][T17941] bridge_slave_0: entered allmulticast mode [ 435.190323][T17941] bridge_slave_0: entered promiscuous mode [ 435.199334][T17941] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.206600][T17941] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.213728][T17941] bridge_slave_1: entered allmulticast mode [ 435.222226][T17941] bridge_slave_1: entered promiscuous mode [ 435.229657][T17939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.236985][T17939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.263103][T17939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.275067][T17939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.282132][T17939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.308642][T17939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.336007][ T9976] Bluetooth: hci7: command tx timeout [ 435.392579][T17939] hsr_slave_0: entered promiscuous mode [ 435.399238][T17939] hsr_slave_1: entered promiscuous mode [ 435.405271][T17939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.413019][T17939] Cannot create hsr debugfs directory [ 435.421023][T17941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.430155][ T9976] Bluetooth: hci8: command tx timeout [ 435.439746][T17941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.503543][T17941] team0: Port device team_slave_0 added [ 435.525836][T17941] team0: Port device team_slave_1 added [ 435.587775][T17941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.594733][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.620956][T17941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.644023][T17941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.651112][T17941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.678168][T17941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.790854][T17941] hsr_slave_0: entered promiscuous mode [ 435.798387][T17941] hsr_slave_1: entered promiscuous mode [ 435.804444][T17941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.812561][T17941] Cannot create hsr debugfs directory [ 436.295731][ T9976] Bluetooth: hci4: command tx timeout [ 436.375795][ T9976] Bluetooth: hci6: command tx timeout [ 437.415880][ T9976] Bluetooth: hci7: command tx timeout [ 437.495943][ T9976] Bluetooth: hci8: command tx timeout [ 438.376049][ T9976] Bluetooth: hci4: command tx timeout [ 438.456274][ T9976] Bluetooth: hci6: command tx timeout [ 439.496038][ T9976] Bluetooth: hci7: command tx timeout [ 439.575767][ T9976] Bluetooth: hci8: command tx timeout [ 439.819732][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.455892][ T9976] Bluetooth: hci4: command tx timeout [ 440.535825][ T9976] Bluetooth: hci6: command tx timeout [ 441.575771][ T9976] Bluetooth: hci7: command tx timeout [ 441.655894][ T9976] Bluetooth: hci8: command tx timeout [ 465.522493][ T36] erspan0 (unregistering): left promiscuous mode [ 465.913438][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 465.924943][ T36] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 465.932328][ T36] bond0 (unregistering): Released all slaves [ 466.027717][ T36] bond1 (unregistering): Released all slaves [ 466.043276][ T36] bond2 (unregistering): Released all slaves [ 466.058456][ T36] bond3 (unregistering): Released all slaves [ 466.148516][ T36] : left promiscuous mode [ 466.202384][ T36] tipc: Disabling bearer [ 466.212726][ T36] tipc: Left network mode [ 466.449180][ T49] smc: removing ib device syz1 [ 468.383121][ T36] batadv_slave_1: left promiscuous mode [ 468.396931][ T36] hsr_slave_0: left promiscuous mode [ 468.402779][ T36] hsr_slave_1: left promiscuous mode [ 469.487689][ T36] IPVS: stop unused estimator thread 0... [ 475.530094][ T5850] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 475.539903][ T5850] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 475.547713][ T5850] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 475.561099][ T5850] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 475.569234][ T5850] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 475.736144][T17961] chnl_net:caif_netlink_parms(): no params data found [ 475.821151][T17961] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.828670][T17961] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.835892][T17961] bridge_slave_0: entered allmulticast mode [ 475.843193][T17961] bridge_slave_0: entered promiscuous mode [ 475.851467][T17961] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.859229][T17961] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.866447][T17961] bridge_slave_1: entered allmulticast mode [ 475.873606][T17961] bridge_slave_1: entered promiscuous mode [ 475.907691][T17961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.919764][T17961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.954666][T17961] team0: Port device team_slave_0 added [ 475.964627][T17961] team0: Port device team_slave_1 added [ 475.996013][T17961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.002990][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.029202][T17961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.042101][T17961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.049279][T17961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.075288][T17961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.125170][T17961] hsr_slave_0: entered promiscuous mode [ 476.131830][T17961] hsr_slave_1: entered promiscuous mode [ 476.144496][T17961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.152473][T17961] Cannot create hsr debugfs directory [ 477.655838][ T9976] Bluetooth: hci9: command tx timeout [ 479.735769][ T9976] Bluetooth: hci9: command tx timeout [ 481.815730][ T9976] Bluetooth: hci9: command tx timeout [ 483.896004][ T9976] Bluetooth: hci9: command tx timeout [ 492.153004][ T5850] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 492.162090][ T5850] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 492.170061][ T5850] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 492.178948][ T5850] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 492.187010][ T5850] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 492.276722][ T5850] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 492.286452][ T5850] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 492.295982][ T5850] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 492.306748][ T5850] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 492.314401][ T5850] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 492.443576][T17971] chnl_net:caif_netlink_parms(): no params data found [ 492.556176][T17971] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.563448][T17971] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.570784][T17971] bridge_slave_0: entered allmulticast mode [ 492.578855][T17971] bridge_slave_0: entered promiscuous mode [ 492.587122][T17971] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.594201][T17971] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.602365][T17971] bridge_slave_1: entered allmulticast mode [ 492.609649][T17971] bridge_slave_1: entered promiscuous mode [ 492.664486][T17971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.701118][T17971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.774150][T17971] team0: Port device team_slave_0 added [ 492.788618][T17971] team0: Port device team_slave_1 added [ 492.827755][T17971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.834785][T17971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.861208][T17971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.874253][T17973] chnl_net:caif_netlink_parms(): no params data found [ 492.886536][T17971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.893486][T17971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.919612][T17971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.040060][T17971] hsr_slave_0: entered promiscuous mode [ 493.046992][T17971] hsr_slave_1: entered promiscuous mode [ 493.053332][T17971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.060932][T17971] Cannot create hsr debugfs directory [ 493.098996][T17973] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.106795][T17973] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.114247][T17973] bridge_slave_0: entered allmulticast mode [ 493.122198][T17973] bridge_slave_0: entered promiscuous mode [ 493.136461][T17973] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.143630][T17973] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.151218][T17973] bridge_slave_1: entered allmulticast mode [ 493.159238][T17973] bridge_slave_1: entered promiscuous mode [ 493.210327][T17973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.228881][T17973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.284573][T17973] team0: Port device team_slave_0 added [ 493.293831][T17973] team0: Port device team_slave_1 added [ 493.386214][T17973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.393266][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.422279][T17973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.510186][T17973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.525836][T17973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.576016][T17973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.798109][T17973] hsr_slave_0: entered promiscuous mode [ 493.804762][T17973] hsr_slave_1: entered promiscuous mode [ 493.825538][T17973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.843316][T17973] Cannot create hsr debugfs directory [ 493.891429][ T5850] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 493.907303][ T5850] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 493.916980][ T5850] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 493.926591][ T5850] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 493.936342][ T5850] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 493.994789][ T9976] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 494.005124][ T9976] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 494.028429][ T9976] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 494.045106][ T9976] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 494.054902][ T9976] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 494.216101][ T9976] Bluetooth: hci10: command tx timeout [ 494.379764][ T9976] Bluetooth: hci11: command tx timeout [ 494.491646][T17989] chnl_net:caif_netlink_parms(): no params data found [ 494.579135][T17991] chnl_net:caif_netlink_parms(): no params data found [ 494.726559][T17989] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.733732][T17989] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.741495][T17989] bridge_slave_0: entered allmulticast mode [ 494.749211][T17989] bridge_slave_0: entered promiscuous mode [ 494.757328][T17989] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.764445][T17989] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.772388][T17989] bridge_slave_1: entered allmulticast mode [ 494.784448][T17989] bridge_slave_1: entered promiscuous mode [ 494.868593][T17989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.878068][T17991] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.885191][T17991] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.892825][T17991] bridge_slave_0: entered allmulticast mode [ 494.900467][T17991] bridge_slave_0: entered promiscuous mode [ 494.918282][T17989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.944370][T17991] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.952878][T17991] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.960268][T17991] bridge_slave_1: entered allmulticast mode [ 494.967342][T17991] bridge_slave_1: entered promiscuous mode [ 495.016635][T17989] team0: Port device team_slave_0 added [ 495.038772][T17989] team0: Port device team_slave_1 added [ 495.048212][T17991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.074810][T17991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.129604][T17989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.137176][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.163754][T17989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.177392][T17991] team0: Port device team_slave_0 added [ 495.183991][T17989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.191209][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.217653][T17989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.237753][T17991] team0: Port device team_slave_1 added [ 495.288332][T17991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.295279][T17991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.322022][T17991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.348608][T17991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.356323][T17991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.382769][T17991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.399613][T17989] hsr_slave_0: entered promiscuous mode [ 495.406611][T17989] hsr_slave_1: entered promiscuous mode [ 495.412928][T17989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.421068][T17989] Cannot create hsr debugfs directory [ 495.554760][T17991] hsr_slave_0: entered promiscuous mode [ 495.562376][T17991] hsr_slave_1: entered promiscuous mode [ 495.569434][T17991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.577144][T17991] Cannot create hsr debugfs directory [ 495.975869][ T9976] Bluetooth: hci12: command tx timeout [ 496.147227][ T9976] Bluetooth: hci13: command tx timeout [ 496.295814][ T9976] Bluetooth: hci10: command tx timeout [ 496.455710][ T9976] Bluetooth: hci11: command tx timeout [ 498.055933][ T9976] Bluetooth: hci12: command tx timeout [ 498.215804][ T9976] Bluetooth: hci13: command tx timeout [ 498.375761][ T9976] Bluetooth: hci10: command tx timeout [ 498.535814][ T9976] Bluetooth: hci11: command tx timeout [ 500.135796][ T9976] Bluetooth: hci12: command tx timeout [ 500.295833][ T9976] Bluetooth: hci13: command tx timeout [ 500.456040][ T9976] Bluetooth: hci10: command tx timeout [ 500.615989][ T9976] Bluetooth: hci11: command tx timeout [ 501.259795][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.216024][ T5850] Bluetooth: hci12: command tx timeout [ 502.375730][ T5850] Bluetooth: hci13: command tx timeout [ 503.337532][ T5850] Bluetooth: hci3: command 0x0419 tx timeout [ 536.769762][ T5850] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 536.778940][ T5850] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 536.786779][ T5850] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 536.794866][ T5850] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 536.803437][ T5850] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 536.989756][T18009] chnl_net:caif_netlink_parms(): no params data found [ 537.076463][T18009] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.083614][T18009] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.091180][T18009] bridge_slave_0: entered allmulticast mode [ 537.099672][T18009] bridge_slave_0: entered promiscuous mode [ 537.108666][T18009] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.116262][T18009] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.123465][T18009] bridge_slave_1: entered allmulticast mode [ 537.131231][T18009] bridge_slave_1: entered promiscuous mode [ 537.168051][T18009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.180752][T18009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.220422][T18009] team0: Port device team_slave_0 added [ 537.229721][T18009] team0: Port device team_slave_1 added [ 537.268224][T18009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.275173][T18009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.302036][T18009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.315105][T18009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.322105][T18009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.348455][T18009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.402090][T18009] hsr_slave_0: entered promiscuous mode [ 537.408846][T18009] hsr_slave_1: entered promiscuous mode [ 537.414924][T18009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.423011][T18009] Cannot create hsr debugfs directory [ 538.855705][ T5850] Bluetooth: hci14: command tx timeout [ 539.177604][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 540.935841][ T9976] Bluetooth: hci14: command tx timeout [ 543.015678][ T9976] Bluetooth: hci14: command tx timeout [ 545.095684][ T9976] Bluetooth: hci14: command tx timeout [ 552.323095][ T5850] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 552.331892][ T5850] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 552.340113][ T5850] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 552.348890][ T5850] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 552.357074][ T5850] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 552.386596][ T5850] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 552.396190][ T5850] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 552.404616][ T5850] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 552.412818][ T5850] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 552.420540][ T5850] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 552.709381][T18019] chnl_net:caif_netlink_parms(): no params data found [ 552.803886][T18021] chnl_net:caif_netlink_parms(): no params data found [ 552.872804][T18019] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.880168][T18019] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.888285][T18019] bridge_slave_0: entered allmulticast mode [ 552.896391][T18019] bridge_slave_0: entered promiscuous mode [ 552.922843][T18019] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.930258][T18019] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.937873][T18019] bridge_slave_1: entered allmulticast mode [ 552.946187][T18019] bridge_slave_1: entered promiscuous mode [ 553.008907][T18019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.022766][T18019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.091178][T18019] team0: Port device team_slave_0 added [ 553.103463][T18021] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.111087][T18021] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.120652][T18021] bridge_slave_0: entered allmulticast mode [ 553.128691][T18021] bridge_slave_0: entered promiscuous mode [ 553.136716][T18021] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.143897][T18021] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.151290][T18021] bridge_slave_1: entered allmulticast mode [ 553.158979][T18021] bridge_slave_1: entered promiscuous mode [ 553.167995][T18019] team0: Port device team_slave_1 added [ 553.243106][T18021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.254344][T18019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.261534][T18019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.287940][T18019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.301684][T18019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.308728][T18019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.335502][T18019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.350942][T18021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.401704][T18021] team0: Port device team_slave_0 added [ 553.441529][T18021] team0: Port device team_slave_1 added [ 553.453220][T18019] hsr_slave_0: entered promiscuous mode [ 553.461897][T18019] hsr_slave_1: entered promiscuous mode [ 553.468542][T18019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.476250][T18019] Cannot create hsr debugfs directory [ 553.638320][T18021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.645325][T18021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.695576][T18021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.728821][T18021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.745744][T18021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.795914][T18021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.022741][ T5861] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 554.031521][ T5861] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 554.039883][ T5861] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 554.048360][ T5861] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 554.056214][ T5861] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 554.088531][ T5849] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 554.103653][ T5849] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 554.105056][T18021] hsr_slave_0: entered promiscuous mode [ 554.117061][ T5849] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 554.119078][T18021] hsr_slave_1: entered promiscuous mode [ 554.131193][T18021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.139269][T18021] Cannot create hsr debugfs directory [ 554.145157][ T5849] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 554.154497][ T5849] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 554.455946][ T5849] Bluetooth: hci16: command tx timeout [ 554.461977][ T5849] Bluetooth: hci15: command tx timeout [ 554.537735][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 554.538195][ T5861] Bluetooth: hci6: command 0x0406 tx timeout [ 554.771930][T18037] chnl_net:caif_netlink_parms(): no params data found [ 554.874914][T18040] chnl_net:caif_netlink_parms(): no params data found [ 555.018334][T18037] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.026792][T18037] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.034012][T18037] bridge_slave_0: entered allmulticast mode [ 555.042159][T18037] bridge_slave_0: entered promiscuous mode [ 555.090197][T18037] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.097963][T18037] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.105386][T18037] bridge_slave_1: entered allmulticast mode [ 555.114048][T18037] bridge_slave_1: entered promiscuous mode [ 555.133710][T18040] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.143330][T18040] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.151148][T18040] bridge_slave_0: entered allmulticast mode [ 555.158932][T18040] bridge_slave_0: entered promiscuous mode [ 555.194334][T18040] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.201916][T18040] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.209563][T18040] bridge_slave_1: entered allmulticast mode [ 555.217693][T18040] bridge_slave_1: entered promiscuous mode [ 555.264903][T18037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.294235][T18037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.334293][T18040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.347979][T18040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.374238][T18037] team0: Port device team_slave_0 added [ 555.383775][T18037] team0: Port device team_slave_1 added [ 555.467673][T18040] team0: Port device team_slave_0 added [ 555.476646][T18040] team0: Port device team_slave_1 added [ 555.484065][T18037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.491676][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.518445][T18037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.531202][T18037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.538308][T18037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.564395][T18037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.616350][T18040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.623410][T18040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.650402][T18040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.664433][T18040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.671505][T18040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.697618][T18040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.773851][T18037] hsr_slave_0: entered promiscuous mode [ 555.780943][T18037] hsr_slave_1: entered promiscuous mode [ 555.787408][T18037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.794969][T18037] Cannot create hsr debugfs directory [ 555.893046][T18040] hsr_slave_0: entered promiscuous mode [ 555.900360][T18040] hsr_slave_1: entered promiscuous mode [ 555.907181][T18040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 555.914752][T18040] Cannot create hsr debugfs directory [ 556.135779][ T5850] Bluetooth: hci17: command tx timeout [ 556.226836][ T5850] Bluetooth: hci18: command tx timeout [ 556.535995][ T5850] Bluetooth: hci16: command tx timeout [ 556.541529][ T5850] Bluetooth: hci15: command tx timeout [ 558.216569][ T5849] Bluetooth: hci17: command tx timeout [ 558.295969][ T5849] Bluetooth: hci18: command tx timeout [ 558.615929][ T5861] Bluetooth: hci16: command tx timeout [ 558.621554][ T5849] Bluetooth: hci15: command tx timeout [ 559.658394][ T5861] Bluetooth: hci8: command 0x0406 tx timeout [ 559.664571][ T5849] Bluetooth: hci7: command 0x0406 tx timeout [ 560.295672][ T5850] Bluetooth: hci17: command tx timeout [ 560.375756][ T5850] Bluetooth: hci18: command tx timeout [ 560.696049][ T5850] Bluetooth: hci15: command tx timeout [ 560.696058][ T9976] Bluetooth: hci16: command tx timeout [ 562.375909][ T9976] Bluetooth: hci17: command tx timeout [ 562.456257][ T9976] Bluetooth: hci18: command tx timeout [ 562.700575][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.256339][ T31] INFO: task syz-executor:17834 blocked for more than 143 seconds. [ 565.264400][ T31] Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 [ 565.272177][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.280982][ T31] task:syz-executor state:D stack:22728 pid:17834 tgid:17834 ppid:1 task_flags:0x400140 flags:0x00004004 [ 565.293192][ T31] Call Trace: [ 565.296531][ T31] [ 565.299484][ T31] __schedule+0x16f5/0x4d00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 565.304008][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.308975][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.313852][ T31] ? schedule+0x165/0x360 [ 565.318295][ T31] ? __pfx___schedule+0x10/0x10 [ 565.323192][ T31] ? schedule+0x91/0x360 [ 565.327636][ T31] schedule+0x165/0x360 [ 565.331826][ T31] schedule_preempt_disabled+0x13/0x30 [ 565.337658][ T31] __mutex_lock+0x724/0xe80 [ 565.342185][ T31] ? unwind_get_return_address+0x4d/0x90 [ 565.347922][ T31] ? __mutex_lock+0x51b/0xe80 [ 565.352642][ T31] ? genl_rcv_msg+0x10d/0x790 [ 565.357471][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 565.362514][ T31] ? stack_trace_save+0x9c/0xe0 [ 565.367539][ T31] ? radix_tree_lookup+0x240/0x290 [ 565.372673][ T31] genl_rcv_msg+0x10d/0x790 [ 565.377307][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.382184][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.387319][ T31] netlink_rcv_skb+0x205/0x470 [ 565.392118][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.397386][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.402712][ T31] ? down_read+0x1ad/0x2e0 [ 565.413054][ T31] genl_rcv+0x28/0x40 [ 565.425885][ T31] netlink_unicast+0x75c/0x8e0 [ 565.430701][ T31] netlink_sendmsg+0x805/0xb30 [ 565.444184][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.455555][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 565.460541][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.475662][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.480984][ T31] __sock_sendmsg+0x219/0x270 [ 565.505600][ T31] __sys_sendto+0x3bd/0x520 [ 565.510157][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 565.547001][ T31] ? fd_install+0x97/0x540 [ 565.551476][ T31] ? fd_install+0x30d/0x540 [ 565.567011][ T31] __x64_sys_sendto+0xde/0x100 [ 565.571836][ T31] do_syscall_64+0xfa/0x3b0 [ 565.595674][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.602166][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 565.612530][ T31] ? clear_bhb_loop+0x60/0xb0 [ 565.617315][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.623222][ T31] RIP: 0033:0x7fe5401907bc [ 565.627722][ T31] RSP: 002b:00007ffdf2d24db0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 565.636295][ T31] RAX: ffffffffffffffda RBX: 00007fe540ee4620 RCX: 00007fe5401907bc [ 565.644293][ T31] RDX: 0000000000000020 RSI: 00007fe540ee4670 RDI: 0000000000000005 [ 565.652457][ T31] RBP: 0000000000000000 R08: 00007ffdf2d24e04 R09: 000000000000000c [ 565.660944][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 565.669105][ T31] R13: 00007ffdf2d24e58 R14: 00007fe540ee4670 R15: 0000000000000000 [ 565.677234][ T31] [ 565.680302][ T31] INFO: task syz.1.4227:17901 blocked for more than 143 seconds. [ 565.688298][ T31] Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 [ 565.695984][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.704660][ T31] task:syz.1.4227 state:D stack:25416 pid:17901 tgid:17897 ppid:15057 task_flags:0x400140 flags:0x00004006 [ 565.717465][ T31] Call Trace: [ 565.720761][ T31] [ 565.723707][ T31] __schedule+0x16f5/0x4d00 [ 565.728350][ T31] ? schedule+0x165/0x360 [ 565.732707][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.737766][ T31] ? __pfx___schedule+0x10/0x10 [ 565.742662][ T31] ? schedule+0x91/0x360 [ 565.747032][ T31] schedule+0x165/0x360 [ 565.751215][ T31] schedule_timeout+0x9a/0x270 [ 565.756118][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 565.761536][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.766875][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.772113][ T31] ? wait_for_completion+0x267/0x5d0 [ 565.777561][ T31] wait_for_completion+0x2bf/0x5d0 [ 565.782719][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 565.788663][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 565.794500][ T31] ? check_flush_dependency+0x88/0x400 [ 565.800440][ T31] __flush_workqueue+0x6f7/0x14b0 [ 565.805523][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 565.811666][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.817717][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 565.823213][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 565.829214][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 565.834700][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 565.840222][ T31] nbd_genl_disconnect+0x485/0x570 [ 565.845365][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 565.851151][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 565.857635][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 565.863203][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 565.869368][ T31] genl_rcv_msg+0x60e/0x790 [ 565.873894][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.879029][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 565.884685][ T31] netlink_rcv_skb+0x205/0x470 [ 565.889596][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.894632][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.900256][ T31] ? down_read+0x1ad/0x2e0 [ 565.904716][ T31] genl_rcv+0x28/0x40 [ 565.909639][ T31] netlink_unicast+0x75c/0x8e0 [ 565.914848][ T31] netlink_sendmsg+0x805/0xb30 [ 565.920143][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.925480][ T31] ? __lock_acquire+0xab9/0xd20 [ 565.930600][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 565.935659][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.940970][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.946567][ T31] __sock_sendmsg+0x219/0x270 [ 565.951286][ T31] ____sys_sendmsg+0x505/0x830 [ 565.956214][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.961555][ T31] ? import_iovec+0x74/0xa0 [ 565.966255][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 565.970970][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.976306][ T31] ? __fget_files+0x2a/0x420 [ 565.980914][ T31] ? __fget_files+0x3a0/0x420 [ 565.985636][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 565.990586][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.996186][ T31] ? rcu_is_watching+0x15/0xb0 [ 566.000995][ T31] ? do_syscall_64+0xbe/0x3b0 [ 566.005832][ T31] do_syscall_64+0xfa/0x3b0 [ 566.010364][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.016299][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.022394][ T31] ? clear_bhb_loop+0x60/0xb0 [ 566.027155][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.033076][ T31] RIP: 0033:0x7fe20f58e929 [ 566.037619][ T31] RSP: 002b:00007fe210392038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.046224][ T31] RAX: ffffffffffffffda RBX: 00007fe20f7b6080 RCX: 00007fe20f58e929 [ 566.054220][ T31] RDX: 0000000000000084 RSI: 0000200000001300 RDI: 0000000000000009 [ 566.062658][ T31] RBP: 00007fe20f610b39 R08: 0000000000000000 R09: 0000000000000000 [ 566.070715][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.078815][ T31] R13: 0000000000000000 R14: 00007fe20f7b6080 R15: 00007ffd2bcb6d78 [ 566.086974][ T31] [ 566.090039][ T31] INFO: task syz.3.4229:17909 blocked for more than 144 seconds. [ 566.098244][ T31] Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 [ 566.109711][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.119224][ T31] task:syz.3.4229 state:D stack:27576 pid:17909 tgid:17903 ppid:14087 task_flags:0x400140 flags:0x00004004 [ 566.131410][ T31] Call Trace: [ 566.134706][ T31] [ 566.137748][ T31] __schedule+0x16f5/0x4d00 [ 566.142302][ T31] ? __lock_acquire+0xab9/0xd20 [ 566.147214][ T31] ? schedule+0x165/0x360 [ 566.151595][ T31] ? __pfx___schedule+0x10/0x10 [ 566.156604][ T31] ? schedule+0x91/0x360 [ 566.160875][ T31] schedule+0x165/0x360 [ 566.165041][ T31] schedule_preempt_disabled+0x13/0x30 [ 566.170809][ T31] __mutex_lock+0x724/0xe80 [ 566.175335][ T31] ? __mutex_lock+0x51b/0xe80 [ 566.180090][ T31] ? genl_rcv_msg+0x10d/0x790 [ 566.184777][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 566.189877][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 566.195281][ T31] ? radix_tree_lookup+0x240/0x290 [ 566.200525][ T31] genl_rcv_msg+0x10d/0x790 [ 566.205057][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.210242][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 566.215295][ T31] ? __copy_skb_header+0xa7/0x550 [ 566.221028][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 566.226512][ T31] netlink_rcv_skb+0x205/0x470 [ 566.231307][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.236480][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 566.241816][ T31] ? down_read+0x1ad/0x2e0 [ 566.246388][ T31] genl_rcv+0x28/0x40 [ 566.250389][ T31] netlink_unicast+0x75c/0x8e0 [ 566.255179][ T31] netlink_sendmsg+0x805/0xb30 [ 566.259999][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.265306][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 566.270306][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 566.275883][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.281201][ T31] __sock_sendmsg+0x219/0x270 [ 566.286022][ T31] __sys_sendto+0x3bd/0x520 [ 566.290558][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 566.295875][ T31] ? fd_install+0x97/0x540 [ 566.300312][ T31] ? fd_install+0x30d/0x540 [ 566.304849][ T31] __x64_sys_sendto+0xde/0x100 [ 566.309711][ T31] do_syscall_64+0xfa/0x3b0 [ 566.314232][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.319559][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.326349][ T31] ? clear_bhb_loop+0x60/0xb0 [ 566.331083][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.337092][ T31] RIP: 0033:0x7fe2089907bc [ 566.341520][ T31] RSP: 002b:00007fe20973eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 566.349984][ T31] RAX: ffffffffffffffda RBX: 00007fe20973efc0 RCX: 00007fe2089907bc [ 566.358101][ T31] RDX: 0000000000000024 RSI: 00007fe20973f010 RDI: 0000000000000007 [ 566.366269][ T31] RBP: 0000000000000000 R08: 00007fe20973ef14 R09: 000000000000000c [ 566.374255][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 566.382555][ T31] R13: 00007fe20973ef68 R14: 00007fe20973f010 R15: 0000000000000000 [ 566.390880][ T31] [ 566.393998][ T31] INFO: task syz.2.4230:17908 blocked for more than 144 seconds. [ 566.403609][ T31] Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 [ 566.411697][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.420698][ T31] task:syz.2.4230 state:D stack:27784 pid:17908 tgid:17907 ppid:13277 task_flags:0x400040 flags:0x00004004 [ 566.432735][ T31] Call Trace: [ 566.436325][ T31] [ 566.439271][ T31] __schedule+0x16f5/0x4d00 [ 566.443797][ T31] ? __lock_acquire+0xab9/0xd20 [ 566.448748][ T31] ? schedule+0x165/0x360 [ 566.453103][ T31] ? __pfx___schedule+0x10/0x10 [ 566.458359][ T31] ? schedule+0x91/0x360 [ 566.462633][ T31] schedule+0x165/0x360 [ 566.466864][ T31] schedule_preempt_disabled+0x13/0x30 [ 566.472344][ T31] __mutex_lock+0x724/0xe80 [ 566.477012][ T31] ? __mutex_lock+0x51b/0xe80 [ 566.481806][ T31] ? genl_rcv_msg+0x10d/0x790 [ 566.486598][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 566.491646][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 566.497186][ T31] ? radix_tree_lookup+0x240/0x290 [ 566.502322][ T31] genl_rcv_msg+0x10d/0x790 [ 566.506898][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.511936][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 566.517043][ T31] ? __copy_skb_header+0xa7/0x550 [ 566.522081][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 566.527509][ T31] netlink_rcv_skb+0x205/0x470 [ 566.532299][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.538398][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 566.543745][ T31] ? down_read+0x1ad/0x2e0 [ 566.548709][ T31] genl_rcv+0x28/0x40 [ 566.552708][ T31] netlink_unicast+0x75c/0x8e0 [ 566.557558][ T31] netlink_sendmsg+0x805/0xb30 [ 566.562353][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.567857][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 566.572813][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 566.578166][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.583480][ T31] __sock_sendmsg+0x219/0x270 [ 566.588254][ T31] __sys_sendto+0x3bd/0x520 [ 566.592799][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 566.597953][ T31] ? fd_install+0x97/0x540 [ 566.602400][ T31] ? fd_install+0x30d/0x540 [ 566.607167][ T31] __x64_sys_sendto+0xde/0x100 [ 566.611994][ T31] do_syscall_64+0xfa/0x3b0 [ 566.617271][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.622505][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.628694][ T31] ? clear_bhb_loop+0x60/0xb0 [ 566.633409][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.639402][ T31] RIP: 0033:0x7f4538d907bc [ 566.643831][ T31] RSP: 002b:00007f4539bbdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 566.652312][ T31] RAX: ffffffffffffffda RBX: 00007f4539bbdfc0 RCX: 00007f4538d907bc [ 566.660413][ T31] RDX: 0000000000000024 RSI: 00007f4539bbe010 RDI: 0000000000000007 [ 566.668500][ T31] RBP: 0000000000000000 R08: 00007f4539bbdf14 R09: 000000000000000c [ 566.676526][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 566.684504][ T31] R13: 00007f4539bbdf68 R14: 00007f4539bbe010 R15: 0000000000000000 [ 566.692540][ T31] [ 566.702007][ T31] INFO: task syz.4.4231:17911 blocked for more than 144 seconds. [ 566.711022][ T31] Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 [ 566.718924][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 566.727674][ T31] task:syz.4.4231 state:D stack:23368 pid:17911 tgid:17910 ppid:14378 task_flags:0x400140 flags:0x00004004 [ 566.739701][ T31] Call Trace: [ 566.743003][ T31] [ 566.746024][ T31] __schedule+0x16f5/0x4d00 [ 566.750554][ T31] ? __lock_acquire+0xab9/0xd20 [ 566.755414][ T31] ? __lock_acquire+0xab9/0xd20 [ 566.760349][ T31] ? schedule+0x165/0x360 [ 566.764710][ T31] ? __pfx___schedule+0x10/0x10 [ 566.769738][ T31] ? schedule+0x91/0x360 [ 566.774022][ T31] schedule+0x165/0x360 [ 566.778594][ T31] schedule_preempt_disabled+0x13/0x30 [ 566.784085][ T31] __mutex_lock+0x724/0xe80 [ 566.788682][ T31] ? unwind_get_return_address+0x4d/0x90 [ 566.794349][ T31] ? __mutex_lock+0x51b/0xe80 [ 566.799150][ T31] ? genl_rcv_msg+0x10d/0x790 [ 566.803861][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 566.808984][ T31] ? stack_trace_save+0x9c/0xe0 [ 566.813874][ T31] ? radix_tree_lookup+0x240/0x290 [ 566.819087][ T31] genl_rcv_msg+0x10d/0x790 [ 566.823621][ T31] ? __lock_acquire+0xab9/0xd20 [ 566.828662][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.833733][ T31] netlink_rcv_skb+0x205/0x470 [ 566.838584][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 566.843640][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 566.849005][ T31] ? down_read+0x1ad/0x2e0 [ 566.853447][ T31] genl_rcv+0x28/0x40 [ 566.857526][ T31] netlink_unicast+0x75c/0x8e0 [ 566.862321][ T31] netlink_sendmsg+0x805/0xb30 [ 566.867147][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.872457][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 566.877572][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 566.882877][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.888227][ T31] __sock_sendmsg+0x219/0x270 [ 566.892940][ T31] __sys_sendto+0x3bd/0x520 [ 566.897534][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 566.902595][ T31] ? count_memcg_event_mm+0x21/0x260 [ 566.907972][ T31] ? exc_page_fault+0x76/0xf0 [ 566.912682][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 566.918072][ T31] __x64_sys_sendto+0xde/0x100 [ 566.922872][ T31] do_syscall_64+0xfa/0x3b0 [ 566.927464][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.932675][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.938938][ T31] ? clear_bhb_loop+0x60/0xb0 [ 566.943637][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.949567][ T31] RIP: 0033:0x7f64fa5907bc [ 566.953998][ T31] RSP: 002b:00007f64fb3f8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 566.962497][ T31] RAX: ffffffffffffffda RBX: 00007f64fb3f8fc0 RCX: 00007f64fa5907bc [ 566.970538][ T31] RDX: 0000000000000020 RSI: 00007f64fb3f9010 RDI: 000000000000000a [ 566.978593][ T31] RBP: 0000000000000000 R08: 00007f64fb3f8f14 R09: 000000000000000c [ 566.986695][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 566.994674][ T31] R13: 00007f64fb3f8f68 R14: 00007f64fb3f9010 R15: 0000000000000000 [ 567.002765][ T31] [ 567.005916][ T31] [ 567.005916][ T31] Showing all locks held in the system: [ 567.013641][ T31] 1 lock held by khungtaskd/31: [ 567.018810][ T31] #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 567.028741][ T31] 2 locks held by getty/5607: [ 567.033403][ T31] #0: ffff8880310070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 567.043317][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 567.053672][ T31] 2 locks held by kworker/u9:2/5846: [ 567.059040][ T31] #0: ffff8880254a3148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 567.070338][ T31] #1: ffffc9000431fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 567.082215][ T31] 2 locks held by kworker/u9:5/5859: [ 567.087594][ T31] #0: ffff8880254f8948 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 567.099070][ T31] #1: ffffc9000440fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 567.110902][ T31] 2 locks held by syz-executor/17834: [ 567.116337][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.124548][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.133595][ T31] 3 locks held by syz.1.4227/17901: [ 567.138805][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.147015][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.156185][ T31] #2: ffff8880254cca30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 567.166608][ T31] 2 locks held by syz.3.4229/17909: [ 567.171792][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.180209][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.189271][ T31] 2 locks held by syz.2.4230/17908: [ 567.194485][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.202786][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.211934][ T31] 2 locks held by syz.4.4231/17911: [ 567.217202][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.225431][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.234484][ T31] 2 locks held by syz-executor/17924: [ 567.239902][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.248131][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.257378][ T31] 2 locks held by syz-executor/17926: [ 567.262765][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.271284][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.280330][ T31] 2 locks held by syz-executor/17939: [ 567.285755][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.293972][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.303045][ T31] 2 locks held by syz-executor/17941: [ 567.308455][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.316790][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.325871][ T31] 2 locks held by syz-executor/17961: [ 567.331256][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.339701][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.348770][ T31] 2 locks held by syz-executor/17971: [ 567.354150][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.362478][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.371557][ T31] 2 locks held by syz-executor/17973: [ 567.377121][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.385339][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.394382][ T31] 2 locks held by syz-executor/17989: [ 567.399817][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.408034][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.417288][ T31] 2 locks held by syz-executor/17991: [ 567.422681][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.430985][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.440166][ T31] 2 locks held by syz-executor/18009: [ 567.445613][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.453827][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.462857][ T31] 2 locks held by syz-executor/18019: [ 567.468266][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.476559][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.485714][ T31] 2 locks held by syz-executor/18021: [ 567.491114][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.499392][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.508471][ T31] 2 locks held by syz-executor/18037: [ 567.513847][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.522169][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.531240][ T31] 2 locks held by syz-executor/18040: [ 567.536726][ T31] #0: ffffffff8f5854b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.544939][ T31] #1: ffffffff8f5852c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 567.553988][ T31] [ 567.557548][ T31] ============================================= [ 567.557548][ T31] [ 567.566057][ T31] NMI backtrace for cpu 1 [ 567.566074][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 567.566096][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.566108][ T31] Call Trace: [ 567.566115][ T31] [ 567.566124][ T31] dump_stack_lvl+0x189/0x250 [ 567.566148][ T31] ? __wake_up_klogd+0xd9/0x110 [ 567.566180][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.566202][ T31] ? __pfx__printk+0x10/0x10 [ 567.566240][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 567.566264][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 567.566282][ T31] ? _printk+0xcf/0x120 [ 567.566312][ T31] ? __pfx__printk+0x10/0x10 [ 567.566340][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 567.566361][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 567.566385][ T31] watchdog+0xfee/0x1030 [ 567.566410][ T31] ? watchdog+0x1de/0x1030 [ 567.566436][ T31] kthread+0x70e/0x8a0 [ 567.566466][ T31] ? __pfx_watchdog+0x10/0x10 [ 567.566482][ T31] ? __pfx_kthread+0x10/0x10 [ 567.566509][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.566533][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.566555][ T31] ? __pfx_kthread+0x10/0x10 [ 567.566591][ T31] ret_from_fork+0x3fc/0x770 [ 567.566611][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 567.566634][ T31] ? __switch_to_asm+0x39/0x70 [ 567.566656][ T31] ? __switch_to_asm+0x33/0x70 [ 567.566677][ T31] ? __pfx_kthread+0x10/0x10 [ 567.566702][ T31] ret_from_fork_asm+0x1a/0x30 [ 567.566738][ T31] [ 567.566746][ T31] Sending NMI from CPU 1 to CPUs 0: [ 567.724561][ C0] NMI backtrace for cpu 0 [ 567.724578][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 567.724600][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.724611][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 567.724639][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 5d 17 00 f3 0f 1e fa fb f4 c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 567.724655][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 567.724671][ C0] RAX: d57e452114cb7900 RBX: ffffffff81976c78 RCX: d57e452114cb7900 [ 567.724685][ C0] RDX: 0000000000000001 RSI: ffffffff8d9a0017 RDI: ffffffff8be29e00 [ 567.724698][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 567.724711][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa23bf0 [ 567.724724][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 567.724736][ C0] FS: 0000000000000000(0000) GS:ffff888125c11000(0000) knlGS:0000000000000000 [ 567.724750][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.724763][ C0] CR2: 000055b8826d3168 CR3: 000000000df38000 CR4: 00000000003526f0 [ 567.724778][ C0] Call Trace: [ 567.724785][ C0] [ 567.724792][ C0] default_idle+0x13/0x20 [ 567.724818][ C0] default_idle_call+0x74/0xb0 [ 567.724844][ C0] do_idle+0x1e8/0x510 [ 567.724868][ C0] ? __pfx_do_idle+0x10/0x10 [ 567.724898][ C0] cpu_startup_entry+0x44/0x60 [ 567.724918][ C0] rest_init+0x2de/0x300 [ 567.724934][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 567.724960][ C0] start_kernel+0x47d/0x500 [ 567.724979][ C0] x86_64_start_reservations+0x24/0x30 [ 567.725003][ C0] x86_64_start_kernel+0x143/0x1c0 [ 567.725026][ C0] common_startup_64+0x13e/0x147 [ 567.725060][ C0] [ 567.725861][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 567.725880][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-01399-ga52f9f0d77f2 #0 PREEMPT(full) [ 567.725907][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.725920][ T31] Call Trace: [ 567.725932][ T31] [ 567.725942][ T31] dump_stack_lvl+0x99/0x250 [ 567.725973][ T31] ? __asan_memcpy+0x40/0x70 [ 567.725995][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.726022][ T31] ? __pfx__printk+0x10/0x10 [ 567.726066][ T31] panic+0x2db/0x790 [ 567.726098][ T31] ? __pfx_panic+0x10/0x10 [ 567.726123][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 567.726143][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 567.726175][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 567.726197][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 567.726231][ T31] watchdog+0x102d/0x1030 [ 567.726256][ T31] ? watchdog+0x1de/0x1030 [ 567.726287][ T31] kthread+0x70e/0x8a0 [ 567.726322][ T31] ? __pfx_watchdog+0x10/0x10 [ 567.726343][ T31] ? __pfx_kthread+0x10/0x10 [ 567.726375][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.726410][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.726435][ T31] ? __pfx_kthread+0x10/0x10 [ 567.726467][ T31] ret_from_fork+0x3fc/0x770 [ 567.726494][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 567.726526][ T31] ? __switch_to_asm+0x39/0x70 [ 567.726553][ T31] ? __switch_to_asm+0x33/0x70 [ 567.726581][ T31] ? __pfx_kthread+0x10/0x10 [ 567.726612][ T31] ret_from_fork_asm+0x1a/0x30 [ 567.726658][ T31] [ 568.059686][ T31] Kernel Offset: disabled [ 568.064000][ T31] Rebooting in 86400 seconds..