last executing test programs: 29.955054765s ago: executing program 2 (id=947): unshare(0x26020480) (async) unshare(0x26020480) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) socket(0x15, 0xa, 0x7) (async) socket(0x15, 0xa, 0x7) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r5, 0x8b1b, &(0x7f0000000040)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x0, r2, 0xee01}, {0x0, 0x0, 0x72}, {0x3}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x5}}, 0xe8) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e24, @multicast1}], 0x20) sendto$inet6(r8, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) (async) sendto$inet6(r8, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000080)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x4a, &(0x7f00000000c0), 0x1, &(0x7f00000003c0)=""/21, 0x21}, 0x1ff}], 0x73d, 0x40000040, 0x0) 29.586075654s ago: executing program 2 (id=952): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delqdisc={0x64, 0x25, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x7, 0x4}, {0xffff, 0xb}, {0xfff3, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xaf, 0xd1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0x4, 0x7, 0x1, 0x5, 0x800, 0x1}}, {0x6, 0x2, [0x60]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x48}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) getsockname$packet(r4, 0x0, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x40000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fedbdf2505000000080004000000000008000100", @ANYRES32=r9, @ANYBLOB="d9e52401435092ab4f8c0cef50d48e2bcab99a3b2a7c19024775613c29b10ea69c88e62f79fb7a97dff51b495a723987515ab5f1afed6814a928fd392d6779206cf23e642bfd9d9ed92e2cf2b98ef2c43411c41d9c1ee090953ec81a6482fd6243749cb504000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) recvmmsg(0xffffffffffffffff, &(0x7f0000006c00)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}, {{&(0x7f00000006c0)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/42, 0x2a}, {&(0x7f0000000880)=""/122, 0x7a}, {&(0x7f0000000ac0)=""/178, 0xb2}, {&(0x7f0000000b80)=""/158, 0x9e}], 0x4, &(0x7f0000000c40)=""/171, 0xab}, 0x9}, {{&(0x7f0000000d00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/13, 0xd}, {&(0x7f0000000d80)=""/112, 0x70}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/194, 0xc2}, {0x0}, {&(0x7f0000000940)=""/29, 0x1d}, {&(0x7f0000000f00)=""/77, 0x4d}], 0x8, &(0x7f0000003040)=""/145, 0x91}, 0x1}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000f80)=""/20, 0x14}], 0x1, &(0x7f0000003140)=""/119, 0x77}, 0x1}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000031c0)=""/189, 0xbd}, {&(0x7f0000003280)=""/59, 0x3b}], 0x2}, 0x1000}, {{&(0x7f0000003300)=@can, 0x80, &(0x7f0000003400)=[{&(0x7f0000003380)=""/78, 0x4e}], 0x1, &(0x7f0000003440)=""/255, 0xff}, 0x2}, {{&(0x7f0000003540)=@xdp, 0x80, &(0x7f0000006a80)=[{&(0x7f00000035c0)=""/168, 0xa8}, {&(0x7f0000003680)=""/111, 0x6f}, {&(0x7f0000003740)=""/95, 0x5f}, {&(0x7f0000004800)=""/27, 0x1b}, {&(0x7f0000004840)=""/53, 0x35}, {&(0x7f0000004880)=""/158, 0x9e}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/44, 0x2c}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/195, 0xc3}], 0xa, &(0x7f0000006b40)=""/136, 0x88}, 0x5}], 0x7, 0x2040000, &(0x7f0000003700)={0x77359400}) 28.100401548s ago: executing program 2 (id=968): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000100000000fdffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000fc01feffb702000008000000b70300200000000085000000ca0000009588452d813c06e7db02cae7c79c665e1f4aac67d70989962a939cf78de8aa5dae7b852c643d3a77910ed21fc6cd4b4b186c9e99b27e171ad23bb993af8a22f8f817f9a9a7c44d26e42806e73243174ac6fb603fe0c6a2c5f612554fe3496a3d9328b1b356459897935f58b20d4bceafd287ef35ed9c51bb9e6a06f8815eae35b0f040bdea0fa04925a6320700d38bdc33c427b763bb8d79f1ad97dcbca75547fa1c8274f7"], &(0x7f0000000000)='GPL\x00', 0x1, 0xfe7, &(0x7f0000002e00)=""/4071, 0x40f00, 0x4}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x20}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x0, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x4, 0x3, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0xfdab, 0xa, 0xaa}]}}]}, 0x78}}, 0x4000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000040900010073797a30000000000900020073797a32"], 0x3518}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x3}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x1403, 0x2, 0x70bd2a, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r4}, 0x38) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0xccfd}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21}, 0x1d) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r6, 0x80000001) connect$phonet_pipe(r6, &(0x7f00000003c0)={0x23, 0x6, 0xff, 0x9}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) 27.757996813s ago: executing program 2 (id=970): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r3, &(0x7f0000000400)="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", 0x1ce, 0x20008045, &(0x7f0000000000)={0xa, 0x2, 0x1000, @empty, 0x7}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000400)="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", 0x1ce, 0x20008045, &(0x7f0000000000)={0xa, 0x2, 0x1000, @empty, 0x7}, 0x1c) listen(r2, 0x39e) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 27.249896556s ago: executing program 2 (id=973): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="0000003b35914c00000000f2ff001e5c00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000000000f0400000000005f00"], 0x0, 0x28}, 0x28) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='rxrpc_notify_socket\x00', r2, 0x0, 0x8001}, 0x18) (async) r3 = socket$inet(0x2, 0x3, 0x14) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x6}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$rds(0x15, 0x5, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r6, 0x5421, &(0x7f0000001100)=0x2000000009) (async, rerun: 32) connect$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x3, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0xa}, {0x4, 0x9, 0x8, 0x873}]}, 0x10) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) 26.388887325s ago: executing program 2 (id=978): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delqdisc={0x64, 0x25, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x7, 0x4}, {0xffff, 0xb}, {0xfff3, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xaf, 0xd1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0x4, 0x7, 0x1, 0x5, 0x800, 0x1}}, {0x6, 0x2, [0x60]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x48}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) getsockname$packet(r4, 0x0, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x40000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fedbdf2505000000080004000000000008000100", @ANYRES32=r9, @ANYBLOB="d9e52401435092ab4f8c0cef50d48e2bcab99a3b2a7c19024775613c29b10ea69c88e62f79fb7a97dff51b495a723987515ab5f1afed6814a928fd392d6779206cf23e642bfd9d9ed92e2cf2b98ef2c43411c41d9c1ee090953ec81a6482fd6243749cb504000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) recvmmsg(0xffffffffffffffff, &(0x7f0000006c00)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}, {{&(0x7f00000006c0)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/42, 0x2a}, {&(0x7f0000000880)=""/122, 0x7a}, {&(0x7f0000000ac0)=""/178, 0xb2}, {&(0x7f0000000b80)=""/158, 0x9e}], 0x4, &(0x7f0000000c40)=""/171, 0xab}, 0x9}, {{&(0x7f0000000d00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/13, 0xd}, {&(0x7f0000000d80)=""/112, 0x70}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/194, 0xc2}, {0x0}, {&(0x7f0000000940)=""/29, 0x1d}, {&(0x7f0000000f00)=""/77, 0x4d}], 0x8, &(0x7f0000003040)=""/145, 0x91}, 0x1}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000f80)=""/20, 0x14}], 0x1, &(0x7f0000003140)=""/119, 0x77}, 0x1}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000031c0)=""/189, 0xbd}, {&(0x7f0000003280)=""/59, 0x3b}], 0x2}, 0x1000}, {{&(0x7f0000003300)=@can, 0x80, &(0x7f0000003400)=[{&(0x7f0000003380)=""/78, 0x4e}], 0x1, &(0x7f0000003440)=""/255, 0xff}, 0x2}, {{&(0x7f0000003540)=@xdp, 0x80, &(0x7f0000006a80)=[{&(0x7f00000035c0)=""/168, 0xa8}, {&(0x7f0000003680)=""/111, 0x6f}, {&(0x7f0000003740)=""/95, 0x5f}, {&(0x7f0000004800)=""/27, 0x1b}, {&(0x7f0000004840)=""/53, 0x35}, {&(0x7f0000004880)=""/158, 0x9e}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/44, 0x2c}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/195, 0xc3}], 0xa, &(0x7f0000006b40)=""/136, 0x88}, 0x5}], 0x7, 0x2040000, &(0x7f0000003700)={0x77359400}) 19.732866653s ago: executing program 1 (id=1050): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 19.585908157s ago: executing program 1 (id=1052): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d616373656300001400028005000b000000000005000f0000feff0008000500", @ANYRES32=r1], 0x4c}}, 0x0) 19.385780151s ago: executing program 1 (id=1057): syz_emit_ethernet(0x76, &(0x7f0000002bc0)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x40, 0x3a, 0x0, @loopback, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x84, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@srh={0x2f, 0x0, 0x4, 0x0, 0xc, 0x28, 0xfe}, @hopopts={0x87}]}}}}}}}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 19.317869296s ago: executing program 1 (id=1058): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001400)={r0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000003000006040000000400000007000000020000000400000004000000fcffffff002e71a0"], 0x0, 0x45, 0x0, 0x1, 0x80000001}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4082, 0xff2}, {0x0}], 0x2}, 0x5}], 0x1, 0x2000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRESDEC=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001440)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48090}, 0x40000) close(r4) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.212169751s ago: executing program 3 (id=1059): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004"], 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x3da}], 0x1, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000700)=@req3={0x6, 0x0, 0x7, 0x8, 0x2, 0x1, 0x1}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000800)={0x7, {{0xa, 0x4e21, 0x6d7, @loopback, 0x8}}, {{0xa, 0x4e20, 0x5, @loopback, 0x6508}}}, 0x108) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000001300", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e6576650000100002800500"], 0x40}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_emit_ethernet(0x6a, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x34, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[@hopopts={0x62, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x8, {0x1, 0x0, 0x2, 0x3}}]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 19.035849855s ago: executing program 3 (id=1061): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 18.913945849s ago: executing program 1 (id=1063): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 18.908811859s ago: executing program 3 (id=1064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800100000000000000f8a18aa14000780080011400000008b05001500060000000500010006000000050005000a00000005000400020000000900020073797a300000000014000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x24048081}, 0x200000000000000) 18.865473362s ago: executing program 0 (id=1065): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) (async) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x8, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x1, 0x5, 0x3, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff}], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x2b, r0, 0x8, &(0x7f0000000280)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xa, 0x3}, 0x10, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x203e69b9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) close(0x4) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000480)=0x6f, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x2d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 18.865168362s ago: executing program 4 (id=1066): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b000000000000fffcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 18.798014856s ago: executing program 3 (id=1067): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000090601080000000000000000484f90010900020073797a32000000000500010007000000180007800c00018008000140a1f7000208001c4000010000"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, 0x8, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x91) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc011000ca5df292fb2458d0df437f1a5d6eb306c7e6a8d40f28381ae75f50119303212949008d79c44c746aa184cee51ba08e9e2fa5a19811244d558ebf788b651f5f9cdbac50036f9d255115113f0037c116d92cb1aa26a0be63bef1b84b1d499e535031bcad3e046882cc000ac20779f7ce09512cd990020a858f8291332d523b09d63fea3e58ccd3d71f0fb7c9d1821c5d7449d2af9858ed1cdb55dae57520c033ae90cc1977b590e19de9e7ed0b27038c00"/194, @ANYRES16=r2, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x4005014}, 0x80) 18.720772904s ago: executing program 0 (id=1068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000004000000000000000300000d000000000f000000030000000100000005000000050000000400006b93794500000000010000000004005e0202000000000000010000000075003807040000000000000e040000000000000000610000"], &(0x7f0000000100)=""/124, 0x70, 0x7c, 0x1, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="130000000800000008000000b826000000040000", @ANYRES32=r1, @ANYBLOB="1ee9807300"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="020000000100"/28], 0x50) 18.719295886s ago: executing program 4 (id=1069): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef) 18.448402629s ago: executing program 4 (id=1070): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)={0x110, 0x22, 0x1, 0x0, 0x0, "", [@nested={0xff, 0x0, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29"]}]}, 0x110}], 0x1}, 0x80) 18.306220084s ago: executing program 3 (id=1071): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex, 0xffffffffffffffff, 0x16, 0x10}, 0x20) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x9, 0x4, 0x2, 0x2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x20000c04) 18.279825047s ago: executing program 4 (id=1072): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x98) 18.130440924s ago: executing program 3 (id=1073): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) close(0x3) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x14, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 18.128214527s ago: executing program 0 (id=1074): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x5, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket(0x1d, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, 0x0, 0x1, 0xfffffefd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x2}}]}, 0x54}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000680)={{0x0, 0x7, 0x48bd, 0x800000, 0x7fff, 0x81, 0x400, 0x5, 0x9, 0x7fff, 0x7fffffff, 0x7, 0x1, 0x7, 0x1}}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602fdff00000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 17.950121649s ago: executing program 4 (id=1075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x6000000}}, 0x48}}, 0x0) 17.867552849s ago: executing program 4 (id=1076): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004a40)=ANY=[@ANYBLOB="280000002b000b000000f9000c00018006001000"/40], 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@allocspi={0x140, 0x16, 0x1, 0x70bd28, 0x25dfdbfb, {{{@in=@broadcast, @in=@multicast2, 0x4e23, 0xf, 0x4e23, 0xe, 0x2, 0x20, 0x0, 0x5e}, {@in6=@local, 0x4d6, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x8, 0x100, 0x5, 0x7, 0x1000, 0x1, 0x0, 0x10000}, {0x2, 0x9, 0x3, 0x195d}, {0x9, 0x6, 0xfffff800}, 0x70bd25, 0x3502, 0xa, 0x1, 0xda, 0xec}, 0x3, 0x32b}, [@algo_crypt={0x48, 0x2, {{'xts-aes-ce\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000500)) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000140)=0xfffffff8, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000000000000000000001000080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x31) r5 = socket(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/17, 0x11}, 0xfffffffe}], 0x1, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd5}, 0x9c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000680)={r10, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}}}, &(0x7f00000003c0)=0x84) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC=r8, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0500000000000000050000000000001c81f9bc4c450000000000fdff"], 0x50) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x4004804) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.494683697s ago: executing program 0 (id=1077): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)=0xfffffffffffffe2b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c000000040a050000000000000000000a0000090900010073797a"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000000)={'gretap0\x00', r6, 0x80, 0x7800, 0x7, 0x1, {{0x8, 0x4, 0x3, 0x38, 0x20, 0x65, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0x1, [{@remote, 0x8}]}]}}}}}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="32a000000000000008001b000000000075375550016fe169699789e16bdaee17362f30eae75c00846716042a6ecece8799c3c10c585597fbda"], 0x28}, 0x1, 0x0, 0x0, 0x20009010}, 0x0) 17.250194767s ago: executing program 0 (id=1078): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619", 0x10}], 0x1, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r3, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x3}], 0x1, 0x2100, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f00000000c0)={'netdevsim0\x00'}) 17.071781873s ago: executing program 0 (id=1079): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x1b, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xb52a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r0, 0x32, 0x0, @val=@netfilter={0xa, 0x0, 0x7}}, 0x20) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x40, r6, 0x1ff}, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x48, 0x0, 0x2}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8815) 15.452855605s ago: executing program 1 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x20c, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0x8000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf2}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xa202}, {0x8, 0x15, 0x64}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0xb}, {0x8, 0x15, 0x7}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x1}, 0x4050) 11.012156567s ago: executing program 32 (id=978): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delqdisc={0x64, 0x25, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0x7, 0x4}, {0xffff, 0xb}, {0xfff3, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xaf, 0xd1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0x4, 0x7, 0x1, 0x5, 0x800, 0x1}}, {0x6, 0x2, [0x60]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x48}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) getsockname$packet(r4, 0x0, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x40000) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fedbdf2505000000080004000000000008000100", @ANYRES32=r9, @ANYBLOB="d9e52401435092ab4f8c0cef50d48e2bcab99a3b2a7c19024775613c29b10ea69c88e62f79fb7a97dff51b495a723987515ab5f1afed6814a928fd392d6779206cf23e642bfd9d9ed92e2cf2b98ef2c43411c41d9c1ee090953ec81a6482fd6243749cb504000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) recvmmsg(0xffffffffffffffff, &(0x7f0000006c00)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}, {{&(0x7f00000006c0)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/42, 0x2a}, {&(0x7f0000000880)=""/122, 0x7a}, {&(0x7f0000000ac0)=""/178, 0xb2}, {&(0x7f0000000b80)=""/158, 0x9e}], 0x4, &(0x7f0000000c40)=""/171, 0xab}, 0x9}, {{&(0x7f0000000d00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/13, 0xd}, {&(0x7f0000000d80)=""/112, 0x70}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/194, 0xc2}, {0x0}, {&(0x7f0000000940)=""/29, 0x1d}, {&(0x7f0000000f00)=""/77, 0x4d}], 0x8, &(0x7f0000003040)=""/145, 0x91}, 0x1}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000f80)=""/20, 0x14}], 0x1, &(0x7f0000003140)=""/119, 0x77}, 0x1}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000031c0)=""/189, 0xbd}, {&(0x7f0000003280)=""/59, 0x3b}], 0x2}, 0x1000}, {{&(0x7f0000003300)=@can, 0x80, &(0x7f0000003400)=[{&(0x7f0000003380)=""/78, 0x4e}], 0x1, &(0x7f0000003440)=""/255, 0xff}, 0x2}, {{&(0x7f0000003540)=@xdp, 0x80, &(0x7f0000006a80)=[{&(0x7f00000035c0)=""/168, 0xa8}, {&(0x7f0000003680)=""/111, 0x6f}, {&(0x7f0000003740)=""/95, 0x5f}, {&(0x7f0000004800)=""/27, 0x1b}, {&(0x7f0000004840)=""/53, 0x35}, {&(0x7f0000004880)=""/158, 0x9e}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/44, 0x2c}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/195, 0xc3}], 0xa, &(0x7f0000006b40)=""/136, 0x88}, 0x5}], 0x7, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.502785433s ago: executing program 33 (id=1073): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) close(0x3) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x14, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 2.468327681s ago: executing program 34 (id=1076): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004a40)=ANY=[@ANYBLOB="280000002b000b000000f9000c00018006001000"/40], 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@allocspi={0x140, 0x16, 0x1, 0x70bd28, 0x25dfdbfb, {{{@in=@broadcast, @in=@multicast2, 0x4e23, 0xf, 0x4e23, 0xe, 0x2, 0x20, 0x0, 0x5e}, {@in6=@local, 0x4d6, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x8, 0x100, 0x5, 0x7, 0x1000, 0x1, 0x0, 0x10000}, {0x2, 0x9, 0x3, 0x195d}, {0x9, 0x6, 0xfffff800}, 0x70bd25, 0x3502, 0xa, 0x1, 0xda, 0xec}, 0x3, 0x32b}, [@algo_crypt={0x48, 0x2, {{'xts-aes-ce\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000500)) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000140)=0xfffffff8, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000000000000000000000000001000080", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x31) r5 = socket(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/17, 0x11}, 0xfffffffe}], 0x1, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd5}, 0x9c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000680)={r10, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}}}, &(0x7f00000003c0)=0x84) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC=r8, @ANYBLOB="ff0300"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0500000000000000050000000000001c81f9bc4c450000000000fdff"], 0x50) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x4004804) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.000882216s ago: executing program 35 (id=1079): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x1b, &(0x7f0000000800)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xb52a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r0, 0x32, 0x0, @val=@netfilter={0xa, 0x0, 0x7}}, 0x20) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x40, r6, 0x1ff}, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0xa9, 0x0, 0xfffff034}, {0x48, 0x0, 0x2}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8815) 0s ago: executing program 36 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fec000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x20c, r2, 0x4, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0x8000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf2}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xa202}, {0x8, 0x15, 0x64}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0xb}, {0x8, 0x15, 0x7}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x1}, 0x4050) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.255' (ED25519) to the list of known hosts. [ 80.298395][ T5852] cgroup: Unknown subsys name 'net' [ 80.453847][ T5852] cgroup: Unknown subsys name 'cpuset' [ 80.462789][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.206601][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.902253][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.915846][ T5872] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.924550][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.933255][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.939963][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.942163][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.954872][ T5872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.956003][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.964069][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.971520][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.976707][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.985478][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.999680][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.006983][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.008501][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.016192][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.022623][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.029347][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.037859][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.044457][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.063707][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.067761][ T5880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.071757][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.092083][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.100691][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.740528][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 85.863104][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 85.942823][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 86.099383][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.106869][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.114755][ T5862] bridge_slave_0: entered allmulticast mode [ 86.123133][ T5862] bridge_slave_0: entered promiscuous mode [ 86.137204][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.144628][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.151921][ T5862] bridge_slave_1: entered allmulticast mode [ 86.159544][ T5862] bridge_slave_1: entered promiscuous mode [ 86.184695][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 86.255822][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.286159][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 86.308179][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.325136][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.332893][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.340258][ T5871] bridge_slave_0: entered allmulticast mode [ 86.347886][ T5871] bridge_slave_0: entered promiscuous mode [ 86.362676][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.370326][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.377596][ T5871] bridge_slave_1: entered allmulticast mode [ 86.386495][ T5871] bridge_slave_1: entered promiscuous mode [ 86.478246][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.485501][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.493119][ T5864] bridge_slave_0: entered allmulticast mode [ 86.501747][ T5864] bridge_slave_0: entered promiscuous mode [ 86.533226][ T5862] team0: Port device team_slave_0 added [ 86.567578][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.575545][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.583449][ T5864] bridge_slave_1: entered allmulticast mode [ 86.592234][ T5864] bridge_slave_1: entered promiscuous mode [ 86.616763][ T5862] team0: Port device team_slave_1 added [ 86.660849][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.674617][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.760482][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.767668][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.775900][ T5878] bridge_slave_0: entered allmulticast mode [ 86.783937][ T5878] bridge_slave_0: entered promiscuous mode [ 86.793389][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.801541][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.808884][ T5878] bridge_slave_1: entered allmulticast mode [ 86.816437][ T5878] bridge_slave_1: entered promiscuous mode [ 86.831805][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.855403][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.862575][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.888963][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.950043][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.961627][ T5871] team0: Port device team_slave_0 added [ 86.983226][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.990870][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.017515][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.046602][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.056217][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.064502][ T5865] bridge_slave_0: entered allmulticast mode [ 87.076511][ T5865] bridge_slave_0: entered promiscuous mode [ 87.087541][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.098614][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.107467][ T5865] bridge_slave_1: entered allmulticast mode [ 87.121845][ T5880] Bluetooth: hci1: command tx timeout [ 87.121851][ T5867] Bluetooth: hci0: command tx timeout [ 87.122114][ T5877] Bluetooth: hci2: command tx timeout [ 87.127538][ T5183] Bluetooth: hci3: command tx timeout [ 87.137082][ T5865] bridge_slave_1: entered promiscuous mode [ 87.157688][ T5871] team0: Port device team_slave_1 added [ 87.199927][ T5183] Bluetooth: hci4: command tx timeout [ 87.234040][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.307955][ T5864] team0: Port device team_slave_0 added [ 87.351881][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.383641][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.392468][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.419488][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.433073][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.441045][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.467377][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.480573][ T5864] team0: Port device team_slave_1 added [ 87.513760][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.565742][ T5862] hsr_slave_0: entered promiscuous mode [ 87.573279][ T5862] hsr_slave_1: entered promiscuous mode [ 87.597873][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.650467][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.657659][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.683673][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.699402][ T5878] team0: Port device team_slave_0 added [ 87.708664][ T5878] team0: Port device team_slave_1 added [ 87.729437][ T5865] team0: Port device team_slave_0 added [ 87.741581][ T5871] hsr_slave_0: entered promiscuous mode [ 87.748061][ T5871] hsr_slave_1: entered promiscuous mode [ 87.754685][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 87.761182][ T5871] Cannot create hsr debugfs directory [ 87.776338][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.783818][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.810699][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.850173][ T5865] team0: Port device team_slave_1 added [ 87.905562][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.912996][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.945577][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.999134][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.006872][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.032887][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.081172][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.088155][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.114353][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.170454][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.177887][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.204508][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.236151][ T5864] hsr_slave_0: entered promiscuous mode [ 88.243218][ T5864] hsr_slave_1: entered promiscuous mode [ 88.271232][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 88.277045][ T5864] Cannot create hsr debugfs directory [ 88.367991][ T5878] hsr_slave_0: entered promiscuous mode [ 88.375200][ T5878] hsr_slave_1: entered promiscuous mode [ 88.382126][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 88.387870][ T5878] Cannot create hsr debugfs directory [ 88.545111][ T5865] hsr_slave_0: entered promiscuous mode [ 88.552026][ T5865] hsr_slave_1: entered promiscuous mode [ 88.558105][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 88.564195][ T5865] Cannot create hsr debugfs directory [ 88.948349][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.982128][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.001368][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.024851][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.091854][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.112474][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.127193][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.138521][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.201066][ T5183] Bluetooth: hci3: command tx timeout [ 89.201076][ T5877] Bluetooth: hci1: command tx timeout [ 89.210478][ T5877] Bluetooth: hci2: command tx timeout [ 89.212654][ T5880] Bluetooth: hci0: command tx timeout [ 89.266316][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.280858][ T5880] Bluetooth: hci4: command tx timeout [ 89.298642][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.336497][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.351964][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.443612][ T5878] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.463978][ T5878] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.477080][ T5878] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.488756][ T5878] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.569024][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.654662][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.671165][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.683294][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.697480][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.726449][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.741801][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.749100][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.765427][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.772861][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.822778][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.885877][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.914998][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.928809][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.936360][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.993467][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.001228][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.068277][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.112478][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.119698][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.159859][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.167511][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.276333][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.368569][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.389248][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.432974][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.440209][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.455613][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.462868][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.554412][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.624061][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.631507][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.650556][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.657791][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.688335][ T5878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.733801][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.962120][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.066041][ T5862] veth0_vlan: entered promiscuous mode [ 91.097576][ T5862] veth1_vlan: entered promiscuous mode [ 91.214436][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.282110][ T5880] Bluetooth: hci0: command tx timeout [ 91.287809][ T5880] Bluetooth: hci3: command tx timeout [ 91.293361][ T5183] Bluetooth: hci2: command tx timeout [ 91.293879][ T5877] Bluetooth: hci1: command tx timeout [ 91.363062][ T5877] Bluetooth: hci4: command tx timeout [ 91.378773][ T5862] veth0_macvtap: entered promiscuous mode [ 91.397112][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.434378][ T5862] veth1_macvtap: entered promiscuous mode [ 91.458272][ T5864] veth0_vlan: entered promiscuous mode [ 91.566441][ T5864] veth1_vlan: entered promiscuous mode [ 91.588713][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.625246][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.718855][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.730554][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.739321][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.759728][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.776618][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.818509][ T5878] veth0_vlan: entered promiscuous mode [ 91.854606][ T5864] veth0_macvtap: entered promiscuous mode [ 91.879380][ T5878] veth1_vlan: entered promiscuous mode [ 91.889113][ T5864] veth1_macvtap: entered promiscuous mode [ 91.931958][ T5871] veth0_vlan: entered promiscuous mode [ 91.967155][ T5871] veth1_vlan: entered promiscuous mode [ 91.995255][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.028029][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.038624][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.064996][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.100936][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.126868][ T2992] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.149642][ T2992] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.158831][ T2992] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.173765][ T24] cfg80211: failed to load regulatory.db [ 92.192628][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.201718][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.223896][ T5865] veth0_vlan: entered promiscuous mode [ 92.246371][ T5878] veth0_macvtap: entered promiscuous mode [ 92.256968][ T5865] veth1_vlan: entered promiscuous mode [ 92.276758][ T5871] veth0_macvtap: entered promiscuous mode [ 92.288443][ T5871] veth1_macvtap: entered promiscuous mode [ 92.337782][ T5878] veth1_macvtap: entered promiscuous mode [ 92.364572][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.375971][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.429347][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.511880][ T5865] veth0_macvtap: entered promiscuous mode [ 92.534466][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.553187][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.563489][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.576723][ T5865] veth1_macvtap: entered promiscuous mode [ 92.598528][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.610366][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.628525][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.644527][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.695190][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.727367][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.749288][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.767501][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.781692][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.821602][ T2992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.833554][ T2992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.843340][ T2992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.886434][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.895652][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.925776][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.024389][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.059502][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.087681][ T5991] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7'. [ 93.126548][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.174038][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.276670][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.313441][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.360041][ T5877] Bluetooth: hci1: command tx timeout [ 93.361220][ T5867] Bluetooth: hci3: command tx timeout [ 93.365508][ T5877] Bluetooth: hci2: command tx timeout [ 93.371098][ T5880] Bluetooth: hci0: command tx timeout [ 93.396695][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.434495][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.444053][ T5999] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 93.453681][ T5867] Bluetooth: hci4: command tx timeout [ 93.461762][ T5998] IPVS: stopping backup sync thread 5999 ... [ 93.534580][ T6001] netlink: 260 bytes leftover after parsing attributes in process `syz.0.9'. [ 93.572379][ T6001] Zero length message leads to an empty skb [ 93.594482][ T6001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'. [ 93.612336][ T6001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9'. [ 93.738731][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.767369][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.784173][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.801587][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.843104][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.884835][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.944827][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.954846][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.971978][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.148674][ T6011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11'. [ 94.505475][ T6020] vlan2: entered allmulticast mode [ 94.525520][ T6020] hsr0: entered allmulticast mode [ 94.551699][ T6020] hsr_slave_0: entered allmulticast mode [ 94.573303][ T6020] hsr_slave_1: entered allmulticast mode [ 95.145490][ T6027] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 95.455401][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 95.525767][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 95.845160][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.161929][ T6061] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 96.469050][ T6076] warning: `syz.3.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.778646][ T6070] syzkaller1: entered promiscuous mode [ 96.792795][ T6070] syzkaller1: entered allmulticast mode [ 97.250519][ T6099] nbd: illegal input index 65508 [ 97.725769][ T6122] netlink: 'syz.4.38': attribute type 10 has an invalid length. [ 97.860381][ T6120] can: request_module (can-proto-0) failed. [ 97.874440][ T6122] team0: Port device dummy0 added [ 97.947567][ T6131] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 98.296313][ T6138] IPVS: stopping backup sync thread 6141 ... [ 98.307907][ T6141] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 98.371821][ T6138] __nla_validate_parse: 7 callbacks suppressed [ 98.371841][ T6138] netlink: 260 bytes leftover after parsing attributes in process `syz.0.44'. [ 98.393630][ T6138] netlink: 20 bytes leftover after parsing attributes in process `syz.0.44'. [ 98.403993][ T6138] netlink: 32 bytes leftover after parsing attributes in process `syz.0.44'. [ 98.478576][ T6150] netlink: 'syz.2.46': attribute type 13 has an invalid length. [ 98.520252][ T6150] netlink: 'syz.2.46': attribute type 17 has an invalid length. [ 98.600327][ T6146] lo: entered allmulticast mode [ 98.642917][ T6148] bridge1: entered promiscuous mode [ 98.647118][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 98.648575][ T6148] bridge1: entered allmulticast mode [ 98.694281][ T6148] team0: Port device bridge1 added [ 98.721129][ T6140] lo: left allmulticast mode [ 98.943916][ T6150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.984714][ T6167] netlink: 'syz.4.52': attribute type 4 has an invalid length. [ 99.035108][ T6165] netlink: 'syz.4.52': attribute type 4 has an invalid length. [ 99.613371][ T6179] netlink: 'syz.0.53': attribute type 10 has an invalid length. [ 99.702665][ T6179] team0: Port device dummy0 added [ 99.789965][ T6183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.56'. [ 99.811732][ T6183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.56'. [ 99.860257][ T6176] can: request_module (can-proto-0) failed. [ 100.132090][ T6194] netlink: 'syz.4.61': attribute type 30 has an invalid length. [ 100.313709][ T6196] tipc: Enabling of bearer rejected, failed to enable media [ 100.723454][ C0] Illegal XDP return value 4294967282 on prog (id 14) dev veth0_to_batadv, expect packet loss! [ 100.774283][ T6219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.816568][ T6220] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 100.816959][ T6217] IPVS: stopping backup sync thread 6220 ... [ 100.889550][ T6222] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 100.899031][ T6217] netlink: 260 bytes leftover after parsing attributes in process `syz.0.69'. [ 100.965488][ T6217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.69'. [ 100.976492][ T6217] netlink: 32 bytes leftover after parsing attributes in process `syz.0.69'. [ 101.005405][ T6224] syz.4.74 uses obsolete (PF_INET,SOCK_PACKET) [ 101.043779][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.74'. [ 101.269207][ T6234] vlan2: entered allmulticast mode [ 101.657389][ T6231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.659086][ T6242] netlink: 'syz.4.80': attribute type 30 has an invalid length. [ 101.894830][ T6247] tipc: Enabling of bearer rejected, failed to enable media [ 101.965882][ T6249] tipc: Enabling of bearer rejected, failed to enable media [ 103.277700][ T6284] pim6reg1: entered promiscuous mode [ 103.284784][ T6284] pim6reg1: entered allmulticast mode [ 103.736836][ T6297] __nla_validate_parse: 3 callbacks suppressed [ 103.736857][ T6297] netlink: 256 bytes leftover after parsing attributes in process `syz.0.100'. [ 103.883664][ T6304] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 103.920470][ T6304] vlan1: entered promiscuous mode [ 103.925803][ T6304] vlan1: entered allmulticast mode [ 103.951098][ T6304] veth0_vlan: entered allmulticast mode [ 104.224824][ T6318] netlink: 'syz.4.105': attribute type 1 has an invalid length. [ 104.240226][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 104.798193][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.807034][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.032009][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.053578][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.294597][ T6313] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 105.373414][ T2992] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.414229][ T2992] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.437935][ T2992] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.466438][ T2992] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.619499][ T6342] tipc: Started in network mode [ 105.673322][ T6342] tipc: Node identity 9ee552d54bab, cluster identity 4711 [ 105.688387][ T6342] tipc: Enabled bearer , priority 0 [ 105.695550][ T6350] syzkaller0: entered promiscuous mode [ 105.708973][ T6350] syzkaller0: entered allmulticast mode [ 105.941689][ T6342] tipc: Resetting bearer [ 106.061035][ T6342] tipc: Disabling bearer [ 107.872331][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.124'. [ 107.887828][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.124'. [ 108.334689][ T6410] netlink: 128 bytes leftover after parsing attributes in process `syz.1.128'. [ 108.405024][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.480207][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.524919][ T6412] netlink: 'syz.1.128': attribute type 11 has an invalid length. [ 108.603182][ T6410] syz.1.128 (6410) used greatest stack depth: 17864 bytes left [ 109.720141][ T6432] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.017735][ T6245] Set syz1 is full, maxelem 65536 reached [ 110.315288][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 110.751026][ T5920] IPVS: starting estimator thread 0... [ 110.840111][ T6453] IPVS: using max 24 ests per chain, 57600 per kthread [ 110.895564][ T6461] netlink: 'syz.1.148': attribute type 5 has an invalid length. [ 111.078350][ T6465] wireguard0: entered promiscuous mode [ 111.084437][ T6465] wireguard0: entered allmulticast mode [ 111.095962][ T6465] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 111.103937][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 111.107145][ T6468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 111.180622][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 111.263700][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 111.308691][ T6473] netlink: 52 bytes leftover after parsing attributes in process `syz.1.152'. [ 111.424979][ T6480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.110821][ T6504] netlink: 'syz.1.160': attribute type 1 has an invalid length. [ 112.119253][ T6504] netlink: 'syz.1.160': attribute type 2 has an invalid length. [ 112.127596][ T6504] netlink: 'syz.1.160': attribute type 2 has an invalid length. [ 112.137052][ T6504] netlink: 'syz.1.160': attribute type 2 has an invalid length. [ 112.199267][ T6504] netlink: 'syz.1.160': attribute type 2 has an invalid length. [ 112.223945][ T6505] RDS: rds_bind could not find a transport for ::ffff:172.20.20.43, load rds_tcp or rds_rdma? [ 112.270503][ T6504] netlink: 'syz.1.160': attribute type 2 has an invalid length. [ 112.407441][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.160'. [ 112.727149][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.166'. [ 112.741308][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.166'. [ 113.458263][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.174'. [ 113.854766][ T6557] vlan2: entered allmulticast mode [ 114.467243][ T6575] netlink: 'syz.4.183': attribute type 1 has an invalid length. [ 115.519668][ T6605] __nla_validate_parse: 2 callbacks suppressed [ 115.519687][ T6605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 115.529547][ T6607] vlan2: entered allmulticast mode [ 115.603962][ T6607] hsr0: entered allmulticast mode [ 115.609424][ T6607] hsr_slave_0: entered allmulticast mode [ 115.624062][ T6607] hsr_slave_1: entered allmulticast mode [ 115.720537][ T6612] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 115.728997][ T6612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.194'. [ 115.793198][ T6611] bridge_slave_0: left allmulticast mode [ 115.840614][ T6611] bridge_slave_0: left promiscuous mode [ 115.846859][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.904321][ T6611] bridge_slave_1: left allmulticast mode [ 115.921458][ T6611] bridge_slave_1: left promiscuous mode [ 115.927318][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.990637][ T6611] bond0: (slave bond_slave_0): Releasing backup interface [ 116.027984][ T6618] FAULT_INJECTION: forcing a failure. [ 116.027984][ T6618] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.073133][ T6611] bond0: (slave bond_slave_1): Releasing backup interface [ 116.075452][ T6618] CPU: 0 UID: 0 PID: 6618 Comm: syz.3.196 Not tainted syzkaller #0 PREEMPT(full) [ 116.075477][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.075487][ T6618] Call Trace: [ 116.075507][ T6618] [ 116.075515][ T6618] dump_stack_lvl+0x189/0x250 [ 116.075541][ T6618] ? __pfx____ratelimit+0x10/0x10 [ 116.075560][ T6618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.075581][ T6618] ? __pfx__printk+0x10/0x10 [ 116.075605][ T6618] ? __might_fault+0xb0/0x130 [ 116.075638][ T6618] should_fail_ex+0x414/0x560 [ 116.075666][ T6618] _copy_from_user+0x2d/0xb0 [ 116.075686][ T6618] ___sys_sendmsg+0x158/0x2a0 [ 116.075710][ T6618] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.075768][ T6618] ? __fget_files+0x2a/0x420 [ 116.075782][ T6618] ? __fget_files+0x3a0/0x420 [ 116.075807][ T6618] __x64_sys_sendmsg+0x19b/0x260 [ 116.075830][ T6618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.075859][ T6618] ? __pfx_ksys_write+0x10/0x10 [ 116.075878][ T6618] ? rcu_is_watching+0x15/0xb0 [ 116.075900][ T6618] ? do_syscall_64+0xbe/0x3b0 [ 116.075923][ T6618] do_syscall_64+0xfa/0x3b0 [ 116.075939][ T6618] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.075956][ T6618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.075972][ T6618] ? clear_bhb_loop+0x60/0xb0 [ 116.075993][ T6618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.076009][ T6618] RIP: 0033:0x7f50e158ebe9 [ 116.076026][ T6618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.076038][ T6618] RSP: 002b:00007f50df7ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.076057][ T6618] RAX: ffffffffffffffda RBX: 00007f50e17c5fa0 RCX: 00007f50e158ebe9 [ 116.076069][ T6618] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000010 [ 116.076079][ T6618] RBP: 00007f50df7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 116.076090][ T6618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.076099][ T6618] R13: 00007f50e17c6038 R14: 00007f50e17c5fa0 R15: 00007ffccac4c4a8 [ 116.076129][ T6618] [ 116.317242][ T6611] team0: Port device team_slave_0 removed [ 116.333085][ T6611] team0: Port device team_slave_1 removed [ 116.340588][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.350989][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.361852][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.369279][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.395392][ T6612] batman_adv: batadv0: Adding interface: virt_wifi0 [ 116.404337][ T6612] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.441736][ T6612] batman_adv: batadv0: Interface activated: virt_wifi0 [ 116.454977][ T6613] netlink: 68 bytes leftover after parsing attributes in process `syz.2.194'. [ 116.528912][ T6622] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.766757][ T6622] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.963955][ T6622] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.037340][ T6356] Set syz1 is full, maxelem 65536 reached [ 117.162223][ T6622] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.265305][ T6644] netlink: 32 bytes leftover after parsing attributes in process `syz.0.209'. [ 117.501298][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.656547][ T2984] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.687274][ T2984] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.747310][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.827567][ T6671] netlink: 'syz.1.219': attribute type 1 has an invalid length. [ 117.881659][ T6671] netlink: 'syz.1.219': attribute type 11 has an invalid length. [ 117.917079][ T6671] netlink: 220 bytes leftover after parsing attributes in process `syz.1.219'. [ 118.260108][ T6693] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 118.266348][ T6693] dvmrp1: linktype set to 773 [ 118.385493][ T6697] syz_tun: entered allmulticast mode [ 118.419295][ T6695] syz_tun: left allmulticast mode [ 119.255293][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.236'. [ 119.281503][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.236'. [ 119.323004][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 119.349412][ T6736] team0: entered promiscuous mode [ 119.367130][ T6736] team_slave_0: entered promiscuous mode [ 119.386339][ T6736] team_slave_1: entered promiscuous mode [ 119.394748][ T6736] dummy0: entered promiscuous mode [ 119.403249][ T6736] bond0: entered promiscuous mode [ 119.408721][ T6736] bond_slave_0: entered promiscuous mode [ 119.419064][ T6736] bond_slave_1: entered promiscuous mode [ 119.428566][ T6736] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 119.535420][ T6747] syz_tun: entered allmulticast mode [ 119.543946][ T6746] syz_tun: left allmulticast mode [ 119.731783][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.242'. [ 119.754239][ T6755] netlink: 40 bytes leftover after parsing attributes in process `syz.4.240'. [ 119.880586][ T6761] netlink: 'syz.3.243': attribute type 2 has an invalid length. [ 119.977412][ T6761] ave_0: entered promiscuous mode [ 120.142873][ T6767] tipc: Started in network mode [ 120.185020][ T6767] tipc: Node identity 464c761c664a, cluster identity 4711 [ 120.209194][ T6767] tipc: Enabled bearer , priority 0 [ 120.229509][ T6775] syzkaller0: entered promiscuous mode [ 120.245868][ T6775] syzkaller0: entered allmulticast mode [ 120.364964][ T6766] tipc: Resetting bearer [ 120.496969][ T6766] tipc: Disabling bearer [ 120.739073][ T6793] __nla_validate_parse: 2 callbacks suppressed [ 120.739093][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.257'. [ 120.757729][ T6793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.257'. [ 120.792088][ T6793] dummy0: entered promiscuous mode [ 120.798370][ T6793] team0: entered promiscuous mode [ 120.804025][ T6793] team_slave_0: entered promiscuous mode [ 120.812315][ T6793] team_slave_1: entered promiscuous mode [ 120.819331][ T6793] debugfs: 'hsr1' already exists in 'hsr' [ 120.825491][ T6793] Cannot create hsr debugfs directory [ 121.170683][ T6807] netlink: 'syz.1.262': attribute type 2 has an invalid length. [ 121.196517][ T6807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.262'. [ 121.305931][ T6813] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 121.398871][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.263'. [ 121.455538][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.263'. [ 122.037383][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'. [ 122.060124][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'. [ 122.148719][ T6834] dummy0: entered promiscuous mode [ 122.175335][ T6834] team0: entered promiscuous mode [ 122.189078][ T6834] debugfs: 'hsr1' already exists in 'hsr' [ 122.198085][ T6834] Cannot create hsr debugfs directory [ 122.203778][ T6834] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 122.870968][ T6859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.281'. [ 123.110071][ T6885] netlink: 'syz.0.286': attribute type 4 has an invalid length. [ 123.148364][ T6886] FAULT_INJECTION: forcing a failure. [ 123.148364][ T6886] name failslab, interval 1, probability 0, space 0, times 1 [ 123.161513][ T6886] CPU: 1 UID: 0 PID: 6886 Comm: syz.2.287 Not tainted syzkaller #0 PREEMPT(full) [ 123.161540][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.161550][ T6886] Call Trace: [ 123.161558][ T6886] [ 123.161567][ T6886] dump_stack_lvl+0x189/0x250 [ 123.161606][ T6886] ? __pfx____ratelimit+0x10/0x10 [ 123.161626][ T6886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.161648][ T6886] ? __pfx__printk+0x10/0x10 [ 123.161675][ T6886] ? skb_network_protocol+0x4fe/0x760 [ 123.161699][ T6886] ? __lock_acquire+0xab9/0xd20 [ 123.161736][ T6886] should_fail_ex+0x414/0x560 [ 123.161767][ T6886] should_failslab+0xa8/0x100 [ 123.161797][ T6886] kmem_cache_alloc_noprof+0x73/0x3c0 [ 123.161822][ T6886] ? skb_clone+0x212/0x3a0 [ 123.161857][ T6886] skb_clone+0x212/0x3a0 [ 123.161877][ T6886] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 123.161900][ T6886] dev_queue_xmit_nit+0x416/0xcc0 [ 123.161921][ T6886] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 123.161955][ T6886] dev_hard_start_xmit+0x1be/0x830 [ 123.161999][ T6886] __dev_queue_xmit+0x1b8d/0x3b50 [ 123.162036][ T6886] ? __dev_queue_xmit+0x27b/0x3b50 [ 123.162079][ T6886] ? __pfx___dev_queue_xmit+0x10/0x10 [ 123.162120][ T6886] ? __copy_skb_header+0xa7/0x550 [ 123.162144][ T6886] ? __asan_memcpy+0x40/0x70 [ 123.162166][ T6886] ? __skb_clone+0x63/0x7a0 [ 123.162194][ T6886] ? __skb_clone+0x483/0x7a0 [ 123.162226][ T6886] ? skb_clone+0x246/0x3a0 [ 123.162253][ T6886] __netlink_deliver_tap+0x5ad/0x850 [ 123.162295][ T6886] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.162316][ T6886] netlink_deliver_tap+0x19c/0x1b0 [ 123.162356][ T6886] netlink_unicast+0x7fa/0x9e0 [ 123.162395][ T6886] ? __pfx_netlink_unicast+0x10/0x10 [ 123.162426][ T6886] ? netlink_sendmsg+0x642/0xb30 [ 123.162443][ T6886] ? skb_put+0x11b/0x210 [ 123.162467][ T6886] netlink_sendmsg+0x805/0xb30 [ 123.162499][ T6886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.162523][ T6886] ? aa_sock_msg_perm+0xf1/0x1d0 [ 123.162544][ T6886] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 123.162570][ T6886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.162607][ T6886] __sock_sendmsg+0x21c/0x270 [ 123.162645][ T6886] ____sys_sendmsg+0x505/0x830 [ 123.162676][ T6886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.162710][ T6886] ? import_iovec+0x74/0xa0 [ 123.162737][ T6886] ___sys_sendmsg+0x21f/0x2a0 [ 123.162763][ T6886] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.162831][ T6886] ? __fget_files+0x2a/0x420 [ 123.162847][ T6886] ? __fget_files+0x3a0/0x420 [ 123.162877][ T6886] __x64_sys_sendmsg+0x19b/0x260 [ 123.162903][ T6886] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.162938][ T6886] ? __pfx_ksys_write+0x10/0x10 [ 123.162960][ T6886] ? rcu_is_watching+0x15/0xb0 [ 123.162986][ T6886] ? do_syscall_64+0xbe/0x3b0 [ 123.163012][ T6886] do_syscall_64+0xfa/0x3b0 [ 123.163034][ T6886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.163052][ T6886] ? asm_sysvec_call_function_single+0x1a/0x20 [ 123.163070][ T6886] ? clear_bhb_loop+0x60/0xb0 [ 123.163093][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.163110][ T6886] RIP: 0033:0x7fb2ec18ebe9 [ 123.163126][ T6886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.163139][ T6886] RSP: 002b:00007fb2ed0c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.163158][ T6886] RAX: ffffffffffffffda RBX: 00007fb2ec3c5fa0 RCX: 00007fb2ec18ebe9 [ 123.163170][ T6886] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000010 [ 123.163180][ T6886] RBP: 00007fb2ed0c5090 R08: 0000000000000000 R09: 0000000000000000 [ 123.163190][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.163199][ T6886] R13: 00007fb2ec3c6038 R14: 00007fb2ec3c5fa0 R15: 00007ffc0cf1b228 [ 123.163228][ T6886] [ 123.164616][ T6887] netlink: 'syz.0.286': attribute type 4 has an invalid length. [ 123.178965][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'. [ 123.573976][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'. [ 123.663948][ T6878] wg1 speed is unknown, defaulting to 1000 [ 123.763476][ T6878] wg1 speed is unknown, defaulting to 1000 [ 123.788166][ T6878] wg1 speed is unknown, defaulting to 1000 [ 123.836776][ T6878] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.898055][ T6878] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 124.014073][ T6878] wg1 speed is unknown, defaulting to 1000 [ 124.074508][ T6878] wg1 speed is unknown, defaulting to 1000 [ 124.124029][ T6878] wg1 speed is unknown, defaulting to 1000 [ 124.152267][ T6878] wg1 speed is unknown, defaulting to 1000 [ 124.271376][ T6878] wg1 speed is unknown, defaulting to 1000 [ 124.330912][ T6913] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 125.092799][ T6942] delete_channel: no stack [ 125.136413][ T2992] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.189557][ T6946] team0: entered promiscuous mode [ 125.214774][ T6946] team_slave_0: entered promiscuous mode [ 125.233285][ T6946] team_slave_1: entered promiscuous mode [ 125.253794][ T6946] bond0: entered promiscuous mode [ 125.271848][ T6946] bond_slave_0: entered promiscuous mode [ 125.280455][ T6946] bond_slave_1: entered promiscuous mode [ 125.306126][ T6946] debugfs: 'hsr1' already exists in 'hsr' [ 125.317175][ T6946] Cannot create hsr debugfs directory [ 125.324169][ T6946] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 125.338112][ T6946] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 125.350279][ T6954] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 125.374227][ T6946] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 125.386071][ T2992] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.409500][ T2992] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.457829][ T6953] wireguard0: entered promiscuous mode [ 125.470834][ T6953] wireguard0: entered allmulticast mode [ 125.490527][ T2992] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.633969][ T6961] bridge_slave_0: left allmulticast mode [ 125.659939][ T6961] bridge_slave_0: left promiscuous mode [ 125.681385][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.761586][ T6961] bridge_slave_1: left allmulticast mode [ 125.781453][ T6961] bridge_slave_1: left promiscuous mode [ 125.787490][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.836706][ T6961] bond0: (slave bond_slave_0): Releasing backup interface [ 125.894004][ T6961] bond_slave_0: left promiscuous mode [ 125.915897][ T6961] bond0: (slave bond_slave_1): Releasing backup interface [ 125.944915][ T6961] bond_slave_1: left promiscuous mode [ 125.964765][ T6961] team_slave_0: left promiscuous mode [ 125.986383][ T6961] team0: Port device team_slave_0 removed [ 125.987840][ T6980] __nla_validate_parse: 11 callbacks suppressed [ 125.987857][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 126.003861][ T6961] team_slave_1: left promiscuous mode [ 126.055701][ T6961] team0: Port device team_slave_1 removed [ 126.078316][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.109104][ T6961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.136709][ T6961] team0: Port device bridge1 removed [ 126.162843][ T6963] vlan0: entered promiscuous mode [ 126.215435][ T6964] bridge_slave_0: left allmulticast mode [ 126.245655][ T6964] bridge_slave_0: left promiscuous mode [ 126.266130][ T6964] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.298851][ T6964] bridge_slave_1: left allmulticast mode [ 126.320022][ T6964] bridge_slave_1: left promiscuous mode [ 126.325985][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.371274][ T6964] bond0: (slave bond_slave_0): Releasing backup interface [ 126.407847][ T6964] bond0: (slave bond_slave_1): Releasing backup interface [ 126.432569][ T6964] team_slave_0: left promiscuous mode [ 126.446959][ T6964] team0: Port device team_slave_0 removed [ 126.454702][ T6964] team_slave_1: left promiscuous mode [ 126.475253][ T6964] team0: Port device team_slave_1 removed [ 126.492075][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.500385][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.521068][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.540820][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.241243][ T7008] netlink: 76 bytes leftover after parsing attributes in process `syz.0.326'. [ 127.260490][ T7005] block nbd0: server does not support multiple connections per device. [ 127.276719][ T7005] block nbd0: shutting down sockets [ 127.323271][ T7004] netlink: 256 bytes leftover after parsing attributes in process `syz.0.326'. [ 127.492998][ T7014] netlink: 68 bytes leftover after parsing attributes in process `syz.2.331'. [ 127.641805][ T7022] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.333'. [ 127.722724][ T7026] netlink: 'syz.1.336': attribute type 3 has an invalid length. [ 127.738687][ T7026] netlink: 'syz.1.336': attribute type 3 has an invalid length. [ 127.747452][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.336'. [ 127.923765][ T7032] vlan2: entered allmulticast mode [ 128.006281][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 128.188492][ T5935] IPVS: starting estimator thread 0... [ 128.290116][ T7048] IPVS: using max 28 ests per chain, 67200 per kthread [ 128.364360][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 128.716659][ T7059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.347'. [ 129.482770][ T7091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.355'. [ 129.508100][ T5935] IPVS: starting estimator thread 0... [ 129.609989][ T7092] IPVS: using max 25 ests per chain, 60000 per kthread [ 130.031043][ T7114] vlan2: entered allmulticast mode [ 130.036924][ T7114] hsr0: entered allmulticast mode [ 130.060885][ T7114] hsr_slave_0: entered allmulticast mode [ 130.080523][ T7114] hsr_slave_1: entered allmulticast mode [ 130.718136][ T7133] IPVS: stopping backup sync thread 7136 ... [ 130.724367][ T7136] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 131.183936][ T7154] __nla_validate_parse: 6 callbacks suppressed [ 131.183954][ T7154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 131.236300][ T7156] wg1 speed is unknown, defaulting to 1000 [ 131.330280][ T7154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 131.547258][ T7168] sctp: [Deprecated]: syz.1.383 (pid 7168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.547258][ T7168] Use struct sctp_sack_info instead [ 131.629881][ T7165] netlink: 'syz.1.383': attribute type 12 has an invalid length. [ 132.246241][ T7188] netlink: 'syz.4.385': attribute type 13 has an invalid length. [ 132.290974][ T7178] wg1 speed is unknown, defaulting to 1000 [ 132.315320][ T7188] netlink: 'syz.4.385': attribute type 17 has an invalid length. [ 132.411504][ T7189] netlink: 55 bytes leftover after parsing attributes in process `syz.1.390'. [ 132.745102][ T7192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.884893][ T7188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.127511][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.134662][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.170760][ T7208] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 133.261188][ T7195] wg1 speed is unknown, defaulting to 1000 [ 133.276479][ T7202] wg1 speed is unknown, defaulting to 1000 [ 133.369598][ T7216] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 133.379693][ T7215] IPVS: stopping backup sync thread 7216 ... [ 133.406556][ T7215] netlink: 260 bytes leftover after parsing attributes in process `syz.1.395'. [ 133.420862][ T7215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.395'. [ 133.430513][ T7215] netlink: 32 bytes leftover after parsing attributes in process `syz.1.395'. [ 134.193275][ T7241] dummy0: left promiscuous mode [ 134.261798][ T7241] team0: Port device dummy0 removed [ 134.610485][ T7246] wg1 speed is unknown, defaulting to 1000 [ 134.614034][ T7260] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 134.695830][ T7260] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 134.737751][ T7256] wg1 speed is unknown, defaulting to 1000 [ 134.781888][ T7260] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 134.978309][ T5981] IPVS: starting estimator thread 0... [ 135.080082][ T7270] IPVS: using max 22 ests per chain, 52800 per kthread [ 135.206650][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 135.280578][ T7282] netlink: 'syz.3.412': attribute type 30 has an invalid length. [ 135.592340][ T7284] vlan2: entered promiscuous mode [ 135.611891][ T7284] vlan2: entered allmulticast mode [ 135.745000][ T7295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.413'. [ 135.923095][ T7280] wg1 speed is unknown, defaulting to 1000 [ 136.088971][ T7303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.416'. [ 136.099425][ T7303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.416'. [ 136.754265][ T7319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.422'. [ 136.793560][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 137.040640][ T7321] block nbd0: server does not support multiple connections per device. [ 137.051565][ T7321] block nbd0: shutting down sockets [ 137.625532][ T7350] netlink: 'syz.4.434': attribute type 10 has an invalid length. [ 137.671973][ T7350] netlink: 'syz.4.434': attribute type 10 has an invalid length. [ 137.717691][ T7347] can: request_module (can-proto-0) failed. [ 137.747874][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 137.805731][ T7360] netlink: 44 bytes leftover after parsing attributes in process `syz.2.438'. [ 137.849420][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 137.926668][ T7361] wg1 speed is unknown, defaulting to 1000 [ 137.958885][ T7363] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.438'. [ 138.149642][ T7375] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 138.152860][ T7373] syzkaller1: entered promiscuous mode [ 138.183981][ T7373] syzkaller1: entered allmulticast mode [ 138.214905][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.441'. [ 138.283450][ T7384] netlink: 36 bytes leftover after parsing attributes in process `syz.4.443'. [ 138.369529][ T7390] FAULT_INJECTION: forcing a failure. [ 138.369529][ T7390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.386626][ T7390] CPU: 1 UID: 0 PID: 7390 Comm: syz.2.446 Not tainted syzkaller #0 PREEMPT(full) [ 138.386651][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.386660][ T7390] Call Trace: [ 138.386667][ T7390] [ 138.386675][ T7390] dump_stack_lvl+0x189/0x250 [ 138.386701][ T7390] ? __pfx____ratelimit+0x10/0x10 [ 138.386718][ T7390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.386737][ T7390] ? __pfx__printk+0x10/0x10 [ 138.386758][ T7390] ? __might_fault+0xb0/0x130 [ 138.386791][ T7390] should_fail_ex+0x414/0x560 [ 138.386818][ T7390] _copy_from_iter+0x1de/0x1790 [ 138.386843][ T7390] ? rcu_is_watching+0x15/0xb0 [ 138.386864][ T7390] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 138.386889][ T7390] ? __pfx__copy_from_iter+0x10/0x10 [ 138.386905][ T7390] ? __build_skb_around+0x257/0x3e0 [ 138.386924][ T7390] ? netlink_sendmsg+0x642/0xb30 [ 138.386937][ T7390] ? skb_put+0x11b/0x210 [ 138.386956][ T7390] netlink_sendmsg+0x6b2/0xb30 [ 138.386979][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.386997][ T7390] ? aa_sock_msg_perm+0xf1/0x1d0 [ 138.387013][ T7390] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.387028][ T7390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.387044][ T7390] __sock_sendmsg+0x21c/0x270 [ 138.387068][ T7390] ____sys_sendmsg+0x505/0x830 [ 138.387090][ T7390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.387115][ T7390] ? import_iovec+0x74/0xa0 [ 138.387135][ T7390] ___sys_sendmsg+0x21f/0x2a0 [ 138.387154][ T7390] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.387203][ T7390] ? __fget_files+0x2a/0x420 [ 138.387215][ T7390] ? __fget_files+0x3a0/0x420 [ 138.387237][ T7390] __x64_sys_sendmsg+0x19b/0x260 [ 138.387266][ T7390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.387291][ T7390] ? __pfx_ksys_write+0x10/0x10 [ 138.387308][ T7390] ? rcu_is_watching+0x15/0xb0 [ 138.387326][ T7390] ? do_syscall_64+0xbe/0x3b0 [ 138.387346][ T7390] do_syscall_64+0xfa/0x3b0 [ 138.387360][ T7390] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.387374][ T7390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.387388][ T7390] ? clear_bhb_loop+0x60/0xb0 [ 138.387406][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.387419][ T7390] RIP: 0033:0x7fb2ec18ebe9 [ 138.387432][ T7390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.387444][ T7390] RSP: 002b:00007fb2ed0c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.387461][ T7390] RAX: ffffffffffffffda RBX: 00007fb2ec3c5fa0 RCX: 00007fb2ec18ebe9 [ 138.387471][ T7390] RDX: 0000000004000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 138.387480][ T7390] RBP: 00007fb2ed0c5090 R08: 0000000000000000 R09: 0000000000000000 [ 138.387489][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.387497][ T7390] R13: 00007fb2ec3c6038 R14: 00007fb2ec3c5fa0 R15: 00007ffc0cf1b228 [ 138.387523][ T7390] [ 138.750273][ T7394] netlink: 40 bytes leftover after parsing attributes in process `syz.0.441'. [ 138.829294][ T7397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.447'. [ 138.930933][ T7397] vlan0: entered promiscuous mode [ 139.539032][ T7420] syzkaller0: entered promiscuous mode [ 139.549592][ T7420] syzkaller0: entered allmulticast mode [ 139.587657][ T7427] netlink: 'syz.1.457': attribute type 30 has an invalid length. [ 139.647933][ T7431] Bluetooth: MGMT ver 1.23 [ 141.748724][ T7427] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 141.750628][ T7443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.828403][ T7453] pimreg: entered allmulticast mode [ 141.856698][ T7458] tipc: Started in network mode [ 141.890687][ T7458] tipc: Node identity ca48b2664dd7, cluster identity 4711 [ 141.907948][ T7458] tipc: Enabled bearer , priority 0 [ 141.932697][ T7435] wg1 speed is unknown, defaulting to 1000 [ 141.940078][ T7466] __nla_validate_parse: 5 callbacks suppressed [ 141.940097][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 141.945336][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 141.946286][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 141.999312][ T7466] netlink: 2 bytes leftover after parsing attributes in process `syz.2.468'. [ 142.061286][ T7458] tipc: Disabling bearer [ 142.164209][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.196732][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.224556][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.244383][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.312551][ T7480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'. [ 142.353923][ T7480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.473'. [ 142.393250][ T7482] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 142.433029][ T7482] netlink: 'syz.1.475': attribute type 2 has an invalid length. [ 142.919325][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 143.051217][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 143.102810][ T7507] trusted_key: syz.1.485 sent an empty control message without MSG_MORE. [ 143.288284][ T7513] vlan3: entered allmulticast mode [ 143.367002][ T7511] wg1 speed is unknown, defaulting to 1000 [ 143.395911][ T7519] wg1 speed is unknown, defaulting to 1000 [ 143.456291][ T7523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.489'. [ 143.492421][ T7523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.489'. [ 143.733400][ T7531] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 144.405021][ T7521] netlink: 'syz.1.488': attribute type 2 has an invalid length. [ 144.921600][ T7558] erspan0: entered promiscuous mode [ 145.227225][ T7565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 145.614732][ T7586] netlink: 'syz.2.507': attribute type 1 has an invalid length. [ 145.788758][ T7586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.896675][ T7592] bond1: (slave gretap1): making interface the new active one [ 145.954538][ T7592] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 145.978687][ T7606] FAULT_INJECTION: forcing a failure. [ 145.978687][ T7606] name failslab, interval 1, probability 0, space 0, times 0 [ 145.998851][ T7606] CPU: 1 UID: 0 PID: 7606 Comm: syz.0.513 Not tainted syzkaller #0 PREEMPT(full) [ 145.998878][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.998889][ T7606] Call Trace: [ 145.998897][ T7606] [ 145.998906][ T7606] dump_stack_lvl+0x189/0x250 [ 145.998934][ T7606] ? __pfx____ratelimit+0x10/0x10 [ 145.998956][ T7606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.998978][ T7606] ? __pfx__printk+0x10/0x10 [ 145.999013][ T7606] ? ref_tracker_alloc+0x318/0x460 [ 145.999046][ T7606] should_fail_ex+0x414/0x560 [ 145.999077][ T7606] should_failslab+0xa8/0x100 [ 145.999104][ T7606] kmem_cache_alloc_noprof+0x73/0x3c0 [ 145.999128][ T7606] ? skb_clone+0x212/0x3a0 [ 145.999157][ T7606] skb_clone+0x212/0x3a0 [ 145.999198][ T7606] __netlink_deliver_tap+0x404/0x850 [ 145.999229][ T7606] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.999248][ T7606] netlink_deliver_tap+0x19c/0x1b0 [ 145.999264][ T7606] __netlink_sendskb+0x47/0x90 [ 145.999287][ T7606] netlink_dump+0xa84/0xe90 [ 145.999321][ T7606] ? __pfx_netlink_dump+0x10/0x10 [ 145.999358][ T7606] ? genl_start+0x499/0x6c0 [ 145.999392][ T7606] __netlink_dump_start+0x5cb/0x7e0 [ 145.999421][ T7606] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 145.999449][ T7606] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 145.999471][ T7606] ? genl_get_cmd+0x7d9/0x910 [ 145.999501][ T7606] ? __pfx_genl_start+0x10/0x10 [ 145.999522][ T7606] ? __pfx_genl_dumpit+0x10/0x10 [ 145.999543][ T7606] ? __pfx_genl_done+0x10/0x10 [ 145.999586][ T7606] genl_rcv_msg+0x5da/0x790 [ 145.999617][ T7606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.999641][ T7606] ? __pfx_tcp_metrics_nl_dump+0x10/0x10 [ 145.999664][ T7606] ? __asan_memcpy+0x40/0x70 [ 145.999685][ T7606] ? __pfx_ref_tracker_free+0x10/0x10 [ 145.999721][ T7606] netlink_rcv_skb+0x208/0x470 [ 145.999743][ T7606] ? __lock_acquire+0xab9/0xd20 [ 145.999769][ T7606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 145.999795][ T7606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.999837][ T7606] ? down_read+0x1ad/0x2e0 [ 145.999863][ T7606] genl_rcv+0x28/0x40 [ 145.999883][ T7606] netlink_unicast+0x82f/0x9e0 [ 145.999924][ T7606] ? __pfx_netlink_unicast+0x10/0x10 [ 145.999954][ T7606] ? netlink_sendmsg+0x642/0xb30 [ 145.999970][ T7606] ? skb_put+0x11b/0x210 [ 145.999992][ T7606] netlink_sendmsg+0x805/0xb30 [ 146.000022][ T7606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.000046][ T7606] ? aa_sock_msg_perm+0xf1/0x1d0 [ 146.000069][ T7606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 146.000089][ T7606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.000111][ T7606] __sock_sendmsg+0x21c/0x270 [ 146.000142][ T7606] ____sys_sendmsg+0x505/0x830 [ 146.000181][ T7606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.000216][ T7606] ? import_iovec+0x74/0xa0 [ 146.000243][ T7606] ___sys_sendmsg+0x21f/0x2a0 [ 146.000269][ T7606] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.000340][ T7606] ? __fget_files+0x2a/0x420 [ 146.000356][ T7606] ? __fget_files+0x3a0/0x420 [ 146.000387][ T7606] __x64_sys_sendmsg+0x19b/0x260 [ 146.000413][ T7606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 146.000449][ T7606] ? __pfx_ksys_write+0x10/0x10 [ 146.000471][ T7606] ? rcu_is_watching+0x15/0xb0 [ 146.000497][ T7606] ? do_syscall_64+0xbe/0x3b0 [ 146.000524][ T7606] do_syscall_64+0xfa/0x3b0 [ 146.000543][ T7606] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.000562][ T7606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.000581][ T7606] ? clear_bhb_loop+0x60/0xb0 [ 146.000605][ T7606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.000623][ T7606] RIP: 0033:0x7f5c4838ebe9 [ 146.000642][ T7606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.000657][ T7606] RSP: 002b:00007f5c465f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.000679][ T7606] RAX: ffffffffffffffda RBX: 00007f5c485c5fa0 RCX: 00007f5c4838ebe9 [ 146.000693][ T7606] RDX: 0000000004000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 146.000705][ T7606] RBP: 00007f5c465f6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.000717][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.000728][ T7606] R13: 00007f5c485c6038 R14: 00007f5c485c5fa0 R15: 00007ffd7930b3b8 [ 146.000763][ T7606] [ 146.470543][ T7610] netlink: 'syz.4.515': attribute type 4 has an invalid length. [ 146.763415][ T7586] wg1 speed is unknown, defaulting to 1000 [ 146.774203][ T7622] netlink: 'syz.0.520': attribute type 1 has an invalid length. [ 146.813242][ T7592] wg1 speed is unknown, defaulting to 1000 [ 147.040552][ T5880] Bluetooth: hci4: command 0x0405 tx timeout [ 147.099598][ T7638] __nla_validate_parse: 14 callbacks suppressed [ 147.099618][ T7638] netlink: 452 bytes leftover after parsing attributes in process `syz.0.524'. [ 148.276677][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'. [ 148.725179][ T7678] netlink: 14 bytes leftover after parsing attributes in process `syz.1.535'. [ 148.868127][ T7687] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.535'. [ 149.001036][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 150.130349][ T7717] netlink: zone id is out of range [ 150.135883][ T7717] netlink: zone id is out of range [ 150.143840][ T7717] netlink: zone id is out of range [ 150.154463][ T7717] netlink: zone id is out of range [ 150.162533][ T7717] netlink: zone id is out of range [ 150.167763][ T7717] netlink: zone id is out of range [ 150.177721][ T7717] netlink: zone id is out of range [ 150.185968][ T7717] netlink: zone id is out of range [ 150.197043][ T7717] netlink: zone id is out of range [ 150.216516][ T7717] netlink: zone id is out of range [ 150.524540][ T7720] netlink: 20 bytes leftover after parsing attributes in process `syz.0.543'. [ 150.541141][ T7720] netlink: 128 bytes leftover after parsing attributes in process `syz.0.543'. [ 151.073334][ T7730] tipc: New replicast peer: 255.255.255.255 [ 151.086739][ T7730] tipc: Enabled bearer , priority 10 [ 151.364983][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 152.012717][ T7753] IPVS: stopping backup sync thread 7755 ... [ 152.019010][ T7755] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 152.053340][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 152.054964][ T7753] netlink: 260 bytes leftover after parsing attributes in process `syz.2.555'. [ 152.068166][ T7757] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 152.082373][ T2962] bond0: (slave bond_slave_0): interface is now down [ 152.097203][ T2962] bond0: (slave bond_slave_1): interface is now down [ 152.121227][ T6326] bond0: (slave bond_slave_0): interface is now down [ 152.128043][ T6326] bond0: (slave bond_slave_1): interface is now down [ 152.141441][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.555'. [ 152.164071][ T7753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.555'. [ 152.172804][ T6326] bond0: (slave bond_slave_0): interface is now down [ 152.191109][ T959] tipc: Node number set to 537294364 [ 152.194983][ T6326] bond0: (slave bond_slave_1): interface is now down [ 152.226846][ T6326] bond0: now running without any active interface! [ 152.402718][ T7763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.558'. [ 152.403794][ T7761] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20000 [ 152.425311][ T7763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.558'. [ 152.977223][ T7780] wg1 speed is unknown, defaulting to 1000 [ 153.554260][ T7790] vlan3: entered allmulticast mode [ 153.768132][ T7800] netlink: 'syz.0.567': attribute type 1 has an invalid length. [ 153.789886][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 154.042760][ T7798] wireguard0: entered promiscuous mode [ 154.048448][ T7798] wireguard0: entered allmulticast mode [ 155.334401][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'. [ 155.447595][ T7817] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 155.540833][ T7817] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.553813][ T7817] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 155.598907][ T7817] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.619927][ T7817] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 155.720777][ T7817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.755891][ T7817] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 155.797482][ T7817] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.818507][ T7817] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 156.312254][ T7627] net_ratelimit: 35 callbacks suppressed [ 156.312277][ T7627] Set syz1 is full, maxelem 65536 reached [ 156.554894][ T7877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'. [ 156.627509][ T7877] xt_socket: unknown flags 0x50 [ 156.666241][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.580'. [ 156.702409][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.580'. [ 156.803345][ T7882] team0: entered promiscuous mode [ 156.810970][ T7882] team_slave_0: entered promiscuous mode [ 156.824190][ T7882] team_slave_1: entered promiscuous mode [ 156.839983][ T7882] dummy0: entered promiscuous mode [ 156.854117][ T7882] bond0: entered promiscuous mode [ 156.859454][ T7882] bond_slave_0: entered promiscuous mode [ 156.869357][ T7882] bond_slave_1: entered promiscuous mode [ 156.881512][ T7882] debugfs: 'hsr1' already exists in 'hsr' [ 156.930198][ T7882] Cannot create hsr debugfs directory [ 156.970004][ T7882] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 157.015348][ T7882] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 157.234855][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 157.266879][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 157.720143][ T7922] veth1: entered promiscuous mode [ 157.725556][ T7922] vlan2: entered promiscuous mode [ 158.824566][ T7944] can: request_module (can-proto-0) failed. [ 159.157815][ T7970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.600'. [ 159.176326][ T7971] netlink: 308 bytes leftover after parsing attributes in process `syz.3.599'. [ 159.199985][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 159.220843][ T7971] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 159.238862][ T7970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.600'. [ 159.597497][ T7985] netlink: 156 bytes leftover after parsing attributes in process `syz.0.604'. [ 160.246288][ T8008] vlan2: entered allmulticast mode [ 160.259490][ T8008] hsr0: entered allmulticast mode [ 160.276912][ T8008] hsr_slave_0: entered allmulticast mode [ 160.296270][ T8008] hsr_slave_1: entered allmulticast mode [ 160.358234][ T8011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.610'. [ 160.454910][ T8011] syzkaller0: entered promiscuous mode [ 160.461561][ T8011] syzkaller0: entered allmulticast mode [ 160.555571][ T8014] wg1 speed is unknown, defaulting to 1000 [ 162.176080][ T8056] wg1 speed is unknown, defaulting to 1000 [ 162.588349][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.629'. [ 162.637334][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.629'. [ 163.156476][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.624'. [ 163.173812][ T8081] syzkaller1: entered promiscuous mode [ 163.179462][ T8081] syzkaller1: entered allmulticast mode [ 163.223382][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.624'. [ 163.302065][ T8086] netlink: 'syz.0.633': attribute type 1 has an invalid length. [ 163.319998][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 163.402441][ T8085] wireguard1: entered promiscuous mode [ 163.426590][ T8085] wireguard1: entered allmulticast mode [ 163.669180][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 164.210587][ T8113] netlink: 'syz.1.639': attribute type 10 has an invalid length. [ 164.256020][ T8113] netlink: 'syz.1.639': attribute type 10 has an invalid length. [ 164.337985][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 164.348576][ T8117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.641'. [ 164.350573][ T8107] can: request_module (can-proto-0) failed. [ 164.671073][ T8124] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 165.276452][ T8131] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 165.312901][ T8131] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.646'. [ 165.331417][ T8131] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 165.370990][ T8131] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 165.663543][ T8142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.651'. [ 165.761666][ T8136] netlink: 'syz.3.648': attribute type 21 has an invalid length. [ 165.831175][ T8136] ipvlan2: entered promiscuous mode [ 165.838623][ T8136] bridge0: port 1(ipvlan2) entered blocking state [ 165.860033][ T8136] bridge0: port 1(ipvlan2) entered disabled state [ 165.879351][ T7929] Set syz1 is full, maxelem 65536 reached [ 165.884026][ T8136] ipvlan2: entered allmulticast mode [ 165.903878][ T8136] gretap0: entered allmulticast mode [ 165.921636][ T8136] ipvlan2: left allmulticast mode [ 165.927320][ T8136] gretap0: left allmulticast mode [ 166.238121][ T8163] wg1 speed is unknown, defaulting to 1000 [ 166.377083][ T8177] netlink: 'syz.1.660': attribute type 1 has an invalid length. [ 166.395224][ T8173] wireguard0: entered promiscuous mode [ 166.413726][ T8173] wireguard0: entered allmulticast mode [ 167.725205][ T8226] __nla_validate_parse: 4 callbacks suppressed [ 167.725225][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.677'. [ 167.838161][ T8232] netlink: 'syz.0.674': attribute type 1 has an invalid length. [ 167.860569][ T8227] wireguard2: entered promiscuous mode [ 167.866106][ T8227] wireguard2: entered allmulticast mode [ 167.882217][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 168.131702][ T8237] wg1 speed is unknown, defaulting to 1000 [ 168.699985][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.679'. [ 168.709044][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.679'. [ 168.876648][ T8272] netlink: 'syz.0.690': attribute type 1 has an invalid length. [ 168.884994][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 168.954630][ T8268] wireguard3: entered promiscuous mode [ 168.969930][ T8268] wireguard3: entered allmulticast mode [ 169.021216][ T8277] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 169.023996][ T8276] IPVS: stopping backup sync thread 8277 ... [ 169.065606][ T8275] netlink: 260 bytes leftover after parsing attributes in process `syz.3.691'. [ 169.091409][ T8275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.691'. [ 169.100721][ T8275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.691'. [ 169.944552][ T8313] netlink: 156 bytes leftover after parsing attributes in process `syz.3.704'. [ 170.015590][ T8318] netlink: 'syz.2.706': attribute type 30 has an invalid length. [ 170.783395][ T8347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.715'. [ 171.599529][ T8378] netlink: 'syz.4.728': attribute type 4 has an invalid length. [ 171.643401][ T8378] netlink: 'syz.4.728': attribute type 4 has an invalid length. [ 171.875128][ T8387] can: request_module (can-proto-0) failed. [ 171.964591][ T8387] wg1 speed is unknown, defaulting to 1000 [ 171.965602][ T8398] tipc: Started in network mode [ 171.975680][ T8398] tipc: Node identity 0e12c100d6bb, cluster identity 4711 [ 171.983917][ T8398] tipc: Enabled bearer , priority 0 [ 172.007398][ T8398] syzkaller0: entered promiscuous mode [ 172.013043][ T8398] syzkaller0: entered allmulticast mode [ 172.067198][ T8398] tipc: Resetting bearer [ 172.091825][ T8397] tipc: Resetting bearer [ 172.120335][ T8397] tipc: Disabling bearer [ 172.485396][ T8417] netlink: 'syz.0.741': attribute type 1 has an invalid length. [ 172.988994][ T8438] __nla_validate_parse: 8 callbacks suppressed [ 172.989013][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 173.181111][ T8445] netlink: 48 bytes leftover after parsing attributes in process `syz.3.751'. [ 173.233065][ T8448] FAULT_INJECTION: forcing a failure. [ 173.233065][ T8448] name failslab, interval 1, probability 0, space 0, times 0 [ 173.238301][ T8445] netlink: 88 bytes leftover after parsing attributes in process `syz.3.751'. [ 173.269512][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.0.753 Not tainted syzkaller #0 PREEMPT(full) [ 173.269540][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 173.269550][ T8448] Call Trace: [ 173.269558][ T8448] [ 173.269565][ T8448] dump_stack_lvl+0x189/0x250 [ 173.269593][ T8448] ? __pfx____ratelimit+0x10/0x10 [ 173.269613][ T8448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.269634][ T8448] ? __pfx__printk+0x10/0x10 [ 173.269667][ T8448] ? __pfx___might_resched+0x10/0x10 [ 173.269684][ T8448] ? fs_reclaim_acquire+0x7d/0x100 [ 173.269706][ T8448] should_fail_ex+0x414/0x560 [ 173.269740][ T8448] should_failslab+0xa8/0x100 [ 173.269768][ T8448] __kmalloc_noprof+0xcb/0x4f0 [ 173.269799][ T8448] ? kfree+0x4d/0x440 [ 173.269818][ T8448] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 173.269844][ T8448] tomoyo_realpath_from_path+0xe3/0x5d0 [ 173.269865][ T8448] ? tomoyo_domain+0xd9/0x130 [ 173.269889][ T8448] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 173.269915][ T8448] tomoyo_path_number_perm+0x1e8/0x5a0 [ 173.269944][ T8448] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 173.269988][ T8448] ? __lock_acquire+0xab9/0xd20 [ 173.270040][ T8448] ? __fget_files+0x2a/0x420 [ 173.270061][ T8448] ? __fget_files+0x2a/0x420 [ 173.270076][ T8448] ? __fget_files+0x3a0/0x420 [ 173.270091][ T8448] ? __fget_files+0x2a/0x420 [ 173.270113][ T8448] security_file_ioctl+0xcb/0x2d0 [ 173.270141][ T8448] __se_sys_ioctl+0x47/0x170 [ 173.270168][ T8448] do_syscall_64+0xfa/0x3b0 [ 173.270186][ T8448] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.270204][ T8448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.270222][ T8448] ? clear_bhb_loop+0x60/0xb0 [ 173.270246][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.270263][ T8448] RIP: 0033:0x7f5c4838ebe9 [ 173.270281][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.270296][ T8448] RSP: 002b:00007f5c465f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.270316][ T8448] RAX: ffffffffffffffda RBX: 00007f5c485c5fa0 RCX: 00007f5c4838ebe9 [ 173.270330][ T8448] RDX: 00002000000000c0 RSI: 0000000000008931 RDI: 0000000000000005 [ 173.270341][ T8448] RBP: 00007f5c465f6090 R08: 0000000000000000 R09: 0000000000000000 [ 173.270352][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.270363][ T8448] R13: 00007f5c485c6038 R14: 00007f5c485c5fa0 R15: 00007ffd7930b3b8 [ 173.270397][ T8448] [ 173.517681][ T8448] ERROR: Out of memory at tomoyo_realpath_from_path. [ 173.706803][ T8454] netlink: 9 bytes leftover after parsing attributes in process `syz.2.754'. [ 173.750079][ T8454] .70·: renamed from hsr0 (while UP) [ 173.839369][ T8454] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 173.973388][ T8461] netlink: 'syz.0.757': attribute type 30 has an invalid length. [ 174.012516][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.759'. [ 174.323814][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.765'. [ 174.333526][ T8481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.765'. [ 174.402217][ T8488] FAULT_INJECTION: forcing a failure. [ 174.402217][ T8488] name failslab, interval 1, probability 0, space 0, times 0 [ 174.415731][ T8488] CPU: 0 UID: 0 PID: 8488 Comm: syz.4.770 Not tainted syzkaller #0 PREEMPT(full) [ 174.415757][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.415768][ T8488] Call Trace: [ 174.415777][ T8488] [ 174.415785][ T8488] dump_stack_lvl+0x189/0x250 [ 174.415814][ T8488] ? __pfx____ratelimit+0x10/0x10 [ 174.415834][ T8488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.415857][ T8488] ? __pfx__printk+0x10/0x10 [ 174.415900][ T8488] ? __pfx___might_resched+0x10/0x10 [ 174.415917][ T8488] ? fs_reclaim_acquire+0x7d/0x100 [ 174.415941][ T8488] should_fail_ex+0x414/0x560 [ 174.415973][ T8488] should_failslab+0xa8/0x100 [ 174.416002][ T8488] kmem_cache_alloc_noprof+0x73/0x3c0 [ 174.416027][ T8488] ? vm_area_dup+0x2b/0x680 [ 174.416060][ T8488] vm_area_dup+0x2b/0x680 [ 174.416093][ T8488] __split_vma+0x1a9/0xa00 [ 174.416117][ T8488] ? mas_next_slot+0xc20/0xcf0 [ 174.416141][ T8488] ? __pfx___split_vma+0x10/0x10 [ 174.416179][ T8488] ? mas_find+0xb0e/0xd30 [ 174.416205][ T8488] vms_gather_munmap_vmas+0x4ce/0x12f0 [ 174.416250][ T8488] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 174.416285][ T8488] ? mas_find+0xa7d/0xd30 [ 174.416312][ T8488] mmap_region+0x724/0x20c0 [ 174.416359][ T8488] ? __pfx_mmap_region+0x10/0x10 [ 174.416462][ T8488] ? mm_get_unmapped_area+0xa7/0xd0 [ 174.416493][ T8488] ? shmem_get_unmapped_area+0x2cf/0x910 [ 174.416522][ T8488] ? cap_mmap_addr+0xb0/0x100 [ 174.416548][ T8488] ? bpf_lsm_mmap_addr+0x9/0x20 [ 174.416569][ T8488] ? security_mmap_addr+0x71/0x270 [ 174.416592][ T8488] ? shmem_mapping+0xd/0x50 [ 174.416611][ T8488] ? memfd_check_seals_mmap+0x165/0x200 [ 174.416634][ T8488] do_mmap+0xc45/0x10d0 [ 174.416673][ T8488] ? __pfx_do_mmap+0x10/0x10 [ 174.416693][ T8488] ? down_write_killable+0x178/0x230 [ 174.416725][ T8488] ? __pfx_down_write_killable+0x10/0x10 [ 174.416745][ T8488] ? common_file_perm+0x1b5/0x230 [ 174.416773][ T8488] vm_mmap_pgoff+0x2a6/0x4d0 [ 174.416805][ T8488] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 174.416830][ T8488] ? __fget_files+0x2a/0x420 [ 174.416853][ T8488] ? __fget_files+0x3a0/0x420 [ 174.416868][ T8488] ? __fget_files+0x2a/0x420 [ 174.416898][ T8488] ksys_mmap_pgoff+0x51f/0x760 [ 174.416931][ T8488] do_syscall_64+0xfa/0x3b0 [ 174.416950][ T8488] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.416968][ T8488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.416986][ T8488] ? clear_bhb_loop+0x60/0xb0 [ 174.417009][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.417026][ T8488] RIP: 0033:0x7f6e1bf8ebe9 [ 174.417044][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.417058][ T8488] RSP: 002b:00007f6e1cdbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 174.417079][ T8488] RAX: ffffffffffffffda RBX: 00007f6e1c1c5fa0 RCX: 00007f6e1bf8ebe9 [ 174.417092][ T8488] RDX: 0000000000000005 RSI: 0000000000003000 RDI: 0000200000000000 [ 174.417104][ T8488] RBP: 00007f6e1cdbc090 R08: 0000000000000003 R09: 0000000000000000 [ 174.417114][ T8488] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 174.417125][ T8488] R13: 00007f6e1c1c6038 R14: 00007f6e1c1c5fa0 R15: 00007fff69271968 [ 174.417157][ T8488] [ 174.443117][ T8486] can: request_module (can-proto-0) failed. [ 174.581929][ T8493] netlink: 'syz.1.769': attribute type 10 has an invalid length. [ 174.648154][ T8486] netlink: 'syz.1.769': attribute type 10 has an invalid length. [ 174.795856][ T8498] vlan2: entered allmulticast mode [ 175.293688][ T8518] wireguard1: entered promiscuous mode [ 175.332710][ T8523] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 175.361748][ T8518] wireguard1: entered allmulticast mode [ 175.392912][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 175.495019][ T8529] tipc: Enabling of bearer rejected, failed to enable media [ 175.832437][ T8543] syzkaller1: entered promiscuous mode [ 175.838071][ T8543] syzkaller1: entered allmulticast mode [ 175.856398][ T8543] : entered promiscuous mode [ 175.968214][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 175.989488][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 175.998703][ T8547] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 176.033648][ T8550] netlink: 'syz.1.788': attribute type 10 has an invalid length. [ 176.052085][ T8547] nbd: socks must be embedded in a SOCK_ITEM attr [ 176.056371][ T8552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.064423][ T8547] block nbd0: shutting down sockets [ 176.078920][ T8550] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 176.094213][ T8550] bond0: (slave lo): refused to change device type [ 176.132281][ T8552] netlink: 'syz.2.791': attribute type 10 has an invalid length. [ 176.158891][ T8552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.208390][ T8552] bond0: (slave wlan1): Opening slave failed [ 176.507250][ T8576] netlink: 'syz.2.800': attribute type 20 has an invalid length. [ 176.595654][ T8580] netlink: 'syz.1.802': attribute type 13 has an invalid length. [ 176.610069][ T8580] netlink: 'syz.1.802': attribute type 17 has an invalid length. [ 176.774306][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.798908][ T8580] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.826181][ T8580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.177507][ T8605] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 177.697501][ T8618] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 178.062731][ T8627] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 178.209365][ T8640] __nla_validate_parse: 11 callbacks suppressed [ 178.209388][ T8640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.823'. [ 178.237013][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'. [ 178.259860][ T8638] netlink: 28 bytes leftover after parsing attributes in process `syz.1.822'. [ 178.309532][ T8642] netlink: 32 bytes leftover after parsing attributes in process `syz.0.823'. [ 178.421114][ T8647] vlan2: entered allmulticast mode [ 178.471644][ T8653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.828'. [ 178.918664][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.838'. [ 178.928309][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.838'. [ 178.937131][ T8685] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 178.947278][ T8684] IPVS: stopping backup sync thread 8685 ... [ 178.978501][ T8684] netlink: 260 bytes leftover after parsing attributes in process `syz.0.839'. [ 179.005928][ T8684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.839'. [ 179.026668][ T8684] netlink: 32 bytes leftover after parsing attributes in process `syz.0.839'. [ 179.125284][ T8692] erspan0: entered allmulticast mode [ 179.143746][ T8691] erspan0: left allmulticast mode [ 179.166415][ T8694] vlan2: entered allmulticast mode [ 179.172588][ T8694] hsr0: entered allmulticast mode [ 179.177900][ T8694] hsr_slave_0: entered allmulticast mode [ 179.184078][ T8694] hsr_slave_1: entered allmulticast mode [ 179.327946][ T8700] validate_nla: 2 callbacks suppressed [ 179.327966][ T8700] netlink: 'syz.1.846': attribute type 1 has an invalid length. [ 179.379182][ T8700] netlink: 'syz.1.846': attribute type 10 has an invalid length. [ 179.425691][ T8700] bond0: (slave wlan1): Opening slave failed [ 179.640024][ T8719] IPVS: stopping backup sync thread 8721 ... [ 179.646275][ T8721] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 179.759928][ T5880] Bluetooth: hci0: command tx timeout [ 179.821771][ T8732] erspan0: entered allmulticast mode [ 179.828920][ T8730] erspan0: left allmulticast mode [ 180.227325][ T8751] wg1 speed is unknown, defaulting to 1000 [ 180.761950][ T8773] delete_channel: no stack [ 180.865813][ T8776] tipc: Started in network mode [ 180.889911][ T8776] tipc: Node identity 8ec3dfdd972a, cluster identity 4711 [ 180.915832][ T8776] tipc: Enabled bearer , priority 0 [ 180.939620][ T8782] syzkaller0: entered promiscuous mode [ 180.972377][ T8782] syzkaller0: entered allmulticast mode [ 181.017090][ T8776] tipc: Resetting bearer [ 181.034643][ T8776] ipvlan2: entered promiscuous mode [ 181.141699][ T8775] tipc: Resetting bearer [ 181.186160][ T8775] tipc: Disabling bearer [ 181.268946][ T8800] wg1 speed is unknown, defaulting to 1000 [ 181.364814][ T8801] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.803076][ T8828] FAULT_INJECTION: forcing a failure. [ 181.803076][ T8828] name failslab, interval 1, probability 0, space 0, times 0 [ 181.816707][ T8828] CPU: 0 UID: 0 PID: 8828 Comm: syz.2.890 Not tainted syzkaller #0 PREEMPT(full) [ 181.816725][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.816731][ T8828] Call Trace: [ 181.816736][ T8828] [ 181.816741][ T8828] dump_stack_lvl+0x189/0x250 [ 181.816768][ T8828] ? __pfx____ratelimit+0x10/0x10 [ 181.816781][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.816794][ T8828] ? __pfx__printk+0x10/0x10 [ 181.816813][ T8828] ? __pfx___might_resched+0x10/0x10 [ 181.816827][ T8828] should_fail_ex+0x414/0x560 [ 181.816845][ T8828] should_failslab+0xa8/0x100 [ 181.816862][ T8828] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 181.816877][ T8828] ? __alloc_skb+0x112/0x2d0 [ 181.816892][ T8828] __alloc_skb+0x112/0x2d0 [ 181.816905][ T8828] netlink_sendmsg+0x5c6/0xb30 [ 181.816923][ T8828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.816937][ T8828] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.816949][ T8828] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.816962][ T8828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.816974][ T8828] __sock_sendmsg+0x21c/0x270 [ 181.816997][ T8828] ____sys_sendmsg+0x505/0x830 [ 181.817025][ T8828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.817057][ T8828] ? import_iovec+0x74/0xa0 [ 181.817083][ T8828] ___sys_sendmsg+0x21f/0x2a0 [ 181.817107][ T8828] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.817168][ T8828] ? __fget_files+0x2a/0x420 [ 181.817184][ T8828] ? __fget_files+0x3a0/0x420 [ 181.817211][ T8828] __x64_sys_sendmsg+0x19b/0x260 [ 181.817238][ T8828] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.817262][ T8828] ? __pfx_ksys_write+0x10/0x10 [ 181.817275][ T8828] ? rcu_is_watching+0x15/0xb0 [ 181.817289][ T8828] ? do_syscall_64+0xbe/0x3b0 [ 181.817304][ T8828] do_syscall_64+0xfa/0x3b0 [ 181.817323][ T8828] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.817335][ T8828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.817346][ T8828] ? clear_bhb_loop+0x60/0xb0 [ 181.817359][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.817369][ T8828] RIP: 0033:0x7fb2ec18ebe9 [ 181.817382][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.817390][ T8828] RSP: 002b:00007fb2ed0c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.817404][ T8828] RAX: ffffffffffffffda RBX: 00007fb2ec3c5fa0 RCX: 00007fb2ec18ebe9 [ 181.817412][ T8828] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 181.817419][ T8828] RBP: 00007fb2ed0c5090 R08: 0000000000000000 R09: 0000000000000000 [ 181.817426][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.817432][ T8828] R13: 00007fb2ec3c6038 R14: 00007fb2ec3c5fa0 R15: 00007ffc0cf1b228 [ 181.817450][ T8828] [ 182.316714][ T8834] can: request_module (can-proto-0) failed. [ 182.349148][ T8838] netlink: 'syz.2.892': attribute type 10 has an invalid length. [ 182.410279][ T8843] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 182.474390][ T8834] netlink: 'syz.2.892': attribute type 10 has an invalid length. [ 182.514085][ T8839] wireguard1: entered promiscuous mode [ 182.520459][ T8839] wireguard1: entered allmulticast mode [ 182.585849][ T8838] team0: Device dummy0 failed to register rx_handler [ 182.653764][ T8849] wg1 speed is unknown, defaulting to 1000 [ 183.214310][ T8854] wg1 speed is unknown, defaulting to 1000 [ 185.447422][ T8906] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 185.501923][ T8930] __nla_validate_parse: 23 callbacks suppressed [ 185.501946][ T8930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.913'. [ 185.558819][ T7837] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.578264][ T7837] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.597978][ T7837] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.620277][ T7837] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.641062][ T8931] batadv_slave_0: entered promiscuous mode [ 185.661002][ T8929] batadv_slave_0: left promiscuous mode [ 185.672601][ T7837] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.687505][ T7837] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.760380][ T7837] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.792721][ T7837] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.924508][ T8952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.918'. [ 185.933630][ T8952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.918'. [ 186.100849][ T8959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.145282][ T8959] bond0: (slave rose0): Enslaving as an active interface with an up link [ 186.351351][ T8970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.925'. [ 186.357042][ T8971] openvswitch: netlink: IP tunnel dst address not specified [ 186.379422][ T8970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.925'. [ 186.612771][ T8978] smc: net device bond0 applied user defined pnetid SYZ2 [ 186.697405][ T8985] Bluetooth: MGMT ver 1.23 [ 186.845049][ T8992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.933'. [ 186.856447][ T8992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.933'. [ 187.123623][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'. [ 187.163841][ T9005] vlan4: entered allmulticast mode [ 187.416934][ T9017] netlink: 48 bytes leftover after parsing attributes in process `syz.4.943'. [ 187.437086][ T9021] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 187.447762][ T9016] IPVS: stopping backup sync thread 9021 ... [ 187.502799][ T9024] netlink: 260 bytes leftover after parsing attributes in process `syz.3.941'. [ 187.536400][ T9025] lo speed is unknown, defaulting to 1000 [ 187.557586][ T9025] lo speed is unknown, defaulting to 1000 [ 187.591056][ T9025] lo speed is unknown, defaulting to 1000 [ 187.629451][ T9025] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 187.675749][ T9025] lo speed is unknown, defaulting to 1000 [ 187.687650][ T9025] lo speed is unknown, defaulting to 1000 [ 187.708940][ T9025] lo speed is unknown, defaulting to 1000 [ 187.730318][ T9025] lo speed is unknown, defaulting to 1000 [ 187.755985][ T9025] lo speed is unknown, defaulting to 1000 [ 188.272546][ T9046] netlink: 'syz.0.950': attribute type 10 has an invalid length. [ 188.309242][ T9043] can: request_module (can-proto-0) failed. [ 188.441413][ T9046] geneve0: entered promiscuous mode [ 188.448100][ T9046] team0: Port device geneve0 added [ 189.199145][ T9079] syzkaller1: entered promiscuous mode [ 189.221613][ T9079] syzkaller1: entered allmulticast mode [ 189.774077][ T9095] wg1 speed is unknown, defaulting to 1000 [ 189.809365][ T9095] lo speed is unknown, defaulting to 1000 [ 190.283476][ T9109] wg1 speed is unknown, defaulting to 1000 [ 190.297901][ T9109] lo speed is unknown, defaulting to 1000 [ 190.935829][ T9128] netlink: 'syz.3.975': attribute type 30 has an invalid length. [ 191.488123][ T9132] __nla_validate_parse: 10 callbacks suppressed [ 191.488145][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 191.606051][ T9132] dummy0: left promiscuous mode [ 191.644905][ T9132] team0: Port device dummy0 removed [ 191.702659][ T9132] bridge_slave_0: left allmulticast mode [ 191.719453][ T9132] bridge_slave_0: left promiscuous mode [ 191.753179][ T9132] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.768405][ T9132] bridge_slave_1: left allmulticast mode [ 191.775312][ T9132] bridge_slave_1: left promiscuous mode [ 191.781697][ T9132] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.813653][ T9132] bond0: (slave bond_slave_0): Releasing backup interface [ 191.838624][ T9132] bond_slave_0: left promiscuous mode [ 191.857295][ T9132] bond0: (slave bond_slave_1): Releasing backup interface [ 191.866475][ T9132] bond_slave_1: left promiscuous mode [ 191.885489][ T9132] team_slave_0: left promiscuous mode [ 191.912216][ T9132] team0: Port device team_slave_0 removed [ 191.924314][ T9132] team_slave_1: left promiscuous mode [ 191.953462][ T9132] team0: Port device team_slave_1 removed [ 191.965388][ T9132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.975366][ T9132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.987791][ T9132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.003616][ T9132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.025480][ T9132] geneve0: left promiscuous mode [ 192.065344][ T9132] team0: Port device geneve0 removed [ 192.085445][ T8920] lo speed is unknown, defaulting to 1000 [ 192.121309][ T9151] netlink: 48 bytes leftover after parsing attributes in process `syz.1.980'. [ 192.852083][ T9177] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.988'. [ 193.714741][ T9190] wg1 speed is unknown, defaulting to 1000 [ 193.752094][ T9190] lo speed is unknown, defaulting to 1000 [ 194.017689][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.994'. [ 194.028404][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.994'. [ 194.040173][ T9199] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.996'. [ 194.522579][ T9213] sctp: [Deprecated]: syz.4.998 (pid 9213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.522579][ T9213] Use struct sctp_sack_info instead [ 194.567544][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.574919][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.795201][ T9234] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1004'. [ 194.855602][ T30] audit: type=1800 audit(1757374439.691:2): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="memory.events" dev="tmpfs" ino=1029 res=0 errno=0 [ 194.918710][ T30] audit: type=1800 audit(1757374439.701:3): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="memory.events" dev="tmpfs" ino=1029 res=0 errno=0 [ 194.950528][ T30] audit: type=1800 audit(1757374439.701:4): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="memory.events" dev="tmpfs" ino=1029 res=0 errno=0 [ 195.001546][ T9245] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 195.009616][ T9245] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 195.018387][ T30] audit: type=1800 audit(1757374439.701:5): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="memory.events" dev="tmpfs" ino=1029 res=0 errno=0 [ 195.096336][ T30] audit: type=1800 audit(1757374439.701:6): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="memory.events" dev="tmpfs" ino=1029 res=0 errno=0 [ 195.169896][ T30] audit: type=1800 audit(1757374439.701:7): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="memory.events" dev="tmpfs" ino=1029 res=0 errno=0 [ 195.180132][ T9251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1010'. [ 195.222127][ T9251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1010'. [ 195.238171][ T9249] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 195.252374][ T30] audit: type=1800 audit(1757374439.701:8): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="memory.events" dev="tmpfs" ino=1029 res=0 errno=0 [ 195.278135][ T30] audit: type=1800 audit(1757374439.701:9): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="memory.events" dev="tmpfs" ino=1029 res=0 errno=0 [ 195.301417][ T9249] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.317166][ T30] audit: type=1800 audit(1757374439.701:10): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="memory.events" dev="tmpfs" ino=1029 res=0 errno=0 [ 195.346570][ T9245] bond2: (slave wlan0): Opening slave failed [ 195.367481][ T30] audit: type=1800 audit(1757374439.701:11): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="memory.events" dev="tmpfs" ino=1029 res=0 errno=0 [ 195.380875][ T9245] vlan2: entered allmulticast mode [ 195.395154][ T9245] veth1: entered allmulticast mode [ 195.415822][ T9245] bond2: (slave vlan2): making interface the new active one [ 195.426389][ T9245] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 195.510442][ T9263] wireguard0: entered promiscuous mode [ 195.519101][ T9263] wireguard0: entered allmulticast mode [ 195.539647][ T9263] netlink: 'syz.3.1013': attribute type 1 has an invalid length. [ 195.550819][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1013'. [ 195.726722][ T9278] netlink: 'syz.4.1016': attribute type 10 has an invalid length. [ 195.741048][ T9278] netlink: 'syz.4.1016': attribute type 10 has an invalid length. [ 195.754789][ T9272] can: request_module (can-proto-0) failed. [ 195.759021][ T9277] netlink: 'syz.3.1017': attribute type 4 has an invalid length. [ 195.761888][ T9276] netlink: 'syz.3.1017': attribute type 4 has an invalid length. [ 195.774518][ T9277] netlink: 'syz.3.1017': attribute type 4 has an invalid length. [ 196.007627][ T9293] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 196.020152][ T9292] IPVS: stopping backup sync thread 9293 ... [ 196.168146][ T9301] netlink: 'syz.3.1026': attribute type 30 has an invalid length. [ 196.358353][ T9309] syzkaller1: entered promiscuous mode [ 196.364054][ T9309] syzkaller1: entered allmulticast mode [ 196.383581][ T9309] syzkaller1: left promiscuous mode [ 196.388882][ T9309] syzkaller1: left allmulticast mode [ 197.143407][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.157849][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.305540][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.327963][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.707700][ T9344] __nla_validate_parse: 8 callbacks suppressed [ 197.707719][ T9344] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1042'. [ 197.869633][ T9350] vlan2: entered promiscuous mode [ 197.878754][ T9350] macvtap0: entered promiscuous mode [ 197.900797][ T9352] IPVS: stopping backup sync thread 9353 ... [ 197.904006][ T9353] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 197.921080][ T9352] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1045'. [ 197.936905][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1045'. [ 197.950318][ T9352] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1045'. [ 198.190536][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 198.373810][ T9381] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1054'. [ 198.505066][ T9388] dummy0: entered promiscuous mode [ 198.522670][ T9388] team0: Port device dummy0 added [ 198.532439][ T9383] can: request_module (can-proto-0) failed. [ 198.582496][ T9383] dummy0: left promiscuous mode [ 198.606239][ T9383] team0: Failed to send options change via netlink (err -105) [ 198.646430][ T9383] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 198.657239][ T9383] team0: Port device dummy0 removed [ 198.668098][ T9383] dummy0: entered promiscuous mode [ 198.674289][ T9383] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 198.696101][ T9391] erspan0: entered promiscuous mode [ 198.707880][ T9391] erspan0: left promiscuous mode [ 199.065616][ T9413] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 200.074419][ T9444] validate_nla: 3 callbacks suppressed [ 200.074440][ T9444] netlink: 'syz.0.1074': attribute type 10 has an invalid length. [ 200.097882][ T9444] bond0: (slave dummy0): Releasing backup interface [ 200.104395][ T9440] can: request_module (can-proto-0) failed. [ 200.117471][ T9444] dummy0: left promiscuous mode [ 200.135299][ T9440] netlink: 'syz.0.1074': attribute type 10 has an invalid length. [ 200.142388][ T9444] dummy0: entered promiscuous mode [ 200.150715][ T9444] team0: Failed to send options change via netlink (err -105) [ 200.158403][ T9444] team0: Port device dummy0 added [ 200.184970][ T9440] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 200.208601][ T9440] dummy0: left promiscuous mode [ 200.263730][ T9440] team0: Failed to send options change via netlink (err -105) [ 200.277382][ T9440] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 200.287703][ T9440] team0: Port device dummy0 removed [ 200.304002][ T9440] dummy0: entered promiscuous mode [ 200.314428][ T9440] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 200.403339][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1077'. [ 200.446729][ T9448] wireguard0: left promiscuous mode [ 200.452338][ T9448] wireguard0: left allmulticast mode [ 200.458081][ T9448] wireguard1: left promiscuous mode [ 200.469192][ T9448] wireguard1: left allmulticast mode [ 200.475154][ T9448] wireguard2: left promiscuous mode [ 200.485927][ T9448] wireguard2: left allmulticast mode [ 200.500268][ T9448] wireguard3: left promiscuous mode [ 200.511208][ T9448] wireguard3: left allmulticast mode [ 200.517295][ T9448] vlan2: left allmulticast mode [ 200.526926][ T9448] veth1: left allmulticast mode [ 202.375523][ T9409] Set syz1 is full, maxelem 65536 reached [ 256.004664][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.011299][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.444495][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.451262][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.239893][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 346.247600][ T31] Not tainted syzkaller #0 [ 346.253462][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.262577][ T31] task:kworker/0:1 state:D stack:22264 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 346.274985][ T31] Workqueue: events rfkill_sync_work [ 346.280398][ T31] Call Trace: [ 346.283698][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 346.286628][ T31] __schedule+0x1798/0x4cc0 [ 346.291445][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 346.297007][ T31] ? __pfx___schedule+0x10/0x10 [ 346.302204][ T31] ? schedule+0x91/0x360 [ 346.306493][ T31] schedule+0x165/0x360 [ 346.310979][ T31] schedule_preempt_disabled+0x13/0x30 [ 346.316477][ T31] __mutex_lock+0x7e6/0x1350 [ 346.321555][ T31] ? __mutex_lock+0x5bb/0x1350 [ 346.359803][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 346.365287][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 346.393997][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.399463][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 346.410264][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.416990][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 346.427245][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 346.432730][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 346.438616][ T31] rfkill_set_block+0x1d2/0x440 [ 346.443584][ T31] rfkill_sync_work+0x114/0x200 [ 346.448467][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 346.454477][ T31] process_scheduled_works+0xae1/0x17b0 [ 346.460254][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.466505][ T31] worker_thread+0x8a0/0xda0 [ 346.471425][ T31] kthread+0x70e/0x8a0 [ 346.475621][ T31] ? __pfx_worker_thread+0x10/0x10 [ 346.481023][ T31] ? __pfx_kthread+0x10/0x10 [ 346.485652][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.490967][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.496197][ T31] ? __pfx_kthread+0x10/0x10 [ 346.500926][ T31] ret_from_fork+0x3fc/0x770 [ 346.505654][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 346.511028][ T31] ? __switch_to_asm+0x39/0x70 [ 346.515831][ T31] ? __switch_to_asm+0x33/0x70 [ 346.520738][ T31] ? __pfx_kthread+0x10/0x10 [ 346.525547][ T31] ret_from_fork_asm+0x1a/0x30 [ 346.530520][ T31] [ 346.533852][ T31] INFO: task kworker/0:5:5935 blocked for more than 143 seconds. [ 346.541832][ T31] Not tainted syzkaller #0 [ 346.546871][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.555848][ T31] task:kworker/0:5 state:D stack:23048 pid:5935 tgid:5935 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 346.568402][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 346.575321][ T31] Call Trace: [ 346.578623][ T31] [ 346.581817][ T31] __schedule+0x1798/0x4cc0 [ 346.586532][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.593401][ T31] ? __pfx___schedule+0x10/0x10 [ 346.598285][ T31] ? schedule+0x91/0x360 [ 346.602596][ T31] schedule+0x165/0x360 [ 346.606893][ T31] schedule_preempt_disabled+0x13/0x30 [ 346.612569][ T31] __mutex_lock+0x7e6/0x1350 [ 346.617245][ T31] ? __mutex_lock+0x5bb/0x1350 [ 346.622264][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 346.628911][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 346.634441][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 346.640455][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 346.646379][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 346.652913][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 346.658918][ T31] process_scheduled_works+0xae1/0x17b0 [ 346.664744][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 346.671147][ T31] worker_thread+0x8a0/0xda0 [ 346.676103][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 346.682653][ T31] ? __kthread_parkme+0x7b/0x200 [ 346.687822][ T31] kthread+0x70e/0x8a0 [ 346.692066][ T31] ? __pfx_worker_thread+0x10/0x10 [ 346.697416][ T31] ? __pfx_kthread+0x10/0x10 [ 346.702097][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.707457][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.712911][ T31] ? __pfx_kthread+0x10/0x10 [ 346.718126][ T31] ret_from_fork+0x3fc/0x770 [ 346.723028][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 346.728417][ T31] ? __switch_to_asm+0x39/0x70 [ 346.733605][ T31] ? __switch_to_asm+0x33/0x70 [ 346.738624][ T31] ? __pfx_kthread+0x10/0x10 [ 346.743457][ T31] ret_from_fork_asm+0x1a/0x30 [ 346.748408][ T31] [ 346.751697][ T31] INFO: task syz.2.978:9134 blocked for more than 143 seconds. [ 346.759468][ T31] Not tainted syzkaller #0 [ 346.764660][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 346.773393][ T31] task:syz.2.978 state:D stack:25096 pid:9134 tgid:9134 ppid:5865 task_flags:0x400040 flags:0x00004004 [ 346.785648][ T31] Call Trace: [ 346.788946][ T31] [ 346.792085][ T31] __schedule+0x1798/0x4cc0 [ 346.797063][ T31] ? validate_chain+0x897/0x2140 [ 346.802562][ T31] ? __lock_acquire+0xab9/0xd20 [ 346.807466][ T31] ? __pfx___schedule+0x10/0x10 [ 346.812653][ T31] ? schedule+0x91/0x360 [ 346.817013][ T31] schedule+0x165/0x360 [ 346.821313][ T31] schedule_timeout+0x9a/0x270 [ 346.826190][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 346.831927][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 346.837259][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.842596][ T31] ? wait_for_completion+0x267/0x5d0 [ 346.847989][ T31] wait_for_completion+0x2bf/0x5d0 [ 346.853377][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 346.859062][ T31] ? __flush_work+0xd2/0xbc0 [ 346.863739][ T31] ? __flush_work+0xd2/0xbc0 [ 346.868445][ T31] __flush_work+0x9b9/0xbc0 [ 346.873134][ T31] ? __flush_work+0xd2/0xbc0 [ 346.878190][ T31] ? __pfx___flush_work+0x10/0x10 [ 346.883327][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 346.888834][ T31] ? __pfx___cancel_work+0x10/0x10 [ 346.894171][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 346.899999][ T31] __cancel_work_sync+0xbe/0x110 [ 346.905054][ T31] rfkill_unregister+0x92/0x220 [ 346.910129][ T31] nfc_unregister_device+0x96/0x2a0 [ 346.915362][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 346.921166][ T31] virtual_ncidev_close+0x56/0x90 [ 346.926215][ T31] __fput+0x44c/0xa70 [ 346.930280][ T31] task_work_run+0x1d1/0x260 [ 346.935186][ T31] ? __pfx_task_work_run+0x10/0x10 [ 346.940428][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 346.946049][ T31] exit_to_user_mode_loop+0xec/0x110 [ 346.951645][ T31] do_syscall_64+0x2bd/0x3b0 [ 346.956302][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.962501][ T31] ? asm_common_interrupt+0x26/0x40 [ 346.967896][ T31] ? clear_bhb_loop+0x60/0xb0 [ 346.972718][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.978743][ T31] RIP: 0033:0x7fb2ec18ebe9 [ 346.983317][ T31] RSP: 002b:00007ffc0cf1b388 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 346.992030][ T31] RAX: 0000000000000000 RBX: 00007fb2ec3c7da0 RCX: 00007fb2ec18ebe9 [ 347.000198][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 347.008475][ T31] RBP: 00007fb2ec3c7da0 R08: 0000000000000260 R09: 0000001a0cf1b67f [ 347.020259][ T31] R10: 00007fb2ec3c7cb0 R11: 0000000000000246 R12: 000000000002ef46 [ 347.028541][ T31] R13: 00007fb2ec3c6180 R14: ffffffffffffffff R15: 00007ffc0cf1b4a0 [ 347.037143][ T31] [ 347.040341][ T31] INFO: task syz.3.1073:9436 blocked for more than 144 seconds. [ 347.048007][ T31] Not tainted syzkaller #0 [ 347.059257][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.068080][ T31] task:syz.3.1073 state:D stack:24696 pid:9436 tgid:9435 ppid:5878 task_flags:0x400140 flags:0x00004006 [ 347.080647][ T31] Call Trace: [ 347.084050][ T31] [ 347.087098][ T31] __schedule+0x1798/0x4cc0 [ 347.091971][ T31] ? __lock_acquire+0xab9/0xd20 [ 347.096862][ T31] ? __lock_acquire+0xab9/0xd20 [ 347.101868][ T31] ? __pfx___schedule+0x10/0x10 [ 347.107356][ T31] ? schedule+0x91/0x360 [ 347.111771][ T31] schedule+0x165/0x360 [ 347.116098][ T31] schedule_preempt_disabled+0x13/0x30 [ 347.121832][ T31] __mutex_lock+0x7e6/0x1350 [ 347.126734][ T31] ? rcu_is_watching+0x15/0xb0 [ 347.131790][ T31] ? __mutex_lock+0x5bb/0x1350 [ 347.136599][ T31] ? rfkill_register+0x37/0x8e0 [ 347.141525][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 347.146572][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 347.151809][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.157216][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 347.162560][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 347.168224][ T31] rfkill_register+0x37/0x8e0 [ 347.172971][ T31] wiphy_register+0x214c/0x28d0 [ 347.177863][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 347.183120][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 347.188371][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 347.194636][ T31] ieee80211_register_hw+0x3484/0x4100 [ 347.200369][ T31] ? ieee80211_register_hw+0x14d1/0x4100 [ 347.206208][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 347.212217][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 347.218574][ T31] ? __hrtimer_setup+0x187/0x210 [ 347.223596][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 347.229618][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 347.235694][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 347.242139][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 347.247821][ T31] ? __sock_sendmsg+0x21c/0x270 [ 347.253015][ T31] ? ____sys_sendmsg+0x505/0x830 [ 347.257983][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 347.263222][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 347.268365][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 347.273645][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 347.279590][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 347.285388][ T31] ? __nla_parse+0x40/0x60 [ 347.289967][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 347.296613][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 347.302340][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 347.308450][ T31] ? bpf_lsm_capable+0x9/0x20 [ 347.313308][ T31] ? security_capable+0x7e/0x2e0 [ 347.318393][ T31] genl_rcv_msg+0x60e/0x790 [ 347.323103][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.328165][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 347.334014][ T31] netlink_rcv_skb+0x208/0x470 [ 347.338814][ T31] ? __lock_acquire+0xab9/0xd20 [ 347.343767][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.348814][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.354371][ T31] ? down_read+0x1ad/0x2e0 [ 347.358809][ T31] genl_rcv+0x28/0x40 [ 347.362979][ T31] netlink_unicast+0x82f/0x9e0 [ 347.367816][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 347.373268][ T31] ? netlink_sendmsg+0x642/0xb30 [ 347.378454][ T31] ? skb_put+0x11b/0x210 [ 347.382808][ T31] netlink_sendmsg+0x805/0xb30 [ 347.387622][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.393128][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 347.398164][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.403521][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.408830][ T31] __sock_sendmsg+0x21c/0x270 [ 347.413678][ T31] ____sys_sendmsg+0x505/0x830 [ 347.418643][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.424180][ T31] ? import_iovec+0x74/0xa0 [ 347.428811][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 347.433869][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.439222][ T31] ? __fget_files+0x2a/0x420 [ 347.444056][ T31] ? __fget_files+0x3a0/0x420 [ 347.448825][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 347.453839][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.459535][ T31] ? rcu_is_watching+0x15/0xb0 [ 347.464680][ T31] ? do_syscall_64+0xbe/0x3b0 [ 347.469485][ T31] do_syscall_64+0xfa/0x3b0 [ 347.474393][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.480069][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.486295][ T31] ? clear_bhb_loop+0x60/0xb0 [ 347.491222][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.497165][ T31] RIP: 0033:0x7f50e158ebe9 [ 347.501714][ T31] RSP: 002b:00007f50df7ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.510442][ T31] RAX: ffffffffffffffda RBX: 00007f50e17c5fa0 RCX: 00007f50e158ebe9 [ 347.518444][ T31] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 347.526999][ T31] RBP: 00007f50e1611e19 R08: 0000000000000000 R09: 0000000000000000 [ 347.535306][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.543484][ T31] R13: 00007f50e17c6038 R14: 00007f50e17c5fa0 R15: 00007ffccac4c4a8 [ 347.551860][ T31] [ 347.554934][ T31] INFO: task syz.4.1076:9443 blocked for more than 144 seconds. [ 347.562707][ T31] Not tainted syzkaller #0 [ 347.567757][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.576920][ T31] task:syz.4.1076 state:D stack:27688 pid:9443 tgid:9442 ppid:5871 task_flags:0x400040 flags:0x00004004 [ 347.589074][ T31] Call Trace: [ 347.592714][ T31] [ 347.595682][ T31] __schedule+0x1798/0x4cc0 [ 347.600909][ T31] ? __lock_acquire+0xab9/0xd20 [ 347.605845][ T31] ? __lock_acquire+0xab9/0xd20 [ 347.610785][ T31] ? __pfx___schedule+0x10/0x10 [ 347.615766][ T31] ? schedule+0x91/0x360 [ 347.620115][ T31] schedule+0x165/0x360 [ 347.624313][ T31] schedule_preempt_disabled+0x13/0x30 [ 347.629960][ T31] __mutex_lock+0x7e6/0x1350 [ 347.634594][ T31] ? __mutex_lock+0x5bb/0x1350 [ 347.639497][ T31] ? genl_rcv_msg+0x10d/0x790 [ 347.644366][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 347.649715][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 347.654978][ T31] ? radix_tree_lookup+0x240/0x290 [ 347.660590][ T31] genl_rcv_msg+0x10d/0x790 [ 347.665148][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.670367][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 347.675432][ T31] ? __asan_memcpy+0x40/0x70 [ 347.680122][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 347.685785][ T31] netlink_rcv_skb+0x208/0x470 [ 347.690629][ T31] ? __lock_acquire+0xab9/0xd20 [ 347.695596][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.701086][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.706440][ T31] ? down_read+0x1ad/0x2e0 [ 347.711154][ T31] genl_rcv+0x28/0x40 [ 347.715256][ T31] netlink_unicast+0x82f/0x9e0 [ 347.720173][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 347.725507][ T31] ? netlink_sendmsg+0x642/0xb30 [ 347.730537][ T31] ? skb_put+0x11b/0x210 [ 347.734823][ T31] netlink_sendmsg+0x805/0xb30 [ 347.739598][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.744952][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 347.750085][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.755403][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.760782][ T31] __sock_sendmsg+0x21c/0x270 [ 347.765497][ T31] ____sys_sendmsg+0x505/0x830 [ 347.770665][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.776043][ T31] ? import_iovec+0x74/0xa0 [ 347.780731][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 347.785457][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.790912][ T31] ? preempt_schedule_irq+0xde/0x150 [ 347.796262][ T31] ? __fget_files+0x2a/0x420 [ 347.800948][ T31] ? __fget_files+0x3a0/0x420 [ 347.805651][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 347.810665][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.816339][ T31] ? rcu_is_watching+0x15/0xb0 [ 347.821201][ T31] ? do_syscall_64+0xbe/0x3b0 [ 347.826077][ T31] do_syscall_64+0xfa/0x3b0 [ 347.830740][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.836107][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.844978][ T31] ? clear_bhb_loop+0x60/0xb0 [ 347.850108][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.856099][ T31] RIP: 0033:0x7f6e1bf8ebe9 [ 347.860813][ T31] RSP: 002b:00007f6e1cdbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.869368][ T31] RAX: ffffffffffffffda RBX: 00007f6e1c1c5fa0 RCX: 00007f6e1bf8ebe9 [ 347.877873][ T31] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 347.886245][ T31] RBP: 00007f6e1c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 347.894528][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.903807][ T31] R13: 00007f6e1c1c6038 R14: 00007f6e1c1c5fa0 R15: 00007fff69271968 [ 347.912138][ T31] [ 347.915218][ T31] INFO: task syz.0.1079:9456 blocked for more than 145 seconds. [ 347.922974][ T31] Not tainted syzkaller #0 [ 347.928049][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.936869][ T31] task:syz.0.1079 state:D stack:23208 pid:9456 tgid:9455 ppid:5862 task_flags:0x400140 flags:0x00004004 [ 347.949325][ T31] Call Trace: [ 347.952867][ T31] [ 347.955834][ T31] __schedule+0x1798/0x4cc0 [ 347.960628][ T31] ? __lock_acquire+0xab9/0xd20 [ 347.965967][ T31] ? __lock_acquire+0xab9/0xd20 [ 347.970895][ T31] ? __pfx___schedule+0x10/0x10 [ 347.975789][ T31] ? schedule+0x91/0x360 [ 347.980183][ T31] schedule+0x165/0x360 [ 347.984360][ T31] schedule_preempt_disabled+0x13/0x30 [ 347.990225][ T31] __mutex_lock+0x7e6/0x1350 [ 347.995079][ T31] ? __mutex_lock+0x5bb/0x1350 [ 348.000242][ T31] ? genl_rcv_msg+0x10d/0x790 [ 348.004965][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 348.010143][ T31] ? stack_trace_save+0x9c/0xe0 [ 348.015040][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 348.020468][ T31] ? radix_tree_lookup+0x240/0x290 [ 348.025613][ T31] genl_rcv_msg+0x10d/0x790 [ 348.031301][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.036330][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.041724][ T31] netlink_rcv_skb+0x208/0x470 [ 348.046513][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.051452][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.056602][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.062025][ T31] ? down_read+0x1ad/0x2e0 [ 348.066489][ T31] genl_rcv+0x28/0x40 [ 348.070626][ T31] netlink_unicast+0x82f/0x9e0 [ 348.075438][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 348.081165][ T31] ? netlink_sendmsg+0x642/0xb30 [ 348.086133][ T31] ? skb_put+0x11b/0x210 [ 348.090572][ T31] netlink_sendmsg+0x805/0xb30 [ 348.095460][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.100888][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 348.105851][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.111322][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.116634][ T31] __sock_sendmsg+0x21c/0x270 [ 348.121491][ T31] __sys_sendto+0x3bd/0x520 [ 348.126114][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 348.131544][ T31] ? count_memcg_event_mm+0x21/0x260 [ 348.137438][ T31] ? exc_page_fault+0x76/0xf0 [ 348.142228][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 348.147756][ T31] __x64_sys_sendto+0xde/0x100 [ 348.152748][ T31] do_syscall_64+0xfa/0x3b0 [ 348.157409][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.163613][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.170403][ T31] ? clear_bhb_loop+0x60/0xb0 [ 348.175450][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.181921][ T31] RIP: 0033:0x7f5c48390a7c [ 348.186530][ T31] RSP: 002b:00007f5c465f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 348.195976][ T31] RAX: ffffffffffffffda RBX: 00007f5c465f4fc0 RCX: 00007f5c48390a7c [ 348.204606][ T31] RDX: 000000000000001c RSI: 00007f5c465f5010 RDI: 0000000000000005 [ 348.212908][ T31] RBP: 0000000000000000 R08: 00007f5c465f4f14 R09: 000000000000000c [ 348.220997][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 348.229213][ T31] R13: 00007f5c465f4f68 R14: 00007f5c465f5010 R15: 0000000000000000 [ 348.237853][ T31] [ 348.241062][ T31] INFO: task syz.1.1080:9460 blocked for more than 145 seconds. [ 348.248872][ T31] Not tainted syzkaller #0 [ 348.254091][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.263106][ T31] task:syz.1.1080 state:D stack:27688 pid:9460 tgid:9459 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 348.275590][ T31] Call Trace: [ 348.278885][ T31] [ 348.282032][ T31] __schedule+0x1798/0x4cc0 [ 348.286583][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.291975][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.296866][ T31] ? __pfx___schedule+0x10/0x10 [ 348.301935][ T31] ? schedule+0x91/0x360 [ 348.306210][ T31] schedule+0x165/0x360 [ 348.310583][ T31] schedule_preempt_disabled+0x13/0x30 [ 348.316104][ T31] __mutex_lock+0x7e6/0x1350 [ 348.321097][ T31] ? __mutex_lock+0x5bb/0x1350 [ 348.325899][ T31] ? genl_rcv_msg+0x10d/0x790 [ 348.330682][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 348.335731][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 348.342449][ T31] ? radix_tree_lookup+0x240/0x290 [ 348.348125][ T31] genl_rcv_msg+0x10d/0x790 [ 348.352884][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.357944][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 348.363210][ T31] ? __asan_memcpy+0x40/0x70 [ 348.367914][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 348.373659][ T31] netlink_rcv_skb+0x208/0x470 [ 348.378549][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.383676][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.388774][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.394523][ T31] ? down_read+0x1ad/0x2e0 [ 348.399090][ T31] genl_rcv+0x28/0x40 [ 348.403354][ T31] netlink_unicast+0x82f/0x9e0 [ 348.408156][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 348.413708][ T31] ? netlink_sendmsg+0x642/0xb30 [ 348.418682][ T31] ? skb_put+0x11b/0x210 [ 348.423317][ T31] netlink_sendmsg+0x805/0xb30 [ 348.428231][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.434133][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 348.439204][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.444830][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.451349][ T31] __sock_sendmsg+0x21c/0x270 [ 348.456075][ T31] ____sys_sendmsg+0x505/0x830 [ 348.460956][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.466354][ T31] ? import_iovec+0x74/0xa0 [ 348.471141][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 348.475844][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.481235][ T31] ? __fget_files+0x2a/0x420 [ 348.485853][ T31] ? __fget_files+0x3a0/0x420 [ 348.490965][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 348.496188][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.501858][ T31] ? rcu_is_watching+0x15/0xb0 [ 348.506653][ T31] ? do_syscall_64+0xbe/0x3b0 [ 348.511592][ T31] do_syscall_64+0xfa/0x3b0 [ 348.516132][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.521554][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.527637][ T31] ? clear_bhb_loop+0x60/0xb0 [ 348.532526][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.538615][ T31] RIP: 0033:0x7fb7ca98ebe9 [ 348.543155][ T31] RSP: 002b:00007fb7cb85e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.551792][ T31] RAX: ffffffffffffffda RBX: 00007fb7cabc5fa0 RCX: 00007fb7ca98ebe9 [ 348.561145][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 348.569163][ T31] RBP: 00007fb7caa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 348.577298][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.585507][ T31] R13: 00007fb7cabc6038 R14: 00007fb7cabc5fa0 R15: 00007ffe0a9e99d8 [ 348.593810][ T31] [ 348.596917][ T31] INFO: task syz.1.1080:9461 blocked for more than 145 seconds. [ 348.604753][ T31] Not tainted syzkaller #0 [ 348.609857][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.618629][ T31] task:syz.1.1080 state:D stack:28360 pid:9461 tgid:9459 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 348.630909][ T31] Call Trace: [ 348.634411][ T31] [ 348.637343][ T31] __schedule+0x1798/0x4cc0 [ 348.642606][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.647498][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.652402][ T31] ? __pfx___schedule+0x10/0x10 [ 348.657459][ T31] ? schedule+0x91/0x360 [ 348.661818][ T31] schedule+0x165/0x360 [ 348.666103][ T31] schedule_preempt_disabled+0x13/0x30 [ 348.671763][ T31] __mutex_lock+0x7e6/0x1350 [ 348.676563][ T31] ? __mutex_lock+0x5bb/0x1350 [ 348.681431][ T31] ? genl_rcv_msg+0x10d/0x790 [ 348.686249][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 348.691383][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 348.696673][ T31] ? radix_tree_lookup+0x240/0x290 [ 348.702041][ T31] genl_rcv_msg+0x10d/0x790 [ 348.706794][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.712115][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 348.717366][ T31] ? __asan_memcpy+0x40/0x70 [ 348.722068][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 348.727502][ T31] netlink_rcv_skb+0x208/0x470 [ 348.732327][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.737214][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.742348][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.747768][ T31] ? down_read+0x1ad/0x2e0 [ 348.752346][ T31] genl_rcv+0x28/0x40 [ 348.756368][ T31] netlink_unicast+0x82f/0x9e0 [ 348.761231][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 348.766561][ T31] ? netlink_sendmsg+0x642/0xb30 [ 348.771534][ T31] ? skb_put+0x11b/0x210 [ 348.775798][ T31] netlink_sendmsg+0x805/0xb30 [ 348.780849][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.786197][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 348.791373][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.797126][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.802633][ T31] __sock_sendmsg+0x21c/0x270 [ 348.807543][ T31] __sys_sendto+0x3bd/0x520 [ 348.812353][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 348.817891][ T31] ? count_memcg_event_mm+0x21/0x260 [ 348.823550][ T31] ? exc_page_fault+0x76/0xf0 [ 348.828384][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 348.833971][ T31] __x64_sys_sendto+0xde/0x100 [ 348.838897][ T31] do_syscall_64+0xfa/0x3b0 [ 348.844105][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.849369][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.855724][ T31] ? clear_bhb_loop+0x60/0xb0 [ 348.860551][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.866512][ T31] RIP: 0033:0x7fb7ca990a7c [ 348.871115][ T31] RSP: 002b:00007fb7cb83bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 348.879581][ T31] RAX: ffffffffffffffda RBX: 00007fb7cb83bfc0 RCX: 00007fb7ca990a7c [ 348.888322][ T31] RDX: 0000000000000020 RSI: 00007fb7cb83c010 RDI: 0000000000000005 [ 348.896954][ T31] RBP: 0000000000000000 R08: 00007fb7cb83bf14 R09: 000000000000000c [ 348.905427][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 348.913684][ T31] R13: 00007fb7cb83bf68 R14: 00007fb7cb83c010 R15: 0000000000000000 [ 348.921909][ T31] [ 348.924997][ T31] [ 348.924997][ T31] Showing all locks held in the system: [ 348.933124][ T31] 4 locks held by kworker/0:1/10: [ 348.938185][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 348.950217][ T31] #1: ffffc900000f7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 348.962895][ T31] #2: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 348.973481][ T31] #3: ffff88807a5ee100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 348.983481][ T31] 1 lock held by khungtaskd/31: [ 348.988534][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 348.998645][ T31] 2 locks held by getty/5627: [ 349.003542][ T31] #0: ffff88814d9cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 349.013548][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 349.023909][ T31] 3 locks held by kworker/0:5/5935: [ 349.029223][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 349.040671][ T31] #1: ffffc9000454fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 349.074604][ T31] #2: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 349.086454][ T31] 1 lock held by syz.2.978/9134: [ 349.091583][ T31] #0: ffff88807a5ee100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 349.101667][ T31] 3 locks held by syz.3.1073/9436: [ 349.106790][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.115288][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 349.124542][ T31] #2: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.136721][ T31] 2 locks held by syz.4.1076/9443: [ 349.141934][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.150974][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 349.160227][ T31] 2 locks held by syz.0.1079/9456: [ 349.165547][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.173883][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 349.183250][ T31] 2 locks held by syz.1.1080/9460: [ 349.188474][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.196983][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 349.206438][ T31] 2 locks held by syz.1.1080/9461: [ 349.211714][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.220133][ T31] #1: ffffffff8f59e8a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 349.229189][ T31] 2 locks held by syz-executor/9464: [ 349.234743][ T31] #0: ffff8880551f8918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.244861][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.255222][ T31] 2 locks held by syz-executor/9467: [ 349.260701][ T31] #0: ffff88807ad9f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.271019][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.281459][ T31] 2 locks held by syz-executor/9468: [ 349.286762][ T31] #0: ffff88805584d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.297254][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.307931][ T31] 2 locks held by syz-executor/9470: [ 349.313429][ T31] #0: ffff888022be3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.323628][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.333669][ T31] 2 locks held by syz-executor/9472: [ 349.338988][ T31] #0: ffff88807b15e118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.349114][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.359227][ T31] 2 locks held by syz-executor/9474: [ 349.364616][ T31] #0: ffff888029899918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.374875][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.385252][ T31] 2 locks held by syz-executor/9477: [ 349.390651][ T31] #0: ffff8880226e0118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.401449][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.411935][ T31] 2 locks held by syz-executor/9478: [ 349.417477][ T31] #0: ffff88802ff43118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.427689][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.437999][ T31] 2 locks held by syz-executor/9480: [ 349.443569][ T31] #0: ffff888028187118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.453886][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.464008][ T31] 2 locks held by syz-executor/9482: [ 349.469404][ T31] #0: ffff8880226e1118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.479699][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.489763][ T31] 2 locks held by syz-executor/9484: [ 349.495351][ T31] #0: ffff8880500ee918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.506097][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.516187][ T31] 2 locks held by syz-executor/9487: [ 349.521681][ T31] #0: ffff88802ec34918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.531916][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.542009][ T31] 2 locks held by syz-executor/9488: [ 349.547316][ T31] #0: ffff888078cb8118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.557630][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.568032][ T31] 2 locks held by syz-executor/9490: [ 349.573398][ T31] #0: ffff888053edb118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.584051][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.594236][ T31] 2 locks held by syz-executor/9492: [ 349.599550][ T31] #0: ffff888030b47918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 349.609900][ T31] #1: ffffffff8f812d68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 349.620293][ T31] [ 349.622659][ T31] ============================================= [ 349.622659][ T31] [ 349.631450][ T31] NMI backtrace for cpu 1 [ 349.631466][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 349.631487][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.631498][ T31] Call Trace: [ 349.631506][ T31] [ 349.631513][ T31] dump_stack_lvl+0x189/0x250 [ 349.631543][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.631563][ T31] ? __pfx__printk+0x10/0x10 [ 349.631601][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 349.631632][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 349.631662][ T31] ? __pfx__printk+0x10/0x10 [ 349.631692][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 349.631722][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 349.631753][ T31] watchdog+0xf93/0xfe0 [ 349.631785][ T31] ? watchdog+0x1de/0xfe0 [ 349.631816][ T31] kthread+0x70e/0x8a0 [ 349.631842][ T31] ? __pfx_watchdog+0x10/0x10 [ 349.631867][ T31] ? __pfx_kthread+0x10/0x10 [ 349.631894][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.631923][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.631942][ T31] ? __pfx_kthread+0x10/0x10 [ 349.631966][ T31] ret_from_fork+0x3fc/0x770 [ 349.632000][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 349.632026][ T31] ? __switch_to_asm+0x39/0x70 [ 349.632048][ T31] ? __switch_to_asm+0x33/0x70 [ 349.632069][ T31] ? __pfx_kthread+0x10/0x10 [ 349.632098][ T31] ret_from_fork_asm+0x1a/0x30 [ 349.632137][ T31] [ 349.632145][ T31] Sending NMI from CPU 1 to CPUs 0: [ 349.780392][ C0] NMI backtrace for cpu 0 [ 349.780412][ C0] CPU: 0 UID: 0 PID: 1008 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 349.780430][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.780439][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 349.780461][ C0] RIP: 0010:clear_page_erms+0xb/0x20 [ 349.780482][ C0] Code: 48 8d 7f 40 75 d9 90 e9 83 1b 04 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa b9 00 10 00 00 31 c0 aa c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 349.780495][ C0] RSP: 0018:ffffc90003707390 EFLAGS: 00010246 [ 349.780508][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000c00 [ 349.780518][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888097355400 [ 349.780528][ C0] RBP: 1ffffffff1b7b28f R08: ffffffff8fa39237 R09: 0000000000000000 [ 349.780538][ C0] R10: ffffed1012e6a000 R11: fffffbfff1f47247 R12: fffa800097355000 [ 349.780549][ C0] R13: fffa800000000000 R14: 1ffffffff1b7b28d R15: 0000000000000003 [ 349.780560][ C0] FS: 0000000000000000(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 349.780572][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.780583][ C0] CR2: fffffffffffffffc CR3: 000000000df36000 CR4: 00000000003526f0 [ 349.780599][ C0] Call Trace: [ 349.780605][ C0] [ 349.780610][ C0] post_alloc_hook+0x1bd/0x2a0 [ 349.780634][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 349.780654][ C0] ? unwind_next_frame+0xa5/0x2390 [ 349.780674][ C0] ? unwind_next_frame+0xa5/0x2390 [ 349.780690][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 349.780716][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 349.780732][ C0] ? prepare_alloc_pages+0x213/0x610 [ 349.780749][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 349.780766][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 349.780785][ C0] ? policy_nodemask+0x27c/0x720 [ 349.780804][ C0] ? ___slab_alloc+0x236/0x1420 [ 349.780825][ C0] alloc_pages_mpol+0x232/0x4a0 [ 349.780846][ C0] allocate_slab+0x8a/0x370 [ 349.780862][ C0] ___slab_alloc+0xbeb/0x1420 [ 349.780884][ C0] ? __alloc_skb+0x142/0x2d0 [ 349.780902][ C0] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 349.780921][ C0] ? __alloc_skb+0x142/0x2d0 [ 349.780937][ C0] ? __alloc_skb+0x142/0x2d0 [ 349.780950][ C0] kmalloc_reserve+0x136/0x290 [ 349.780964][ C0] ? __handle_control+0x70d0/0x7740 [ 349.780985][ C0] __alloc_skb+0x142/0x2d0 [ 349.781002][ C0] nsim_dev_trap_report_work+0x29a/0xb80 [ 349.781023][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 349.781039][ C0] process_scheduled_works+0xae1/0x17b0 [ 349.781065][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.781086][ C0] worker_thread+0x8a0/0xda0 [ 349.781112][ C0] kthread+0x70e/0x8a0 [ 349.781130][ C0] ? __pfx_worker_thread+0x10/0x10 [ 349.781151][ C0] ? __pfx_kthread+0x10/0x10 [ 349.781169][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.781190][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.781204][ C0] ? __pfx_kthread+0x10/0x10 [ 349.781232][ C0] ret_from_fork+0x3fc/0x770 [ 349.781248][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 349.781265][ C0] ? __switch_to_asm+0x39/0x70 [ 349.781282][ C0] ? __switch_to_asm+0x33/0x70 [ 349.781298][ C0] ? __pfx_kthread+0x10/0x10 [ 349.781316][ C0] ret_from_fork_asm+0x1a/0x30 [ 349.781340][ C0] [ 349.781537][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 350.118342][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 350.127467][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.137651][ T31] Call Trace: [ 350.140940][ T31] [ 350.143878][ T31] dump_stack_lvl+0x99/0x250 [ 350.148662][ T31] ? __asan_memcpy+0x40/0x70 [ 350.153466][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.158667][ T31] ? __pfx__printk+0x10/0x10 [ 350.163281][ T31] vpanic+0x281/0x750 [ 350.167267][ T31] ? __pfx_vpanic+0x10/0x10 [ 350.171857][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 350.177522][ T31] ? preempt_schedule+0xae/0xc0 [ 350.182373][ T31] ? preempt_schedule_common+0x83/0xd0 [ 350.187924][ T31] panic+0xb9/0xc0 [ 350.191739][ T31] ? __pfx_panic+0x10/0x10 [ 350.196247][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 350.201650][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 350.207899][ T31] watchdog+0xfd2/0xfe0 [ 350.212094][ T31] ? watchdog+0x1de/0xfe0 [ 350.216521][ T31] kthread+0x70e/0x8a0 [ 350.220595][ T31] ? __pfx_watchdog+0x10/0x10 [ 350.225454][ T31] ? __pfx_kthread+0x10/0x10 [ 350.230051][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.235344][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.240725][ T31] ? __pfx_kthread+0x10/0x10 [ 350.245320][ T31] ret_from_fork+0x3fc/0x770 [ 350.250009][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 350.255125][ T31] ? __switch_to_asm+0x39/0x70 [ 350.259893][ T31] ? __switch_to_asm+0x33/0x70 [ 350.264661][ T31] ? __pfx_kthread+0x10/0x10 [ 350.269354][ T31] ret_from_fork_asm+0x1a/0x30 [ 350.274147][ T31] [ 350.277851][ T31] Kernel Offset: disabled [ 350.282172][ T31] Rebooting in 86400 seconds..