last executing test programs: 24.961484755s ago: executing program 4 (id=922): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3f8, 0x210, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x84080}, 0x8000) sendto$inet6(r0, &(0x7f0000000000)="d2", 0x34000, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f00000012c0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 24.512497862s ago: executing program 4 (id=927): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000010100800c000100f600000000000000140003"], 0x114}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, r2, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@dev, @initdev, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x5, 0x10, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x80, 0x4060, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$can_bcm(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r8], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0xa8fe4ec47b9ce9f8, 0x77, 0x4, 0x3, 0x1, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x80, 0x2, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r15, @ANYBLOB="f00014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0) r16 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r16, 0x107, 0x1, &(0x7f0000000000)={r17, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r16, 0x107, 0x1, &(0x7f00000001c0)={r17, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r16, 0x107, 0x2, &(0x7f00000003c0)={r17, 0x1, 0x4, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0xf2, 0xa, 0x19b7, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0x8, 0x8c85}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000009c0)={0x230, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x810}, 0x0) 23.80445382s ago: executing program 4 (id=933): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="f0c15f579c77", 0x6}], 0x1}}], 0x1, 0x24044c41) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x3, 0x8000000000, 0x4000, 0x0, 0xfffffffffffffffc, 0x80}, 0x0, &(0x7f0000000180)={0x3ff, 0x0, 0x10000000000040, 0x0, 0xb3e, 0x1ff, 0x7fffffff, 0x3d5}, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x20, r5, 0xd0b, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a000000060001003c"], 0x1c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x7, 0x401, 0x0, 0x2, 0x4, 0x5}}, {0xe, 0x2, [0x800, 0xfff8, 0x8001, 0x1, 0xe]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff0, 0x8}, {0xa8, 0x1b, 0x1}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20001091}, 0x804) close(0x4) 23.012624892s ago: executing program 2 (id=946): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) unshare(0x10000400) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000300)={0x11, 0x9, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) 22.831674836s ago: executing program 4 (id=949): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f00000002c0), 0x0, 0x0) 22.559881168s ago: executing program 2 (id=951): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000002", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7113b1e1bfdd83a3f1db95bec9d84de050001a0090780000"], 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x6, 0x4}, 0x20) (async) connect$l2tp6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x6, 0x4}, 0x20) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) (async) bind$l2tp6(r5, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$FIOCLEX(r6, 0x5451) 22.487341939s ago: executing program 4 (id=952): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x7e6, 0x12000, 0x4, 0x5}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xb9, 0x9, 0x4, 0x791}, 0x8) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r2 = accept4$packet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x14, 0x1000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x4, 0x10, 0x60, @dev={0xfe, 0x80, '\x00', 0x24}, @rand_addr=' \x01\x00', 0x7, 0x10, 0x0, 0x7}}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0xe7, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newnexthop={0x24, 0x5e, 0xa25, 0x400, 0x25dfdbfe, {0x2, 0x0, 0x4}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1fe}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) 22.396399992s ago: executing program 2 (id=953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x200000000000003d, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x103) sendmsg(r4, &(0x7f0000000600)={&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x6, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000004b00)=ANY=[], 0x10}, 0x20008810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001cc0), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x2c, r6, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x10}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x40}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000003c0)={0x2c, r8, 0x1d, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x36ecad16583bbcc3}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf251d0000000c002f80080001000100000008000300", @ANYRES32=r10, @ANYBLOB="0c000600030000000000000079977994f9c93b0ad9eea69728e3cd9b85064c72427dd2bc7722fbea253f53a0bd30564a8f9f0e7ea904baff492ce2e13332aabbdf7c5276a7a7a6d7e4c0e6e44560438cccb36ee77429cb860a98ee19f04fe997d0ef311bf684adbf2c"], 0x34}, 0x1, 0x0, 0x0, 0x2c048810}, 0x40080) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000240)={r2, 0xfffffffffffffbaf, 0x0, 0x9}) r12 = socket(0x28, 0x1, 0x0) getsockname$packet(r12, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) accept$alg(0xffffffffffffffff, 0x0, 0x0) r13 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000300)=0x80, 0x80800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)={0xffffffffffffffe7, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x0, 0x7, 0x0, 0x1, [{}, {}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r3}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r4}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r11}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r12}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r13}}, {0x0, 0x1, 0x0, 0x1, {0x0, 0x1, r14}}]}, @NBD_ATTR_SERVER_FLAGS={0x0, 0x5, 0x104}]}, 0x1}}, 0x4030844) 22.273208797s ago: executing program 2 (id=955): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) (async) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) unshare(0x40020a00) 22.052423445s ago: executing program 2 (id=960): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket(0x1d, 0x2, 0x6) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r4, 0x2f}, 0x10) socket$igmp(0x2, 0x3, 0x2) unshare(0x22020600) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x0, &(0x7f0000000840)=0x7fffffff, 0xfffffd3f) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, 0x0, &(0x7f00000001c0)=0x5c) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaa89aaaaffff0a00000000000000001c00000400006400f3"], 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) 21.760615545s ago: executing program 2 (id=963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000050000000000000000003f80067e00000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4044}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000002000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8844) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="41460142135bcaadfe14e1962593c60096fa221ca2b3bc09a396cf2cfdd10fff4bcd4d6360", @ANYRES8=r10], 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x41) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r11, r13, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x2, &(0x7f0000000540)=[&(0x7f0000000340)='\x00', &(0x7f0000000480)='\x00'], 0x0, 0x8}}, 0x30) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r14 = socket(0xa, 0x2, 0x0) getpeername$packet(r14, &(0x7f0000000200)={0x11, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r15, @ANYRES32, @ANYBLOB="0000000000000000000000f70000000000000000000100b9000000c64b862f150c00ead91bcd"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) 21.488712158s ago: executing program 4 (id=966): r0 = socket(0x1e, 0x805, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x10f, 0x20, 0x0, 0x7f) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="c52314a7915dadeb18a7467a427eb7a83435d0a99b91c14cc0bafed32c4e7e3821936b80795498574bd5b724bcdc9922205db53ef0232ce6cf1b4cfeb3f30acb4fd976fe923b5d278a0f960119", 0x4d}], 0x1}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 17.094822012s ago: executing program 0 (id=1015): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) socket$packet(0x11, 0x2, 0x300) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000300)={0x11, 0x9, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) 16.802241721s ago: executing program 0 (id=1018): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) (async) syz_emit_ethernet(0x4e, &(0x7f0000000a00)={@local, @random="4a26292432ca", @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "86605a", 0x18, 0x11, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, {[], {0x4e23, 0x4e24, 0x18, 0x0, @wg=@data={0x4, 0x6, 0xd6}}}}}}}, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 16.648817417s ago: executing program 3 (id=1019): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 16.618821356s ago: executing program 3 (id=1020): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x400000000001, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000f40)=""/250, 0xfa}, {0x0}], 0x2) sendto$inet(r3, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) r5 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000009c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x1b, 0x24, 0x67, 0x0, 0x4, 0x21, 0x0, @empty, @multicast2}, {{0x2, 0x4e22, 0x4, 0x1, 0xb, 0x0, 0x0, 0x2, 0x5, "d89e1f", 0x9, "2d6ff7"}}}}}}, 0x0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x0) r9 = accept4(r3, 0x0, 0x0, 0x80800) listen(r9, 0x5) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000, 0x1000, 0x0, 0x3}, 0x20) 16.596410088s ago: executing program 0 (id=1021): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x15ad}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000340)={r7, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0x81, 0x91, 0xffffffff}, 0x9c) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYRES16=r3, @ANYRESDEC=0x0, @ANYBLOB="c99d42e023ae978544fb21f76fc7d1f12defae03290b4422f5e120bc28f758252fcdf2a6680bb4c9bf2c4cf893085cca951a0f4917ce6b21f16f05d36304ac82af843eb536232f3e510b5961876a56875fd9c579dc9a342579615e3cfa4858a035e499949e4369bdc5139dbcb73f068f27cacad343e13d4dc5c7841d1e74e67792ec45755065a7", @ANYBLOB="7f84934ab470e16dbf9338", @ANYRESDEC=r5, @ANYRESHEX=r2], 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="fcffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f00000003c0)=@abs={0x1}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4020004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r11, 0x2, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x840) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'k'}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, ']'}]}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$alg(0x26, 0x5, 0x0) r13 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r13, &(0x7f00000000c0), 0x1c) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000001c0)) socket$rxrpc(0x21, 0x2, 0x2) 16.524768773s ago: executing program 0 (id=1023): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x300, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000102050000000000000000000a000000300001802c000180", @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 16.51831613s ago: executing program 1 (id=1024): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="ffe1d9974e2934d573cacd2f2fe13effffffffff0000000000000800000000380000030000019078ac1e0001ac1414aa0300907803240000470000000000000000010090ac14"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x152, 0x4) sendto$inet(r0, &(0x7f0000000080)='v', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1}, 0x2}], 0x1, 0x400123a0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000240), 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x1}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@newqdisc={0xcc, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0xd, 0x7}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x94, 0x2, {{0x10, [0x0, 0x2, 0x6, 0x9, 0x1, 0x8, 0x7, 0xf, 0x0, 0x9, 0x0, 0x5, 0x5, 0x3, 0x1, 0x3], 0x1, [0xffdb, 0x0, 0x4, 0x2, 0x997, 0x7, 0x0, 0x9, 0x257, 0x3, 0x400, 0x1, 0x39b, 0x3, 0x2, 0xed], [0x1800, 0x7, 0xf5, 0x7, 0xfff7, 0x6, 0x5, 0xe2, 0xffff, 0x0, 0xfd86, 0x2, 0x80, 0xd, 0x7a1]}, [@TCA_MQPRIO_MIN_RATE64={0x34, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xf}, {0xc, 0x3, 0x200000000000000}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x2}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44045}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x7, 0x8000000, 0x10, @private2, @empty, 0x10, 0x7800, 0xe93c, 0xfff}}) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) close(r3) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc00000000000000000000000000004000000000000000000000ffff7f00000100000400000000000a00600000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/101], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 16.372565691s ago: executing program 1 (id=1025): unshare(0x40000800) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x541280, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x81) unshare(0x200) unshare(0x20000400) r1 = socket$inet6(0xa, 0x1, 0x9eba) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) unshare(0x8000080) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0xc, 0x9, 0x3, 0x4080, 0x1, 0x200, '\x00', r2, r4, 0x3, 0x4, 0x5}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x13}, 0xffffff80}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x9, @empty}, @in6={0xa, 0x4e20, 0x0, @local, 0x5}, @in={0x2, 0x4e22, @broadcast}], 0x48) unshare(0x2a020080) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f0000000280)=""/132, &(0x7f0000000340)=0x84) unshare(0x20020000) unshare(0x60000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000380)="42286f443a9932a9be02c1e4e713ca1e74266e60cfe1f2719a7ffcaee2f92425efef94f0791af00bc9796d45abd4081e733b09153638b0f01a62f03bbec0d9d0f47db058b01399891ccfa407f9b5ca8c8c22499b2a4e55d0cb7db8604099fba0e2fbee7181f24c38dc3ec106e0a61bc32285b23f6ca82bb748f8", 0x7a) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r3}, 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000440)={0x0, 0xe66, 0x6, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000840)={{r1}, 0x0, 0x11, @unused=[0x4, 0x7ff, 0xffffffffffffffb7, 0x5], @devid=r7}) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001880), r4) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x50, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) unshare(0x2000000) unshare(0xc050000) socket$kcm(0x29, 0x5, 0x0) unshare(0xc00) sendto$packet(r4, &(0x7f00000019c0)="863c9981d9b6072cf22e990f6a", 0xd, 0x200000c0, &(0x7f0000001a00)={0x11, 0x16, r2}, 0x14) 16.352096407s ago: executing program 1 (id=1026): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000011c0)={@ifindex, 0x26, 0x0, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140), 0x0}, 0x40) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x3c}, @in=@broadcast, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x8, 0x4, 0xfffffffffffffff8}, {0x7, 0x3}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, 0x0, 0x2010) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="c3f2dddb56c350cef253b78ef97ab2e325d2f585f7b70b438be8179c6b9afb3d5592230b51bd8cdcebccc64e46c23f3f25e7c1cb10c33e81f8d9c55bf20a8d709ace114d2634846423cf6313a2650ab89675a767a4e3751de56e3e994271e179affba2c013ec34d75fdf9a2c8a66c7a8e3e1e91c9d123133210e69ed5c9d752185490821aead9adf3ffcec27b75e7b5125b81343e97eb63deb864be9a105d5621838325fbe33f708f7e83d82ec68e13b0e033519111f4e7e6cb8090dce4d6711fe71b2094b2093c19437d439e97ff99012ea9d04e1ae465954ba5f383c9bc6fffdd98baa03bdc9a1bd779072e7d7ad4bc41baf00ca7cab5e7960554c5dffdcb19374025360fced1f96aa4b1f7f8ce8096b6ed143b77daccd6354d1caa14dc38b5d4bd15c78916cff642055ff704d515fcc27e6e95ab22e3f7010971467e6a1a6a8a9bb9795db0d1d328a01a06058f0fd7040ece4402080009d70c082ca31f8433e68b99259e1bc7a1198295e1b639c30ad8a838f7fc52b0720744909f0a51bb400df73a234b03647cdc2156c96843230d491eb7714d44c627492411d3e93691ac8cc0abb679b585bf5aa58c7c6dd774f6ce5cabe588b6ae739b10b49499764f96174002b27352ee12ef5576c8f4b49d508f201b299038924996a66224d2079b9b75990ecb34d315c8b8d19089037789cd62bd876eb9b91253f87fce492eae93a9845495242608df2b6757cb4bb2a984f61a92e4069f368ffe821b403b5027059535834bc636a93c61104904868c9103fab464e2860f0f1d51f67c97ded4e255815aa20ca6f560174abf6fe20b6758070a46abc6e945a6361ee79f81bba743eb4f04d1c42a791ee735355feb9fd7c141d1534edb04965244762293594f816a1f1c3d095d54d0ca216d3e7c38fcb2fe5409cc1ab836673322f20931e087624f5ccffe5df12ab99387032d7a6e482484b00907034ae9fdcb83dca34439a38a856264b0ea6ddaa8d62cac6d4dd95af104047db4a909e3d586950ef98e3b309046dce1e1113af5f33e3c82085911d80c8729e71ca9d7a6b698b1ce3d776ba0e669991d4088a97aae2a4890d7c0ae84c7325f83ecd5e5a7290dffaabbf824a01223b97c114b37a61fcb4fd36bd5a9e82af928343f05d166aa9c4e880703ccde32fc90d1837f052e52992af4dafd9b0559a99ea73c4abeb461ab47ad401435c1f922713e5a7bd1c6b817af90c399878a8a37eaa23c191d4bf545e52c7241fa007c1087269e6916542b6658968b828a5e24a766d19aabaf0877b4c12276afb2a766cd68dea5759405f749164ba22337f606622650debca20322c99d6e0f25a70167b8c8a6849038e905b56cad6f3925ffed4d903b1cf9e26a3d594833e0fddce3bcac541274fedc44e749f361305047a373c35415f0a882883ac95575b62a3cfb0e9e33a6b7b860415c3c480c63b9e3d9785b605779fc6e32214c9de3a19c55380b06d876c3ef88590a0710def022c11964af74489c2c64c7eea214e679cdfa7bffb684adcd4dd11649b064f759a78cd045bcb9f38f1aedced774ed13649946b9b3ed5312fbc17ed4bd30d6bf050b5fe87b7e189bd13e7270fd380631bc03c4e7a18fcd203577df53e531a6f56586c88691700b4b9b70ff156348b84f0313615f308a28b183a74294689eff709258bb2a0f6dd7bf7a6c5ed9bc2d57fddb23deef49f1b12b32a2d71b1209fec2bdfab57ed2a99a1be56fa4cf3b4a3b9f30b888b759fc69cd447a4ec3345ec676a029fa9fe200b6103d2d2543881a3c0c9310d7a9e2c0834273f1c34c1bc1cc72f01462618fce974ab9f2a25e0cd018eb50ad6d7e6eeac01141d7c717185df90b218af7564c1f849d2fcdc36def9f061a5d3b53616041916559d71267f61b341d4f9b96070319ada157a4e487aefb8e926ec5486349eec9fa8c38858be91005c4d4132e0dfc13713ff8e16897d2acdb82b729bb621c24fa29d708d4824c4d1b720765fbefd0d9b40c3606ee79e033c9be0932650b8332519eba90af41be8e3d834cae28bb08df21550c325ba44fb03c4f84d82aa44c709c222b5c2316f16bce2b8762be59172493ed445feedc6107267114b7fb319f69d02884fbb3d02583e0b711cb06bd5eb0de0468e372b677f5813d2662d1516d4aef5b95d1331c9c9e55de2fdb16de1c192161ff15f4e605a93fdba89725ca1a48652beae2dba813798d8824769d4abbff25dd0b344204705081d9f90e6ea402a031f98c0c12baa7d2f0366aa4dec724b467921dec5f5d215b80fa377c86a4a536c06559b7e640c3f707f24c52aec0ceaa4633e6fa7aa6d886f3b751394b3914d48a352f813a629ef38bdba578431011907d86563bd0c3345123853001e1eba66577814a072d283a452b13559602bac83d35e0b9a86f86b69b91a22c8367dca86be21d167b1718e5166f315ad4b09622651c7d60adcd205f079d7a2f4c4a5fe8e444c96513a3c40e180c9c07dd4e9ca19aa56ba984112718edc2f3da832a4737777251abbb87eb4577761395d18cd0bf350a59b7f4baff49f48c21020eba50dfdd345404d63106f0047bfdc66e160873b4645a8b8fb216f25f08be30bd3de73725cc6a4749f7765336d73203e3ae40b4b8c06f26b14f9ac4e3ef8357425ec197b7f6db83d1287b1eedde710ea9ee16634c717a680c15f320ece2589fa9c10dbb8ebb981bbe118304c1822532589f87489971aa02f2ef2a01a51de906f8d9a351a2f5c76d7893d6de686e6320d618e4f55406cf263e9edc13b8e799e8adf94c999237b2293f344896cc6075b54a9163e029abeafe8f02e9c5c0a9166b0646cccb1c9ee3864520097d6a79a4e02b3c1b399ce08ad0439d8407c7d605ce6ce8c1cef339600c48c5cfa556711f92034e232658cc8e94076fc79b81c6faebc085d9515b6735b5eb0bbc5b08100383b067d18563ba78b3e3a2a21e268580a5b19fa56253dcf9564f6fe79ad3061a89476a8ca8053a355dca007f7bd473fda4d5450b9b9404564059ddec292ab20f6e7e107adab919f5f178c73e244eb977183474085ed8785c6d33b4396cae6516df2cf48cfcd16bc6cc6db281e396ab7b3390fc92378a82fdb615bd970cf1eb788dd5cffe57b93503a3ccc5c5225f62a5efa78ace1bb5b960871c7f62c32bab23ec877ec7f6efd62ebc93e61cdf9a73c1bf0083a6487a5ecb6c38f1a1ed419c4e8eae26585d38a2e52f5708546a90ffb9b6c206d280b12e3a820d7bc7d922eb3b9bd117a0fef4e3e3086bcf8c6b47089da309dff68f1875d2f9ab1044ee0ac321dfac56b84e6dd8d7d3731b5ab3f8824f5fde1040c5da3d1f9c57b7b0ba1ab28d6df44e314007cf767d676678c56dc6e09da39e91f42a66d5e0d5a545e6e1f819df21b5f440a5fdcc4b0b5917d0b55bc41e28cee0481f1d2ecc327fc732903c8fd52e4cf7bcc332f3ec1f5aa688656ca5c40d142ba2c94bb300b3e415c8bac8bf6ed1e1b14af7e9a9bef5b0828aec8542badca767b64e84b8e4dc37e4a2f0d0714fcdcdfe0a9d20116cad0f904fb5744addbd853a46b277e1ecde26eade51cfa61a4e97cc4fba2461ce4b62f346fb3a93476841780b52f0106dc32dd6ccc904108fcfb6fc368780447920d99f80b0ccd3e9952db13336b70d224cb46648cbcccde8347dc0102af374520c94e60587213e38167911d4dd515f1d038c88c52dad726a8bf959eda6551d6339ebbf88901070fa46b60d348967cbbf43271bdf467d68e3ebc6b4fab0a8faed40ad40d7bdecd3da64fb075fb7dba3a756b7a42fe0c8ef8475fa5453f287c1027ed48dedc820e23164c3af4b89bc89334bf6e5899e8fe5ed2e89cc30dcfea97d11235fea4cb86d84a3ed8d555f4e3a038cd1e9ad3cfbe3b0db477220c0348621ac0a6c336c77e8a5c3d61cd672e99d5510d66c4ea4cc5377c23a820ba279345faf600a7189dd034716e0cf46d2b7da777be26fe52273b879175699214066a3dd238850363f7ee3c81a9dc2a1efe80760f8839cbb3be4a95b585d1491095563a108598400cc8d8bde6beab64a6ef65fad43ae7227a1d5afdc5e7ec65a87c280a62567e719b4d75434616e7a0b0be0d71adf01c4e273cbbc5201f7b502286c70377ecf8262e7e42072c3d255cd6093a2a60d958b4baadfbc80212d4975288faf26b2b16bacb22018bd94b6b02e91122428ca2f9ea890459ed68fa613b70af029e0a9c4cc43507f2d898bc08de697b2ef8f12571a31e256979f4aa82e23531b89355ca4b29ef9010a0c8fcb8f813def00b8a1634d0c7fec4d06e2bb82d00976c5acafc76ec1ab4a90508bfded5b575589f833b528c53a394bd538c83bb7308c76d0380e6d4c7a653e85207f0ce7b5f95b8015183b4106a0ceb18608985fd20154b46088c3522f76c256e082a3c708fb4241c7e337e5c06297ca66383a706ed0b4ab1036f57d52351d182dd68a295a982053d40c34b01dd56723fb5d95018b5069f7e46e8285af47a5417fb32aebb9258eccebd5185e3fa5cc54e083e280b0d4f5af4ae3ab026cd917d2f942f216d687acb2b34b76894a249aa4a6fea46673be755e1479a82ec9113fd59c9cea9d2ed6bf7d17c59402c0c963095030cb4e9f9290302c533ec82eb620fc9a5207d60f06c2dfed00d4a367d8858006d42f82190ef17f8d3f51052d622db1da91f71c8c82ba11a39550fd418137ceea582eca5a00d29b1b83af758da7cdffb2b62d8af57a9ff3b221abaa486e2609dc929fdd2c4c2af78a815b97c8ef568287a2ef1b496f56758accc7781e72ee9491729e56404d4ae1a1d254c1c2c3b9beab258f0d284948309d702c17e11abe346ec6f7ca900e7553dc2442642f01ad71b1be0f84f992b1527b8119be6a58a30dae845424412cc697167fe5d4ebbb84384f96de51871082494dbd0b4cd81ca56651bf9d89e9673dc21a9a553b60ae68fc0320f9a0574ac9545fd95c2bea756341dd419f03099f0e3e3caa388be6f13c26dba60e2bd232489dd5a7aed9a7eb365229d3d72055ae2d758158ad86d370962a46c6f2b0a44d37bbaf2bd7e15acc48ad67ee49021cb67353d66fe8b17c6f0ac38f684ec67d398fe4f235c581cc15370897e0e970a68ebfeca864c0a4ab527aa5d55c23ddcc2cf4dc6ad78dcb8415f6393e1a72e8921f1c064cf99e72c2aed37a827ecdf5bbca357ea6caa79f0b0ea8e276e6eccf899f19803efacc968d1fafeeb37baebdc3eb8e9a7c07754904fdb3238a5a1de1864e4711eb4ee349352cbf9390525b5d2f836e8e7a5e65a6378385ea707a073d224bbb928", 0xeb2, 0x4000090, &(0x7f0000001080)={0x11, 0xd, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) 15.742233368s ago: executing program 3 (id=1027): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) accept$unix(r1, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast2}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) 15.595406757s ago: executing program 0 (id=1028): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$phonet(r0, &(0x7f0000000500)={0x23, 0x5, 0x9, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000380)=""/130}, {&(0x7f0000000880)=""/4096}, {&(0x7f0000000100)=""/57}, {&(0x7f0000000440)=""/179}, {&(0x7f0000001880)=""/152}, {&(0x7f0000001940)=""/120}, {&(0x7f0000000300)}, {&(0x7f00000019c0)=""/243}, {&(0x7f0000001ac0)=""/111}], 0x1d0}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001c00)="e84e3f73d227baeec817b0b2387fdada5ecde15338bb15fe28d22e4afd066c223c8d185f387246b90092269a477f4358ecb57b5a501d18d3423c5f0ced626ddfcdc22e07967ab6fb4846d2237706e258aafaca0cc4b4733af93baf7084bd11da69378d79890a6a9a3210ac6457d666652ba29a7a6e94efa5f0769fc742341af019a4388d689f12ae8572b055", 0x8c}, {&(0x7f00000000c0)="5b11f859ec9d2d4c5962fe9053768f5b", 0x10}, {&(0x7f0000000280)="76646d484d7db4855c57d8da77ac77e3ff88854ac83bd1a39f077249c9f54c919fc9dc52a5f99bc1d65f152de3bfd02d6e934a5bce460059b233cb7fcb66b245d668d5e6966b166fe458af785759774b9ba4afd49fd60e28f0541a8cc11c7c655936d8a09eb1b4", 0x67}, {&(0x7f0000000800)="fe684abf773541de254510cfc5d84ac60bee41ca40ba6916620551931ae7170da1d60dcbec0fb2258216387fc88859aaf194072d9ac65bf64ad1a165d58364d5c92055db0fd3038e5eafc35bf2315151cb3b8e0b0000000000000f1aa779a7453d01ec2f36fe8f9286fc7c2cf9260300000000", 0x73}, {&(0x7f0000000540)="6ed7fa97dcd988405d9951eb680bdaad8f1325d4e4497163842193ad3104261eca2711605c11e34bb819aae71850b1e30a7188ae7f9bdb7f257c3b6362c56a87b8a52ab41fd6d8d861dcedcf2063598e574d22dff6d5e009e41e46bd91c7052e891c5796c44918fc8f7d744d4b901c4cfb7a0aa9247352ee2c9c686d00dd6784adb75e950b1b0b929229", 0x8a}, {&(0x7f0000000140)="9f4bc68436f68607d732a59e9adeca09a1d09ea08a691ef2039ee87fcc47625927e19956144eb6f3c9c9b5c2b6dec8f3eebc9183af54e101ef17baa725ff47fe", 0x40}, {&(0x7f0000000600)="8f24f3086b3d849e39f354586585338a5165e793eea40f2a934ff71d5617853d0364adb66bf510d66678d200000000c3a1bc04fe79c96c313a1eb4951e253258e9a74a4051dd6cafdaa518944455c15607e0303da72686d1707283018cfec6552660a2c85ba458b66f30208d40c24b7cefce25fce979d68aefaa3a4d3dcbfcf70042af944e51e6853cb8b254344b05f308c6e21184e74c7fd127", 0x9a}, {&(0x7f00000006c0)="ab6b3dbcf2bc6a4549bcc852d10d85a85c89753998a857028771e342a32bc31b8d45dde91affab13bfa068ea6a03bc5ab7834a4e0981bfc1d97ad1ac11e4a8c0553270677cdc0f188dc5744795f92a212954502ca1701dfcf3237ce98d36a92ea63393fa5996eb4d175efc12569e57a176da493f3ff992df796575f3547f1674e1129e3458068644a32ad28d91b742dccd4dc6fe29aab8a5acbf5190cf8e341899fbcfaab9caa5d487945840ed43", 0xae}], 0x8, 0x0, 0xffffffd8, 0x4}, 0x1) 15.593948031s ago: executing program 3 (id=1029): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000001c0004800500030001000000050003000100000005000300020000000800020002000000"], 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x26000000}, 0x4004) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r4, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000010000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 15.516610045s ago: executing program 0 (id=1030): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x10000000}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="8d6e5008", 0x4}], 0x1}, 0x4000) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080) r5 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e23, @private=0xa010101}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048001}, 0x4c002) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b70f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900ac9a3acf60ee50b99e1eb37c2f1b208ebda5ff16aa6567c816a99d3386860c07306197c07f1eed4341ef9fb718024006cfeb0c4a748e5e2020302231089c018cd730debf4aba8e211c913dbe78ea4e420190a3ff6feaba8d342bcbf4e240d92120898ba93d733dd15844f90d952dadd105ac5faf57dd"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x18, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc014}, 0x80) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmmsg$inet6(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="23e689f0dc211825e7aac360f5fd696d0000e3439e8a479d2c7d8ca5959acbb77a46084c58d1fe", 0x27}, {&(0x7f0000000240)="d648454e1d0f676801181e4308a23f3fbbacc7ae08f055e759cf8df1468b3a5b24a99382d75a946982a693d131c1795aeac79c22673c42e5e0b1c8a514c0fb3608ab237fae578a13a43745816d281dbe3ffd5ffe0b", 0x55}, {&(0x7f00000002c0)="3e5ba1ff30bbec18703966a1694ae4236a1d034ed5bbdb6fa79b408227043a5c7f37d5caf4b981b373706f1558089cb6ff9c136d496ba1eb68875bc614cca7018abfa187", 0x44}], 0x3}}], 0x1, 0x20040804) 15.506576433s ago: executing program 3 (id=1031): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000020000003900000008000300", @ANYRES32=r7, @ANYBLOB="24005a80200004801400050018002948d1b5062009abbdf006008803050004"], 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) 15.445587626s ago: executing program 3 (id=1032): r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000500)={0x400, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e23, @remote}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) unshare(0x64000600) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000008e000000c9", @ANYRES32], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4900000076000d0b00400000000000000300000000000000080001000200000009000a00"], 0x28}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cZrouz0'}, 0x30) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff2"], 0x20}, {&(0x7f0000006740)={0x1160, 0x19, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x8, 0x69, 0x0, 0x1, [@nested={0x4, 0x12c}]}, @generic="0574a443a64e158a2e01a873af15d4daa32f93e60a8ede8fb33dc7ca7cf7b783454eb1faaf4a3a7eda2865831bcf7a650ddd4d0c7234c0b6919a221d73d72f5359b94e57185432a949c6f134f795d1893ee987f73102dd4ce06384312bd911ff5739499d3424293e20d61ebecd00ee5e4adf2383827e7a8db2521a7c03e90f42dd3026d36d1b1b473444b72c56afac636010c2f46c4b59ebaf422f5086d43172", @generic="cffb7ca35591730430d0d2f281e23fa31fb09953d3719841a15a5bf788e03fc08f79fbb072eb1adb7d41bcedf5e41c974d1fea62a5d21bf18c7709e46f6d859630de620c49f2752b0e08075106702af615ca9209d4f127c1254452957d619c5d867975289ccec39a747aaec62bc71da8975879d413d8b2b3a4691b9b464c3bce859687d99a69398808deee79ab4472c29e4929592ac4632cb2fe3d5cfb0664f51bea6280aeadc1377c1bdf24dd4e2eda89fd34d27b233962fa818866abb04752ac0556b91d0a06d71c2277ceba88cb42750042b3be4d94d61ec5b1dedb047da4b2af", @typed={0x16, 0x32, 0x0, 0x0, @str='./cgroup.net/syz0\x00'}, @generic="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", @nested={0xc, 0xcb, 0x0, 0x1, [@typed={0x6, 0x2d, 0x0, 0x0, @str='}\x00'}]}]}, 0x1160}], 0x2}, 0x300) socket$packet(0x11, 0x2, 0x300) epoll_create(0x400) pipe(&(0x7f0000000000)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x2}, 0x1023) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f00000009c0)={0x3e4, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000140)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) 15.295060375s ago: executing program 1 (id=1033): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x37788618, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000058c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x440c1}], 0x1, 0x40) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0xe2, 0x3, 0x40, r1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xd}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 15.11447887s ago: executing program 1 (id=1034): r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 15.111974229s ago: executing program 1 (id=1035): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x2b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94) unshare(0x20020600) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17114be8c47ffd23}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=@ipv6_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x30}}, 0x0) (async) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@o_path={&(0x7f0000000500)='./file0\x00', r10, 0x4000, r3}, 0x18) (async, rerun: 32) bind$rds(r9, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) (async, rerun: 32) bind(r8, &(0x7f00000002c0)=@isdn={0x22, 0x7f, 0x54, 0x1, 0x80}, 0x80) (async) getsockopt$sock_buf(r8, 0x1, 0x37, &(0x7f0000002440)=""/4102, &(0x7f00000000c0)=0x1006) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003202, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) (async, rerun: 32) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x9, @private2, 0x9}, 0x1c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x48000) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 6.068596349s ago: executing program 32 (id=963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000050000000000000000003f80067e00000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4044}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000002000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8844) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="41460142135bcaadfe14e1962593c60096fa221ca2b3bc09a396cf2cfdd10fff4bcd4d6360", @ANYRES8=r10], 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x41) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r11, r13, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x2, &(0x7f0000000540)=[&(0x7f0000000340)='\x00', &(0x7f0000000480)='\x00'], 0x0, 0x8}}, 0x30) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r14 = socket(0xa, 0x2, 0x0) getpeername$packet(r14, &(0x7f0000000200)={0x11, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r15, @ANYRES32, @ANYBLOB="0000000000000000000000f70000000000000000000100b9000000c64b862f150c00ead91bcd"], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) 6.02482949s ago: executing program 33 (id=966): r0 = socket(0x1e, 0x805, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x10f, 0x20, 0x0, 0x7f) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="c52314a7915dadeb18a7467a427eb7a83435d0a99b91c14cc0bafed32c4e7e3821936b80795498574bd5b724bcdc9922205db53ef0232ce6cf1b4cfeb3f30acb4fd976fe923b5d278a0f960119", 0x4d}], 0x1}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 63.203325ms ago: executing program 34 (id=1030): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x10000000}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="8d6e5008", 0x4}], 0x1}, 0x4000) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080) r5 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e23, @private=0xa010101}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048001}, 0x4c002) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b70f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900ac9a3acf60ee50b99e1eb37c2f1b208ebda5ff16aa6567c816a99d3386860c07306197c07f1eed4341ef9fb718024006cfeb0c4a748e5e2020302231089c018cd730debf4aba8e211c913dbe78ea4e420190a3ff6feaba8d342bcbf4e240d92120898ba93d733dd15844f90d952dadd105ac5faf57dd"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x18, r9, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc014}, 0x80) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmmsg$inet6(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="23e689f0dc211825e7aac360f5fd696d0000e3439e8a479d2c7d8ca5959acbb77a46084c58d1fe", 0x27}, {&(0x7f0000000240)="d648454e1d0f676801181e4308a23f3fbbacc7ae08f055e759cf8df1468b3a5b24a99382d75a946982a693d131c1795aeac79c22673c42e5e0b1c8a514c0fb3608ab237fae578a13a43745816d281dbe3ffd5ffe0b", 0x55}, {&(0x7f00000002c0)="3e5ba1ff30bbec18703966a1694ae4236a1d034ed5bbdb6fa79b408227043a5c7f37d5caf4b981b373706f1558089cb6ff9c136d496ba1eb68875bc614cca7018abfa187", 0x44}], 0x3}}], 0x1, 0x20040804) 30.745867ms ago: executing program 35 (id=1035): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x2b8}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="180000009a010000000000000500000018110000d5903d0fe25ee49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a80475a81b48eb04a23fd18dec90db36f40eebdcd557a2323c2f6312963b330c7b2b762675577d309b6e97d5c60c2e7909bd1126fd0d8067883f546b874a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b77b977da661a230b65c1782240b463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b4b1ab91d5cfa7b694fe192785f68592068", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x33, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x4, 0x3, 0x5, 0x3}], 0x10, 0xb}, 0x94) unshare(0x20020600) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17114be8c47ffd23}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=@ipv6_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x30}}, 0x0) (async) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@o_path={&(0x7f0000000500)='./file0\x00', r10, 0x4000, r3}, 0x18) (async, rerun: 32) bind$rds(r9, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) (async, rerun: 32) bind(r8, &(0x7f00000002c0)=@isdn={0x22, 0x7f, 0x54, 0x1, 0x80}, 0x80) (async) getsockopt$sock_buf(r8, 0x1, 0x37, &(0x7f0000002440)=""/4102, &(0x7f00000000c0)=0x1006) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003202, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) (async, rerun: 32) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x9, @private2, 0x9}, 0x1c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x48000) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 0s ago: executing program 36 (id=1032): r0 = socket$inet(0xa, 0x801, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000500)={0x400, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e23, @remote}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) unshare(0x64000600) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000008e000000c9", @ANYRES32], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4900000076000d0b00400000000000000300000000000000080001000200000009000a00"], 0x28}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cZrouz0'}, 0x30) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff2"], 0x20}, {&(0x7f0000006740)={0x1160, 0x19, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x8, 0x69, 0x0, 0x1, [@nested={0x4, 0x12c}]}, @generic="0574a443a64e158a2e01a873af15d4daa32f93e60a8ede8fb33dc7ca7cf7b783454eb1faaf4a3a7eda2865831bcf7a650ddd4d0c7234c0b6919a221d73d72f5359b94e57185432a949c6f134f795d1893ee987f73102dd4ce06384312bd911ff5739499d3424293e20d61ebecd00ee5e4adf2383827e7a8db2521a7c03e90f42dd3026d36d1b1b473444b72c56afac636010c2f46c4b59ebaf422f5086d43172", @generic="cffb7ca35591730430d0d2f281e23fa31fb09953d3719841a15a5bf788e03fc08f79fbb072eb1adb7d41bcedf5e41c974d1fea62a5d21bf18c7709e46f6d859630de620c49f2752b0e08075106702af615ca9209d4f127c1254452957d619c5d867975289ccec39a747aaec62bc71da8975879d413d8b2b3a4691b9b464c3bce859687d99a69398808deee79ab4472c29e4929592ac4632cb2fe3d5cfb0664f51bea6280aeadc1377c1bdf24dd4e2eda89fd34d27b233962fa818866abb04752ac0556b91d0a06d71c2277ceba88cb42750042b3be4d94d61ec5b1dedb047da4b2af", @typed={0x16, 0x32, 0x0, 0x0, @str='./cgroup.net/syz0\x00'}, @generic="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", @nested={0xc, 0xcb, 0x0, 0x1, [@typed={0x6, 0x2d, 0x0, 0x0, @str='}\x00'}]}]}, 0x1160}], 0x2}, 0x300) socket$packet(0x11, 0x2, 0x300) epoll_create(0x400) pipe(&(0x7f0000000000)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f00000005c0)=""/94, 0x5e}], 0x2}, 0x1023) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f00000009c0)={0x3e4, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000140)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 82.059898][ T5850] cgroup: Unknown subsys name 'net' [ 82.212147][ T5850] cgroup: Unknown subsys name 'cpuset' [ 82.221680][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.928253][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.541926][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.552068][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.559882][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.568707][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.578330][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.586079][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.590869][ T5870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.601346][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.608098][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.615762][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.620531][ T5877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.624650][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.632725][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.639599][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.652674][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.661197][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.670520][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.677805][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.679908][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.703372][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.708471][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.712904][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.729476][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.738305][ T5182] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.746736][ T5182] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.443997][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 87.636011][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 87.700992][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 87.740503][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 87.762907][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.770864][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.781037][ T5863] bridge_slave_0: entered allmulticast mode [ 87.789250][ T5863] bridge_slave_0: entered promiscuous mode [ 87.841335][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.849077][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.856279][ T5863] bridge_slave_1: entered allmulticast mode [ 87.864063][ T5863] bridge_slave_1: entered promiscuous mode [ 87.930553][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 87.986395][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.038367][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.110287][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.117434][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.125527][ T5860] bridge_slave_0: entered allmulticast mode [ 88.132880][ T5860] bridge_slave_0: entered promiscuous mode [ 88.158496][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.165657][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.173317][ T5862] bridge_slave_0: entered allmulticast mode [ 88.181525][ T5862] bridge_slave_0: entered promiscuous mode [ 88.190118][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.197248][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.205069][ T5862] bridge_slave_1: entered allmulticast mode [ 88.212402][ T5862] bridge_slave_1: entered promiscuous mode [ 88.232535][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.240150][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.247457][ T5860] bridge_slave_1: entered allmulticast mode [ 88.255622][ T5860] bridge_slave_1: entered promiscuous mode [ 88.262621][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.270423][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.277681][ T5875] bridge_slave_0: entered allmulticast mode [ 88.285233][ T5875] bridge_slave_0: entered promiscuous mode [ 88.313307][ T5863] team0: Port device team_slave_0 added [ 88.332797][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.340279][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.347597][ T5875] bridge_slave_1: entered allmulticast mode [ 88.355547][ T5875] bridge_slave_1: entered promiscuous mode [ 88.383889][ T5863] team0: Port device team_slave_1 added [ 88.445700][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.471175][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.483813][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.509486][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.533580][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.545526][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.570486][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.577677][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.584977][ T5864] bridge_slave_0: entered allmulticast mode [ 88.592279][ T5864] bridge_slave_0: entered promiscuous mode [ 88.612947][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.620368][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.646435][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.684448][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.691926][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.699507][ T5864] bridge_slave_1: entered allmulticast mode [ 88.706758][ T5864] bridge_slave_1: entered promiscuous mode [ 88.727331][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.735208][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.735445][ T5182] Bluetooth: hci1: command tx timeout [ 88.761283][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.788868][ T5875] team0: Port device team_slave_0 added [ 88.796658][ T5860] team0: Port device team_slave_0 added [ 88.808101][ T5872] Bluetooth: hci4: command tx timeout [ 88.808654][ T5873] Bluetooth: hci3: command tx timeout [ 88.813858][ T5872] Bluetooth: hci0: command tx timeout [ 88.825548][ T5182] Bluetooth: hci2: command tx timeout [ 88.834893][ T5862] team0: Port device team_slave_0 added [ 88.844223][ T5875] team0: Port device team_slave_1 added [ 88.852015][ T5860] team0: Port device team_slave_1 added [ 88.872317][ T5862] team0: Port device team_slave_1 added [ 88.907419][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.920475][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.016998][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.024390][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.050568][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.062565][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.069761][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.095906][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.118788][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.125772][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.151967][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.169706][ T5863] hsr_slave_0: entered promiscuous mode [ 89.176287][ T5863] hsr_slave_1: entered promiscuous mode [ 89.184300][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.191573][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.217563][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.229463][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.236437][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.262880][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.275598][ T5864] team0: Port device team_slave_0 added [ 89.282547][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.289857][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.316159][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.343712][ T5864] team0: Port device team_slave_1 added [ 89.454094][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.462507][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.488977][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.501730][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.509424][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.535587][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.630067][ T5875] hsr_slave_0: entered promiscuous mode [ 89.636450][ T5875] hsr_slave_1: entered promiscuous mode [ 89.643018][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 89.649259][ T5875] Cannot create hsr debugfs directory [ 89.720488][ T5862] hsr_slave_0: entered promiscuous mode [ 89.726997][ T5862] hsr_slave_1: entered promiscuous mode [ 89.733512][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 89.739899][ T5862] Cannot create hsr debugfs directory [ 89.751380][ T5860] hsr_slave_0: entered promiscuous mode [ 89.757728][ T5860] hsr_slave_1: entered promiscuous mode [ 89.764455][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 89.770333][ T5860] Cannot create hsr debugfs directory [ 89.788873][ T5864] hsr_slave_0: entered promiscuous mode [ 89.795294][ T5864] hsr_slave_1: entered promiscuous mode [ 89.801682][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 89.807423][ T5864] Cannot create hsr debugfs directory [ 90.207457][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.258920][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.312000][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.358570][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.439699][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.456327][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.467177][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.493778][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.579481][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.592082][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.607286][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.632897][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.726573][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.745709][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.770558][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.804654][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.811720][ T5182] Bluetooth: hci1: command tx timeout [ 90.877552][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.888559][ T5182] Bluetooth: hci3: command tx timeout [ 90.889201][ T5872] Bluetooth: hci2: command tx timeout [ 90.894048][ T5870] Bluetooth: hci0: command tx timeout [ 90.906497][ T5873] Bluetooth: hci4: command tx timeout [ 90.915049][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.932126][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.944006][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.969362][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.037453][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.067172][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.080073][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.087343][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.119689][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.126908][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.162004][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.190408][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.197539][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.232265][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.239471][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.269120][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.296448][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.330732][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.337948][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.347114][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.354266][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.394258][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.537536][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.570561][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.632218][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.639492][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.702221][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.720073][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.727307][ T5958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.794170][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.801486][ T5958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.813411][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.820623][ T5958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.870757][ T10] cfg80211: failed to load regulatory.db [ 91.972595][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.136248][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.264186][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.375514][ T5862] veth0_vlan: entered promiscuous mode [ 92.429626][ T5875] veth0_vlan: entered promiscuous mode [ 92.442774][ T5862] veth1_vlan: entered promiscuous mode [ 92.492552][ T5875] veth1_vlan: entered promiscuous mode [ 92.554276][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.595213][ T5862] veth0_macvtap: entered promiscuous mode [ 92.620929][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.629778][ T5862] veth1_macvtap: entered promiscuous mode [ 92.665955][ T5875] veth0_macvtap: entered promiscuous mode [ 92.707874][ T5875] veth1_macvtap: entered promiscuous mode [ 92.731662][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.753102][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.773396][ T5863] veth0_vlan: entered promiscuous mode [ 92.783649][ T5864] veth0_vlan: entered promiscuous mode [ 92.805684][ T5863] veth1_vlan: entered promiscuous mode [ 92.826539][ T5860] veth0_vlan: entered promiscuous mode [ 92.842127][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.851936][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.864748][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.879280][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.888912][ T5873] Bluetooth: hci1: command tx timeout [ 92.896257][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.911766][ T5864] veth1_vlan: entered promiscuous mode [ 92.936093][ T5860] veth1_vlan: entered promiscuous mode [ 92.947247][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.969366][ T5873] Bluetooth: hci4: command tx timeout [ 92.970079][ T5870] Bluetooth: hci0: command tx timeout [ 92.974819][ T5873] Bluetooth: hci3: command tx timeout [ 92.980334][ T5182] Bluetooth: hci2: command tx timeout [ 92.996977][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.012055][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.021657][ T5958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.055668][ T5958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.113063][ T5863] veth0_macvtap: entered promiscuous mode [ 93.125471][ T5863] veth1_macvtap: entered promiscuous mode [ 93.147621][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.161381][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.207743][ T5860] veth0_macvtap: entered promiscuous mode [ 93.220518][ T5864] veth0_macvtap: entered promiscuous mode [ 93.242613][ T5860] veth1_macvtap: entered promiscuous mode [ 93.256608][ T5864] veth1_macvtap: entered promiscuous mode [ 93.279194][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.283410][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.294510][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.319164][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.327032][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.337216][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.364702][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.402008][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.410133][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.422314][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.429949][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.442338][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.464673][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.485695][ T3492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.495023][ T3492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.552039][ T3492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.572309][ T3492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.606934][ T3492] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.674284][ T3492] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.701850][ T3492] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.715036][ T3492] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.725745][ T3492] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.767712][ T3492] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.779183][ T3492] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.832288][ T3492] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.871611][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.888780][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.912771][ T5983] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.935931][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.951815][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.166425][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 94.176219][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.205942][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.303600][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.343876][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.430502][ T6006] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.9'. [ 94.441965][ T6006] netlink: zone id is out of range [ 94.447136][ T6006] netlink: zone id is out of range [ 94.454481][ T6006] netlink: get zone limit has 8 unknown bytes [ 94.463620][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.482932][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.557387][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.596220][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.976885][ T5873] Bluetooth: hci1: command tx timeout [ 95.048769][ T5873] Bluetooth: hci3: command tx timeout [ 95.056717][ T5870] Bluetooth: hci0: command tx timeout [ 95.056831][ T5872] Bluetooth: hci2: command tx timeout [ 95.056870][ T5872] Bluetooth: hci4: command tx timeout [ 95.163723][ T6029] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 95.197783][ T6027] batman_adv: batadv0: Adding interface: dummy0 [ 95.219461][ T6027] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.267233][ T6029] netlink: 208 bytes leftover after parsing attributes in process `syz.0.11'. [ 95.282649][ T6036] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4'. [ 95.288005][ T6027] batman_adv: batadv0: Interface activated: dummy0 [ 95.374696][ T6034] batadv0: mtu less than device minimum [ 95.382407][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 95.394464][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 95.406433][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 95.418453][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 95.430494][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 95.442493][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 95.525534][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 95.700197][ T6032] netlink: 'syz.4.12': attribute type 11 has an invalid length. [ 95.727745][ T6032] netlink: 'syz.4.12': attribute type 11 has an invalid length. [ 95.798341][ T6032] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12'. [ 96.062098][ T6058] Zero length message leads to an empty skb [ 96.363813][ T6075] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.581466][ T6075] netlink: 72 bytes leftover after parsing attributes in process `syz.3.22'. [ 96.601043][ T6081] Bluetooth: MGMT ver 1.23 [ 97.231522][ T6107] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 97.273032][ T6104] bridge0: entered promiscuous mode [ 97.279044][ T6107] IPv6: Can't replace route, no match found [ 97.293229][ T6110] netlink: 32 bytes leftover after parsing attributes in process `syz.0.32'. [ 97.325020][ T6107] ip_vti0: entered promiscuous mode [ 97.378194][ T6117] IPv6: Can't replace route, no match found [ 97.766000][ T6130] warning: `syz.3.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.809831][ T6130] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 98.613514][ T6168] netlink: 'syz.0.42': attribute type 29 has an invalid length. [ 98.669093][ T6168] netlink: 'syz.0.42': attribute type 29 has an invalid length. [ 98.984797][ T6177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.028168][ T6177] bond0: (slave rose0): Enslaving as an active interface with an up link [ 99.702152][ T24] IPVS: starting estimator thread 0... [ 99.821097][ T6200] IPVS: using max 30 ests per chain, 72000 per kthread [ 100.112166][ T6208] FAULT_INJECTION: forcing a failure. [ 100.112166][ T6208] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.200879][ T6208] CPU: 1 UID: 0 PID: 6208 Comm: syz.0.50 Not tainted syzkaller #0 PREEMPT(full) [ 100.200908][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 100.200925][ T6208] Call Trace: [ 100.200936][ T6208] [ 100.200946][ T6208] dump_stack_lvl+0x189/0x250 [ 100.200978][ T6208] ? __pfx____ratelimit+0x10/0x10 [ 100.201010][ T6208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.201031][ T6208] ? __pfx__printk+0x10/0x10 [ 100.201057][ T6208] ? __might_fault+0xb0/0x130 [ 100.201094][ T6208] should_fail_ex+0x414/0x560 [ 100.201127][ T6208] _copy_from_user+0x2d/0xb0 [ 100.201152][ T6208] __sys_connect+0x123/0x440 [ 100.201174][ T6208] ? __fget_files+0x3a0/0x420 [ 100.201203][ T6208] ? __pfx___sys_connect+0x10/0x10 [ 100.201237][ T6208] ? __pfx_ksys_write+0x10/0x10 [ 100.201259][ T6208] ? rcu_is_watching+0x15/0xb0 [ 100.201286][ T6208] __x64_sys_connect+0x7a/0x90 [ 100.201308][ T6208] do_syscall_64+0xfa/0x3b0 [ 100.201326][ T6208] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.201354][ T6208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.201373][ T6208] ? clear_bhb_loop+0x60/0xb0 [ 100.201403][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.201421][ T6208] RIP: 0033:0x7f6a2838eec9 [ 100.201442][ T6208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.201458][ T6208] RSP: 002b:00007f6a292db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 100.201478][ T6208] RAX: ffffffffffffffda RBX: 00007f6a285e5fa0 RCX: 00007f6a2838eec9 [ 100.201492][ T6208] RDX: 000000000000000a RSI: 0000200000000300 RDI: 0000000000000004 [ 100.201504][ T6208] RBP: 00007f6a292db090 R08: 0000000000000000 R09: 0000000000000000 [ 100.201515][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.201526][ T6208] R13: 00007f6a285e6038 R14: 00007f6a285e5fa0 R15: 00007fff429f35c8 [ 100.201556][ T6208] [ 100.793966][ T6211] __nla_validate_parse: 2 callbacks suppressed [ 100.793988][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 101.067025][ T6236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'. [ 101.250354][ T6243] netlink: 'syz.4.58': attribute type 9 has an invalid length. [ 101.304048][ T6243] netlink: 184 bytes leftover after parsing attributes in process `syz.4.58'. [ 101.533486][ T6254] vxcan3: entered allmulticast mode [ 101.702011][ T6258] syz.2.60: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 101.742734][ T6259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.59'. [ 101.760509][ T6258] CPU: 1 UID: 0 PID: 6258 Comm: syz.2.60 Not tainted syzkaller #0 PREEMPT(full) [ 101.760538][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.760549][ T6258] Call Trace: [ 101.760558][ T6258] [ 101.760566][ T6258] dump_stack_lvl+0x189/0x250 [ 101.760597][ T6258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.760620][ T6258] ? __pfx__printk+0x10/0x10 [ 101.760647][ T6258] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 101.760669][ T6258] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 101.760693][ T6258] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 101.760717][ T6258] warn_alloc+0x214/0x310 [ 101.760753][ T6258] ? __pfx_warn_alloc+0x10/0x10 [ 101.760791][ T6258] ? __get_vm_area_node+0x28f/0x300 [ 101.760817][ T6258] ? xskq_create+0xbf/0x170 [ 101.760850][ T6258] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 101.760911][ T6258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.760945][ T6258] ? __kasan_kmalloc+0x93/0xb0 [ 101.760974][ T6258] vmalloc_user_noprof+0xad/0xf0 [ 101.761009][ T6258] ? xskq_create+0xbf/0x170 [ 101.761038][ T6258] xskq_create+0xbf/0x170 [ 101.761070][ T6258] xsk_init_queue+0xb0/0x110 [ 101.761101][ T6258] xsk_setsockopt+0x57b/0x8d0 [ 101.761131][ T6258] ? __pfx_xsk_setsockopt+0x10/0x10 [ 101.761175][ T6258] ? __pfx_aa_sk_perm+0x10/0x10 [ 101.761208][ T6258] ? __fget_files+0x2a/0x420 [ 101.761236][ T6258] ? aa_sock_opt_perm+0xff/0x1b0 [ 101.761258][ T6258] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 101.761279][ T6258] ? __pfx_xsk_setsockopt+0x10/0x10 [ 101.761307][ T6258] do_sock_setsockopt+0x179/0x1b0 [ 101.761340][ T6258] __x64_sys_setsockopt+0x13f/0x1b0 [ 101.761382][ T6258] do_syscall_64+0xfa/0x3b0 [ 101.761400][ T6258] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.761428][ T6258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.761447][ T6258] ? clear_bhb_loop+0x60/0xb0 [ 101.761472][ T6258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.761490][ T6258] RIP: 0033:0x7f391e58eec9 [ 101.761507][ T6258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.761523][ T6258] RSP: 002b:00007f391f3b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.761543][ T6258] RAX: ffffffffffffffda RBX: 00007f391e7e6180 RCX: 00007f391e58eec9 [ 101.761557][ T6258] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 101.761568][ T6258] RBP: 00007f391e611f91 R08: 0000000000000004 R09: 0000000000000000 [ 101.761579][ T6258] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 101.761608][ T6258] R13: 00007f391e7e6218 R14: 00007f391e7e6180 R15: 00007fff43db58c8 [ 101.761642][ T6258] [ 101.761665][ T6258] Mem-Info: [ 102.035087][ T6258] active_anon:7777 inactive_anon:0 isolated_anon:0 [ 102.035087][ T6258] active_file:2949 inactive_file:39874 isolated_file:0 [ 102.035087][ T6258] unevictable:768 dirty:1561 writeback:0 [ 102.035087][ T6258] slab_reclaimable:10543 slab_unreclaimable:97554 [ 102.035087][ T6258] mapped:33377 shmem:3413 pagetables:1193 [ 102.035087][ T6258] sec_pagetables:0 bounce:0 [ 102.035087][ T6258] kernel_misc_reclaimable:0 [ 102.035087][ T6258] free:1322418 free_pcp:21947 free_cma:0 [ 102.080564][ T6258] Node 0 active_anon:31108kB inactive_anon:0kB active_file:11796kB inactive_file:159296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133508kB dirty:6232kB writeback:0kB shmem:12116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12100kB pagetables:4648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.115642][ T6258] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.163788][ T6258] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.206524][ T6258] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 102.214483][ T6258] Node 0 DMA32 free:1386964kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31460kB inactive_anon:0kB active_file:11796kB inactive_file:157476kB unevictable:1536kB writepending:6224kB present:3129332kB managed:2559912kB mlocked:0kB bounce:0kB free_pcp:65868kB local_pcp:44040kB free_cma:0kB [ 102.249058][ T6258] lowmem_reserve[]: 0 0 1 1 1 [ 102.254068][ T6258] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:8kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 102.285284][ T6258] lowmem_reserve[]: 0 0 0 0 0 [ 102.290590][ T6258] Node 1 Normal free:3886436kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22400kB local_pcp:10240kB free_cma:0kB [ 102.322432][ T6258] lowmem_reserve[]: 0 0 0 0 0 [ 102.328860][ T6258] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 102.342199][ T6258] Node 0 DMA32: 42*4kB (M) 24*8kB (UME) 16*16kB (UME) 8*32kB (UM) 9*64kB (M) 5*128kB (M) 4*256kB (UME) 3*512kB (M) 4*1024kB (ME) 5*2048kB (UM) 334*4096kB (M) = 1387048kB [ 102.359821][ T6258] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 102.372225][ T6258] Node 1 Normal: 175*4kB (UME) 49*8kB (UME) 46*16kB (UME) 74*32kB (UME) 20*64kB (UME) 4*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (UM) = 3886436kB [ 102.390854][ T6258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.401146][ T6258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.410899][ T6258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.421231][ T6258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.433528][ T6258] 46232 total pagecache pages [ 102.438613][ T6258] 0 pages in swap cache [ 102.443876][ T6258] Free swap = 124996kB [ 102.448561][ T6258] Total swap = 124996kB [ 102.452849][ T6258] 2097051 pages RAM [ 102.456936][ T6258] 0 pages HighMem/MovableOnly [ 102.462328][ T6258] 424983 pages reserved [ 102.466616][ T6258] 0 pages cma reserved [ 102.535012][ T6255] vxcan3: entered allmulticast mode [ 102.676068][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.684441][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.759541][ T6285] netlink: 156 bytes leftover after parsing attributes in process `syz.2.63'. [ 102.847279][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.862036][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.011787][ T5958] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.058742][ T5958] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.089334][ T5958] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.121311][ T5958] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.193332][ T6292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.64'. [ 103.566965][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 103.615653][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 103.713662][ T6314] netlink: 76 bytes leftover after parsing attributes in process `syz.1.72'. [ 103.750576][ T6316] unsupported nlmsg_type 40 [ 104.193322][ T6333] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 104.236491][ T6333] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 104.321657][ T6339] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.012390][ T6361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.84'. [ 105.431989][ T5232] udevd[5232]: worker [5914] terminated by signal 33 (Unknown signal 33) [ 105.659941][ T6375] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.736419][ T6375] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 105.802213][ T6384] netlink: 'syz.3.91': attribute type 14 has an invalid length. [ 105.829607][ T6381] syz.1.89 uses obsolete (PF_INET,SOCK_PACKET) [ 105.841318][ T6384] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (11) [ 105.886245][ T6387] __nla_validate_parse: 2 callbacks suppressed [ 105.886266][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 105.898411][ T6384] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 105.981642][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 105.992929][ T6389] netlink: 348 bytes leftover after parsing attributes in process `syz.4.90'. [ 106.013423][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 106.038181][ T6389] netlink: 348 bytes leftover after parsing attributes in process `syz.4.90'. [ 106.061984][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 106.255616][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 106.264608][ T6406] bridge_slave_1: left allmulticast mode [ 106.270475][ T6406] bridge_slave_1: left promiscuous mode [ 106.276469][ T6406] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.318073][ T6406] bridge_slave_0: left allmulticast mode [ 106.334692][ T6406] bridge_slave_0: left promiscuous mode [ 106.345042][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.497438][ T6419] netlink: 'syz.2.98': attribute type 32 has an invalid length. [ 106.509291][ T6419] netlink: 60 bytes leftover after parsing attributes in process `syz.2.98'. [ 107.154864][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 107.164803][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 108.345205][ T6501] tipc: Started in network mode [ 108.350678][ T6501] tipc: Node identity a2d735dc989d, cluster identity 4711 [ 108.389216][ T6501] tipc: Enabled bearer , priority 0 [ 108.418598][ T6501] syzkaller0: entered promiscuous mode [ 108.424314][ T6501] syzkaller0: entered allmulticast mode [ 108.457390][ T6503] tipc: Resetting bearer [ 108.534881][ T6499] tipc: Resetting bearer [ 108.565823][ T6499] tipc: Disabling bearer [ 108.915464][ T6511] net_ratelimit: 14 callbacks suppressed [ 108.915484][ T6511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.305814][ T6524] netlink: 'syz.2.120': attribute type 58 has an invalid length. [ 109.688865][ T6541] veth1_macvtap: left promiscuous mode [ 109.912782][ T6550] netlink: 'syz.1.130': attribute type 2 has an invalid length. [ 109.945122][ T6548] netlink: 'syz.2.131': attribute type 10 has an invalid length. [ 109.948522][ T6550] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 109.985391][ T6548] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.165756][ T6548] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 110.203857][ T6561] 8021q: VLANs not supported on ip6tnl0 [ 110.524192][ T6588] netlink: 'syz.2.137': attribute type 21 has an invalid length. [ 110.723106][ T6592] vlan2: entered allmulticast mode [ 110.724769][ T6598] IPv6: NLM_F_REPLACE set, but no existing node found! [ 110.728916][ T6592] bridge_slave_0: entered allmulticast mode [ 110.995963][ T6604] syzkaller1: entered allmulticast mode [ 111.587064][ T6637] __nla_validate_parse: 15 callbacks suppressed [ 111.587083][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.152'. [ 111.624180][ T6636] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 111.665032][ T6636] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 111.860077][ T6653] tipc: Started in network mode [ 111.873472][ T6653] tipc: Node identity 02129626bd79, cluster identity 4711 [ 111.880893][ T6653] tipc: Enabled bearer , priority 0 [ 111.927733][ T6651] tipc: Disabling bearer [ 112.187496][ T5868] IPVS: starting estimator thread 0... [ 112.254079][ T6673] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 112.290031][ T6668] IPVS: using max 28 ests per chain, 67200 per kthread [ 112.422156][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.163'. [ 113.105345][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 113.311469][ T6702] syz.2.171 (6702) used greatest stack depth: 17864 bytes left [ 113.355769][ T6697] macvtap1: entered allmulticast mode [ 113.367473][ T6697] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 113.436293][ T6697] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 113.509482][ T6710] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 113.604763][ T6718] netlink: 'syz.0.175': attribute type 6 has an invalid length. [ 114.079700][ T5873] block nbd1: Receive control failed (result -32) [ 114.410102][ T6745] netlink: 'syz.4.180': attribute type 11 has an invalid length. [ 114.433230][ T6745] netlink: 'syz.4.180': attribute type 5 has an invalid length. [ 114.460345][ T6745] netlink: 4112 bytes leftover after parsing attributes in process `syz.4.180'. [ 114.490105][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 114.658132][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 114.831983][ T6763] pim6reg: entered allmulticast mode [ 114.853115][ T6763] netlink: 6 bytes leftover after parsing attributes in process `syz.1.185'. [ 114.879543][ T6763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.171147][ T6742] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 115.263687][ T6779] netlink: 'syz.3.189': attribute type 6 has an invalid length. [ 115.377059][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 115.683384][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 115.879346][ T6809] netlink: 56 bytes leftover after parsing attributes in process `syz.2.199'. [ 116.090807][ T6803] Illegal XDP return value 4294967294 on prog (id 77) dev N/A, expect packet loss! [ 116.410802][ T5870] Bluetooth: hci4: command 0x0405 tx timeout [ 117.449624][ T5873] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.451783][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.535815][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 117.580110][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.673508][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.282216][ T6871] netlink: 'syz.2.213': attribute type 13 has an invalid length. [ 118.296315][ T6871] netlink: 'syz.2.213': attribute type 17 has an invalid length. [ 118.386801][ T6871] gretap0: refused to change device tx_queue_len [ 118.411070][ T6871] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 118.661855][ T6876] sctp: [Deprecated]: syz.4.214 (pid 6876) Use of int in max_burst socket option. [ 118.661855][ T6876] Use struct sctp_assoc_value instead [ 118.672262][ T6878] netlink: 188 bytes leftover after parsing attributes in process `syz.1.215'. [ 118.914157][ T6889] syzkaller1: entered promiscuous mode [ 118.930569][ T6889] syzkaller1: entered allmulticast mode [ 119.073638][ T6896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.707030][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 119.736784][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'. [ 119.956277][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 119.969967][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 119.976427][ T6946] x_tables: ip_tables: LED.0 target: invalid size 40 (kernel) != (user) 64 [ 120.314190][ T6961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.236'. [ 120.673146][ T6984] netlink: 6 bytes leftover after parsing attributes in process `syz.3.236'. [ 120.692886][ T6984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.715564][ T6983] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 121.204879][ T7010] pim6reg: left allmulticast mode [ 122.069572][ T7032] !: renamed from dummy0 [ 122.528908][ T7051] netlink: 44 bytes leftover after parsing attributes in process `syz.1.258'. [ 122.957540][ T5868] IPVS: starting estimator thread 0... [ 122.987481][ T7083] geneve2: entered promiscuous mode [ 123.016272][ T6088] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 123.047114][ T6088] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 123.071741][ T7083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.266'. [ 123.078098][ T7087] IPVS: using max 25 ests per chain, 60000 per kthread [ 123.082378][ T7092] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-272); Ignoring new local tt entry: 80:00:00:00:00:85 [ 123.104395][ T6088] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 123.115477][ T6088] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 123.264108][ T7099] netlink: 32 bytes leftover after parsing attributes in process `syz.3.271'. [ 123.552908][ T7119] Bluetooth: MGMT ver 1.23 [ 123.898557][ T7140] netlink: 'syz.2.282': attribute type 3 has an invalid length. [ 124.054960][ T7156] batadv2: entered promiscuous mode [ 124.133982][ T7165] syzkaller0: entered promiscuous mode [ 124.143300][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 124.143741][ T7165] syzkaller0: entered allmulticast mode [ 124.164539][ T7160] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 124.173393][ T24] IPVS: starting estimator thread 0... [ 124.269311][ T7169] IPVS: using max 32 ests per chain, 76800 per kthread [ 124.313524][ T7166] hsr_slave_1 (unregistering): left promiscuous mode [ 124.365892][ T7170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 124.412746][ T7177] syzkaller1: entered promiscuous mode [ 124.422722][ T7177] syzkaller1: entered allmulticast mode [ 124.430333][ T7150] netlink: 2 bytes leftover after parsing attributes in process `syz.3.286'. [ 124.492109][ T7158] xt_policy: too many policy elements [ 124.879705][ T7194] syzkaller1: entered promiscuous mode [ 124.885241][ T7194] syzkaller1: entered allmulticast mode [ 125.046283][ T7206] netlink: 32 bytes leftover after parsing attributes in process `syz.1.299'. [ 125.073069][ T7206] tipc: Invalid UDP bearer configuration [ 125.073136][ T7206] tipc: Enabling of bearer rejected, failed to enable media [ 125.572524][ T7239] syzkaller1: entered promiscuous mode [ 125.581283][ T7239] syzkaller1: entered allmulticast mode [ 125.693067][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 125.831032][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 126.243699][ T7267] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 126.256413][ T7267] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.489021][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.324'. [ 126.579052][ T7295] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 126.651526][ T7295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.911472][ T7309] netlink: 80 bytes leftover after parsing attributes in process `syz.2.331'. [ 127.029808][ T7315] syzkaller1: entered promiscuous mode [ 127.035573][ T7315] syzkaller1: entered allmulticast mode [ 127.643350][ T7295] bond1: (slave geneve2): making interface the new active one [ 127.656700][ T7295] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 127.693444][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.715109][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.747078][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.785699][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.856701][ T7340] IPv6: Can't replace route, no match found [ 128.155978][ T7351] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 128.198882][ T7351] netlink: 'syz.2.342': attribute type 2 has an invalid length. [ 128.224791][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 128.274672][ T7345] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 128.285828][ T7345] netlink: 228 bytes leftover after parsing attributes in process `syz.0.339'. [ 128.306412][ T7357] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 128.330132][ T7358] netlink: 'syz.2.342': attribute type 10 has an invalid length. [ 128.336468][ T7357] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.388294][ T7364] netlink: 'syz.2.342': attribute type 10 has an invalid length. [ 128.412468][ T7358] team0: Port device dummy0 added [ 128.485298][ T7364] team0: Port device dummy0 removed [ 128.506657][ T7364] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 129.161633][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 129.427251][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.351'. [ 129.508977][ T7405] netlink: 'syz.0.356': attribute type 2 has an invalid length. [ 129.528024][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.356'. [ 129.579900][ T7411] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 129.598054][ T7411] netlink: 'syz.1.359': attribute type 2 has an invalid length. [ 129.618507][ T7411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.359'. [ 129.639888][ T7411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.359'. [ 129.662545][ T7413] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 129.667759][ T7416] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 129.674320][ T7413] netlink: 'syz.1.359': attribute type 2 has an invalid length. [ 129.892088][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 130.235077][ T7442] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 130.275590][ T7442] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 130.345071][ T7449] bridge_slave_0: left allmulticast mode [ 130.355623][ T7449] bridge_slave_0: left promiscuous mode [ 130.362853][ T7449] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.385559][ T7449] bridge_slave_1: left allmulticast mode [ 130.392050][ T7449] bridge_slave_1: left promiscuous mode [ 130.402918][ T7449] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.422049][ T7449] bond0: (slave bond_slave_0): Releasing backup interface [ 130.424339][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 130.449687][ T7449] bond0: (slave bond_slave_1): Releasing backup interface [ 130.471799][ T7449] team0: Failed to send options change via netlink (err -105) [ 130.487347][ T7449] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 130.497682][ T7449] team0: Port device team_slave_0 removed [ 130.512862][ T7449] team0: Failed to send options change via netlink (err -105) [ 130.532288][ T7449] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 130.544121][ T7449] team0: Port device team_slave_1 removed [ 130.551419][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.559480][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.570339][ T7449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.577742][ T7449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.591288][ T7449] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.609918][ T7453] team0: Failed to send options change via netlink (err -105) [ 130.617435][ T7453] team0: Mode changed to "activebackup" [ 130.705847][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.373'. [ 131.375959][ T7503] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-272); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 131.468576][ T7508] vlan0: entered promiscuous mode [ 131.473763][ T7508] macvtap0: entered promiscuous mode [ 131.815989][ T7522] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 131.829434][ T7522] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 131.843544][ T7522] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 131.952983][ T7522] veth0_to_bridge: entered promiscuous mode [ 131.962029][ T7522] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 132.200986][ T7538] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 132.209708][ T7538] veth1_vlan: entered allmulticast mode [ 132.223611][ T7546] netlink: 'syz.0.394': attribute type 3 has an invalid length. [ 132.241964][ T7538] team0: Device veth1_vlan failed to register rx_handler [ 132.283609][ T7546] netlink: 'syz.0.394': attribute type 3 has an invalid length. [ 132.320462][ T7549] IPv6: NLM_F_REPLACE set, but no existing node found! [ 132.598007][ T7564] netlink: 'syz.0.398': attribute type 5 has an invalid length. [ 132.813535][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.920130][ T7587] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 132.982488][ T7582] bond1: entered promiscuous mode [ 132.988171][ T7582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.037095][ T7580] syzkaller1: entered promiscuous mode [ 133.058444][ T7580] syzkaller1: entered allmulticast mode [ 133.122819][ T7587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.144996][ T7587] team0: Port device bond0 added [ 133.288817][ T7606] dvmrp1: entered allmulticast mode [ 133.739465][ T7605] dvmrp1: left allmulticast mode [ 133.772340][ T7629] __nla_validate_parse: 9 callbacks suppressed [ 133.772360][ T7629] netlink: 14 bytes leftover after parsing attributes in process `syz.3.415'. [ 133.820383][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 133.912225][ T7628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.938288][ T7629] hsr_slave_0: left promiscuous mode [ 133.957089][ T7629] hsr_slave_1: left promiscuous mode [ 134.032497][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 134.542851][ T7628] bond0: (slave bond_slave_0): Releasing backup interface [ 134.552684][ T7628] bond0: (slave bond_slave_1): Releasing backup interface [ 134.574306][ T7628] team0: Port device team_slave_0 removed [ 134.590796][ T7628] team0: Port device team_slave_1 removed [ 134.607630][ T7628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.622492][ T7628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.634592][ T7628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.749222][ T7647] netlink: 80 bytes leftover after parsing attributes in process `syz.4.420'. [ 134.772135][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 134.880524][ T7634] team0 (unregistering): Port device team_slave_0 removed [ 134.893703][ T7634] team0 (unregistering): Port device team_slave_1 removed [ 135.045873][ T7647] macsec1: entered promiscuous mode [ 135.078465][ T7647] !: entered promiscuous mode [ 135.085681][ T7647] macsec1: entered allmulticast mode [ 135.091930][ T7647] !: entered allmulticast mode [ 135.117635][ T7647] !: left allmulticast mode [ 135.127987][ T7647] !: left promiscuous mode [ 135.181392][ T7661] netlink: 'syz.2.421': attribute type 74 has an invalid length. [ 135.362791][ T7675] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 135.388285][ T7675] netlink: 224 bytes leftover after parsing attributes in process `syz.3.425'. [ 135.427167][ T7675] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 135.611423][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'. [ 135.670705][ T7687] netlink: 96 bytes leftover after parsing attributes in process `syz.1.430'. [ 135.715734][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.430'. [ 135.816768][ T7690] netlink: 32 bytes leftover after parsing attributes in process `syz.1.430'. [ 135.908998][ T7687] trusted_key: syz.1.430 sent an empty control message without MSG_MORE. [ 136.925579][ T7731] pim6reg1: entered promiscuous mode [ 136.931655][ T7731] pim6reg1: entered allmulticast mode [ 137.030504][ T7737] IPVS: set_ctl: invalid protocol: 115 100.1.1.2:20004 [ 137.655512][ T7768] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 137.671541][ T7768] team0: Device veth1_vlan failed to register rx_handler [ 137.751355][ T7773] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 137.764083][ T7773] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 137.831472][ T7771] netlink: 'syz.0.449': attribute type 1 has an invalid length. [ 137.944107][ T7788] FAULT_INJECTION: forcing a failure. [ 137.944107][ T7788] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 137.979870][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.4.457 Not tainted syzkaller #0 PREEMPT(full) [ 137.979899][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.979912][ T7788] Call Trace: [ 137.979921][ T7788] [ 137.979930][ T7788] dump_stack_lvl+0x189/0x250 [ 137.979967][ T7788] ? __pfx____ratelimit+0x10/0x10 [ 137.979999][ T7788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.980022][ T7788] ? __pfx__printk+0x10/0x10 [ 137.980051][ T7788] ? fs_reclaim_acquire+0x7d/0x100 [ 137.980092][ T7788] should_fail_ex+0x414/0x560 [ 137.980127][ T7788] prepare_alloc_pages+0x213/0x610 [ 137.980166][ T7788] __alloc_frozen_pages_noprof+0x123/0x370 [ 137.980203][ T7788] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.980245][ T7788] ? policy_nodemask+0x27c/0x720 [ 137.980279][ T7788] alloc_pages_mpol+0x232/0x4a0 [ 137.980313][ T7788] vma_alloc_folio_noprof+0xe4/0x200 [ 137.980344][ T7788] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 137.980390][ T7788] folio_prealloc+0x30/0x180 [ 137.980420][ T7788] do_wp_page+0x1231/0x5800 [ 137.980470][ T7788] ? __pfx_do_wp_page+0x10/0x10 [ 137.980491][ T7788] ? do_raw_spin_lock+0x121/0x290 [ 137.980518][ T7788] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 137.980553][ T7788] __handle_mm_fault+0x1033/0x5440 [ 137.980597][ T7788] ? __pfx___handle_mm_fault+0x10/0x10 [ 137.980645][ T7788] ? find_vma+0xe7/0x160 [ 137.980669][ T7788] ? __pfx_find_vma+0x10/0x10 [ 137.980697][ T7788] handle_mm_fault+0x40a/0x8e0 [ 137.980735][ T7788] do_user_addr_fault+0x764/0x1390 [ 137.980793][ T7788] exc_page_fault+0x76/0xf0 [ 137.980827][ T7788] asm_exc_page_fault+0x26/0x30 [ 137.980846][ T7788] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 137.980873][ T7788] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 137.980890][ T7788] RSP: 0018:ffffc9001c687c90 EFLAGS: 00050206 [ 137.980913][ T7788] RAX: ffffffff84c88f01 RBX: 000000000000b161 RCX: 00000000000078a1 [ 137.980927][ T7788] RDX: 0000000000000000 RSI: ffff8880526b38c0 RDI: 0000200000005000 [ 137.980941][ T7788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 137.980952][ T7788] R10: dffffc0000000000 R11: ffffed100a4d762c R12: 000020000000c8a1 [ 137.980966][ T7788] R13: 00007ffffffff000 R14: ffff8880526b0000 R15: 0000200000001740 [ 137.980990][ T7788] ? _copy_to_user+0x1/0xb0 [ 137.981023][ T7788] _copy_to_user+0x8a/0xb0 [ 137.981051][ T7788] map_lookup_and_delete_elem+0x712/0x870 [ 137.981092][ T7788] __sys_bpf+0x64c/0x870 [ 137.981120][ T7788] ? __pfx___sys_bpf+0x10/0x10 [ 137.981161][ T7788] ? ksys_write+0x1e1/0x250 [ 137.981190][ T7788] ? __pfx_ksys_write+0x10/0x10 [ 137.981212][ T7788] ? rcu_is_watching+0x15/0xb0 [ 137.981240][ T7788] __x64_sys_bpf+0x7c/0x90 [ 137.981264][ T7788] do_syscall_64+0xfa/0x3b0 [ 137.981282][ T7788] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.981313][ T7788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.981333][ T7788] ? clear_bhb_loop+0x60/0xb0 [ 137.981358][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.981377][ T7788] RIP: 0033:0x7fb43698eec9 [ 137.981403][ T7788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.981418][ T7788] RSP: 002b:00007fb4377b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.981437][ T7788] RAX: ffffffffffffffda RBX: 00007fb436be5fa0 RCX: 00007fb43698eec9 [ 137.981451][ T7788] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000015 [ 137.981463][ T7788] RBP: 00007fb4377b9090 R08: 0000000000000000 R09: 0000000000000000 [ 137.981475][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.981487][ T7788] R13: 00007fb436be6038 R14: 00007fb436be5fa0 R15: 00007ffef06be508 [ 137.981521][ T7788] [ 138.490524][ T7796] netlink: 'syz.1.461': attribute type 3 has an invalid length. [ 138.502584][ T7791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.625953][ T7799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.704078][ T7799] team0: Port device bond0 removed [ 138.752409][ T7813] netlink: 'syz.4.465': attribute type 10 has an invalid length. [ 138.764110][ T7799] bond0: (slave dummy0): Releasing backup interface [ 138.785351][ T7799] bridge_slave_0: left allmulticast mode [ 138.792831][ T7799] bridge_slave_0: left promiscuous mode [ 138.799788][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.822211][ T7799] bridge_slave_1: left allmulticast mode [ 138.828759][ T7799] bridge_slave_1: left promiscuous mode [ 138.834606][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.846749][ T7817] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 138.864884][ T7799] bond0: (slave bond_slave_0): Releasing backup interface [ 138.886423][ T7799] bond0: (slave bond_slave_1): Releasing backup interface [ 138.929470][ T7799] team0: Port device team_slave_0 removed [ 138.956027][ T7799] team0: Port device team_slave_1 removed [ 138.973025][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.980996][ T7799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.992246][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.000096][ T7799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.010216][ T7799] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.056994][ T7813] veth1_vlan: entered allmulticast mode [ 139.074387][ T7813] veth1_vlan: left promiscuous mode [ 139.121105][ T7813] team0: Device veth1_vlan failed to register rx_handler [ 139.414233][ T7840] FAULT_INJECTION: forcing a failure. [ 139.414233][ T7840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.446036][ T7840] CPU: 1 UID: 0 PID: 7840 Comm: syz.2.472 Not tainted syzkaller #0 PREEMPT(full) [ 139.446065][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.446078][ T7840] Call Trace: [ 139.446086][ T7840] [ 139.446095][ T7840] dump_stack_lvl+0x189/0x250 [ 139.446123][ T7840] ? __pfx____ratelimit+0x10/0x10 [ 139.446155][ T7840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.446178][ T7840] ? __pfx__printk+0x10/0x10 [ 139.446206][ T7840] ? fs_reclaim_acquire+0x7d/0x100 [ 139.446246][ T7840] should_fail_ex+0x414/0x560 [ 139.446281][ T7840] prepare_alloc_pages+0x213/0x610 [ 139.446320][ T7840] __alloc_frozen_pages_noprof+0x123/0x370 [ 139.446356][ T7840] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.446398][ T7840] ? policy_nodemask+0x27c/0x720 [ 139.446431][ T7840] alloc_pages_mpol+0x232/0x4a0 [ 139.446465][ T7840] vma_alloc_folio_noprof+0xe4/0x200 [ 139.446496][ T7840] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 139.446538][ T7840] folio_prealloc+0x30/0x180 [ 139.446574][ T7840] do_wp_page+0x1231/0x5800 [ 139.446624][ T7840] ? __pfx_do_wp_page+0x10/0x10 [ 139.446645][ T7840] ? do_raw_spin_lock+0x121/0x290 [ 139.446672][ T7840] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.446708][ T7840] __handle_mm_fault+0x1033/0x5440 [ 139.446753][ T7840] ? __pfx___handle_mm_fault+0x10/0x10 [ 139.446803][ T7840] ? find_vma+0xe7/0x160 [ 139.446827][ T7840] ? __pfx_find_vma+0x10/0x10 [ 139.446854][ T7840] handle_mm_fault+0x40a/0x8e0 [ 139.446892][ T7840] do_user_addr_fault+0x764/0x1390 [ 139.446942][ T7840] exc_page_fault+0x76/0xf0 [ 139.446976][ T7840] asm_exc_page_fault+0x26/0x30 [ 139.446995][ T7840] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 139.447026][ T7840] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 139.447043][ T7840] RSP: 0018:ffffc9001c377c90 EFLAGS: 00050206 [ 139.447062][ T7840] RAX: ffffffff84c88f01 RBX: 000000000000b161 RCX: 00000000000068a1 [ 139.447075][ T7840] RDX: 0000000000000000 RSI: ffff888052e948c0 RDI: 0000200000006000 [ 139.447089][ T7840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 139.447100][ T7840] R10: dffffc0000000000 R11: ffffed100a5d362c R12: 000020000000c8a1 [ 139.447114][ T7840] R13: 00007ffffffff000 R14: ffff888052e90000 R15: 0000200000001740 [ 139.447138][ T7840] ? _copy_to_user+0x1/0xb0 [ 139.447171][ T7840] _copy_to_user+0x8a/0xb0 [ 139.447199][ T7840] map_lookup_and_delete_elem+0x712/0x870 [ 139.447239][ T7840] __sys_bpf+0x64c/0x870 [ 139.447268][ T7840] ? __pfx___sys_bpf+0x10/0x10 [ 139.447309][ T7840] ? ksys_write+0x1e1/0x250 [ 139.447337][ T7840] ? __pfx_ksys_write+0x10/0x10 [ 139.447360][ T7840] ? rcu_is_watching+0x15/0xb0 [ 139.447388][ T7840] __x64_sys_bpf+0x7c/0x90 [ 139.447411][ T7840] do_syscall_64+0xfa/0x3b0 [ 139.447430][ T7840] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.447460][ T7840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.447479][ T7840] ? clear_bhb_loop+0x60/0xb0 [ 139.447505][ T7840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.447524][ T7840] RIP: 0033:0x7f391e58eec9 [ 139.447547][ T7840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.447563][ T7840] RSP: 002b:00007f391f3fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.447582][ T7840] RAX: ffffffffffffffda RBX: 00007f391e7e5fa0 RCX: 00007f391e58eec9 [ 139.447597][ T7840] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000015 [ 139.447609][ T7840] RBP: 00007f391f3fa090 R08: 0000000000000000 R09: 0000000000000000 [ 139.447621][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.447633][ T7840] R13: 00007f391e7e6038 R14: 00007f391e7e5fa0 R15: 00007fff43db58c8 [ 139.447667][ T7840] [ 140.244454][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.252287][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.341682][ T7858] __nla_validate_parse: 6 callbacks suppressed [ 140.341700][ T7858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.475'. [ 140.389473][ T7831] veth0_to_bridge: left promiscuous mode [ 140.400355][ T7854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.411815][ T7853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.487788][ T7831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.513401][ T7833] netlink: 'syz.3.468': attribute type 6 has an invalid length. [ 140.592745][ T7831] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 140.633513][ T7868] netlink: 132 bytes leftover after parsing attributes in process `syz.0.478'. [ 140.699930][ T78] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.722721][ T78] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.751012][ T78] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.771948][ T7875] netlink: 'syz.0.480': attribute type 1 has an invalid length. [ 140.774438][ T78] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.803676][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 140.888609][ T5870] Bluetooth: hci0: command tx timeout [ 140.903655][ T7876] bond1: entered promiscuous mode [ 140.916433][ T7876] bond1: entered allmulticast mode [ 140.923024][ T7876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.931267][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 140.940244][ T7879] netlink: 2 bytes leftover after parsing attributes in process `syz.4.481'. [ 141.077940][ T7897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.085249][ T7897] IPv6: NLM_F_CREATE should be set when creating new route [ 141.092565][ T7897] IPv6: NLM_F_CREATE should be set when creating new route [ 141.099906][ T7897] IPv6: NLM_F_CREATE should be set when creating new route [ 141.110199][ T7897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.123417][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.485'. [ 141.453040][ T7911] netlink: 20 bytes leftover after parsing attributes in process `syz.4.484'. [ 141.553120][ T7928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.592403][ T7929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.697953][ T7932] veth1_macvtap: left promiscuous mode [ 141.706646][ T7932] macsec0: entered promiscuous mode [ 141.726078][ T7932] macsec0: entered allmulticast mode [ 141.746491][ T7941] veth1_macvtap: entered promiscuous mode [ 141.774568][ T7941] veth1_macvtap: entered allmulticast mode [ 141.785970][ T7941] macsec0: left promiscuous mode [ 141.791576][ T7941] macsec0: left allmulticast mode [ 141.796742][ T7941] veth1_macvtap: left allmulticast mode [ 142.056125][ T7958] FAULT_INJECTION: forcing a failure. [ 142.056125][ T7958] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.085368][ T7957] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 142.118232][ T7958] CPU: 1 UID: 0 PID: 7958 Comm: syz.2.502 Not tainted syzkaller #0 PREEMPT(full) [ 142.118261][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.118273][ T7958] Call Trace: [ 142.118281][ T7958] [ 142.118290][ T7958] dump_stack_lvl+0x189/0x250 [ 142.118318][ T7958] ? __pfx____ratelimit+0x10/0x10 [ 142.118350][ T7958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.118387][ T7958] ? __pfx__printk+0x10/0x10 [ 142.118416][ T7958] ? fs_reclaim_acquire+0x7d/0x100 [ 142.118456][ T7958] should_fail_ex+0x414/0x560 [ 142.118491][ T7958] prepare_alloc_pages+0x213/0x610 [ 142.118530][ T7958] __alloc_frozen_pages_noprof+0x123/0x370 [ 142.118567][ T7958] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 142.118609][ T7958] ? policy_nodemask+0x27c/0x720 [ 142.118648][ T7958] alloc_pages_mpol+0x232/0x4a0 [ 142.118682][ T7958] vma_alloc_folio_noprof+0xe4/0x200 [ 142.118714][ T7958] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 142.118756][ T7958] folio_prealloc+0x30/0x180 [ 142.118786][ T7958] do_wp_page+0x1231/0x5800 [ 142.118835][ T7958] ? __pfx_do_wp_page+0x10/0x10 [ 142.118856][ T7958] ? do_raw_spin_lock+0x121/0x290 [ 142.118883][ T7958] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.118918][ T7958] __handle_mm_fault+0x1033/0x5440 [ 142.118962][ T7958] ? __pfx___handle_mm_fault+0x10/0x10 [ 142.119011][ T7958] ? find_vma+0xe7/0x160 [ 142.119035][ T7958] ? __pfx_find_vma+0x10/0x10 [ 142.119063][ T7958] handle_mm_fault+0x40a/0x8e0 [ 142.119101][ T7958] do_user_addr_fault+0x764/0x1390 [ 142.119150][ T7958] exc_page_fault+0x76/0xf0 [ 142.119184][ T7958] asm_exc_page_fault+0x26/0x30 [ 142.119202][ T7958] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 142.119229][ T7958] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 142.119245][ T7958] RSP: 0018:ffffc9000ae17c90 EFLAGS: 00050206 [ 142.119264][ T7958] RAX: ffffffff84c88f01 RBX: 000000000000b161 RCX: 00000000000048a1 [ 142.119277][ T7958] RDX: 0000000000000000 RSI: ffff8880510168c0 RDI: 0000200000008000 [ 142.119290][ T7958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 142.119301][ T7958] R10: dffffc0000000000 R11: ffffed100a20362c R12: 000020000000c8a1 [ 142.119315][ T7958] R13: 00007ffffffff000 R14: ffff888051010000 R15: 0000200000001740 [ 142.119339][ T7958] ? _copy_to_user+0x1/0xb0 [ 142.119377][ T7958] _copy_to_user+0x8a/0xb0 [ 142.119406][ T7958] map_lookup_and_delete_elem+0x712/0x870 [ 142.119447][ T7958] __sys_bpf+0x64c/0x870 [ 142.119474][ T7958] ? __pfx___sys_bpf+0x10/0x10 [ 142.119515][ T7958] ? ksys_write+0x1e1/0x250 [ 142.119543][ T7958] ? __pfx_ksys_write+0x10/0x10 [ 142.119566][ T7958] ? rcu_is_watching+0x15/0xb0 [ 142.119593][ T7958] __x64_sys_bpf+0x7c/0x90 [ 142.119618][ T7958] do_syscall_64+0xfa/0x3b0 [ 142.119636][ T7958] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.119666][ T7958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.119683][ T7958] ? clear_bhb_loop+0x60/0xb0 [ 142.119706][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.119723][ T7958] RIP: 0033:0x7f391e58eec9 [ 142.119740][ T7958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.119755][ T7958] RSP: 002b:00007f391f3fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.119774][ T7958] RAX: ffffffffffffffda RBX: 00007f391e7e5fa0 RCX: 00007f391e58eec9 [ 142.119788][ T7958] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000015 [ 142.119800][ T7958] RBP: 00007f391f3fa090 R08: 0000000000000000 R09: 0000000000000000 [ 142.119811][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.119823][ T7958] R13: 00007f391e7e6038 R14: 00007f391e7e5fa0 R15: 00007fff43db58c8 [ 142.119855][ T7958] [ 142.605014][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 142.940150][ T7982] netlink: 'syz.2.511': attribute type 13 has an invalid length. [ 142.983427][ T7980] lo speed is unknown, defaulting to 1000 [ 143.035155][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.514'. [ 143.050117][ T7982] gretap0: refused to change device tx_queue_len [ 143.057124][ T7982] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 143.078053][ T7990] netlink: 'syz.3.514': attribute type 7 has an invalid length. [ 143.095225][ T7980] lo speed is unknown, defaulting to 1000 [ 143.109362][ T7990] netlink: 'syz.3.514': attribute type 8 has an invalid length. [ 143.111771][ T7980] lo speed is unknown, defaulting to 1000 [ 143.152604][ T7980] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 143.154662][ T7991] netlink: 'syz.3.514': attribute type 11 has an invalid length. [ 143.191889][ T7980] lo speed is unknown, defaulting to 1000 [ 143.198115][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.514'. [ 143.231727][ T7980] lo speed is unknown, defaulting to 1000 [ 143.241252][ T7980] lo speed is unknown, defaulting to 1000 [ 143.254144][ T7998] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 143.276302][ T7980] lo speed is unknown, defaulting to 1000 [ 143.282395][ T7998] veth1_vlan: entered allmulticast mode [ 143.310699][ T7980] lo speed is unknown, defaulting to 1000 [ 143.826153][ T30] audit: type=1107 audit(1758734442.300:2): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='R F˜¼¤ÊKÆÌáÌNàŸôÑìÊwüÛ]õå˜Áˆk«×¹àቑŒ8Äú2M…–G$<Ù™bøaŒAœ–aÚÕÂ4šÄO"Ín=ò„<»Óà‚æ[ïø™ú×òm@ï@•ƒdæ^æ궊làUu{Ãt7ÎúªUÓTþÇÉB²º¡ç¿O´RàÙÇ­;‹dNëÝhwÀ‘ðéNåv®† /4®cÖ¬¯ÿ(YFÉ!Rb—il,bðzH=a¬c?»î5Rg êJê"?vJîÀ«ÜwÈyÌÁyCM4N½ å,’Û›«¼4¯ÈÁ6²® ƒbãz3Ïq' [ 143.907605][ T30] audit: type=1107 audit(1758734442.310:3): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='R F˜¼¤ÊKÆÌáÌNàŸôÑìÊwüÛ]õå˜Áˆk«×¹àቑŒ8Äú2M…–G$<Ù™bøaŒAœ–aÚÕÂ4šÄO"Ín=ò„<»Óà‚æ[ïø™ú×òm@ï@•ƒdæ^æ궊làUu{Ãt7ÎúªUÓTþÇÉB²º¡ç¿O´RàÙÇ­;‹dNëÝhwÀ‘ðéNåv®† /4®cÖ¬¯ÿ(YFÉ!Rb—il,bðzH=a¬c?»î5Rg êJê"?vJîÀ«ÜwÈyÌÁyCM4N½ å,’Û›«¼4¯ÈÁ6²® ƒbãz3Ïq' [ 144.678642][ T8020] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 144.692531][ T8069] netlink: 'syz.1.529': attribute type 10 has an invalid length. [ 144.837148][ T8020] bond1: left promiscuous mode [ 144.845709][ T8020] bond1: left allmulticast mode [ 144.968836][ T3492] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.979059][ T8072] Bluetooth: MGMT ver 1.23 [ 144.998962][ T3492] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.028842][ T3492] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.118450][ T3492] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.185571][ T8085] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 145.396234][ T8098] netlink: 'syz.4.538': attribute type 13 has an invalid length. [ 145.400069][ T8101] lo speed is unknown, defaulting to 1000 [ 145.404675][ T8097] netlink: 'syz.4.538': attribute type 13 has an invalid length. [ 145.454252][ T8098] netlink: 'syz.4.538': attribute type 17 has an invalid length. [ 145.629119][ T8097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.675274][ T8097] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.718179][ T8097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.743395][ T8098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.881673][ T8122] tipc: Enabled bearer , priority 0 [ 145.889983][ T8122] syzkaller0: entered promiscuous mode [ 145.895502][ T8122] syzkaller0: entered allmulticast mode [ 145.963833][ T8122] tipc: Resetting bearer [ 145.965553][ T8125] validate_nla: 1 callbacks suppressed [ 145.965573][ T8125] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 145.986833][ T8122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.007566][ T8125] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 146.025745][ T8125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 146.148574][ T8119] tipc: Resetting bearer [ 146.227644][ T8150] FAULT_INJECTION: forcing a failure. [ 146.227644][ T8150] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 146.283692][ T8150] CPU: 1 UID: 0 PID: 8150 Comm: syz.1.544 Not tainted syzkaller #0 PREEMPT(full) [ 146.283721][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.283734][ T8150] Call Trace: [ 146.283742][ T8150] [ 146.283751][ T8150] dump_stack_lvl+0x189/0x250 [ 146.283781][ T8150] ? __pfx____ratelimit+0x10/0x10 [ 146.283814][ T8150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.283837][ T8150] ? __pfx__printk+0x10/0x10 [ 146.283866][ T8150] ? fs_reclaim_acquire+0x7d/0x100 [ 146.283906][ T8150] should_fail_ex+0x414/0x560 [ 146.283968][ T8150] prepare_alloc_pages+0x213/0x610 [ 146.284008][ T8150] __alloc_frozen_pages_noprof+0x123/0x370 [ 146.284045][ T8150] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 146.284088][ T8150] ? policy_nodemask+0x27c/0x720 [ 146.284122][ T8150] alloc_pages_mpol+0x232/0x4a0 [ 146.284156][ T8150] vma_alloc_folio_noprof+0xe4/0x200 [ 146.284188][ T8150] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 146.284230][ T8150] folio_prealloc+0x30/0x180 [ 146.284260][ T8150] do_wp_page+0x1231/0x5800 [ 146.284310][ T8150] ? __pfx_do_wp_page+0x10/0x10 [ 146.284331][ T8150] ? do_raw_spin_lock+0x121/0x290 [ 146.284358][ T8150] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 146.284393][ T8150] __handle_mm_fault+0x1033/0x5440 [ 146.284438][ T8150] ? __pfx___handle_mm_fault+0x10/0x10 [ 146.284488][ T8150] ? find_vma+0xe7/0x160 [ 146.284511][ T8150] ? __pfx_find_vma+0x10/0x10 [ 146.284539][ T8150] handle_mm_fault+0x40a/0x8e0 [ 146.284576][ T8150] do_user_addr_fault+0x764/0x1390 [ 146.284625][ T8150] exc_page_fault+0x76/0xf0 [ 146.284658][ T8150] asm_exc_page_fault+0x26/0x30 [ 146.284682][ T8150] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 146.284708][ T8150] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 146.284725][ T8150] RSP: 0018:ffffc9000a9d7c90 EFLAGS: 00050206 [ 146.284743][ T8150] RAX: ffffffff84c88f01 RBX: 000000000000b161 RCX: 00000000000018a1 [ 146.284757][ T8150] RDX: 0000000000000000 RSI: ffff8880766c98c0 RDI: 000020000000b000 [ 146.284770][ T8150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 146.284781][ T8150] R10: dffffc0000000000 R11: ffffed100ecd962c R12: 000020000000c8a1 [ 146.284795][ T8150] R13: 00007ffffffff000 R14: ffff8880766c0000 R15: 0000200000001740 [ 146.284819][ T8150] ? _copy_to_user+0x1/0xb0 [ 146.284852][ T8150] _copy_to_user+0x8a/0xb0 [ 146.284879][ T8150] map_lookup_and_delete_elem+0x712/0x870 [ 146.284927][ T8150] __sys_bpf+0x64c/0x870 [ 146.284955][ T8150] ? __pfx___sys_bpf+0x10/0x10 [ 146.284994][ T8150] ? ksys_write+0x1e1/0x250 [ 146.285024][ T8150] ? __pfx_ksys_write+0x10/0x10 [ 146.285046][ T8150] ? rcu_is_watching+0x15/0xb0 [ 146.285073][ T8150] __x64_sys_bpf+0x7c/0x90 [ 146.285097][ T8150] do_syscall_64+0xfa/0x3b0 [ 146.285115][ T8150] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.285146][ T8150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.285166][ T8150] ? clear_bhb_loop+0x60/0xb0 [ 146.285202][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.285220][ T8150] RIP: 0033:0x7fd7fb58eec9 [ 146.285237][ T8150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.285253][ T8150] RSP: 002b:00007fd7fc374038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.285272][ T8150] RAX: ffffffffffffffda RBX: 00007fd7fb7e5fa0 RCX: 00007fd7fb58eec9 [ 146.285285][ T8150] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000015 [ 146.285297][ T8150] RBP: 00007fd7fc374090 R08: 0000000000000000 R09: 0000000000000000 [ 146.285309][ T8150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.285320][ T8150] R13: 00007fd7fb7e6038 R14: 00007fd7fb7e5fa0 R15: 00007ffce66836e8 [ 146.285353][ T8150] [ 146.752816][ T8155] netlink: 'syz.3.545': attribute type 10 has an invalid length. [ 146.774237][ T8119] tipc: Disabling bearer [ 146.813435][ T8139] syz_tun: entered allmulticast mode [ 146.833972][ T8147] dvmrp8: entered allmulticast mode [ 146.865363][ T8155] team0: Device veth1_vlan failed to register rx_handler [ 146.970618][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'. [ 146.973029][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 147.051339][ T8142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.059877][ T8142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.098700][ T8130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.143632][ T8159] lo speed is unknown, defaulting to 1000 [ 147.298275][ T8172] lo speed is unknown, defaulting to 1000 [ 147.671640][ T8197] FAULT_INJECTION: forcing a failure. [ 147.671640][ T8197] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.714747][ T8198] tap0: tun_chr_ioctl cmd 1074025680 [ 147.725216][ T8197] CPU: 0 UID: 0 PID: 8197 Comm: syz.1.556 Not tainted syzkaller #0 PREEMPT(full) [ 147.725244][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.725256][ T8197] Call Trace: [ 147.725265][ T8197] [ 147.725274][ T8197] dump_stack_lvl+0x189/0x250 [ 147.725301][ T8197] ? __pfx____ratelimit+0x10/0x10 [ 147.725333][ T8197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.725355][ T8197] ? __pfx__printk+0x10/0x10 [ 147.725384][ T8197] ? fs_reclaim_acquire+0x7d/0x100 [ 147.725425][ T8197] should_fail_ex+0x414/0x560 [ 147.725460][ T8197] prepare_alloc_pages+0x213/0x610 [ 147.725500][ T8197] __alloc_frozen_pages_noprof+0x123/0x370 [ 147.725537][ T8197] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.725578][ T8197] ? policy_nodemask+0x27c/0x720 [ 147.725603][ T8197] ? __lock_acquire+0xab9/0xd20 [ 147.725636][ T8197] alloc_pages_mpol+0x232/0x4a0 [ 147.725670][ T8197] vma_alloc_folio_noprof+0xe4/0x200 [ 147.725700][ T8197] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 147.725739][ T8197] folio_prealloc+0x30/0x180 [ 147.725768][ T8197] __handle_mm_fault+0x2ab9/0x5440 [ 147.725819][ T8197] ? __pfx___handle_mm_fault+0x10/0x10 [ 147.725865][ T8197] ? find_vma+0xe7/0x160 [ 147.725889][ T8197] ? __pfx_find_vma+0x10/0x10 [ 147.725916][ T8197] handle_mm_fault+0x40a/0x8e0 [ 147.725952][ T8197] do_user_addr_fault+0x764/0x1390 [ 147.725999][ T8197] exc_page_fault+0x76/0xf0 [ 147.726032][ T8197] asm_exc_page_fault+0x26/0x30 [ 147.726051][ T8197] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 147.726077][ T8197] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 147.726092][ T8197] RSP: 0018:ffffc9000a9e7c90 EFLAGS: 00050206 [ 147.726110][ T8197] RAX: ffffffff84c88f01 RBX: 000000000000b161 RCX: 00000000000008a1 [ 147.726123][ T8197] RDX: 0000000000000000 RSI: ffff88802ecba8c0 RDI: 000020000000c000 [ 147.726136][ T8197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 147.726147][ T8197] R10: dffffc0000000000 R11: ffffed1005d9762c R12: 000020000000c8a1 [ 147.726161][ T8197] R13: 00007ffffffff000 R14: ffff88802ecb0000 R15: 0000200000001740 [ 147.726183][ T8197] ? _copy_to_user+0x1/0xb0 [ 147.726215][ T8197] _copy_to_user+0x8a/0xb0 [ 147.726242][ T8197] map_lookup_and_delete_elem+0x712/0x870 [ 147.726283][ T8197] __sys_bpf+0x64c/0x870 [ 147.726311][ T8197] ? __pfx___sys_bpf+0x10/0x10 [ 147.726346][ T8197] ? ksys_write+0x1e1/0x250 [ 147.726371][ T8197] ? __pfx_ksys_write+0x10/0x10 [ 147.726390][ T8197] ? rcu_is_watching+0x15/0xb0 [ 147.726414][ T8197] __x64_sys_bpf+0x7c/0x90 [ 147.726437][ T8197] do_syscall_64+0xfa/0x3b0 [ 147.726455][ T8197] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.726481][ T8197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.726500][ T8197] ? clear_bhb_loop+0x60/0xb0 [ 147.726524][ T8197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.726543][ T8197] RIP: 0033:0x7fd7fb58eec9 [ 147.726561][ T8197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.726577][ T8197] RSP: 002b:00007fd7fc374038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.726597][ T8197] RAX: ffffffffffffffda RBX: 00007fd7fb7e5fa0 RCX: 00007fd7fb58eec9 [ 147.726611][ T8197] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000015 [ 147.726623][ T8197] RBP: 00007fd7fc374090 R08: 0000000000000000 R09: 0000000000000000 [ 147.726635][ T8197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.726645][ T8197] R13: 00007fd7fb7e6038 R14: 00007fd7fb7e5fa0 R15: 00007ffce66836e8 [ 147.726676][ T8197] [ 148.163660][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'. [ 148.196256][ T8198] D: renamed from syzkaller0 [ 148.349656][ T8205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.558'. [ 148.616079][ T8216] netlink: 'syz.0.559': attribute type 10 has an invalid length. [ 148.638756][ T8216] veth1_vlan: entered allmulticast mode [ 148.644725][ T8216] veth1_vlan: left promiscuous mode [ 148.658733][ T8216] team0: Device veth1_vlan failed to register rx_handler [ 148.708740][ T8221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'. [ 148.718071][ T8221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'. [ 148.731628][ T8214] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 148.762122][ T8217] netlink: 'syz.2.562': attribute type 13 has an invalid length. [ 148.928978][ T8223] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 149.003201][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'. [ 149.084478][ T8228] vlan0: entered allmulticast mode [ 149.091299][ T8228] bridge0: entered allmulticast mode [ 149.098910][ T8228] bridge1: port 1(vlan0) entered blocking state [ 149.114990][ T8228] bridge1: port 1(vlan0) entered disabled state [ 149.124030][ T8228] vlan0: entered promiscuous mode [ 149.130518][ T8228] bridge0: entered promiscuous mode [ 149.166014][ T8228] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 149.403773][ T8247] lo speed is unknown, defaulting to 1000 [ 149.472567][ T8251] syzkaller0: entered promiscuous mode [ 149.479016][ T8251] syzkaller0: entered allmulticast mode [ 149.637007][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 149.666447][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 149.736990][ T8256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.747618][ T8256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.779210][ T8259] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 149.864198][ T8258] lo speed is unknown, defaulting to 1000 [ 149.896574][ T8262] bond2: entered promiscuous mode [ 149.903325][ T8262] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.031430][ T8242] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 150.240408][ T8283] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 150.251930][ T8280] netlink: 'syz.2.578': attribute type 21 has an invalid length. [ 150.414166][ T8292] netlink: 'syz.0.580': attribute type 10 has an invalid length. [ 150.451221][ T8292] team0: Device veth1_vlan failed to register rx_handler [ 150.454486][ T8295] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 150.471509][ T8295] batman_adv: batadv0: Interface deactivated: dummy0 [ 150.479392][ T8295] batman_adv: batadv0: Removing interface: dummy0 [ 150.507623][ T8295] team0: Port device dummy0 added [ 150.666115][ T8304] lo speed is unknown, defaulting to 1000 [ 150.857880][ T8309] nbd: must specify at least one socket [ 151.068216][ T8314] __nla_validate_parse: 21 callbacks suppressed [ 151.068238][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 151.237035][ T8314] bridge_slave_1: left allmulticast mode [ 151.250928][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.590'. [ 151.277867][ T8314] bridge_slave_1: left promiscuous mode [ 151.286589][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.376449][ T8314] bridge_slave_0: left allmulticast mode [ 151.396486][ T8314] bridge_slave_0: left promiscuous mode [ 151.438183][ T8314] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.770982][ T8314] vlan0 (unregistering): left promiscuous mode [ 151.780717][ T8314] bridge0 (unregistering): left promiscuous mode [ 151.787353][ T8314] bridge1: port 1(vlan0) entered disabled state [ 151.997982][ T8335] veth0_to_bridge: entered promiscuous mode [ 152.047039][ T8339] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 152.059512][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.595'. [ 152.139573][ T8336] veth0_to_bridge: left promiscuous mode [ 152.444918][ T8355] netlink: 'syz.3.599': attribute type 1 has an invalid length. [ 152.730881][ T8366] vxcan1: entered allmulticast mode [ 152.866708][ T8370] lo speed is unknown, defaulting to 1000 [ 152.951245][ T8368] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 152.967082][ T8372] netlink: 183068 bytes leftover after parsing attributes in process `syz.1.604'. [ 152.995852][ T8372] netlink: zone id is out of range [ 153.001224][ T8372] netlink: zone id is out of range [ 153.006452][ T8372] netlink: get zone limit has 8 unknown bytes [ 153.023288][ T8368] netlink: 152 bytes leftover after parsing attributes in process `syz.1.604'. [ 153.314610][ T8384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.608'. [ 153.324375][ T8384] netlink: 236 bytes leftover after parsing attributes in process `syz.0.608'. [ 153.721833][ T8392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.611'. [ 153.861425][ T8391] lo speed is unknown, defaulting to 1000 [ 153.893441][ T8392] nbd: socks must be embedded in a SOCK_ITEM attr [ 153.932609][ T8401] lo speed is unknown, defaulting to 1000 [ 154.024890][ T8412] ip_vti0: left promiscuous mode [ 154.038941][ T8412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.501508][ T8434] netlink: 'syz.1.621': attribute type 2 has an invalid length. [ 154.509334][ T8434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'. [ 154.737310][ T8444] lo speed is unknown, defaulting to 1000 [ 154.747661][ T8447] netlink: 'syz.1.624': attribute type 10 has an invalid length. [ 154.788273][ T8447] netlink: 44 bytes leftover after parsing attributes in process `syz.1.624'. [ 155.662579][ T8463] tipc: Started in network mode [ 155.677969][ T8463] tipc: Node identity 22fc9af35b7a, cluster identity 4711 [ 155.692382][ T8463] tipc: Enabled bearer , priority 0 [ 155.713200][ T8463] syzkaller0: entered promiscuous mode [ 155.719108][ T8463] syzkaller0: entered allmulticast mode [ 155.726652][ T8471] syz_tun: entered allmulticast mode [ 155.759124][ T8471] dvmrp8: entered allmulticast mode [ 155.769766][ T8463] tipc: Resetting bearer [ 155.792832][ T8462] tipc: Resetting bearer [ 155.819224][ T8462] tipc: Disabling bearer [ 155.838302][ T8471] syz_tun: left allmulticast mode [ 155.850887][ T8471] dvmrp8: left allmulticast mode [ 156.015680][ T8484] lo speed is unknown, defaulting to 1000 [ 156.338413][ T8498] __nla_validate_parse: 2 callbacks suppressed [ 156.338431][ T8498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.635'. [ 156.369771][ T8504] netlink: 'syz.2.636': attribute type 10 has an invalid length. [ 156.379534][ T8504] veth1_vlan: entered allmulticast mode [ 156.445378][ T8504] team0: Device veth1_vlan failed to register rx_handler [ 156.560711][ T8510] lo speed is unknown, defaulting to 1000 [ 156.992003][ T8516] lo speed is unknown, defaulting to 1000 [ 157.273496][ T8524] kthread_run failed with err -4 [ 157.382252][ T8528] lo speed is unknown, defaulting to 1000 [ 157.562915][ T8549] openvswitch: netlink: Flow key attr not present in new flow. [ 157.738714][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 157.909904][ T8556] lo speed is unknown, defaulting to 1000 [ 158.011336][ T8570] netlink: 52 bytes leftover after parsing attributes in process `syz.4.653'. [ 158.028375][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 158.075497][ T8574] netlink: 'syz.1.654': attribute type 10 has an invalid length. [ 158.401354][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 158.436379][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 158.825869][ T8048] IPVS: starting estimator thread 0... [ 159.028082][ T8598] IPVS: using max 27 ests per chain, 64800 per kthread [ 159.067188][ T8604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.208324][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 159.292271][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'. [ 159.361254][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.665'. [ 159.455323][ T8621] tipc: Started in network mode [ 159.461019][ T8621] tipc: Node identity 8a58233b6839, cluster identity 4711 [ 159.471286][ T8621] tipc: Enabled bearer , priority 0 [ 159.486084][ T8621] syzkaller0: entered promiscuous mode [ 159.491839][ T8621] syzkaller0: entered allmulticast mode [ 159.728694][ T8626] tipc: Resetting bearer [ 159.755251][ T8620] tipc: Resetting bearer [ 159.799277][ T8620] tipc: Disabling bearer [ 159.845336][ T8628] lo speed is unknown, defaulting to 1000 [ 160.160316][ T8647] xt_l2tp: v2 sid > 0xffff: 1114112 [ 160.343905][ T8667] netlink: 'syz.0.679': attribute type 7 has an invalid length. [ 160.364109][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 160.593078][ T8679] lo speed is unknown, defaulting to 1000 [ 161.090137][ T8701] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 161.388568][ T8713] __nla_validate_parse: 1 callbacks suppressed [ 161.388588][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.691'. [ 162.003116][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.697'. [ 162.015097][ T8738] netlink: 'syz.1.700': attribute type 32 has an invalid length. [ 162.034008][ T8738] netlink: 60 bytes leftover after parsing attributes in process `syz.1.700'. [ 162.254827][ T8747] lo speed is unknown, defaulting to 1000 [ 162.305223][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 162.869917][ T8773] netlink: 60 bytes leftover after parsing attributes in process `syz.1.707'. [ 162.897573][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.708'. [ 163.014913][ T8775] syzkaller1: entered promiscuous mode [ 163.034045][ T8775] syzkaller1: entered allmulticast mode [ 163.066910][ T8777] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 163.076966][ T8775] netlink: 44 bytes leftover after parsing attributes in process `syz.1.707'. [ 163.110266][ T8778] tap0: tun_chr_ioctl cmd 1074025677 [ 163.116853][ T8778] tap0: linktype set to 800 [ 163.274790][ T8782] tipc: Enabled bearer , priority 0 [ 163.290765][ T8782] syzkaller0: entered promiscuous mode [ 163.296494][ T8782] syzkaller0: entered allmulticast mode [ 163.491518][ T8797] tipc: Resetting bearer [ 163.502669][ T8787] syzkaller1: entered promiscuous mode [ 163.515716][ T8787] syzkaller1: entered allmulticast mode [ 163.521767][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.714'. [ 164.339091][ T5951] tipc: Node number set to 3211499046 [ 165.844310][ T8781] tipc: Resetting bearer [ 165.860449][ T8781] tipc: Disabling bearer [ 166.141005][ T8811] lo speed is unknown, defaulting to 1000 [ 166.299609][ T8815] netlink: 'syz.4.720': attribute type 3 has an invalid length. [ 166.317596][ T8815] netlink: 'syz.4.720': attribute type 1 has an invalid length. [ 166.320237][ T8817] lo speed is unknown, defaulting to 1000 [ 166.331700][ T8815] netlink: 212 bytes leftover after parsing attributes in process `syz.4.720'. [ 166.555222][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 166.580622][ T8829] syzkaller0: entered promiscuous mode [ 166.586186][ T8829] syzkaller0: entered allmulticast mode [ 166.615619][ T8834] netlink: 'syz.4.725': attribute type 1 has an invalid length. [ 166.617110][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.724'. [ 166.633886][ T8834] netlink: 204 bytes leftover after parsing attributes in process `syz.4.725'. [ 166.650011][ T8834] netlink: 'syz.4.725': attribute type 1 has an invalid length. [ 166.702909][ T8832] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.175276][ T8860] netlink: 'syz.2.731': attribute type 1 has an invalid length. [ 167.466781][ T8869] netlink: 240 bytes leftover after parsing attributes in process `syz.2.731'. [ 168.368990][ T8858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.386399][ T8860] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 168.445103][ T8869] gretap1: entered promiscuous mode [ 168.446336][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.732'. [ 168.685585][ T8879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.700031][ T8879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.013833][ T8896] netlink: 'syz.2.738': attribute type 322 has an invalid length. [ 169.141214][ T8898] netlink: 48 bytes leftover after parsing attributes in process `syz.1.739'. [ 169.194042][ T8901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.740'. [ 169.220398][ T8898] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 169.300842][ T8902] netlink: 'syz.3.740': attribute type 10 has an invalid length. [ 169.331242][ T8901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.740'. [ 169.514477][ T8916] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 169.531941][ T8910] netlink: 'syz.4.744': attribute type 11 has an invalid length. [ 169.753554][ T8928] lo speed is unknown, defaulting to 1000 [ 170.032893][ T8949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.758'. [ 170.341644][ T8974] netlink: 'syz.4.766': attribute type 12 has an invalid length. [ 170.350830][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 170.358426][ T8974] netlink: 'syz.4.766': attribute type 9 has an invalid length. [ 170.440496][ T8968] lo speed is unknown, defaulting to 1000 [ 170.523606][ T8986] syzkaller1: entered promiscuous mode [ 170.529394][ T8986] syzkaller1: entered allmulticast mode [ 170.632541][ T8986] lo speed is unknown, defaulting to 1000 [ 170.944775][ T9005] lo speed is unknown, defaulting to 1000 [ 170.978536][ T9008] lo speed is unknown, defaulting to 1000 [ 171.179318][ T9016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.187675][ T9016] bridge0: port 3(bond1) entered blocking state [ 171.195497][ T9016] bridge0: port 3(bond1) entered disabled state [ 171.202390][ T9016] bond1: entered allmulticast mode [ 171.210669][ T9016] bond1: entered promiscuous mode [ 171.223190][ T9016] bridge0: port 3(bond1) entered blocking state [ 171.229858][ T9016] bridge0: port 3(bond1) entered forwarding state [ 171.316189][ T3525] bridge0: port 3(bond1) entered disabled state [ 171.400528][ T9016] sctp: [Deprecated]: syz.1.777 (pid 9016) Use of int in max_burst socket option. [ 171.400528][ T9016] Use struct sctp_assoc_value instead [ 171.498569][ T9036] tc_dump_action: action bad kind [ 171.665450][ T9047] sctp: [Deprecated]: syz.3.785 (pid 9047) Use of int in max_burst socket option. [ 171.665450][ T9047] Use struct sctp_assoc_value instead [ 172.210727][ T9073] tipc: Enabled bearer , priority 10 [ 172.245123][ T9074] __nla_validate_parse: 7 callbacks suppressed [ 172.245142][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.792'. [ 172.287683][ T9076] netlink: 'syz.0.793': attribute type 32 has an invalid length. [ 172.691776][ T9106] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.785857][ T9106] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.870853][ T9106] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.935146][ T9106] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.043624][ T9116] lo speed is unknown, defaulting to 1000 [ 173.100121][ T3525] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.154048][ T3525] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.202095][ T3525] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.241137][ T3525] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.328109][ T24] tipc: Node number set to 977941980 [ 173.604091][ T9135] macvtap1: entered promiscuous mode [ 173.618066][ T9135] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 173.673772][ T9135] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 173.793076][ T9143] netlink: 60 bytes leftover after parsing attributes in process `syz.1.807'. [ 173.976969][ T9154] veth1_to_bond: entered allmulticast mode [ 174.044422][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.809'. [ 174.220014][ T9154] veth1_to_bond (unregistering): left allmulticast mode [ 174.435839][ T9161] team0: Port device dummy0 removed [ 174.472506][ T9161] bond0: (slave bond_slave_0): Releasing backup interface [ 174.596973][ T9175] netlink: 47 bytes leftover after parsing attributes in process `syz.1.816'. [ 174.628753][ T9161] bond0: (slave bond_slave_1): Releasing backup interface [ 174.644127][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 174.682099][ T9161] team0: Port device team_slave_0 removed [ 174.709507][ T9161] team0: Port device team_slave_1 removed [ 174.719559][ T9161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.737198][ T9161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.756379][ T9161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.764738][ T9161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.784937][ T9159] netlink: 'syz.0.812': attribute type 7 has an invalid length. [ 174.809221][ T9159] netlink: 'syz.0.812': attribute type 8 has an invalid length. [ 174.990248][ T9188] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 175.021348][ T9192] ip6gre1: entered allmulticast mode [ 175.027090][ T9188] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 175.083812][ T9191] lo speed is unknown, defaulting to 1000 [ 175.089826][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.820'. [ 175.117918][ T9192] netlink: 96 bytes leftover after parsing attributes in process `syz.1.820'. [ 175.206975][ T9184] netlink: 44 bytes leftover after parsing attributes in process `syz.4.817'. [ 175.294411][ T9206] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 175.501712][ T9216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.827'. [ 175.748643][ T9227] netlink: 'syz.4.830': attribute type 10 has an invalid length. [ 175.986807][ T9231] macvtap1: entered allmulticast mode [ 176.089430][ T9223] lo speed is unknown, defaulting to 1000 [ 176.109209][ T9238] bond0: (slave erspan0): Error: Device type is different from other slaves [ 176.521164][ T9257] lo speed is unknown, defaulting to 1000 [ 176.559427][ T5870] Bluetooth: hci4: link tx timeout [ 176.565362][ T5870] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.575545][ T5873] Bluetooth: hci4: link tx timeout [ 176.581317][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.589395][ T5873] Bluetooth: hci4: link tx timeout [ 176.594539][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.661678][ T5873] Bluetooth: hci4: link tx timeout [ 176.667071][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.674925][ T5873] Bluetooth: hci4: link tx timeout [ 176.680239][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.711425][ T5873] Bluetooth: hci4: link tx timeout [ 176.716703][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 176.727580][ T5873] Bluetooth: hci4: link tx timeout [ 176.732781][ T5873] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.559711][ T9277] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 177.595090][ T9277] team0: Device macvtap1 is already an upper device of the team interface [ 177.893653][ T9295] syzkaller0: entered promiscuous mode [ 177.900658][ T9295] syzkaller0: entered allmulticast mode [ 178.043424][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 178.142468][ T9318] Unsupported ieee802154 address type: 0 [ 178.649285][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 178.791529][ T9338] netlink: 96 bytes leftover after parsing attributes in process `syz.0.857'. [ 179.146029][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 179.157901][ T9348] openvswitch: netlink: Message has 12 unknown bytes. [ 179.178548][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.858'. [ 179.197736][ T9342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.858'. [ 179.227511][ T9342] netlink: 'syz.0.858': attribute type 4 has an invalid length. [ 179.384405][ T9358] lo speed is unknown, defaulting to 1000 [ 179.418464][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 179.640537][ T9375] netlink: 'syz.4.866': attribute type 11 has an invalid length. [ 179.650812][ T9375] netlink: 44 bytes leftover after parsing attributes in process `syz.4.866'. [ 179.726261][ T9372] netlink: 144 bytes leftover after parsing attributes in process `syz.3.864'. [ 180.137676][ T9419] tap0: tun_chr_ioctl cmd 1074025677 [ 180.143565][ T9419] tap0: linktype set to 774 [ 180.222399][ T9407] lo speed is unknown, defaulting to 1000 [ 180.272992][ T9425] lo speed is unknown, defaulting to 1000 [ 180.379092][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 180.390774][ T9431] netlink: 140 bytes leftover after parsing attributes in process `syz.2.876'. [ 180.427142][ T9431] netlink: 'syz.2.876': attribute type 10 has an invalid length. [ 180.494296][ T9431] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.510240][ T9431] bond0: (slave team0): Enslaving as an active interface with an up link [ 180.703272][ T9441] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 180.752919][ T9441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.776297][ T9445] bond2: (slave geneve2): making interface the new active one [ 180.785413][ T9445] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 180.803782][ T9438] lo speed is unknown, defaulting to 1000 [ 180.810439][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.822575][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.858896][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.868419][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.733447][ T9504] lo speed is unknown, defaulting to 1000 [ 182.375443][ T9535] lo speed is unknown, defaulting to 1000 [ 182.932045][ T9561] lo speed is unknown, defaulting to 1000 [ 182.983570][ T9557] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 183.177101][ T9571] __nla_validate_parse: 8 callbacks suppressed [ 183.177119][ T9571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.911'. [ 183.329803][ T9582] lo speed is unknown, defaulting to 1000 [ 183.828612][ T9601] netlink: 'syz.1.918': attribute type 10 has an invalid length. [ 184.077553][ T9606] !: renamed from dummy0 (while UP) [ 184.137057][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 184.230895][ T9617] lo speed is unknown, defaulting to 1000 [ 184.255513][ T9616] netlink: 'syz.0.923': attribute type 10 has an invalid length. [ 184.306224][ T9616] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 184.354772][ T9624] mac80211_hwsim hwsim5 wlan1: Caught tx_queue_len zero misconfig [ 184.411390][ T9616] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 184.437600][ T9633] netlink: 'syz.4.927': attribute type 1 has an invalid length. [ 184.446407][ T9633] netlink: 'syz.4.927': attribute type 3 has an invalid length. [ 184.454630][ T9633] netlink: 224 bytes leftover after parsing attributes in process `syz.4.927'. [ 184.464184][ T9633] NCSI netlink: No device for ifindex 246 [ 184.842428][ T9656] veth0_to_bridge: entered promiscuous mode [ 185.005382][ T9630] veth0_to_bridge: left promiscuous mode [ 185.036400][ T9664] netlink: 'syz.3.931': attribute type 10 has an invalid length. [ 185.058952][ T9664] team0: Device veth1_vlan failed to register rx_handler [ 185.178591][ T9668] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 185.466668][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 185.756741][ T9701] lo speed is unknown, defaulting to 1000 [ 185.791594][ T9704] netlink: 44 bytes leftover after parsing attributes in process `syz.2.943'. [ 185.841716][ T9704] netlink: 72 bytes leftover after parsing attributes in process `syz.2.943'. [ 185.866617][ T9707] netlink: 'syz.0.945': attribute type 10 has an invalid length. [ 185.875780][ T9707] team0: Device veth1_vlan failed to register rx_handler [ 186.068742][ T9718] lo speed is unknown, defaulting to 1000 [ 186.096122][ T9721] mac80211_hwsim hwsim7 ªªªªª;: renamed from wlan0 [ 186.153462][ T9719] lo speed is unknown, defaulting to 1000 [ 187.003919][ T9774] netlink: 'syz.2.960': attribute type 3 has an invalid length. [ 187.022830][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'. [ 187.037989][ T9769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.045836][ T9770] bond3: option mode: unable to set because the bond device is up [ 187.163652][ T9781] netlink: 'syz.0.962': attribute type 2 has an invalid length. [ 187.171521][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 187.205952][ T9781] lo speed is unknown, defaulting to 1000 [ 187.771030][ T9804] lo speed is unknown, defaulting to 1000 [ 188.070514][ T9825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.974'. [ 188.166408][ T9831] netlink: 'syz.0.976': attribute type 1 has an invalid length. [ 188.322072][ T9799] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.329907][ T9799] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 188.346861][ T9799] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.353054][ T9799] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 188.365361][ T9799] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.371621][ T9799] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 188.391260][ T9799] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.397562][ T9799] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 188.552933][ T9847] netlink: 100 bytes leftover after parsing attributes in process `syz.0.981'. [ 188.563848][ T9847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.981'. [ 188.596306][ T9847] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.981'. [ 188.606066][ T9847] netlink: zone id is out of range [ 188.611566][ T9847] netlink: zone id is out of range [ 188.616812][ T9847] netlink: get zone limit has 8 unknown bytes [ 188.667107][ T9849] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 188.779417][ T9854] netlink: 'syz.0.983': attribute type 10 has an invalid length. [ 188.789267][ T9854] team0: Device veth1_vlan failed to register rx_handler [ 188.821065][ T9855] netlink: 'syz.1.984': attribute type 10 has an invalid length. [ 189.049723][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 189.173230][ T9862] lo speed is unknown, defaulting to 1000 [ 189.590143][ T9867] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 189.597998][ T9867] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.988'. [ 189.607554][ T9867] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 189.618547][ T9867] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.988'. [ 189.628455][ T9867] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 189.636303][ T9867] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.988'. [ 189.646028][ T9867] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 189.653925][ T9867] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.988'. [ 189.663825][ T9867] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 189.674011][ T9867] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.988'. [ 189.684317][ T9867] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 189.692071][ T9867] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.988'. [ 189.704846][ T9867] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 189.713864][ T9867] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 189.724047][ T9867] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 189.732791][ T9867] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 189.811773][ T9876] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 190.150571][ T9893] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.251115][ T9893] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.339434][ T9893] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.430663][ T9893] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.555202][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.580477][ T8140] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.607916][ T8140] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.644639][ T8140] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.277143][ T9918] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 191.965680][ T9961] lo speed is unknown, defaulting to 1000 [ 192.591532][ T9997] lo speed is unknown, defaulting to 1000 [ 193.591076][T10024] lo speed is unknown, defaulting to 1000 [ 193.631306][T10025] __nla_validate_parse: 30 callbacks suppressed [ 193.631328][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1032'. [ 193.771464][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1033'. [ 194.253448][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.690871][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.132164][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.848462][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 347.856107][ T31] Not tainted syzkaller #0 [ 347.861167][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.869939][ T31] task:kworker/0:1 state:D stack:24840 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 347.882009][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 347.888740][ T31] Call Trace: [ 347.892023][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 347.894955][ T31] __schedule+0x1798/0x4cc0 [ 347.899556][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 347.904972][ T31] ? __pfx___schedule+0x10/0x10 [ 347.910580][ T31] ? schedule+0x91/0x360 [ 347.914881][ T31] schedule+0x165/0x360 [ 347.919221][ T31] schedule_preempt_disabled+0x13/0x30 [ 347.924720][ T31] __mutex_lock+0x7e6/0x1350 [ 347.929889][ T31] ? __mutex_lock+0x5bb/0x1350 [ 347.934709][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 347.941054][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 347.987296][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 347.998038][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 348.003821][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 348.015861][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 348.021975][ T31] process_scheduled_works+0xae1/0x17b0 [ 348.027608][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.033855][ T31] worker_thread+0x8a0/0xda0 [ 348.038603][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 348.044986][ T31] ? __kthread_parkme+0x7b/0x200 [ 348.050003][ T31] kthread+0x70e/0x8a0 [ 348.054659][ T31] ? __pfx_worker_thread+0x10/0x10 [ 348.059973][ T31] ? __pfx_kthread+0x10/0x10 [ 348.064598][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 348.069839][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.075046][ T31] ? __pfx_kthread+0x10/0x10 [ 348.079712][ T31] ret_from_fork+0x439/0x7d0 [ 348.084322][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 348.089664][ T31] ? __switch_to_asm+0x39/0x70 [ 348.094452][ T31] ? __switch_to_asm+0x33/0x70 [ 348.099284][ T31] ? __pfx_kthread+0x10/0x10 [ 348.103907][ T31] ret_from_fork_asm+0x1a/0x30 [ 348.108731][ T31] [ 348.111888][ T31] INFO: task syz.2.963:9782 blocked for more than 143 seconds. [ 348.119565][ T31] Not tainted syzkaller #0 [ 348.124510][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.133242][ T31] task:syz.2.963 state:D stack:25096 pid:9782 tgid:9782 ppid:5875 task_flags:0x400040 flags:0x00004004 [ 348.145298][ T31] Call Trace: [ 348.148776][ T31] [ 348.151715][ T31] __schedule+0x1798/0x4cc0 [ 348.156233][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.161228][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.166123][ T31] ? __pfx___schedule+0x10/0x10 [ 348.171077][ T31] ? schedule+0x91/0x360 [ 348.175342][ T31] schedule+0x165/0x360 [ 348.179570][ T31] schedule_preempt_disabled+0x13/0x30 [ 348.185055][ T31] __mutex_lock+0x7e6/0x1350 [ 348.189708][ T31] ? __mutex_lock+0x5bb/0x1350 [ 348.194502][ T31] ? rfkill_unregister+0xc8/0x220 [ 348.199603][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 348.204633][ T31] ? __pfx_device_del+0x10/0x10 [ 348.209544][ T31] rfkill_unregister+0xc8/0x220 [ 348.214422][ T31] nfc_unregister_device+0x96/0x2a0 [ 348.219658][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 348.225384][ T31] virtual_ncidev_close+0x56/0x90 [ 348.230439][ T31] __fput+0x44c/0xa70 [ 348.234430][ T31] task_work_run+0x1d1/0x260 [ 348.239069][ T31] ? __pfx_task_work_run+0x10/0x10 [ 348.244190][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 348.249917][ T31] exit_to_user_mode_loop+0xec/0x110 [ 348.255218][ T31] do_syscall_64+0x2bd/0x3b0 [ 348.260008][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.265224][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.271329][ T31] ? clear_bhb_loop+0x60/0xb0 [ 348.276013][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.281949][ T31] RIP: 0033:0x7f391e58eec9 [ 348.286364][ T31] RSP: 002b:00007fff43db5a28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 348.294798][ T31] RAX: 0000000000000000 RBX: 00007f391e7e7da0 RCX: 00007f391e58eec9 [ 348.302801][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 348.310831][ T31] RBP: 00007f391e7e7da0 R08: 000000000000020c R09: 0000001e43db5d1f [ 348.318870][ T31] R10: 00000000003ffbcc R11: 0000000000000246 R12: 000000000002de7d [ 348.326865][ T31] R13: 00007f391e7e6090 R14: ffffffffffffffff R15: 00007fff43db5b40 [ 348.334970][ T31] [ 348.338053][ T31] INFO: task syz.4.966:9799 blocked for more than 143 seconds. [ 348.345611][ T31] Not tainted syzkaller #0 [ 348.350770][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.359502][ T31] task:syz.4.966 state:D stack:24952 pid:9799 tgid:9798 ppid:5863 task_flags:0x400040 flags:0x00004006 [ 348.371600][ T31] Call Trace: [ 348.375092][ T31] [ 348.378087][ T31] __schedule+0x1798/0x4cc0 [ 348.382629][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.387494][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.392383][ T31] ? __pfx___schedule+0x10/0x10 [ 348.397283][ T31] ? schedule+0x91/0x360 [ 348.401579][ T31] schedule+0x165/0x360 [ 348.405750][ T31] schedule_preempt_disabled+0x13/0x30 [ 348.411282][ T31] __mutex_lock+0x7e6/0x1350 [ 348.415899][ T31] ? __mutex_lock+0x5bb/0x1350 [ 348.420707][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 348.426001][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 348.431071][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.436283][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 348.442222][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 348.448617][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 348.454368][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 348.459534][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 348.465256][ T31] rfkill_set_block+0x1d2/0x440 [ 348.470175][ T31] rfkill_fop_write+0x44b/0x570 [ 348.475057][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 348.480608][ T31] ? security_file_permission+0x60/0x290 [ 348.486275][ T31] ? rw_verify_area+0x255/0x4d0 [ 348.491266][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.496149][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 348.501574][ T31] vfs_write+0x27e/0xb30 [ 348.505828][ T31] ? __pfx_vfs_write+0x10/0x10 [ 348.510624][ T31] ? __fget_files+0x2a/0x420 [ 348.515226][ T31] ? __fget_files+0x2a/0x420 [ 348.519866][ T31] ? __fget_files+0x3a0/0x420 [ 348.524558][ T31] ? __fget_files+0x2a/0x420 [ 348.529195][ T31] ksys_write+0x145/0x250 [ 348.533530][ T31] ? __pfx_ksys_write+0x10/0x10 [ 348.538420][ T31] ? rcu_is_watching+0x15/0xb0 [ 348.543189][ T31] ? do_syscall_64+0xbe/0x3b0 [ 348.547929][ T31] do_syscall_64+0xfa/0x3b0 [ 348.552454][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.557668][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.563786][ T31] ? clear_bhb_loop+0x60/0xb0 [ 348.568496][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.574394][ T31] RIP: 0033:0x7fb43698eec9 [ 348.578882][ T31] RSP: 002b:00007fb4377b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.587322][ T31] RAX: ffffffffffffffda RBX: 00007fb436be5fa0 RCX: 00007fb43698eec9 [ 348.595525][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 348.603577][ T31] RBP: 00007fb436a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 348.611576][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.619602][ T31] R13: 00007fb436be6038 R14: 00007fb436be5fa0 R15: 00007ffef06be508 [ 348.627588][ T31] [ 348.630653][ T31] INFO: task syz.0.1030:10026 blocked for more than 144 seconds. [ 348.644520][ T31] Not tainted syzkaller #0 [ 348.649578][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.658287][ T31] task:syz.0.1030 state:D stack:27800 pid:10026 tgid:10016 ppid:5862 task_flags:0x400040 flags:0x00004004 [ 348.670256][ T31] Call Trace: [ 348.673538][ T31] [ 348.676474][ T31] __schedule+0x1798/0x4cc0 [ 348.681050][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.685930][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.690945][ T31] ? __pfx___schedule+0x10/0x10 [ 348.695831][ T31] ? schedule+0x91/0x360 [ 348.700347][ T31] schedule+0x165/0x360 [ 348.704552][ T31] schedule_preempt_disabled+0x13/0x30 [ 348.710089][ T31] __mutex_lock+0x7e6/0x1350 [ 348.714690][ T31] ? __mutex_lock+0x5bb/0x1350 [ 348.719533][ T31] ? genl_rcv_msg+0x10d/0x790 [ 348.724225][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 348.729317][ T31] ? stack_trace_save+0x9c/0xe0 [ 348.734173][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 348.739588][ T31] ? radix_tree_lookup+0x240/0x290 [ 348.744807][ T31] genl_rcv_msg+0x10d/0x790 [ 348.749382][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.754249][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.759342][ T31] netlink_rcv_skb+0x208/0x470 [ 348.764116][ T31] ? __lock_acquire+0xab9/0xd20 [ 348.769026][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.774090][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.779451][ T31] ? down_read+0x1ad/0x2e0 [ 348.783908][ T31] genl_rcv+0x28/0x40 [ 348.787974][ T31] netlink_unicast+0x82f/0x9e0 [ 348.792773][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 348.798133][ T31] ? netlink_sendmsg+0x642/0xb30 [ 348.803110][ T31] ? skb_put+0x11b/0x210 [ 348.807362][ T31] netlink_sendmsg+0x805/0xb30 [ 348.812368][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.817662][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 348.822785][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.828148][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.833468][ T31] __sock_sendmsg+0x21c/0x270 [ 348.838229][ T31] __sys_sendto+0x3bd/0x520 [ 348.842739][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 348.847826][ T31] ? count_memcg_event_mm+0x21/0x260 [ 348.853137][ T31] ? exc_page_fault+0x76/0xf0 [ 348.857869][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 348.863190][ T31] __x64_sys_sendto+0xde/0x100 [ 348.868025][ T31] do_syscall_64+0xfa/0x3b0 [ 348.872558][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.877845][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.883933][ T31] ? clear_bhb_loop+0x60/0xb0 [ 348.888680][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.894576][ T31] RIP: 0033:0x7f6a28390d5c [ 348.899051][ T31] RSP: 002b:00007f6a29276ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 348.907468][ T31] RAX: ffffffffffffffda RBX: 00007f6a29276fc0 RCX: 00007f6a28390d5c [ 348.915501][ T31] RDX: 0000000000000024 RSI: 00007f6a29277010 RDI: 000000000000000b [ 348.923690][ T31] RBP: 0000000000000000 R08: 00007f6a29276f14 R09: 000000000000000c [ 348.931717][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 348.939749][ T31] R13: 00007f6a29276f68 R14: 00007f6a29277010 R15: 0000000000000000 [ 348.947776][ T31] [ 348.950826][ T31] INFO: task syz.0.1030:10029 blocked for more than 144 seconds. [ 348.958621][ T31] Not tainted syzkaller #0 [ 348.963562][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.972612][ T31] task:syz.0.1030 state:D stack:27856 pid:10029 tgid:10016 ppid:5862 task_flags:0x400140 flags:0x00004004 [ 348.984671][ T31] Call Trace: [ 348.987998][ T31] [ 348.990953][ T31] __schedule+0x1798/0x4cc0 [ 348.995475][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.000403][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.005282][ T31] ? __pfx___schedule+0x10/0x10 [ 349.010190][ T31] ? schedule+0x91/0x360 [ 349.014447][ T31] schedule+0x165/0x360 [ 349.018655][ T31] schedule_preempt_disabled+0x13/0x30 [ 349.024122][ T31] __mutex_lock+0x7e6/0x1350 [ 349.028982][ T31] ? __mutex_lock+0x5bb/0x1350 [ 349.033777][ T31] ? genl_rcv_msg+0x10d/0x790 [ 349.038548][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 349.043610][ T31] ? stack_trace_save+0x9c/0xe0 [ 349.048626][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 349.054021][ T31] ? radix_tree_lookup+0x240/0x290 [ 349.059186][ T31] genl_rcv_msg+0x10d/0x790 [ 349.063704][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.068587][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.073648][ T31] netlink_rcv_skb+0x208/0x470 [ 349.078450][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.083310][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.088405][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.093728][ T31] ? down_read+0x1ad/0x2e0 [ 349.098193][ T31] genl_rcv+0x28/0x40 [ 349.102183][ T31] netlink_unicast+0x82f/0x9e0 [ 349.106950][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 349.112284][ T31] ? netlink_sendmsg+0x642/0xb30 [ 349.117226][ T31] ? skb_put+0x11b/0x210 [ 349.121514][ T31] netlink_sendmsg+0x805/0xb30 [ 349.126291][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.131662][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 349.136642][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.142190][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.147505][ T31] __sock_sendmsg+0x21c/0x270 [ 349.152316][ T31] ____sys_sendmsg+0x505/0x830 [ 349.157092][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.162442][ T31] ? import_iovec+0x74/0xa0 [ 349.166956][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 349.171683][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.176919][ T31] ? __fget_files+0x2a/0x420 [ 349.181551][ T31] ? __fget_files+0x3a0/0x420 [ 349.186243][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 349.191223][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.196695][ T31] ? rcu_is_watching+0x15/0xb0 [ 349.201497][ T31] ? do_syscall_64+0xbe/0x3b0 [ 349.206203][ T31] do_syscall_64+0xfa/0x3b0 [ 349.210741][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.215945][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.222067][ T31] ? clear_bhb_loop+0x60/0xb0 [ 349.226767][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.232713][ T31] RIP: 0033:0x7f6a2838eec9 [ 349.237131][ T31] RSP: 002b:00007f6a29257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.245585][ T31] RAX: ffffffffffffffda RBX: 00007f6a285e6360 RCX: 00007f6a2838eec9 [ 349.253731][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000009 [ 349.261781][ T31] RBP: 00007f6a28411f91 R08: 0000000000000000 R09: 0000000000000000 [ 349.269848][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.277898][ T31] R13: 00007f6a285e63f8 R14: 00007f6a285e6360 R15: 00007fff429f35c8 [ 349.285905][ T31] [ 349.289202][ T31] INFO: task syz.3.1032:10025 blocked for more than 144 seconds. [ 349.296957][ T31] Not tainted syzkaller #0 [ 349.301934][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.310637][ T31] task:syz.3.1032 state:D stack:23880 pid:10025 tgid:10023 ppid:5864 task_flags:0x400140 flags:0x00004004 [ 349.322597][ T31] Call Trace: [ 349.325877][ T31] [ 349.328846][ T31] __schedule+0x1798/0x4cc0 [ 349.333368][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.338264][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.343122][ T31] ? __pfx___schedule+0x10/0x10 [ 349.348028][ T31] ? schedule+0x91/0x360 [ 349.352280][ T31] schedule+0x165/0x360 [ 349.356439][ T31] schedule_preempt_disabled+0x13/0x30 [ 349.362098][ T31] __mutex_lock+0x7e6/0x1350 [ 349.366692][ T31] ? rcu_is_watching+0x15/0xb0 [ 349.371521][ T31] ? __mutex_lock+0x5bb/0x1350 [ 349.376306][ T31] ? rfkill_register+0x37/0x8e0 [ 349.381236][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 349.386265][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 349.391248][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.396477][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 349.401861][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 349.407524][ T31] rfkill_register+0x37/0x8e0 [ 349.412240][ T31] wiphy_register+0x2231/0x2aa0 [ 349.417109][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 349.422390][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 349.427562][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 349.433688][ T31] ieee80211_register_hw+0x3442/0x40a0 [ 349.439240][ T31] ? ieee80211_register_hw+0x13f1/0x40a0 [ 349.444892][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 349.450753][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 349.457100][ T31] ? __hrtimer_setup+0x187/0x210 [ 349.462109][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 349.468169][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 349.473939][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 349.480077][ T31] ? trace_kmalloc+0x1f/0xd0 [ 349.484672][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 349.491320][ T31] ? kstrndup+0xbf/0x160 [ 349.495588][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 349.500797][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 349.506545][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 349.512143][ T31] ? __nla_parse+0x40/0x60 [ 349.516567][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 349.522965][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 349.528600][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 349.534681][ T31] ? bpf_lsm_capable+0x9/0x20 [ 349.539449][ T31] ? security_capable+0x7e/0x2e0 [ 349.544426][ T31] genl_rcv_msg+0x60e/0x790 [ 349.548982][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.554014][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 349.559624][ T31] netlink_rcv_skb+0x208/0x470 [ 349.564393][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.569278][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.574312][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.579796][ T31] ? down_read+0x1ad/0x2e0 [ 349.584236][ T31] genl_rcv+0x28/0x40 [ 349.588283][ T31] netlink_unicast+0x82f/0x9e0 [ 349.593152][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 349.598505][ T31] ? netlink_sendmsg+0x642/0xb30 [ 349.603477][ T31] ? skb_put+0x11b/0x210 [ 349.607830][ T31] netlink_sendmsg+0x805/0xb30 [ 349.612717][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.618157][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 349.623135][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.628449][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.633738][ T31] __sock_sendmsg+0x21c/0x270 [ 349.638498][ T31] ____sys_sendmsg+0x505/0x830 [ 349.643274][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.648656][ T31] ? import_iovec+0x74/0xa0 [ 349.653185][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 349.657944][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.663207][ T31] ? __fget_files+0x2a/0x420 [ 349.667857][ T31] ? __fget_files+0x3a0/0x420 [ 349.672582][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 349.677530][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.683053][ T31] ? rcu_is_watching+0x15/0xb0 [ 349.688022][ T31] ? do_syscall_64+0xbe/0x3b0 [ 349.692708][ T31] do_syscall_64+0xfa/0x3b0 [ 349.697208][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.702467][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.708618][ T31] ? clear_bhb_loop+0x60/0xb0 [ 349.713341][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.719289][ T31] RIP: 0033:0x7f6a7f38eec9 [ 349.723706][ T31] RSP: 002b:00007f6a8016b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.732173][ T31] RAX: ffffffffffffffda RBX: 00007f6a7f5e6090 RCX: 00007f6a7f38eec9 [ 349.740210][ T31] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a [ 349.748239][ T31] RBP: 00007f6a7f411f91 R08: 0000000000000000 R09: 0000000000000000 [ 349.756235][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.764271][ T31] R13: 00007f6a7f5e6128 R14: 00007f6a7f5e6090 R15: 00007ffe7fe91328 [ 349.772381][ T31] [ 349.775433][ T31] INFO: task syz.1.1035:10041 blocked for more than 145 seconds. [ 349.783278][ T31] Not tainted syzkaller #0 [ 349.788239][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 349.796901][ T31] task:syz.1.1035 state:D stack:27880 pid:10041 tgid:10039 ppid:5860 task_flags:0x400040 flags:0x00004004 [ 349.809015][ T31] Call Trace: [ 349.812296][ T31] [ 349.815230][ T31] __schedule+0x1798/0x4cc0 [ 349.819813][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.824697][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.829640][ T31] ? __pfx___schedule+0x10/0x10 [ 349.834531][ T31] ? schedule+0x91/0x360 [ 349.838810][ T31] schedule+0x165/0x360 [ 349.842978][ T31] schedule_preempt_disabled+0x13/0x30 [ 349.848543][ T31] __mutex_lock+0x7e6/0x1350 [ 349.853140][ T31] ? __mutex_lock+0x5bb/0x1350 [ 349.857964][ T31] ? genl_rcv_msg+0x10d/0x790 [ 349.862679][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 349.867779][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 349.872938][ T31] ? radix_tree_lookup+0x240/0x290 [ 349.878117][ T31] genl_rcv_msg+0x10d/0x790 [ 349.882668][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.887699][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 349.892858][ T31] ? __asan_memcpy+0x40/0x70 [ 349.897476][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 349.902911][ T31] netlink_rcv_skb+0x208/0x470 [ 349.907832][ T31] ? __lock_acquire+0xab9/0xd20 [ 349.912716][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 349.917948][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 349.923256][ T31] ? down_read+0x1ad/0x2e0 [ 349.927676][ T31] genl_rcv+0x28/0x40 [ 349.931818][ T31] netlink_unicast+0x82f/0x9e0 [ 349.936595][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 349.941918][ T31] ? netlink_sendmsg+0x642/0xb30 [ 349.946862][ T31] ? skb_put+0x11b/0x210 [ 349.951156][ T31] netlink_sendmsg+0x805/0xb30 [ 349.955935][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.961264][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 349.966213][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.971528][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.976816][ T31] __sock_sendmsg+0x21c/0x270 [ 349.981547][ T31] __sys_sendto+0x3bd/0x520 [ 349.986058][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 349.991155][ T31] ? count_memcg_event_mm+0x21/0x260 [ 349.996457][ T31] ? exc_page_fault+0x76/0xf0 [ 350.001193][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 350.006487][ T31] __x64_sys_sendto+0xde/0x100 [ 350.011629][ T31] do_syscall_64+0xfa/0x3b0 [ 350.016166][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.021426][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.027498][ T31] ? clear_bhb_loop+0x60/0xb0 [ 350.032368][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.038304][ T31] RIP: 0033:0x7fd7fb590d5c [ 350.042722][ T31] RSP: 002b:00007fd7fc351ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 350.051183][ T31] RAX: ffffffffffffffda RBX: 00007fd7fc351fc0 RCX: 00007fd7fb590d5c [ 350.059186][ T31] RDX: 0000000000000020 RSI: 00007fd7fc352010 RDI: 0000000000000004 [ 350.067160][ T31] RBP: 0000000000000000 R08: 00007fd7fc351f14 R09: 000000000000000c [ 350.075186][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 350.083185][ T31] R13: 00007fd7fc351f68 R14: 00007fd7fc352010 R15: 0000000000000000 [ 350.091378][ T31] [ 350.094453][ T31] INFO: task syz-executor:10048 blocked for more than 145 seconds. [ 350.102444][ T31] Not tainted syzkaller #0 [ 350.107378][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.116094][ T31] task:syz-executor state:D stack:28040 pid:10048 tgid:10048 ppid:1 task_flags:0x400040 flags:0x00004000 [ 350.128063][ T31] Call Trace: [ 350.131364][ T31] [ 350.134293][ T31] __schedule+0x1798/0x4cc0 [ 350.139059][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.143936][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.148843][ T31] ? __pfx___schedule+0x10/0x10 [ 350.153728][ T31] ? schedule+0x91/0x360 [ 350.158028][ T31] schedule+0x165/0x360 [ 350.162228][ T31] schedule_preempt_disabled+0x13/0x30 [ 350.167790][ T31] __mutex_lock+0x7e6/0x1350 [ 350.172400][ T31] ? __mutex_lock+0x5bb/0x1350 [ 350.177163][ T31] ? rfkill_register+0x37/0x8e0 [ 350.182054][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 350.187079][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 350.192413][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 350.197830][ T31] ? device_initialize+0x24b/0x440 [ 350.202965][ T31] rfkill_register+0x37/0x8e0 [ 350.207652][ T31] hci_register_dev+0x3f5/0x890 [ 350.212557][ T31] vhci_create_device+0x39c/0x650 [ 350.217594][ T31] vhci_write+0x3ce/0x4a0 [ 350.221976][ T31] vfs_write+0x5c9/0xb30 [ 350.226225][ T31] ? __pfx_vhci_write+0x10/0x10 [ 350.231121][ T31] ? __pfx_vfs_write+0x10/0x10 [ 350.235896][ T31] ? count_memcg_event_mm+0x21/0x260 [ 350.241222][ T31] ksys_write+0x145/0x250 [ 350.245560][ T31] ? __pfx_ksys_write+0x10/0x10 [ 350.250609][ T31] ? do_syscall_64+0xbe/0x3b0 [ 350.255293][ T31] do_syscall_64+0xfa/0x3b0 [ 350.259858][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.265081][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.271192][ T31] ? clear_bhb_loop+0x60/0xb0 [ 350.275875][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.281804][ T31] RIP: 0033:0x7efe90f8d940 [ 350.286223][ T31] RSP: 002b:00007fffec4487e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 350.294703][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007efe90f8d940 [ 350.302720][ T31] RDX: 0000000000000002 RSI: 00007fffec4487fa RDI: 00000000000000ca [ 350.310741][ T31] RBP: 00007efe911e67b8 R08: 0000000000000000 R09: 00007efe91d1d6c0 [ 350.318762][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 350.326755][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 350.335598][ T31] [ 350.338705][ T31] INFO: task syz-executor:10049 blocked for more than 145 seconds. [ 350.346636][ T31] Not tainted syzkaller #0 [ 350.351645][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.360477][ T31] task:syz-executor state:D stack:28040 pid:10049 tgid:10049 ppid:1 task_flags:0x400040 flags:0x00004000 [ 350.372513][ T31] Call Trace: [ 350.375791][ T31] [ 350.378755][ T31] __schedule+0x1798/0x4cc0 [ 350.383275][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.388206][ T31] ? __lock_acquire+0xab9/0xd20 [ 350.393112][ T31] ? __pfx___schedule+0x10/0x10 [ 350.398028][ T31] ? schedule+0x91/0x360 [ 350.402280][ T31] schedule+0x165/0x360 [ 350.406441][ T31] schedule_preempt_disabled+0x13/0x30 [ 350.412082][ T31] __mutex_lock+0x7e6/0x1350 [ 350.416865][ T31] ? __mutex_lock+0x5bb/0x1350 [ 350.421839][ T31] ? rfkill_register+0x37/0x8e0 [ 350.426801][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 350.432051][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 350.437354][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 350.442782][ T31] ? device_initialize+0x24b/0x440 [ 350.447973][ T31] rfkill_register+0x37/0x8e0 [ 350.452703][ T31] hci_register_dev+0x3f5/0x890 [ 350.457602][ T31] vhci_create_device+0x39c/0x650 [ 350.462705][ T31] vhci_write+0x3ce/0x4a0 [ 350.467070][ T31] vfs_write+0x5c9/0xb30 [ 350.471493][ T31] ? __pfx_vhci_write+0x10/0x10 [ 350.476354][ T31] ? __pfx_vfs_write+0x10/0x10 [ 350.481186][ T31] ? count_memcg_event_mm+0x21/0x260 [ 350.486484][ T31] ksys_write+0x145/0x250 [ 350.490874][ T31] ? __pfx_ksys_write+0x10/0x10 [ 350.495736][ T31] ? do_syscall_64+0xbe/0x3b0 [ 350.500478][ T31] do_syscall_64+0xfa/0x3b0 [ 350.504986][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.510269][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.516374][ T31] ? clear_bhb_loop+0x60/0xb0 [ 350.521113][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.527031][ T31] RIP: 0033:0x7f296178d940 [ 350.531526][ T31] RSP: 002b:00007ffcd7091508 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 350.540005][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f296178d940 [ 350.548065][ T31] RDX: 0000000000000002 RSI: 00007ffcd709151a RDI: 00000000000000ca [ 350.556061][ T31] RBP: 00007f29619e67b8 R08: 0000000000000000 R09: 00007f296251d6c0 [ 350.564073][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 350.572101][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 350.580345][ T31] [ 350.583429][ T31] [ 350.583429][ T31] Showing all locks held in the system: [ 350.591648][ T31] 3 locks held by kworker/0:1/10: [ 350.596695][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 350.608071][ T31] #1: ffffc900000f7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 350.621650][ T31] #2: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 350.633088][ T31] 1 lock held by khungtaskd/31: [ 350.638056][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 350.647983][ T31] 2 locks held by getty/5622: [ 350.652655][ T31] #0: ffff88814dc420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 350.662493][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 350.672858][ T31] 2 locks held by syz.2.963/9782: [ 350.677950][ T31] #0: ffff888024e63100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 350.687752][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 350.697995][ T31] 2 locks held by syz.4.966/9799: [ 350.703029][ T31] #0: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 350.713175][ T31] #1: ffff888024e63100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 350.723034][ T31] 2 locks held by syz.0.1030/10026: [ 350.728372][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 350.736580][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 350.745660][ T31] 2 locks held by syz.0.1030/10029: [ 350.750922][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 350.759168][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 350.768229][ T31] 3 locks held by syz.3.1032/10025: [ 350.773447][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 350.781730][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 350.790777][ T31] #2: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 350.800736][ T31] 2 locks held by syz.1.1035/10041: [ 350.805932][ T31] #0: ffffffff8f59fc50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 350.814164][ T31] #1: ffffffff8f59fa68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 350.823215][ T31] 2 locks held by syz-executor/10048: [ 350.828683][ T31] #0: ffff88803002b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 350.838783][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 350.848762][ T31] 2 locks held by syz-executor/10049: [ 350.854132][ T31] #0: ffff8880569b0918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 350.864204][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 350.874951][ T31] 2 locks held by syz-executor/10053: [ 350.880382][ T31] #0: ffff88801feb6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 350.890517][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 350.900559][ T31] 2 locks held by syz-executor/10054: [ 350.905945][ T31] #0: ffff888026831918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 350.916095][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 350.926107][ T31] 2 locks held by syz-executor/10055: [ 350.931518][ T31] #0: ffff888054df6918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 350.941783][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 350.951802][ T31] 2 locks held by syz-executor/10058: [ 350.957169][ T31] #0: ffff888054d1c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 350.967269][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 350.977385][ T31] 2 locks held by syz-executor/10059: [ 350.982800][ T31] #0: ffff8880212b9118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 350.992862][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 351.002835][ T31] 2 locks held by syz-executor/10063: [ 351.008238][ T31] #0: ffff888028269118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 351.018295][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 351.028257][ T31] 2 locks held by syz-executor/10064: [ 351.033631][ T31] #0: ffff8880320b7118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 351.043753][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 351.054197][ T31] 2 locks held by syz-executor/10065: [ 351.059648][ T31] #0: ffff88803344a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 351.069723][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 351.079686][ T31] 2 locks held by syz-executor/10068: [ 351.085050][ T31] #0: ffff88807659e118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 351.095092][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 351.105052][ T31] 2 locks held by syz-executor/10069: [ 351.110458][ T31] #0: ffff88802ad2c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 351.120554][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 351.130593][ T31] 2 locks held by syz-executor/10073: [ 351.135978][ T31] #0: ffff88807ebb6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 351.146024][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 351.155999][ T31] 2 locks held by syz-executor/10074: [ 351.161419][ T31] #0: ffff888076756918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 351.171541][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 351.181549][ T31] 2 locks held by syz-executor/10075: [ 351.186918][ T31] #0: ffff888076752118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 351.196985][ T31] #1: ffffffff8f809248 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 351.206966][ T31] [ 351.210088][ T31] ============================================= [ 351.210088][ T31] [ 351.218574][ T31] NMI backtrace for cpu 0 [ 351.218589][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 351.218611][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.218621][ T31] Call Trace: [ 351.218627][ T31] [ 351.218635][ T31] dump_stack_lvl+0x189/0x250 [ 351.218658][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.218674][ T31] ? __pfx__printk+0x10/0x10 [ 351.218703][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 351.218726][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 351.218748][ T31] ? __pfx__printk+0x10/0x10 [ 351.218771][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 351.218795][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 351.218818][ T31] watchdog+0xf93/0xfe0 [ 351.218842][ T31] ? watchdog+0x1de/0xfe0 [ 351.218865][ T31] kthread+0x70e/0x8a0 [ 351.218885][ T31] ? __pfx_watchdog+0x10/0x10 [ 351.218903][ T31] ? __pfx_kthread+0x10/0x10 [ 351.218922][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.218944][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.218965][ T31] ? __pfx_kthread+0x10/0x10 [ 351.218983][ T31] ret_from_fork+0x439/0x7d0 [ 351.218998][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.219017][ T31] ? __switch_to_asm+0x39/0x70 [ 351.219034][ T31] ? __switch_to_asm+0x33/0x70 [ 351.219050][ T31] ? __pfx_kthread+0x10/0x10 [ 351.219068][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.219098][ T31] [ 351.219104][ T31] Sending NMI from CPU 0 to CPUs 1: [ 351.364180][ C1] NMI backtrace for cpu 1 [ 351.364198][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 351.364217][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.364227][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 351.364259][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 49 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 351.364275][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 351.364290][ C1] RAX: c8869da418e36f00 RBX: ffffffff819683f8 RCX: c8869da418e36f00 [ 351.364304][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b06ab RDI: ffffffff8be33f00 [ 351.364316][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 351.364329][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa2ee30 [ 351.364342][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 351.364353][ C1] FS: 0000000000000000(0000) GS:ffff888125d3d000(0000) knlGS:0000000000000000 [ 351.364367][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.364379][ C1] CR2: 000055db74e46000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 351.364395][ C1] Call Trace: [ 351.364401][ C1] [ 351.364407][ C1] default_idle+0x13/0x20 [ 351.364425][ C1] default_idle_call+0x74/0xb0 [ 351.364445][ C1] do_idle+0x1e8/0x510 [ 351.364474][ C1] ? __pfx_do_idle+0x10/0x10 [ 351.364498][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.364533][ C1] cpu_startup_entry+0x44/0x60 [ 351.364558][ C1] start_secondary+0x101/0x110 [ 351.364582][ C1] common_startup_64+0x13e/0x147 [ 351.364611][ C1] [ 351.367892][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 351.367928][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 351.367955][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.367971][ T31] Call Trace: [ 351.367981][ T31] [ 351.367992][ T31] dump_stack_lvl+0x99/0x250 [ 351.368024][ T31] ? __asan_memcpy+0x40/0x70 [ 351.368051][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.368079][ T31] ? __pfx__printk+0x10/0x10 [ 351.368125][ T31] vpanic+0x281/0x750 [ 351.368154][ T31] ? __pfx_vpanic+0x10/0x10 [ 351.368180][ T31] ? preempt_schedule+0xae/0xc0 [ 351.368218][ T31] ? preempt_schedule_common+0x83/0xd0 [ 351.368261][ T31] panic+0xb9/0xc0 [ 351.368286][ T31] ? __pfx_panic+0x10/0x10 [ 351.368313][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 351.368356][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 351.368392][ T31] watchdog+0xfd2/0xfe0 [ 351.368429][ T31] ? watchdog+0x1de/0xfe0 [ 351.368467][ T31] kthread+0x70e/0x8a0 [ 351.368500][ T31] ? __pfx_watchdog+0x10/0x10 [ 351.368529][ T31] ? __pfx_kthread+0x10/0x10 [ 351.368560][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.368594][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.368627][ T31] ? __pfx_kthread+0x10/0x10 [ 351.368656][ T31] ret_from_fork+0x439/0x7d0 [ 351.368682][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.368712][ T31] ? __switch_to_asm+0x39/0x70 [ 351.368739][ T31] ? __switch_to_asm+0x33/0x70 [ 351.368766][ T31] ? __pfx_kthread+0x10/0x10 [ 351.368797][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.368845][ T31] [ 351.689979][ T31] Kernel Offset: disabled [ 351.694303][ T31] Rebooting in 86400 seconds..