last executing test programs: 26.14110897s ago: executing program 0 (id=2015): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syzkaller1\x00', &(0x7f0000000640)=@ethtool_coalesce={0xf, 0x5, 0x1, 0xc000, 0x1, 0x10, 0xff, 0xf, 0xe9, 0x99d, 0xea, 0x100, 0x7fff, 0x9, 0x10001, 0x2, 0xdb39, 0x2, 0x7, 0xfff, 0xc76, 0x2, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x1, 0x0) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x16b, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)={0x1, 0x1, [0x825, 0x468, 0x8b2, 0xcb5]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001800110101000000000000000a000000fe0200080000000008f45d6deec70017"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x2400, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b040000000000000000020000007400bacaade070be6f0480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470581f00000900010073797a30000000000900020073797a3200000000140000001100200000000000000000000a00000a"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20001000180c200000008004500001c00000000001190780800001cac1414aa00e117c100089078"], 0x0) close(r8) socket(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000033000103870c3073c733e22a06000000"], 0x14}, 0x1, 0x8000000000000, 0x0, 0x10008090}, 0x8004) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x2a) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 19.965251377s ago: executing program 1 (id=2027): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r3, 0x5, 0x7}, 0x8) (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x1) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0xffffffff}, &(0x7f00000001c0)=0xc) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @private=0xa010102, 0x0, 0x0, 'lblc\x00', 0x2d, 0xff, 0x26}, 0x2c) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000540)) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010005000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020100d4bd020073797a3100fff10008000a40fffffffc400000000c0a010100000000000001000a000006090002008a797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000a16d5a16b1d41a25c1d34b306716809218343d1aee65f2daf8ea445ed5edff2a880409024c3ae8a857cfbb94ccd05a91bc784b396d9c06321fb6dde263d54336e73c085d46bfe1afdd58814dccaad4e6d842aeade9fd14d898056fa1ecedc327d7bcdf00"/268], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCGUNIT(r8, 0x80047456, &(0x7f0000000080)) (async) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) recvfrom(r7, 0x0, 0x0, 0x40002062, 0x0, 0x0) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000440)="4ff3b4027d9831a31a7e3cb48faa0b7d85645a917dba751417ce12a9e15e4cf5f41ee547e9b442356ebcc1a4392d7eeeef835aca8d7c12cf77f1f72a66aeda7b722c3f284f370076ecd547fb0b261ea75cb5cdd7a1307f8148eb13c5f35fcf8f2ec36c7818ac7c5329d0c713cbde5b4afb48a78971fbbc0d83e005f95ebbc6a2940647fbff9d959a8aae305e5e44bcffcc2d0baabdacb50aa4a74ad5c611eb92f97869aca8cdd6c3d1a73709e15d9fa6e7a0bf96e7448cd75c9937b643cc03248d41", 0xc2, 0x20008000, &(0x7f0000000280)={0xa, 0x4e21, 0xbc0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x1}, 0x1c) sendmsg$NFT_BATCH(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e65766530000000000000000000140001"], 0x104}}, 0x0) 19.8842458s ago: executing program 0 (id=2029): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea00403c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000c910fe8000000000000000000000000000aac9e8fc0100000000000000000000780200000100"/122], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)=r0}, 0x20) write$cgroup_int(r1, &(0x7f0000000200)=0x9, 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'cpuacct'}, {0x0, 'rdma'}, {0x2b, 'rdma'}, {0x2b, 'rdma'}]}, 0x1b) sendfile(r1, r0, 0x0, 0xbdc4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000480)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)={0x124, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xf8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe510}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4884d}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'geneve0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x38, r8, 0x105, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="8c61d2"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xc, 0xfac07, 0xfac0a, 0xfac10]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4000d080) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r6, 0x40047211, &(0x7f0000000440)=0x10) getsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000380)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112da000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f00000003c0)={@empty, @local, @local}, &(0x7f0000000400)=0xc) r10 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80000) socket$can_raw(0x1d, 0x3, 0x1) 19.405354768s ago: executing program 4 (id=2031): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_rm_leaf\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)={0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 19.052701224s ago: executing program 1 (id=2032): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x16e, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) 19.052490644s ago: executing program 4 (id=2033): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r3, 0x26}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 18.61705869s ago: executing program 4 (id=2037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000080cb020101000003080000b000"/37], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "35c822a7a627c2df", "bc92c71519bea43a410950b6b5f3e9eb", "e8d27689", "679fb25b0fca645a"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, '\x00', "a9278f3ab260114cd25785b88d07ca2cd6c41c0be6e971d93fb4aceeb61f4159", "4e892c6f", "ddd659814d8a24be"}, 0x38) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='T'], 0x8) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="59cf0000000000000000080001800800050004000000060001"], 0x28}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x44081) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) close(0x3) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r9}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0001000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000d8001680380001800c00040058000000ac77000028000100010000000180c200000200000000000000000000000000000000000000000000000000000400018014000180100006000500000008000000fbffffff480001800c00070003000000ff7f00000c00090000000020000800000c00070000000000020200000c0005000e000000f9ffffff14000b00000000880000000006000000000000003c00018028000100ff7f0000aaaaaaaaaaaa00000000000000000000000000000000000000000000000006001000020007000000ba0200000010000008000a00", @ANYRES32=r9, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 18.498988163s ago: executing program 0 (id=2038): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x0, 0x0) 18.300112203s ago: executing program 2 (id=2040): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000600)="8dd3e3429e70bf4cae1adb98f566cedbaebe41a4d1c8b63ae82e98d8948898d123b3754a567f9ff5c7548a0e7aa9cdcda635a8f7e6b8d3864ed4d0ce1a58e4496d3dc117b4f6f20c3d6033b8dd861b65655d4c182c2e1d1045503680fdccabfdea37285ebe6e3bc50083350a91ce8f9864f9922263f910b9f52a86435b9dd1bf95895a5d5315e7226ede3f29e44baf323e2a6acdfffa1ff3dbf25b845b170ac87c5e8ba2edf6b9624775cc9d6600f1b7b85d636cb8d73f6fe9b774175c39f745d9e1c0dd2043d9b6555eeaf60d2d82762eb7d58b103645a1c0887d6b25aafa64101e85629cfe1e0c5b90453665d5ae39896a9770f10a2592789b955a49d9080307a06abc489292a89ac5552643517a1d146081269f8963cfecc61a7ad45620762c2c57500b14f7b0cdb45173f13aa8927c8d97ad2a750001b9076640f32ef4a6278b832de7341f125a1f0ce8e4e2a5d251a22075c6ceb453fdf007caf13af9e2a01419ecd7589e8d41fd182abfbb8ee1c383ed752fa3e2b19edb1be77d97cb8e1b864aaabfd6d4b5ee8d39108f61b00874a7e745e8999a6c429750763e47e0479c1068a51ec190805b189bf68a1d819e6095f5901cccaa53360e0fcd2fbacb99780c5582ecd135831ea0ff4ecf3d2e2e7d27b445f2e2e257bc48208c8858e8d1a1da81a4064e70e31a6751eda116cb3fa4300c5ec8687e54b2febd0e31bd0c275102d4724f7f06104b7f970d652226eb3361c47d9cd622df6c980d608b6766e563a5c241d6ef84830037a0077cde9f85efbfca895f303f75d296cedb78734a1efe406009a34ad24efcc21c34c6552c6a94e7354b7b4627a316650db74b08fa32a534e5bee6861b626ed989fd30c016a8a0e2b9eab48e9286bbd9d6adb3588cb29539cd44f5cf98aa0629e996904b6472c4c37d3062935c228abf5c546874aa1e4535be9c3bdaa5d7cc754f2dfd59ad46a4e82895d43bd2d6d1919998c3351b6cd588f3b3ff5891aad66b18a09cbf5330930a2fb87cfc8b2baea5e35aeca1fdc3b8d785075bd9055135fc7204d8378b26fb0ca7819f25424cd575ecac04acde479e30d2f95581cbc5c97f9c240e2275c584b56f8d4a8eeef0c8bf96f4465d6800cdf33fe5c0758c783d568e1b8e0ddd959c3931d2781b91450c7da2c5b17642afa3742267877d3c9b0618cc34b127add48995b05214c9dd4ae9921d660dcf59340afea37ddd0eefc1696c8b5008c6260f93265a84484955082988535d53513642d4f832c5ffac3e603b0d4dc8e75bea093f2ce7f7b9f5d151b26d69ddc585f18bfd47f0656582a5b74197a740370d47fcc165ab856aef2ea3c8d33f4168f73b4e5bbdd5ffee72c813d4e9bb58545217dfefc3fe2357e1092f85f2529637674e6eb6ddb5ee8f50b27ab9e8b573bc9da9716a9f1c6da1f64547e88672b04cb97f273664b2c5422fa69d64706b76ca854a3fdd93c1efc6ffd501d3d84dcbdfdabcedd1d9385b5e80120d90c70e6631748ce527813931c8a3cc49c05ee3177377de7f6f1edd3721e8feabac5d6b44dc7db6e7dfb0d3ebd005d1ee99c326fdf2bd4efed75e0800d11bda28c9819f838834bb8d95ce7c3f5300ed5b5a76cd17b86fab89b555683074cccd5540c990d03bf2d625029f8192f53e2211f60ae8c63b327ae84a9f368b428c44ce14cea13033f1ef867332936bab8d25bc1c4f4ef3493240ec31a624910b86529c7c51d070017e9fdc3015a88a8e80f984edaa976fb0e104ac18bd07f3f3ef8b10586e88e2e19cda1232340e1882eb733c39153c1ee767bbefa6293b584747ce12bd38b47009f9ff23105ffa86001406782efe092face5f120c7d147c04857a9ac6cec79e98b320a4ff80092b558eaabc0b27422fb082e3845bdac88940acdf402463262bc4ffe9dda8b179f7c5d6435d420990a6ff0bbc45417b2aa286d9bca9b6e35e8351f6782d3b446eb528ec00ba2e86075e6e0f0348881d4b43cb4e0782bb2e9925c24950448c2e628e04c0511dad3e38e41467da27a9a2407091032da282ac23e99ede906047efaf14a5520d72e603134aeff8c25f98416b0707a9a4e8e28a8a056b96f41d3138b2a6cdb608e7b25d0ae24c138c074d463daa736cce034913a727ecb9bea43d900b5c1e9c4413d7dc24c4d68d328d75a2299749b28a2b5d3e155742b2e637c5552aea64875ea96e5fd7a1c6745485be1e55fe8f9c928da62ea565e81c3c4e1e3c5f49ea151872e9ebf82b151d9a1c02daeef22050a6464a968e7de98b19fa3e5da1a2a8a5015dd89b8e3af75ce25d43f3ddce2ac030199458c0fd4f53bfaa1e8d9a27027429c9e74bb01c70fdb5554adeca24ad2a1cd9c6af7c7a75b6dd65b09ba057cdf812a3989960005d303147467a01d49c94bb1be373e286abffd64822a6d0fd70fe22173ec50c031573ce7dd6387fac2652f49a0af00b4bde2ba1abbc80055047167f6a905f6bf58c565f8f6297bbc9f38a9b5ce45b5a0ea17975ec21355f5d0e659ded73e7a00aeb0458434e30f8bf84d2d93550c1ef27f3f57599b0aed8e4401c0e4bf0421d49fa66b1b942279e4b92c9b1267e8b56d7c9a06217870896fed69f24e1684f959073f8570dc9eebb9e88e2d61e09d26a2644d2becd3f53cc7710d79479d79e686cf4653a146cc213262725862d2163d29eda874f1363339c4ddf7b27c30984ebbbcb9e75cc1732f99eac8d1ee098aeda58cfa1a2b4e5540a1fa347e6280108df3cfd593b39308924f104ad384706cec524f0370dea08b071c7badfe1fd15742ad192683517c34d4957c72d97d8fa9d486e099da0f9c244fda898370d2320125e695ae17429b907c3d0ae4ea92a9929752e4edcaadbbdd515b09a44a8388b1d4f7e667b912f8e71a5f0503c081089a7d14ee97b64a022fd55ae018245cf38640cdf10c6550deb1ba5e09df504e0d68a4788e0ee83f2e204de5c019bb17383797da2eb45b7af6db4b30a6b94a26df51f77724a22ac94add53aca3adcf6bdfa2ea740a37750346f68eb06299b02e1a7fcf5ab2fea9d0f6997bc87bd85cef48cf90599032f1cfd31b9222bda7208cde1aeeac3d7f7dc8408768ce3b3c50008cc80d9ff7659bdb58fd4562a70498e20be8f86c8b817536986d23bcda615fb10d294f9bc71d29451ddd68eac87eaf98645e6716a35420253955d745bdbf0f78f24baa9c95bcef2fbd88c699ac2a500d3c29c8cc420384734b5696f81d8c0f231c3f929d25e7023e155bfb9b24545609bbc7d93fb6e3cc3b3c65f6f16ee825336e585aae6b2a7f94ad8a2a98bf1062c50bf43bfeb0ac262119df07bed070d6f9540327fc3ef307df68aaddec1e69cf895cedd781f1c6121e8e4cd11c17ff9821645951a6286a265fad5a694bfad1402477fe9569b46191110e3485d3b1227e70333c546e011d193ef26f7d34f416ebc4d7fe3d0cf4975469405c8b808bb0f53610d774f5ecc2f05a662b41505c689e319eb36a72ed23526fd094c4b670204b365cf16fc7b2df22bb03b9a0852e32c331c74a523c443c0f607957a246e17afadf30b21924cf8ab1e29869eec10e8ead1902e0f03796afe73d84fd2ac0ce2b8dd11dca1c98a2d6b6187cdda6a743f1107f900892e2a196c6a2ca1c78764923732761fd75f2653a35497011fb73644866b5dd43de3b47463a1bb8fc64b31b30e294c730dbd0acc7eec2b1951d12a3ba037f8ceb550bea08a1c2bcb905e69169ec583b31e4bee9abd80b05a9abd71fd781a0bbe16d403ddfb4298e82b449641f2d34abb8cc867519b270c3c8938eb302718bd8d8b4e27de95d485f3f553d4eb02d23fb6ed86cc04f124a458b8d3139d5d6d587084f9998168c3a37bad8e5fe2cd47dd4882874a9632699665e452750204f66b52c4c21c65caf18547f811c5e8b220b0157a3e36f350ce37b0c795fed0107d9fa1e5f56a34d53f16900382afe5f8e3ae1107fe79d318b403bc960d1c5670d98ba1636a819170d4e869f9a8008a2a21da8dfa35900cadbe380320640f5f8bbd785c9141847855f6f9e4757b83274c0580087df74f73675f7a47f9611de6b3d1fbd8ffd1dd4313a3a19488e3a9eb3de20bf1f897bf3ed47b71eb8542a3ae773a81f15709ba2b6e61570fc9b19bf450beff91690d96abd7362b3b81a735ac6e53928e6b67c329c3bcb4fca8763ff89fcc68f00d5f2d684c9c5f23c2c73a61e398a10d3f0ca32d36da19617a7a430d2f73b2fd9ae7703be753994a006d3b63f504c7c69f1dcd63b7434cdeb32f74acf9182a20a9b4d3fe09ba188d2b37632494ff9093e64977bc49f4c40078c050fe33818b06e144c1994a8ba1dab5195939c902ced4c826c0aefa15bd5ff80d0f2119e6a8a29dee8873bd210082725c8b3cbd36968fb1ce895102b543b2278e8bbf0d8eb8a9fede4a3f867f8d98d096547e08dc338f0bf7524df74f9f5cf40643c6b3d5be9da279ff38a4ab617bfefd12bae326f2851012a11b99011d4962e9e4dae0fd4a69408d5d5d7ff57276c6fff6125fae832d851d820a5d92c5e176c35a33c5aac6904b76344215fec616cdc2b1e030988b2e50cbffb7847867ef823bddd937775bbf591d9750bdf734a42efc77cb172b31d9d19ec56b8e704bb49ea6af2e373fb0448ef67f688ab37fd617ae5f9bc5a695b57ec18379c28fae1dd0f0226606c4b68e2aa25e78e0ee5d7cd38c6dae6b8bf200008ac62a6cfdf74f5904fc1671a64b515c12ccf318807ba1a27d0f142785396d64ba4453753278f8a438354d5d7d5c10cdf8b1da2f3a660b48266e9c3c9d20aeaf69131f6ead1f911b808c4d61a6fd3b8d85ca7af1fafc355a006cc4a04f7711f8341b600d9d056b140f773cdccdb4eccaa01f5ec9d1144dad723970886959ebaad505b35479e9f7e24a273227efa70124d490e959d7dacf4284aa1e15c183c67218b957f5b7835efa77adefd23c8a73b60ffad432f663ed3225ea4503c968a2b90338f5c214f6fe55bae0c87a16cc9ae7684a9ca1a9bbdd5bc4531d81c9ce2bbc522033154fb0285c57a6ff582ea69304ac39d01611b370e51b62160eb7d1e58acddf8552fa5fc7f726998d222e799ce770b6bd8df64807ac9468e12b396cda6f29767446655f3ec12719f82c51b5e32248b84e0d9dcfa430076cda3cfe11325a45a4fbdee33aeedb9924922db7a411e361025d9b0077c4aa64ba4550308bb5624e24b480bf5af432593186ab48e214f080b7c8911e1f87c7af3c3473734d76bb440122041d834bcc393136ff410348b9e5048c22e202ca8e46c8201e5b6eb2f877228838f924cec5964b6de3c45f364061515df36733824c1d229116c4c19a96571b93d5503fd6d72700cb425e22b9301660b8fb348bcdfe5bdd40670d4451b86962982f778b2290b60818b8486a0991f0944631eb567deb0e37e787e34cf76ef463ce587e0135acb2e4a98d6a672b03221e9d7c87ae7ec47ee1b0a853f84b2bacec453dc9bad6be5bc2a020eb8debd0de820137b63b76ed20b2dfaec20724a4a5b27addabbb90a4627d73aef37c3be4a8be85ea2c600e6b3947902e1fb7a49cb99b6f5b925fd0c9a68b3bfb9b81e7c82f413d350c510d61416d690be4b656df44d42d0b1a16c3b00cec99b1df941b6f7d2e305c6a28db622ac56dd42fefb2b1dd04733942732e4b0a8429d70b96ec38b2f22483252e7edf225afbbd6ae6576a5bd15efb08c24781c35a0f5ecbb19c4aa5a5e574f99ded59009789249c39dd9e35d9b522d52c6e08159e05201e0e69264942cc600a36d", 0x1000}, {&(0x7f0000000380)="41dda3c0eec225b4889fdc53a50f598fe1a140256f2f759d896c4bc6b435b8707e872f60d203e3c27d0a27375f439a5376bd774fedfb366499deee997169b01694479ff074a3e0111a740e7de87ce94101b0e55650bc0ee75d89c811c90ac06788c2b70d906f9b43e018049f4673504b669be97acaf2553671955939a0c653287a6755865e1014ea38792944b22248b4999bab1c7d8af8782d1bacabe56db1cd71987c311ee510478fd13875", 0xac}, {&(0x7f0000000200)="6ccf3257841d313b43aaf83a1071d82f55fd45a62b1093a5d7782d3de2960d810a90644af7fd6d81214727d0a8089e6cdf7dd82ac426ce05bc7aa0308355a168a4786ca37e4f3b2a", 0x48}, {&(0x7f0000000440)="7359fbaa4c045ac609ec106d048c18bb594d90c6402b8b7e239724f4d73b94bf12147867e182a04dee5aced4a12fdbdf70483326a5c424a36a5bf4d469ef513153e31645016f5ae691bc6a749260e79057a1c37cca32a119ce408a93ad2475382a765c995f67b980e4b4cc40034acde46adb6b94380b005e6929bdc291851ba992ec8b8d626c56ecdb6e2d85c019894d3106a585827e2b891f34446cf934feb4dde0b2842e76af85bb1d67c8e6202608d665b52b94880760d040ef6971f9a63298395b43dcc16eb02d", 0xc9}, {&(0x7f0000001600)="caf238631e371d0b41e314b7fdc4a89288b9aac8f34eb8aa24579b4eafaf64f1bbc4f2f8c83de4086d357b9ad16b7a1da0e8c24143bd39784ebf81ba6b9ea96c0c725fb4f1a53eac538fa2ca7f78af9b9d26d44a0e413b83ecefe6612c890dcab2ed2a444b378d949c82788d09071e792e00872a784e1dc42f1e576d670734d73105427f8419c4989ee1c25cc6774ece08be27e834c47d37290b0f45d9bc02af4836c4518cd085b5284109f9a554e442dd8cb618aa1e112405b7922fbf3c2ca1840e9043e0f23026e1d829cd3bc96964e959f878e7a270559b16c6ca7993d8247e13a90c32c55c9b", 0xe8}, {&(0x7f0000000040)="94dc0bda76b043a9ee19a07076931c4bbe6e60b08bad5111aad1deacac8e435d582bf8c4231f", 0x26}, {&(0x7f0000001700)="9dbefd7134bc4a6a3e5cd5bc7dc133d40da570005ebef3466b2d3a5c6ae9e09fa4aeaa96d6decdf8cbf0518a6530b9fab6d20582e41df2d93e88d0e5afb66a99c4627e6e0251d448f6900c55731553122ca44ebd8e7c5330592af78fecf914fbed54d6f9741a5aa3512fd52336a9a0b7adcef08668a88bfaebb6425e0351ceb5d97fc4119df8a7cc48d6e5535b20798036c4", 0x92}], 0x7, &(0x7f00000000c0)=[{0x10, 0x11, 0x40}], 0x10}, 0x84) (async) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="beba8aa53dfcc4d1ea4f19aa1e3b873d2f940b04278559f34cd3838e5fbc027fb00b49a84cddc07d2714ca8534a882937bb4e82c234110c8faa4965d6c0e18e42f38c6587d853ca98abb99424380f06045699f82c8cef17b7511b4bf2a9f770e44ae64d2f6207d91f1b70559da3e1fde3f9e38bb59c2830b6252341216e14453e9b05698ff72ee5786f9ce1fab0c719bd7e71988d1e26ebf511709d20d9f23940f1dde4760e54f731529cb03e0bd1cb254def1dd38d15d432fefb52b0fcb4d760bf8eae375e7473f46ea62f69995224fd06305bf5b172c18a13fc32744f872827a306b88c1724877ad4915b6", @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x8) sendmsg$DEVLINK_CMD_RATE_SET(r3, 0xffffffffffffffff, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000b0000400000011907800000000000000004e2117c1009c907801000000fdffffff717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d40838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c72097b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd388537719eecd7b1f5591c287cd8bdc5cb100010000000000000081b5b6ae81bd7bad"], 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.253874683s ago: executing program 0 (id=2041): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES16=0x0], 0x0}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000001000"], 0x48) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc0000001000010400000000000000000a01010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000002b000000ac1e01010000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000002abd7000000000000200000000000000000000000c0008000800080000070000"], 0xfc}}, 0x4000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75e6803e10951cd4b347113e2abd2fd714920ec542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328deb441031348589b763d46d14810acc5f700"}, 0xd8) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) bind$ax25(r4, &(0x7f0000000540)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) sendto$ax25(r4, 0x0, 0x0, 0x40, 0x0, 0x0) 17.947705114s ago: executing program 3 (id=2042): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x4b00, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x4000804) 17.946275729s ago: executing program 1 (id=2043): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x4000, {0x7, 0x0, 0x0, r1, 0x80, 0xbb}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0) 17.781819486s ago: executing program 2 (id=2044): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xc5, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) sendfile(r7, r6, 0x0, 0xf03a0005) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0x1, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r9, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FLOW={0x0, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0xffff0000, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x14, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8a}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @generic={0x0, 0x5, 0x4, 0x5, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xff, 0x82, &(0x7f0000000180)=""/130, 0x41100, 0x42, '\x00', r2, @netfilter, r3, 0x8, &(0x7f00000002c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r5, r7, 0x1, &(0x7f0000000680)=[r11], &(0x7f0000000700)=[{0x4, 0x3, 0x2}], 0x10, 0x8}, 0x94) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r12, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000004740)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/91, 0x5b}], 0x3}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x2}, 0x8}], 0x3, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 17.772660674s ago: executing program 4 (id=2045): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x24004010) 17.682922741s ago: executing program 0 (id=2046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000008a00)=@newtaction={0x2d0, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2bc, 0x1, [@m_xt={0x1e8, 0xa, 0x0, 0x0, {{0x7}, {0x188, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x4d, 0x6, {0xb, 'security\x00', 0xfb, 0xf, "db32b67415a858318ca81432b4dc5d5526738147f0b08da046db93b204b3955fb990fa"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x71, 0x6, {0x2fe, 'nat\x00', 0x7, 0x1000, "32191f502c659f78524cedcb63159b9970fd761bd5a7356aa2eb78ed001acbeda2a4ab5dcdfec02de0d97abc573bd4b191e9b7921f6809db7b16573ea41532a0e55cf2f1240cf2"}}, @TCA_IPT_TARG={0x95, 0x6, {0x8001, 'nat\x00', 0xe, 0x1000, "5b17aa89d80870c15066789ffc3b484ddb037d507299171c05cbd077a4e3492a17ecb2370233755138b3858be560a8a0cb8e4bee920720c0d5e6d1fe7c870c1e2793e60016110210e803f409c55aaa647ce7884c4be946c031bdec6333ecd98218bc11cfd095bbcc904983"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}]}, {0x39, 0x6, "60d8256d6e17304151fd4e116cd17e9a9916f46a1108fe35c2253eb9e0a39371696c312986c3e3f087692e934a942246981749736d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xa0, 0x34, 0x0, 0x0, {{0x9}, {0x4}, {0x72, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f7382"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10041, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4094, 0xffe}, {&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/185, 0xb9}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r5 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x8001}]}}]}, 0x3c}}, 0x24000041) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'caif0\x00', 0x100}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r10, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 17.518366145s ago: executing program 3 (id=2047): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x106}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x8}, {{0x0, 0x0, 0x0}, 0x7ffd}, {{0x0, 0x0, 0x0}, 0x3ffffffd}], 0x4, 0x40006082, 0x0) 17.518171425s ago: executing program 4 (id=2048): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003b0c0000000000000000009df62aee5841997f958c624d1edf918309c5b115ebffe4", @ANYRES32=0x0, @ANYBLOB="00000000a8880000200012800b00010065727370616e0000100002800400120006000e0000000000"], 0x40}}, 0x0) 17.446394936s ago: executing program 2 (id=2049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000240)={0x2, @long}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x20040000, 0x0, 0x2, 0x10004000, 0x5, 0x400}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a40)={0x1b0c, r3, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x42}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x4}, @NL80211_ATTR_CSA_IES={0x1aac, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x800, 0x1, 0x7, 0xb11, 0x8, 0x80, 0x4d]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0xfff, 0x4, 0x2, 0xc78, 0x8, 0x5, 0xff, 0x4, 0xf, 0x9]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x1d8, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x23e, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xb}, @device_b, @device_b, @initial, {0x6, 0x5}}, 0x5, @default, 0x7880, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x8a}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x0, 0x6, 0x0, {0x0, 0x9, 0x0, 0x26, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x0, 0x8}}, @void, @void, @void, [{0xdd, 0xfb, "e25ac9539632f80887ccf940f595a6cd2b23eb6e43c5c8afa70da25b956bdc4ab7087504762e633236837c631a301fdeb2cc86abc76ee8ed8b68ae050d461e7aed5f745b897e6bfc107cb75ac410e648978e93179d70c48e01b3a94b9dc67a211cf198c36c60674df68ffe2454f6f97a700e6356ea8ec38e94928b1f311b4c73127c0cdebdbffcd1411f3c2e20f2434f4bf987761c4be0b00a18cdbf123166b76273617d766a000b70dc8711247c8c77b6f555fe3830c3d5f3fe0cf4ef8e6bfc2671d9409552970be6f613a3f18b7b158408408a9a365b4b36826c3530bbfef06e74afa5bf086109944d93d5108a148b002538ad643969f6eaa200"}, {0xdd, 0xa1, "04796d550ab96af34081bab99e8f17b64fef594489da1aed31e43ced6aa3c6ffcd2e969bf124690763f392ddb09047979ceaf2f41c09485fe44d382cef0fa879f78c6af8d07b0daa181ab264fc3d3963893bfde3aac80fbff750aba414b01d1b8542c43f8cd8d4a04d59dd8687ceca7a6bd1efd84629d8b222585016848986505cb5fd7d7e1b06d3976f008c161de70882e0e77d8ba58e0f47baac1145bf4ccdc2"}, {0xdd, 0x38, "ae291583281eea72dd55e0c6cbe063061f23bfe114c177062c35408c1bb96815b130ab8a0dbb345600bd21c187f7bbb585a13b20cae4a944"}, {0xdd, 0xe, "cd7dc4e959d3bd1d3977fffdd1ed"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x115c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7, 0x2, "7ef3b8"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6b, 0x3, "2df87c95c450e19663d91c6915733481ff2d12a007ac70d7c6c94bc4c6a6566882f28a79f1b735c1b84cca0d462d8fb98bb414fd2339a6c6cca6e15d0f7d58cab61d6c96c73640fa08c77f1da4e40a46c4e9b165afaecf9e9d4ff46780e21d39a6c423da65dcbc"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd1, 0x3, "7a9fbaa62e0e818329468aefc022d8af92236305826f405bd91424fa0b5736646b0acf331659c056a14c99da112ad294be7b1b5be7e7d2fcca8c84272f0a50762a812c3a078cc8cc6b9bbf6e18a24ec07531d96d349a74c794436137f10b04e673adb4431dc9be70d0f009fdea8118cb91ff9d1c0878d98dc216ed1209849c173855de4674be85728e7c009dbe79770cd064787b3dc78d81ee7c5515ff9f89445c461ee2427d85d54eeb18f1af0f9fd64aa3ef7ff09c874fac6b7839d05d98579bb6e07c0ef2b0b19e1c6f2bae"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x9, 0x1, 0x54ff, 0x1]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x2e, 0x80, [@chsw_timing={0x68, 0x4, {0x6, 0xfcee}}, @prep={0x83, 0x1f, {{}, 0xc8, 0x3, @device_b, 0x2000, @void, 0x9, 0x74d, @broadcast}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x326, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_b, @from_mac=@broadcast, {0x0, 0xe90}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x80000001, @random=0xe61, 0x6a, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x9, 0x9, 0x7e1f, 0x3}}, @val={0x6, 0x2, 0x3}, @void, @val={0x25, 0x3, {0x0, 0x9, 0x9}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x33, 0xb4, 0x7}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x9f, 0x60}}, @val={0x76, 0x6, {0xd0, 0x1, 0x10, 0x5}}, [{0xdd, 0xc6, "bc8a01320e5a7d5af6ab6a5ec0ee3cff0ef81c58ac343a8983e42b4aa7cdca49d0eb150442f2dcf6f657f1fb096576eb3dfc7d4d5adbe3df1984e24527cd48ba20c6406740842a71a260ab753a3ad7764e5ae65dbd3243409008f4399f35b05fae57836cbe31d4517541e2da05ad4cc3dc5abf8b7a2c6c6c352223654086e949ee01ad199f2f42df17d95139c38700e8f3cb19eb8727030fe09f7b4c8f7b61e078215d481545deb046a0bf4121402c5bb17d06bd66f0372b462074b6edb2bb79dd24184ca401"}, {0xdd, 0x4a, "e24870c9e5fdcdf50cf1247255d338d26b0ac26690eedfcc8ac05ecb4ea9c33f15aa8909e44ec6ab4130f6e24296a6d1c38569b167ff9258eb39193c7f148f62f080e7a253b0666185cd"}, {0xdd, 0xd, "80f7968f8c6425b5893d78cd6f"}, {0xdd, 0x7e, "0f36bf3072e9c811697baa847517ed421e9de48709fa39e9f1c41f63da59df1c0eb5a7bf199b418dabe12a69ace8ff5ec16694410a3532ce5fd682b50f8461192cb2c0de3045d0a39daeffbb9e67e3ec2c621714802a9b9e40522d0db2569d5316812cd7dc0a1c6646e0b77b90065ea9c779ee4b1c4f6f4241b2bcfbb10c"}, {0xdd, 0x15, "3b06ef110f267e75f585472852f0dc900c9a41c5c9"}, {0xdd, 0x2b, "6232e57ba879bedeab0d94e32e6ebc30c79162a3f867a9e39e30460ad66710c76bd1c9aca77cc99478a506"}, {0xdd, 0xde, "16c4932b960920392d50aa2bf8d985c0eef1822727dc6c52cea6bb3a40983d9abb854be4a56a2c2ccbfb8a6794f41fb4236f3943d73979197ceefab311e44140c6050a26b2848a61c4cc6f9acedec7b4f64a756b45bc689185de7d7182d3d2f4e5aadcb0939d3eb40016d85f2c1d0cbcd0bd686b2b9bbb427db8b812ff9fcb246fce6dce9f0ebcb89ca3b096ec29d7129bec6e9a15bfe05abfe322ba090f8a8f128a7e4fab5a0c31803330060e1d03d8642167a6f7e3d18a881a6ad999c0578a47b9900ca3596e3e47b60f44fb28b044d6de244d09b3e683c42e054d7c1b"}]}}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x10d, 0xf, [@supported_rates={0x1, 0x5, [{0xa7da45e5e8e554e8, 0x1}, {0x24}, {0x30}, {0x30, 0x1}, {0x18}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xa1, 0x9d, 0x7}}, @ibss={0x6, 0x2, 0x4}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x6, 0xfffa}}, @ht={0x2d, 0x1a, {0x1, 0x3, 0x2, 0x0, {0xb4f, 0x40, 0x0, 0x8, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x300, 0x200}}, @tim={0x5, 0xab, {0xc3, 0x85, 0x5, "c8a0c7d362e008d5f1e97b1696f20f2dad22785dc8a9c404497380d6a9e1290539293f36daef1fa95e9184454bd153dfe32f4cefaeabe3cff325e91e3b451c27bb886bf977ee7540f953e285dddfeb7097d2af274519cda6b769b834dd446f480e48eb6757ecaa3b158bfc37bd995946d9ebf024764595d2ef109f1ab5b7e8f7b9a94ebce063283078b7fb757c84dcdacffaf52477d80fb4cfe61f4f7c887ad65d003c350781bede"}}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @channel_switch={0x25, 0x3, {0x0, 0x70, 0x6b}}]}, @NL80211_ATTR_BEACON_TAIL={0x26, 0xf, [@challenge={0x10, 0x1, 0x71}, @measure_req={0x26, 0xc, {0x5, 0x56, 0xf1, "8e6e51e266f0d83486"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xe}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x7f, 0xad, 0xda}}, @channel_switch={0x25, 0x3, {0x0, 0x74, 0x7f}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x41, 0x7f, [@tim={0x5, 0x3b, {0x7f, 0x89, 0x4, "0501ae4aaff463f456ecda54d8df572b1b9063174d52943f501ff39fcbcb57b6d2e14e295736c9f33684899f7b7a8e7c1c6d6509ae147aac"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x20, 0x7f, [@ht={0x2d, 0x1a, {0x2000, 0x0, 0x3, 0x0, {0x10, 0xa, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0x5, 0xa}}]}]]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}]]}, 0x1b0c}, 0x1, 0x0, 0x0, 0x40981}, 0x40c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x144, 0x10, 0x713, 0x0, 0x10000, {{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@rand_addr=0x64010100, 0x0, 0x32}, @in=@remote, {}, {}, {0x4, 0x4}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x88}, [@algo_aead={0x4c, 0x12, {{'rfc4106(ccm-aes-ce)\x00'}, 0x0, 0x180}}, @extra_flags={0x8, 0x18, 0x6}]}, 0x144}}, 0x20008001) openat$pidfd(0xffffffffffffff9c, &(0x7f0000004f00), 0x256200, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000000)=0x10000, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x0) 17.424680461s ago: executing program 1 (id=2050): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0x20}}, 0x1c) 17.294418679s ago: executing program 3 (id=2051): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x0, 0x0) 17.091734503s ago: executing program 4 (id=2052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) recvfrom$ax25(r2, &(0x7f0000000100)=""/87, 0x57, 0xeb59d7796265ba1a, &(0x7f00000002c0)={{0x3, @null, 0x4}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_virt_wifi\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0x2, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="4fffb619b45f0877ddd00f05b457a65d54acc046575978fa63c84996f91dfab8f854f66770283b1088bfc185ff58091c43079ec6138ced26654e47f46b51bfd31de4c10572ee0d3e151a33e56aa57e2294f686849277bbba3266a2ec4f4679efde8cf247ef4edee54f85ac023655a75cf5aaa9fc7b3e00a70d007ef1437aaabca2e4a82a093dde658a28be78e5e7668201c2dc09bdf4e2eee54fb4ae974dec1d5579c96a7d4612dacf994e7757204be487b87ffca2c4ec54", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0xe0}], 0x1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 17.033387188s ago: executing program 1 (id=2053): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x11d, 0xf, 0x0, &(0x7f0000000240)) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) 16.977466963s ago: executing program 3 (id=2054): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) 16.836902823s ago: executing program 0 (id=2055): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x2, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 16.830898742s ago: executing program 2 (id=2056): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES16=0x0], 0x0}, 0x94) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc0000001000010400000000000000000a01010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000002b000000ac1e01010000000000000000000000000000000000000000000000000000000000000000000000120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000002abd7000000000000200000000000000000000000c0008000800080000070000"], 0xfc}}, 0x4000) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75e6803e10951cd4b347113e2abd2fd714920ec542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328deb441031348589b763d46d14810acc5f700"}, 0xd8) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) bind$ax25(r4, &(0x7f0000000540)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) sendto$ax25(r4, 0x0, 0x0, 0x40, 0x0, 0x0) 16.542591677s ago: executing program 3 (id=2057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601030000000900000000000000000500010007000000050005000a00000014000300686173683a69702c706f72742c6970000900020073797a32000000001400078008000600000001000800134000000000050004"], 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4000881) 16.450826434s ago: executing program 2 (id=2058): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@bloom_filter={0x1e, 0x0, 0xdc4c, 0x1, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x4}, 0x48) (async) r2 = socket$kcm(0x2, 0x2, 0x73) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ffffffff8500000089000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty=0xe0000001}, 0x10) 16.432251693s ago: executing program 1 (id=2059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000002000010000000000030000000a1080b96fdd9acef87c9def7d00000000001700010014000200fc0200000000000000000000000000001400010020010000000000000000000000000002"], 0x44}}, 0x48000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x3e}}, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x4008000) socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bind$rose(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x8f, 0x7, 0x40, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x20, 0x200000, 0x8}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GRE_FLAGS={0xfffffffffffffc52, 0xd, 0x80000000}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x5c}}, 0x4044) 16.333604456s ago: executing program 3 (id=2060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x7, 0xfffffdfd, 0x200006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.135989981s ago: executing program 2 (id=2061): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="a0000000090601040000000000000000210000000800094000000001500007800c00028008000140ac1414aa0c0019400000000000000001060004404e2000000500030003000000140017006d61637365633000000000000000000008000a400000000808000a40000000400c00078008000940000000090900020073797a31000000000500010007"], 0xa0}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x200, 0x0, 0x1000000, {0x0, 0x0, 0x0, r3, 0x235, 0x2881}, [@IFLA_NET_NS_FD={0x8}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x30}, 0x1, 0xba01, 0x0, 0x4008080}, 0xc0a0) 1.846162101s ago: executing program 32 (id=2052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) recvfrom$ax25(r2, &(0x7f0000000100)=""/87, 0x57, 0xeb59d7796265ba1a, &(0x7f00000002c0)={{0x3, @null, 0x4}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_virt_wifi\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0x2, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xf}, {0xd, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x10001, 0x3, 0x0, 0x7}, 0xf0, 0x1, 0x8, 0x3, 0x88a, 0x9, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="4fffb619b45f0877ddd00f05b457a65d54acc046575978fa63c84996f91dfab8f854f66770283b1088bfc185ff58091c43079ec6138ced26654e47f46b51bfd31de4c10572ee0d3e151a33e56aa57e2294f686849277bbba3266a2ec4f4679efde8cf247ef4edee54f85ac023655a75cf5aaa9fc7b3e00a70d007ef1437aaabca2e4a82a093dde658a28be78e5e7668201c2dc09bdf4e2eee54fb4ae974dec1d5579c96a7d4612dacf994e7757204be487b87ffca2c4ec54", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0xe0}], 0x1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 1.340697975s ago: executing program 33 (id=2055): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x2, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 1.214333075s ago: executing program 34 (id=2059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000002000010000000000030000000a1080b96fdd9acef87c9def7d00000000001700010014000200fc0200000000000000000000000000001400010020010000000000000000000000000002"], 0x44}}, 0x48000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x3e}}, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x4008000) socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bind$rose(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0x4, 0x8f, 0x7, 0x40, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x20, 0x200000, 0x8}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GRE_FLAGS={0xfffffffffffffc52, 0xd, 0x80000000}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x5c}}, 0x4044) 143.668155ms ago: executing program 35 (id=2061): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="a0000000090601040000000000000000210000000800094000000001500007800c00028008000140ac1414aa0c0019400000000000000001060004404e2000000500030003000000140017006d61637365633000000000000000000008000a400000000808000a40000000400c00078008000940000000090900020073797a31000000000500010007"], 0xa0}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x200, 0x0, 0x1000000, {0x0, 0x0, 0x0, r3, 0x235, 0x2881}, [@IFLA_NET_NS_FD={0x8}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x30}, 0x1, 0xba01, 0x0, 0x4008080}, 0xc0a0) 0s ago: executing program 36 (id=2060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x7, 0xfffffdfd, 0x200006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): [ 308.614474][ T9810] dump_stack_lvl+0x189/0x250 [ 308.614502][ T9810] ? __pfx____ratelimit+0x10/0x10 [ 308.614521][ T9810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.614545][ T9810] ? __pfx__printk+0x10/0x10 [ 308.614587][ T9810] should_fail_ex+0x414/0x560 [ 308.614624][ T9810] should_failslab+0xa8/0x100 [ 308.614656][ T9810] kmem_cache_alloc_noprof+0x73/0x3c0 [ 308.614685][ T9810] ? radix_tree_node_alloc+0x7e/0x3a0 [ 308.614711][ T9810] radix_tree_node_alloc+0x7e/0x3a0 [ 308.614739][ T9810] idr_get_free+0x2b3/0xa70 [ 308.614773][ T9810] idr_alloc_u32+0x159/0x2d0 [ 308.614800][ T9810] ? __pfx_idr_alloc_u32+0x10/0x10 [ 308.614825][ T9810] ? do_raw_spin_lock+0x121/0x290 [ 308.614859][ T9810] idr_alloc_cyclic+0x9b/0x1b0 [ 308.614888][ T9810] bpf_link_prime+0x6b/0x220 [ 308.614917][ T9810] bpf_raw_tp_link_attach+0x49a/0x6c0 [ 308.614942][ T9810] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 308.614975][ T9810] ? __fget_files+0x2a/0x420 [ 308.615002][ T9810] bpf_raw_tracepoint_open+0x1b2/0x220 [ 308.615047][ T9810] __sys_bpf+0x75a/0x870 [ 308.615078][ T9810] ? __pfx___sys_bpf+0x10/0x10 [ 308.615119][ T9810] ? ksys_write+0x22a/0x250 [ 308.615149][ T9810] ? __pfx_ksys_write+0x10/0x10 [ 308.615173][ T9810] ? rcu_is_watching+0x15/0xb0 [ 308.615216][ T9810] __x64_sys_bpf+0x7c/0x90 [ 308.615243][ T9810] do_syscall_64+0xfa/0x3b0 [ 308.615265][ T9810] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.615286][ T9810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.615308][ T9810] ? clear_bhb_loop+0x60/0xb0 [ 308.615334][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.615353][ T9810] RIP: 0033:0x7f93f498eec9 [ 308.615373][ T9810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.615389][ T9810] RSP: 002b:00007f93f2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.615410][ T9810] RAX: ffffffffffffffda RBX: 00007f93f4be5fa0 RCX: 00007f93f498eec9 [ 308.615442][ T9810] RDX: 0000000000000018 RSI: 00002000000002c0 RDI: 0000000000000011 [ 308.615456][ T9810] RBP: 00007f93f2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.615469][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.615480][ T9810] R13: 00007f93f4be6038 R14: 00007f93f4be5fa0 R15: 00007fffcd268f08 [ 308.615522][ T9810] [ 309.076924][ T9807] tipc: Enabled bearer , priority 0 [ 309.132046][ T9805] tipc: Resetting bearer [ 309.185348][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 309.431687][ T9803] tipc: Disabling bearer [ 309.487421][ T9827] FAULT_INJECTION: forcing a failure. [ 309.487421][ T9827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.503955][ T9828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1163'. [ 309.524803][ T9827] CPU: 0 UID: 0 PID: 9827 Comm: syz.1.1162 Not tainted syzkaller #0 PREEMPT(full) [ 309.524841][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.524855][ T9827] Call Trace: [ 309.524865][ T9827] [ 309.524877][ T9827] dump_stack_lvl+0x189/0x250 [ 309.524913][ T9827] ? __pfx____ratelimit+0x10/0x10 [ 309.524941][ T9827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.524970][ T9827] ? __pfx__printk+0x10/0x10 [ 309.525022][ T9827] should_fail_ex+0x414/0x560 [ 309.525068][ T9827] _copy_to_user+0x31/0xb0 [ 309.525104][ T9827] simple_read_from_buffer+0xe1/0x170 [ 309.525148][ T9827] proc_fail_nth_read+0x1b3/0x220 [ 309.525182][ T9827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.525214][ T9827] ? rw_verify_area+0x2a6/0x4d0 [ 309.525245][ T9827] ? __lock_acquire+0xab9/0xd20 [ 309.525278][ T9827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.525308][ T9827] vfs_read+0x200/0xa30 [ 309.525339][ T9827] ? fdget_pos+0x247/0x320 [ 309.525367][ T9827] ? __pfx___mutex_lock+0x10/0x10 [ 309.525396][ T9827] ? __pfx_vfs_read+0x10/0x10 [ 309.525440][ T9827] ? __fget_files+0x2a/0x420 [ 309.525469][ T9827] ? __fget_files+0x3a0/0x420 [ 309.525490][ T9827] ? __fget_files+0x2a/0x420 [ 309.525525][ T9827] ksys_read+0x145/0x250 [ 309.525555][ T9827] ? __fget_files+0x3a0/0x420 [ 309.525578][ T9827] ? __pfx_ksys_read+0x10/0x10 [ 309.525618][ T9827] ? do_syscall_64+0xbe/0x3b0 [ 309.525650][ T9827] do_syscall_64+0xfa/0x3b0 [ 309.525677][ T9827] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.525701][ T9827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.525726][ T9827] ? clear_bhb_loop+0x60/0xb0 [ 309.525757][ T9827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.525780][ T9827] RIP: 0033:0x7f3d2358d8dc [ 309.525799][ T9827] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 309.525818][ T9827] RSP: 002b:00007f3d24390030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.525842][ T9827] RAX: ffffffffffffffda RBX: 00007f3d237e5fa0 RCX: 00007f3d2358d8dc [ 309.525856][ T9827] RDX: 000000000000000f RSI: 00007f3d243900a0 RDI: 0000000000000004 [ 309.525868][ T9827] RBP: 00007f3d24390090 R08: 0000000000000000 R09: 0000000000000000 [ 309.525879][ T9827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.525890][ T9827] R13: 00007f3d237e6038 R14: 00007f3d237e5fa0 R15: 00007fffbfb66ca8 [ 309.525924][ T9827] [ 309.692884][ T9829] netlink: 212316 bytes leftover after parsing attributes in process `syz.4.1161'. [ 309.697803][ T9828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1163'. [ 310.007023][ T9838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1165'. [ 310.118486][ T9840] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20002 [ 310.267751][ T9845] tipc: Enabled bearer , priority 0 [ 310.316077][ T9850] syzkaller0: entered promiscuous mode [ 310.359734][ T9850] syzkaller0: entered allmulticast mode [ 310.407715][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 310.420342][ C0] lec:lec_tx_timeout: lec0 [ 310.426225][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 310.440765][ T9845] tipc: Resetting bearer [ 310.549341][ T9843] tipc: Resetting bearer [ 310.613958][ T9843] tipc: Disabling bearer [ 310.643153][ T9859] openvswitch: netlink: Key 6 has unexpected len 123 expected 2 [ 311.059977][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1176'. [ 311.215141][ T9877] FAULT_INJECTION: forcing a failure. [ 311.215141][ T9877] name failslab, interval 1, probability 0, space 0, times 0 [ 311.262029][ T9877] CPU: 1 UID: 0 PID: 9877 Comm: syz.0.1177 Not tainted syzkaller #0 PREEMPT(full) [ 311.262060][ T9877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 311.262078][ T9877] Call Trace: [ 311.262087][ T9877] [ 311.262096][ T9877] dump_stack_lvl+0x189/0x250 [ 311.262128][ T9877] ? __pfx____ratelimit+0x10/0x10 [ 311.262152][ T9877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.262177][ T9877] ? __pfx__printk+0x10/0x10 [ 311.262220][ T9877] ? __lock_acquire+0xab9/0xd20 [ 311.262262][ T9877] should_fail_ex+0x414/0x560 [ 311.262308][ T9877] should_failslab+0xa8/0x100 [ 311.262342][ T9877] kmem_cache_alloc_noprof+0x73/0x3c0 [ 311.262371][ T9877] ? skb_clone+0x212/0x3a0 [ 311.262405][ T9877] skb_clone+0x212/0x3a0 [ 311.262437][ T9877] __netlink_deliver_tap+0x404/0x850 [ 311.262476][ T9877] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.262501][ T9877] netlink_deliver_tap+0x19c/0x1b0 [ 311.262525][ T9877] netlink_unicast+0x7fa/0x9e0 [ 311.262568][ T9877] ? __pfx_netlink_unicast+0x10/0x10 [ 311.262603][ T9877] ? netlink_sendmsg+0x642/0xb30 [ 311.262623][ T9877] ? skb_put+0x11b/0x210 [ 311.262652][ T9877] netlink_sendmsg+0x805/0xb30 [ 311.262686][ T9877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.262715][ T9877] ? aa_sock_msg_perm+0xf1/0x1d0 [ 311.262738][ T9877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.262762][ T9877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.262788][ T9877] __sock_sendmsg+0x219/0x270 [ 311.262825][ T9877] ____sys_sendmsg+0x505/0x830 [ 311.262885][ T9877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.262925][ T9877] ? import_iovec+0x74/0xa0 [ 311.262978][ T9877] ___sys_sendmsg+0x21f/0x2a0 [ 311.263009][ T9877] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.263083][ T9877] ? __fget_files+0x2a/0x420 [ 311.263102][ T9877] ? __fget_files+0x3a0/0x420 [ 311.263135][ T9877] __x64_sys_sendmsg+0x19b/0x260 [ 311.263167][ T9877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.263224][ T9877] ? __pfx_ksys_write+0x10/0x10 [ 311.263250][ T9877] ? rcu_is_watching+0x15/0xb0 [ 311.263279][ T9877] ? do_syscall_64+0xbe/0x3b0 [ 311.263310][ T9877] do_syscall_64+0xfa/0x3b0 [ 311.263333][ T9877] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.263354][ T9877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.263376][ T9877] ? clear_bhb_loop+0x60/0xb0 [ 311.263403][ T9877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.263423][ T9877] RIP: 0033:0x7fd4a858eec9 [ 311.263444][ T9877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.263460][ T9877] RSP: 002b:00007fd4a67ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.263484][ T9877] RAX: ffffffffffffffda RBX: 00007fd4a87e5fa0 RCX: 00007fd4a858eec9 [ 311.263500][ T9877] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000004 [ 311.263514][ T9877] RBP: 00007fd4a67ee090 R08: 0000000000000000 R09: 0000000000000000 [ 311.263527][ T9877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.263540][ T9877] R13: 00007fd4a87e6038 R14: 00007fd4a87e5fa0 R15: 00007ffc41f17868 [ 311.263576][ T9877] [ 311.263700][ T9877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1177'. [ 311.777853][ T9869] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.953718][ T9872] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.013001][ T9872] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 312.052130][ T9872] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 312.106774][ T9879] veth0_to_bond: entered allmulticast mode [ 312.385515][ T9888] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.390246][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1187'. [ 312.420648][ T9901] tipc: Enabling of bearer rejected, failed to enable media [ 312.453637][ T9900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1187'. [ 312.483810][ T9898] FAULT_INJECTION: forcing a failure. [ 312.483810][ T9898] name failslab, interval 1, probability 0, space 0, times 0 [ 312.528835][ T9898] CPU: 0 UID: 0 PID: 9898 Comm: syz.0.1185 Not tainted syzkaller #0 PREEMPT(full) [ 312.528867][ T9898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.528880][ T9898] Call Trace: [ 312.528889][ T9898] [ 312.528898][ T9898] dump_stack_lvl+0x189/0x250 [ 312.528941][ T9898] ? __pfx____ratelimit+0x10/0x10 [ 312.528966][ T9898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.528993][ T9898] ? __pfx__printk+0x10/0x10 [ 312.529031][ T9898] ? __pfx___might_resched+0x10/0x10 [ 312.529049][ T9898] ? fs_reclaim_acquire+0x7d/0x100 [ 312.529078][ T9898] should_fail_ex+0x414/0x560 [ 312.529118][ T9898] ? alloc_netdev_mqs+0xa3/0x11b0 [ 312.529164][ T9898] should_failslab+0xa8/0x100 [ 312.529200][ T9898] __kvmalloc_node_noprof+0x161/0x5f0 [ 312.529235][ T9898] ? alloc_netdev_mqs+0xa3/0x11b0 [ 312.529265][ T9898] ? snprintf+0xda/0x120 [ 312.529302][ T9898] alloc_netdev_mqs+0xa3/0x11b0 [ 312.529332][ T9898] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 312.529363][ T9898] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 312.529405][ T9898] rtnl_create_link+0x31f/0xd10 [ 312.529447][ T9898] rtnl_newlink_create+0x25c/0xb00 [ 312.529481][ T9898] ? __mutex_lock+0x5bb/0x1350 [ 312.529512][ T9898] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 312.529544][ T9898] ? __pfx___mutex_lock+0x10/0x10 [ 312.529580][ T9898] ? ns_capable+0x8a/0xf0 [ 312.529608][ T9898] rtnl_newlink+0x16d6/0x1c70 [ 312.529632][ T9898] ? netlink_sendmsg+0x805/0xb30 [ 312.529668][ T9898] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.529714][ T9898] ? kasan_quarantine_put+0xdd/0x220 [ 312.529738][ T9898] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.529766][ T9898] ? nlmon_xmit+0xb0/0x100 [ 312.529787][ T9898] ? kmem_cache_free+0x18f/0x400 [ 312.529822][ T9898] ? __local_bh_enable_ip+0x12d/0x1c0 [ 312.529842][ T9898] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.529863][ T9898] ? __local_bh_enable_ip+0x12d/0x1c0 [ 312.529882][ T9898] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 312.529908][ T9898] ? __dev_queue_xmit+0x27b/0x3b50 [ 312.529935][ T9898] ? __dev_queue_xmit+0x27b/0x3b50 [ 312.529960][ T9898] ? __dev_queue_xmit+0x27b/0x3b50 [ 312.529988][ T9898] ? __dev_queue_xmit+0x1d79/0x3b50 [ 312.530021][ T9898] ? __lock_acquire+0xab9/0xd20 [ 312.531066][ T9898] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.531089][ T9898] rtnetlink_rcv_msg+0x7cf/0xb70 [ 312.531140][ T9898] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 312.531160][ T9898] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.531188][ T9898] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 312.531228][ T9898] netlink_rcv_skb+0x205/0x470 [ 312.531247][ T9898] ? rcu_is_watching+0x15/0xb0 [ 312.531267][ T9898] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.531290][ T9898] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.531324][ T9898] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.531361][ T9898] netlink_unicast+0x82f/0x9e0 [ 312.531402][ T9898] ? __pfx_netlink_unicast+0x10/0x10 [ 312.531435][ T9898] ? netlink_sendmsg+0x642/0xb30 [ 312.531454][ T9898] ? skb_put+0x11b/0x210 [ 312.531480][ T9898] netlink_sendmsg+0x805/0xb30 [ 312.531513][ T9898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.531549][ T9898] ? aa_sock_msg_perm+0xf1/0x1d0 [ 312.531573][ T9898] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.531595][ T9898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.531617][ T9898] __sock_sendmsg+0x219/0x270 [ 312.531652][ T9898] ____sys_sendmsg+0x505/0x830 [ 312.531684][ T9898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.531720][ T9898] ? import_iovec+0x74/0xa0 [ 312.531750][ T9898] ___sys_sendmsg+0x21f/0x2a0 [ 312.531778][ T9898] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.531845][ T9898] ? __fget_files+0x2a/0x420 [ 312.531863][ T9898] ? __fget_files+0x3a0/0x420 [ 312.531898][ T9898] __x64_sys_sendmsg+0x19b/0x260 [ 312.531928][ T9898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.531965][ T9898] ? __pfx_ksys_write+0x10/0x10 [ 312.531989][ T9898] ? rcu_is_watching+0x15/0xb0 [ 312.532014][ T9898] ? do_syscall_64+0xbe/0x3b0 [ 312.532041][ T9898] do_syscall_64+0xfa/0x3b0 [ 312.532062][ T9898] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.532081][ T9898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.532111][ T9898] ? clear_bhb_loop+0x60/0xb0 [ 312.532135][ T9898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.532155][ T9898] RIP: 0033:0x7fd4a858eec9 [ 312.532180][ T9898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.532196][ T9898] RSP: 002b:00007fd4a67ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.532218][ T9898] RAX: ffffffffffffffda RBX: 00007fd4a87e5fa0 RCX: 00007fd4a858eec9 [ 312.532233][ T9898] RDX: 0000000004000804 RSI: 0000200000000480 RDI: 0000000000000003 [ 312.532245][ T9898] RBP: 00007fd4a67ee090 R08: 0000000000000000 R09: 0000000000000000 [ 312.532257][ T9898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.532269][ T9898] R13: 00007fd4a87e6038 R14: 00007fd4a87e5fa0 R15: 00007ffc41f17868 [ 312.532307][ T9898] [ 313.365597][ T9901] syzkaller0: entered promiscuous mode [ 313.373884][ T9901] syzkaller0: entered allmulticast mode [ 313.704116][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 313.752471][ T9914] macvlan0: entered promiscuous mode [ 313.761029][ T9914] batadv0: entered promiscuous mode [ 313.768712][ T9914] debugfs: 'hsr1' already exists in 'hsr' [ 313.779045][ T9914] Cannot create hsr debugfs directory [ 313.785456][ T9914] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 313.801178][ T9914] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 313.818396][ T9914] hsr1: entered allmulticast mode [ 313.826662][ T9914] macvlan0: entered allmulticast mode [ 313.833830][ T9914] batadv0: entered allmulticast mode [ 313.846666][ T9914] macvlan0: left promiscuous mode [ 313.880691][ T9914] batadv0: left promiscuous mode [ 314.037291][ T9925] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 314.353507][ T9932] tipc: Enabled bearer , priority 0 [ 314.392507][ T9932] syzkaller0: entered promiscuous mode [ 314.416426][ T9932] syzkaller0: entered allmulticast mode [ 314.461774][ T9939] nbd: couldn't find a device at index -373156329 [ 314.512521][ T9931] tipc: Resetting bearer [ 314.610802][ T9931] tipc: Disabling bearer [ 314.685862][ T9944] tipc: Enabling of bearer rejected, failed to enable media [ 314.700663][ T9946] __nla_validate_parse: 2 callbacks suppressed [ 314.700685][ T9946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1205'. [ 314.726701][ T9946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1205'. [ 315.109033][ T9961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 315.197626][ T9961] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 315.447532][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 315.460176][ C0] lec:lec_tx_timeout: lec0 [ 315.465821][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 315.527779][ T5883] Bluetooth: hci4: command 0x0406 tx timeout [ 316.074366][ T9987] tipc: Enabled bearer , priority 0 [ 316.122984][ T9987] tipc: Resetting bearer [ 316.206269][ T9986] tipc: Disabling bearer [ 316.233507][ T9996] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1223'. [ 316.473687][T10001] tipc: Enabled bearer , priority 0 [ 316.504124][T10001] syzkaller0: entered promiscuous mode [ 316.517724][T10001] syzkaller0: entered allmulticast mode [ 316.526526][ T9999] tipc: Enabling of bearer rejected, failed to enable media [ 316.559287][T10006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1227'. [ 316.598464][T10001] tipc: Resetting bearer [ 316.643919][T10000] tipc: Resetting bearer [ 316.870875][T10000] tipc: Disabling bearer [ 317.025629][T10017] tipc: Enabled bearer , priority 0 [ 317.060550][T10017] syzkaller0: entered promiscuous mode [ 317.093357][T10017] syzkaller0: entered allmulticast mode [ 317.292527][T10025] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1229'. [ 317.322033][T10017] tipc: Resetting bearer [ 317.419577][T10014] tipc: Resetting bearer [ 317.547069][T10038] FAULT_INJECTION: forcing a failure. [ 317.547069][T10038] name failslab, interval 1, probability 0, space 0, times 0 [ 317.587218][T10014] tipc: Disabling bearer [ 317.615077][T10032] syzkaller0: entered promiscuous mode [ 317.618516][T10038] CPU: 1 UID: 0 PID: 10038 Comm: syz.4.1236 Not tainted syzkaller #0 PREEMPT(full) [ 317.618549][T10038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.618564][T10038] Call Trace: [ 317.618574][T10038] [ 317.618584][T10038] dump_stack_lvl+0x189/0x250 [ 317.618620][T10038] ? __pfx____ratelimit+0x10/0x10 [ 317.618645][T10038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.618674][T10038] ? __pfx__printk+0x10/0x10 [ 317.618712][T10038] ? __pfx___might_resched+0x10/0x10 [ 317.618733][T10038] ? fs_reclaim_acquire+0x7d/0x100 [ 317.618762][T10038] should_fail_ex+0x414/0x560 [ 317.618816][T10038] should_failslab+0xa8/0x100 [ 317.618854][T10038] __kmalloc_noprof+0xcb/0x4f0 [ 317.618884][T10038] ? __list_lru_init+0xba/0x5c0 [ 317.618909][T10038] __list_lru_init+0xba/0x5c0 [ 317.618927][T10038] ? __raw_spin_lock_init+0x45/0x100 [ 317.618966][T10038] alloc_super+0x7cb/0x970 [ 317.619004][T10038] sget_fc+0x329/0xa40 [ 317.619037][T10038] ? __pfx_set_anon_super_fc+0x10/0x10 [ 317.619060][T10038] ? __pfx_mqueue_fill_super+0x10/0x10 [ 317.619095][T10038] get_tree_nodev+0x2a/0x150 [ 317.619128][T10038] vfs_get_tree+0x92/0x2b0 [ 317.619165][T10038] fc_mount_longterm+0x1c/0x100 [ 317.619198][T10038] mq_init_ns+0x3a1/0x510 [ 317.619232][T10038] copy_ipcs+0x2f6/0x4f0 [ 317.619273][T10038] create_new_namespaces+0x218/0x720 [ 317.619318][T10038] ? security_capable+0x7e/0x2e0 [ 317.619366][T10038] unshare_nsproxy_namespaces+0x11c/0x170 [ 317.619394][T10038] ksys_unshare+0x4c8/0x8c0 [ 317.619432][T10038] ? __pfx_ksys_unshare+0x10/0x10 [ 317.619471][T10038] ? __pfx_ksys_write+0x10/0x10 [ 317.619500][T10038] ? rcu_is_watching+0x15/0xb0 [ 317.619539][T10038] __x64_sys_unshare+0x38/0x50 [ 317.619568][T10038] do_syscall_64+0xfa/0x3b0 [ 317.619592][T10038] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.619618][T10038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.619640][T10038] ? clear_bhb_loop+0x60/0xb0 [ 317.619670][T10038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.619694][T10038] RIP: 0033:0x7f93f498eec9 [ 317.619715][T10038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.619735][T10038] RSP: 002b:00007f93f2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 317.619762][T10038] RAX: ffffffffffffffda RBX: 00007f93f4be5fa0 RCX: 00007f93f498eec9 [ 317.619780][T10038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 317.619795][T10038] RBP: 00007f93f2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 317.619808][T10038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.619823][T10038] R13: 00007f93f4be6038 R14: 00007f93f4be5fa0 R15: 00007fffcd268f08 [ 317.619864][T10038] [ 318.067665][T10032] syzkaller0: entered allmulticast mode [ 318.309466][T10044] tipc: Enabled bearer , priority 0 [ 318.503292][T10060] tipc: Resetting bearer [ 318.535990][T10063] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 318.641981][T10042] tipc: Disabling bearer [ 318.763626][T10061] veth0_to_team: entered promiscuous mode [ 318.780870][T10061] veth0_to_team: entered allmulticast mode [ 318.799821][T10069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1246'. [ 318.877961][T10069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1246'. [ 319.180800][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 319.241771][T10082] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 319.342824][T10089] tipc: Enabling of bearer rejected, failed to enable media [ 319.378491][T10086] tipc: Enabled bearer , priority 0 [ 319.432363][T10086] tipc: Resetting bearer [ 319.495690][T10084] tipc: Disabling bearer [ 319.598282][T10099] netlink: 'syz.3.1254': attribute type 2 has an invalid length. [ 319.932556][T10107] syzkaller0: entered promiscuous mode [ 319.943878][T10107] syzkaller0: entered allmulticast mode [ 320.481765][T10126] __nla_validate_parse: 1 callbacks suppressed [ 320.513893][T10126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1262'. [ 320.626830][T10134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1264'. [ 320.888583][T10146] tipc: Enabled bearer , priority 0 [ 320.907140][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 320.958022][T10146] tipc: Resetting bearer [ 320.988796][T10152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1268'. [ 321.034618][T10152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1268'. [ 321.062884][T10144] tipc: Disabling bearer [ 321.145398][T10159] tipc: Enabling of bearer rejected, failed to enable media [ 321.210999][T10157] netlink: 'syz.2.1270': attribute type 2 has an invalid length. [ 321.221080][T10157] netlink: 'syz.2.1270': attribute type 2 has an invalid length. [ 321.287531][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 321.299920][ C0] lec:lec_tx_timeout: lec0 [ 321.306089][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 321.592747][T10170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1272'. [ 322.006983][T10181] syzkaller0: entered promiscuous mode [ 322.072763][T10181] syzkaller0: entered allmulticast mode [ 322.659883][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.010540][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 323.388696][T10217] tipc: Enabling of bearer rejected, failed to enable media [ 323.462949][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 323.592229][T10226] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1289'. [ 323.769658][T10234] FAULT_INJECTION: forcing a failure. [ 323.769658][T10234] name failslab, interval 1, probability 0, space 0, times 0 [ 323.831926][T10234] CPU: 1 UID: 0 PID: 10234 Comm: syz.3.1291 Not tainted syzkaller #0 PREEMPT(full) [ 323.831957][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 323.831970][T10234] Call Trace: [ 323.831978][T10234] [ 323.831989][T10234] dump_stack_lvl+0x189/0x250 [ 323.832031][T10234] ? __pfx____ratelimit+0x10/0x10 [ 323.832055][T10234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.832080][T10234] ? __pfx__printk+0x10/0x10 [ 323.832123][T10234] ? __pfx___might_resched+0x10/0x10 [ 323.832144][T10234] ? fs_reclaim_acquire+0x7d/0x100 [ 323.832170][T10234] should_fail_ex+0x414/0x560 [ 323.832206][T10234] should_failslab+0xa8/0x100 [ 323.832238][T10234] kmem_cache_alloc_noprof+0x73/0x3c0 [ 323.832266][T10234] ? security_file_alloc+0x34/0x330 [ 323.832299][T10234] security_file_alloc+0x34/0x330 [ 323.832329][T10234] init_file+0x93/0x2f0 [ 323.832355][T10234] alloc_empty_file+0x6e/0x1d0 [ 323.832379][T10234] alloc_file_pseudo+0x13d/0x210 [ 323.832405][T10234] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 323.832425][T10234] ? tipc_node_get_capabilities+0xf3/0x130 [ 323.832462][T10234] sock_alloc_file+0xb8/0x2e0 [ 323.832498][T10234] __sys_socketpair+0x387/0x560 [ 323.832529][T10234] __x64_sys_socketpair+0x9b/0xb0 [ 323.832552][T10234] do_syscall_64+0xfa/0x3b0 [ 323.832574][T10234] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.832594][T10234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.832616][T10234] ? clear_bhb_loop+0x60/0xb0 [ 323.832641][T10234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.832662][T10234] RIP: 0033:0x7facf298eec9 [ 323.832680][T10234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.832698][T10234] RSP: 002b:00007facf38bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 323.832721][T10234] RAX: ffffffffffffffda RBX: 00007facf2be5fa0 RCX: 00007facf298eec9 [ 323.832737][T10234] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 323.832749][T10234] RBP: 00007facf38bb090 R08: 0000000000000000 R09: 0000000000000000 [ 323.832761][T10234] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000002 [ 323.832774][T10234] R13: 00007facf2be6038 R14: 00007facf2be5fa0 R15: 00007fff31f8c418 [ 323.832807][T10234] [ 324.297342][T10228] tipc: Enabled bearer , priority 0 [ 324.359474][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'. [ 324.392337][T10236] syzkaller0: entered promiscuous mode [ 324.457609][T10236] syzkaller0: entered allmulticast mode [ 324.534300][T10236] tipc: Resetting bearer [ 324.551269][T10243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.722002][T10236] tipc: Disabling bearer [ 324.838572][T10250] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 325.369643][T10266] tipc: Enabling of bearer rejected, failed to enable media [ 325.533968][T10268] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 326.091176][T10287] __nla_validate_parse: 1 callbacks suppressed [ 326.091200][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 326.317594][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 326.327848][ C0] lec:lec_tx_timeout: lec0 [ 326.334339][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 326.497410][T10302] bond0: Caught tx_queue_len zero misconfig [ 326.842400][T10319] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3328 [ 327.071270][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 327.092855][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 327.115222][T10325] netlink: 'syz.2.1319': attribute type 14 has an invalid length. [ 327.127406][T10325] netlink: 'syz.2.1319': attribute type 13 has an invalid length. [ 327.192426][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 327.292535][T10327] netlink: zone id is out of range [ 327.326528][T10327] netlink: zone id is out of range [ 327.343347][T10327] netlink: zone id is out of range [ 327.365416][T10327] netlink: zone id is out of range [ 327.403815][T10327] netlink: zone id is out of range [ 327.411242][T10327] netlink: zone id is out of range [ 327.419496][T10327] netlink: zone id is out of range [ 327.427007][T10327] netlink: zone id is out of range [ 327.595258][T10330] syzkaller0: entered promiscuous mode [ 327.614299][T10330] syzkaller0: entered allmulticast mode [ 328.061979][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 328.866107][T10363] tipc: Enabled bearer , priority 0 [ 328.892922][T10363] syzkaller0: entered promiscuous mode [ 328.906292][T10363] syzkaller0: entered allmulticast mode [ 328.964708][T10363] tipc: Resetting bearer [ 329.034535][T10362] tipc: Resetting bearer [ 329.133364][T10362] tipc: Disabling bearer [ 329.214568][T10376] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 329.234896][T10373] syzkaller0: entered promiscuous mode [ 329.258877][T10373] syzkaller0: entered allmulticast mode [ 329.309774][T10373] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 329.585671][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 329.755630][T10385] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 330.554375][T10424] tipc: Enabled bearer , priority 0 [ 330.628138][T10417] syzkaller0: entered promiscuous mode [ 330.662496][T10417] syzkaller0: entered allmulticast mode [ 330.706610][T10417] tipc: Resetting bearer [ 330.768424][T10416] tipc: Resetting bearer [ 330.850379][T10416] tipc: Disabling bearer [ 330.984716][T10432] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 331.226353][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'. [ 331.248360][T10437] syzkaller0: entered promiscuous mode [ 331.267765][T10437] syzkaller0: entered allmulticast mode [ 331.286713][T10446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'. [ 331.347831][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 331.361582][ C0] lec:lec_tx_timeout: lec0 [ 331.368497][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 331.392961][T10446] netlink: 'syz.3.1361': attribute type 1 has an invalid length. [ 331.553930][T10455] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1365'. [ 331.907985][T10461] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 332.015998][T10467] FAULT_INJECTION: forcing a failure. [ 332.015998][T10467] name failslab, interval 1, probability 0, space 0, times 0 [ 332.064201][T10467] CPU: 1 UID: 0 PID: 10467 Comm: syz.4.1370 Not tainted syzkaller #0 PREEMPT(full) [ 332.064383][T10467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 332.064396][T10467] Call Trace: [ 332.064405][T10467] [ 332.064468][T10467] dump_stack_lvl+0x189/0x250 [ 332.064501][T10467] ? __pfx____ratelimit+0x10/0x10 [ 332.064527][T10467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.064553][T10467] ? __pfx__printk+0x10/0x10 [ 332.064602][T10467] should_fail_ex+0x414/0x560 [ 332.064642][T10467] should_failslab+0xa8/0x100 [ 332.064678][T10467] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 332.064711][T10467] ? __alloc_skb+0x112/0x2d0 [ 332.064742][T10467] __alloc_skb+0x112/0x2d0 [ 332.064772][T10467] xfrm_alloc_compat+0x1a6/0x16f0 [ 332.064821][T10467] ? xfrm_get_translator+0x1b/0x240 [ 332.064856][T10467] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 332.064879][T10467] xfrm_nlmsg_multicast+0xd7/0x1f0 [ 332.064914][T10467] xfrm_send_state_notify+0xc5f/0x18b0 [ 332.064952][T10467] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 332.064979][T10467] ? km_state_notify+0x25/0x1f0 [ 332.065018][T10467] ? km_state_notify+0x25/0x1f0 [ 332.065046][T10467] ? km_state_notify+0x25/0x1f0 [ 332.065080][T10467] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 332.065110][T10467] km_state_notify+0x10d/0x1f0 [ 332.065145][T10467] pfkey_add+0x2000/0x2e00 [ 332.065192][T10467] ? __pfx_pfkey_add+0x10/0x10 [ 332.065210][T10467] ? kmem_cache_free+0x18f/0x400 [ 332.065571][T10467] pfkey_sendmsg+0xbfb/0x1090 [ 332.065620][T10467] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 332.065679][T10467] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.065705][T10467] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.065730][T10467] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 332.065758][T10467] __sock_sendmsg+0x219/0x270 [ 332.065797][T10467] ____sys_sendmsg+0x505/0x830 [ 332.065833][T10467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.065874][T10467] ? import_iovec+0x74/0xa0 [ 332.065910][T10467] ___sys_sendmsg+0x21f/0x2a0 [ 332.065952][T10467] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.066028][T10467] ? __fget_files+0x2a/0x420 [ 332.066048][T10467] ? __fget_files+0x3a0/0x420 [ 332.066083][T10467] __x64_sys_sendmsg+0x19b/0x260 [ 332.066115][T10467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.066158][T10467] ? __pfx_ksys_write+0x10/0x10 [ 332.066183][T10467] ? rcu_is_watching+0x15/0xb0 [ 332.066208][T10467] ? do_syscall_64+0xbe/0x3b0 [ 332.066396][T10467] do_syscall_64+0xfa/0x3b0 [ 332.066431][T10467] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.066454][T10467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.066476][T10467] ? clear_bhb_loop+0x60/0xb0 [ 332.066510][T10467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.066531][T10467] RIP: 0033:0x7f93f498eec9 [ 332.066552][T10467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.066571][T10467] RSP: 002b:00007f93f2bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.066595][T10467] RAX: ffffffffffffffda RBX: 00007f93f4be5fa0 RCX: 00007f93f498eec9 [ 332.066610][T10467] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 332.066624][T10467] RBP: 00007f93f2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 332.066637][T10467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.066650][T10467] R13: 00007f93f4be6038 R14: 00007f93f4be5fa0 R15: 00007fffcd268f08 [ 332.066686][T10467] [ 332.800738][T10472] tipc: Enabled bearer , priority 0 [ 332.848971][T10472] syzkaller0: entered promiscuous mode [ 332.855026][T10472] syzkaller0: entered allmulticast mode [ 332.928025][T10472] tipc: Resetting bearer [ 332.980326][T10470] tipc: Resetting bearer [ 333.128360][T10470] tipc: Disabling bearer [ 333.182000][T10481] tipc: Enabling of bearer rejected, failed to enable media [ 333.233409][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1379'. [ 333.250293][T10483] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 333.272687][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1379'. [ 333.543572][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1381'. [ 333.605537][T10499] FAULT_INJECTION: forcing a failure. [ 333.605537][T10499] name failslab, interval 1, probability 0, space 0, times 0 [ 333.658483][T10499] CPU: 0 UID: 0 PID: 10499 Comm: syz.1.1382 Not tainted syzkaller #0 PREEMPT(full) [ 333.658537][T10499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 333.658551][T10499] Call Trace: [ 333.658561][T10499] [ 333.658571][T10499] dump_stack_lvl+0x189/0x250 [ 333.658601][T10499] ? __pfx____ratelimit+0x10/0x10 [ 333.658624][T10499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.658650][T10499] ? __pfx__printk+0x10/0x10 [ 333.658683][T10499] ? __pfx___might_resched+0x10/0x10 [ 333.658703][T10499] ? fs_reclaim_acquire+0x7d/0x100 [ 333.658729][T10499] should_fail_ex+0x414/0x560 [ 333.658774][T10499] should_failslab+0xa8/0x100 [ 333.658807][T10499] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 333.658837][T10499] ? __alloc_skb+0x112/0x2d0 [ 333.658866][T10499] __alloc_skb+0x112/0x2d0 [ 333.658895][T10499] nf_tables_rule_notify+0xc0/0x570 [ 333.658935][T10499] nf_tables_commit+0x1b06/0x8710 [ 333.658994][T10499] ? __pfx_nf_tables_commit+0x10/0x10 [ 333.659029][T10499] ? free_large_kmalloc+0x13a/0x1f0 [ 333.659063][T10499] ? nf_tables_newrule+0x23bc/0x2890 [ 333.659103][T10499] ? __pfx_nf_tables_newrule+0x10/0x10 [ 333.659152][T10499] nfnetlink_rcv+0x1a4e/0x2520 [ 333.659223][T10499] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 333.659274][T10499] ? ref_tracker_free+0x63a/0x7d0 [ 333.659338][T10499] ? __netlink_deliver_tap+0x807/0x850 [ 333.659360][T10499] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.659404][T10499] netlink_unicast+0x82f/0x9e0 [ 333.659449][T10499] ? __pfx_netlink_unicast+0x10/0x10 [ 333.659484][T10499] ? netlink_sendmsg+0x642/0xb30 [ 333.659504][T10499] ? skb_put+0x11b/0x210 [ 333.659532][T10499] netlink_sendmsg+0x805/0xb30 [ 333.659568][T10499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.659595][T10499] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.659618][T10499] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.659642][T10499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.659667][T10499] __sock_sendmsg+0x219/0x270 [ 333.659703][T10499] ____sys_sendmsg+0x505/0x830 [ 333.659737][T10499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.659775][T10499] ? import_iovec+0x74/0xa0 [ 333.659809][T10499] ___sys_sendmsg+0x21f/0x2a0 [ 333.659839][T10499] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.659911][T10499] ? __fget_files+0x2a/0x420 [ 333.659929][T10499] ? __fget_files+0x3a0/0x420 [ 333.659962][T10499] __x64_sys_sendmsg+0x19b/0x260 [ 333.659993][T10499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.660033][T10499] ? __pfx_ksys_write+0x10/0x10 [ 333.660058][T10499] ? rcu_is_watching+0x15/0xb0 [ 333.660083][T10499] ? do_syscall_64+0xbe/0x3b0 [ 333.660113][T10499] do_syscall_64+0xfa/0x3b0 [ 333.660135][T10499] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.660157][T10499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.660178][T10499] ? clear_bhb_loop+0x60/0xb0 [ 333.660204][T10499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.660226][T10499] RIP: 0033:0x7f3d2358eec9 [ 333.660246][T10499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.660263][T10499] RSP: 002b:00007f3d24390038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.660287][T10499] RAX: ffffffffffffffda RBX: 00007f3d237e5fa0 RCX: 00007f3d2358eec9 [ 333.660303][T10499] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 333.660374][T10499] RBP: 00007f3d24390090 R08: 0000000000000000 R09: 0000000000000000 [ 333.660387][T10499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.660400][T10499] R13: 00007f3d237e6038 R14: 00007f3d237e5fa0 R15: 00007fffbfb66ca8 [ 333.660437][T10499] [ 334.382487][T10512] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 335.025938][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 335.398812][T10542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1398'. [ 335.450601][T10542] net_ratelimit: 27 callbacks suppressed [ 335.450624][T10542] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 335.582785][T10545] syzkaller0: entered promiscuous mode [ 335.635906][T10545] syzkaller0: entered allmulticast mode [ 335.725029][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'. [ 335.739418][T10547] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 335.986480][T10555] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 336.101835][T10557] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1403'. [ 336.387567][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 336.398090][ C0] lec:lec_tx_timeout: lec0 [ 336.404889][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 337.070847][T10584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.408333][T10584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.459352][T10596] syzkaller0: entered promiscuous mode [ 337.464278][T10604] FAULT_INJECTION: forcing a failure. [ 337.464278][T10604] name failslab, interval 1, probability 0, space 0, times 0 [ 337.470262][T10596] syzkaller0: entered allmulticast mode [ 337.503032][T10604] CPU: 0 UID: 0 PID: 10604 Comm: syz.4.1421 Not tainted syzkaller #0 PREEMPT(full) [ 337.503061][T10604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 337.503074][T10604] Call Trace: [ 337.503083][T10604] [ 337.503092][T10604] dump_stack_lvl+0x189/0x250 [ 337.503124][T10604] ? __pfx____ratelimit+0x10/0x10 [ 337.503146][T10604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.503170][T10604] ? __pfx__printk+0x10/0x10 [ 337.503204][T10604] ? __pfx___might_resched+0x10/0x10 [ 337.503224][T10604] ? fs_reclaim_acquire+0x7d/0x100 [ 337.503249][T10604] should_fail_ex+0x414/0x560 [ 337.503294][T10604] should_failslab+0xa8/0x100 [ 337.503327][T10604] __kmalloc_cache_noprof+0x70/0x3d0 [ 337.503355][T10604] ? nf_tables_commit+0x79d/0x8710 [ 337.503386][T10604] nf_tables_commit+0x79d/0x8710 [ 337.503416][T10604] ? __free_frozen_pages+0x65e/0xd30 [ 337.503491][T10604] ? __pfx_nf_tables_commit+0x10/0x10 [ 337.503527][T10604] ? free_large_kmalloc+0x13a/0x1f0 [ 337.503563][T10604] ? nf_tables_newrule+0x23bc/0x2890 [ 337.503610][T10604] ? __pfx_nf_tables_newrule+0x10/0x10 [ 337.503665][T10604] nfnetlink_rcv+0x1a4e/0x2520 [ 337.503739][T10604] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 337.503793][T10604] ? ref_tracker_free+0x63a/0x7d0 [ 337.503874][T10604] ? __netlink_deliver_tap+0x807/0x850 [ 337.503899][T10604] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.503958][T10604] netlink_unicast+0x82f/0x9e0 [ 337.504019][T10604] ? __pfx_netlink_unicast+0x10/0x10 [ 337.504057][T10604] ? netlink_sendmsg+0x642/0xb30 [ 337.504079][T10604] ? skb_put+0x11b/0x210 [ 337.504115][T10604] netlink_sendmsg+0x805/0xb30 [ 337.504152][T10604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.504186][T10604] ? aa_sock_msg_perm+0xf1/0x1d0 [ 337.504213][T10604] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.504238][T10604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.504270][T10604] __sock_sendmsg+0x219/0x270 [ 337.504318][T10604] ____sys_sendmsg+0x505/0x830 [ 337.504364][T10604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.504433][T10604] ? import_iovec+0x74/0xa0 [ 337.504479][T10604] ___sys_sendmsg+0x21f/0x2a0 [ 337.504516][T10604] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.504614][T10604] ? __fget_files+0x2a/0x420 [ 337.504646][T10604] ? __fget_files+0x3a0/0x420 [ 337.504680][T10604] __x64_sys_sendmsg+0x19b/0x260 [ 337.504719][T10604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.504757][T10604] ? __pfx_ksys_write+0x10/0x10 [ 337.504786][T10604] ? rcu_is_watching+0x15/0xb0 [ 337.504829][T10604] ? do_syscall_64+0xbe/0x3b0 [ 337.504877][T10604] do_syscall_64+0xfa/0x3b0 [ 337.504900][T10604] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.504928][T10604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.504956][T10604] ? clear_bhb_loop+0x60/0xb0 [ 337.506293][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.506327][T10604] RIP: 0033:0x7f93f498eec9 [ 337.506347][T10604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.506365][T10604] RSP: 002b:00007f93f2bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.506388][T10604] RAX: ffffffffffffffda RBX: 00007f93f4be5fa0 RCX: 00007f93f498eec9 [ 337.506404][T10604] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 337.506418][T10604] RBP: 00007f93f2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 337.506430][T10604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.506442][T10604] R13: 00007f93f4be6038 R14: 00007f93f4be5fa0 R15: 00007fffcd268f08 [ 337.506478][T10604] [ 338.104866][T10602] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 338.535178][T10584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.602970][T10616] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 338.796374][T10612] bridge_slave_0: left allmulticast mode [ 338.837903][T10612] bridge_slave_0: left promiscuous mode [ 338.877003][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.980921][T10612] bridge_slave_1: left allmulticast mode [ 339.027588][T10612] bridge_slave_1: left promiscuous mode [ 339.035417][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.134435][T10612] bond0: (slave bond_slave_0): Releasing backup interface [ 339.219760][T10612] bond0: (slave bond_slave_1): Releasing backup interface [ 339.353212][T10612] team0: Port device team_slave_0 removed [ 339.415088][T10612] team0: Port device team_slave_1 removed [ 339.432171][T10612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.436169][T10632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1429'. [ 339.496080][T10612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.522966][T10612] bond1: (slave gretap1): Releasing active interface [ 339.565198][T10612] bond2: (slave ip6gretap1): Releasing backup interface [ 339.572742][T10634] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1430'. [ 339.586684][T10612] bond2: (slave ip6gretap1): the permanent HWaddr of slave - 5e:64:cc:bb:03:8e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 339.634386][T10612] bond2: (slave veth3): Releasing backup interface [ 339.804220][T10613] syzkaller0: entered promiscuous mode [ 339.825552][T10613] syzkaller0: entered allmulticast mode [ 339.965853][T10584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.361319][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.449001][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.477744][T10647] tipc: Enabled bearer , priority 0 [ 340.506338][T10652] tipc: Enabled bearer , priority 0 [ 340.554625][ T1159] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.573502][T10647] tipc: Resetting bearer [ 340.587198][T10646] tipc: Disabling bearer [ 340.668315][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.690276][T10652] tipc: Resetting bearer [ 340.844727][T10650] tipc: Disabling bearer [ 341.019398][T10662] FAULT_INJECTION: forcing a failure. [ 341.019398][T10662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.048803][T10658] syzkaller0: entered promiscuous mode [ 341.051437][T10662] CPU: 0 UID: 0 PID: 10662 Comm: syz.1.1439 Not tainted syzkaller #0 PREEMPT(full) [ 341.051474][T10662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 341.051490][T10662] Call Trace: [ 341.051501][T10662] [ 341.051515][T10662] dump_stack_lvl+0x189/0x250 [ 341.051552][T10662] ? __pfx____ratelimit+0x10/0x10 [ 341.052174][T10662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.052213][T10662] ? __pfx__printk+0x10/0x10 [ 341.052246][T10662] ? __might_fault+0xb0/0x130 [ 341.052294][T10662] should_fail_ex+0x414/0x560 [ 341.052331][T10662] _copy_from_user+0x2d/0xb0 [ 341.052355][T10662] dev_ethtool+0xd0/0x19b0 [ 341.052383][T10662] ? __lock_acquire+0xab9/0xd20 [ 341.052425][T10662] ? __pfx_dev_ethtool+0x10/0x10 [ 341.052467][T10662] ? dev_load+0x21/0x1f0 [ 341.052494][T10662] ? dev_load+0x21/0x1f0 [ 341.052520][T10662] dev_ioctl+0x392/0x1150 [ 341.052550][T10662] sock_do_ioctl+0x22c/0x300 [ 341.052660][T10662] ? __pfx_sock_do_ioctl+0x10/0x10 [ 341.052694][T10662] ? __lock_acquire+0xab9/0xd20 [ 341.052750][T10662] sock_ioctl+0x576/0x790 [ 341.052825][T10662] ? __pfx_sock_ioctl+0x10/0x10 [ 341.052861][T10662] ? __fget_files+0x2a/0x420 [ 341.052883][T10662] ? __fget_files+0x3a0/0x420 [ 341.052904][T10662] ? __fget_files+0x2a/0x420 [ 341.052931][T10662] ? bpf_lsm_file_ioctl+0x9/0x20 [ 341.052963][T10662] ? __pfx_sock_ioctl+0x10/0x10 [ 341.052997][T10662] __se_sys_ioctl+0xfc/0x170 [ 341.053031][T10662] do_syscall_64+0xfa/0x3b0 [ 341.053058][T10662] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.053081][T10662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.053106][T10662] ? clear_bhb_loop+0x60/0xb0 [ 341.053135][T10662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.053158][T10662] RIP: 0033:0x7f3d2358eec9 [ 341.053183][T10662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.053204][T10662] RSP: 002b:00007f3d24390038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.053231][T10662] RAX: ffffffffffffffda RBX: 00007f3d237e5fa0 RCX: 00007f3d2358eec9 [ 341.053249][T10662] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 341.053265][T10662] RBP: 00007f3d24390090 R08: 0000000000000000 R09: 0000000000000000 [ 341.053281][T10662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.053294][T10662] R13: 00007f3d237e6038 R14: 00007f3d237e5fa0 R15: 00007fffbfb66ca8 [ 341.053516][T10662] [ 341.236193][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'. [ 341.425532][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 341.425665][ C0] lec:lec_tx_timeout: lec0 [ 341.438406][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 341.487711][T10658] syzkaller0: entered allmulticast mode [ 341.548870][T10667] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 341.714951][T10683] netlink: 'syz.1.1442': attribute type 8 has an invalid length. [ 341.766599][T10672] bridge0: port 3(batadv1) entered blocking state [ 341.798258][T10672] bridge0: port 3(batadv1) entered disabled state [ 341.846727][T10672] batadv1: entered allmulticast mode [ 341.887184][T10672] batadv1: entered promiscuous mode [ 342.253021][ T77] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 342.269074][ T77] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 342.312103][T10693] syzkaller0: entered promiscuous mode [ 342.322331][T10693] syzkaller0: entered allmulticast mode [ 342.603489][T10702] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1448'. [ 342.608083][T10699] tipc: Enabled bearer , priority 0 [ 342.676329][T10707] tipc: Resetting bearer [ 342.798830][T10696] tipc: Disabling bearer [ 342.800777][T10704] can: request_module (can-proto-5) failed. [ 343.044585][T10717] tipc: Enabled bearer , priority 0 [ 343.096188][T10717] tipc: Resetting bearer [ 343.115095][T10720] team0: Caught tx_queue_len zero misconfig [ 343.555795][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1456'. [ 343.655617][T10716] tipc: Disabling bearer [ 343.822374][T10734] tipc: Enabled bearer , priority 0 [ 343.931208][T10730] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 343.966874][T10740] netlink: zone id is out of range [ 343.998329][T10740] netlink: del zone limit has 4 unknown bytes [ 344.022674][T10730] tipc: Resetting bearer [ 344.316722][T10728] tipc: Disabling bearer [ 344.463863][T10763] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 344.560781][T10751] tipc: Enabling of bearer rejected, failed to enable media [ 344.631813][T10752] syzkaller0: entered promiscuous mode [ 344.670342][T10752] syzkaller0: entered allmulticast mode [ 345.024922][T10772] netlink: 'syz.0.1465': attribute type 9 has an invalid length. [ 345.075882][T10773] netlink: 'syz.0.1465': attribute type 9 has an invalid length. [ 345.228188][T10772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1465'. [ 345.645514][T10792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1471'. [ 345.701080][T10794] netlink: zone id is out of range [ 345.731010][T10794] netlink: del zone limit has 4 unknown bytes [ 346.295618][T10805] tipc: Enabled bearer , priority 0 [ 346.416282][T10805] tipc: Resetting bearer [ 346.447887][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 346.463163][ C0] lec:lec_tx_timeout: lec0 [ 346.469505][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 346.751793][T10798] tipc: Disabling bearer [ 346.910661][T10825] tipc: Enabling of bearer rejected, failed to enable media [ 346.956303][T10812] syzkaller0: entered promiscuous mode [ 346.970290][T10812] syzkaller0: entered allmulticast mode [ 346.995723][T10820] syzkaller0: entered promiscuous mode [ 347.007145][T10820] syzkaller0: entered allmulticast mode [ 347.183963][T10820] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 347.585613][T10844] FAULT_INJECTION: forcing a failure. [ 347.585613][T10844] name failslab, interval 1, probability 0, space 0, times 0 [ 347.638571][T10844] CPU: 0 UID: 0 PID: 10844 Comm: syz.4.1488 Not tainted syzkaller #0 PREEMPT(full) [ 347.638603][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 347.638617][T10844] Call Trace: [ 347.638626][T10844] [ 347.638635][T10844] dump_stack_lvl+0x189/0x250 [ 347.638667][T10844] ? __pfx____ratelimit+0x10/0x10 [ 347.638690][T10844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.638716][T10844] ? __pfx__printk+0x10/0x10 [ 347.638746][T10844] ? __pfx___might_resched+0x10/0x10 [ 347.638763][T10844] ? fs_reclaim_acquire+0x7d/0x100 [ 347.638785][T10844] should_fail_ex+0x414/0x560 [ 347.638830][T10844] should_failslab+0xa8/0x100 [ 347.638865][T10844] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 347.638906][T10844] ? page_pool_create_percpu+0x76/0xbe0 [ 347.638943][T10844] page_pool_create_percpu+0x76/0xbe0 [ 347.639062][T10844] __veth_napi_enable_range+0x16c/0x6f0 [ 347.639102][T10844] ? __pfx___veth_napi_enable_range+0x10/0x10 [ 347.639156][T10844] ? netif_napi_set_irq_locked+0x20b/0x720 [ 347.639184][T10844] veth_napi_enable_range+0xff/0x200 [ 347.639217][T10844] veth_set_features+0x1c8/0x2a0 [ 347.639243][T10844] __netdev_update_features+0xa43/0x1be0 [ 347.639273][T10844] ? __lock_acquire+0xab9/0xd20 [ 347.639323][T10844] ? __pfx___netdev_update_features+0x10/0x10 [ 347.639353][T10844] ? __lock_acquire+0xab9/0xd20 [ 347.639397][T10844] ? __might_fault+0xb0/0x130 [ 347.639454][T10844] ethtool_set_one_feature+0x2b4/0x300 [ 347.639488][T10844] ? __pfx_ethtool_set_one_feature+0x10/0x10 [ 347.639519][T10844] ? bpf_lsm_capable+0x9/0x20 [ 347.639548][T10844] ? security_capable+0x7e/0x2e0 [ 347.639596][T10844] dev_ethtool+0x108d/0x19b0 [ 347.639639][T10844] ? __pfx_dev_ethtool+0x10/0x10 [ 347.639687][T10844] ? dev_load+0x21/0x1f0 [ 347.639710][T10844] dev_ioctl+0x392/0x1150 [ 347.639757][T10844] sock_do_ioctl+0x22c/0x300 [ 347.639793][T10844] ? __pfx_sock_do_ioctl+0x10/0x10 [ 347.639822][T10844] ? __lock_acquire+0xab9/0xd20 [ 347.639867][T10844] sock_ioctl+0x576/0x790 [ 347.639900][T10844] ? __pfx_sock_ioctl+0x10/0x10 [ 347.639932][T10844] ? __fget_files+0x2a/0x420 [ 347.639950][T10844] ? __fget_files+0x3a0/0x420 [ 347.639968][T10844] ? __fget_files+0x2a/0x420 [ 347.640014][T10844] ? bpf_lsm_file_ioctl+0x9/0x20 [ 347.640041][T10844] ? __pfx_sock_ioctl+0x10/0x10 [ 347.640072][T10844] __se_sys_ioctl+0xfc/0x170 [ 347.641197][T10844] do_syscall_64+0xfa/0x3b0 [ 347.641221][T10844] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.641243][T10844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.641265][T10844] ? clear_bhb_loop+0x60/0xb0 [ 347.641300][T10844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.641326][T10844] RIP: 0033:0x7f93f498eec9 [ 347.641353][T10844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.641372][T10844] RSP: 002b:00007f93f2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.641394][T10844] RAX: ffffffffffffffda RBX: 00007f93f4be5fa0 RCX: 00007f93f498eec9 [ 347.641410][T10844] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 347.641424][T10844] RBP: 00007f93f2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.641438][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.641449][T10844] R13: 00007f93f4be6038 R14: 00007f93f4be5fa0 R15: 00007fffcd268f08 [ 347.641490][T10844] [ 347.644515][T10844] veth0_to_team: set_features() failed (-12); wanted 0x0000612e4fdd49e9, left 0x0000612e4fdd09e9 [ 347.908193][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1489'. [ 349.092690][T10875] tipc: Enabled bearer , priority 0 [ 349.193784][T10871] tipc: Resetting bearer [ 349.466276][T10869] tipc: Disabling bearer [ 349.526320][T10884] syzkaller0: entered promiscuous mode [ 349.548074][T10884] syzkaller0: entered allmulticast mode [ 349.922552][T10896] tipc: Enabling of bearer rejected, failed to enable media [ 350.001439][T10896] syzkaller0: entered promiscuous mode [ 350.062275][T10896] syzkaller0: entered allmulticast mode [ 350.133472][T10900] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 350.293803][T10910] netlink: 'syz.4.1504': attribute type 1 has an invalid length. [ 350.309560][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1504'. [ 350.769883][T10922] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 351.128037][T10922] bond3: entered promiscuous mode [ 351.164517][T10922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.393681][T10935] tipc: Enabled bearer , priority 0 [ 351.436828][T10935] syzkaller0: entered promiscuous mode [ 351.455017][T10935] syzkaller0: entered allmulticast mode [ 351.491702][T10939] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 351.507118][T10941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1514'. [ 351.741201][T10933] tipc: Resetting bearer [ 351.836204][T10933] tipc: Disabling bearer [ 352.102030][T10951] tipc: Enabling of bearer rejected, failed to enable media [ 352.131422][T10951] syzkaller0: entered promiscuous mode [ 352.141526][T10951] syzkaller0: entered allmulticast mode [ 352.155893][T10951] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 352.247489][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5770 ms [ 352.264061][ C0] lec:lec_tx_timeout: lec0 [ 352.271264][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 352.374390][T10957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1521'. [ 352.403319][T10957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1521'. [ 353.022437][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1528'. [ 353.236587][T10982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.866467][T10995] unknown channel width for channel at 909000KHz? [ 353.897796][T10995] unknown channel width for channel at 909000KHz? [ 353.926387][T10995] unknown channel width for channel at 909000KHz? [ 353.927023][T11004] tipc: Enabling of bearer rejected, failed to enable media [ 353.981080][T11004] syzkaller0: entered promiscuous mode [ 353.996364][T11004] syzkaller0: entered allmulticast mode [ 354.063870][T11004] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 354.621036][T11021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1541'. [ 354.976871][T11033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1546'. [ 355.147959][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1547'. [ 355.228963][T11037] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1547'. [ 355.282341][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1547'. [ 355.993063][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1551'. [ 356.019306][T11055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1554'. [ 356.051286][T11056] syzkaller0: entered promiscuous mode [ 356.067678][T11056] syzkaller0: entered allmulticast mode [ 356.127776][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1555'. [ 356.179037][T11060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1554'. [ 356.242375][T11055] veth5: entered promiscuous mode [ 356.337251][T11061] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 356.431756][T11063] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 356.625555][T11069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1558'. [ 357.288701][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 357.301313][ C0] lec:lec_tx_timeout: lec0 [ 357.310865][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 358.176317][T11095] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1564'. [ 358.652668][T11122] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 358.663344][T11120] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1569'. [ 358.772346][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1569'. [ 358.801293][T11120] veth5: entered promiscuous mode [ 358.896768][T11124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1571'. [ 358.935601][T11127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1572'. [ 359.063706][T11131] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 359.329728][T11144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.429110][T11148] netlink: 'syz.3.1575': attribute type 19 has an invalid length. [ 359.476962][T11148] netlink: 'syz.3.1575': attribute type 19 has an invalid length. [ 359.480539][T11136] syzkaller0: entered promiscuous mode [ 359.501111][T11136] syzkaller0: entered allmulticast mode [ 360.439346][T11168] veth9: entered promiscuous mode [ 360.501544][T11169] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 360.946910][T11187] syzkaller0: entered promiscuous mode [ 361.000064][T11187] syzkaller0: entered allmulticast mode [ 361.073857][T11189] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 361.266941][T11195] __nla_validate_parse: 10 callbacks suppressed [ 361.266964][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 361.641887][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 361.954661][T11213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1602'. [ 362.135061][T11213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1602'. [ 362.190580][T11216] veth5: entered promiscuous mode [ 362.327617][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 362.341959][ C0] lec:lec_tx_timeout: lec0 [ 362.347966][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 362.633417][T11228] netlink: 'syz.0.1607': attribute type 21 has an invalid length. [ 362.853702][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1611'. [ 363.380029][T11251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1616'. [ 363.569427][T11261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1616'. [ 363.619026][T11256] veth5: entered promiscuous mode [ 363.866712][T11262] unknown channel width for channel at 909000KHz? [ 363.928057][ T5888] Bluetooth: hci4: command 0x0406 tx timeout [ 364.147663][T11265] syzkaller0: entered promiscuous mode [ 364.183163][T11265] syzkaller0: entered allmulticast mode [ 364.591223][T11286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1625'. [ 364.623909][T11286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1625'. [ 364.805157][T11289] syzkaller0: entered allmulticast mode [ 365.043125][T11299] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 365.214985][T11303] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 365.291727][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 365.353034][T11304] netlink: 'syz.1.1633': attribute type 11 has an invalid length. [ 365.386154][T11306] veth5: entered promiscuous mode [ 365.832281][T11319] syzkaller0: entered promiscuous mode [ 365.850820][T11319] syzkaller0: entered allmulticast mode [ 365.871404][T11320] tipc: Enabled bearer , priority 0 [ 365.917933][T11320] syzkaller0: entered promiscuous mode [ 365.926212][T11320] syzkaller0: entered allmulticast mode [ 366.068260][T11328] tipc: Resetting bearer [ 366.109712][T11318] tipc: Resetting bearer [ 366.213910][T11318] tipc: Disabling bearer [ 366.365948][T11330] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.450063][T11341] netlink: 'syz.1.1647': attribute type 32 has an invalid length. [ 366.465237][T11341] __nla_validate_parse: 3 callbacks suppressed [ 366.465256][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 366.750800][T11330] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.847229][T11341] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 367.004738][T11345] lo: Caught tx_queue_len zero misconfig [ 367.252730][T11330] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.271969][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 367.358113][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 367.375123][ C0] lec:lec_tx_timeout: lec0 [ 367.384076][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 367.494196][T11330] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.510902][T11369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1652'. [ 367.652457][T11367] veth5: entered promiscuous mode [ 367.694391][T11372] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 367.965177][ T77] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.192570][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.206933][T11380] tipc: Enabled bearer , priority 0 [ 368.238816][T11376] syzkaller0: entered promiscuous mode [ 368.250060][T11376] syzkaller0: entered allmulticast mode [ 368.271577][T11377] syzkaller0: entered promiscuous mode [ 368.285986][T11377] syzkaller0: entered allmulticast mode [ 368.359377][T11376] tipc: Resetting bearer [ 368.398727][ T77] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.421237][T11375] tipc: Resetting bearer [ 368.463866][T11375] tipc: Disabling bearer [ 368.522720][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.952937][T11395] lo: Caught tx_queue_len zero misconfig [ 369.018907][T11392] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1662'. [ 369.191087][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 369.250064][T11404] netlink: 'syz.3.1668': attribute type 12 has an invalid length. [ 369.281670][T11392] veth0_macvtap: left promiscuous mode [ 369.328495][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 369.504263][T11404] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 369.798281][T11418] tipc: Enabled bearer , priority 0 [ 369.854497][T11418] syzkaller0: entered promiscuous mode [ 369.891312][T11418] syzkaller0: entered allmulticast mode [ 369.955748][T11418] tipc: Resetting bearer [ 370.001391][T11423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1671'. [ 370.033734][T11417] tipc: Resetting bearer [ 370.142820][T11417] tipc: Disabling bearer [ 370.265426][T11434] netlink: 'syz.0.1676': attribute type 3 has an invalid length. [ 370.312427][T11434] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1676'. [ 370.526608][T11439] tipc: Enabled bearer , priority 0 [ 370.562044][T11439] syzkaller0: entered promiscuous mode [ 370.578420][T11439] syzkaller0: entered allmulticast mode [ 370.644175][T11448] lo speed is unknown, defaulting to 1000 [ 370.773326][T11448] lo speed is unknown, defaulting to 1000 [ 370.810321][T11437] tipc: Resetting bearer [ 370.898661][T11454] blkio.reset_stats is deprecated [ 370.982468][T11437] tipc: Disabling bearer [ 371.045354][T11448] lo speed is unknown, defaulting to 1000 [ 371.085470][T11448] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 371.290236][T11448] lo speed is unknown, defaulting to 1000 [ 371.351891][T11448] lo speed is unknown, defaulting to 1000 [ 371.412358][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 371.567559][T11448] lo speed is unknown, defaulting to 1000 [ 371.641292][T11448] lo speed is unknown, defaulting to 1000 [ 371.651572][T11448] lo speed is unknown, defaulting to 1000 [ 371.992490][T11473] tipc: Enabled bearer , priority 0 [ 372.040987][T11473] syzkaller0: entered promiscuous mode [ 372.073694][T11483] netlink: 'syz.4.1691': attribute type 39 has an invalid length. [ 372.108993][T11473] syzkaller0: entered allmulticast mode [ 372.357075][T11489] tipc: Resetting bearer [ 372.407609][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 372.426640][ C0] lec:lec_tx_timeout: lec0 [ 372.437326][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 372.438531][T11472] tipc: Resetting bearer [ 372.608980][T11472] tipc: Disabling bearer [ 372.688939][T11495] syzkaller0: entered promiscuous mode [ 372.701105][T11495] syzkaller0: entered allmulticast mode [ 372.732734][T11495] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 372.799913][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 373.434756][T11515] syzkaller0: entered promiscuous mode [ 373.463471][T11515] syzkaller0: entered allmulticast mode [ 373.724643][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 373.858640][T11521] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1706'. [ 373.908912][T11525] syzkaller0: entered promiscuous mode [ 373.972580][T11525] syzkaller0: entered allmulticast mode [ 374.067299][T11525] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 374.144427][T11539] netlink: del zone limit has 4 unknown bytes [ 374.476494][T11546] netlink: 'syz.2.1716': attribute type 1 has an invalid length. [ 374.708985][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1720'. [ 374.720912][T11546] 8021q: adding VLAN 0 to HW filter on device bond5 [ 374.765077][T11556] FAULT_INJECTION: forcing a failure. [ 374.765077][T11556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.856912][T11556] CPU: 0 UID: 0 PID: 11556 Comm: syz.3.1720 Not tainted syzkaller #0 PREEMPT(full) [ 374.856943][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.856960][T11556] Call Trace: [ 374.856970][T11556] [ 374.856980][T11556] dump_stack_lvl+0x189/0x250 [ 374.857010][T11556] ? __pfx____ratelimit+0x10/0x10 [ 374.857033][T11556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.857058][T11556] ? __pfx__printk+0x10/0x10 [ 374.857101][T11556] should_fail_ex+0x414/0x560 [ 374.857136][T11556] _copy_to_user+0x31/0xb0 [ 374.857167][T11556] simple_read_from_buffer+0xe1/0x170 [ 374.857204][T11556] proc_fail_nth_read+0x1b3/0x220 [ 374.857232][T11556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.857259][T11556] ? rw_verify_area+0x2a6/0x4d0 [ 374.857283][T11556] ? __lock_acquire+0xab9/0xd20 [ 374.857327][T11556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 374.857352][T11556] vfs_read+0x200/0xa30 [ 374.857378][T11556] ? fdget_pos+0x247/0x320 [ 374.857402][T11556] ? __pfx___mutex_lock+0x10/0x10 [ 374.857591][T11556] ? __pfx_vfs_read+0x10/0x10 [ 374.857619][T11556] ? __fget_files+0x2a/0x420 [ 374.857643][T11556] ? __fget_files+0x3a0/0x420 [ 374.857690][T11556] ? __fget_files+0x2a/0x420 [ 374.857719][T11556] ksys_read+0x145/0x250 [ 374.857750][T11556] ? __pfx_ksys_read+0x10/0x10 [ 374.857774][T11556] ? rcu_is_watching+0x15/0xb0 [ 374.857799][T11556] ? do_syscall_64+0xbe/0x3b0 [ 374.857826][T11556] do_syscall_64+0xfa/0x3b0 [ 374.857847][T11556] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.857868][T11556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.857888][T11556] ? clear_bhb_loop+0x60/0xb0 [ 374.857913][T11556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.857941][T11556] RIP: 0033:0x7facf298d8dc [ 374.857961][T11556] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 374.857979][T11556] RSP: 002b:00007facf38bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 374.858001][T11556] RAX: ffffffffffffffda RBX: 00007facf2be5fa0 RCX: 00007facf298d8dc [ 374.858015][T11556] RDX: 000000000000000f RSI: 00007facf38bb0a0 RDI: 0000000000000004 [ 374.858027][T11556] RBP: 00007facf38bb090 R08: 0000000000000000 R09: 0000000000000000 [ 374.858038][T11556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.858050][T11556] R13: 00007facf2be6038 R14: 00007facf2be5fa0 R15: 00007fff31f8c418 [ 374.858082][T11556] [ 375.399831][ T5883] Bluetooth: hci4: command 0x0406 tx timeout [ 375.519454][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1721'. [ 375.526748][T11545] bond5: (slave gretap1): making interface the new active one [ 375.565128][T11545] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 375.610086][T11549] vlan1: entered allmulticast mode [ 375.624724][T11549] bond5: entered allmulticast mode [ 375.638544][T11549] gretap1: entered allmulticast mode [ 375.653675][T11549] bond5: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 376.250700][T11577] netlink: del zone limit has 4 unknown bytes [ 376.319914][T11567] syzkaller0: entered promiscuous mode [ 376.380434][T11567] syzkaller0: entered allmulticast mode [ 376.497631][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1729'. [ 376.551244][T11586] syzkaller0: entered promiscuous mode [ 376.577711][T11586] syzkaller0: entered allmulticast mode [ 376.622779][T11592] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1731'. [ 376.645246][T11586] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 377.096005][T11597] syzkaller0: entered promiscuous mode [ 377.146044][T11597] syzkaller0: entered allmulticast mode [ 377.447918][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 377.455360][ T5883] Bluetooth: hci4: command 0x0406 tx timeout [ 377.470845][ C0] lec:lec_tx_timeout: lec0 [ 377.471167][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 377.689366][T11618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1738'. [ 377.739900][T11618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1738'. [ 377.830763][T11623] netlink: del zone limit has 4 unknown bytes [ 378.342971][T11640] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1745'. [ 378.395076][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.408953][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.303617][T11624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.427789][T11624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.932149][T11633] ip6tnl0: Caught tx_queue_len zero misconfig [ 380.162145][T11640] bond0 (unregistering): Released all slaves [ 380.236571][T11649] syzkaller0: entered promiscuous mode [ 380.264006][T11649] syzkaller0: entered allmulticast mode [ 380.283358][T11650] syzkaller0: entered promiscuous mode [ 380.297143][T11650] syzkaller0: entered allmulticast mode [ 380.371175][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.402018][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.678035][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.730166][T11693] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 380.782032][T11677] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.043054][T11702] netlink: 'syz.2.1751': attribute type 10 has an invalid length. [ 381.106495][T11705] netlink: 'syz.2.1751': attribute type 10 has an invalid length. [ 381.142064][T11708] netlink: del zone limit has 4 unknown bytes [ 381.170069][T11702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.212906][T11705] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1751'. [ 381.251972][T11702] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 381.295182][T11699] netlink: 'syz.1.1752': attribute type 10 has an invalid length. [ 381.359512][T11705] batadv0: entered promiscuous mode [ 381.414846][T11705] batadv0: entered allmulticast mode [ 381.468902][T11705] bond0: (slave batadv0): Releasing backup interface [ 381.519325][T11705] bridge0: port 3(batadv0) entered blocking state [ 381.555902][T11705] bridge0: port 3(batadv0) entered disabled state [ 381.628813][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 381.641392][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 381.785370][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1751'. [ 382.325476][T11734] syzkaller0: entered promiscuous mode [ 382.360391][T11734] syzkaller0: entered allmulticast mode [ 382.424999][T11737] tipc: Enabled bearer , priority 0 [ 382.468575][T11741] tipc: Enabled bearer , priority 0 [ 382.483891][T11737] syzkaller0: entered promiscuous mode [ 382.501557][T11737] syzkaller0: entered allmulticast mode [ 382.517098][T11742] syzkaller0: entered promiscuous mode [ 382.528010][T11742] syzkaller0: entered allmulticast mode [ 382.644834][T11741] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 382.813261][T11746] tipc: Resetting bearer [ 382.836047][T11736] tipc: Resetting bearer [ 382.853573][T11751] netlink: zone id is out of range [ 382.878042][T11751] netlink: del zone limit has 4 unknown bytes [ 382.927293][T11736] tipc: Disabling bearer [ 383.002448][T11741] tipc: Resetting bearer [ 383.090795][T11753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1768'. [ 383.115132][T11739] tipc: Disabling bearer [ 383.153512][T11759] netlink: 'syz.3.1767': attribute type 10 has an invalid length. [ 383.227400][T11761] netlink: 'syz.0.1769': attribute type 7 has an invalid length. [ 383.287483][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 383.305394][ C0] lec:lec_tx_timeout: lec0 [ 383.315362][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 383.611245][T11776] openvswitch: netlink: Missing key (keys=40, expected=100) [ 384.104460][T11791] netlink: zone id is out of range [ 384.120373][T11791] netlink: del zone limit has 4 unknown bytes [ 384.191798][T11793] tipc: Enabled bearer , priority 0 [ 384.229172][T11793] syzkaller0: entered promiscuous mode [ 384.235857][T11793] syzkaller0: entered allmulticast mode [ 384.437285][T11790] tipc: Resetting bearer [ 384.537362][T11790] tipc: Disabling bearer [ 384.684663][T11807] tipc: Enabling of bearer rejected, failed to enable media [ 384.709645][T11810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1787'. [ 384.768368][T11814] syzkaller0: entered promiscuous mode [ 384.826400][T11814] syzkaller0: entered allmulticast mode [ 385.163227][T11677] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 385.288543][T11817] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1789'. [ 385.387170][T11833] gre1: entered promiscuous mode [ 385.463182][T11833] gre1: entered allmulticast mode [ 385.538608][T11840] netlink: 'syz.0.1795': attribute type 1 has an invalid length. [ 385.563191][T11837] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1794'. [ 385.577371][T11840] netlink: 'syz.0.1795': attribute type 3 has an invalid length. [ 385.637936][T11840] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1795'. [ 385.742241][T11846] netlink: 'syz.0.1795': attribute type 10 has an invalid length. [ 385.754573][T11840] NCSI netlink: No device for ifindex 813332851 [ 385.808790][T11846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1795'. [ 385.932830][T11846] dummy0: entered promiscuous mode [ 386.004257][T11846] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 386.229697][T11858] tipc: Enabled bearer , priority 0 [ 386.266998][T11858] syzkaller0: entered promiscuous mode [ 386.277141][T11858] syzkaller0: entered allmulticast mode [ 386.448041][T11857] tipc: Resetting bearer [ 386.635202][T11857] tipc: Disabling bearer [ 386.721012][T11863] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1802'. [ 386.766454][T11865] bridge_slave_0: left allmulticast mode [ 386.795189][T11865] bridge_slave_0: left promiscuous mode [ 386.832098][T11865] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.883816][T11865] bridge_slave_1: left allmulticast mode [ 386.922014][T11865] bridge_slave_1: left promiscuous mode [ 386.931994][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.953893][T11865] bond0: (slave bond_slave_0): Releasing backup interface [ 386.992954][T11865] bond0: (slave bond_slave_1): Releasing backup interface [ 387.011992][T11865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.028956][T11865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.050222][T11865] bond1: (slave ip6gretap1): Releasing backup interface [ 387.061346][T11865] bond1: (slave ip6gretap1): the permanent HWaddr of slave - a6:d6:2f:31:1e:74 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 387.098818][T11865] bond1: (slave veth3): Releasing backup interface [ 387.136246][T11882] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 387.506392][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1806'. [ 387.519324][T11887] tipc: Enabling of bearer rejected, failed to enable media [ 387.593986][T11896] tipc: Enabling of bearer rejected, failed to enable media [ 387.673482][T11898] syzkaller0: entered promiscuous mode [ 387.705912][T11898] syzkaller0: entered allmulticast mode [ 387.865173][T11905] netlink: 'syz.2.1810': attribute type 1 has an invalid length. [ 387.985655][T11905] netlink: 'syz.2.1810': attribute type 1 has an invalid length. [ 387.990573][T11912] netlink: 'syz.0.1812': attribute type 4 has an invalid length. [ 388.051568][T11917] netlink: 'syz.4.1811': attribute type 4 has an invalid length. [ 388.121296][T11920] netlink: 'syz.4.1811': attribute type 4 has an invalid length. [ 388.147962][T11918] netlink: 'syz.0.1812': attribute type 4 has an invalid length. [ 388.156342][T11905] netlink: 'syz.2.1810': attribute type 1 has an invalid length. [ 388.248737][T11905] netlink: 'syz.2.1810': attribute type 2 has an invalid length. [ 388.321335][T11905] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1810'. [ 388.327587][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 388.360324][ C0] lec:lec_tx_timeout: lec0 [ 388.373129][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 388.552411][ T5951] lo speed is unknown, defaulting to 1000 [ 388.587064][T11631] lo speed is unknown, defaulting to 1000 [ 388.682059][ T3498] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 388.809633][ T3498] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 388.858448][ T3498] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 388.990756][T11929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1814'. [ 389.028019][ T3498] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 389.141214][T11931] tipc: Enabled bearer , priority 0 [ 389.168720][T11936] netlink: 'syz.0.1816': attribute type 1 has an invalid length. [ 389.168901][T11931] syzkaller0: entered promiscuous mode [ 389.228994][T11931] syzkaller0: entered allmulticast mode [ 389.291618][T11941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1816'. [ 389.378015][T11938] veth5: entered promiscuous mode [ 389.398786][T11938] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 389.459045][T11944] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 389.490580][T11941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.620705][T11930] tipc: Resetting bearer [ 389.721959][T11953] __nla_validate_parse: 1 callbacks suppressed [ 389.721979][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1821'. [ 389.788784][T11930] tipc: Disabling bearer [ 389.836248][T11951] veth1_macvtap: left promiscuous mode [ 390.024875][T11958] tipc: Enabling of bearer rejected, failed to enable media [ 390.162575][T11962] netlink: 'syz.2.1826': attribute type 2 has an invalid length. [ 390.324770][T11968] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 390.620004][T11978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1829'. [ 390.933665][T11982] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1830'. [ 390.985104][T11986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1830'. [ 391.009951][T11985] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1831'. [ 391.534728][T12000] tipc: Enabled bearer , priority 0 [ 391.556554][T12000] syzkaller0: entered promiscuous mode [ 391.565567][T12000] syzkaller0: entered allmulticast mode [ 391.649780][T12000] tipc: Resetting bearer [ 391.768681][T11999] tipc: Resetting bearer [ 391.802961][T11999] tipc: Disabling bearer [ 392.053191][T12024] syzkaller0: entered promiscuous mode [ 392.064580][T12024] syzkaller0: entered allmulticast mode [ 392.119738][T12013] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.348330][T12029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1842'. [ 392.658541][T12033] tipc: Enabling of bearer rejected, failed to enable media [ 392.723623][T12033] syzkaller0: entered promiscuous mode [ 392.787811][T12033] syzkaller0: entered allmulticast mode [ 392.906151][T12043] wireguard: wg2: Could not create IPv4 socket [ 393.235546][T12052] netlink: 'syz.1.1849': attribute type 1 has an invalid length. [ 393.273624][T12052] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1849'. [ 393.387477][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 393.407146][ C0] lec:lec_tx_timeout: lec0 [ 393.791597][T12068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1853'. [ 394.116342][T12082] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 394.165243][T12082] netlink: 'syz.1.1859': attribute type 1 has an invalid length. [ 394.285041][T12085] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1860'. [ 394.323645][T12089] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1863'. [ 394.351528][T12082] veth5: entered promiscuous mode [ 394.403525][T12089] netlink: 'syz.0.1863': attribute type 1 has an invalid length. [ 394.523135][T12098] FAULT_INJECTION: forcing a failure. [ 394.523135][T12098] name failslab, interval 1, probability 0, space 0, times 0 [ 394.569449][T12098] CPU: 0 UID: 0 PID: 12098 Comm: syz.2.1864 Not tainted syzkaller #0 PREEMPT(full) [ 394.569479][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.569493][T12098] Call Trace: [ 394.569501][T12098] [ 394.569510][T12098] dump_stack_lvl+0x189/0x250 [ 394.569540][T12098] ? __pfx____ratelimit+0x10/0x10 [ 394.569561][T12098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.569583][T12098] ? __pfx__printk+0x10/0x10 [ 394.569612][T12098] ? __pfx___might_resched+0x10/0x10 [ 394.569630][T12098] ? fs_reclaim_acquire+0x7d/0x100 [ 394.569654][T12098] should_fail_ex+0x414/0x560 [ 394.569692][T12098] should_failslab+0xa8/0x100 [ 394.569723][T12098] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 394.569753][T12098] ? __alloc_skb+0x112/0x2d0 [ 394.569781][T12098] __alloc_skb+0x112/0x2d0 [ 394.570141][T12098] alloc_skb_with_frags+0xca/0x890 [ 394.570205][T12098] sock_alloc_send_pskb+0x857/0x990 [ 394.570258][T12098] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 394.570294][T12098] ? dev_get_by_index+0x22/0x2e0 [ 394.570324][T12098] ? dev_get_by_index+0x22/0x2e0 [ 394.570362][T12098] packet_sendmsg+0x33a0/0x5080 [ 394.570403][T12098] ? aa_label_strn_parse+0xb00/0x1090 [ 394.570461][T12098] ? __pfx___might_resched+0x10/0x10 [ 394.570480][T12098] ? __lock_acquire+0xab9/0xd20 [ 394.570529][T12098] ? __pfx_packet_sendmsg+0x10/0x10 [ 394.570555][T12098] ? aa_sk_perm+0x81e/0x950 [ 394.570589][T12098] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 394.570615][T12098] ? __lock_acquire+0xab9/0xd20 [ 394.570712][T12098] ? aa_sock_msg_perm+0xf1/0x1d0 [ 394.570735][T12098] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.570758][T12098] ? __pfx_packet_sendmsg+0x10/0x10 [ 394.570786][T12098] __sock_sendmsg+0x219/0x270 [ 394.570898][T12098] ____sys_sendmsg+0x505/0x830 [ 394.570932][T12098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.570970][T12098] ? import_iovec+0x74/0xa0 [ 394.571002][T12098] ___sys_sendmsg+0x21f/0x2a0 [ 394.571055][T12098] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.571126][T12098] ? __fget_files+0x2a/0x420 [ 394.571144][T12098] ? __fget_files+0x3a0/0x420 [ 394.571176][T12098] __x64_sys_sendmsg+0x19b/0x260 [ 394.571206][T12098] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.571245][T12098] ? __pfx_ksys_write+0x10/0x10 [ 394.571270][T12098] ? rcu_is_watching+0x15/0xb0 [ 394.571297][T12098] ? do_syscall_64+0xbe/0x3b0 [ 394.571325][T12098] do_syscall_64+0xfa/0x3b0 [ 394.571347][T12098] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.571368][T12098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.571389][T12098] ? clear_bhb_loop+0x60/0xb0 [ 394.571415][T12098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.571435][T12098] RIP: 0033:0x7f807838eec9 [ 394.571455][T12098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.571473][T12098] RSP: 002b:00007f80792e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.571495][T12098] RAX: ffffffffffffffda RBX: 00007f80785e5fa0 RCX: 00007f807838eec9 [ 394.571511][T12098] RDX: 0000000024004010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 394.571524][T12098] RBP: 00007f80792e1090 R08: 0000000000000000 R09: 0000000000000000 [ 394.571537][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.571549][T12098] R13: 00007f80785e6038 R14: 00007f80785e5fa0 R15: 00007ffce474e948 [ 394.571739][T12098] [ 394.650397][T12089] 8021q: adding VLAN 0 to HW filter on device bond3 [ 395.233333][T12093] tipc: Enabling of bearer rejected, failed to enable media [ 395.294906][T12099] syzkaller0: entered promiscuous mode [ 395.325387][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'. [ 395.344908][T12099] syzkaller0: entered allmulticast mode [ 396.597758][T12145] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1878'. [ 396.956003][T12155] tipc: Enabling of bearer rejected, failed to enable media [ 396.989126][T12155] syzkaller0: entered promiscuous mode [ 397.010710][T12155] syzkaller0: entered allmulticast mode [ 397.487869][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 397.547618][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 397.629356][T12175] syzkaller0: entered promiscuous mode [ 397.674147][T12175] syzkaller0: entered allmulticast mode [ 397.994621][T12178] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1891'. [ 398.019190][T12178] NCSI netlink: No device for ifindex 0 [ 398.272783][T12193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1896'. [ 398.332660][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1895'. [ 398.419145][T12201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1895'. [ 398.433851][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1896'. [ 398.468989][T12201] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1895'. [ 398.640932][T12208] tipc: Enabling of bearer rejected, failed to enable media [ 398.714376][T12209] syzkaller0: entered promiscuous mode [ 398.772939][T12209] syzkaller0: entered allmulticast mode [ 399.035905][T12217] netlink: 'syz.0.1902': attribute type 4 has an invalid length. [ 399.798988][T12237] syzkaller0: entered promiscuous mode [ 399.807837][T12237] syzkaller0: entered allmulticast mode [ 400.356117][T12250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.383501][T12253] __nla_validate_parse: 6 callbacks suppressed [ 400.383528][T12253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1913'. [ 400.477881][T12250] netlink: 'syz.3.1912': attribute type 1 has an invalid length. [ 400.488119][T12253] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1913'. [ 400.504959][T12252] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1914'. [ 400.547697][T12252] netlink: 'syz.0.1914': attribute type 1 has an invalid length. [ 400.668846][T12261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1915'. [ 400.824438][T12265] netlink: 'syz.2.1916': attribute type 8 has an invalid length. [ 400.851616][T12265] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1916'. [ 400.903790][T12268] netlink: 'syz.3.1917': attribute type 1 has an invalid length. [ 400.916661][T12259] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.940744][T12259] bond4: (slave bond5): making interface the new active one [ 400.960827][T12259] bond4: (slave bond5): Enslaving as an active interface with an up link [ 401.152775][T12268] bond0: entered promiscuous mode [ 401.181162][T12268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.410384][T12283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1921'. [ 401.498006][T12285] Bluetooth: MGMT ver 1.23 [ 401.542003][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1920'. [ 401.595474][T12285] netlink: 'syz.1.1920': attribute type 9 has an invalid length. [ 401.828119][T12291] syzkaller0: entered promiscuous mode [ 401.927719][T12291] syzkaller0: entered allmulticast mode [ 402.329060][T12308] 8021q: VLANs not supported on ip6_vti0 [ 402.350090][T12315] netlink: 'syz.1.1929': attribute type 8 has an invalid length. [ 402.369184][T12315] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1929'. [ 402.675366][T12321] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 402.796129][T12323] syzkaller0: entered promiscuous mode [ 402.802740][T12323] syzkaller0: entered allmulticast mode [ 402.943468][T12331] dummy0: Caught tx_queue_len zero misconfig [ 403.092207][T12336] FAULT_INJECTION: forcing a failure. [ 403.092207][T12336] name failslab, interval 1, probability 0, space 0, times 0 [ 403.186794][T12336] CPU: 0 UID: 0 PID: 12336 Comm: syz.4.1937 Not tainted syzkaller #0 PREEMPT(full) [ 403.186827][T12336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.186842][T12336] Call Trace: [ 403.186853][T12336] [ 403.186864][T12336] dump_stack_lvl+0x189/0x250 [ 403.186897][T12336] ? __pfx____ratelimit+0x10/0x10 [ 403.186921][T12336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.186945][T12336] ? __pfx__printk+0x10/0x10 [ 403.186981][T12336] ? __pfx___might_resched+0x10/0x10 [ 403.187000][T12336] ? fs_reclaim_acquire+0x7d/0x100 [ 403.187026][T12336] should_fail_ex+0x414/0x560 [ 403.187067][T12336] should_failslab+0xa8/0x100 [ 403.187103][T12336] __kmalloc_noprof+0xcb/0x4f0 [ 403.187131][T12336] ? kfree+0x4d/0x440 [ 403.187156][T12336] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 403.187186][T12336] tomoyo_realpath_from_path+0xe3/0x5d0 [ 403.187214][T12336] ? tomoyo_domain+0xd9/0x130 [ 403.187246][T12336] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 403.187280][T12336] tomoyo_path_number_perm+0x1e8/0x5a0 [ 403.187316][T12336] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 403.187372][T12336] ? __lock_acquire+0xab9/0xd20 [ 403.187435][T12336] ? __fget_files+0x2a/0x420 [ 403.187460][T12336] ? __fget_files+0x2a/0x420 [ 403.187479][T12336] ? __fget_files+0x3a0/0x420 [ 403.187498][T12336] ? __fget_files+0x2a/0x420 [ 403.187524][T12336] security_file_ioctl+0xcb/0x2d0 [ 403.187558][T12336] __se_sys_ioctl+0x47/0x170 [ 403.187591][T12336] do_syscall_64+0xfa/0x3b0 [ 403.187616][T12336] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.187639][T12336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.187662][T12336] ? clear_bhb_loop+0x60/0xb0 [ 403.187691][T12336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.187713][T12336] RIP: 0033:0x7f93f498eec9 [ 403.187734][T12336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.187754][T12336] RSP: 002b:00007f93f2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.187778][T12336] RAX: ffffffffffffffda RBX: 00007f93f4be5fa0 RCX: 00007f93f498eec9 [ 403.187807][T12336] RDX: 00002000000000c0 RSI: 0000000000008b05 RDI: 0000000000000003 [ 403.187822][T12336] RBP: 00007f93f2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 403.187836][T12336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.187850][T12336] R13: 00007f93f4be6038 R14: 00007f93f4be5fa0 R15: 00007fffcd268f08 [ 403.187888][T12336] [ 403.608406][T12336] ERROR: Out of memory at tomoyo_realpath_from_path. [ 403.865721][T12340] syzkaller1: entered promiscuous mode [ 403.904693][T12340] syzkaller1: entered allmulticast mode [ 404.065840][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'. [ 404.331801][T12361] netlink: 'syz.3.1943': attribute type 83 has an invalid length. [ 404.553578][T12368] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 405.158727][T12382] syzkaller0: entered promiscuous mode [ 405.219590][T12382] syzkaller0: entered allmulticast mode [ 405.468337][T12392] IPVS: length: 164 != 8 [ 405.709882][T12397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1956'. [ 405.912498][T12402] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1958'. [ 405.969968][T12406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.012743][T12408] netlink: 'syz.1.1961': attribute type 1 has an invalid length. [ 406.077537][T12408] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1961'. [ 406.272148][T12413] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1962'. [ 406.441456][T12415] netlink: 'syz.4.1963': attribute type 39 has an invalid length. [ 406.566298][T12415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1963'. [ 406.728430][T12423] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 406.757153][T12423] netlink: 'syz.0.1966': attribute type 7 has an invalid length. [ 406.773742][T12423] netlink: 'syz.0.1966': attribute type 8 has an invalid length. [ 406.848359][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 407.271883][T12433] syzkaller0: entered promiscuous mode [ 407.302304][T12434] FAULT_INJECTION: forcing a failure. [ 407.302304][T12434] name failslab, interval 1, probability 0, space 0, times 0 [ 407.321064][T12433] syzkaller0: entered allmulticast mode [ 407.331904][T12434] CPU: 1 UID: 0 PID: 12434 Comm: syz.2.1970 Not tainted syzkaller #0 PREEMPT(full) [ 407.331933][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.331946][T12434] Call Trace: [ 407.331954][T12434] [ 407.331964][T12434] dump_stack_lvl+0x189/0x250 [ 407.331994][T12434] ? __pfx____ratelimit+0x10/0x10 [ 407.332017][T12434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.332040][T12434] ? __pfx__printk+0x10/0x10 [ 407.332065][T12434] ? __lock_acquire+0xab9/0xd20 [ 407.332098][T12434] should_fail_ex+0x414/0x560 [ 407.332128][T12434] should_failslab+0xa8/0x100 [ 407.332167][T12434] kmem_cache_alloc_noprof+0x73/0x3c0 [ 407.332190][T12434] ? skb_clone+0x212/0x3a0 [ 407.332216][T12434] skb_clone+0x212/0x3a0 [ 407.332241][T12434] __netlink_deliver_tap+0x404/0x850 [ 407.332271][T12434] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.332290][T12434] netlink_deliver_tap+0x19c/0x1b0 [ 407.332309][T12434] netlink_unicast+0x7fa/0x9e0 [ 407.332342][T12434] ? __pfx_netlink_unicast+0x10/0x10 [ 407.332370][T12434] ? netlink_sendmsg+0x642/0xb30 [ 407.332385][T12434] ? skb_put+0x11b/0x210 [ 407.332408][T12434] netlink_sendmsg+0x805/0xb30 [ 407.332443][T12434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.332464][T12434] ? aa_sock_msg_perm+0xf1/0x1d0 [ 407.332483][T12434] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.332501][T12434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.332520][T12434] __sock_sendmsg+0x219/0x270 [ 407.332549][T12434] ____sys_sendmsg+0x505/0x830 [ 407.332575][T12434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.332604][T12434] ? import_iovec+0x74/0xa0 [ 407.332629][T12434] ___sys_sendmsg+0x21f/0x2a0 [ 407.332653][T12434] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.332708][T12434] ? __fget_files+0x2a/0x420 [ 407.332723][T12434] ? __fget_files+0x3a0/0x420 [ 407.332749][T12434] __x64_sys_sendmsg+0x19b/0x260 [ 407.332774][T12434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.332805][T12434] ? __pfx_ksys_write+0x10/0x10 [ 407.332833][T12434] ? do_syscall_64+0xbe/0x3b0 [ 407.332855][T12434] do_syscall_64+0xfa/0x3b0 [ 407.332872][T12434] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.332888][T12434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.332904][T12434] ? clear_bhb_loop+0x60/0xb0 [ 407.332925][T12434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.332940][T12434] RIP: 0033:0x7f807838eec9 [ 407.332956][T12434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.332971][T12434] RSP: 002b:00007f80792e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.332988][T12434] RAX: ffffffffffffffda RBX: 00007f80785e5fa0 RCX: 00007f807838eec9 [ 407.333000][T12434] RDX: 0000000004040004 RSI: 0000200000000000 RDI: 0000000000000003 [ 407.333011][T12434] RBP: 00007f80792e1090 R08: 0000000000000000 R09: 0000000000000000 [ 407.333021][T12434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.333031][T12434] R13: 00007f80785e6038 R14: 00007f80785e5fa0 R15: 00007ffce474e948 [ 407.333060][T12434] [ 407.916457][T12434] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 408.282323][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'. [ 409.532510][T12481] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 409.567648][T12481] FAULT_INJECTION: forcing a failure. [ 409.567648][T12481] name failslab, interval 1, probability 0, space 0, times 0 [ 409.650351][T12481] CPU: 0 UID: 0 PID: 12481 Comm: syz.0.1986 Not tainted syzkaller #0 PREEMPT(full) [ 409.650382][T12481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 409.650402][T12481] Call Trace: [ 409.650411][T12481] [ 409.650420][T12481] dump_stack_lvl+0x189/0x250 [ 409.650452][T12481] ? __pfx____ratelimit+0x10/0x10 [ 409.650472][T12481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.650497][T12481] ? __pfx__printk+0x10/0x10 [ 409.650533][T12481] ? __pfx___might_resched+0x10/0x10 [ 409.650552][T12481] ? fs_reclaim_acquire+0x7d/0x100 [ 409.650578][T12481] should_fail_ex+0x414/0x560 [ 409.650623][T12481] should_failslab+0xa8/0x100 [ 409.650656][T12481] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 409.650686][T12481] ? __alloc_skb+0x112/0x2d0 [ 409.650715][T12481] __alloc_skb+0x112/0x2d0 [ 409.650742][T12481] netlink_ack+0x146/0xa50 [ 409.650762][T12481] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.650783][T12481] ? ref_tracker_free+0x63a/0x7d0 [ 409.650804][T12481] ? __asan_memcpy+0x40/0x70 [ 409.650828][T12481] ? __pfx_ref_tracker_free+0x10/0x10 [ 409.650861][T12481] netlink_rcv_skb+0x28c/0x470 [ 409.650884][T12481] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 409.650909][T12481] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.650945][T12481] ? netlink_deliver_tap+0x2e/0x1b0 [ 409.650977][T12481] netlink_unicast+0x82f/0x9e0 [ 409.651020][T12481] ? __pfx_netlink_unicast+0x10/0x10 [ 409.651055][T12481] ? netlink_sendmsg+0x642/0xb30 [ 409.651075][T12481] ? skb_put+0x11b/0x210 [ 409.651103][T12481] netlink_sendmsg+0x805/0xb30 [ 409.651136][T12481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.651171][T12481] ? aa_sock_msg_perm+0xf1/0x1d0 [ 409.651195][T12481] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.651232][T12481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.651256][T12481] __sock_sendmsg+0x219/0x270 [ 409.651293][T12481] ____sys_sendmsg+0x505/0x830 [ 409.651326][T12481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.651364][T12481] ? import_iovec+0x74/0xa0 [ 409.651402][T12481] ___sys_sendmsg+0x21f/0x2a0 [ 409.651431][T12481] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.651500][T12481] ? __fget_files+0x2a/0x420 [ 409.651518][T12481] ? __fget_files+0x3a0/0x420 [ 409.651549][T12481] __x64_sys_sendmsg+0x19b/0x260 [ 409.651579][T12481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.651626][T12481] ? __pfx_ksys_write+0x10/0x10 [ 409.651652][T12481] ? rcu_is_watching+0x15/0xb0 [ 409.651680][T12481] ? do_syscall_64+0xbe/0x3b0 [ 409.651708][T12481] do_syscall_64+0xfa/0x3b0 [ 409.651730][T12481] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.651752][T12481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.651773][T12481] ? clear_bhb_loop+0x60/0xb0 [ 409.651799][T12481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.651819][T12481] RIP: 0033:0x7fd4a858eec9 [ 409.651839][T12481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.651857][T12481] RSP: 002b:00007fd4a67ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.651879][T12481] RAX: ffffffffffffffda RBX: 00007fd4a87e5fa0 RCX: 00007fd4a858eec9 [ 409.651896][T12481] RDX: 0000000004040004 RSI: 0000200000000000 RDI: 0000000000000003 [ 409.651909][T12481] RBP: 00007fd4a67ee090 R08: 0000000000000000 R09: 0000000000000000 [ 409.651922][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.651935][T12481] R13: 00007fd4a87e6038 R14: 00007fd4a87e5fa0 R15: 00007ffc41f17868 [ 409.651970][T12481] [ 410.404741][T12487] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1984'. [ 410.513754][T12491] netlink: 'syz.1.1989': attribute type 13 has an invalid length. [ 410.608896][T12491] netlink: 'syz.1.1989': attribute type 17 has an invalid length. [ 411.511673][T12522] netlink: 'syz.3.1995': attribute type 6 has an invalid length. [ 411.580818][T12522] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1995'. [ 411.639615][T12491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.675675][T12491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.776739][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.201300][T12540] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 412.334354][T12542] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2000'. [ 412.390955][T12529] syzkaller0: entered promiscuous mode [ 412.409803][T12529] syzkaller0: entered allmulticast mode [ 412.470690][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2000'. [ 412.478981][T12550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2001'. [ 412.530839][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2001'. [ 412.600682][T12540] veth9: entered promiscuous mode [ 412.679294][T12540] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 412.728826][T12542] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.864279][T12555] netlink: 'syz.2.2003': attribute type 1 has an invalid length. [ 413.234737][T12562] veth1_macvtap: left promiscuous mode [ 413.328448][T12570] netlink: 'syz.1.2009': attribute type 83 has an invalid length. [ 413.384652][T12565] syzkaller0: entered promiscuous mode [ 413.449687][T12565] syzkaller0: entered allmulticast mode [ 413.680062][T12580] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2012'. [ 413.780548][T12584] syzkaller0: entered promiscuous mode [ 413.793779][T12584] syzkaller0: entered allmulticast mode [ 413.894789][T12586] tipc: Enabled bearer , priority 0 [ 413.969250][T12588] syzkaller0: entered promiscuous mode [ 413.986513][T12588] syzkaller0: entered allmulticast mode [ 413.997896][T12589] netlink: 'syz.4.2014': attribute type 1 has an invalid length. [ 414.069597][T12593] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2014'. [ 414.179072][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2015'. [ 414.240713][T12599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2014'. [ 414.339016][T12598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2015'. [ 414.494746][T12588] tipc: Resetting bearer [ 414.532179][T12585] tipc: Resetting bearer [ 414.591455][T12585] tipc: Disabling bearer [ 414.658266][T12597] veth11: entered promiscuous mode [ 414.691532][T12597] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 414.741397][T12599] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.450893][T12623] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20002 [ 416.026195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.860342][T12622] IPVS: Unknown mcast interface: vcan0 [ 420.386235][T12641] __nla_validate_parse: 1 callbacks suppressed [ 420.386256][T12641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2027'. [ 420.393827][T12639] syzkaller0: entered promiscuous mode [ 420.463053][T12639] syzkaller0: entered allmulticast mode [ 420.774967][T12654] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2031'. [ 421.872180][T12680] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 422.433446][T12695] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 422.896663][T12711] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2048'. [ 422.934176][T12705] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 423.248225][T12717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.655061][T12719] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.668171][T12719] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.800953][T12736] openvswitch: netlink: IP tunnel TTL not specified. [ 423.842847][T12736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2059'. [ 423.995650][T12738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2059'. [ 424.068489][T12742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2061'. [ 424.107151][T12742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2061'. [ 424.407830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.209518][ T6273] lec:lec_start_xmit: lec0:No lecd attached [ 430.247665][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 430.259606][ C0] lec:lec_tx_timeout: lec0 [ 439.228450][ T5883] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 439.263577][ T5883] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 439.296144][ T5883] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 439.319188][ T5883] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 439.341470][ T5883] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 439.756571][ T5883] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 439.792903][ T5883] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 439.816358][ T5883] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 439.834992][ T5883] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 439.856389][ T5883] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 440.384580][ T5883] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 440.405589][ T5883] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 440.425183][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.444525][ T5883] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 440.467928][ T5883] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 440.495855][ T5883] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 441.084277][ T5888] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 441.104176][ T5888] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 441.121317][ T5888] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 441.144048][ T5888] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 441.160071][ T5888] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 441.306169][ T5888] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 441.325929][ T5888] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 441.352575][ T5888] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 441.369787][ T5888] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 441.398499][ T5888] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 441.447594][ T5883] Bluetooth: hci5: command tx timeout [ 441.927758][ T5883] Bluetooth: hci6: command tx timeout [ 442.568089][ T5883] Bluetooth: hci7: command tx timeout [ 443.212396][ T5883] Bluetooth: hci8: command tx timeout [ 443.447638][ T5883] Bluetooth: hci9: command tx timeout [ 443.527946][ T5883] Bluetooth: hci5: command tx timeout [ 444.007808][ T5883] Bluetooth: hci6: command tx timeout [ 444.648268][ T5883] Bluetooth: hci7: command tx timeout [ 445.289356][ T5883] Bluetooth: hci8: command tx timeout [ 445.528420][ T5883] Bluetooth: hci9: command tx timeout [ 445.552818][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 445.607775][ T5883] Bluetooth: hci5: command tx timeout [ 446.097635][ T5883] Bluetooth: hci6: command tx timeout [ 446.727877][ T5883] Bluetooth: hci7: command tx timeout [ 447.367774][ T5883] Bluetooth: hci8: command tx timeout [ 447.608014][ T5883] Bluetooth: hci9: command tx timeout [ 447.687764][ T5883] Bluetooth: hci5: command tx timeout [ 448.167971][ T5883] Bluetooth: hci6: command tx timeout [ 448.807603][ T5883] Bluetooth: hci7: command tx timeout [ 449.447913][ T5883] Bluetooth: hci8: command tx timeout [ 449.687965][ T5883] Bluetooth: hci9: command tx timeout [ 451.287767][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 451.312500][ C0] lec:lec_tx_timeout: lec0 [ 471.128440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.238461][ T6273] lec:lec_start_xmit: lec0:No lecd attached [ 494.247498][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 494.261282][ C0] lec:lec_tx_timeout: lec0 [ 499.684148][ T5888] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 499.702490][ T5888] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 499.720771][ T5888] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 499.735058][ T5888] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 499.752539][ T5888] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 500.448392][ T5888] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 500.465490][ T5888] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 500.481325][ T5888] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 500.500408][ T5888] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 500.516539][ T5888] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 500.591331][ T5883] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 500.610192][ T5883] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 500.632324][ T5883] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 500.651834][ T5883] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 500.664076][ T5883] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 501.410795][ T5883] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 501.431305][ T5883] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 501.448657][ T5883] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 501.459301][ T5883] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 501.473832][ T5883] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 501.612298][ T5888] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 501.626807][ T5888] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 501.641052][ T5888] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 501.657907][ T5888] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 501.678470][ T5888] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 501.854260][ T5883] Bluetooth: hci10: command tx timeout [ 502.567668][ T5883] Bluetooth: hci11: command tx timeout [ 502.727645][ T5883] Bluetooth: hci12: command tx timeout [ 503.528257][ T5883] Bluetooth: hci13: command tx timeout [ 503.767731][ T5883] Bluetooth: hci14: command tx timeout [ 503.927576][ T5883] Bluetooth: hci10: command tx timeout [ 504.657622][ T5883] Bluetooth: hci11: command tx timeout [ 504.808014][ T5883] Bluetooth: hci12: command tx timeout [ 505.617726][ T5883] Bluetooth: hci13: command tx timeout [ 505.857726][ T5883] Bluetooth: hci14: command tx timeout [ 506.007947][ T5883] Bluetooth: hci10: command tx timeout [ 506.728285][ T5883] Bluetooth: hci11: command tx timeout [ 506.887614][ T5883] Bluetooth: hci12: command tx timeout [ 506.980011][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 507.688669][ T5883] Bluetooth: hci13: command tx timeout [ 507.927884][ T5883] Bluetooth: hci14: command tx timeout [ 508.088478][ T5883] Bluetooth: hci10: command tx timeout [ 508.807918][ T5883] Bluetooth: hci11: command tx timeout [ 508.967801][ T5883] Bluetooth: hci12: command tx timeout [ 509.777577][ T5883] Bluetooth: hci13: command tx timeout [ 510.007989][ T5883] Bluetooth: hci14: command tx timeout [ 512.247583][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 512.259688][ C0] lec:lec_tx_timeout: lec0 [ 514.169805][ T5888] Bluetooth: hci4: command 0x0406 tx timeout [ 532.567799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.936790][ T6273] lec:lec_start_xmit: lec0:No lecd attached [ 559.175408][ T5888] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 559.190355][ T5888] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 559.206631][ T5888] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 559.221713][ T5888] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 559.235076][ T5888] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 559.297489][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 559.306675][ C0] lec:lec_tx_timeout: lec0 [ 560.269920][ T5883] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 560.294646][ T5883] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 560.319774][ T5883] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 560.334699][ T5883] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 560.354806][ T5883] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 560.769461][ T5888] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 560.783015][ T5888] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 560.795645][ T5888] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 560.809138][ T5888] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 560.820806][ T5888] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 561.287950][ T5883] Bluetooth: hci15: command tx timeout [ 561.879810][ T5888] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 561.892115][ T5888] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 561.907190][ T5888] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 561.920530][ T5888] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 561.932210][ T5888] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 562.014832][ T5888] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 562.027651][ T5888] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 562.045252][ T5888] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 562.058030][ T5888] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 562.073052][ T5888] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 562.407707][ T5888] Bluetooth: hci16: command tx timeout [ 562.887693][ T5888] Bluetooth: hci17: command tx timeout [ 563.367958][T12821] Bluetooth: hci15: command tx timeout [ 564.007685][T12821] Bluetooth: hci18: command tx timeout [ 564.168281][T12821] Bluetooth: hci19: command tx timeout [ 564.497882][T12821] Bluetooth: hci16: command tx timeout [ 564.967673][T12821] Bluetooth: hci17: command tx timeout [ 565.367851][T12821] Bluetooth: hci7: command 0x0406 tx timeout [ 565.373195][T12822] Bluetooth: hci9: command 0x0406 tx timeout [ 565.375673][T12821] Bluetooth: hci6: command 0x0406 tx timeout [ 565.383023][T12822] Bluetooth: hci5: command 0x0406 tx timeout [ 565.397699][T12821] Bluetooth: hci8: command 0x0406 tx timeout [ 565.447762][ T5885] Bluetooth: hci15: command tx timeout [ 566.087559][ T5885] Bluetooth: hci18: command tx timeout [ 566.248485][ T5885] Bluetooth: hci19: command tx timeout [ 566.567680][ T5885] Bluetooth: hci16: command tx timeout [ 567.047739][ T5885] Bluetooth: hci17: command tx timeout [ 567.537693][ T5885] Bluetooth: hci15: command tx timeout [ 568.167662][ T5885] Bluetooth: hci18: command tx timeout [ 568.327635][ T5885] Bluetooth: hci19: command tx timeout [ 568.430852][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 568.647647][ T5885] Bluetooth: hci16: command tx timeout [ 569.127743][ T5885] Bluetooth: hci17: command tx timeout [ 570.247689][ T5885] Bluetooth: hci18: command tx timeout [ 570.417920][ T5885] Bluetooth: hci19: command tx timeout [ 573.447609][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 573.458617][ C0] lec:lec_tx_timeout: lec0 [ 575.447726][ T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 575.455635][ T31] Not tainted syzkaller #0 [ 575.466787][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.477251][ T31] task:kworker/u8:0 state:D stack:21384 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 575.493619][ T31] Workqueue: events_unbound linkwatch_event [ 575.499938][ T31] Call Trace: [ 575.503698][ T31] [ 575.506770][ T31] __schedule+0x1798/0x4cc0 [ 575.513633][ T31] ? __lock_acquire+0xab9/0xd20 [ 575.520144][ T31] ? __lock_acquire+0xab9/0xd20 [ 575.525258][ T31] ? __pfx___schedule+0x10/0x10 [ 575.532155][ T31] ? schedule+0x91/0x360 [ 575.542238][ T31] schedule+0x165/0x360 [ 575.546674][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.587513][ T31] __mutex_lock+0x7e6/0x1350 [ 575.592223][ T31] ? look_up_lock_class+0x74/0x170 [ 575.619089][ T31] ? __mutex_lock+0x5bb/0x1350 [ 575.623991][ T31] ? linkwatch_event+0xe/0x60 [ 575.629239][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.634636][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.640978][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 575.646985][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 575.662266][ T31] linkwatch_event+0xe/0x60 [ 575.668373][ T31] process_scheduled_works+0xae1/0x17b0 [ 575.674268][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 575.681202][ T31] worker_thread+0x8a0/0xda0 [ 575.686057][ T31] kthread+0x70e/0x8a0 [ 575.690508][ T31] ? __pfx_worker_thread+0x10/0x10 [ 575.695818][ T31] ? __pfx_kthread+0x10/0x10 [ 575.700902][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.708605][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.714492][ T31] ? __pfx_kthread+0x10/0x10 [ 575.719945][ T31] ret_from_fork+0x439/0x7d0 [ 575.725656][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.731500][ T31] ? __switch_to_asm+0x39/0x70 [ 575.737098][ T31] ? __switch_to_asm+0x33/0x70 [ 575.742669][ T31] ? __pfx_kthread+0x10/0x10 [ 575.752194][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.757891][ T31] [ 575.761632][ T31] INFO: task kworker/0:9:11655 blocked for more than 143 seconds. [ 575.770943][ T31] Not tainted syzkaller #0 [ 575.778771][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.792983][ T31] task:kworker/0:9 state:D stack:25968 pid:11655 tgid:11655 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 575.814039][ T31] Workqueue: events switchdev_deferred_process_work [ 575.825370][ T31] Call Trace: [ 575.828906][ T31] [ 575.832933][ T31] __schedule+0x1798/0x4cc0 [ 575.838145][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 575.843688][ T31] ? __pfx___schedule+0x10/0x10 [ 575.849680][ T31] ? schedule+0x91/0x360 [ 575.854195][ T31] schedule+0x165/0x360 [ 575.858483][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.864223][ T31] __mutex_lock+0x7e6/0x1350 [ 575.869143][ T31] ? look_up_lock_class+0x74/0x170 [ 575.874487][ T31] ? __mutex_lock+0x5bb/0x1350 [ 575.879723][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 575.885851][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.891084][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.896523][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 575.902629][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 575.908533][ T31] switchdev_deferred_process_work+0xe/0x20 [ 575.914659][ T31] process_scheduled_works+0xae1/0x17b0 [ 575.920520][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 575.926835][ T31] worker_thread+0x8a0/0xda0 [ 575.931902][ T31] kthread+0x70e/0x8a0 [ 575.936919][ T31] ? __pfx_worker_thread+0x10/0x10 [ 575.942421][ T31] ? __pfx_kthread+0x10/0x10 [ 575.947171][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.954035][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.959813][ T31] ? __pfx_kthread+0x10/0x10 [ 575.964735][ T31] ret_from_fork+0x439/0x7d0 [ 575.969823][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.975121][ T31] ? __switch_to_asm+0x39/0x70 [ 575.982435][ T31] ? __switch_to_asm+0x33/0x70 [ 575.987874][ T31] ? __pfx_kthread+0x10/0x10 [ 575.992648][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.998005][ T31] [ 576.001752][ T31] INFO: task kworker/0:12:11659 blocked for more than 143 seconds. [ 576.010685][ T31] Not tainted syzkaller #0 [ 576.015680][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.025349][ T31] task:kworker/0:12 state:D stack:26512 pid:11659 tgid:11659 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 576.038450][ T31] Workqueue: infiniband ib_cache_event_task [ 576.044701][ T31] Call Trace: [ 576.048658][ T31] [ 576.051738][ T31] __schedule+0x1798/0x4cc0 [ 576.057025][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 576.064223][ T31] ? __pfx___schedule+0x10/0x10 [ 576.069351][ T31] ? schedule+0x91/0x360 [ 576.073723][ T31] schedule+0x165/0x360 [ 576.078079][ T31] schedule_preempt_disabled+0x13/0x30 [ 576.083864][ T31] __mutex_lock+0x7e6/0x1350 [ 576.088645][ T31] ? __mutex_lock+0x5bb/0x1350 [ 576.098274][ T31] ? ib_get_eth_speed+0x151/0x7b0 [ 576.103382][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 576.109153][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 576.114958][ T31] ? _raw_spin_unlock+0x28/0x50 [ 576.120380][ T31] ? ib_device_get_netdev+0x220/0x2f0 [ 576.126499][ T31] ib_get_eth_speed+0x151/0x7b0 [ 576.131911][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.137799][ T31] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 576.143511][ T31] ? ib_query_port+0x384/0x830 [ 576.148840][ T31] siw_query_port+0x3c/0x4a0 [ 576.153838][ T31] ib_cache_update+0x1a9/0xbf0 [ 576.158869][ T31] ? register_lock_class+0x51/0x320 [ 576.164128][ T31] ? __pfx_ib_cache_update+0x10/0x10 [ 576.170547][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 576.176720][ T31] ib_cache_event_task+0xd8/0x1c0 [ 576.182902][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 576.188850][ T31] process_scheduled_works+0xae1/0x17b0 [ 576.196051][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 576.202395][ T31] worker_thread+0x8a0/0xda0 [ 576.207192][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 576.214353][ T31] ? __kthread_parkme+0x7b/0x200 [ 576.219811][ T31] kthread+0x70e/0x8a0 [ 576.224092][ T31] ? __pfx_worker_thread+0x10/0x10 [ 576.229838][ T31] ? __pfx_kthread+0x10/0x10 [ 576.234565][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.240366][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.245719][ T31] ? __pfx_kthread+0x10/0x10 [ 576.251413][ T31] ret_from_fork+0x439/0x7d0 [ 576.256199][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.262012][ T31] ? __switch_to_asm+0x39/0x70 [ 576.267878][ T31] ? __switch_to_asm+0x33/0x70 [ 576.273401][ T31] ? __pfx_kthread+0x10/0x10 [ 576.279649][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.285172][ T31] [ 576.288586][ T31] INFO: task syz.0.2055:12723 blocked for more than 144 seconds. [ 576.296817][ T31] Not tainted syzkaller #0 [ 576.309251][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.320259][ T31] task:syz.0.2055 state:D stack:28752 pid:12723 tgid:12721 ppid:5876 task_flags:0x400140 flags:0x00004004 [ 576.332570][ T31] Call Trace: [ 576.336031][ T31] [ 576.339227][ T31] __schedule+0x1798/0x4cc0 [ 576.361707][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.366999][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.376314][ T31] ? __pfx___schedule+0x10/0x10 [ 576.381768][ T31] ? schedule+0x91/0x360 [ 576.386624][ T31] schedule+0x165/0x360 [ 576.391006][ T31] schedule_preempt_disabled+0x13/0x30 [ 576.396700][ T31] __mutex_lock+0x7e6/0x1350 [ 576.401798][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.406747][ T31] ? __mutex_lock+0x5bb/0x1350 [ 576.411892][ T31] ? ip6_mroute_setsockopt+0x956/0xf00 [ 576.417651][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 576.422754][ T31] ? _copy_from_user+0x94/0xb0 [ 576.428285][ T31] ip6_mroute_setsockopt+0x956/0xf00 [ 576.433649][ T31] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 576.440057][ T31] do_ipv6_setsockopt+0x35a/0x2eb0 [ 576.445328][ T31] ? __pfx___futex_wait+0x10/0x10 [ 576.450932][ T31] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 576.456883][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 576.462394][ T31] ? aa_label_sk_perm+0x4cd/0x630 [ 576.467769][ T31] ? futex_private_hash_put+0x4b/0x280 [ 576.473303][ T31] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 576.479010][ T31] ? __pfx___might_resched+0x10/0x10 [ 576.484449][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.489568][ T31] ipv6_setsockopt+0x59/0x170 [ 576.494354][ T31] rawv6_setsockopt+0x23b/0x5b0 [ 576.499646][ T31] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 576.505129][ T31] ? aa_sock_opt_perm+0xff/0x1b0 [ 576.510731][ T31] ? sock_common_setsockopt+0x36/0xc0 [ 576.516249][ T31] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 576.522409][ T31] do_sock_setsockopt+0x17c/0x1b0 [ 576.527824][ T31] __x64_sys_setsockopt+0x13f/0x1b0 [ 576.533105][ T31] do_syscall_64+0xfa/0x3b0 [ 576.538561][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.543908][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.550089][ T31] ? clear_bhb_loop+0x60/0xb0 [ 576.554910][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.561184][ T31] RIP: 0033:0x7fd4a858eec9 [ 576.565697][ T31] RSP: 002b:00007fd4a67ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 576.575551][ T31] RAX: ffffffffffffffda RBX: 00007fd4a87e5fa0 RCX: 00007fd4a858eec9 [ 576.593199][ T31] RDX: 00000000000000cc RSI: 0000000000000029 RDI: 0000000000000003 [ 576.602380][ T31] RBP: 00007fd4a8611f91 R08: 000000000000005c R09: 0000000000000000 [ 576.613665][ T31] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 576.621802][ T31] R13: 00007fd4a87e6038 R14: 00007fd4a87e5fa0 R15: 00007ffc41f17868 [ 576.633662][ T31] [ 576.636845][ T31] INFO: task syz.0.2055:12725 blocked for more than 144 seconds. [ 576.644794][ T31] Not tainted syzkaller #0 [ 576.650655][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.660733][ T31] task:syz.0.2055 state:D stack:28768 pid:12725 tgid:12721 ppid:5876 task_flags:0x400140 flags:0x00004004 [ 576.673006][ T31] Call Trace: [ 576.676606][ T31] [ 576.679654][ T31] __schedule+0x1798/0x4cc0 [ 576.684211][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.689394][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.694323][ T31] ? __pfx___schedule+0x10/0x10 [ 576.699496][ T31] ? schedule+0x91/0x360 [ 576.703847][ T31] schedule+0x165/0x360 [ 576.708263][ T31] schedule_preempt_disabled+0x13/0x30 [ 576.714663][ T31] __mutex_lock+0x7e6/0x1350 [ 576.719568][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.724564][ T31] ? __mutex_lock+0x5bb/0x1350 [ 576.729952][ T31] ? ip6_mroute_setsockopt+0xa84/0xf00 [ 576.735746][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 576.740902][ T31] ? _copy_from_user+0x94/0xb0 [ 576.745945][ T31] ip6_mroute_setsockopt+0xa84/0xf00 [ 576.751625][ T31] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 576.758550][ T31] do_ipv6_setsockopt+0x35a/0x2eb0 [ 576.763735][ T31] ? page_table_check_set+0x18d/0x730 [ 576.769669][ T31] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 576.775355][ T31] ? page_table_check_set+0x18d/0x730 [ 576.781042][ T31] ? aa_label_sk_perm+0x4cd/0x630 [ 576.786666][ T31] ? page_table_check_set+0x18d/0x730 [ 576.793006][ T31] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 576.798779][ T31] ? css_rstat_updated+0x23a/0x4f0 [ 576.804426][ T31] ? __pfx___might_resched+0x10/0x10 [ 576.810266][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 576.816313][ T31] ? __lock_acquire+0xab9/0xd20 [ 576.821827][ T31] ipv6_setsockopt+0x59/0x170 [ 576.826900][ T31] rawv6_setsockopt+0x23b/0x5b0 [ 576.832674][ T31] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 576.838402][ T31] ? aa_sock_opt_perm+0xff/0x1b0 [ 576.843711][ T31] ? sock_common_setsockopt+0x36/0xc0 [ 576.849985][ T31] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 576.856198][ T31] do_sock_setsockopt+0x17c/0x1b0 [ 576.861747][ T31] __x64_sys_setsockopt+0x13f/0x1b0 [ 576.867745][ T31] do_syscall_64+0xfa/0x3b0 [ 576.872876][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.878654][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.885186][ T31] ? clear_bhb_loop+0x60/0xb0 [ 576.890295][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.896570][ T31] RIP: 0033:0x7fd4a858eec9 [ 576.901150][ T31] RSP: 002b:00007fd4a67cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 576.909854][ T31] RAX: ffffffffffffffda RBX: 00007fd4a87e6090 RCX: 00007fd4a858eec9 [ 576.918042][ T31] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000003 [ 576.926240][ T31] RBP: 00007fd4a8611f91 R08: 0000000000000004 R09: 0000000000000000 [ 576.935041][ T31] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 576.943377][ T31] R13: 00007fd4a87e6128 R14: 00007fd4a87e6090 R15: 00007ffc41f17868 [ 576.951938][ T31] [ 576.955391][ T31] INFO: task syz.1.2059:12736 blocked for more than 144 seconds. [ 576.963483][ T31] Not tainted syzkaller #0 [ 576.968687][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.978588][ T31] task:syz.1.2059 state:D stack:24488 pid:12736 tgid:12731 ppid:5879 task_flags:0x400140 flags:0x00004004 [ 576.991196][ T31] Call Trace: [ 576.994511][ T31] [ 576.997547][ T31] __schedule+0x1798/0x4cc0 [ 577.002203][ T31] ? __lock_acquire+0xab9/0xd20 [ 577.007282][ T31] ? __lock_acquire+0xab9/0xd20 [ 577.012730][ T31] ? __pfx___schedule+0x10/0x10 [ 577.017895][ T31] ? schedule+0x91/0x360 [ 577.022584][ T31] schedule+0x165/0x360 [ 577.026845][ T31] schedule_preempt_disabled+0x13/0x30 [ 577.032470][ T31] __mutex_lock+0x7e6/0x1350 [ 577.037930][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 577.043709][ T31] ? __mutex_lock+0x5bb/0x1350 [ 577.048725][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 577.054129][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 577.059393][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 577.064403][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 577.069846][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.075488][ T31] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 577.082745][ T31] netlink_rcv_skb+0x205/0x470 [ 577.087796][ T31] ? rcu_is_watching+0x15/0xb0 [ 577.092628][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.098243][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.103865][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 577.109395][ T31] netlink_unicast+0x82f/0x9e0 [ 577.114418][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 577.119841][ T31] ? netlink_sendmsg+0x642/0xb30 [ 577.124907][ T31] ? skb_put+0x11b/0x210 [ 577.129512][ T31] netlink_sendmsg+0x805/0xb30 [ 577.134345][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.139994][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 577.145070][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.150816][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.156153][ T31] __sock_sendmsg+0x219/0x270 [ 577.161230][ T31] ____sys_sendmsg+0x505/0x830 [ 577.166051][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.171901][ T31] ? import_iovec+0x74/0xa0 [ 577.176636][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 577.181729][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.187111][ T31] ? __fget_files+0x2a/0x420 [ 577.191870][ T31] ? __fget_files+0x3a0/0x420 [ 577.196695][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 577.201962][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.207646][ T31] ? rcu_is_watching+0x15/0xb0 [ 577.212469][ T31] ? do_syscall_64+0xbe/0x3b0 [ 577.217204][ T31] do_syscall_64+0xfa/0x3b0 [ 577.221851][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.227251][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.233628][ T31] ? clear_bhb_loop+0x60/0xb0 [ 577.238503][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.244536][ T31] RIP: 0033:0x7f3d2358eec9 [ 577.249119][ T31] RSP: 002b:00007f3d24390038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.257794][ T31] RAX: ffffffffffffffda RBX: 00007f3d237e5fa0 RCX: 00007f3d2358eec9 [ 577.265931][ T31] RDX: 0000000004008000 RSI: 0000200000000180 RDI: 0000000000000005 [ 577.274133][ T31] RBP: 00007f3d23611f91 R08: 0000000000000000 R09: 0000000000000000 [ 577.282233][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.291458][ T31] R13: 00007f3d237e6038 R14: 00007f3d237e5fa0 R15: 00007fffbfb66ca8 [ 577.299822][ T31] [ 577.303081][ T31] INFO: task syz.1.2059:12738 blocked for more than 145 seconds. [ 577.311567][ T31] Not tainted syzkaller #0 [ 577.316557][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.325554][ T31] task:syz.1.2059 state:D stack:25128 pid:12738 tgid:12731 ppid:5879 task_flags:0x400140 flags:0x00004004 [ 577.337972][ T31] Call Trace: [ 577.341286][ T31] [ 577.344539][ T31] __schedule+0x1798/0x4cc0 [ 577.349450][ T31] ? __lock_acquire+0xab9/0xd20 [ 577.354434][ T31] ? __lock_acquire+0xab9/0xd20 [ 577.359693][ T31] ? __pfx___schedule+0x10/0x10 [ 577.364702][ T31] ? schedule+0x91/0x360 [ 577.369400][ T31] schedule+0x165/0x360 [ 577.373854][ T31] schedule_preempt_disabled+0x13/0x30 [ 577.379776][ T31] __mutex_lock+0x7e6/0x1350 [ 577.384437][ T31] ? __mutex_lock+0x5bb/0x1350 [ 577.389511][ T31] ? rtnl_newlink+0x8db/0x1c70 [ 577.394489][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 577.399684][ T31] ? ns_capable+0x8a/0xf0 [ 577.404161][ T31] ? rtnl_link_get_net_capable+0x16a/0x350 [ 577.410276][ T31] rtnl_newlink+0x8db/0x1c70 [ 577.414930][ T31] ? netlink_sendmsg+0x805/0xb30 [ 577.420426][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 577.426071][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 577.432002][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.437272][ T31] ? nlmon_xmit+0xb0/0x100 [ 577.441924][ T31] ? kmem_cache_free+0x18f/0x400 [ 577.447018][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 577.452671][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.458009][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 577.463520][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 577.469371][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 577.474536][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 577.479912][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 577.485520][ T31] ? __dev_queue_xmit+0x1d79/0x3b50 [ 577.491200][ T31] ? __lock_acquire+0xab9/0xd20 [ 577.496124][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 577.501445][ T31] rtnetlink_rcv_msg+0x7cf/0xb70 [ 577.506479][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 577.511813][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.517491][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 577.522691][ T31] ? __asan_memcpy+0x40/0x70 [ 577.527638][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 577.533079][ T31] netlink_rcv_skb+0x205/0x470 [ 577.537993][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 577.543501][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.548972][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 577.554233][ T31] netlink_unicast+0x82f/0x9e0 [ 577.559144][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 577.564466][ T31] ? netlink_sendmsg+0x642/0xb30 [ 577.569688][ T31] ? skb_put+0x11b/0x210 [ 577.573982][ T31] netlink_sendmsg+0x805/0xb30 [ 577.578920][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.584389][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 577.589468][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.594798][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.600272][ T31] __sock_sendmsg+0x219/0x270 [ 577.605215][ T31] ____sys_sendmsg+0x505/0x830 [ 577.610125][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.615467][ T31] ? import_iovec+0x74/0xa0 [ 577.620420][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 577.625154][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.630950][ T31] ? __fget_files+0x2a/0x420 [ 577.635746][ T31] ? __fget_files+0x3a0/0x420 [ 577.640765][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 577.645804][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.651392][ T31] ? rcu_is_watching+0x15/0xb0 [ 577.656510][ T31] ? do_syscall_64+0xbe/0x3b0 [ 577.661474][ T31] do_syscall_64+0xfa/0x3b0 [ 577.666026][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.671345][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.677639][ T31] ? clear_bhb_loop+0x60/0xb0 [ 577.682381][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.688411][ T31] RIP: 0033:0x7f3d2358eec9 [ 577.692979][ T31] RSP: 002b:00007f3d2436f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.701970][ T31] RAX: ffffffffffffffda RBX: 00007f3d237e6090 RCX: 00007f3d2358eec9 [ 577.710140][ T31] RDX: 0000000000004044 RSI: 0000200000000080 RDI: 0000000000000003 [ 577.718248][ T31] RBP: 00007f3d23611f91 R08: 0000000000000000 R09: 0000000000000000 [ 577.726341][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.734506][ T31] R13: 00007f3d237e6128 R14: 00007f3d237e6090 R15: 00007fffbfb66ca8 [ 577.742775][ T31] [ 577.745824][ T31] INFO: task syz.3.2060:12737 blocked for more than 145 seconds. [ 577.753795][ T31] Not tainted syzkaller #0 [ 577.758844][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.767803][ T31] task:syz.3.2060 state:D stack:27992 pid:12737 tgid:12735 ppid:5886 task_flags:0x400040 flags:0x00004004 [ 577.779921][ T31] Call Trace: [ 577.783253][ T31] [ 577.786217][ T31] __schedule+0x1798/0x4cc0 [ 577.790842][ T31] ? __lock_acquire+0xab9/0xd20 [ 577.795841][ T31] ? __lock_acquire+0xab9/0xd20 [ 577.800860][ T31] ? __pfx___schedule+0x10/0x10 [ 577.805757][ T31] ? schedule+0x91/0x360 [ 577.810091][ T31] schedule+0x165/0x360 [ 577.814407][ T31] schedule_preempt_disabled+0x13/0x30 [ 577.820041][ T31] __mutex_lock+0x7e6/0x1350 [ 577.824688][ T31] ? __mutex_lock+0x5bb/0x1350 [ 577.829770][ T31] ? __tun_chr_ioctl+0x37a/0x1df0 [ 577.834839][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 577.840073][ T31] __tun_chr_ioctl+0x37a/0x1df0 [ 577.845481][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 577.850884][ T31] ? __fget_files+0x2a/0x420 [ 577.855534][ T31] ? __fget_files+0x3a0/0x420 [ 577.860694][ T31] ? __fget_files+0x2a/0x420 [ 577.865493][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 577.870825][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 577.876020][ T31] __se_sys_ioctl+0xfc/0x170 [ 577.880869][ T31] do_syscall_64+0xfa/0x3b0 [ 577.885634][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.891114][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.897514][ T31] ? clear_bhb_loop+0x60/0xb0 [ 577.902337][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.908394][ T31] RIP: 0033:0x7facf298eec9 [ 577.913117][ T31] RSP: 002b:00007facf38bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.922210][ T31] RAX: ffffffffffffffda RBX: 00007facf2be5fa0 RCX: 00007facf298eec9 [ 577.931020][ T31] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 577.939122][ T31] RBP: 00007facf2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 577.947226][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.955782][ T31] R13: 00007facf2be6038 R14: 00007facf2be5fa0 R15: 00007fff31f8c418 [ 577.963982][ T31] [ 577.967899][ T31] INFO: task syz.3.2060:12739 blocked for more than 145 seconds. [ 577.975760][ T31] Not tainted syzkaller #0 [ 577.980802][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.989656][ T31] task:syz.3.2060 state:D stack:28328 pid:12739 tgid:12735 ppid:5886 task_flags:0x400040 flags:0x00004004 [ 578.001932][ T31] Call Trace: [ 578.005284][ T31] [ 578.008330][ T31] __schedule+0x1798/0x4cc0 [ 578.012977][ T31] ? __lock_acquire+0xab9/0xd20 [ 578.018093][ T31] ? __lock_acquire+0xab9/0xd20 [ 578.023001][ T31] ? __pfx___schedule+0x10/0x10 [ 578.028088][ T31] ? schedule+0x91/0x360 [ 578.032559][ T31] schedule+0x165/0x360 [ 578.036763][ T31] schedule_preempt_disabled+0x13/0x30 [ 578.042397][ T31] __mutex_lock+0x7e6/0x1350 [ 578.047030][ T31] ? __mutex_lock+0x5bb/0x1350 [ 578.052020][ T31] ? tun_chr_close+0x3e/0x1c0 [ 578.056884][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 578.062323][ T31] ? __pfx_locks_remove_posix+0x10/0x10 [ 578.067997][ T31] ? do_futex+0x333/0x420 [ 578.072363][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.078058][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 578.083315][ T31] tun_chr_close+0x3e/0x1c0 [ 578.087970][ T31] __fput+0x44c/0xa70 [ 578.092021][ T31] fput_close_sync+0x119/0x200 [ 578.096953][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 578.102456][ T31] __x64_sys_close+0x7f/0x110 [ 578.107275][ T31] do_syscall_64+0xfa/0x3b0 [ 578.112005][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.117836][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.124046][ T31] ? clear_bhb_loop+0x60/0xb0 [ 578.128882][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.134841][ T31] RIP: 0033:0x7facf298eec9 [ 578.139371][ T31] RSP: 002b:00007facf389a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 578.147952][ T31] RAX: ffffffffffffffda RBX: 00007facf2be6090 RCX: 00007facf298eec9 [ 578.155999][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 578.164108][ T31] RBP: 00007facf2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 578.172170][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.180965][ T31] R13: 00007facf2be6128 R14: 00007facf2be6090 R15: 00007fff31f8c418 [ 578.189368][ T31] [ 578.192447][ T31] INFO: task syz.3.2060:12740 blocked for more than 146 seconds. [ 578.200636][ T31] Not tainted syzkaller #0 [ 578.205620][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.214615][ T31] task:syz.3.2060 state:D stack:26824 pid:12740 tgid:12735 ppid:5886 task_flags:0x400140 flags:0x00004004 [ 578.226755][ T31] Call Trace: [ 578.230125][ T31] [ 578.233206][ T31] __schedule+0x1798/0x4cc0 [ 578.237842][ T31] ? __lock_acquire+0xab9/0xd20 [ 578.242745][ T31] ? __lock_acquire+0xab9/0xd20 [ 578.247893][ T31] ? __pfx___schedule+0x10/0x10 [ 578.252985][ T31] ? schedule+0x91/0x360 [ 578.257487][ T31] schedule+0x165/0x360 [ 578.262097][ T31] schedule_preempt_disabled+0x13/0x30 [ 578.268099][ T31] __mutex_lock+0x7e6/0x1350 [ 578.272850][ T31] ? __mutex_lock+0x5bb/0x1350 [ 578.278138][ T31] ? tipc_nl_compat_doit+0x1fd/0x5f0 [ 578.283496][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 578.288824][ T31] ? __build_skb_around+0x257/0x3e0 [ 578.294847][ T31] tipc_nl_compat_doit+0x1fd/0x5f0 [ 578.301665][ T31] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 578.308316][ T31] ? bpf_lsm_capable+0x9/0x20 [ 578.313273][ T31] ? security_capable+0x7e/0x2e0 [ 578.318456][ T31] tipc_nl_compat_recv+0x83c/0xbe0 [ 578.323724][ T31] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 578.329700][ T31] ? __mutex_trylock_common+0x153/0x260 [ 578.335477][ T31] ? __pfx___mutex_trylock_common+0x10/0x10 [ 578.341639][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 578.347050][ T31] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 578.353532][ T31] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 578.360724][ T31] ? trace_contention_end+0x39/0x120 [ 578.366598][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 578.372979][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 578.380088][ T31] genl_rcv_msg+0x60e/0x790 [ 578.384678][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.389986][ T31] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 578.395863][ T31] ? __asan_memcpy+0x40/0x70 [ 578.400778][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 578.406913][ T31] netlink_rcv_skb+0x205/0x470 [ 578.412493][ T31] ? __lock_acquire+0xab9/0xd20 [ 578.417750][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.423417][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.429212][ T31] ? down_read+0x1ad/0x2e0 [ 578.433852][ T31] genl_rcv+0x28/0x40 [ 578.438997][ T31] netlink_unicast+0x82f/0x9e0 [ 578.444404][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 578.451597][ T31] ? netlink_sendmsg+0x642/0xb30 [ 578.456983][ T31] ? skb_put+0x11b/0x210 [ 578.462287][ T31] netlink_sendmsg+0x805/0xb30 [ 578.467121][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.472947][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 578.478639][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 578.483979][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.489724][ T31] __sock_sendmsg+0x219/0x270 [ 578.494482][ T31] ____sys_sendmsg+0x505/0x830 [ 578.499943][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 578.505674][ T31] ? import_iovec+0x74/0xa0 [ 578.510815][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 578.516629][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.522247][ T31] ? __fget_files+0x2a/0x420 [ 578.527167][ T31] ? __fget_files+0x3a0/0x420 [ 578.532169][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 578.537441][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 578.543251][ T31] ? rcu_is_watching+0x15/0xb0 [ 578.548177][ T31] ? do_syscall_64+0xbe/0x3b0 [ 578.553347][ T31] do_syscall_64+0xfa/0x3b0 [ 578.557984][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.563373][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.569790][ T31] ? clear_bhb_loop+0x60/0xb0 [ 578.574803][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.580882][ T31] RIP: 0033:0x7facf298eec9 [ 578.585427][ T31] RSP: 002b:00007facf3879038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.594757][ T31] RAX: ffffffffffffffda RBX: 00007facf2be6180 RCX: 00007facf298eec9 [ 578.603183][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 578.613797][ T31] RBP: 00007facf2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 578.622766][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.635510][ T31] R13: 00007facf2be6218 R14: 00007facf2be6180 R15: 00007fff31f8c418 [ 578.645718][ T31] [ 578.649688][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 578.659268][ T31] INFO: task syz.3.2060:12743 blocked for more than 146 seconds. [ 578.667686][ T31] Not tainted syzkaller #0 [ 578.672668][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.681694][ T31] task:syz.3.2060 state:D stack:28912 pid:12743 tgid:12735 ppid:5886 task_flags:0x400140 flags:0x00004004 [ 578.695795][ T31] Call Trace: [ 578.701433][ T31] [ 578.704827][ T31] __schedule+0x1798/0x4cc0 [ 578.711500][ T31] ? __lock_acquire+0xab9/0xd20 [ 578.716436][ T31] ? __lock_acquire+0xab9/0xd20 [ 578.723892][ T31] ? __pfx___schedule+0x10/0x10 [ 578.729790][ T31] ? schedule+0x91/0x360 [ 578.735121][ T31] schedule+0x165/0x360 [ 578.740151][ T31] schedule_preempt_disabled+0x13/0x30 [ 578.747293][ T31] __mutex_lock+0x7e6/0x1350 [ 578.753367][ T31] ? __mutex_lock+0x5bb/0x1350 [ 578.758575][ T31] ? dev_ioctl+0x7a4/0x1150 [ 578.763265][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 578.768399][ T31] ? apparmor_capable+0x137/0x1b0 [ 578.773789][ T31] ? dev_load+0x21/0x1f0 [ 578.778206][ T31] dev_ioctl+0x7a4/0x1150 [ 578.782597][ T31] sock_do_ioctl+0x22c/0x300 [ 578.787506][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 578.793459][ T31] ? __lock_acquire+0xab9/0xd20 [ 578.798544][ T31] sock_ioctl+0x576/0x790 [ 578.802938][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 578.807991][ T31] ? __fget_files+0x2a/0x420 [ 578.812703][ T31] ? __fget_files+0x3a0/0x420 [ 578.817538][ T31] ? __fget_files+0x2a/0x420 [ 578.822167][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 578.827167][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 578.832261][ T31] __se_sys_ioctl+0xfc/0x170 [ 578.836938][ T31] do_syscall_64+0xfa/0x3b0 [ 578.841758][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.847000][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.853615][ T31] ? clear_bhb_loop+0x60/0xb0 [ 578.858943][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.864936][ T31] RIP: 0033:0x7facf298eec9 [ 578.869524][ T31] RSP: 002b:00007facf3858038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.878123][ T31] RAX: ffffffffffffffda RBX: 00007facf2be6270 RCX: 00007facf298eec9 [ 578.889227][ T31] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 578.897510][ T31] RBP: 00007facf2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 578.905731][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.914024][ T31] R13: 00007facf2be6308 R14: 00007facf2be6270 R15: 00007fff31f8c418 [ 578.922843][ T31] [ 578.926276][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 578.938007][ T31] INFO: task syz.3.2060:12746 blocked for more than 146 seconds. [ 578.947185][ T31] Not tainted syzkaller #0 [ 578.952579][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.963132][ T31] task:syz.3.2060 state:D stack:27272 pid:12746 tgid:12735 ppid:5886 task_flags:0x400040 flags:0x00004004 [ 578.976873][ T31] Call Trace: [ 578.980356][ T31] [ 578.983518][ T31] __schedule+0x1798/0x4cc0 [ 578.988229][ T31] ? __lock_acquire+0xab9/0xd20 [ 578.993303][ T31] ? __lock_acquire+0xab9/0xd20 [ 578.998357][ T31] ? __pfx___schedule+0x10/0x10 [ 579.003256][ T31] ? schedule+0x91/0x360 [ 579.007845][ T31] schedule+0x165/0x360 [ 579.012069][ T31] schedule_preempt_disabled+0x13/0x30 [ 579.017841][ T31] __mutex_lock+0x7e6/0x1350 [ 579.022510][ T31] ? __mutex_lock+0x5bb/0x1350 [ 579.027329][ T31] ? tun_chr_close+0x3e/0x1c0 [ 579.032145][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 579.037434][ T31] ? __pfx_locks_remove_posix+0x10/0x10 [ 579.043133][ T31] ? do_futex+0x395/0x420 [ 579.047707][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.053133][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 579.058478][ T31] tun_chr_close+0x3e/0x1c0 [ 579.063162][ T31] __fput+0x44c/0xa70 [ 579.069548][ T31] fput_close_sync+0x119/0x200 [ 579.074385][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 579.079972][ T31] __x64_sys_close+0x7f/0x110 [ 579.086685][ T31] do_syscall_64+0xfa/0x3b0 [ 579.091743][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.098387][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.104975][ T31] ? clear_bhb_loop+0x60/0xb0 [ 579.109919][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.117296][ T31] RIP: 0033:0x7facf298eec9 [ 579.121981][ T31] RSP: 002b:00007facf3837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 579.131159][ T31] RAX: ffffffffffffffda RBX: 00007facf2be6360 RCX: 00007facf298eec9 [ 579.144911][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 579.156712][ T31] RBP: 00007facf2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 579.170574][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.184887][ T31] R13: 00007facf2be63f8 R14: 00007facf2be6360 R15: 00007fff31f8c418 [ 579.195983][ T31] [ 579.202398][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 579.216748][ T31] INFO: task syz.3.2060:12750 blocked for more than 147 seconds. [ 579.227859][ T31] Not tainted syzkaller #0 [ 579.235003][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.245649][ T31] task:syz.3.2060 state:D stack:27688 pid:12750 tgid:12735 ppid:5886 task_flags:0x400140 flags:0x00004004 [ 579.264244][ T31] Call Trace: [ 579.267996][ T31] [ 579.271085][ T31] __schedule+0x1798/0x4cc0 [ 579.276001][ T31] ? __lock_acquire+0xab9/0xd20 [ 579.281322][ T31] ? __lock_acquire+0xab9/0xd20 [ 579.286592][ T31] ? __pfx___schedule+0x10/0x10 [ 579.293342][ T31] ? schedule+0x91/0x360 [ 579.298461][ T31] schedule+0x165/0x360 [ 579.303082][ T31] schedule_preempt_disabled+0x13/0x30 [ 579.309318][ T31] __mutex_lock+0x7e6/0x1350 [ 579.314067][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 579.320059][ T31] ? __mutex_lock+0x5bb/0x1350 [ 579.325293][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 579.342725][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 579.348725][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 579.355180][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 579.360564][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 579.366615][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 579.372394][ T31] ? __asan_memcpy+0x40/0x70 [ 579.377139][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 579.382911][ T31] netlink_rcv_skb+0x205/0x470 [ 579.387941][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 579.396686][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 579.402417][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 579.408692][ T31] netlink_unicast+0x82f/0x9e0 [ 579.414572][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 579.420190][ T31] ? netlink_sendmsg+0x642/0xb30 [ 579.425542][ T31] ? skb_put+0x11b/0x210 [ 579.430026][ T31] netlink_sendmsg+0x805/0xb30 [ 579.434910][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.440437][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 579.445622][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 579.451041][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.456588][ T31] __sock_sendmsg+0x219/0x270 [ 579.461431][ T31] ____sys_sendmsg+0x505/0x830 [ 579.466373][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.471927][ T31] ? import_iovec+0x74/0xa0 [ 579.476505][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 579.481857][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.487984][ T31] ? __fget_files+0x2a/0x420 [ 579.493080][ T31] ? __fget_files+0x3a0/0x420 [ 579.499379][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 579.504629][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 579.510995][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 579.516805][ T31] ? do_syscall_64+0xbe/0x3b0 [ 579.522100][ T31] do_syscall_64+0xfa/0x3b0 [ 579.528159][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.533990][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.540842][ T31] ? clear_bhb_loop+0x60/0xb0 [ 579.545664][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.552020][ T31] RIP: 0033:0x7facf298eec9 [ 579.556601][ T31] RSP: 002b:00007facf37f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.565688][ T31] RAX: ffffffffffffffda RBX: 00007facf2be6540 RCX: 00007facf298eec9 [ 579.573878][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 579.582683][ T31] RBP: 00007facf2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 579.592355][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.600844][ T31] R13: 00007facf2be65d8 R14: 00007facf2be6540 R15: 00007fff31f8c418 [ 579.609517][ T31] [ 579.612584][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 579.622158][ T31] INFO: task syz.3.2060:12752 blocked for more than 147 seconds. [ 579.630015][ T31] Not tainted syzkaller #0 [ 579.634981][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.644024][ T31] task:syz.3.2060 state:D stack:27688 pid:12752 tgid:12735 ppid:5886 task_flags:0x400140 flags:0x00004004 [ 579.656157][ T31] Call Trace: [ 579.660450][ T31] [ 579.663913][ T31] __schedule+0x1798/0x4cc0 [ 579.668720][ T31] ? __lock_acquire+0xab9/0xd20 [ 579.673649][ T31] ? __lock_acquire+0xab9/0xd20 [ 579.679060][ T31] ? __pfx___schedule+0x10/0x10 [ 579.684000][ T31] ? schedule+0x91/0x360 [ 579.688795][ T31] schedule+0x165/0x360 [ 579.693000][ T31] schedule_preempt_disabled+0x13/0x30 [ 579.699004][ T31] __mutex_lock+0x7e6/0x1350 [ 579.703907][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 579.709629][ T31] ? __mutex_lock+0x5bb/0x1350 [ 579.714550][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 579.720186][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 579.725318][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 579.730950][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 579.736119][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 579.742519][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 579.748007][ T31] ? __asan_memcpy+0x40/0x70 [ 579.752655][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 579.758606][ T31] netlink_rcv_skb+0x205/0x470 [ 579.763426][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 579.769200][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 579.774568][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 579.780401][ T31] netlink_unicast+0x82f/0x9e0 [ 579.785244][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 579.790991][ T31] ? netlink_sendmsg+0x642/0xb30 [ 579.795984][ T31] ? skb_put+0x11b/0x210 [ 579.800488][ T31] netlink_sendmsg+0x805/0xb30 [ 579.805354][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.810805][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 579.815793][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 579.821223][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.826766][ T31] __sock_sendmsg+0x219/0x270 [ 579.831594][ T31] ____sys_sendmsg+0x505/0x830 [ 579.836431][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.842145][ T31] ? import_iovec+0x74/0xa0 [ 579.846816][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 579.854149][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.861760][ T31] ? __fget_files+0x2a/0x420 [ 579.866502][ T31] ? __fget_files+0x3a0/0x420 [ 579.873307][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 579.879861][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 579.885410][ T31] ? rcu_is_watching+0x15/0xb0 [ 579.892841][ T31] ? do_syscall_64+0xbe/0x3b0 [ 579.897992][ T31] do_syscall_64+0xfa/0x3b0 [ 579.902546][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.907936][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.914197][ T31] ? clear_bhb_loop+0x60/0xb0 [ 579.919201][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.925441][ T31] RIP: 0033:0x7facf298eec9 [ 579.930254][ T31] RSP: 002b:00007facf37d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.938957][ T31] RAX: ffffffffffffffda RBX: 00007facf2be6630 RCX: 00007facf298eec9 [ 579.946990][ T31] RDX: 0000000004008000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 579.955499][ T31] RBP: 00007facf2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 579.963685][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.971753][ T31] R13: 00007facf2be66c8 R14: 00007facf2be6630 R15: 00007fff31f8c418 [ 579.979907][ T31] [ 579.983007][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 579.992327][ T31] INFO: task syz.2.2061:12742 blocked for more than 147 seconds. [ 580.000382][ T31] Not tainted syzkaller #0 [ 580.005392][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 580.014595][ T31] task:syz.2.2061 state:D stack:24008 pid:12742 tgid:12741 ppid:5887 task_flags:0x400140 flags:0x00004004 [ 580.026771][ T31] Call Trace: [ 580.030191][ T31] [ 580.033259][ T31] __schedule+0x1798/0x4cc0 [ 580.038346][ T31] ? __lock_acquire+0xab9/0xd20 [ 580.043358][ T31] ? __lock_acquire+0xab9/0xd20 [ 580.048713][ T31] ? __pfx___schedule+0x10/0x10 [ 580.053634][ T31] ? schedule+0x91/0x360 [ 580.058491][ T31] schedule+0x165/0x360 [ 580.062732][ T31] schedule_preempt_disabled+0x13/0x30 [ 580.068652][ T31] __mutex_lock+0x7e6/0x1350 [ 580.073289][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 580.078580][ T31] ? __mutex_lock+0x5bb/0x1350 [ 580.083402][ T31] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 580.088744][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 580.093848][ T31] rtnetlink_rcv_msg+0x71c/0xb70 [ 580.099591][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 580.104797][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 580.110734][ T31] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 580.118083][ T31] netlink_rcv_skb+0x205/0x470 [ 580.123000][ T31] ? rcu_is_watching+0x15/0xb0 [ 580.128730][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 580.134426][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 580.140300][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 580.146112][ T31] netlink_unicast+0x82f/0x9e0 [ 580.152772][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 580.158465][ T31] ? netlink_sendmsg+0x642/0xb30 [ 580.163792][ T31] ? skb_put+0x11b/0x210 [ 580.168387][ T31] netlink_sendmsg+0x805/0xb30 [ 580.173321][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.180174][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 580.185239][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 580.191669][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.197815][ T31] __sock_sendmsg+0x219/0x270 [ 580.203969][ T31] ____sys_sendmsg+0x505/0x830 [ 580.209017][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.215268][ T31] ? import_iovec+0x74/0xa0 [ 580.220302][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 580.227710][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.233326][ T31] ? __fget_files+0x2a/0x420 [ 580.238103][ T31] ? __fget_files+0x3a0/0x420 [ 580.243288][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 580.248729][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 580.255093][ T31] ? rcu_is_watching+0x15/0xb0 [ 580.260649][ T31] ? do_syscall_64+0xbe/0x3b0 [ 580.265885][ T31] do_syscall_64+0xfa/0x3b0 [ 580.271203][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 580.276706][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.283407][ T31] ? clear_bhb_loop+0x60/0xb0 [ 580.288195][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.294187][ T31] RIP: 0033:0x7f807838eec9 [ 580.298908][ T31] RSP: 002b:00007f80792e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.307860][ T31] RAX: ffffffffffffffda RBX: 00007f80785e5fa0 RCX: 00007f807838eec9 [ 580.315901][ T31] RDX: 0000000004000080 RSI: 0000200000001200 RDI: 0000000000000005 [ 580.324735][ T31] RBP: 00007f8078411f91 R08: 0000000000000000 R09: 0000000000000000 [ 580.332816][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.341228][ T31] R13: 00007f80785e6038 R14: 00007f80785e5fa0 R15: 00007ffce474e948 [ 580.349621][ T31] [ 580.352673][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 580.362170][ T31] [ 580.362170][ T31] Showing all locks held in the system: [ 580.370004][ T31] 3 locks held by kworker/u8:0/12: [ 580.375259][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 580.388406][ T31] #1: ffffc90000117bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 580.400499][ T31] #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 580.410271][ T31] 3 locks held by kworker/u8:1/13: [ 580.416477][ T31] #0: ffff88802f518948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 580.430106][ T31] #1: ffffc90000127bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 580.444663][ T31] #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 580.454884][ T31] 1 lock held by khungtaskd/31: [ 580.460312][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 580.470828][ T31] 2 locks held by kworker/u8:3/49: [ 580.476289][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 580.488030][ T31] #1: ffff8880b8624008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 580.497923][ T31] 2 locks held by getty/5624: [ 580.502949][ T31] #0: ffff88814db530a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 580.513452][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 580.524443][ T31] 3 locks held by kworker/1:8/11631: [ 580.531901][ T31] #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 580.545891][ T31] #1: ffffc9001cd1fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 580.557493][ T31] #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 580.567259][ T31] 3 locks held by kworker/0:9/11655: [ 580.573025][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 580.584382][ T31] #1: ffffc9001cb3fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 580.595805][ T31] #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 580.606852][ T31] 3 locks held by kworker/0:12/11659: [ 580.612574][ T31] #0: ffff888022abf148 ((wq_completion)infiniband){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 580.624333][ T31] #1: ffffc9001cd8fbc0 ((work_completion)(&work->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 580.637218][ T31] #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 580.647000][ T31] 2 locks held by syz.4.2052/12719: [ 580.652432][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 580.661668][ T31] #1: ffff888061e34d30 (&dev_instance_lock_key#14){+.+.}-{4:4}, at: napi_disable+0x4e/0x80 [ 580.671918][ T31] 1 lock held by syz.0.2055/12723: [ 580.677049][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: ip6_mroute_setsockopt+0x956/0xf00 [ 580.686971][ T31] 1 lock held by syz.0.2055/12725: [ 580.692248][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: ip6_mroute_setsockopt+0xa84/0xf00 [ 580.702256][ T31] 1 lock held by syz.1.2059/12736: [ 580.707443][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 580.717134][ T31] 2 locks held by syz.1.2059/12738: [ 580.722679][ T31] #0: ffffffff8fa574d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 580.732507][ T31] #1: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 580.741842][ T31] 1 lock held by syz.3.2060/12737: [ 580.746988][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 580.756713][ T31] 1 lock held by syz.3.2060/12739: [ 580.761899][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 580.771293][ T31] 3 locks held by syz.3.2060/12740: [ 580.776715][ T31] #0: ffffffff8f59f6b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 580.785181][ T31] #1: ffffffff8f59f4c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 580.794410][ T31] #2: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_compat_doit+0x1fd/0x5f0 [ 580.804260][ T31] 1 lock held by syz.3.2060/12743: [ 580.809605][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 580.818817][ T31] 1 lock held by syz.3.2060/12746: [ 580.824046][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 580.833460][ T31] 1 lock held by syz.3.2060/12750: [ 580.838909][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 580.848959][ T31] 1 lock held by syz.3.2060/12752: [ 580.854413][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 580.864090][ T31] 1 lock held by syz.2.2061/12742: [ 580.869503][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 580.879948][ T31] 1 lock held by syz-executor/12756: [ 580.885280][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 580.894914][ T31] 1 lock held by syz-executor/12759: [ 580.900386][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 580.910221][ T31] 1 lock held by syz-executor/12764: [ 580.915568][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 580.925207][ T31] 1 lock held by syz-executor/12766: [ 580.930596][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 580.940442][ T31] 1 lock held by syz-executor/12768: [ 580.945770][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 580.955363][ T31] 1 lock held by syz-executor/12778: [ 580.960747][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 580.970431][ T31] 1 lock held by syz-executor/12784: [ 580.975813][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 580.985516][ T31] 1 lock held by syz-executor/12786: [ 580.990885][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 581.000578][ T31] 1 lock held by syz-executor/12790: [ 581.005906][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 581.015626][ T31] 1 lock held by syz-executor/12792: [ 581.021137][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 581.030778][ T31] 1 lock held by syz-executor/12803: [ 581.036101][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 581.045669][ T31] 1 lock held by syz-executor/12807: [ 581.051522][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 581.061178][ T31] 1 lock held by syz-executor/12810: [ 581.066742][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 581.076562][ T31] 1 lock held by syz-executor/12815: [ 581.082140][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 581.091694][ T31] 1 lock held by syz-executor/12817: [ 581.097011][ T31] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 581.106869][ T31] [ 581.109423][ T31] ============================================= [ 581.109423][ T31] [ 581.117954][ T31] NMI backtrace for cpu 1 [ 581.117975][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 581.117997][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 581.118018][ T31] Call Trace: [ 581.118027][ T31] [ 581.118036][ T31] dump_stack_lvl+0x189/0x250 [ 581.118069][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.118092][ T31] ? __pfx__printk+0x10/0x10 [ 581.118132][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 581.118165][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 581.118197][ T31] ? __pfx__printk+0x10/0x10 [ 581.118230][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 581.118266][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 581.118300][ T31] watchdog+0xf93/0xfe0 [ 581.118335][ T31] ? watchdog+0x1de/0xfe0 [ 581.118370][ T31] kthread+0x70e/0x8a0 [ 581.118400][ T31] ? __pfx_watchdog+0x10/0x10 [ 581.118428][ T31] ? __pfx_kthread+0x10/0x10 [ 581.118455][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.118488][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.118517][ T31] ? __pfx_kthread+0x10/0x10 [ 581.118545][ T31] ret_from_fork+0x439/0x7d0 [ 581.118577][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 581.118606][ T31] ? __switch_to_asm+0x39/0x70 [ 581.118632][ T31] ? __switch_to_asm+0x33/0x70 [ 581.118656][ T31] ? __pfx_kthread+0x10/0x10 [ 581.118683][ T31] ret_from_fork_asm+0x1a/0x30 [ 581.118726][ T31] [ 581.118734][ T31] Sending NMI from CPU 1 to CPUs 0: [ 581.267816][ C0] NMI backtrace for cpu 0 [ 581.267836][ C0] CPU: 0 UID: 0 PID: 77 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 581.267857][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 581.267870][ C0] Workqueue: bat_events batadv_nc_worker [ 581.267902][ C0] RIP: 0010:check_preemption_disabled+0x3/0x120 [ 581.267925][ C0] Code: e3 8b 48 c7 c6 e0 3e e3 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 53 48 83 ec 10 65 48 8b 05 be 5e 26 07 48 89 44 24 08 65 8b [ 581.267941][ C0] RSP: 0018:ffffc90000007bd8 EFLAGS: 00000046 [ 581.267955][ C0] RAX: 0000000000000000 RBX: 1ffff11005693b4d RCX: 4e494f482d2bba00 [ 581.267967][ C0] RDX: 0000000000000008 RSI: ffffffff8be33ee0 RDI: ffffffff8be33ea0 [ 581.267979][ C0] RBP: ffff88802b49da00 R08: ffffffff8fa3a637 R09: 1ffffffff1f474c6 [ 581.267992][ C0] R10: dffffc0000000000 R11: ffffffff81945220 R12: dffffc0000000000 [ 581.268006][ C0] R13: 1ffff11005693b43 R14: ffffffff8dbd4008 R15: 0000000000000000 [ 581.268018][ C0] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 581.268032][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.268044][ C0] CR2: 000055778ffb6000 CR3: 0000000055e6e000 CR4: 00000000003526f0 [ 581.268060][ C0] Call Trace: [ 581.268068][ C0] [ 581.268075][ C0] select_task_rq_fair+0x6f/0x3570 [ 581.268098][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 581.268133][ C0] try_to_wake_up+0x4d8/0x12b0 [ 581.268161][ C0] hrtimer_wakeup+0x4e/0x60 [ 581.268178][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 581.268196][ C0] __hrtimer_run_queues+0x529/0xc60 [ 581.268223][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 581.268239][ C0] ? read_tsc+0x9/0x20 [ 581.268276][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 581.268307][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 581.268330][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 581.268346][ C0] [ 581.268352][ C0] [ 581.268358][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 581.268391][ C0] RIP: 0010:batadv_nc_worker+0x187/0x610 [ 581.268417][ C0] Code: 4b 03 00 00 48 c7 c2 40 50 b7 8c e8 b3 b3 55 f6 48 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 ef e8 2d 56 db f6 48 8b 6d 00 <48> 85 ed 0f 94 c0 48 81 c5 38 fe ff ff 0f 94 c1 08 c1 74 07 e8 a0 [ 581.268431][ C0] RSP: 0018:ffffc9000218fa20 EFLAGS: 00000246 [ 581.268445][ C0] RAX: 1ffff11006721190 RBX: 0000000000000001 RCX: ffff88801cb38000 [ 581.268457][ C0] RDX: 0000000000000000 RSI: ffffffff8be33ee0 RDI: ffffffff8be33ea0 [ 581.268469][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b47d422 [ 581.268480][ C0] R10: dffffc0000000000 R11: ffffffff8b47d350 R12: dffffc0000000000 [ 581.268494][ C0] R13: ffffffff8b47d422 R14: ffff88803339cd80 R15: 0000000000000190 [ 581.268507][ C0] ? batadv_nc_worker+0xd2/0x610 [ 581.268533][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 581.268557][ C0] ? batadv_nc_worker+0xd2/0x610 [ 581.268588][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 581.268607][ C0] process_scheduled_works+0xae1/0x17b0 [ 581.268639][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 581.268672][ C0] worker_thread+0x8a0/0xda0 [ 581.268705][ C0] kthread+0x70e/0x8a0 [ 581.268727][ C0] ? __pfx_worker_thread+0x10/0x10 [ 581.268743][ C0] ? __pfx_kthread+0x10/0x10 [ 581.268765][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.268790][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.268806][ C0] ? __pfx_kthread+0x10/0x10 [ 581.268827][ C0] ret_from_fork+0x439/0x7d0 [ 581.268845][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 581.268866][ C0] ? __switch_to_asm+0x39/0x70 [ 581.268888][ C0] ? __switch_to_asm+0x33/0x70 [ 581.268910][ C0] ? __pfx_kthread+0x10/0x10 [ 581.268931][ C0] ret_from_fork_asm+0x1a/0x30 [ 581.268962][ C0] [ 581.269937][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 581.269959][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 581.269987][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 581.270010][ T31] Call Trace: [ 581.270021][ T31] [ 581.270032][ T31] dump_stack_lvl+0x99/0x250 [ 581.270064][ T31] ? __asan_memcpy+0x40/0x70 [ 581.270092][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.270122][ T31] ? __pfx__printk+0x10/0x10 [ 581.270174][ T31] vpanic+0x281/0x750 [ 581.270201][ T31] ? __pfx_vpanic+0x10/0x10 [ 581.270232][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 581.270265][ T31] ? preempt_schedule+0xae/0xc0 [ 581.270291][ T31] ? preempt_schedule_common+0x83/0xd0 [ 581.270323][ T31] panic+0xb9/0xc0 [ 581.270350][ T31] ? __pfx_panic+0x10/0x10 [ 581.270379][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 581.270424][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 581.270462][ T31] watchdog+0xfd2/0xfe0 [ 581.270504][ T31] ? watchdog+0x1de/0xfe0 [ 581.270544][ T31] kthread+0x70e/0x8a0 [ 581.270578][ T31] ? __pfx_watchdog+0x10/0x10 [ 581.270608][ T31] ? __pfx_kthread+0x10/0x10 [ 581.270642][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.270677][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.270699][ T31] ? __pfx_kthread+0x10/0x10 [ 581.270732][ T31] ret_from_fork+0x439/0x7d0 [ 581.270760][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 581.270791][ T31] ? __switch_to_asm+0x39/0x70 [ 581.270822][ T31] ? __switch_to_asm+0x33/0x70 [ 581.270851][ T31] ? __pfx_kthread+0x10/0x10 [ 581.270881][ T31] ret_from_fork_asm+0x1a/0x30 [ 581.270932][ T31] [ 581.818243][ T31] Kernel Offset: disabled [ 581.822580][ T31] Rebooting in 86400 seconds..