last executing test programs: 4.394549905s ago: executing program 2 (id=1967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)) r4 = socket(0xf, 0xa, 0x6) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={r5, 0x0, 0x200}, &(0x7f0000000200)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4.093603244s ago: executing program 2 (id=1971): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2000000000}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x3507, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.362308857s ago: executing program 4 (id=1980): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1ec}}, 0x0) 3.157879058s ago: executing program 4 (id=1982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xfffffffffffffffb}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}}, 0x4001) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000005080)=""/4093, 0xffd}, {0x0}, {&(0x7f0000000480)=""/101, 0x65}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0xa}], 0x6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) syz_emit_ethernet(0x11, &(0x7f0000000b80)=ANY=[@ANYBLOB="0180c20000bfe201aaaaaaaaaaaa080503021f"], 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa8}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'veth0_to_bond\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) ioctl$PPPIOCSFLAGS(r3, 0x40047459, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, 0x140a, 0x100, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000090}, 0x41) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x20000000) (async) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r4, 0x8080, 0x2}) sendmsg$can_bcm(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)={0x6, 0x8, 0x9, {0x0, 0xea60}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x0, 0x1}, 0x1f, 0x0, 0x0, 0x0, "4e48b4f9e71d3ed90e8ad89e6ab88302a425726cc866c6718ceee9221814bd11ef18698fc9aa6ea83fd97b8a63ccdfbe81e399ecf33339c0c2f7d14e27067bd8"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2162) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94) 3.066241188s ago: executing program 3 (id=1984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtaction={0x8c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_tunnel_key={0x74, 0x1, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x4040850) 2.973642927s ago: executing program 4 (id=1985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5c}}, 0x802) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x1, @bcast, @netrom={'nr', 0x0}, 0xffff, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, 0x0, [@default, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) close(r2) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc5fff, 0x1000, 0xffffffff}, 0x20) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000140)={0x604, 0x2, 0xbbb7, 0x5}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 2.934592185s ago: executing program 3 (id=1986): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x20000000000000ba, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r2}, 0x18) 1.963308647s ago: executing program 4 (id=1990): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000340)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff1}, {0xffff, 0xd}, {0xa, 0x1}}}, 0x24}}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x2}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r7, 0x58, &(0x7f0000000680)}, 0x10) (async) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, 0x0, 0x2, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @cgroup_sockopt}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4], 0x0, 0x4a}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0xe5, &(0x7f00000002c0)=""/229, 0x40f00, 0x70, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x5, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0], 0x0, 0x10, 0x2}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.882045159s ago: executing program 1 (id=1991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r1, 0x0, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x30) 1.876905536s ago: executing program 4 (id=1992): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r4, @ANYRES32=r4, @ANYBLOB="0500080016f7ffffff00070009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf251500000008000300", @ANYRES32=r7, @ANYBLOB="08002a008c"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)={0x1b8, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x108, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cd7675df575e9e867dad1f60fda08b164de4bff1d5b01ca35e1880f4dfc98c51"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fb6dc029fb6630a87faaed174be317147d682f0322fbdc85d815e7caf726fdea"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b6d28d33046afdaca0d479ba4e0a792d52fd91f5cf88328c971c43c45aa597b8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a0d75dd29bd18affa8c45e5abf84b7f8"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3c108c848eb9d31f7fe99a0d66105a4cdb8a2d69841677c22ba143bee14a454a"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "32c2a16533c2084621d965b937564da2"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3034e110cb49dc2485dffe4c68f2490e"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b4ecb9dcc5e5bfc004402b1a1537d2e3717b2fc82ebf3f43f7033c04ba5386e7"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cd68732685d422844aca03641bbcfc3e"}]}, @NL802154_ATTR_SEC_KEY={0x94, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f5102f9194a1fbbb507f7f44bf294960d1cf4d6138ba73e145b2fdd35f72bdd2"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bf20ac96fb7afd7090bb34eb599a74b3584f29c287d64bef04b9137e98854ae2"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0006373b4550d6692118bd8fb0bf9f2cb00653d7103b101848965c762f3224fc"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a7ed94dad45720aa98b2f2cec6647fae"}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20040081}, 0x20004884) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r8}, 0x0, &(0x7f0000000300)='%-010d \x00'}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000600)=ANY=[], 0x10448) bind$alg(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) unshare(0x62040200) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x7fffffff, @mcast2, 0x4}}, 0x40, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r15, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) r16 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0100ffffffff00000000000c0006000300000000800000040007800c000200ff7f000000000000000000"], 0x30}}, 0x20000000) 1.697505013s ago: executing program 1 (id=1993): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x10, 0xc0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x1, 0x2, 0x0, {}, [{0x54, 0x1, [@m_mpls={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xeccef}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4b1e2}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe4658}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x10, 0xc0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x1, 0x2, 0x0, {}, [{0x54, 0x1, [@m_mpls={0x50, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xeccef}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4b1e2}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe4658}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) 1.598117891s ago: executing program 2 (id=1994): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={r0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x40000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f0000000300), &(0x7f0000000340)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x19}, 0x1, 0x0, 0x0, 0x24008010}, 0x800) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="93fd572080ac3332e2583cee456101e03625a75c59c78ffeaf096165215773aadeb1a764578abcc9222c9d61a2fa798438e7a52063e02b23dd6d478348980d035cef16eae9e13d75ae04097438d4d9ae23e857da57c3", @ANYRES16=r3, @ANYRES8=r5, @ANYRES32=0x0, @ANYBLOB="0c00a7dc985c09930d9dfbee72b53983b6a099f100"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) 1.501831747s ago: executing program 1 (id=1995): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ppoll(&(0x7f0000000000)=[{r1, 0x400}], 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="ce", 0x1}, {0x0}], 0x2}}], 0x1, 0x1) 1.491119767s ago: executing program 0 (id=1996): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000005c0)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0702000000000000000001000000040008801c00048005000300010000000500030000000000050003000200000008080100030000000800020001000000"], 0x44}}, 0x880) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x185, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x6b, 0x60000000}, 0xf) 1.313100982s ago: executing program 1 (id=1997): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x60, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 1.282508314s ago: executing program 2 (id=1998): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x73, @broadcast, 0x0, 0x0, 'fo\x00', 0x19e172f08959ac5f, 0x10001, 0x79}, 0x2c) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) 1.244679604s ago: executing program 0 (id=1999): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007"], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7100ffdbdf251b000000070021"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x48080) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0xfc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {}, {0xfff2, 0x7}}, [@TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0x7, 0x9, 0x2, 0x39380afd}}, {0x4}}, {{0x1c, 0x1, {0x96, 0x9, 0x8, 0x8, 0x2, 0xfffffffa, 0x0, 0x8}}, {0x14, 0x2, [0x2, 0x81, 0xfff7, 0x2, 0x7, 0x0, 0xf0a3, 0xc9]}}, {{0x1c, 0x1, {0xc8, 0x4, 0x2, 0x66a, 0x0, 0x81, 0x8, 0x2}}, {0x8, 0x2, [0x40c, 0x9]}}, {{0x1c, 0x1, {0xcb, 0x1, 0x2, 0x26f9, 0x2, 0x3ff, 0xa, 0x6}}, {0x10, 0x2, [0x5, 0x3, 0x7, 0x7, 0x2, 0x0]}}, {{0x1c, 0x1, {0x8, 0x1, 0x4, 0x0, 0x1, 0x3, 0x3, 0x9}}, {0x16, 0x2, [0xab, 0x9, 0x1ff, 0x1, 0x3, 0x1000, 0x1, 0x8, 0x803]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) 1.101916909s ago: executing program 1 (id=2000): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@local, @random="000200080010", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0202"}, {0x0, 0x1, "000000050000000026000400"}, {0x26, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fc00000000000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="3400238008001a000200000008001c000c00000005001300010000000600160003a2000004001b000100"], 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x810) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x26d, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.067776192s ago: executing program 3 (id=2001): r0 = socket(0x18, 0x5, 0x0) getpeername$netrom(r0, 0x0, &(0x7f0000000080)) (async) getpeername$netrom(r0, 0x0, &(0x7f0000000080)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0, 0xffffffffffffffef}}], 0x3e8, 0x0) 931.367578ms ago: executing program 3 (id=2002): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000100)={0x0, 0x7fff, 0x5}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000500)={0x0, 0x9, @start={r5, 0x0, "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", "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"}, [0xffffffffffffffff, 0x6, 0x800, 0x4, 0x6, 0x8, 0x3b78, 0x7, 0x9, 0xa7, 0x1, 0x2, 0x8000, 0xa817, 0x7, 0xb1, 0x8c, 0xfffffffffffffffa, 0x3, 0x0, 0x7, 0x4, 0x8, 0x40, 0xa5f9, 0x4, 0x0, 0x1, 0x4, 0x1, 0xb477, 0x3, 0xd, 0x6, 0x0, 0xfffffffffffffbff, 0x6, 0x8, 0x7fff00000000, 0x3, 0x5, 0x0, 0xff, 0xfffffffffffff3b5, 0xf6, 0x280, 0x4, 0x3, 0xc, 0x100000000, 0x101, 0x9, 0xad6, 0x7, 0xa000, 0x2, 0xfffffffffffffb71, 0x2, 0x55, 0x8, 0x0, 0x400, 0x1, 0x642]}) socketpair(0x28, 0x4, 0x2, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000f80)={0x0, @in={{0x2, 0x4e23, @local}}, 0x1, 0xffff, 0x0, 0x2, 0x2}, &(0x7f0000001040)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000001080)={r8, 0x1}, &(0x7f00000010c0)=0x8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x1b, 0x7, 0x5f8, 0xf512, 0x40821, 0x1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={0xffffffffffffffff, 0x3, 0x18}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001240)={0x1, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x15, 0x9, 0x9, 0x3e5f, 0x41900, 0x1, 0x0, '\x00', r3, r2, 0x2, 0x1, 0x3}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x13, 0x7, 0x41c2, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', r3, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r3, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001680), &(0x7f00000016c0)}, 0x20) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001780)=@generic={&(0x7f0000001740)='./file0\x00', 0x0, 0x10}, 0x18) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xffff, '\x00', r3, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) r19 = bpf$ITER_CREATE(0x21, &(0x7f0000001840), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x34, &(0x7f0000001280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@x}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000014c0)={0x2, 0x6, 0x200, 0x7fff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001880)=[r13, 0x1, r14, r15, r16, r17, r2, r18, 0x1, r19], &(0x7f00000018c0)=[{0x1, 0x1, 0xb, 0x4}, {0x2, 0x1, 0xe, 0x2}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001bc0)={&(0x7f00000019c0)="8b3e6d89ac3ecab4", &(0x7f0000001a00)=""/54, &(0x7f0000001a40)="50b1cd0826bd67d1eef85c19da4a1ccd909a11feb5946f9e1b85254d9f50611e50cb259aed8da33104e856683aa930548eb00e066dda6259780ccea1d66f69f8eb2411116282f8ea124d33337384091999bd264d62c0ef5a975778c397766384310ae83548d74f8f9018231b21e1b924363154ebb3f6368c1f18eac91c328d5a1c088208757d1a7e2c9e31d55a09e5ba618a68c6e81e40180edc233c8b57b7df2669d9a141a62e3fc437ac3da7d88592815843262dd7fd566e88cd09dc546180bc41556994", &(0x7f0000001b40)="f2cf71576bf065d086e244e9d5c76bd937f7b09de120678aedb40713042a72140e19d0fe87e7b07dc0ceb7510973e7af87ad44d7e7c0dcae8e5a8d1be7d9c575491ca3e0119c77a401eb5d3a4fe4fdd62562f3f2cf45a3ef5a7b342c446526709394f5b7e6531119bbdadd9b9393d4ee281198d57575c7aa5147", 0x76f2, r19}, 0x38) r20 = syz_genetlink_get_family_id$gtp(&(0x7f0000001c40), r6) sendmsg$GTP_CMD_NEWPDP(r19, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x1c, r20, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20048041) ioctl$F2FS_IOC_SEC_TRIM_FILE(r6, 0x4018f514, &(0x7f0000001d40)={0x7d, 0x8, 0x3}) 909.211453ms ago: executing program 0 (id=2003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000140)) 658.123576ms ago: executing program 2 (id=2004): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r1) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="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", 0x137}], 0x2, 0x0, 0x0, 0x8000}], 0x1, 0x41) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, r0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x11) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='R\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf253500000008000300", @ANYRES32=r4, @ANYBLOB="0400340014005500"], 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 456.568739ms ago: executing program 0 (id=2005): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000080)="9882340731b5122a885670d2814f5051e8247a1dd5d23b46bd2d3693d1d6ddd5fd07c4c93c8482bb98977f64868edc9c6c9dab0db4ea64a176f96e0f15fc4365969b0bfc85c0516060c1485231ff6c844fc2fe3607fcb7ac7cdb8f642361249819d1c0c24464960b41c80b604ed61992290000000000", 0x76) sendmsg$802154_raw(r0, &(0x7f0000001100)={&(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000040)={&(0x7f0000000100)="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", 0x1000}, 0x1, 0x0, 0x0, 0x40400b1}, 0x14004004) 348.861226ms ago: executing program 3 (id=2006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='GPL\x00', 0x12, 0xc08, &(0x7f0000000280)=""/4087, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04fcff80000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00611400000000000000000a00445e"], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0xfffff801, 0x4) 258.107488ms ago: executing program 2 (id=2007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfdfffff7}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = accept(r1, &(0x7f0000000040)=@tipc, &(0x7f00000000c0)=0x80) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x9}]}, 0x24}}, 0xcd50ca5f6fbac66) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$xdp(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="68a35545d9", 0x5}, {&(0x7f0000000180)="4189efd800482359960b42fd67abb0da25490c191e5ea6f3e33a46f1a8cfbd9f8e154299b7df43b58d3d5d6d2acd457eb6f582", 0x33}], 0x2}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x114, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x80) 256.517914ms ago: executing program 0 (id=2008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffc, 0x10000003, 0xfffffffa, 0x0, 0x4000000, {}, {0x0, 0x0, 0xfffc, 0x0, 0x0, 0x8}, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0100"], 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac14144fc6007597ad07030a5df1497d2530b9000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e801400018008000100ac14142a08000200ac1414380c0002800500010000000000"], 0x88}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x1411, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x2400c840) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 171.967271ms ago: executing program 1 (id=2009): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x1, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0xf5, 0x0, 0x1, 0x9, 0x6, @dev}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="14005a801000018004000100"], 0x30}}, 0x40000) 151.071205ms ago: executing program 4 (id=2010): openat$tun(0xffffffffffffff9c, 0x0, 0x2aa40, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000007"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000000000000000000001801000078"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280), 0x4) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (rerun: 64) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 52.882568ms ago: executing program 3 (id=2011): socket$inet6(0xa, 0x800, 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="fe0a338e", 0x4}], 0x2, 0x0, 0x0, 0x400d0}}, {{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000400)="c8df70", 0x3}], 0x1, 0x0, 0x0, 0x4040}}], 0x2, 0x4841) syz_genetlink_get_family_id$l2tp(0x0, r0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00222bc07d4455e0000000000000e600"/35], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000000500007910480000000000610400000000950000085e1c0687c48466fb0d8915cd6644156573e90d4ced35048a6e40a35a675bf798127beb409d7e8303e9f50fd2b9def610c7292203914a9590a785bee9f79653ff82e12bdcda9bf38de65adacafc43c8f4b1d49972f027bff1a2ab7e525cee94921627a4789629d9c43aff0845dbfbe41250bf40d23f07498c9b3a435f8726af87200485fed5bc27c73e4e01"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0xffffffffffffff44, 0x0, 0x0, 0x10, 0x2}, 0x94) close(r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0f00000004000000040000001200000010920000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r4, @ANYBLOB="00000000000000863bf30f00000000b7d1c9878f623d7241e807dfd200", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB="2680000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r10, 0xfffffffc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRESDEC=r10, @ANYBLOB="8b040400000000002800128008000100736974001c00028008000300ffffffff080002007f0000010600080003000000be6fdbb0cf24c74a03354a789a5513cf57985731c5242899492327454addd28867b6609270ebdb4193d14d2e2002ce829fa22a327616a544e6e9c4209fb0cf74f8c4db7d368e1e29e6afff7e476840361d3bf5eb9f7b47fbb1e7762fc7e5161c8d0ae56628144cdd7a400c09be3589164d21e59e5e9c"], 0x48}}, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 0s ago: executing program 0 (id=2012): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000bc0)={&(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)=""/102, 0x66}, {&(0x7f00000002c0)=""/204, 0xcc}], 0x2, &(0x7f0000000900)=[@cswp={0x58, 0x114, 0x7, {{0xfffffffd, 0x9}, &(0x7f0000000440)=0x5, &(0x7f0000000480)=0x6, 0x0, 0x3, 0xfff, 0x8, 0x0, 0x7fffffffffffffff}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000004c0)=""/153, 0x99}, &(0x7f0000000580), 0x12}}, @cswp={0x58, 0x114, 0x7, {{0x2d, 0x6}, &(0x7f00000005c0)=0xd, &(0x7f0000000600)=0x5f, 0xfffffffffffff1ac, 0xfff, 0x0, 0x3, 0x0, 0x80}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80000000, 0x2}, &(0x7f0000000640)=0x7, &(0x7f0000000680), 0x0, 0x3, 0x7, 0x5, 0x6, 0xa}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfff, 0xd04}, &(0x7f00000006c0)=0x7, &(0x7f00000007c0)=0x1ba69793, 0x521, 0x2ca8, 0xffffffffffffffff, 0x506645c5, 0x1c, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x1a000000}}, @rdma_dest={0x18, 0x114, 0x2, {0x9, 0x80000}}, @fadd={0x58, 0x114, 0x6, {{0x4, 0x5}, &(0x7f0000000800)=0x4, &(0x7f0000000840)=0x6, 0x6, 0x1069, 0x8, 0x3, 0x68, 0x3}}, @zcopy_cookie={0x18}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x6}, &(0x7f0000000880)=0x5, &(0x7f00000008c0)=0x4, 0xb47, 0x1ff, 0x7, 0x7fffffffffffffff, 0x0, 0x9}}], 0x288, 0x20004001}, 0xc0d0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = accept$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000100), &(0x7f0000000180)='%-010d \x00'}, 0x20) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}) kernel console output (not intermixed with test programs): sim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.906429][ T1340] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.950977][ T1340] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.023707][ T8027] lo speed is unknown, defaulting to 1000 [ 163.101408][ T8068] FAULT_INJECTION: forcing a failure. [ 163.101408][ T8068] name failslab, interval 1, probability 0, space 0, times 1 [ 163.164053][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz.0.542 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 163.164083][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.164096][ T8068] Call Trace: [ 163.164105][ T8068] [ 163.164125][ T8068] dump_stack_lvl+0x189/0x250 [ 163.164176][ T8068] ? __pfx____ratelimit+0x10/0x10 [ 163.164216][ T8068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.164238][ T8068] ? __pfx__printk+0x10/0x10 [ 163.164269][ T8068] ? __pfx___might_resched+0x10/0x10 [ 163.164290][ T8068] ? fs_reclaim_acquire+0x7d/0x100 [ 163.164325][ T8068] should_fail_ex+0x414/0x560 [ 163.164382][ T8068] should_failslab+0xa8/0x100 [ 163.164413][ T8068] __kmalloc_noprof+0xcb/0x4f0 [ 163.164438][ T8068] ? kfree+0x4d/0x440 [ 163.164459][ T8068] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 163.164489][ T8068] tomoyo_realpath_from_path+0xe3/0x5d0 [ 163.164515][ T8068] ? tomoyo_domain+0xd9/0x130 [ 163.164546][ T8068] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 163.164577][ T8068] tomoyo_path_number_perm+0x1e8/0x5a0 [ 163.164613][ T8068] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.164665][ T8068] ? __lock_acquire+0xab9/0xd20 [ 163.164710][ T8068] ? __fget_files+0x2a/0x420 [ 163.164745][ T8068] ? __fget_files+0x2a/0x420 [ 163.164773][ T8068] ? __fget_files+0x3a0/0x420 [ 163.164802][ T8068] ? __fget_files+0x2a/0x420 [ 163.164846][ T8068] security_file_ioctl+0xcb/0x2d0 [ 163.164876][ T8068] __se_sys_ioctl+0x47/0x170 [ 163.164902][ T8068] do_syscall_64+0xfa/0x3b0 [ 163.164920][ T8068] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.164937][ T8068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.164957][ T8068] ? clear_bhb_loop+0x60/0xb0 [ 163.164979][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.164997][ T8068] RIP: 0033:0x7fa25478e9a9 [ 163.165019][ T8068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.165035][ T8068] RSP: 002b:00007fa2555be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.165062][ T8068] RAX: ffffffffffffffda RBX: 00007fa2549b5fa0 RCX: 00007fa25478e9a9 [ 163.165076][ T8068] RDX: 0000200000000040 RSI: 0000000000008b2c RDI: 0000000000000004 [ 163.165087][ T8068] RBP: 00007fa2555be090 R08: 0000000000000000 R09: 0000000000000000 [ 163.165099][ T8068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.165109][ T8068] R13: 0000000000000000 R14: 00007fa2549b5fa0 R15: 00007fff3268ef08 [ 163.165139][ T8068] [ 163.165148][ T8068] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.686392][ T8077] ..@ÿ: renamed from bond_slave_0 [ 164.238431][ T8107] __nla_validate_parse: 1 callbacks suppressed [ 164.238450][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 164.370694][ T8108] macsec1: entered promiscuous mode [ 164.389642][ T8108] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 164.399555][ T8108] macsec1: entered allmulticast mode [ 164.464046][ T8112] geneve2: entered promiscuous mode [ 164.495662][ T1340] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 164.526425][ T1340] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 164.627154][ T1340] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 164.688454][ T8114] lo speed is unknown, defaulting to 1000 [ 164.688472][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 164.707759][ T8126] syzkaller0: entered allmulticast mode [ 164.925871][ T8131] tipc: Enabled bearer , priority 0 [ 164.964304][ T8131] syzkaller0: entered promiscuous mode [ 164.982166][ T8131] syzkaller0: entered allmulticast mode [ 165.092853][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.557'. [ 165.149354][ T8131] tipc: Resetting bearer [ 165.253951][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.558'. [ 165.293173][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.558'. [ 165.426463][ T8130] tipc: Resetting bearer [ 165.504575][ T8130] tipc: Disabling bearer [ 165.560110][ T8153] netlink: 'syz.3.561': attribute type 2 has an invalid length. [ 165.649409][ T8153] netlink: 116 bytes leftover after parsing attributes in process `syz.3.561'. [ 165.659528][ T8153] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 166.264119][ T8179] pim6reg1: entered promiscuous mode [ 166.290957][ T8179] pim6reg1: entered allmulticast mode [ 166.435887][ T8188] netlink: 'syz.1.569': attribute type 1 has an invalid length. [ 166.525476][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 166.535755][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 166.562579][ T8191] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.570'. [ 166.750042][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 166.790454][ T8200] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 166.800373][ T8200] macvtap1: entered allmulticast mode [ 166.806468][ T8200] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 166.834762][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.573'. [ 167.270538][ T8231] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 167.309210][ T8231] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 167.524974][ T8237] vlan1: entered allmulticast mode [ 167.544008][ T8237] dummy0: entered allmulticast mode [ 168.330764][ T8271] bridge_slave_1: left allmulticast mode [ 168.348078][ T8271] bridge_slave_1: left promiscuous mode [ 168.355611][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.369432][ T8271] bridge_slave_0: left allmulticast mode [ 168.376022][ T8271] bridge_slave_0: left promiscuous mode [ 168.382375][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.723462][ T8280] tipc: Enabling of bearer rejected, failed to enable media [ 168.815490][ T8286] tipc: Enabled bearer , priority 0 [ 168.835190][ T8286] syzkaller0: entered promiscuous mode [ 168.841261][ T8286] syzkaller0: entered allmulticast mode [ 168.935061][ T8286] tipc: Resetting bearer [ 168.986086][ T8285] tipc: Resetting bearer [ 169.063006][ T8285] tipc: Disabling bearer [ 169.133379][ T8301] netlink: 'syz.1.599': attribute type 4 has an invalid length. [ 169.155164][ T8290] lo speed is unknown, defaulting to 1000 [ 169.823862][ T8315] FAULT_INJECTION: forcing a failure. [ 169.823862][ T8315] name failslab, interval 1, probability 0, space 0, times 0 [ 169.861795][ T8315] CPU: 0 UID: 0 PID: 8315 Comm: syz.0.602 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 169.861828][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.861841][ T8315] Call Trace: [ 169.861850][ T8315] [ 169.861860][ T8315] dump_stack_lvl+0x189/0x250 [ 169.861890][ T8315] ? __pfx____ratelimit+0x10/0x10 [ 169.861926][ T8315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.861950][ T8315] ? __pfx__printk+0x10/0x10 [ 169.861984][ T8315] ? __pfx___might_resched+0x10/0x10 [ 169.862007][ T8315] ? fs_reclaim_acquire+0x7d/0x100 [ 169.862046][ T8315] should_fail_ex+0x414/0x560 [ 169.862086][ T8315] should_failslab+0xa8/0x100 [ 169.862119][ T8315] __kmalloc_cache_noprof+0x70/0x3d0 [ 169.862148][ T8315] ? __request_module+0x2b5/0x5e0 [ 169.862173][ T8315] __request_module+0x2b5/0x5e0 [ 169.862194][ T8315] ? aa_get_newest_label+0xf7/0x5d0 [ 169.862218][ T8315] ? __pfx___request_module+0x10/0x10 [ 169.862242][ T8315] ? rcu_is_watching+0x15/0xb0 [ 169.862275][ T8315] ? security_capable+0x7e/0x2e0 [ 169.862300][ T8315] ? dev_load+0x21/0x1f0 [ 169.862319][ T8315] dev_load+0x190/0x1f0 [ 169.862341][ T8315] ? __pfx_ioctl_standard_call+0x10/0x10 [ 169.862366][ T8315] wext_ioctl_dispatch+0x9d/0x410 [ 169.862395][ T8315] wext_handle_ioctl+0x100/0x1c0 [ 169.862421][ T8315] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 169.862470][ T8315] ? __lock_acquire+0xab9/0xd20 [ 169.862515][ T8315] sock_ioctl+0x15f/0x790 [ 169.862549][ T8315] ? __pfx_sock_ioctl+0x10/0x10 [ 169.862579][ T8315] ? __fget_files+0x2a/0x420 [ 169.862609][ T8315] ? __fget_files+0x3a0/0x420 [ 169.862638][ T8315] ? __fget_files+0x2a/0x420 [ 169.862672][ T8315] ? bpf_lsm_file_ioctl+0x9/0x20 [ 169.862696][ T8315] ? __pfx_sock_ioctl+0x10/0x10 [ 169.862726][ T8315] __se_sys_ioctl+0xfc/0x170 [ 169.862754][ T8315] do_syscall_64+0xfa/0x3b0 [ 169.862775][ T8315] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.862795][ T8315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.862816][ T8315] ? clear_bhb_loop+0x60/0xb0 [ 169.862842][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.862862][ T8315] RIP: 0033:0x7fa25478e9a9 [ 169.862882][ T8315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.862899][ T8315] RSP: 002b:00007fa2555be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.862922][ T8315] RAX: ffffffffffffffda RBX: 00007fa2549b5fa0 RCX: 00007fa25478e9a9 [ 169.862936][ T8315] RDX: 0000200000000040 RSI: 0000000000008b2c RDI: 0000000000000004 [ 169.862949][ T8315] RBP: 00007fa2555be090 R08: 0000000000000000 R09: 0000000000000000 [ 169.862962][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.862974][ T8315] R13: 0000000000000000 R14: 00007fa2549b5fa0 R15: 00007fff3268ef08 [ 169.863007][ T8315] [ 170.139203][ T8295] lo speed is unknown, defaulting to 1000 [ 170.743519][ T8316] __nla_validate_parse: 12 callbacks suppressed [ 170.743539][ T8316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.603'. [ 170.796755][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'. [ 171.490178][ T8346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 171.524052][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.611'. [ 171.723579][ T8357] FAULT_INJECTION: forcing a failure. [ 171.723579][ T8357] name failslab, interval 1, probability 0, space 0, times 0 [ 171.769556][ T8357] CPU: 1 UID: 0 PID: 8357 Comm: syz.1.614 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 171.769594][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.769605][ T8357] Call Trace: [ 171.769613][ T8357] [ 171.769621][ T8357] dump_stack_lvl+0x189/0x250 [ 171.769647][ T8357] ? __pfx____ratelimit+0x10/0x10 [ 171.769678][ T8357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.769699][ T8357] ? __pfx__printk+0x10/0x10 [ 171.769725][ T8357] ? __pfx___might_resched+0x10/0x10 [ 171.769745][ T8357] ? fs_reclaim_acquire+0x7d/0x100 [ 171.769777][ T8357] should_fail_ex+0x414/0x560 [ 171.769811][ T8357] should_failslab+0xa8/0x100 [ 171.769840][ T8357] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 171.769865][ T8357] ? __request_module+0x2d1/0x5e0 [ 171.769887][ T8357] kstrdup+0x42/0x100 [ 171.769904][ T8357] __request_module+0x2d1/0x5e0 [ 171.769921][ T8357] ? aa_get_newest_label+0xf7/0x5d0 [ 171.769943][ T8357] ? __pfx___request_module+0x10/0x10 [ 171.769964][ T8357] ? rcu_is_watching+0x15/0xb0 [ 171.769996][ T8357] ? security_capable+0x7e/0x2e0 [ 171.770019][ T8357] ? dev_load+0x21/0x1f0 [ 171.770037][ T8357] dev_load+0x190/0x1f0 [ 171.770054][ T8357] ? __pfx_ioctl_standard_call+0x10/0x10 [ 171.770076][ T8357] wext_ioctl_dispatch+0x9d/0x410 [ 171.770101][ T8357] wext_handle_ioctl+0x100/0x1c0 [ 171.770126][ T8357] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 171.770145][ T8357] ? __lock_acquire+0xab9/0xd20 [ 171.770181][ T8357] sock_ioctl+0x15f/0x790 [ 171.770214][ T8357] ? __pfx_sock_ioctl+0x10/0x10 [ 171.770243][ T8357] ? __fget_files+0x2a/0x420 [ 171.770272][ T8357] ? __fget_files+0x3a0/0x420 [ 171.770299][ T8357] ? __fget_files+0x2a/0x420 [ 171.770333][ T8357] ? bpf_lsm_file_ioctl+0x9/0x20 [ 171.770357][ T8357] ? __pfx_sock_ioctl+0x10/0x10 [ 171.770387][ T8357] __se_sys_ioctl+0xfc/0x170 [ 171.770414][ T8357] do_syscall_64+0xfa/0x3b0 [ 171.770436][ T8357] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.770455][ T8357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.770476][ T8357] ? clear_bhb_loop+0x60/0xb0 [ 171.770502][ T8357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.770522][ T8357] RIP: 0033:0x7fe676f8e9a9 [ 171.770541][ T8357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.770565][ T8357] RSP: 002b:00007fe677e46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.770587][ T8357] RAX: ffffffffffffffda RBX: 00007fe6771b5fa0 RCX: 00007fe676f8e9a9 [ 171.770603][ T8357] RDX: 0000200000000040 RSI: 0000000000008b2c RDI: 0000000000000004 [ 171.770616][ T8357] RBP: 00007fe677e46090 R08: 0000000000000000 R09: 0000000000000000 [ 171.770628][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.770640][ T8357] R13: 0000000000000000 R14: 00007fe6771b5fa0 R15: 00007ffd63e63a08 [ 171.770674][ T8357] [ 173.058254][ T8367] lo speed is unknown, defaulting to 1000 [ 173.286953][ T8400] sctp: [Deprecated]: syz.1.623 (pid 8400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.286953][ T8400] Use struct sctp_sack_info instead [ 173.994186][ T8424] netlink: 48 bytes leftover after parsing attributes in process `syz.2.629'. [ 174.115149][ T8427] netlink: 'syz.0.630': attribute type 4 has an invalid length. [ 174.155102][ T8430] netlink: 20 bytes leftover after parsing attributes in process `syz.4.631'. [ 174.511349][ T8444] syzkaller0: entered promiscuous mode [ 174.518383][ T8444] syzkaller0: entered allmulticast mode [ 175.387117][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 176.327373][ T8489] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 176.446668][ T8494] gtp0: entered promiscuous mode [ 176.487135][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.648'. [ 176.651034][ T8501] netlink: 276 bytes leftover after parsing attributes in process `syz.2.651'. [ 176.811853][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 176.958148][ T8512] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 177.016825][ T8519] IPv6: sit2: Disabled Multicast RS [ 177.024000][ T8519] sit2: entered allmulticast mode [ 177.094555][ T8522] batadv0: entered promiscuous mode [ 177.113593][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.548576][ T8541] syzkaller1: entered promiscuous mode [ 177.555285][ T8541] syzkaller1: entered allmulticast mode [ 177.842821][ T8562] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 177.942782][ T8562] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 178.199138][ T8571] lo speed is unknown, defaulting to 1000 [ 178.705927][ T8590] bond0: (slave wlan1): Releasing backup interface [ 178.734808][ T8597] netlink: 'syz.2.671': attribute type 10 has an invalid length. [ 178.747278][ T8597] bond0: (slave wlan1): refused to change device type [ 178.757731][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 178.796189][ T8592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.672'. [ 179.552074][ T8634] netlink: 244 bytes leftover after parsing attributes in process `syz.2.681'. [ 179.984667][ T8645] tipc: Enabled bearer , priority 0 [ 180.033685][ T8645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.683'. [ 180.042445][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.684'. [ 180.170732][ T8648] syzkaller0: entered promiscuous mode [ 180.179194][ T8648] syzkaller0: entered allmulticast mode [ 180.186125][ T8648] tipc: Resetting bearer [ 180.218225][ T8644] tipc: Resetting bearer [ 181.538369][ T8644] tipc: Disabling bearer [ 181.575242][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.689'. [ 181.609220][ T8671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.689'. [ 181.658371][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.689'. [ 181.677696][ T8671] netlink: 32 bytes leftover after parsing attributes in process `syz.3.689'. [ 181.734821][ T8676] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.865914][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 181.912287][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'. [ 181.932318][ T8683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.693'. [ 181.957523][ T8683] netlink: 540 bytes leftover after parsing attributes in process `syz.0.693'. [ 182.002766][ T8688] macvlan4: entered allmulticast mode [ 182.029564][ T8688] hsr0: entered allmulticast mode [ 182.048041][ T8688] hsr_slave_0: entered allmulticast mode [ 182.066433][ T8688] hsr_slave_1: entered allmulticast mode [ 182.112800][ T8688] hsr0: left allmulticast mode [ 182.123821][ T8688] hsr_slave_0: left allmulticast mode [ 182.146787][ T8688] hsr_slave_1: left allmulticast mode [ 182.413245][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 182.618102][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 183.319440][ T8739] lo speed is unknown, defaulting to 1000 [ 183.696974][ T8748] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 184.349371][ T8778] pimreg: entered allmulticast mode [ 184.437616][ T8778] pimreg: left allmulticast mode [ 184.710312][ T30] audit: type=1800 audit(1753637499.975:4): pid=8781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.717" name="memory.events" dev="tmpfs" ino=781 res=0 errno=0 [ 185.625844][ T8821] netlink: 'syz.0.731': attribute type 13 has an invalid length. [ 185.785412][ T8823] lo speed is unknown, defaulting to 1000 [ 186.247943][ T8819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.621089][ T8854] netlink: 'syz.4.740': attribute type 12 has an invalid length. [ 186.752358][ T8859] __nla_validate_parse: 4 callbacks suppressed [ 186.752377][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 186.792935][ T8860] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 186.860788][ T8829] netlink: 'syz.1.733': attribute type 6 has an invalid length. [ 187.003022][ T8869] netlink: 'syz.4.743': attribute type 27 has an invalid length. [ 187.018513][ T8830] lo speed is unknown, defaulting to 1000 [ 187.021106][ T8869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.743'. [ 187.055608][ T8866] syzkaller0: entered promiscuous mode [ 187.063611][ T8866] syzkaller0: entered allmulticast mode [ 187.075164][ T8862] tipc: Enabled bearer , priority 0 [ 187.109543][ T8862] tipc: Resetting bearer [ 187.155133][ T8862] tipc: Disabling bearer [ 187.291215][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 187.300992][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 187.304116][ T8873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.744'. [ 187.389282][ T8878] sock: sock_timestamping_bind_phc: sock not bind to device [ 187.491902][ T8877] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 188.862300][ T51] Bluetooth: hci0: command tx timeout [ 188.934432][ T8894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.117728][ T8894] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 189.137031][ T8904] tipc: Started in network mode [ 189.142371][ T8904] tipc: Node identity fa3cbea0d3c4, cluster identity 4711 [ 189.150510][ T8904] tipc: Enabled bearer , priority 0 [ 189.249954][ T8906] tipc: Disabling bearer [ 189.285319][ T8916] netlink: 52 bytes leftover after parsing attributes in process `syz.4.755'. [ 189.413126][ T8917] lo speed is unknown, defaulting to 1000 [ 189.426590][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.756'. [ 190.298654][ T8952] IPVS: set_ctl: invalid protocol: 98 172.20.20.46:20002 [ 190.672194][ T8965] netlink: 'syz.1.767': attribute type 10 has an invalid length. [ 190.701083][ T8965] batman_adv: batadv0: Adding interface: netdevsim0 [ 190.721527][ T8965] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.750523][ T8965] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 190.917658][ T8972] netlink: 'syz.1.768': attribute type 2 has an invalid length. [ 190.930014][ T8971] netlink: 'syz.1.768': attribute type 2 has an invalid length. [ 191.611168][ T30] audit: type=1804 audit(1753637506.885:5): pid=8989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.774" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=748 res=1 errno=0 [ 191.667406][ T30] audit: type=1800 audit(1753637506.915:6): pid=8989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.774" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=748 res=0 errno=0 [ 191.785479][ T9002] batman_adv: batadv0: Adding interface: macvlan2 [ 191.818823][ T9002] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 191.870714][ T9002] batman_adv: batadv0: Interface activated: macvlan2 [ 191.958090][ T9009] sctp: [Deprecated]: syz.1.777 (pid 9009) Use of int in max_burst socket option deprecated. [ 191.958090][ T9009] Use struct sctp_assoc_value instead [ 192.039645][ T9005] netlink: 'syz.0.776': attribute type 11 has an invalid length. [ 192.184581][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 192.215788][ T9020] netlink: 'syz.2.780': attribute type 10 has an invalid length. [ 192.429903][ T9024] netlink: 'syz.1.781': attribute type 13 has an invalid length. [ 192.446720][ T9020] veth0_vlan: left promiscuous mode [ 192.486626][ T9020] veth0_vlan: entered promiscuous mode [ 192.530704][ T9020] team0: Device veth0_vlan failed to register rx_handler [ 192.745061][ T9041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.783'. [ 192.803360][ T9045] netlink: 56 bytes leftover after parsing attributes in process `syz.2.786'. [ 192.821151][ T9043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.785'. [ 192.863436][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 192.873107][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 192.906305][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 193.332415][ T9063] netlink: 'syz.0.790': attribute type 1 has an invalid length. [ 193.480406][ T30] audit: type=1800 audit(1753637508.755:7): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.789" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=754 res=0 errno=0 [ 193.484202][ T9063] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.620291][ T9072] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.656911][ T9072] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 193.670433][ T9072] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 193.670972][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.793'. [ 193.695426][ T9077] netlink: 'syz.4.792': attribute type 23 has an invalid length. [ 193.767032][ T9063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.793077][ T9063] batadv_slave_1: entered promiscuous mode [ 193.833410][ T9087] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 193.843079][ T9063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.867597][ T9063] bond4: (slave batadv_slave_1): making interface the new active one [ 193.891306][ T9063] bond4: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 193.952747][ T9085] netlink: 'syz.2.793': attribute type 2 has an invalid length. [ 194.044142][ T9090] veth6: entered promiscuous mode [ 194.049265][ T9090] veth6: entered allmulticast mode [ 194.176717][ T9092] macvlan4: entered allmulticast mode [ 194.223549][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.229895][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.246456][ T9092] veth1_vlan: entered allmulticast mode [ 194.273917][ T9110] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 194.284851][ T9092] veth1_vlan: left allmulticast mode [ 194.417764][ T9114] bond4: (slave geneve0): making interface the new active one [ 194.465527][ T9114] bond4: (slave geneve0): Enslaving as an active interface with an up link [ 194.491271][ T5904] IPVS: starting estimator thread 0... [ 194.504876][ T9120] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 194.534500][ T9114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.800'. [ 194.544576][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 194.558685][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 194.592340][ T9121] IPVS: using max 27 ests per chain, 64800 per kthread [ 194.631289][ T9110] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 194.689750][ T9114] 8021q: adding VLAN 0 to HW filter on device bond4 [ 194.744535][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 194.767313][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 194.818051][ T9128] veth1_to_batadv: entered promiscuous mode [ 195.154523][ T9147] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 196.155760][ T9179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.818'. [ 196.616938][ T9182] lo speed is unknown, defaulting to 1000 [ 197.435947][ T9229] IPVS: set_ctl: invalid protocol: 33269 10.1.1.1:20000 [ 198.019907][ T9251] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 198.206000][ T9254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.235174][ T9263] __nla_validate_parse: 3 callbacks suppressed [ 198.235193][ T9263] netlink: 9 bytes leftover after parsing attributes in process `syz.4.839'. [ 198.235198][ T9254] bridge0: port 1(bond2) entered blocking state [ 198.235639][ T9254] bridge0: port 1(bond2) entered disabled state [ 198.265409][ T9268] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 198.265442][ T9268] netlink: 244 bytes leftover after parsing attributes in process `syz.0.840'. [ 198.284414][ T9264] netlink: 9 bytes leftover after parsing attributes in process `syz.4.839'. [ 198.304140][ T9254] bond2: entered allmulticast mode [ 198.385455][ T9254] bond2: entered promiscuous mode [ 198.466289][ T9263] gretap0: entered promiscuous mode [ 198.666302][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 198.678274][ T9275] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 198.684953][ T9282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'. [ 198.708937][ T9280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.843'. [ 198.726466][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 198.780822][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 198.958165][ T9292] gretap0: left promiscuous mode [ 199.007793][ T9294] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 199.016295][ T9292] ip6tnl1: left promiscuous mode [ 199.032416][ T9292] bond0: left promiscuous mode [ 199.038260][ T9292] macsec1: left promiscuous mode [ 199.043154][ T9298] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 199.053421][ T9292] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 199.063276][ T9292] geneve2: left promiscuous mode [ 199.120267][ T9292] netlink: 76 bytes leftover after parsing attributes in process `syz.4.847'. [ 199.151015][ T9294] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.210848][ T9302] bond5: (slave ip6gretap3): making interface the new active one [ 199.234444][ T9302] bond5: (slave ip6gretap3): Enslaving as an active interface with an up link [ 199.395266][ T9294] veth5: entered promiscuous mode [ 199.424682][ T9294] bond5: (slave veth5): Enslaving as an active interface with a down link [ 199.450110][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 199.460851][ T9302] erspan0: entered allmulticast mode [ 199.474954][ T9302] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 199.513034][ T9318] netlink: 'syz.2.853': attribute type 30 has an invalid length. [ 199.720013][ T9328] lo speed is unknown, defaulting to 1000 [ 199.750222][ T9331] dummy0: entered promiscuous mode [ 199.783798][ T9331] dummy0: left promiscuous mode [ 199.884523][ T9328] lo speed is unknown, defaulting to 1000 [ 199.893215][ T9328] lo speed is unknown, defaulting to 1000 [ 199.947052][ T9328] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 200.098646][ T9328] lo speed is unknown, defaulting to 1000 [ 200.133868][ T9340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 200.180241][ T9328] lo speed is unknown, defaulting to 1000 [ 200.196492][ T9340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 200.228694][ T9328] lo speed is unknown, defaulting to 1000 [ 200.255135][ T9328] lo speed is unknown, defaulting to 1000 [ 200.289079][ T9328] lo speed is unknown, defaulting to 1000 [ 200.449912][ T9346] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 200.465913][ T9350] team0: entered promiscuous mode [ 200.471030][ T9350] team_slave_0: entered promiscuous mode [ 200.477246][ T9350] team_slave_1: entered promiscuous mode [ 200.734223][ T9360] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 200.915964][ T9350] team0 (unregistering): left promiscuous mode [ 200.929676][ T9350] team_slave_0: left promiscuous mode [ 200.964933][ T9350] team_slave_1: left promiscuous mode [ 200.995048][ T9350] team0 (unregistering): Port device team_slave_0 removed [ 201.038540][ T9350] team0 (unregistering): Port device team_slave_1 removed [ 201.131291][ T9346] batadv0: entered promiscuous mode [ 201.137479][ T9346] batadv0: entered allmulticast mode [ 201.155675][ T9346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.206003][ T9346] bridge0: port 2(batadv0) entered blocking state [ 201.249316][ T9346] bridge0: port 2(batadv0) entered disabled state [ 201.289071][ T9346] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 201.357732][ T9365] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 201.519055][ T9365] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 201.615756][ T9365] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 201.740399][ T9365] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 201.848776][ T9394] delete_channel: no stack [ 201.881198][ T9396] gretap1: entered promiscuous mode [ 201.908708][ T9396] gretap1: entered allmulticast mode [ 201.943803][ T9398] 8021q: VLANs not supported on ip6_vti0 [ 202.031337][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.079037][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.170705][ T9403] lo speed is unknown, defaulting to 1000 [ 202.177359][ T194] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.189811][ T194] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 202.285126][ T9411] netlink: 'syz.1.878': attribute type 20 has an invalid length. [ 203.167297][ T9443] lo speed is unknown, defaulting to 1000 [ 203.184043][ T9403] lo speed is unknown, defaulting to 1000 [ 203.431000][ T9443] lo speed is unknown, defaulting to 1000 [ 203.598600][ T9465] __nla_validate_parse: 11 callbacks suppressed [ 203.598618][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 203.705077][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 203.957300][ T9470] geneve4: entered promiscuous mode [ 204.728670][ T9501] netlink: 'syz.1.900': attribute type 1 has an invalid length. [ 204.765722][ T9501] netlink: 228 bytes leftover after parsing attributes in process `syz.1.900'. [ 204.805686][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 204.821245][ T9500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.901'. [ 205.097069][ T9514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.178851][ T9514] netlink: 28 bytes leftover after parsing attributes in process `syz.3.904'. [ 206.168546][ T9544] lo speed is unknown, defaulting to 1000 [ 206.550374][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 206.608337][ T9551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.913'. [ 206.981275][ T9566] netlink: 224 bytes leftover after parsing attributes in process `syz.2.918'. [ 207.015517][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 207.059303][ T9571] IPv6: NLM_F_REPLACE set, but no existing node found! [ 207.080668][ T9573] syz.2.918 uses old SIOCAX25GETINFO [ 207.087656][ T9573] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 207.260110][ T9572] netlink: 'syz.4.917': attribute type 12 has an invalid length. [ 207.308417][ T9573] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.330805][ T9579] bond3: (slave gretap1): making interface the new active one [ 207.346975][ T9579] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 207.361014][ T9544] lo speed is unknown, defaulting to 1000 [ 207.929703][ T9609] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 208.805558][ T9647] tipc: Started in network mode [ 208.811010][ T9647] tipc: Node identity b6c7670356c4, cluster identity 4711 [ 208.821938][ T9647] tipc: Enabled bearer , priority 0 [ 208.829484][ T9651] __nla_validate_parse: 8 callbacks suppressed [ 208.829500][ T9651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 208.852752][ T9651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 208.868704][ T9651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 208.901512][ T9651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.935'. [ 208.938586][ T9655] sctp: [Deprecated]: syz.2.935 (pid 9655) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.938586][ T9655] Use struct sctp_sack_info instead [ 208.957022][ T9647] syzkaller0: entered promiscuous mode [ 208.968318][ T9647] syzkaller0: entered allmulticast mode [ 209.076785][ T9647] tipc: Resetting bearer [ 209.121668][ T9660] netlink: 224 bytes leftover after parsing attributes in process `syz.0.937'. [ 209.141135][ T9646] tipc: Resetting bearer [ 209.190846][ T9646] tipc: Disabling bearer [ 209.311142][ T9668] veth0_to_bridge: entered promiscuous mode [ 209.331970][ T9668] veth0_to_bridge: left promiscuous mode [ 210.726988][ T9735] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 211.058476][ T9712] lo speed is unknown, defaulting to 1000 [ 211.170712][ T9752] netlink: 'syz.4.950': attribute type 1 has an invalid length. [ 211.232300][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.951'. [ 211.250701][ T9758] netlink: 48 bytes leftover after parsing attributes in process `syz.2.951'. [ 211.263629][ T9761] sock: sock_set_timeout: `syz.1.953' (pid 9761) tries to set negative timeout [ 211.275807][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 211.387254][ T9752] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 211.440668][ T9752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.619631][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 211.661576][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 211.664092][ T9777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.956'. [ 211.668526][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 211.683930][ T5861] Bluetooth: hci2: command 0x0406 tx timeout [ 211.798567][ T9712] lo speed is unknown, defaulting to 1000 [ 211.973448][ T9787] netlink: 'syz.2.959': attribute type 8 has an invalid length. [ 212.880794][ T9809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.927999][ T9817] netlink: 'syz.0.967': attribute type 11 has an invalid length. [ 213.008985][ T30] audit: type=1800 audit(1753637528.285:8): pid=9822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.968" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1133 res=0 errno=0 [ 213.568260][ T9829] lo speed is unknown, defaulting to 1000 [ 213.597972][ T9844] veth0_to_team: entered promiscuous mode [ 213.614513][ T9844] veth0_to_team: entered allmulticast mode [ 213.938047][ T9851] macvlan2: entered allmulticast mode [ 213.951602][ T9851] veth1_vlan: entered allmulticast mode [ 214.006684][ T9851] veth1_vlan: left allmulticast mode [ 214.406252][ T9829] lo speed is unknown, defaulting to 1000 [ 214.485760][ T9878] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 214.500726][ T9878] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 214.700243][ T9887] tipc: Enabling of bearer rejected, failed to enable media [ 215.100838][ T9907] netlink: 'syz.1.989': attribute type 10 has an invalid length. [ 215.205490][ T9907] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 215.716837][ T9937] netem: incorrect gi model size [ 215.723189][ T9937] netem: change failed [ 216.018406][ T9949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.030460][ T9949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.060975][ T9945] pim6reg1: entered allmulticast mode [ 216.096483][ T9956] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 216.215251][ T9949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.238371][ T9949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.345016][ T9956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.385715][ T9958] bond3: (slave veth5): Enslaving as an active interface with a down link [ 216.442537][ T9962] vlan2: entered allmulticast mode [ 216.447708][ T9962] veth1: entered allmulticast mode [ 216.474357][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.520196][ T9949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.531901][ T9949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.537468][ T9977] __nla_validate_parse: 7 callbacks suppressed [ 216.537496][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1007'. [ 216.655290][ T9975] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1007'. [ 216.788803][ T9949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.809049][ T9949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.910045][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 217.048333][ T9988] bond2: left allmulticast mode [ 217.053692][ T9988] bond2: left promiscuous mode [ 217.058743][ T9988] bridge0: port 1(bond2) entered disabled state [ 217.460944][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.480490][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.489945][T10009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1015'. [ 217.504177][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.514146][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.598517][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.617142][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.641343][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.671587][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.734086][T10005] lo speed is unknown, defaulting to 1000 [ 217.886779][T10016] block nbd0: server does not support multiple connections per device. [ 217.929925][T10016] block nbd0: shutting down sockets [ 218.734036][T10005] lo speed is unknown, defaulting to 1000 [ 218.736171][T10042] lo speed is unknown, defaulting to 1000 [ 218.767762][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 218.833630][T10058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.031153][T10036] lo speed is unknown, defaulting to 1000 [ 219.326080][T10067] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 219.381908][T10036] lo speed is unknown, defaulting to 1000 [ 219.397577][T10067] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 219.448541][T10042] lo speed is unknown, defaulting to 1000 [ 219.530526][T10067] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 219.678000][T10067] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 220.062177][ T9730] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 220.315008][ T9734] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 220.328771][T10085] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1036'. [ 220.411037][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 220.456311][T10093] siw: device registration error -23 [ 220.490903][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 220.626033][T10095] "syz.2.1039" (10095) uses obsolete ecb(arc4) skcipher [ 220.634396][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'. [ 220.787319][T10102] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1041'. [ 220.813515][T10104] tipc: Enabled bearer , priority 0 [ 220.943118][T10108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1042'. [ 221.025626][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 221.154292][T10104] syzkaller0: entered promiscuous mode [ 221.164204][T10104] syzkaller0: entered allmulticast mode [ 221.171039][T10104] tipc: Resetting bearer [ 221.185770][T10121] smc: net device veth1_to_bond applied user defined pnetid SYZ2 [ 221.206591][T10103] tipc: Resetting bearer [ 222.499405][T10103] tipc: Disabling bearer [ 222.510468][T10116] lo speed is unknown, defaulting to 1000 [ 222.831090][T10142] __nla_validate_parse: 1 callbacks suppressed [ 222.831111][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1049'. [ 222.869238][T10141] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 222.960070][T10142] veth3: entered promiscuous mode [ 222.994252][T10142] bond0: (slave veth3): Enslaving as an active interface with an up link [ 223.052656][T10116] lo speed is unknown, defaulting to 1000 [ 223.281774][T10158] netlink: 'syz.1.1053': attribute type 3 has an invalid length. [ 223.430050][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1055'. [ 223.712287][T10171] lo speed is unknown, defaulting to 1000 [ 223.887630][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1061'. [ 224.068512][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1058'. [ 224.073734][T10191] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 224.204712][T10165] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.472297][T10171] lo speed is unknown, defaulting to 1000 [ 224.890673][T10216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1069'. [ 224.902593][T10217] netlink: 'syz.1.1070': attribute type 32 has an invalid length. [ 224.910469][T10217] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1070'. [ 225.023835][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'. [ 225.059638][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 225.095006][T10221] netlink: 'syz.1.1071': attribute type 18 has an invalid length. [ 225.196479][T10225] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1073'. [ 225.207239][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1073'. [ 225.222778][ T9734] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.222961][T10221] netlink: 'syz.1.1071': attribute type 18 has an invalid length. [ 225.260446][ T9734] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.297894][ T9734] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.332315][ T9734] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.593926][T10238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.099325][T10252] syzkaller0: entered promiscuous mode [ 226.132413][T10252] syzkaller0: entered allmulticast mode [ 227.349167][T10261] netlink: 'syz.2.1087': attribute type 1 has an invalid length. [ 227.647211][T10268] TCP: TCP_TX_DELAY enabled [ 229.719052][T10301] __nla_validate_parse: 9 callbacks suppressed [ 229.719072][T10301] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1096'. [ 230.156424][T10312] syzkaller0: entered promiscuous mode [ 230.162388][T10312] syzkaller0: entered allmulticast mode [ 230.224041][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1099'. [ 230.431685][T10318] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1100'. [ 230.552170][T10320] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 231.115880][ T5904] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 231.206111][T10343] netlink: 'syz.3.1107': attribute type 2 has an invalid length. [ 231.240199][T10343] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1107'. [ 231.274464][T10343] openvswitch: netlink: IP tunnel TTL not specified. [ 231.347299][T10345] fido_id[10345]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 231.493782][T10353] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 231.572066][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 232.574817][T10347] bridge_slave_0: entered promiscuous mode [ 232.630859][T10353] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.719288][T10354] bond4: (slave bridge4): making interface the new active one [ 232.743754][T10354] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 232.799930][T10360] netlink: 'syz.4.1111': attribute type 15 has an invalid length. [ 232.810405][T10360] netlink: 'syz.4.1111': attribute type 3 has an invalid length. [ 232.829517][T10360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1111'. [ 233.049012][T10380] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1112'. [ 233.063376][T10383] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1115'. [ 233.073095][T10383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1115'. [ 233.082318][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1115'. [ 233.113028][T10380] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1112'. [ 233.482159][T10397] tipc: Failed to remove unknown binding: 66,1,1/11578026:3126046384/3126046386 [ 233.498158][T10397] tipc: Failed to remove unknown binding: 66,1,1/11578026:3126046384/3126046386 [ 233.508307][T10397] tipc: Failed to remove unknown binding: 66,1,1/11578026:3126046384/3126046386 [ 233.904359][T10412] syzkaller0: entered promiscuous mode [ 233.909880][T10412] syzkaller0: entered allmulticast mode [ 233.917095][T10407] pim6reg1: entered promiscuous mode [ 233.937835][T10407] pim6reg1: entered allmulticast mode [ 234.085795][ T7108] IPVS: starting estimator thread 0... [ 234.192444][T10429] IPVS: using max 23 ests per chain, 55200 per kthread [ 234.460477][T10433] lo speed is unknown, defaulting to 1000 [ 234.533097][T10442] syzkaller1: entered promiscuous mode [ 234.538628][T10442] syzkaller1: entered allmulticast mode [ 234.860130][T10448] netlink: 'syz.1.1135': attribute type 11 has an invalid length. [ 234.897878][T10433] lo speed is unknown, defaulting to 1000 [ 234.977857][T10451] __nla_validate_parse: 5 callbacks suppressed [ 234.977876][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 234.995564][T10451] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1136'. [ 235.005917][T10454] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 235.106398][T10455] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1137'. [ 235.273299][T10466] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1140'. [ 235.317180][T10466] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1140'. [ 235.360310][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 235.836011][T10493] netlink: 'syz.1.1150': attribute type 1 has an invalid length. [ 235.864237][T10493] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1150'. [ 235.890258][T10498] netlink: 'syz.1.1150': attribute type 39 has an invalid length. [ 235.919027][T10493] netlink: 'syz.1.1150': attribute type 1 has an invalid length. [ 235.938191][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'. [ 236.326780][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 236.506879][T10515] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1156'. [ 236.512789][T10523] netlink: 'syz.4.1159': attribute type 3 has an invalid length. [ 236.524247][T10523] netlink: 'syz.4.1159': attribute type 1 has an invalid length. [ 236.534379][T10523] NCSI netlink: No device for ifindex 0 [ 236.633464][T10527] tipc: Enabled bearer , priority 0 [ 236.647259][T10527] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 236.656558][T10527] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 236.695526][T10527] IPv6: sit2: Disabled Multicast RS [ 236.717914][T10527] sit2: entered allmulticast mode [ 236.734302][T10527] tipc: Resetting bearer [ 236.986946][T10551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.308237][T10565] netlink: 'syz.2.1167': attribute type 1 has an invalid length. [ 237.848348][T10582] pim6reg1: entered promiscuous mode [ 237.861573][T10582] pim6reg1: entered allmulticast mode [ 238.355783][T10613] netlink: 'syz.1.1179': attribute type 33 has an invalid length. [ 238.394225][T10613] tipc: Resetting bearer [ 238.414359][ T9734] tipc: Resetting bearer [ 238.416213][T10613] netlink: 'syz.1.1179': attribute type 10 has an invalid length. [ 238.443882][T10613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.454429][T10613] team0: Port device bond0 added [ 238.752685][T10628] netlink: 'syz.4.1184': attribute type 5 has an invalid length. [ 239.775192][T10696] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 240.370569][T10711] lo speed is unknown, defaulting to 1000 [ 240.534778][T10724] syz.4.1205: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 240.558221][T10724] CPU: 0 UID: 0 PID: 10724 Comm: syz.4.1205 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 240.558253][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.558266][T10724] Call Trace: [ 240.558275][T10724] [ 240.558284][T10724] dump_stack_lvl+0x189/0x250 [ 240.558328][T10724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.558353][T10724] ? __pfx__printk+0x10/0x10 [ 240.558382][T10724] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 240.558409][T10724] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 240.558438][T10724] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 240.558468][T10724] warn_alloc+0x214/0x310 [ 240.558498][T10724] ? stack_depot_save_flags+0x40/0x900 [ 240.558525][T10724] ? __pfx_warn_alloc+0x10/0x10 [ 240.558560][T10724] ? kasan_save_track+0x4f/0x80 [ 240.558585][T10724] ? xskq_create+0x56/0x170 [ 240.558616][T10724] ? xsk_init_queue+0xb0/0x110 [ 240.558654][T10724] ? xsk_setsockopt+0x4dc/0x8d0 [ 240.558680][T10724] ? do_sock_setsockopt+0x17c/0x1b0 [ 240.558709][T10724] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 240.558729][T10724] ? do_syscall_64+0xfa/0x3b0 [ 240.558747][T10724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.558776][T10724] __vmalloc_node_range_noprof+0x125/0x12f0 [ 240.558837][T10724] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.558874][T10724] ? __kasan_kmalloc+0x93/0xb0 [ 240.558903][T10724] vmalloc_user_noprof+0xad/0xf0 [ 240.558931][T10724] ? xskq_create+0xbf/0x170 [ 240.558971][T10724] xskq_create+0xbf/0x170 [ 240.559004][T10724] xsk_init_queue+0xb0/0x110 [ 240.559038][T10724] xsk_setsockopt+0x4dc/0x8d0 [ 240.559075][T10724] ? __pfx_xsk_setsockopt+0x10/0x10 [ 240.559103][T10724] ? __pfx_aa_sk_perm+0x10/0x10 [ 240.559139][T10724] ? aa_sock_opt_perm+0x74/0x110 [ 240.559161][T10724] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 240.559179][T10724] ? __pfx_xsk_setsockopt+0x10/0x10 [ 240.559210][T10724] do_sock_setsockopt+0x17c/0x1b0 [ 240.559238][T10724] __x64_sys_setsockopt+0x13f/0x1b0 [ 240.559267][T10724] do_syscall_64+0xfa/0x3b0 [ 240.559286][T10724] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.559303][T10724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.559322][T10724] ? clear_bhb_loop+0x60/0xb0 [ 240.559347][T10724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.559366][T10724] RIP: 0033:0x7fb99698e9a9 [ 240.559384][T10724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.559401][T10724] RSP: 002b:00007fb997858038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.559422][T10724] RAX: ffffffffffffffda RBX: 00007fb996bb6080 RCX: 00007fb99698e9a9 [ 240.559436][T10724] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 240.559447][T10724] RBP: 00007fb996a10d69 R08: 0000000000000004 R09: 0000000000000000 [ 240.559469][T10724] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 240.559481][T10724] R13: 0000000000000000 R14: 00007fb996bb6080 R15: 00007ffd83fe9f28 [ 240.559512][T10724] [ 240.559599][T10724] Mem-Info: [ 240.715015][T10731] __nla_validate_parse: 12 callbacks suppressed [ 240.715037][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1209'. [ 240.864790][T10724] active_anon:8247 inactive_anon:0 isolated_anon:0 [ 240.864790][T10724] active_file:1482 inactive_file:39918 isolated_file:0 [ 240.864790][T10724] unevictable:778 dirty:153 writeback:0 [ 240.864790][T10724] slab_reclaimable:11022 slab_unreclaimable:122349 [ 240.864790][T10724] mapped:31436 shmem:1359 pagetables:1288 [ 240.864790][T10724] sec_pagetables:0 bounce:0 [ 240.864790][T10724] kernel_misc_reclaimable:0 [ 240.864790][T10724] free:1293788 free_pcp:20074 free_cma:0 [ 240.947024][T10724] Node 0 active_anon:33024kB inactive_anon:0kB active_file:5928kB inactive_file:159476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125836kB dirty:624kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13492kB pagetables:4956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 241.032814][T10724] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 241.097588][T10724] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 241.166003][T10724] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 241.186147][T10724] Node 0 DMA32 free:1264176kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33076kB inactive_anon:0kB active_file:5928kB inactive_file:157900kB unevictable:1536kB writepending:624kB present:3129332kB managed:2558508kB mlocked:0kB bounce:0kB free_pcp:55036kB local_pcp:22060kB free_cma:0kB [ 241.251501][T10724] lowmem_reserve[]: 0 0 1 1 1 [ 241.257483][T10724] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 241.355443][T10724] lowmem_reserve[]: 0 0 0 0 0 [ 241.360252][T10724] Node 1 Normal free:3901684kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19220kB local_pcp:8972kB free_cma:0kB [ 241.400266][T10711] lo speed is unknown, defaulting to 1000 [ 241.420282][T10724] lowmem_reserve[]: 0 0 0 0 0 [ 241.440774][T10746] netlink: 'syz.2.1211': attribute type 1 has an invalid length. [ 241.457635][T10724] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 241.470239][T10746] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1211'. [ 241.493295][T10749] netlink: 'syz.2.1211': attribute type 39 has an invalid length. [ 241.501547][T10746] netlink: 'syz.2.1211': attribute type 1 has an invalid length. [ 241.517138][T10724] Node 0 DMA32: 2192*4kB (UME) 964*8kB (UME) 445*16kB (UM) 736*32kB (UM) 543*64kB (UME) 72*128kB (UME) 40*256kB (UME) 14*512kB (UM) 6*1024kB (UM) 5*2048kB (UME) 278*4096kB (UM) = 1263600kB [ 241.554841][T10724] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 241.579210][T10724] Node 1 Normal: 195*4kB (UE) 41*8kB (UME) 38*16kB (UME) 66*32kB (UME) 28*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3901684kB [ 241.604104][T10724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.615208][T10724] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.631473][T10724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.646270][T10724] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.672239][T10724] 42757 total pagecache pages [ 241.679173][T10724] 0 pages in swap cache [ 241.684066][T10724] Free swap = 124996kB [ 241.688250][T10724] Total swap = 124996kB [ 241.734329][T10724] 2097051 pages RAM [ 241.753908][T10724] 0 pages HighMem/MovableOnly [ 241.764026][T10724] 425382 pages reserved [ 241.768236][T10724] 0 pages cma reserved [ 242.160268][T10776] siw: device registration error -23 [ 243.177738][T10809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.372007][T10811] netlink: 'syz.0.1227': attribute type 303 has an invalid length. [ 243.397899][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 243.465431][T10817] siw: device registration error -23 [ 243.600883][T10822] syzkaller0: entered promiscuous mode [ 243.610395][T10822] syzkaller0: entered allmulticast mode [ 243.670033][T10822] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 243.831035][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 243.929774][T10839] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1235'. [ 244.159895][T10851] netlink: 'syz.2.1237': attribute type 13 has an invalid length. [ 244.197836][T10850] netlink: 'syz.4.1239': attribute type 12 has an invalid length. [ 244.233461][T10851] netlink: 'syz.2.1237': attribute type 17 has an invalid length. [ 244.241332][T10851] netlink: 'syz.2.1237': attribute type 27 has an invalid length. [ 244.410380][T10851] gretap0: entered promiscuous mode [ 244.506794][T10851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.516943][T10866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1242'. [ 244.534574][T10851] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.558056][T10867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.579719][T10851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.698225][T10853] lo speed is unknown, defaulting to 1000 [ 244.851329][T10851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.879255][T10877] netlink: 'syz.4.1245': attribute type 49 has an invalid length. [ 245.849484][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 245.903750][T10853] lo speed is unknown, defaulting to 1000 [ 246.451594][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1260'. [ 246.473868][T10936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1260'. [ 246.638787][T10935] syzkaller1: entered promiscuous mode [ 246.651941][T10935] syzkaller1: entered allmulticast mode [ 246.666796][T10938] syzkaller1: entered promiscuous mode [ 246.705178][T10938] syzkaller1: entered allmulticast mode [ 247.255049][T10956] vlan2: entered allmulticast mode [ 247.260257][T10956] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 247.484853][T10967] tipc: Enabling of bearer rejected, failed to enable media [ 247.909960][T10980] lo speed is unknown, defaulting to 1000 [ 247.983124][T10998] netlink: 'syz.0.1273': attribute type 4 has an invalid length. [ 248.038403][T10998] netlink: 'syz.0.1273': attribute type 4 has an invalid length. [ 248.250463][T10980] lo speed is unknown, defaulting to 1000 [ 248.360518][T11005] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1275'. [ 249.040908][T11044] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 249.369875][T11044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 249.485558][T11056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1288'. [ 249.995681][T11080] bond5: (slave erspan0): Releasing active interface [ 250.017791][T11080] ip6gretap3: entered promiscuous mode [ 250.049643][T11087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1295'. [ 250.114134][T11080] bridge_slave_0: left allmulticast mode [ 250.145925][T11095] netlink: 'syz.3.1296': attribute type 10 has an invalid length. [ 250.181732][T11080] bridge_slave_0: left promiscuous mode [ 250.210189][T11080] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.340639][T11080] bridge_slave_1: left allmulticast mode [ 250.356282][T11080] bridge_slave_1: left promiscuous mode [ 250.367905][T11080] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.399997][T11080] bond0: (slave bond_slave_0): Releasing backup interface [ 250.427578][T11080] bond0: (slave bond_slave_1): Releasing backup interface [ 250.467825][T11080] team0: Port device team_slave_0 removed [ 250.490869][T11080] team0: Port device team_slave_1 removed [ 250.501324][T11080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.515253][T11080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.529394][T11080] bond4: (slave batadv_slave_1): Releasing active interface [ 250.572149][T11080] bond2: (slave bond3): Releasing backup interface [ 250.595715][T11080] bond5: (slave ip6gretap3): Releasing active interface [ 250.609638][T11080] bond5: (slave ip6gretap3): the permanent HWaddr of slave - e6:0c:e3:08:32:a5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 250.634771][T11080] ip6gretap3: left promiscuous mode [ 250.649106][T11080] bond5: (slave veth5): Releasing active interface [ 250.705395][T11095] batadv0: left promiscuous mode [ 250.749016][T11095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.791246][T11095] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 250.825036][T11107] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 250.975247][ T59] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 250.987206][ T59] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.010045][ T59] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.049918][ T59] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 251.118903][T11117] lo speed is unknown, defaulting to 1000 [ 251.549496][T11140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1307'. [ 251.628153][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'. [ 251.758201][T11117] lo speed is unknown, defaulting to 1000 [ 251.985772][T11155] netlink: 'syz.1.1314': attribute type 1 has an invalid length. [ 252.119538][T11157] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 252.151377][T11157] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 252.359104][T11155] gretap1: entered promiscuous mode [ 252.396648][T11155] bond5: (slave gretap1): making interface the new active one [ 252.442755][T11155] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 252.472005][T11154] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1313'. [ 252.627513][T11112] mpoa:mpoad_close: () going down [ 252.648023][T11151] lo speed is unknown, defaulting to 1000 [ 252.790818][T11178] sctp: [Deprecated]: syz.2.1318 (pid 11178) Use of int in maxseg socket option. [ 252.790818][T11178] Use struct sctp_assoc_value instead [ 253.251241][T11151] lo speed is unknown, defaulting to 1000 [ 253.686263][T11219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1329'. [ 254.118747][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 254.356727][T11254] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.990797][T11283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.033507][T11287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 255.172500][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1350'. [ 255.245019][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'. [ 255.305599][T11297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'. [ 255.332654][T11297] 8021q: VLANs not supported on vcan0 [ 255.333457][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'. [ 255.561495][T11316] netlink: 'syz.1.1357': attribute type 1 has an invalid length. [ 255.620881][T11318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.667738][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.675320][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.728988][T11318] netlink: 'syz.2.1358': attribute type 4 has an invalid length. [ 255.889299][T11333] netlink: 'syz.2.1362': attribute type 10 has an invalid length. [ 255.914086][T11333] netlink: 'syz.2.1362': attribute type 49 has an invalid length. [ 255.966000][T11331] hsr_slave_1 (unregistering): left promiscuous mode [ 256.416603][T11368] netlink: 'syz.1.1372': attribute type 7 has an invalid length. [ 256.655928][T11380] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 256.688585][T11380] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 257.175627][T11413] netlink: 'syz.0.1380': attribute type 1 has an invalid length. [ 257.230300][T11413] __nla_validate_parse: 4 callbacks suppressed [ 257.230319][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1380'. [ 257.385755][T11426] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1386'. [ 257.494963][T11431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1387'. [ 257.525862][T11434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.559336][T11426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1386'. [ 257.566826][T11437] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 257.722962][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1391'. [ 257.747839][T11447] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1391'. [ 257.839803][T11455] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1393'. [ 257.920223][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 257.940650][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1395'. [ 258.003258][T11467] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 258.020700][T11467] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.030635][T11469] netlink: 'syz.3.1395': attribute type 11 has an invalid length. [ 258.107302][T11467] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 258.140602][T11467] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 258.528549][T11494] lo speed is unknown, defaulting to 1000 [ 258.773460][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1406'. [ 258.928640][T11494] lo speed is unknown, defaulting to 1000 [ 258.977843][T11515] sch_tbf: burst 9 is lower than device tunl0 mtu (1480) ! [ 259.153558][T11534] netlink: 'syz.1.1411': attribute type 1 has an invalid length. [ 259.159892][T11533] lo speed is unknown, defaulting to 1000 [ 259.265638][T11534] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.304102][T11534] tipc: Enabling of bearer rejected, already enabled [ 259.593601][ T5945] IPVS: starting estimator thread 0... [ 259.711594][T11556] IPVS: using max 25 ests per chain, 60000 per kthread [ 259.807561][T11568] FAULT_INJECTION: forcing a failure. [ 259.807561][T11568] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 259.858400][T11568] CPU: 0 UID: 0 PID: 11568 Comm: syz.4.1417 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 259.858431][T11568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.858445][T11568] Call Trace: [ 259.858453][T11568] [ 259.858462][T11568] dump_stack_lvl+0x189/0x250 [ 259.858509][T11568] ? __pfx____ratelimit+0x10/0x10 [ 259.858545][T11568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.858569][T11568] ? __pfx__printk+0x10/0x10 [ 259.858597][T11568] ? __might_fault+0xb0/0x130 [ 259.858639][T11568] should_fail_ex+0x414/0x560 [ 259.858679][T11568] _copy_from_user+0x2d/0xb0 [ 259.858709][T11568] __sys_sendto+0x25c/0x520 [ 259.858737][T11568] ? __pfx___sys_sendto+0x10/0x10 [ 259.858757][T11568] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 259.858795][T11568] ? __fget_files+0x3a0/0x420 [ 259.858849][T11568] ? ksys_write+0x22a/0x250 [ 259.858879][T11568] ? __pfx_ksys_write+0x10/0x10 [ 259.858902][T11568] ? rcu_is_watching+0x15/0xb0 [ 259.858931][T11568] __x64_sys_sendto+0xde/0x100 [ 259.858958][T11568] do_syscall_64+0xfa/0x3b0 [ 259.858978][T11568] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.858998][T11568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.859019][T11568] ? clear_bhb_loop+0x60/0xb0 [ 259.859045][T11568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.859065][T11568] RIP: 0033:0x7fb99698e9a9 [ 259.859083][T11568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.859102][T11568] RSP: 002b:00007fb997858038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 259.859124][T11568] RAX: ffffffffffffffda RBX: 00007fb996bb6080 RCX: 00007fb99698e9a9 [ 259.859146][T11568] RDX: 0000000000000036 RSI: 00002000000002c0 RDI: 0000000000000007 [ 259.859160][T11568] RBP: 00007fb997858090 R08: 0000200000000080 R09: 0000000000000014 [ 259.859174][T11568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.859187][T11568] R13: 0000000000000000 R14: 00007fb996bb6080 R15: 00007ffd83fe9f28 [ 259.859219][T11568] [ 260.099402][T11572] tipc: Enabled bearer , priority 0 [ 260.107750][T11572] syzkaller0: entered promiscuous mode [ 260.114224][T11572] syzkaller0: entered allmulticast mode [ 260.208209][T11572] tipc: Resetting bearer [ 260.262670][T11571] tipc: Resetting bearer [ 260.359763][T11571] tipc: Disabling bearer [ 260.659788][T11533] lo speed is unknown, defaulting to 1000 [ 261.101270][T11606] netlink: 'syz.4.1428': attribute type 3 has an invalid length. [ 261.188153][T11614] FAULT_INJECTION: forcing a failure. [ 261.188153][T11614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.262730][T11614] CPU: 0 UID: 0 PID: 11614 Comm: syz.3.1430 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 261.262764][T11614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.262777][T11614] Call Trace: [ 261.262785][T11614] [ 261.262794][T11614] dump_stack_lvl+0x189/0x250 [ 261.262823][T11614] ? __pfx____ratelimit+0x10/0x10 [ 261.262858][T11614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.262882][T11614] ? __pfx__printk+0x10/0x10 [ 261.262922][T11614] should_fail_ex+0x414/0x560 [ 261.262962][T11614] _copy_to_user+0x31/0xb0 [ 261.262992][T11614] simple_read_from_buffer+0xe1/0x170 [ 261.263026][T11614] proc_fail_nth_read+0x1df/0x250 [ 261.263062][T11614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.263116][T11614] ? rw_verify_area+0x258/0x650 [ 261.263141][T11614] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.263177][T11614] vfs_read+0x200/0x980 [ 261.263209][T11614] ? __pfx___mutex_lock+0x10/0x10 [ 261.263233][T11614] ? __pfx_vfs_read+0x10/0x10 [ 261.263268][T11614] ? __fget_files+0x2a/0x420 [ 261.263305][T11614] ? __fget_files+0x3a0/0x420 [ 261.263334][T11614] ? __fget_files+0x2a/0x420 [ 261.263376][T11614] ksys_read+0x145/0x250 [ 261.263406][T11614] ? __pfx_ksys_read+0x10/0x10 [ 261.263430][T11614] ? rcu_is_watching+0x15/0xb0 [ 261.263460][T11614] ? do_syscall_64+0xbe/0x3b0 [ 261.263486][T11614] do_syscall_64+0xfa/0x3b0 [ 261.263507][T11614] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.263527][T11614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.263548][T11614] ? clear_bhb_loop+0x60/0xb0 [ 261.263574][T11614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.263596][T11614] RIP: 0033:0x7f927758d3bc [ 261.263615][T11614] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 261.263633][T11614] RSP: 002b:00007f92784b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 261.263656][T11614] RAX: ffffffffffffffda RBX: 00007f92777b6080 RCX: 00007f927758d3bc [ 261.263672][T11614] RDX: 000000000000000f RSI: 00007f92784b50a0 RDI: 0000000000000008 [ 261.263685][T11614] RBP: 00007f92784b5090 R08: 0000000000000000 R09: 0000000000000014 [ 261.263705][T11614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.263717][T11614] R13: 0000000000000000 R14: 00007f92777b6080 R15: 00007ffc1510cee8 [ 261.263751][T11614] [ 261.713308][T11619] pim6reg9: entered allmulticast mode [ 261.743237][T11623] syzkaller0: entered promiscuous mode [ 261.748802][T11623] syzkaller0: entered allmulticast mode [ 261.780425][T11626] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 261.829414][T11626] bond3: (slave geneve2): making interface the new active one [ 261.837877][T11626] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 261.846676][ T9702] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.880380][ T9702] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.948212][ T9702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.964090][ T9702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 262.404575][T11656] lo speed is unknown, defaulting to 1000 [ 262.473161][T11662] gretap2: entered promiscuous mode [ 262.807495][T11678] netlink: 'syz.4.1448': attribute type 10 has an invalid length. [ 262.832404][T11678] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 262.883046][T11682] __nla_validate_parse: 7 callbacks suppressed [ 262.883068][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 262.898934][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 262.908918][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 262.944451][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 262.974374][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 263.029503][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 263.070611][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 263.100359][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 263.129764][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 263.179919][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 263.279583][T11682] veth0_to_team: left promiscuous mode [ 263.311210][T11682] veth0_to_team: left allmulticast mode [ 263.336739][T11682] veth1_to_batadv: left promiscuous mode [ 263.363057][T11682] gretap1: left promiscuous mode [ 263.368050][T11682] gretap1: left allmulticast mode [ 263.479256][T11656] lo speed is unknown, defaulting to 1000 [ 263.536829][ T1324] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 263.547083][ T1324] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 263.558545][ T1324] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 263.599545][ T1324] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 263.868795][T11724] block nbd0: not configured, cannot reconfigure [ 264.009507][T11734] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 264.188131][T11741] netlink: 'syz.2.1461': attribute type 13 has an invalid length. [ 264.241976][T11741] netlink: 'syz.2.1461': attribute type 17 has an invalid length. [ 264.291856][T11741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.384528][T11739] lo speed is unknown, defaulting to 1000 [ 265.134797][T11739] lo speed is unknown, defaulting to 1000 [ 267.374227][T11854] bridge2: entered promiscuous mode [ 267.384878][T11854] bridge2: entered allmulticast mode [ 267.405490][T11854] team0: Port device bridge2 added [ 267.626345][T11868] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 267.866556][ T30] audit: type=1800 audit(1753637583.145:9): pid=11885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1504" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1429 res=0 errno=0 [ 267.893379][T11889] __nla_validate_parse: 76 callbacks suppressed [ 267.893398][T11889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1506'. [ 267.946178][ T30] audit: type=1800 audit(1753637583.145:10): pid=11885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1504" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1429 res=0 errno=0 [ 268.024492][T11884] tipc: Enabled bearer , priority 0 [ 268.034318][T11884] syzkaller0: entered promiscuous mode [ 268.072234][T11884] syzkaller0: entered allmulticast mode [ 268.124984][T11883] tipc: Resetting bearer [ 268.199685][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'. [ 268.210819][T11883] tipc: Disabling bearer [ 268.357953][T11897] team0: Port device vlan0 removed [ 268.537895][T11916] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.600588][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1517'. [ 268.616621][T11924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.680412][T11920] lo speed is unknown, defaulting to 1000 [ 268.736583][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.766356][T11931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.809120][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.200242][T11920] lo speed is unknown, defaulting to 1000 [ 269.323864][T11953] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 269.352282][T11954] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 269.419516][T11954] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 269.426678][T11953] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 269.609086][T11969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1527'. [ 269.647094][T11969] netlink: 'syz.2.1527': attribute type 7 has an invalid length. [ 269.661056][T11969] netlink: 'syz.2.1527': attribute type 8 has an invalid length. [ 269.677127][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1527'. [ 269.719866][T11969] syz_tun: entered promiscuous mode [ 269.763155][T11969] syz_tun: left promiscuous mode [ 269.883757][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1531'. [ 269.907779][T11973] lo speed is unknown, defaulting to 1000 [ 270.097278][T11994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1534'. [ 270.418422][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 270.718209][T11973] lo speed is unknown, defaulting to 1000 [ 270.783595][T12021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1540'. [ 270.841456][T12021] bond0: invalid ARP target 0.0.0.0 specified for addition [ 270.848744][T12021] bond0: option arp_ip_target: invalid value (0) [ 270.920355][T12029] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1541'. [ 272.459684][ T5858] cgroup: fork rejected by pids controller in /syz3 [ 272.693968][T12105] lo speed is unknown, defaulting to 1000 [ 273.700102][T12105] lo speed is unknown, defaulting to 1000 [ 273.737142][T12137] sctp: [Deprecated]: syz.0.1572 (pid 12137) Use of int in max_burst socket option. [ 273.737142][T12137] Use struct sctp_assoc_value instead [ 274.014122][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 274.028140][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 274.049728][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 274.059337][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 274.070911][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.283198][T12158] netlink: 'syz.1.1577': attribute type 1 has an invalid length. [ 274.321243][T12143] lo speed is unknown, defaulting to 1000 [ 274.517218][T12160] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 274.587763][T12160] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 274.678958][T12158] macvlan3: entered promiscuous mode [ 274.713043][T12158] macvlan3: entered allmulticast mode [ 274.719614][T12158] bond7: entered promiscuous mode [ 274.735438][T12158] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 274.768653][T12158] bond7: left promiscuous mode [ 275.000086][T12143] lo speed is unknown, defaulting to 1000 [ 275.047745][T12186] __nla_validate_parse: 11 callbacks suppressed [ 275.047766][T12186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1584'. [ 275.560371][T12209] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 275.572760][T12206] IPVS: stopping backup sync thread 12209 ... [ 275.712955][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1588'. [ 275.729165][T12219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1592'. [ 275.913833][T12143] chnl_net:caif_netlink_parms(): no params data found [ 275.927406][T12227] delete_channel: no stack [ 276.131744][ T51] Bluetooth: hci4: command tx timeout [ 276.215499][T12143] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.226129][T12143] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.235648][T12143] bridge_slave_0: entered allmulticast mode [ 276.247977][T12143] bridge_slave_0: entered promiscuous mode [ 276.257899][T12143] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.265369][T12143] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.272721][T12143] bridge_slave_1: entered allmulticast mode [ 276.280597][T12143] bridge_slave_1: entered promiscuous mode [ 276.340037][T12143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.355184][T12143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.434813][T12143] team0: Port device team_slave_0 added [ 276.454328][T12143] team0: Port device team_slave_1 added [ 276.560965][T12143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.584222][T12143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.640552][T12143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.677132][T12143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.693169][T12143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.723695][T12143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.824684][T12143] hsr_slave_0: entered promiscuous mode [ 276.831334][T12143] hsr_slave_1: entered promiscuous mode [ 276.850900][T12143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.865700][T12143] Cannot create hsr debugfs directory [ 277.143831][T12287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1608'. [ 277.161023][T12286] netlink: 'syz.4.1609': attribute type 1 has an invalid length. [ 277.304025][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'. [ 277.318907][T12289] tipc: Enabled bearer , priority 18 [ 277.610226][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 277.946265][T12143] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.997187][T12143] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.019150][T12143] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.066345][T12143] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.178109][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'. [ 278.208562][T12334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.217733][ T51] Bluetooth: hci4: command tx timeout [ 278.478512][T12143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.555496][T12143] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.570685][T12356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.590838][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.598157][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.635490][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.642807][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.709888][T12353] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.987120][T12375] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1633'. [ 279.099173][T12379] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1634'. [ 279.301040][T12143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.425198][T12143] veth0_vlan: entered promiscuous mode [ 279.583967][T12143] veth1_vlan: entered promiscuous mode [ 279.610889][T12391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 279.753871][T12407] bond0: entered promiscuous mode [ 279.768820][T12407] bond0: left promiscuous mode [ 279.867395][T12143] veth0_macvtap: entered promiscuous mode [ 279.907694][T12143] veth1_macvtap: entered promiscuous mode [ 279.970477][T12143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.999530][T12143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.028281][ T194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.040356][ T194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.069099][ T194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.083802][ T194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.186806][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.206726][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.249571][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.266364][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.305227][ T51] Bluetooth: hci4: command tx timeout [ 280.314898][T12429] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 280.328296][T12429] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 280.369471][T12432] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1564'. [ 280.388130][T12432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1564'. [ 280.504572][T12436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1651'. [ 280.717324][ T59] nci: nci_ntf_packet: unknown ntf opcode 0x127 [ 281.340214][T12471] batman_adv: batadv0: Interface deactivated: macvlan2 [ 281.356993][T12471] batman_adv: batadv0: Removing interface: macvlan2 [ 282.225093][T12507] bond0: entered promiscuous mode [ 282.240935][T12507] bond0: left promiscuous mode [ 282.362602][T12509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1672'. [ 282.391971][ T51] Bluetooth: hci4: command tx timeout [ 282.404988][T12514] netlink: 'syz.3.1673': attribute type 1 has an invalid length. [ 282.461298][T12514] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1673'. [ 282.778912][T12532] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 282.911745][T12539] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1681'. [ 282.925472][T12540] vlan3: entered promiscuous mode [ 282.930552][T12540] bridge0: entered promiscuous mode [ 282.941283][T12540] vlan3: entered allmulticast mode [ 282.946572][T12540] bridge0: entered allmulticast mode [ 282.972659][T12539] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 283.115017][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1683'. [ 283.235770][T12552] netlink: 'syz.1.1685': attribute type 8 has an invalid length. [ 283.289119][T12556] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1686'. [ 283.747076][T12567] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1689'. [ 283.775881][T12567] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1689'. [ 284.029682][T12577] netlink: 'syz.0.1694': attribute type 1 has an invalid length. [ 284.039201][T12577] netlink: 'syz.0.1694': attribute type 2 has an invalid length. [ 284.067431][T12578] lo speed is unknown, defaulting to 1000 [ 284.335461][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.373454][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.907958][T12608] netlink: 'syz.0.1703': attribute type 16 has an invalid length. [ 284.924334][T12608] netlink: 'syz.0.1703': attribute type 17 has an invalid length. [ 285.389893][T12633] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 285.447967][T12608] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 285.485999][T12612] __nla_validate_parse: 5 callbacks suppressed [ 285.486022][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'. [ 285.508821][ T9732] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.528229][ T9732] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.549128][ T1324] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.559599][ T1324] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.585496][T12578] lo speed is unknown, defaulting to 1000 [ 285.602380][ T1324] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.610789][ T1324] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.664371][ T1324] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.673589][ T1324] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.910368][T12654] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 286.486538][T12667] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1721'. [ 286.508811][T12663] netlink: 'syz.0.1720': attribute type 4 has an invalid length. [ 286.707716][T12679] macvtap0: entered promiscuous mode [ 286.722772][T12679] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 286.744226][T12679] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 286.787368][T12685] sctp: [Deprecated]: syz.2.1726 (pid 12685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.787368][T12685] Use struct sctp_sack_info instead [ 287.331894][T12713] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 287.349915][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1736'. [ 287.368303][T12713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1736'. [ 287.441103][T12718] syzkaller0: entered promiscuous mode [ 287.448692][T12718] syzkaller0: entered allmulticast mode [ 287.457320][T12711] tipc: Enabled bearer , priority 0 [ 287.467862][T12720] syzkaller0: entered promiscuous mode [ 287.476497][T12720] syzkaller0: entered allmulticast mode [ 287.511974][T12710] tipc: Resetting bearer [ 287.539774][T12710] tipc: Disabling bearer [ 287.618448][T12726] tap0: tun_chr_ioctl cmd 1074025680 [ 287.680616][T12726] mac80211_hwsim hwsim8 D: renamed from syzkaller0 [ 287.697780][T12726] tipc: Disabling bearer [ 288.059138][T12758] sctp: [Deprecated]: syz.0.1748 (pid 12758) Use of int in max_burst socket option. [ 288.059138][T12758] Use struct sctp_assoc_value instead [ 288.150380][T12763] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1751'. [ 290.019062][T12781] lo speed is unknown, defaulting to 1000 [ 290.029782][T12786] netlink: 'syz.2.1757': attribute type 1 has an invalid length. [ 290.147423][T12786] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.215898][T12796] bond5: entered promiscuous mode [ 290.286064][T12780] lo speed is unknown, defaulting to 1000 [ 290.384304][T12781] lo speed is unknown, defaulting to 1000 [ 291.025439][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'. [ 291.074472][T12815] netlink: 'syz.3.1767': attribute type 23 has an invalid length. [ 291.490125][T12816] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1767'. [ 291.504690][T12816] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1767'. [ 291.519688][T12780] lo speed is unknown, defaulting to 1000 [ 291.589269][T12820] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1768'. [ 292.014202][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 292.225752][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1778'. [ 292.247578][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 292.265165][T12862] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1779'. [ 292.374133][ T1340] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.398258][ T1340] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.420012][ T1340] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.465330][ T1340] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.500591][T12866] lo speed is unknown, defaulting to 1000 [ 292.635264][T12875] netlink: 'syz.3.1782': attribute type 1 has an invalid length. [ 292.657530][T12869] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1780'. [ 292.664202][T12875] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1782'. [ 292.696791][T12877] netlink: 'syz.0.1783': attribute type 30 has an invalid length. [ 292.769220][T12877] netlink: 'syz.0.1783': attribute type 30 has an invalid length. [ 292.841224][ T59] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.879764][ T59] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.944326][ T59] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.967147][ T59] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.046529][T12866] lo speed is unknown, defaulting to 1000 [ 293.128004][T12884] lo speed is unknown, defaulting to 1000 [ 293.644758][T12898] netlink: 'syz.3.1788': attribute type 9 has an invalid length. [ 293.729221][T12898] netlink: 'syz.3.1788': attribute type 6 has an invalid length. [ 293.827826][T12900] netlink: 'syz.3.1788': attribute type 9 has an invalid length. [ 293.897300][T12900] netlink: 'syz.3.1788': attribute type 6 has an invalid length. [ 294.090300][T12888] netlink: 'syz.4.1784': attribute type 6 has an invalid length. [ 294.768547][T12884] lo speed is unknown, defaulting to 1000 [ 298.993345][T12999] tipc: Enabling of bearer rejected, failed to enable media [ 299.071057][T13013] syz.2.1812: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 299.106070][T13013] CPU: 0 UID: 0 PID: 13013 Comm: syz.2.1812 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 299.106101][T13013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.106113][T13013] Call Trace: [ 299.106122][T13013] [ 299.106131][T13013] dump_stack_lvl+0x189/0x250 [ 299.106163][T13013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.106186][T13013] ? __pfx__printk+0x10/0x10 [ 299.106212][T13013] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 299.106236][T13013] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 299.106262][T13013] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 299.106290][T13013] warn_alloc+0x214/0x310 [ 299.106336][T13013] ? __pfx_warn_alloc+0x10/0x10 [ 299.106377][T13013] ? __get_vm_area_node+0x28f/0x300 [ 299.106404][T13013] ? fq_pie_init+0x430/0x840 [ 299.106458][T13013] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 299.106516][T13013] ? up_write+0x1c4/0x420 [ 299.106540][T13013] ? tcf_block_get_ext+0x8d4/0x17d0 [ 299.106579][T13013] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 299.106619][T13013] ? rcu_is_watching+0x15/0xb0 [ 299.106645][T13013] ? fq_pie_init+0x430/0x840 [ 299.106674][T13013] ? fq_pie_init+0x430/0x840 [ 299.106702][T13013] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 299.106733][T13013] ? fq_pie_init+0x430/0x840 [ 299.106764][T13013] ? tcf_block_get+0x67/0xa0 [ 299.106782][T13013] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 299.106809][T13013] fq_pie_init+0x430/0x840 [ 299.106843][T13013] ? __pfx_fq_pie_init+0x10/0x10 [ 299.106875][T13013] qdisc_create+0x7a9/0xea0 [ 299.106917][T13013] tc_modify_qdisc+0x1538/0x20e0 [ 299.106964][T13013] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 299.107028][T13013] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 299.107056][T13013] rtnetlink_rcv_msg+0x779/0xb70 [ 299.107083][T13013] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 299.107104][T13013] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 299.107124][T13013] ? ref_tracker_free+0x63a/0x7d0 [ 299.107147][T13013] ? __asan_memcpy+0x40/0x70 [ 299.107171][T13013] ? __pfx_ref_tracker_free+0x10/0x10 [ 299.107191][T13013] ? __skb_clone+0x63/0x7a0 [ 299.107229][T13013] netlink_rcv_skb+0x205/0x470 [ 299.107254][T13013] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 299.107277][T13013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.107321][T13013] ? netlink_deliver_tap+0x2e/0x1b0 [ 299.107352][T13013] netlink_unicast+0x82f/0x9e0 [ 299.107395][T13013] ? __pfx_netlink_unicast+0x10/0x10 [ 299.107431][T13013] ? netlink_sendmsg+0x642/0xb30 [ 299.107452][T13013] ? skb_put+0x11b/0x210 [ 299.107480][T13013] netlink_sendmsg+0x805/0xb30 [ 299.107515][T13013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.107542][T13013] ? aa_sock_msg_perm+0x94/0x160 [ 299.107565][T13013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.107587][T13013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.107623][T13013] __sock_sendmsg+0x219/0x270 [ 299.107660][T13013] ____sys_sendmsg+0x505/0x830 [ 299.107691][T13013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.107738][T13013] ? import_iovec+0x74/0xa0 [ 299.107767][T13013] ___sys_sendmsg+0x21f/0x2a0 [ 299.107795][T13013] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.107853][T13013] ? __fget_files+0x2a/0x420 [ 299.107881][T13013] ? __fget_files+0x3a0/0x420 [ 299.107921][T13013] __x64_sys_sendmsg+0x19b/0x260 [ 299.107949][T13013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.107984][T13013] ? rcu_is_watching+0x15/0xb0 [ 299.108010][T13013] ? do_syscall_64+0xbe/0x3b0 [ 299.108035][T13013] do_syscall_64+0xfa/0x3b0 [ 299.108054][T13013] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.108071][T13013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.108090][T13013] ? clear_bhb_loop+0x60/0xb0 [ 299.108112][T13013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.108131][T13013] RIP: 0033:0x7efd7238e9a9 [ 299.108148][T13013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.108165][T13013] RSP: 002b:00007efd731c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.108187][T13013] RAX: ffffffffffffffda RBX: 00007efd725b6160 RCX: 00007efd7238e9a9 [ 299.108201][T13013] RDX: 000000002000400c RSI: 0000200000000300 RDI: 000000000000000e [ 299.108215][T13013] RBP: 00007efd72410d69 R08: 0000000000000000 R09: 0000000000000000 [ 299.108227][T13013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.108238][T13013] R13: 0000000000000000 R14: 00007efd725b6160 R15: 00007ffe3cb02508 [ 299.108269][T13013] [ 299.108277][T13013] Mem-Info: [ 299.549261][T13013] active_anon:8355 inactive_anon:0 isolated_anon:0 [ 299.549261][T13013] active_file:1532 inactive_file:39944 isolated_file:0 [ 299.549261][T13013] unevictable:768 dirty:219 writeback:0 [ 299.549261][T13013] slab_reclaimable:11782 slab_unreclaimable:189244 [ 299.549261][T13013] mapped:32121 shmem:1363 pagetables:1031 [ 299.549261][T13013] sec_pagetables:0 bounce:0 [ 299.549261][T13013] kernel_misc_reclaimable:0 [ 299.549261][T13013] free:1227631 free_pcp:16280 free_cma:0 [ 299.588982][T13035] validate_nla: 1 callbacks suppressed [ 299.589004][T13035] netlink: 'syz.1.1818': attribute type 1 has an invalid length. [ 299.595375][T13013] Node 0 active_anon:33420kB inactive_anon:0kB active_file:6128kB inactive_file:159572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132584kB dirty:876kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13564kB pagetables:4048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 299.595442][T13013] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 299.595498][T13013] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.647101][T13037] netlink: 'syz.0.1816': attribute type 2 has an invalid length. [ 299.713553][T13013] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 299.720339][T13013] Node 0 DMA32 free:993208kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33572kB inactive_anon:0kB active_file:6128kB inactive_file:157996kB unevictable:1536kB writepending:876kB present:3129332kB managed:2558508kB mlocked:0kB bounce:0kB free_pcp:46300kB local_pcp:22404kB free_cma:0kB [ 299.780773][T13037] __nla_validate_parse: 6 callbacks suppressed [ 299.780793][T13037] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1816'. [ 299.786323][T13013] lowmem_reserve[]: 0 0 1 1 1 [ 299.805506][T13013] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 299.835854][T13013] lowmem_reserve[]: 0 0 0 0 0 [ 299.840663][T13013] Node 1 Normal free:3901944kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18956kB local_pcp:8972kB free_cma:0kB [ 299.872395][T13013] lowmem_reserve[]: 0 0 0 0 0 [ 299.877253][T13013] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 299.890162][T13013] Node 0 DMA32: 1919*4kB (UM) 608*8kB (UME) 178*16kB (UME) 388*32kB (UME) 244*64kB (UME) 192*128kB (UME) 79*256kB (UME) 39*512kB (UME) 12*1024kB (UME) 2*2048kB (U) 213*4096kB (UM) = 997020kB [ 299.910014][T13013] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 299.922669][T13013] Node 1 Normal: 194*4kB (UE) 42*8kB (UME) 38*16kB (UME) 68*32kB (UME) 31*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3901944kB [ 299.940929][T13013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.950653][T13013] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 299.960127][T13013] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.969830][T13013] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 299.979337][T13013] 42836 total pagecache pages [ 299.984140][T13013] 0 pages in swap cache [ 299.988309][T13013] Free swap = 124996kB [ 299.992707][T13013] Total swap = 124996kB [ 299.996952][T13013] 2097051 pages RAM [ 300.000861][T13013] 0 pages HighMem/MovableOnly [ 300.005792][T13013] 425382 pages reserved [ 300.009973][T13013] 0 pages cma reserved [ 300.160491][T13031] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.168338][T13031] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.328078][T13031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.358570][T13031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.539243][T13035] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 300.556101][ T1324] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.599041][ T1324] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.640070][ T194] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.665975][ T194] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.762195][ T194] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.772682][ T194] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.810099][T13064] netlink: 'syz.0.1824': attribute type 39 has an invalid length. [ 300.843435][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1822'. [ 300.864237][T13067] netlink: 'syz.0.1824': attribute type 3 has an invalid length. [ 300.880070][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1822'. [ 300.930723][T13074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1827'. [ 300.944688][T13067] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1824'. [ 300.976537][ T194] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.001175][ T194] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.048281][T13068] IPVS: persistence engine module ip_vs_pe_ not found [ 301.129452][T13079] IPVS: Error connecting to the multicast addr [ 301.150593][ T7102] IPVS: starting estimator thread 0... [ 301.160202][T13068] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:0 [ 301.257810][T13082] IPVS: using max 25 ests per chain, 60000 per kthread [ 301.361997][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1831'. [ 301.381671][T13091] bond0: invalid ARP target 0.0.0.0 specified for addition [ 301.389102][T13091] bond0: option arp_ip_target: invalid value (0) [ 301.407881][T13096] netlink: 'syz.4.1833': attribute type 1 has an invalid length. [ 301.408815][T13095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1832'. [ 301.440232][T13099] sock: sock_timestamping_bind_phc: sock not bind to device [ 301.442433][T13096] bond6: entered promiscuous mode [ 301.453461][T13096] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.482394][T13096] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1833'. [ 301.546248][T13096] batadv1: entered promiscuous mode [ 301.584873][T13096] batadv1: entered allmulticast mode [ 301.608582][T13096] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 301.631255][T13096] bond6: (slave batadv1): making interface the new active one [ 301.647133][T13096] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 301.673173][T13106] @ÿ: renamed from veth0_vlan [ 301.766059][T13111] lo speed is unknown, defaulting to 1000 [ 301.872582][T13120] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1838'. [ 301.903875][T13120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1838'. [ 302.048137][T13133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.139190][T13141] netlink: 'syz.1.1844': attribute type 1 has an invalid length. [ 302.363636][T13111] lo speed is unknown, defaulting to 1000 [ 302.437791][T13140] syzkaller0: entered promiscuous mode [ 302.443938][T13140] syzkaller0: entered allmulticast mode [ 302.562814][T13151] tipc: Enabled bearer , priority 0 [ 302.570857][T13152] syzkaller0: entered promiscuous mode [ 302.579895][T13152] syzkaller0: entered allmulticast mode [ 302.645460][T13152] netlink: 'syz.1.1847': attribute type 4 has an invalid length. [ 302.718669][T13152] tipc: Resetting bearer [ 302.935886][T13174] hsr0: entered allmulticast mode [ 302.941233][T13174] hsr_slave_0: entered allmulticast mode [ 302.998072][T13150] tipc: Resetting bearer [ 303.048646][T13150] tipc: Disabling bearer [ 304.231882][T13210] tipc: Enabling of bearer rejected, failed to enable media [ 305.173879][T13236] __nla_validate_parse: 5 callbacks suppressed [ 305.173909][T13236] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1870'. [ 305.253079][T13240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1871'. [ 305.273383][T13238] batman_adv: batadv0: Adding interface: ip6gretap1 [ 305.280193][T13238] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 305.380979][T13238] batman_adv: batadv0: Interface activated: ip6gretap1 [ 305.412361][T13247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1873'. [ 305.447310][ T1324] bond0: (slave bridge0): link status definitely down, disabling slave [ 305.468598][ T1324] bond0: (slave veth3): link status definitely down, disabling slave [ 305.489487][ T1324] bond0: now running without any active interface! [ 305.671742][T13255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1875'. [ 305.738019][T13258] lo speed is unknown, defaulting to 1000 [ 305.991340][T13258] lo speed is unknown, defaulting to 1000 [ 306.417979][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1878'. [ 306.462396][T13269] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 306.474442][T13276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.670180][T13290] netlink: 'syz.3.1881': attribute type 11 has an invalid length. [ 306.709021][T13290] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1881'. [ 306.890346][T13302] sctp: [Deprecated]: syz.3.1884 (pid 13302) Use of int in max_burst socket option deprecated. [ 306.890346][T13302] Use struct sctp_assoc_value instead [ 307.542127][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 307.576145][T13320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.664706][T13320] nlmon0: Master is either lo or non-ether device [ 307.785907][T13337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1893'. [ 308.311863][T13356] netlink: 'syz.0.1897': attribute type 13 has an invalid length. [ 308.335668][T13356] netlink: 'syz.0.1897': attribute type 17 has an invalid length. [ 308.646649][T13364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.748093][T13367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.932928][T13370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1901'. [ 310.123323][T13356] erspan0: left allmulticast mode [ 310.137821][T13356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.146507][T13356] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.156262][T13356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 310.249185][T13360] lo speed is unknown, defaulting to 1000 [ 310.769221][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'. [ 310.809515][T13380] lo speed is unknown, defaulting to 1000 [ 310.813571][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'. [ 310.819884][T13360] lo speed is unknown, defaulting to 1000 [ 311.154385][T13410] netlink: 'syz.3.1910': attribute type 1 has an invalid length. [ 311.190764][T13410] netlink: 'syz.3.1910': attribute type 2 has an invalid length. [ 311.218951][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1910'. [ 311.364081][T13415] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1911'. [ 311.488365][T13377] lo speed is unknown, defaulting to 1000 [ 311.498651][T13414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1911'. [ 311.559156][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 311.571316][T13425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 311.596015][T13424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1912'. [ 311.698193][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 311.760359][T13429] unknown channel width for channel at 909000KHz? [ 311.778423][T13429] unknown channel width for channel at 909000KHz? [ 311.792635][T13429] unknown channel width for channel at 909000KHz? [ 311.836198][T13427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1914'. [ 312.116457][T13380] lo speed is unknown, defaulting to 1000 [ 312.135323][T13377] lo speed is unknown, defaulting to 1000 [ 312.426904][T13444] IPv6: sit1: Disabled Multicast RS [ 312.455901][T13444] sit1: entered allmulticast mode [ 312.745574][T13455] netlink: 'syz.0.1923': attribute type 1 has an invalid length. [ 312.995898][T13466] 8021q: adding VLAN 0 to HW filter on device bond9 [ 313.162315][T13471] netlink: 'syz.1.1927': attribute type 6 has an invalid length. [ 313.174359][T13472] netlink: 'syz.1.1927': attribute type 6 has an invalid length. [ 313.418729][T13481] can: request_module (can-proto-0) failed. [ 313.757389][T13518] bridge_slave_1: default FDB implementation only supports local addresses [ 313.788223][T13520] netlink: 'syz.4.1941': attribute type 62 has an invalid length. [ 313.848732][T13522] tipc: Enabled bearer , priority 0 [ 313.857078][T13522] syzkaller0: entered promiscuous mode [ 313.863889][T13522] syzkaller0: entered allmulticast mode [ 313.880225][T13521] tipc: Resetting bearer [ 313.903533][T13528] netlink: 'syz.4.1944': attribute type 1 has an invalid length. [ 313.912497][T13527] netlink: 'syz.4.1944': attribute type 1 has an invalid length. [ 313.930530][T13521] tipc: Disabling bearer [ 313.948023][T13526] netlink: 'syz.0.1943': attribute type 3 has an invalid length. [ 314.167397][T13543] netlink: 'syz.4.1946': attribute type 16 has an invalid length. [ 314.176133][T13543] netlink: 'syz.4.1946': attribute type 17 has an invalid length. [ 314.242753][T13543] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.249106][T13542] netlink: 'syz.0.1948': attribute type 3 has an invalid length. [ 314.259136][T13543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.283067][ T7104] lo speed is unknown, defaulting to 1000 [ 314.289392][ T7104] syz2: Port: 1 Link ACTIVE [ 314.363913][T13547] 8021q: adding VLAN 0 to HW filter on device bond6 [ 314.405214][T13547] bond6: (slave gretap3): making interface the new active one [ 314.416706][T13547] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 315.006713][T13566] bridge_slave_0: left allmulticast mode [ 315.021105][T13566] bridge_slave_0: left promiscuous mode [ 315.027876][T13566] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.063892][T13566] bridge_slave_1: left allmulticast mode [ 315.101678][T13566] bridge_slave_1: left promiscuous mode [ 315.107520][T13566] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.163314][T13566] bond0: (slave bond_slave_0): Releasing backup interface [ 315.215564][T13566] bond0: (slave bond_slave_1): Releasing backup interface [ 315.233149][T13566] team0: Port device team_slave_0 removed [ 315.265321][T13566] team0: Port device team_slave_1 removed [ 315.278706][T13566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.289906][T13566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.299484][T13576] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 315.307454][T13587] bond0: entered promiscuous mode [ 315.321495][T13587] bond0: entered allmulticast mode [ 315.422675][T13579] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 315.493107][T13594] tipc: Enabled bearer , priority 0 [ 315.507400][T13594] syzkaller0: entered promiscuous mode [ 315.520876][T13594] syzkaller0: entered allmulticast mode [ 315.569291][T13594] tipc: Resetting bearer [ 315.598447][T13592] tipc: Resetting bearer [ 315.619797][T13592] tipc: Disabling bearer [ 315.652438][ T51] Bluetooth: hci4: command tx timeout [ 315.749398][T13609] bridge0: port 1(ipvlan2) entered blocking state [ 315.771623][T13609] bridge0: port 1(ipvlan2) entered disabled state [ 315.788571][T13609] ipvlan2: entered allmulticast mode [ 315.803249][T13609] bridge0: entered allmulticast mode [ 315.817736][T13609] ipvlan2: left allmulticast mode [ 315.839360][T13609] bridge0: left allmulticast mode [ 315.861031][T13614] !: renamed from dummy0 (while UP) [ 316.009589][T13618] lo speed is unknown, defaulting to 1000 [ 316.199315][T13629] __nla_validate_parse: 28 callbacks suppressed [ 316.199334][T13629] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1974'. [ 316.278539][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 316.330258][T13629] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 316.575618][T13644] : entered promiscuous mode [ 317.510987][T13680] lo speed is unknown, defaulting to 1000 [ 317.533097][T13618] lo speed is unknown, defaulting to 1000 [ 317.701329][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1988'. [ 318.203079][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1992'. [ 318.321113][T13680] lo speed is unknown, defaulting to 1000 [ 318.570693][T13734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1996'. [ 318.592633][T13717] lo speed is unknown, defaulting to 1000 [ 318.719438][T13736] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1997'. [ 318.754086][T13736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1997'. [ 318.764613][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1997'. [ 318.924687][T13746] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:0 [ 318.940921][T13744] validate_nla: 3 callbacks suppressed [ 318.940939][T13744] netlink: 'syz.1.2000': attribute type 27 has an invalid length. [ 319.470092][T13717] lo speed is unknown, defaulting to 1000 [ 319.515294][T13765] netlink: 30 bytes leftover after parsing attributes in process `syz.2.2004'. [ 319.821230][T13772] netlink: 'syz.2.2007': attribute type 1 has an invalid length. [ 319.853324][T13774] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2008'. [ 319.983590][ T1340] [ 319.986055][ T1340] ============================================ [ 319.992222][ T1340] WARNING: possible recursive locking detected [ 319.998402][ T1340] 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 Not tainted [ 320.005614][ T1340] -------------------------------------------- [ 320.011781][ T1340] kworker/u8:8/1340 is trying to acquire lock: [ 320.017961][ T1340] ffff88806cd61218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 320.030192][ T1340] [ 320.030192][ T1340] but task is already holding lock: [ 320.037572][ T1340] ffff8880241d9258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 320.049836][ T1340] [ 320.049836][ T1340] other info that might help us debug this: [ 320.057903][ T1340] Possible unsafe locking scenario: [ 320.057903][ T1340] [ 320.065367][ T1340] CPU0 [ 320.068659][ T1340] ---- [ 320.071945][ T1340] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 320.079074][ T1340] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 320.086299][ T1340] [ 320.086299][ T1340] *** DEADLOCK *** [ 320.086299][ T1340] [ 320.094439][ T1340] May be due to missing lock nesting notation [ 320.094439][ T1340] [ 320.102776][ T1340] 7 locks held by kworker/u8:8/1340: [ 320.108055][ T1340] #0: ffff88804adba948 ((wq_completion)bond6#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 320.119127][ T1340] #1: ffffc900044afbc0 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 320.132032][ T1340] #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf1/0x1800 [ 320.141617][ T1340] #3: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 320.151636][ T1340] #4: ffff8880241d9258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x138a/0x3b50 [ 320.164279][ T1340] #5: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 320.174029][ T1340] #6: ffffffff8e13f140 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 320.183957][ T1340] [ 320.183957][ T1340] stack backtrace: [ 320.189855][ T1340] CPU: 1 UID: 0 PID: 1340 Comm: kworker/u8:8 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 320.189876][ T1340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.189888][ T1340] Workqueue: bond6 bond_alb_monitor [ 320.189913][ T1340] Call Trace: [ 320.189921][ T1340] [ 320.189929][ T1340] dump_stack_lvl+0x189/0x250 [ 320.189949][ T1340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.189965][ T1340] ? __pfx__printk+0x10/0x10 [ 320.189987][ T1340] ? print_lock_name+0xde/0x100 [ 320.190007][ T1340] print_deadlock_bug+0x28b/0x2a0 [ 320.190026][ T1340] validate_chain+0x1a3f/0x2140 [ 320.190049][ T1340] ? look_up_lock_class+0x74/0x170 [ 320.190065][ T1340] ? register_lock_class+0x51/0x320 [ 320.190090][ T1340] ? __nf_conntrack_find_get+0xc1/0x520 [ 320.190111][ T1340] __lock_acquire+0xab9/0xd20 [ 320.190128][ T1340] ? __dev_queue_xmit+0x22b7/0x3b50 [ 320.190148][ T1340] lock_acquire+0x120/0x360 [ 320.190161][ T1340] ? __dev_queue_xmit+0x22b7/0x3b50 [ 320.190182][ T1340] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 320.190205][ T1340] _raw_spin_lock+0x2e/0x40 [ 320.190227][ T1340] ? __dev_queue_xmit+0x22b7/0x3b50 [ 320.190247][ T1340] __dev_queue_xmit+0x22b7/0x3b50 [ 320.190268][ T1340] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 320.190287][ T1340] ? __dev_queue_xmit+0x27b/0x3b50 [ 320.190311][ T1340] ? neigh_connected_output+0x1ea/0x460 [ 320.190327][ T1340] ? __pfx___dev_queue_xmit+0x10/0x10 [ 320.190348][ T1340] ? read_seqbegin+0x122/0x250 [ 320.190361][ T1340] ? neigh_connected_output+0x1ea/0x460 [ 320.190374][ T1340] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.190389][ T1340] ? read_seqbegin+0x1ac/0x250 [ 320.190402][ T1340] ? __pfx_read_seqbegin+0x10/0x10 [ 320.190421][ T1340] ? neigh_connected_output+0x3b6/0x460 [ 320.190442][ T1340] ip_finish_output2+0xd40/0x1160 [ 320.190467][ T1340] ? ip_finish_output2+0x452/0x1160 [ 320.190489][ T1340] ? __pfx_ip_finish_output2+0x10/0x10 [ 320.190511][ T1340] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 320.190530][ T1340] ? ip_skb_dst_mtu+0x866/0xab0 [ 320.190551][ T1340] ? ip_finish_output+0x33a/0x3f0 [ 320.190571][ T1340] iptunnel_xmit+0x592/0xa40 [ 320.190602][ T1340] ip_tunnel_xmit+0x1c41/0x2390 [ 320.190635][ T1340] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 320.190655][ T1340] ? gre_build_header+0x3fd/0xa40 [ 320.190678][ T1340] ? __pfx_gre_build_header+0x10/0x10 [ 320.190701][ T1340] gre_tap_xmit+0x590/0x7a0 [ 320.190722][ T1340] ? __pfx_gre_tap_xmit+0x10/0x10 [ 320.190739][ T1340] ? validate_xmit_skb+0xb4c/0x11b0 [ 320.190762][ T1340] dev_hard_start_xmit+0x2d4/0x830 [ 320.190789][ T1340] sch_direct_xmit+0x241/0x4b0 [ 320.190815][ T1340] ? __pfx_sch_direct_xmit+0x10/0x10 [ 320.190848][ T1340] __dev_queue_xmit+0x1857/0x3b50 [ 320.190872][ T1340] ? __dev_queue_xmit+0x27b/0x3b50 [ 320.190899][ T1340] ? __pfx___dev_queue_xmit+0x10/0x10 [ 320.190920][ T1340] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 320.190939][ T1340] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 320.190963][ T1340] ? __build_skb_around+0x257/0x3e0 [ 320.190981][ T1340] ? __alloc_skb+0x1bc/0x2d0 [ 320.190998][ T1340] ? __netdev_alloc_skb+0x119/0x970 [ 320.191015][ T1340] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 320.191032][ T1340] ? kvm_sched_clock_read+0x11/0x20 [ 320.191056][ T1340] ? alb_send_lp_vid+0x139/0x510 [ 320.191075][ T1340] alb_send_lp_vid+0x324/0x510 [ 320.191095][ T1340] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 320.191118][ T1340] alb_send_learning_packets+0x10d/0x2c0 [ 320.191136][ T1340] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 320.191157][ T1340] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 320.191175][ T1340] bond_alb_monitor+0x3e4/0x1800 [ 320.191198][ T1340] ? bond_alb_monitor+0xf1/0x1800 [ 320.191213][ T1340] ? process_scheduled_works+0x9ef/0x17b0 [ 320.191229][ T1340] ? __pfx_bond_alb_monitor+0x10/0x10 [ 320.191246][ T1340] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.191272][ T1340] ? process_scheduled_works+0x9ef/0x17b0 [ 320.191287][ T1340] ? process_scheduled_works+0x9ef/0x17b0 [ 320.191303][ T1340] process_scheduled_works+0xae1/0x17b0 [ 320.191331][ T1340] ? __pfx_process_scheduled_works+0x10/0x10 [ 320.191356][ T1340] worker_thread+0x8a0/0xda0 [ 320.191376][ T1340] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 320.191427][ T1340] ? __kthread_parkme+0x7b/0x200 [ 320.191455][ T1340] kthread+0x70e/0x8a0 [ 320.191481][ T1340] ? __pfx_worker_thread+0x10/0x10 [ 320.191499][ T1340] ? __pfx_kthread+0x10/0x10 [ 320.191520][ T1340] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.191544][ T1340] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.191558][ T1340] ? __pfx_kthread+0x10/0x10 [ 320.191580][ T1340] ret_from_fork+0x3fc/0x770 [ 320.191597][ T1340] ? __pfx_ret_from_fork+0x10/0x10 [ 320.191615][ T1340] ? __switch_to_asm+0x39/0x70 [ 320.191635][ T1340] ? __switch_to_asm+0x33/0x70 [ 320.191654][ T1340] ? __pfx_kthread+0x10/0x10 [ 320.191676][ T1340] ret_from_fork_asm+0x1a/0x30 [ 320.191704][ T1340]