last executing test programs: 18.837279059s ago: executing program 0 (id=1518): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x5, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c000300080009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r3, 0x101, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x10, 0x48, 0xf5a2}}}}}, @NHA_OIF={0x8, 0x5, r6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x20) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={0x24, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x24048808) 18.111833692s ago: executing program 2 (id=1524): r0 = socket$qrtr(0x2a, 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x4, 0x81) socket$isdn(0x22, 0x3, 0x23) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x40000c4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 18.050424999s ago: executing program 0 (id=1525): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @mcast2, 0x5}, 0x1c) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) 18.021355822s ago: executing program 4 (id=1526): sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000b40)={0xf8, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x807fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x13}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x64}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x566}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf65f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008810}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0xa, 0x10000) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff070004000000010000000400000014000180100004"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000b40)={0xf8, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x807fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x13}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x64}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x566}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf65f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4008810}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x11, 0xa, 0x10000) (async) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff070004000000010000000400000014000180100004"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) 17.959387421s ago: executing program 3 (id=1527): r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$nfc_llcp(r0, &(0x7f0000001140)={&(0x7f0000000080)={0x27, r1, 0x0, 0x2, 0x3, 0x2, "8464eaa9fe794360090dcb6d114484072a6402be06436e4493e837564704781858f51e23df354f8274f48a224319018a8f34ef70efec245f451ee0b2eb59d7", 0x32}, 0x60, &(0x7f0000001100)=[{&(0x7f0000000100)="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", 0x1000}], 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001180)='freezer.state\x00', 0x0, 0x0) write$nci(r2, &(0x7f00000011c0)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0x4}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x200200, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000001240)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r2) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd1f, 0x5c}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0xd0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000013c0)={r0}) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000001540)={@mcast1, r6}, 0x14) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x2}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x24000844) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000001680)={0x0, 0x7240}, &(0x7f00000016c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001700)={r7}, &(0x7f0000001740)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001780)={r8, 0x3, 0x7fff, 0x38bc8b31}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001880)={'caif0\x00', &(0x7f00000017c0)=@ethtool_dump={0x3e, 0xde, 0x2, 0xb0, "9cdbca056ebaba7dc44bdc2085c45c098016da69d3ffce0f8a1f04bbebb4a36bd508e582fc96b487f851f5e4590d2404b9a5d8e83bce4f5bec82c51cb89809733a85399d1e62c3f33b92280ea0915f6d63c14e26905fbf24ad57279479d62baa136e68bbbfe9a7d1f7cb107309320c6edade48ec95b7aaae1f16b91e0ee9c41cf3d3af62bf53d2a912374af84b71c3ed4ac8b5381109aa166c64ad106819413257e0cc24a3dfba2c880a68c400fc5885"}}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001900), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000001a00)=@int=0x2, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f0000001d80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001a80)={0x2bc, r3, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x42e97824}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="527401f00c38c636af8a0e1e65e5bf045e4e6c1e1e6b9a84"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0b22f7851d1405f12f4657e7b5ad56d1b9b5e56f0b03af17bcbf759a48d5f808"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="705e7eb9dcf85f32b290d6116f507e01d73058cd2de013ee8a7a87112eac9283"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dd9b9a46f12f10ebfa68c05d8ad8dbb6259db559a69385a0"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7890ab9d218be7b09ded4d76b2b1616e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3587d5c42b6368c0"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7a0276737732489dc3e57b6b84d7cf5e4cca0a79cd0f60c2b2d600a3840803b4"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xd5e}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x28}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5ae90ae61c0e1e85e3eb737678ba96e5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6c3b9551ee6b053f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="74bf6e0163916d665948023b929c90eb"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="acc9e41fb23e55aada6b0577d85e604d67d2d9e4e5a38de9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f8fb79685c1d9d98c823515af310e853ee11d984a78e4506"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c88c819f3a5d2330"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa69d}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "62ef3f31e571817d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="41381bfab82004c27336e13120ff559dc7f0958a7e4d190b"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="592d17307a1b174e3ab914e56ba0c7547e5899e263a763cd4172f62d8183ee48"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ce7b555ff79f980bb609d4168b4cf426"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "942b3fc76f6cfb01"}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="adb94353903d3ad1cbe7f1031630206c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c8b251748ad53972"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="347ea4d60759da7ce5972ee48158d285"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6e46e305773f2e03ff287f18dd123311"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "edc4bf11872229d7"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5488c43b5b82a6da7af0c268007d1a59"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bdf7890a1cb6c4ed"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9b4eed07ced658fc314d906844652b2c"}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4040000}, 0x8c0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000001dc0)) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000001e00)={'sit0\x00', 0x400}) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x28, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x77}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44004) 17.90188855s ago: executing program 2 (id=1529): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xffe0}}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000040)={@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x1, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x14, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r1, 0x200, 0xfffffffd, 0x25dfdbfb, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x44011) 17.815525723s ago: executing program 0 (id=1530): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800010000000000000000000a00b358dc83e8a1b3bd0b0008000000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_buf(r0, 0x0, 0x50, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='rxrpc_skb\x00'}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010007010078340200000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r11, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 17.738022816s ago: executing program 3 (id=1531): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000010520000042cbd7000fedbdf250208000607"], 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd700000000000110000002400098008000100f0ffffff080001000100000008000200040000000600010009000000"], 0x38}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x5e, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007a00010700000000000000000700", @ANYRESDEC=r2], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 17.676063274s ago: executing program 1 (id=1532): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x6}]}}]}, 0x70}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="af497eb729b91b40fb8d40c01b4e70b8a51f30c52b43787cd95386dc1bd1014c4675e33b359585de0ed5358d11314e95bfaf0dfcb2be953fd2e1e1fa"}, {&(0x7f0000000100)="1e986b20265ba7b4333411364d0799cb90d0423eb15c5f9591a7f2a4298f01f2733a1174a57f9bde788f091e9e3f57679dff105bdd17fe1b5b433f62dea42d69bce963f14cc0408ce1b6259170a8e36147f2b28ecd973b35624338ffd1b3c07585ce427e49b6bf893397d8c80212695ee6fac076a21e51f44038ba907425d22316ebd60245f69282f797389092a2d96108ef4815698115429907a1aab4c7d58c63e2a40dcc825f2cbd5a0222eda7bc306b60"}, {&(0x7f0000000240)="d1f2a7ca12bee376969d1147c842ac3d530683df0a0d6207bd0e6f8c9eb434e8290bbac279350068b9f6176aeadbf7ecd278563a4d110a1b35b9d03bd702fc7db118df855eb39b609995d81f3e8125cc8f2b6273d5e2212ea9"}, {&(0x7f0000000480)="6b18aecdc11f81c67d7ce58f21079a667758c178e59b4448aacdb1a6f53fb8daeab0c92e7135a63b6205ad3c7b5916dac9136c8a31cfdff32c3f78e243d7797741c725e6fb73dd5960f0ff070c8c0915ec0c52bced04cd71c4f61038869b429c0867f830e84e92a995bc73314cd55decbcdf5e738e00a346432224ac536e28aada84fdbdc7ea04c9f3ce587913ab381612a20f00c875fa88fc878fd3b758393bf7a4eb2ca72536b93e3fc953a1efea3ebd266ccf062d0ec6222d8aff39484b56cb1cf60087b750a9def3d2c2cd6ee280963a1f3e4fdbebd58aa23a7c920f8e0cd6355fbe87edac64"}, {&(0x7f0000000580)="30c6a2fc9c652a67cfc401d354e07ce9fb7b6adaeae64081cc66303cacc19d60d120c3a96d32eacfd887dd5f7d54be3d01de91bf4086a71eedbc5e171e9c30a9cd78f68bff4fceecfec3f614b5119892be6ecaeed58ad70f1f48c60eb1d50d3a7ddaf5f512e262ee818db0a7126a963d07a1d81dd9582abdae1c83957564691fa039780e7cae7d0d77ccc6c622b3b35bb388b4735dfc17bd7671aa5ce685a600c8dabc2a"}, {&(0x7f0000000640)="d0bdfd54cbbbef853f005c74f32ac8a170a73cfdd73ec1fb5942942dde077e75eda1ec3159cd910741dcbc00d5e4fe34c98a20fb6d4680b3a1afd25c5e362cce61ec9309aee7e26f85749b2f76d2c9aca4a1549175f376345702511e7270b1e302e11eb4ab076634a24bedf70d5c0b988438c16ccbe612c4f280988cb2a32c927dd4d2ea0f46b924a51edf8f50482266d2f8e441a0d9b25426f6f7f6fcaa1c7e94f1651298652fa74cde87483262014c4c9d17a37c7268acf92c5447ea2c56b0a49f4aab3ae494f63ce3ea"}, {&(0x7f0000000d80)="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"}], 0x100000000000005d}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000440)="ce90bfdb", 0x4}], 0x1}}], 0x2, 0x4080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000300}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) 17.591680255s ago: executing program 4 (id=1533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a0300000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x20044040) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25ff02000000000000dc8b850f", 0x14}], 0x1}, 0x0) 17.533068058s ago: executing program 2 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 17.40380747s ago: executing program 3 (id=1535): r0 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x20400) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1}, 0x100) r3 = socket(0x10, 0x3, 0x0) vmsplice(r3, &(0x7f0000001e40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x0, @empty, 0x15, 0x3, 'ovf\x00', 0x1, 0x4, 0x72}, 0x2c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r4, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1}, 0xd335}], 0x2, 0x2120, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x1e, 0x81, 0x37}, {@rand_addr=0x64010105, 0x4e23, 0x0, 0xc3, 0x3, 0x12d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x1e, 0x81, 0x37}, {@rand_addr=0x64010105, 0x4e23, 0x0, 0xc3, 0x3, 0x12d5c}}, 0x44) 17.383029986s ago: executing program 4 (id=1536): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="3303200071fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f4704219", 0x29, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) 17.287496283s ago: executing program 2 (id=1537): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0xac}, {0x6}]}, 0x10) setsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000080)=0x13, 0x4) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000002c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008841) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001400000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f00000007c0)) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000040)=0x1ff, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'veth1\x00'}) ioctl$sock_ax25_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x128, r10, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x104, 0x3, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xfb, 0x1, "99ede4930b736bf9549cf9964ef9608c532b4b942aec424dedbfd26573022d8b348999a5bddc54d9e1ff4c82a900fca32bc5a2f046b3d1eea1abe1079da41519a3b86e0a33aac303567caf0917b26519dbd40028561152b2042587d51c581e3e58b6a4373f2cd956b95d5a5c112fd264edbd9d7bd9b5df8ae1a147b691770fade21eab59013da282c8b0482caa3363cb05acf26c0a7d2160a79f96561af148c0c2830dce2da3f7d0a00dca29a60cccb35cb6dbe0e1be4ac0897a95ce072cd313127cdca33783b48b296c95572f8328779ddbc14d94f35e907df204f39215449982137e13f5cafdccbcc971afd6add9a8a5c24e432d1f23"}}]}]}, 0x128}}, 0x4000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00038004"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 17.286256554s ago: executing program 1 (id=1538): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) 17.223897731s ago: executing program 0 (id=1539): r0 = epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80800000, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0xf76d2000) sendfile(r2, r2, &(0x7f0000000040)=0x4, 0x81) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) 17.14405033s ago: executing program 4 (id=1540): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="edcaf499"}]}, 0x1c}}, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) recvfrom$inet6(r3, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) (async) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) 17.091771163s ago: executing program 3 (id=1541): r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, &(0x7f0000000000)=0x80) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='vlan0\x00') (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xea}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40010) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="a0002883591ecc0e", 0x8}], 0x1}}], 0x1, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) (async) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 32) listen(r4, 0xffffffff) (async, rerun: 32) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) (async, rerun: 64) sendmsg$netlink(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)={0x10, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) sendto$inet(r5, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) (async) close(r5) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) getsockopt(r1, 0x1, 0x1, &(0x7f0000000300)=""/164, &(0x7f0000000240)=0xa4) 16.998850052s ago: executing program 1 (id=1542): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="240020000203010100000000000000000700000108000340000000050800034000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x8010) 16.886489552s ago: executing program 0 (id=1543): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x1ff}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) sendto$inet6(r0, &(0x7f0000000580), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(r0, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x48, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_OIF={0x8, 0x5, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) getsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req={0x200, 0x3, 0xc6, 0x9}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x1ff}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) (async) sendto$inet6(r0, &(0x7f0000000580), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) shutdown(r0, 0x1) (async) socket$packet(0x11, 0x3, 0x300) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x48, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_OIF={0x8, 0x5, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) (async) getsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req={0x200, 0x3, 0xc6, 0x9}, 0x10) (async) 16.763769752s ago: executing program 3 (id=1544): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000200000d"], 0x0, 0x3a, 0x0, 0x8}, 0x20) 16.763276547s ago: executing program 2 (id=1545): socket$kcm(0x2, 0xa, 0x2) (async) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe, 0x80003}]}}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) (async) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=0x0, @ANYRES16=r0], 0x44}}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r3, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) accept4$nfc_llcp(r3, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) 16.746741164s ago: executing program 1 (id=1546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a0300000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x20044040) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25ff02000000000000dc8b850f", 0x14}], 0x1}, 0x0) 16.646236212s ago: executing program 0 (id=1547): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x810) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000000000000100004001bc1c0a669468f17b80d88c", @ANYBLOB], 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x0, 0x23, 0x2, @vifc_lcl_addr=@remote, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x0, 0x23, 0x2, @vifc_lcl_addr=@remote, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x810) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf37, 0x0) (async) splice(r12, 0x0, r13, 0x0, 0xf37, 0x0) write(r10, &(0x7f0000000240)="94", 0x1) vmsplice(r13, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r9, r13, 0x8f5, 0x100000000000000) write(r11, 0x0, 0x0) (async) write(r11, 0x0, 0x0) 16.579533822s ago: executing program 3 (id=1548): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20029100180c20000000800450001378a000000002f9078ac1e0001e00000012001880b000890a6824999bf16785571446b7bc39f8bd524b92533bb95067d11bcfd4bc0085d655361c897aee0064caf0646c4566f4fb501c85f600e3850603c57dea73477b0e8b76c8b1fa5cffb5ea1af9321f4fa8e242c22a9081c4faf96ad5fa0ff2890f9623a0a6f4f418057bb57835e4ed5193165aa69289802ff01aa27618a01f1f3c76b4acb5d573ea2f240e6ed3b1fe3a1e027e4f913e1ab030fad179d887efdf50953a9a2a9ff82992425bec05cabb92772e971e83e980b70a8cec137645b46e12ad52c5dc1399f9e1af1cbea670efac85e85a17669990986057e08106f3921eaec67e5bf4475c008df95e8a7"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYBLOB, @ANYBLOB="01002bbd7000ffdbdf251d00000018002f800c0002000203aaaaaaaaaaaa08000100000000000c0006000100000001000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40084) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000001780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'nl802154\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x14) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000001780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'nl802154\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x14) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0) r7 = openat$cgroup_int(r2, &(0x7f0000000200)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x9cdc2384056b48b8) (async) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x9cdc2384056b48b8) readv(r7, &(0x7f0000000580)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000500)=""/93, 0x5d}], 0x5) 16.579095709s ago: executing program 2 (id=1549): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800010000000000000000000a00b358dc83e8a1b3bd0b0008000000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_buf(r0, 0x0, 0x50, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='rxrpc_skb\x00'}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010007010078340200000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r11, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 16.566431737s ago: executing program 1 (id=1550): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="3303200071fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f4704219", 0x29, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) 16.473765275s ago: executing program 1 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='dvmrp1\x00') r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="ab75e8370dacb2f6b890beac99516fc2188f730adec778cd61f18614fec21f09f6bc061ef1a83a819fe611eb7b0586c228f44d4ae19c695a8233a78f4e9907786b8ffac9bcf6ec96032b23fc2a2de8b8a8cfd159406de7f5014c551349056779ffcd73447f7cd221873460f5304b39e0b6ca5a84c61fa23096be7519d9592bab4159d4f4d9a8717f0ee9f13ac8884b96b0ea5167759a733f5ba4768937c7e60f1e952944daa35ff47febf903549917c49db071453dc5443c36c70ffd3c07b40e18e4e2e7d3ebbd1cbcaedda1c3ed20932a9147fafc77cfdf31f8f4dab6a81b936f5dbe73e51062dbbd32091eb4e127b9fe756ab28fe2ed4e721a09eb9318", 0xfe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0x80010, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x71, 0x0, 0x1a, 0x17, "d8f693ddf9dfd88b19b942e6941b79b871c43f0d", "4e310690029ffd2fd84c35833f8b062ab6ac9c46"}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x88, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "883f82f7de9f362f3606d1765d53972c69878d6da6936e76e689771fcbf099942d2f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_delroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x8, {0x8}}, @RTA_FLOW={0x8, 0x10}]}, 0x30}}, 0x24004015) 16.127564475s ago: executing program 4 (id=1552): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) 16.100343635s ago: executing program 4 (id=1553): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@multicast1, 0x0, 0x0, 0x33}}, 0x28}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600c7000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 1.271776351s ago: executing program 32 (id=1547): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x810) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000000000000100004001bc1c0a669468f17b80d88c", @ANYBLOB], 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x0, 0x23, 0x2, @vifc_lcl_addr=@remote, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x0, 0x23, 0x2, @vifc_lcl_addr=@remote, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x810) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf37, 0x0) (async) splice(r12, 0x0, r13, 0x0, 0xf37, 0x0) write(r10, &(0x7f0000000240)="94", 0x1) vmsplice(r13, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r9, r13, 0x8f5, 0x100000000000000) write(r11, 0x0, 0x0) (async) write(r11, 0x0, 0x0) 1.228495532s ago: executing program 33 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000140)='dvmrp1\x00') r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="ab75e8370dacb2f6b890beac99516fc2188f730adec778cd61f18614fec21f09f6bc061ef1a83a819fe611eb7b0586c228f44d4ae19c695a8233a78f4e9907786b8ffac9bcf6ec96032b23fc2a2de8b8a8cfd159406de7f5014c551349056779ffcd73447f7cd221873460f5304b39e0b6ca5a84c61fa23096be7519d9592bab4159d4f4d9a8717f0ee9f13ac8884b96b0ea5167759a733f5ba4768937c7e60f1e952944daa35ff47febf903549917c49db071453dc5443c36c70ffd3c07b40e18e4e2e7d3ebbd1cbcaedda1c3ed20932a9147fafc77cfdf31f8f4dab6a81b936f5dbe73e51062dbbd32091eb4e127b9fe756ab28fe2ed4e721a09eb9318", 0xfe) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0x80010, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x71, 0x0, 0x1a, 0x17, "d8f693ddf9dfd88b19b942e6941b79b871c43f0d", "4e310690029ffd2fd84c35833f8b062ab6ac9c46"}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x88, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "883f82f7de9f362f3606d1765d53972c69878d6da6936e76e689771fcbf099942d2f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_delroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x8, {0x8}}, @RTA_FLOW={0x8, 0x10}]}, 0x30}}, 0x24004015) 1.157651962s ago: executing program 34 (id=1549): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006800010000000000000000000a00b358dc83e8a1b3bd0b0008000000", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_buf(r0, 0x0, 0x50, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='rxrpc_skb\x00'}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010007010078340200000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8000040}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000000) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00)) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r11, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.045965674s ago: executing program 35 (id=1548): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYBLOB, @ANYBLOB="01002bbd7000ffdbdf251d00000018002f800c0002000203aaaaaaaaaaaa08000100000000000c0006000100000001000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40084) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @pid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000001780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'nl802154\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x14) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000001780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'nl802154\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x14) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0) r7 = openat$cgroup_int(r2, &(0x7f0000000200)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x9cdc2384056b48b8) (async) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x9cdc2384056b48b8) readv(r7, &(0x7f0000000580)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000000440)=""/161, 0xa1}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000500)=""/93, 0x5d}], 0x5) 0s ago: executing program 36 (id=1553): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@multicast1, 0x0, 0x0, 0x33}}, 0x28}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600c7000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) kernel console output (not intermixed with test programs): 0 [ 120.854783][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.125854][ T6573] __nla_validate_parse: 15 callbacks suppressed [ 121.125878][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 121.219538][ T6578] netlink: 'syz.4.194': attribute type 12 has an invalid length. [ 121.287543][ T6573] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 121.333339][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.191'. [ 121.366303][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 121.421149][ T6587] dvmrp1: entered allmulticast mode [ 121.683993][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 121.734285][ T6592] chnl_net:caif_netlink_parms(): no params data found [ 122.683215][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 122.833179][ T6634] netlink: 'syz.2.215': attribute type 4 has an invalid length. [ 122.879442][ T6632] netlink: 'syz.2.215': attribute type 1 has an invalid length. [ 123.057498][ T6638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.217'. [ 123.381445][ T6657] netlink: 36 bytes leftover after parsing attributes in process `syz.4.225'. [ 123.701809][ T6668] netlink: 160 bytes leftover after parsing attributes in process `syz.3.228'. [ 123.730259][ T6668] netlink: 160 bytes leftover after parsing attributes in process `syz.3.228'. [ 123.751927][ T6668] netlink: 160 bytes leftover after parsing attributes in process `syz.3.228'. [ 123.772560][ T6672] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000 [ 124.078599][ T6684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.094063][ T6684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.141897][ T6683] bridge_slave_1: left allmulticast mode [ 124.152831][ T6683] bridge_slave_1: left promiscuous mode [ 124.208592][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.271741][ T6683] bridge_slave_0: left allmulticast mode [ 124.308954][ T6683] bridge_slave_0: left promiscuous mode [ 124.314962][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.617780][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.725352][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.794220][ T6711] warning: `syz.0.243' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 124.869713][ T6717] netlink: 'syz.3.245': attribute type 30 has an invalid length. [ 126.064144][ T6768] netlink: 'syz.1.262': attribute type 2 has an invalid length. [ 126.336485][ T6777] __nla_validate_parse: 50 callbacks suppressed [ 126.336511][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 126.462201][ T6781] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 126.526225][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 126.599937][ T6773] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 126.608892][ T6773] netlink: 'syz.0.265': attribute type 2 has an invalid length. [ 126.622157][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 126.825488][ T6804] netlink: 'syz.0.274': attribute type 39 has an invalid length. [ 126.834802][ T6795] dvmrp0: entered allmulticast mode [ 126.842171][ T6802] netlink: 256 bytes leftover after parsing attributes in process `syz.4.272'. [ 127.034844][ T6809] blkio.reset_stats is deprecated [ 127.082386][ T6812] syzkaller1: entered promiscuous mode [ 127.092136][ T6814] FAULT_INJECTION: forcing a failure. [ 127.092136][ T6814] name failslab, interval 1, probability 0, space 0, times 1 [ 127.106166][ T6812] syzkaller1: entered allmulticast mode [ 127.130631][ T6814] CPU: 1 UID: 0 PID: 6814 Comm: syz.1.276 Not tainted syzkaller #0 PREEMPT(full) [ 127.130664][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.130689][ T6814] Call Trace: [ 127.130698][ T6814] [ 127.130709][ T6814] dump_stack_lvl+0x189/0x250 [ 127.130748][ T6814] ? __pfx____ratelimit+0x10/0x10 [ 127.130774][ T6814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.130802][ T6814] ? __pfx__printk+0x10/0x10 [ 127.130843][ T6814] ? __pfx___might_resched+0x10/0x10 [ 127.130865][ T6814] ? fs_reclaim_acquire+0x7d/0x100 [ 127.130894][ T6814] should_fail_ex+0x414/0x560 [ 127.130936][ T6814] should_failslab+0xa8/0x100 [ 127.130974][ T6814] __kmalloc_noprof+0xcb/0x4f0 [ 127.131006][ T6814] ? kernfs_fop_write_iter+0x158/0x540 [ 127.131047][ T6814] kernfs_fop_write_iter+0x158/0x540 [ 127.131090][ T6814] vfs_write+0x5c9/0xb30 [ 127.131129][ T6814] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 127.131165][ T6814] ? __pfx_vfs_write+0x10/0x10 [ 127.131210][ T6814] ? __fget_files+0x2a/0x420 [ 127.131243][ T6814] ksys_write+0x145/0x250 [ 127.131278][ T6814] ? __pfx_ksys_write+0x10/0x10 [ 127.131306][ T6814] ? rcu_is_watching+0x15/0xb0 [ 127.131337][ T6814] ? do_syscall_64+0xbe/0x3b0 [ 127.131370][ T6814] do_syscall_64+0xfa/0x3b0 [ 127.131394][ T6814] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.131418][ T6814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.131441][ T6814] ? clear_bhb_loop+0x60/0xb0 [ 127.131476][ T6814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.131499][ T6814] RIP: 0033:0x7f7e1338eec9 [ 127.131525][ T6814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.131545][ T6814] RSP: 002b:00007f7e115ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.131570][ T6814] RAX: ffffffffffffffda RBX: 00007f7e135e5fa0 RCX: 00007f7e1338eec9 [ 127.131587][ T6814] RDX: 0000000000000012 RSI: 00002000000002c0 RDI: 0000000000000004 [ 127.131602][ T6814] RBP: 00007f7e115ee090 R08: 0000000000000000 R09: 0000000000000000 [ 127.131616][ T6814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.131634][ T6814] R13: 00007f7e135e6038 R14: 00007f7e135e5fa0 R15: 00007ffd39dafd68 [ 127.131670][ T6814] [ 127.510677][ T6825] l2tp_ppp: sess 2/0: no socket in recv [ 127.858973][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.286'. [ 128.184458][ T6856] FAULT_INJECTION: forcing a failure. [ 128.184458][ T6856] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.244466][ T6856] CPU: 1 UID: 0 PID: 6856 Comm: syz.3.291 Not tainted syzkaller #0 PREEMPT(full) [ 128.244497][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.244511][ T6856] Call Trace: [ 128.244520][ T6856] [ 128.244531][ T6856] dump_stack_lvl+0x189/0x250 [ 128.244565][ T6856] ? __pfx____ratelimit+0x10/0x10 [ 128.244591][ T6856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.244618][ T6856] ? __pfx__printk+0x10/0x10 [ 128.244652][ T6856] ? __might_fault+0xb0/0x130 [ 128.244698][ T6856] should_fail_ex+0x414/0x560 [ 128.244739][ T6856] _copy_from_iter+0x1de/0x1790 [ 128.244788][ T6856] ? __pfx__copy_from_iter+0x10/0x10 [ 128.244820][ T6856] ? rcu_is_watching+0x15/0xb0 [ 128.244844][ T6856] ? trace_kmalloc+0x1f/0xd0 [ 128.244873][ T6856] ? kernfs_fop_write_iter+0x158/0x540 [ 128.244914][ T6856] kernfs_fop_write_iter+0x19b/0x540 [ 128.244958][ T6856] vfs_write+0x5c9/0xb30 [ 128.244997][ T6856] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 128.245030][ T6856] ? __pfx_vfs_write+0x10/0x10 [ 128.245077][ T6856] ? __fget_files+0x2a/0x420 [ 128.245119][ T6856] ksys_write+0x145/0x250 [ 128.245153][ T6856] ? __pfx_ksys_write+0x10/0x10 [ 128.245182][ T6856] ? rcu_is_watching+0x15/0xb0 [ 128.245210][ T6856] ? do_syscall_64+0xbe/0x3b0 [ 128.245242][ T6856] do_syscall_64+0xfa/0x3b0 [ 128.245267][ T6856] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.245292][ T6856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.245315][ T6856] ? clear_bhb_loop+0x60/0xb0 [ 128.245344][ T6856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.245367][ T6856] RIP: 0033:0x7f18eeb8eec9 [ 128.245388][ T6856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.245408][ T6856] RSP: 002b:00007f18ef995038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 128.245432][ T6856] RAX: ffffffffffffffda RBX: 00007f18eede5fa0 RCX: 00007f18eeb8eec9 [ 128.245449][ T6856] RDX: 0000000000000012 RSI: 00002000000002c0 RDI: 0000000000000004 [ 128.245464][ T6856] RBP: 00007f18ef995090 R08: 0000000000000000 R09: 0000000000000000 [ 128.245478][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.245492][ T6856] R13: 00007f18eede6038 R14: 00007f18eede5fa0 R15: 00007ffd16b33f18 [ 128.245530][ T6856] [ 128.582614][ T6867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.735913][ T6873] netlink: 788 bytes leftover after parsing attributes in process `syz.3.294'. [ 129.022078][ T6879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.300'. [ 129.028015][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 129.299738][ T6893] FAULT_INJECTION: forcing a failure. [ 129.299738][ T6893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.350175][ T6893] CPU: 0 UID: 0 PID: 6893 Comm: syz.0.304 Not tainted syzkaller #0 PREEMPT(full) [ 129.350208][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.350222][ T6893] Call Trace: [ 129.350231][ T6893] [ 129.350240][ T6893] dump_stack_lvl+0x189/0x250 [ 129.350274][ T6893] ? __pfx____ratelimit+0x10/0x10 [ 129.350299][ T6893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.350327][ T6893] ? __pfx__printk+0x10/0x10 [ 129.350373][ T6893] should_fail_ex+0x414/0x560 [ 129.350414][ T6893] _copy_to_user+0x31/0xb0 [ 129.350448][ T6893] simple_read_from_buffer+0xe1/0x170 [ 129.350488][ T6893] proc_fail_nth_read+0x1b3/0x220 [ 129.350519][ T6893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.350549][ T6893] ? rw_verify_area+0x2a6/0x4d0 [ 129.350577][ T6893] ? __lock_acquire+0xab9/0xd20 [ 129.350609][ T6893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.350637][ T6893] vfs_read+0x1fd/0xa30 [ 129.350666][ T6893] ? fdget_pos+0x247/0x320 [ 129.350691][ T6893] ? __pfx___mutex_lock+0x10/0x10 [ 129.350718][ T6893] ? __pfx_vfs_read+0x10/0x10 [ 129.350750][ T6893] ? __fget_files+0x2a/0x420 [ 129.350776][ T6893] ? __fget_files+0x3a0/0x420 [ 129.350795][ T6893] ? __fget_files+0x2a/0x420 [ 129.350826][ T6893] ksys_read+0x145/0x250 [ 129.350860][ T6893] ? __pfx_ksys_read+0x10/0x10 [ 129.350887][ T6893] ? rcu_is_watching+0x15/0xb0 [ 129.350916][ T6893] ? do_syscall_64+0xbe/0x3b0 [ 129.350955][ T6893] do_syscall_64+0xfa/0x3b0 [ 129.350979][ T6893] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.351003][ T6893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.351025][ T6893] ? clear_bhb_loop+0x60/0xb0 [ 129.351054][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.351076][ T6893] RIP: 0033:0x7fab0798d8dc [ 129.351095][ T6893] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.351114][ T6893] RSP: 002b:00007fab08792030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.351138][ T6893] RAX: ffffffffffffffda RBX: 00007fab07be5fa0 RCX: 00007fab0798d8dc [ 129.351155][ T6893] RDX: 000000000000000f RSI: 00007fab087920a0 RDI: 0000000000000005 [ 129.351169][ T6893] RBP: 00007fab08792090 R08: 0000000000000000 R09: 0000000000000000 [ 129.351183][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.351196][ T6893] R13: 00007fab07be6038 R14: 00007fab07be5fa0 R15: 00007ffe795d7b28 [ 129.351233][ T6893] [ 129.984260][ T3030] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.381620][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 130.438125][ T30] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.453669][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 130.464695][ T30] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.480463][ T30] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.503991][ T30] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.661310][ T6945] tipc: Started in network mode [ 130.671247][ T6945] tipc: Node identity 022eca6fb8b5, cluster identity 4711 [ 130.689427][ T6945] tipc: Enabled bearer , priority 0 [ 130.718034][ T6948] syzkaller0: entered promiscuous mode [ 130.728204][ T6948] syzkaller0: entered allmulticast mode [ 130.796675][ T6945] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 130.909680][ T6945] tipc: Resetting bearer [ 130.956500][ T6944] tipc: Resetting bearer [ 131.043728][ T6944] tipc: Disabling bearer [ 131.471074][ T6983] netlink: 'syz.1.329': attribute type 1 has an invalid length. [ 131.602681][ T6985] netlink: 'syz.4.332': attribute type 6 has an invalid length. [ 131.702782][ T6990] veth3: entered promiscuous mode [ 131.717761][ T6990] veth3: entered allmulticast mode [ 132.304005][ T7020] __nla_validate_parse: 2 callbacks suppressed [ 132.304029][ T7020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'. [ 133.444823][ T7072] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'. [ 133.811296][ T7081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.324067][ T7104] trusted_key: syz.1.364 sent an empty control message without MSG_MORE. [ 134.371521][ T7108] netlink: 20 bytes leftover after parsing attributes in process `syz.3.365'. [ 134.840431][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 134.923280][ T7133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'. [ 134.993514][ T7139] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 135.260766][ T7145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 135.295569][ T7145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 135.315830][ T7145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 135.335663][ T7145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 135.351891][ T7150] FAULT_INJECTION: forcing a failure. [ 135.351891][ T7150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.408106][ T7150] CPU: 1 UID: 0 PID: 7150 Comm: syz.2.377 Not tainted syzkaller #0 PREEMPT(full) [ 135.408139][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.408154][ T7150] Call Trace: [ 135.408162][ T7150] [ 135.408172][ T7150] dump_stack_lvl+0x189/0x250 [ 135.408220][ T7150] ? __pfx____ratelimit+0x10/0x10 [ 135.408246][ T7150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.408275][ T7150] ? __pfx__printk+0x10/0x10 [ 135.408310][ T7150] ? __might_fault+0xb0/0x130 [ 135.408367][ T7150] should_fail_ex+0x414/0x560 [ 135.408410][ T7150] _copy_from_user+0x2d/0xb0 [ 135.408444][ T7150] sk_setsockopt+0x27f/0x2dc0 [ 135.408472][ T7150] ? __pfx___might_resched+0x10/0x10 [ 135.408505][ T7150] ? __pfx_sk_setsockopt+0x10/0x10 [ 135.408530][ T7150] ? __lock_acquire+0xab9/0xd20 [ 135.408572][ T7150] ? aa_sk_perm+0x81e/0x950 [ 135.408634][ T7150] ? __pfx_aa_sk_perm+0x10/0x10 [ 135.408673][ T7150] ? __fget_files+0x2a/0x420 [ 135.408692][ T7150] ? aa_sock_opt_perm+0xff/0x1b0 [ 135.408720][ T7150] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 135.408753][ T7150] do_sock_setsockopt+0x11b/0x1b0 [ 135.408787][ T7150] __x64_sys_setsockopt+0x13f/0x1b0 [ 135.408822][ T7150] do_syscall_64+0xfa/0x3b0 [ 135.408846][ T7150] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.408869][ T7150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.408891][ T7150] ? clear_bhb_loop+0x60/0xb0 [ 135.408918][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.408939][ T7150] RIP: 0033:0x7f4b63b8eec9 [ 135.408959][ T7150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.408978][ T7150] RSP: 002b:00007f4b649f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 135.409000][ T7150] RAX: ffffffffffffffda RBX: 00007f4b63de6090 RCX: 00007f4b63b8eec9 [ 135.409017][ T7150] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003 [ 135.409030][ T7150] RBP: 00007f4b649f7090 R08: 0000000000000004 R09: 0000000000000000 [ 135.409043][ T7150] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.409058][ T7150] R13: 00007f4b63de6128 R14: 00007f4b63de6090 R15: 00007ffc9b44bcc8 [ 135.409095][ T7150] [ 135.413223][ T7145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.378'. [ 135.610843][ T7154] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 136.154451][ T7174] netlink: 'syz.0.386': attribute type 21 has an invalid length. [ 136.162009][ T7165] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 136.398392][ T7186] Bluetooth: MGMT ver 1.23 [ 136.726754][ T7204] nbd: must specify a size in bytes for the device [ 136.863953][ T7204] syzkaller0: entered promiscuous mode [ 136.885362][ T7204] syzkaller0: entered allmulticast mode [ 137.053909][ T7216] nbd: couldn't find a device at index 0 [ 137.136767][ T7200] netlink: 'syz.2.393': attribute type 1 has an invalid length. [ 137.374459][ T7228] FAULT_INJECTION: forcing a failure. [ 137.374459][ T7228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.445951][ T7228] CPU: 1 UID: 0 PID: 7228 Comm: syz.1.398 Not tainted syzkaller #0 PREEMPT(full) [ 137.445983][ T7228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.445998][ T7228] Call Trace: [ 137.446007][ T7228] [ 137.446017][ T7228] dump_stack_lvl+0x189/0x250 [ 137.446051][ T7228] ? __pfx____ratelimit+0x10/0x10 [ 137.446078][ T7228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.446106][ T7228] ? __pfx__printk+0x10/0x10 [ 137.446164][ T7228] should_fail_ex+0x414/0x560 [ 137.446206][ T7228] _copy_to_user+0x31/0xb0 [ 137.446241][ T7228] simple_read_from_buffer+0xe1/0x170 [ 137.446281][ T7228] proc_fail_nth_read+0x1b3/0x220 [ 137.446312][ T7228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.446341][ T7228] ? rw_verify_area+0x2a6/0x4d0 [ 137.446370][ T7228] ? __lock_acquire+0xab9/0xd20 [ 137.446402][ T7228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.446431][ T7228] vfs_read+0x1fd/0xa30 [ 137.446461][ T7228] ? fdget_pos+0x247/0x320 [ 137.446487][ T7228] ? __pfx___mutex_lock+0x10/0x10 [ 137.446515][ T7228] ? __pfx_vfs_read+0x10/0x10 [ 137.446548][ T7228] ? __fget_files+0x2a/0x420 [ 137.446575][ T7228] ? __fget_files+0x3a0/0x420 [ 137.446594][ T7228] ? __fget_files+0x2a/0x420 [ 137.446625][ T7228] ksys_read+0x145/0x250 [ 137.446660][ T7228] ? __pfx_ksys_read+0x10/0x10 [ 137.446698][ T7228] ? do_syscall_64+0xbe/0x3b0 [ 137.446729][ T7228] do_syscall_64+0xfa/0x3b0 [ 137.446754][ T7228] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.446778][ T7228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.446801][ T7228] ? clear_bhb_loop+0x60/0xb0 [ 137.446830][ T7228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.446852][ T7228] RIP: 0033:0x7f7e1338d8dc [ 137.446873][ T7228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 137.446892][ T7228] RSP: 002b:00007f7e115cd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.446916][ T7228] RAX: ffffffffffffffda RBX: 00007f7e135e6090 RCX: 00007f7e1338d8dc [ 137.446933][ T7228] RDX: 000000000000000f RSI: 00007f7e115cd0a0 RDI: 0000000000000004 [ 137.446952][ T7228] RBP: 00007f7e115cd090 R08: 0000000000000000 R09: 0000000000000000 [ 137.446966][ T7228] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.446980][ T7228] R13: 00007f7e135e6128 R14: 00007f7e135e6090 R15: 00007ffd39dafd68 [ 137.447015][ T7228] [ 138.382227][ T7257] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 138.449636][ T7259] __nla_validate_parse: 32 callbacks suppressed [ 138.449660][ T7259] netlink: 808 bytes leftover after parsing attributes in process `syz.3.407'. [ 138.477181][ T7259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.407'. [ 138.630914][ T7259] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.757087][ T1142] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.780838][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.792127][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.823661][ T1142] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.833840][ T1142] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.843900][ T1142] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.144898][ T7281] netlink: 'syz.1.415': attribute type 1 has an invalid length. [ 139.325820][ T7281] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.549127][ T7288] tipc: Started in network mode [ 139.554130][ T7288] tipc: Node identity 2e399313d2ed, cluster identity 4711 [ 139.564220][ T7288] tipc: Enabled bearer , priority 0 [ 139.588192][ T7281] syzkaller0: entered promiscuous mode [ 139.625834][ T7281] syzkaller0: entered allmulticast mode [ 139.703920][ T7281] tipc: Resetting bearer [ 139.720985][ T7281] pim6reg1: entered promiscuous mode [ 139.734554][ T7281] pim6reg1: entered allmulticast mode [ 139.821465][ T7280] tipc: Resetting bearer [ 139.878603][ T7280] tipc: Disabling bearer [ 140.589860][ T7334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.597864][ T7334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.609832][ T7334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.618131][ T7334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.832594][ T7340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.851762][ T7342] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.434'. [ 140.879377][ T7340] bond0: (slave rose0): Enslaving as an active interface with an up link [ 141.293319][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 141.315591][ T7359] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 141.324489][ T7352] bridge_slave_1: left allmulticast mode [ 141.342916][ T7361] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 141.357985][ T7352] bridge_slave_1: left promiscuous mode [ 141.386413][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.458412][ T7352] bridge_slave_0: left allmulticast mode [ 141.488425][ T7352] bridge_slave_0: left promiscuous mode [ 141.502679][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.940447][ T7383] netlink: 248 bytes leftover after parsing attributes in process `syz.2.447'. [ 142.165529][ T7392] netlink: 81 bytes leftover after parsing attributes in process `syz.2.447'. [ 142.203558][ T7394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.450'. [ 142.318909][ T7405] netlink: 68 bytes leftover after parsing attributes in process `syz.1.452'. [ 142.343496][ T7399] syzkaller0: entered promiscuous mode [ 142.349120][ T7399] syzkaller0: entered allmulticast mode [ 142.376418][ T7389] tipc: Started in network mode [ 142.386265][ T7389] tipc: Node identity f28018388bb5, cluster identity 4711 [ 142.411669][ T7389] tipc: Enabled bearer , priority 0 [ 142.446455][ T7395] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.544234][ T7395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'. [ 142.612243][ T7395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.449'. [ 143.061712][ T49] tipc: Resetting bearer [ 143.084449][ T7427] macvlan2: entered promiscuous mode [ 143.092926][ T7427] macvlan2: entered allmulticast mode [ 143.102729][ T7388] tipc: Resetting bearer [ 143.535875][ T5873] tipc: Node number set to 2033522744 [ 144.927187][ T7388] tipc: Disabling bearer [ 144.945280][ T7444] __nla_validate_parse: 2 callbacks suppressed [ 144.945307][ T7444] netlink: 64 bytes leftover after parsing attributes in process `syz.3.461'. [ 145.480626][ T7489] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 145.722074][ T7497] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 145.922597][ T5994] IPVS: starting estimator thread 0... [ 146.035393][ T7517] IPVS: using max 24 ests per chain, 57600 per kthread [ 146.710270][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.487'. [ 147.102877][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 147.255786][ T7566] team_slave_0: entered allmulticast mode [ 147.321247][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 147.386198][ T7576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.496'. [ 147.732427][ T7588] syz.1.500: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 147.778282][ T7588] CPU: 0 UID: 0 PID: 7588 Comm: syz.1.500 Not tainted syzkaller #0 PREEMPT(full) [ 147.778315][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.778331][ T7588] Call Trace: [ 147.778340][ T7588] [ 147.778350][ T7588] dump_stack_lvl+0x189/0x250 [ 147.778387][ T7588] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 147.778424][ T7588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.778452][ T7588] ? __pfx__printk+0x10/0x10 [ 147.778485][ T7588] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 147.778513][ T7588] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 147.778551][ T7588] warn_alloc+0x214/0x310 [ 147.778589][ T7588] ? stack_depot_save_flags+0x40/0x860 [ 147.778630][ T7588] ? __pfx_warn_alloc+0x10/0x10 [ 147.778670][ T7588] ? kasan_save_track+0x4f/0x80 [ 147.778703][ T7588] ? xskq_create+0x56/0x170 [ 147.778724][ T7588] ? xsk_init_queue+0xb0/0x110 [ 147.778744][ T7588] ? xsk_setsockopt+0x4dc/0x8d0 [ 147.778777][ T7588] ? do_sock_setsockopt+0x17c/0x1b0 [ 147.778804][ T7588] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 147.778830][ T7588] ? do_syscall_64+0xfa/0x3b0 [ 147.778856][ T7588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.778890][ T7588] __vmalloc_node_range_noprof+0x125/0x12f0 [ 147.778963][ T7588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.779008][ T7588] ? __kasan_kmalloc+0x93/0xb0 [ 147.779054][ T7588] vmalloc_user_noprof+0xad/0xf0 [ 147.779090][ T7588] ? xskq_create+0xbf/0x170 [ 147.779115][ T7588] xskq_create+0xbf/0x170 [ 147.779143][ T7588] xsk_init_queue+0xb0/0x110 [ 147.779169][ T7588] xsk_setsockopt+0x4dc/0x8d0 [ 147.779210][ T7588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.779246][ T7588] ? __pfx_aa_sk_perm+0x10/0x10 [ 147.779293][ T7588] ? aa_sock_opt_perm+0xff/0x1b0 [ 147.779320][ T7588] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 147.779346][ T7588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.779385][ T7588] do_sock_setsockopt+0x17c/0x1b0 [ 147.779421][ T7588] __x64_sys_setsockopt+0x13f/0x1b0 [ 147.779458][ T7588] do_syscall_64+0xfa/0x3b0 [ 147.779484][ T7588] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.779507][ T7588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.779529][ T7588] ? clear_bhb_loop+0x60/0xb0 [ 147.779558][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.779581][ T7588] RIP: 0033:0x7f7e1338eec9 [ 147.779604][ T7588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.779624][ T7588] RSP: 002b:00007f7e115ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.779648][ T7588] RAX: ffffffffffffffda RBX: 00007f7e135e5fa0 RCX: 00007f7e1338eec9 [ 147.779666][ T7588] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 147.779680][ T7588] RBP: 00007f7e13411f91 R08: 0000000000000004 R09: 0000000000000000 [ 147.779693][ T7588] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.779707][ T7588] R13: 00007f7e135e6038 R14: 00007f7e135e5fa0 R15: 00007ffd39dafd68 [ 147.779743][ T7588] [ 147.816154][ T7592] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20001 [ 147.859552][ T7588] Mem-Info: [ 147.864787][ T7589] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20001 [ 147.875684][ T7588] active_anon:5661 inactive_anon:0 isolated_anon:0 [ 147.875684][ T7588] active_file:3217 inactive_file:39891 isolated_file:0 [ 147.875684][ T7588] unevictable:768 dirty:155 writeback:0 [ 147.875684][ T7588] slab_reclaimable:10740 slab_unreclaimable:97836 [ 147.875684][ T7588] mapped:29370 shmem:1362 pagetables:1145 [ 147.875684][ T7588] sec_pagetables:0 bounce:0 [ 147.875684][ T7588] kernel_misc_reclaimable:0 [ 147.875684][ T7588] free:1327140 free_pcp:13088 free_cma:0 [ 148.235604][ T7588] Node 0 active_anon:22844kB inactive_anon:0kB active_file:12868kB inactive_file:159360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117580kB dirty:620kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12484kB pagetables:4432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 148.308092][ T7588] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 148.425162][ T7588] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 148.561767][ T7588] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 148.608850][ T7588] Node 0 DMA32 free:1407308kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22496kB inactive_anon:0kB active_file:12868kB inactive_file:157784kB unevictable:1536kB writepending:620kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:34500kB local_pcp:15892kB free_cma:0kB [ 148.627273][ T7608] FAULT_INJECTION: forcing a failure. [ 148.627273][ T7608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.692191][ T7608] CPU: 1 UID: 0 PID: 7608 Comm: syz.4.505 Not tainted syzkaller #0 PREEMPT(full) [ 148.692222][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.692235][ T7608] Call Trace: [ 148.692244][ T7608] [ 148.692254][ T7608] dump_stack_lvl+0x189/0x250 [ 148.692287][ T7608] ? __pfx____ratelimit+0x10/0x10 [ 148.692311][ T7608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.692337][ T7608] ? __pfx__printk+0x10/0x10 [ 148.692368][ T7608] ? __might_fault+0xb0/0x130 [ 148.692413][ T7608] should_fail_ex+0x414/0x560 [ 148.692452][ T7608] _copy_from_user+0x2d/0xb0 [ 148.692483][ T7608] ___sys_sendmsg+0x158/0x2a0 [ 148.692515][ T7608] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.692583][ T7608] ? __fget_files+0x2a/0x420 [ 148.692603][ T7608] ? __fget_files+0x3a0/0x420 [ 148.692635][ T7608] __x64_sys_sendmsg+0x19b/0x260 [ 148.692667][ T7608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.692707][ T7608] ? __pfx_ksys_write+0x10/0x10 [ 148.692734][ T7608] ? rcu_is_watching+0x15/0xb0 [ 148.692763][ T7608] ? do_syscall_64+0xbe/0x3b0 [ 148.692792][ T7608] do_syscall_64+0xfa/0x3b0 [ 148.692815][ T7608] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.692838][ T7608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.692860][ T7608] ? clear_bhb_loop+0x60/0xb0 [ 148.692886][ T7608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.692907][ T7608] RIP: 0033:0x7f86ebd8eec9 [ 148.692926][ T7608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.692952][ T7608] RSP: 002b:00007f86ecccf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.692975][ T7608] RAX: ffffffffffffffda RBX: 00007f86ebfe5fa0 RCX: 00007f86ebd8eec9 [ 148.692991][ T7608] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 148.693004][ T7608] RBP: 00007f86ecccf090 R08: 0000000000000000 R09: 0000000000000000 [ 148.693017][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.693029][ T7608] R13: 00007f86ebfe6038 R14: 00007f86ebfe5fa0 R15: 00007fffb513bfc8 [ 148.693064][ T7608] [ 148.930176][ T7588] lowmem_reserve[]: 0 0 1 1 1 [ 148.935010][ T7588] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 148.965509][ T7588] lowmem_reserve[]: 0 0 0 0 0 [ 148.974368][ T7588] Node 1 Normal free:3885752kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18692kB local_pcp:8324kB free_cma:0kB [ 149.007808][ T7588] lowmem_reserve[]: 0 0 0 0 0 [ 149.012651][ T7588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 149.025540][ T7588] Node 0 DMA32: 377*4kB (UM) 229*8kB (UM) 250*16kB (UME) 252*32kB (UME) 49*64kB (UM) 15*128kB (UM) 11*256kB (UM) 13*512kB (UM) 9*1024kB (UM) 4*2048kB (UM) 332*4096kB (M) = 1407212kB [ 149.044007][ T7588] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 149.056516][ T7588] Node 1 Normal: 208*4kB (UE) 55*8kB (UME) 46*16kB (UME) 61*32kB (UME) 23*64kB (UME) 7*128kB (UME) 2*256kB (M) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3885752kB [ 149.075648][ T7588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.085921][ T7588] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.095342][ T7588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.105019][ T7588] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.114506][ T7588] 44466 total pagecache pages [ 149.119921][ T7588] 0 pages in swap cache [ 149.124213][ T7588] Free swap = 124996kB [ 149.128547][ T7588] Total swap = 124996kB [ 149.132758][ T7588] 2097051 pages RAM [ 149.140193][ T7588] 0 pages HighMem/MovableOnly [ 149.145006][ T7588] 425673 pages reserved [ 149.149310][ T7588] 0 pages cma reserved [ 149.761527][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 150.339626][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 150.413301][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'. [ 150.466712][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.525'. [ 150.481194][ T7678] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 150.488672][ T7681] tipc: New replicast peer: 255.255.255.255 [ 150.523257][ T7681] tipc: Enabled bearer , priority 10 [ 151.127804][ T7706] netlink: 'syz.0.531': attribute type 11 has an invalid length. [ 151.483330][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 151.543432][ T7735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 151.808840][ T7752] netlink: 'syz.3.547': attribute type 1 has an invalid length. [ 151.854234][ T7754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.548'. [ 151.998987][ T7752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.104695][ T7762] vlan2: entered promiscuous mode [ 152.134964][ T7762] bond5: entered promiscuous mode [ 152.161118][ T7762] vlan2: entered allmulticast mode [ 152.180950][ T7762] bond5: entered allmulticast mode [ 152.434165][ T7790] netlink: 'syz.4.557': attribute type 1 has an invalid length. [ 152.453057][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 152.489002][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.557'. [ 153.498133][ T7841] team_slave_0: entered allmulticast mode [ 153.577154][ T7841] macvtap1: entered promiscuous mode [ 153.585264][ T7841] vlan0: entered promiscuous mode [ 153.615900][ T7841] macvtap1: entered allmulticast mode [ 153.621377][ T7841] vlan0: entered allmulticast mode [ 153.663144][ T7841] veth0_vlan: entered allmulticast mode [ 153.741730][ T7845] macvtap2: entered promiscuous mode [ 153.767978][ T7845] macvtap2: entered allmulticast mode [ 153.787601][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 154.050688][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 154.979085][ T7916] FAULT_INJECTION: forcing a failure. [ 154.979085][ T7916] name failslab, interval 1, probability 0, space 0, times 0 [ 155.043460][ T7916] CPU: 1 UID: 0 PID: 7916 Comm: syz.2.599 Not tainted syzkaller #0 PREEMPT(full) [ 155.043492][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.043506][ T7916] Call Trace: [ 155.043515][ T7916] [ 155.043526][ T7916] dump_stack_lvl+0x189/0x250 [ 155.043560][ T7916] ? __pfx____ratelimit+0x10/0x10 [ 155.043585][ T7916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.043612][ T7916] ? __pfx__printk+0x10/0x10 [ 155.043652][ T7916] ? __pfx___might_resched+0x10/0x10 [ 155.043673][ T7916] ? fs_reclaim_acquire+0x7d/0x100 [ 155.043701][ T7916] should_fail_ex+0x414/0x560 [ 155.043742][ T7916] should_failslab+0xa8/0x100 [ 155.043779][ T7916] __kmalloc_cache_noprof+0x70/0x3d0 [ 155.043811][ T7916] ? tcf_action_init_1+0x19f/0x6d0 [ 155.043851][ T7916] tcf_action_init_1+0x19f/0x6d0 [ 155.043892][ T7916] ? __pfx_tcf_action_init_1+0x10/0x10 [ 155.043925][ T7916] ? _raw_read_unlock+0x28/0x50 [ 155.043945][ T7916] ? tc_action_load_ops+0x214/0x4e0 [ 155.043998][ T7916] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 155.044032][ T7916] ? __nla_parse+0x40/0x60 [ 155.044060][ T7916] tcf_action_init+0x2cf/0xab0 [ 155.044128][ T7916] ? __pfx_stack_trace_save+0x10/0x10 [ 155.044160][ T7916] ? __pfx_tcf_action_init+0x10/0x10 [ 155.044238][ T7916] ? __pfx___nla_validate_parse+0x10/0x10 [ 155.044308][ T7916] tc_ctl_action+0x430/0xbd0 [ 155.044354][ T7916] ? __pfx_tc_ctl_action+0x10/0x10 [ 155.044394][ T7916] ? rcu_is_watching+0x15/0xb0 [ 155.044418][ T7916] ? trace_contention_end+0x39/0x120 [ 155.044497][ T7916] ? __pfx_tc_ctl_action+0x10/0x10 [ 155.044531][ T7916] rtnetlink_rcv_msg+0x779/0xb70 [ 155.044561][ T7916] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 155.044584][ T7916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.044606][ T7916] ? ref_tracker_free+0x63a/0x7d0 [ 155.044629][ T7916] ? __asan_memcpy+0x40/0x70 [ 155.044655][ T7916] ? __pfx_ref_tracker_free+0x10/0x10 [ 155.044674][ T7916] ? __skb_clone+0x63/0x7a0 [ 155.044716][ T7916] netlink_rcv_skb+0x205/0x470 [ 155.044743][ T7916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.044770][ T7916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.044809][ T7916] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.044844][ T7916] netlink_unicast+0x82f/0x9e0 [ 155.044890][ T7916] ? __pfx_netlink_unicast+0x10/0x10 [ 155.044928][ T7916] ? netlink_sendmsg+0x642/0xb30 [ 155.044950][ T7916] ? skb_put+0x11b/0x210 [ 155.044981][ T7916] netlink_sendmsg+0x805/0xb30 [ 155.045018][ T7916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.045051][ T7916] ? aa_sock_msg_perm+0xf1/0x1d0 [ 155.045075][ T7916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.045098][ T7916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.045122][ T7916] __sock_sendmsg+0x219/0x270 [ 155.045158][ T7916] ____sys_sendmsg+0x505/0x830 [ 155.045194][ T7916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.045245][ T7916] ? import_iovec+0x74/0xa0 [ 155.045280][ T7916] ___sys_sendmsg+0x21f/0x2a0 [ 155.045311][ T7916] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.045384][ T7916] ? __fget_files+0x2a/0x420 [ 155.045404][ T7916] ? __fget_files+0x3a0/0x420 [ 155.045437][ T7916] __x64_sys_sendmsg+0x19b/0x260 [ 155.045470][ T7916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.045511][ T7916] ? __pfx_ksys_write+0x10/0x10 [ 155.045539][ T7916] ? rcu_is_watching+0x15/0xb0 [ 155.045568][ T7916] ? do_syscall_64+0xbe/0x3b0 [ 155.045599][ T7916] do_syscall_64+0xfa/0x3b0 [ 155.045623][ T7916] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.045646][ T7916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.045669][ T7916] ? clear_bhb_loop+0x60/0xb0 [ 155.045697][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.045719][ T7916] RIP: 0033:0x7f4b63b8eec9 [ 155.045740][ T7916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.045758][ T7916] RSP: 002b:00007f4b64a18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.045783][ T7916] RAX: ffffffffffffffda RBX: 00007f4b63de5fa0 RCX: 00007f4b63b8eec9 [ 155.045799][ T7916] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 155.045813][ T7916] RBP: 00007f4b64a18090 R08: 0000000000000000 R09: 0000000000000000 [ 155.045827][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.045840][ T7916] R13: 00007f4b63de6038 R14: 00007f4b63de5fa0 R15: 00007ffc9b44bcc8 [ 155.045877][ T7916] [ 156.259955][ T7949] __nla_validate_parse: 4 callbacks suppressed [ 156.259978][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.608'. [ 156.337157][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 156.401972][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 156.487062][ T7964] netlink: 6 bytes leftover after parsing attributes in process `syz.3.613'. [ 156.524232][ T7964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.596986][ T7971] syzkaller1: entered promiscuous mode [ 156.623001][ T7971] syzkaller1: entered allmulticast mode [ 156.840744][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.616'. [ 157.104039][ T7993] IPVS: set_ctl: invalid protocol: 211 172.20.20.170:20004 [ 157.155017][ T7988] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 157.290869][ T7989] syzkaller1: entered promiscuous mode [ 157.302526][ T7989] syzkaller1: entered allmulticast mode [ 157.614857][ T8010] netlink: 'syz.2.625': attribute type 10 has an invalid length. [ 157.762097][ T8015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.628'. [ 157.821338][ T8010] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 158.190132][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.632'. [ 158.299576][ T8036] netlink: 'syz.3.634': attribute type 3 has an invalid length. [ 158.339636][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 158.390324][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.634'. [ 158.569070][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 158.644320][ T8050] tipc: Can't bind to reserved service type 0 [ 159.386374][ T8078] vlan2: entered promiscuous mode [ 159.391535][ T8078] bridge0: entered promiscuous mode [ 160.240667][ T8120] netlink: 'syz.4.661': attribute type 4 has an invalid length. [ 160.246744][ T8121] netlink: 'syz.4.661': attribute type 4 has an invalid length. [ 160.426991][ T8121] `: renamed from bond0 (while UP) [ 161.015657][ T8147] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 161.605402][ T8171] __nla_validate_parse: 7 callbacks suppressed [ 161.605425][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.676'. [ 161.644865][ T8168] veth5: entered allmulticast mode [ 161.918798][ T8183] netlink: 'syz.0.680': attribute type 2 has an invalid length. [ 161.960568][ T8183] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.680'. [ 162.736114][ T8211] openvswitch: netlink: IP tunnel TTL not specified. [ 162.746664][ T8216] netlink: 20 bytes leftover after parsing attributes in process `syz.0.689'. [ 162.956549][ T8221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.692'. [ 163.106262][ T8224] net veth1_virt_wifi .: renamed from virt_wifi0 [ 164.904000][ T30] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 165.008807][ T8323] 8021q: VLANs not supported on ip6_vti0 [ 166.782004][ T8385] syzkaller0: entered promiscuous mode [ 166.808329][ T8385] syzkaller0: entered allmulticast mode [ 167.024895][ T8397] netlink: 76 bytes leftover after parsing attributes in process `syz.4.739'. [ 167.248348][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 167.316863][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.742'. [ 167.343569][ T8415] netlink: 108 bytes leftover after parsing attributes in process `syz.4.743'. [ 167.377304][ T8415] netlink: 108 bytes leftover after parsing attributes in process `syz.4.743'. [ 167.403571][ T8415] netlink: 108 bytes leftover after parsing attributes in process `syz.4.743'. [ 167.681114][ T8427] netlink: 'syz.2.745': attribute type 83 has an invalid length. [ 167.693529][ T8431] netlink: 182632 bytes leftover after parsing attributes in process `syz.3.746'. [ 167.709545][ T8427] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 168.078705][ T8450] bond0: entered allmulticast mode [ 168.085551][ T8450] bond_slave_0: entered allmulticast mode [ 168.094845][ T8450] bond_slave_1: entered allmulticast mode [ 168.451585][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'. [ 168.506304][ T8465] netlink: 44 bytes leftover after parsing attributes in process `syz.0.757'. [ 168.588157][ T8467] netlink: 256 bytes leftover after parsing attributes in process `syz.3.758'. [ 168.620650][ T8467] tc_dump_action: action bad kind [ 169.350585][ T8512] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 169.407478][ T8507] wg1: entered promiscuous mode [ 169.422795][ T8507] wg1: entered allmulticast mode [ 169.895849][ T8536] netlink: 'syz.3.780': attribute type 10 has an invalid length. [ 169.950783][ T8539] netlink: 'syz.0.782': attribute type 10 has an invalid length. [ 170.824761][ T8572] syz.1.793 (8572) used greatest stack depth: 15128 bytes left [ 171.120980][ T8595] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 171.263307][ T8607] team0: Device ip6gre1 is of different type [ 172.353657][ T8633] __nla_validate_parse: 13 callbacks suppressed [ 172.353681][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 172.871515][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.821'. [ 173.103693][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'. [ 173.366050][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.823'. [ 173.384913][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.823'. [ 173.442034][ T8672] netlink: 'syz.1.823': attribute type 1 has an invalid length. [ 173.464125][ T8672] netlink: 140 bytes leftover after parsing attributes in process `syz.1.823'. [ 173.485401][ T8672] netlink: 'syz.1.823': attribute type 1 has an invalid length. [ 173.508492][ T8684] netlink: 'syz.4.830': attribute type 1 has an invalid length. [ 173.883473][ T8684] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 174.003529][ T8699] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 174.062816][ T8699] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 174.189452][ T8702] tipc: Enabled bearer , priority 0 [ 174.207881][ T8703] tipc: Enabling of bearer rejected, already enabled [ 174.321106][ T8703] tipc: Disabling bearer [ 174.366796][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 174.410635][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'. [ 174.528832][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'. [ 174.766235][ T8735] tipc: Enabled bearer , priority 0 [ 174.800081][ T8735] syzkaller0: entered promiscuous mode [ 174.816402][ T8735] syzkaller0: entered allmulticast mode [ 174.909320][ T8735] tipc: Resetting bearer [ 174.955831][ T8743] netlink: 'syz.2.843': attribute type 13 has an invalid length. [ 174.978761][ T8748] netlink: 'syz.2.843': attribute type 13 has an invalid length. [ 175.157649][ T8743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.161587][ T8759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'. [ 175.207934][ T8748] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.229586][ T8735] tipc: Resetting bearer [ 175.257963][ T8735] tipc: Disabling bearer [ 176.846114][ T8821] netlink: 'syz.3.864': attribute type 1 has an invalid length. [ 177.479248][ T8857] __nla_validate_parse: 10 callbacks suppressed [ 177.479287][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 177.535535][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 177.851025][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 177.878040][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 178.226267][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 178.812697][ T8924] netlink: 80 bytes leftover after parsing attributes in process `syz.3.894'. [ 178.922276][ T8926] netlink: 'syz.4.895': attribute type 1 has an invalid length. [ 179.107430][ T8930] syz.3.896: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 179.195632][ T8930] CPU: 1 UID: 0 PID: 8930 Comm: syz.3.896 Not tainted syzkaller #0 PREEMPT(full) [ 179.195667][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.195681][ T8930] Call Trace: [ 179.195691][ T8930] [ 179.195702][ T8930] dump_stack_lvl+0x189/0x250 [ 179.195743][ T8930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.195772][ T8930] ? __pfx__printk+0x10/0x10 [ 179.195806][ T8930] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 179.195836][ T8930] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 179.195866][ T8930] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 179.195898][ T8930] warn_alloc+0x214/0x310 [ 179.195960][ T8930] ? __pfx_warn_alloc+0x10/0x10 [ 179.196006][ T8930] ? __get_vm_area_node+0x28f/0x300 [ 179.196038][ T8930] ? hash_ipportip_create+0x358/0xfe0 [ 179.196071][ T8930] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 179.196113][ T8930] ? do_syscall_64+0xfa/0x3b0 [ 179.196171][ T8930] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 179.196210][ T8930] ? rcu_is_watching+0x15/0xb0 [ 179.196233][ T8930] ? hash_ipportip_create+0x358/0xfe0 [ 179.196257][ T8930] ? hash_ipportip_create+0x358/0xfe0 [ 179.196280][ T8930] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 179.196312][ T8930] ? hash_ipportip_create+0x358/0xfe0 [ 179.196340][ T8930] ? hash_ipportip_create+0x2fe/0xfe0 [ 179.196372][ T8930] hash_ipportip_create+0x358/0xfe0 [ 179.196408][ T8930] ? __nla_parse+0x40/0x60 [ 179.196431][ T8930] ? __pfx_hash_ipportip_create+0x10/0x10 [ 179.196461][ T8930] ip_set_create+0xa97/0x1940 [ 179.196495][ T8930] ? ip_set_create+0x4a2/0x1940 [ 179.196537][ T8930] ? __pfx_ip_set_create+0x10/0x10 [ 179.196606][ T8930] nfnetlink_rcv_msg+0xb4a/0x1130 [ 179.196642][ T8930] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 179.196698][ T8930] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 179.196728][ T8930] ? kasan_save_free_info+0x46/0x50 [ 179.196811][ T8930] netlink_rcv_skb+0x205/0x470 [ 179.196837][ T8930] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 179.196874][ T8930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.196912][ T8930] ? bpf_lsm_capable+0x9/0x20 [ 179.196940][ T8930] ? security_capable+0x7e/0x2e0 [ 179.196983][ T8930] nfnetlink_rcv+0x26a/0x2520 [ 179.197022][ T8930] ? __dev_queue_xmit+0x1d79/0x3b50 [ 179.197065][ T8930] ? __dev_queue_xmit+0x27b/0x3b50 [ 179.197121][ T8930] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 179.197155][ T8930] ? __pfx___dev_queue_xmit+0x10/0x10 [ 179.197204][ T8930] ? ref_tracker_free+0x63a/0x7d0 [ 179.197227][ T8930] ? __asan_memcpy+0x40/0x70 [ 179.197252][ T8930] ? __pfx_ref_tracker_free+0x10/0x10 [ 179.197295][ T8930] ? skb_clone+0x246/0x3a0 [ 179.197328][ T8930] ? __netlink_deliver_tap+0x807/0x850 [ 179.197350][ T8930] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.197380][ T8930] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.197412][ T8930] netlink_unicast+0x82f/0x9e0 [ 179.197457][ T8930] ? __pfx_netlink_unicast+0x10/0x10 [ 179.197495][ T8930] ? netlink_sendmsg+0x642/0xb30 [ 179.197516][ T8930] ? skb_put+0x11b/0x210 [ 179.197544][ T8930] netlink_sendmsg+0x805/0xb30 [ 179.197581][ T8930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.197609][ T8930] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.197632][ T8930] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.197655][ T8930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.197680][ T8930] __sock_sendmsg+0x219/0x270 [ 179.197718][ T8930] ____sys_sendmsg+0x505/0x830 [ 179.197754][ T8930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.197792][ T8930] ? import_iovec+0x74/0xa0 [ 179.197825][ T8930] ___sys_sendmsg+0x21f/0x2a0 [ 179.197855][ T8930] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.197924][ T8930] ? __fget_files+0x2a/0x420 [ 179.197943][ T8930] ? __fget_files+0x3a0/0x420 [ 179.197975][ T8930] __x64_sys_sendmsg+0x19b/0x260 [ 179.198009][ T8930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.198052][ T8930] ? do_user_addr_fault+0xc8a/0x1390 [ 179.198105][ T8930] ? do_syscall_64+0xbe/0x3b0 [ 179.198138][ T8930] do_syscall_64+0xfa/0x3b0 [ 179.198162][ T8930] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.198186][ T8930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.198208][ T8930] ? clear_bhb_loop+0x60/0xb0 [ 179.198234][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.198255][ T8930] RIP: 0033:0x7f18eeb8eec9 [ 179.198276][ T8930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.198295][ T8930] RSP: 002b:00007f18ef974038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.198318][ T8930] RAX: ffffffffffffffda RBX: 00007f18eede6090 RCX: 00007f18eeb8eec9 [ 179.198335][ T8930] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 179.198349][ T8930] RBP: 00007f18eec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 179.198363][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.198376][ T8930] R13: 00007f18eede6128 R14: 00007f18eede6090 R15: 00007ffd16b33f18 [ 179.198413][ T8930] [ 179.709080][ T8930] Mem-Info: [ 179.712305][ T8930] active_anon:5744 inactive_anon:0 isolated_anon:0 [ 179.712305][ T8930] active_file:3347 inactive_file:39908 isolated_file:0 [ 179.712305][ T8930] unevictable:768 dirty:156 writeback:0 [ 179.712305][ T8930] slab_reclaimable:11002 slab_unreclaimable:112626 [ 179.712305][ T8930] mapped:29307 shmem:1363 pagetables:1199 [ 179.712305][ T8930] sec_pagetables:0 bounce:0 [ 179.712305][ T8930] kernel_misc_reclaimable:0 [ 179.712305][ T8930] free:1311678 free_pcp:13655 free_cma:0 [ 179.759223][ T8930] Node 0 active_anon:22976kB inactive_anon:0kB active_file:13388kB inactive_file:159428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117228kB dirty:620kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12820kB pagetables:4648kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 179.793167][ T8930] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:4kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 179.825925][ T8930] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 179.855608][ T8930] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 179.861442][ T8930] Node 0 DMA32 free:1345316kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22992kB inactive_anon:0kB active_file:13388kB inactive_file:157852kB unevictable:1536kB writepending:624kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:36016kB local_pcp:21044kB free_cma:0kB [ 179.894497][ T8930] lowmem_reserve[]: 0 0 1 1 1 [ 179.902078][ T8930] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 179.973989][ T8930] lowmem_reserve[]: 0 0 0 0 0 [ 179.978930][ T8930] Node 1 Normal free:3886024kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18564kB local_pcp:8420kB free_cma:0kB [ 180.015385][ T8930] lowmem_reserve[]: 0 0 0 0 0 [ 180.024423][ T8930] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 180.076881][ T8930] Node 0 DMA32: 792*4kB (UM) 386*8kB (UM) 245*16kB (UME) 41*32kB (UM) 36*64kB (UM) 19*128kB (UME) 12*256kB (UM) 13*512kB (UM) 10*1024kB (UME) 5*2048kB (UME) 317*4096kB (M) = 1344864kB [ 180.097686][ T8930] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 180.110413][ T8930] Node 1 Normal: 208*4kB (UE) 57*8kB (UME) 46*16kB (UME) 67*32kB (UME) 24*64kB (UME) 7*128kB (UME) 2*256kB (M) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3886024kB [ 180.128857][ T8930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.139096][ T8930] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.149018][ T8930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.158750][ T8930] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.168187][ T8930] 44613 total pagecache pages [ 180.172922][ T8930] 0 pages in swap cache [ 180.177318][ T8930] Free swap = 124996kB [ 180.181526][ T8930] Total swap = 124996kB [ 180.185858][ T8930] 2097051 pages RAM [ 180.191499][ T8930] 0 pages HighMem/MovableOnly [ 180.196433][ T8930] 425673 pages reserved [ 180.200665][ T8930] 0 pages cma reserved [ 180.513783][ T8960] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 181.144531][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 181.271397][ T8999] FAULT_INJECTION: forcing a failure. [ 181.271397][ T8999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.298674][ T8999] CPU: 1 UID: 0 PID: 8999 Comm: syz.3.912 Not tainted syzkaller #0 PREEMPT(full) [ 181.298706][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.298720][ T8999] Call Trace: [ 181.298729][ T8999] [ 181.298740][ T8999] dump_stack_lvl+0x189/0x250 [ 181.298785][ T8999] ? __pfx____ratelimit+0x10/0x10 [ 181.298811][ T8999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.298838][ T8999] ? __pfx__printk+0x10/0x10 [ 181.298871][ T8999] ? __might_fault+0xb0/0x130 [ 181.298918][ T8999] should_fail_ex+0x414/0x560 [ 181.298960][ T8999] _copy_from_iter+0x1de/0x1790 [ 181.298998][ T8999] ? rcu_is_watching+0x15/0xb0 [ 181.299024][ T8999] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 181.299058][ T8999] ? __pfx__copy_from_iter+0x10/0x10 [ 181.299088][ T8999] ? __build_skb_around+0x257/0x3e0 [ 181.299120][ T8999] ? netlink_sendmsg+0x642/0xb30 [ 181.299144][ T8999] ? skb_put+0x11b/0x210 [ 181.299174][ T8999] netlink_sendmsg+0x6b2/0xb30 [ 181.299213][ T8999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.299242][ T8999] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.299268][ T8999] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.299293][ T8999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.299320][ T8999] __sock_sendmsg+0x219/0x270 [ 181.299360][ T8999] ____sys_sendmsg+0x505/0x830 [ 181.299396][ T8999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.299436][ T8999] ? import_iovec+0x74/0xa0 [ 181.299470][ T8999] ___sys_sendmsg+0x21f/0x2a0 [ 181.299503][ T8999] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.299587][ T8999] ? __fget_files+0x2a/0x420 [ 181.299607][ T8999] ? __fget_files+0x3a0/0x420 [ 181.299641][ T8999] __x64_sys_sendmsg+0x19b/0x260 [ 181.299674][ T8999] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.299717][ T8999] ? __pfx_ksys_write+0x10/0x10 [ 181.299746][ T8999] ? rcu_is_watching+0x15/0xb0 [ 181.299775][ T8999] ? do_syscall_64+0xbe/0x3b0 [ 181.299807][ T8999] do_syscall_64+0xfa/0x3b0 [ 181.299832][ T8999] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.299856][ T8999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.299879][ T8999] ? clear_bhb_loop+0x60/0xb0 [ 181.299907][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.299930][ T8999] RIP: 0033:0x7f18eeb8eec9 [ 181.299959][ T8999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.299979][ T8999] RSP: 002b:00007f18ef995038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.300003][ T8999] RAX: ffffffffffffffda RBX: 00007f18eede5fa0 RCX: 00007f18eeb8eec9 [ 181.300018][ T8999] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 181.300032][ T8999] RBP: 00007f18ef995090 R08: 0000000000000000 R09: 0000000000000000 [ 181.300045][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.300058][ T8999] R13: 00007f18eede6038 R14: 00007f18eede5fa0 R15: 00007ffd16b33f18 [ 181.300093][ T8999] [ 181.961516][ T9016] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 182.090025][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.917'. [ 182.124854][ T9022] netlink: 'syz.3.917': attribute type 3 has an invalid length. [ 182.217188][ T9030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.918'. [ 182.254305][ T9030] netlink: 36 bytes leftover after parsing attributes in process `syz.1.918'. [ 182.616841][ T9038] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 182.670256][ T9038] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 183.241642][ T9072] __nla_validate_parse: 1 callbacks suppressed [ 183.241670][ T9072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.927'. [ 183.488068][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 184.066061][ T9111] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.939'. [ 184.106241][ T9111] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 184.114852][ T9111] openvswitch: netlink: Duplicate key (type 0). [ 184.302475][ T9116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.941'. [ 184.416039][ T9118] netlink: 'syz.3.942': attribute type 64 has an invalid length. [ 184.444645][ T9118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.942'. [ 184.775991][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 184.799364][ T9137] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 184.835342][ T9137] netlink: 224 bytes leftover after parsing attributes in process `syz.1.947'. [ 184.888937][ T5929] IPVS: starting estimator thread 0... [ 185.012724][ T9143] IPVS: using max 24 ests per chain, 57600 per kthread [ 185.151197][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 185.176947][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 185.180331][ T9160] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 185.204008][ T9148] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 185.224064][ T9162] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 185.556377][ T9168] netlink: 72 bytes leftover after parsing attributes in process `syz.3.954'. [ 185.712400][ T9166] sch_tbf: peakrate 13999684881003658459 is lower than or equals to rate 14452813081697313584 ! [ 186.203754][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.213915][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.545323][ T9195] pim6reg: entered allmulticast mode [ 186.603478][ T9201] pim6reg: left allmulticast mode [ 186.720515][ T9204] syzkaller0: entered promiscuous mode [ 186.730612][ T9204] syzkaller0: entered allmulticast mode [ 186.830023][ T9204] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 186.917938][ T9204] syzkaller0: mtu less than device minimum [ 187.129071][ T9220] netlink: 'syz.4.969': attribute type 1 has an invalid length. [ 187.442539][ T9227] pim6reg1: entered promiscuous mode [ 187.449268][ T9227] pim6reg1: entered allmulticast mode [ 187.871158][ T9241] openvswitch: netlink: Key type 29 is not supported [ 187.921617][ T9241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.014244][ T9244] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 188.106644][ T9255] netlink: 'syz.4.982': attribute type 6 has an invalid length. [ 188.297546][ T9266] __nla_validate_parse: 11 callbacks suppressed [ 188.297570][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.986'. [ 188.378102][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.983'. [ 188.502158][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.987'. [ 189.316329][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'. [ 189.326858][ T9308] netlink: 'syz.2.995': attribute type 10 has an invalid length. [ 189.494716][ T9308] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 189.864458][ T9326] netlink: 'syz.2.1004': attribute type 15 has an invalid length. [ 190.040063][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1005'. [ 190.624582][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1011'. [ 190.750627][ T9356] netlink: 664 bytes leftover after parsing attributes in process `syz.2.1012'. [ 191.470144][ T9382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1020'. [ 191.674203][ T9394] netlink: 'syz.2.1022': attribute type 1 has an invalid length. [ 191.704434][ T9401] FAULT_INJECTION: forcing a failure. [ 191.704434][ T9401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.744804][ T9399] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1023'. [ 191.747760][ T9401] CPU: 1 UID: 0 PID: 9401 Comm: syz.4.1024 Not tainted syzkaller #0 PREEMPT(full) [ 191.747799][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.747814][ T9401] Call Trace: [ 191.747826][ T9401] [ 191.747837][ T9401] dump_stack_lvl+0x189/0x250 [ 191.747877][ T9401] ? __pfx____ratelimit+0x10/0x10 [ 191.747906][ T9401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.747937][ T9401] ? __pfx__printk+0x10/0x10 [ 191.747975][ T9401] ? __might_fault+0xb0/0x130 [ 191.748027][ T9401] should_fail_ex+0x414/0x560 [ 191.748075][ T9401] _copy_from_iter+0x1de/0x1790 [ 191.748107][ T9401] ? skb_set_owner_w+0x25b/0x3a0 [ 191.748147][ T9401] ? sock_alloc_send_pskb+0x875/0x990 [ 191.748191][ T9401] ? __pfx__copy_from_iter+0x10/0x10 [ 191.748234][ T9401] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 191.748274][ T9401] skb_copy_datagram_from_iter+0xf5/0x720 [ 191.748316][ T9401] ? dev_get_by_index+0x22/0x2e0 [ 191.748354][ T9401] ? skb_put+0x11b/0x210 [ 191.748390][ T9401] packet_sendmsg+0x3797/0x5080 [ 191.748441][ T9401] ? aa_compat_map_file+0xa16/0xe70 [ 191.748490][ T9401] ? __pfx___might_resched+0x10/0x10 [ 191.748516][ T9401] ? __lock_acquire+0xab9/0xd20 [ 191.748576][ T9401] ? __pfx_packet_sendmsg+0x10/0x10 [ 191.748608][ T9401] ? aa_sk_perm+0x81e/0x950 [ 191.748658][ T9401] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 191.748696][ T9401] ? aa_sock_msg_perm+0xf1/0x1d0 [ 191.748725][ T9401] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.748765][ T9401] ? __pfx_packet_sendmsg+0x10/0x10 [ 191.748801][ T9401] __sock_sendmsg+0x219/0x270 [ 191.748847][ T9401] __sys_sendto+0x3bd/0x520 [ 191.748879][ T9401] ? __pfx___sys_sendto+0x10/0x10 [ 191.748906][ T9401] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 191.748954][ T9401] ? __fget_files+0x3a0/0x420 [ 191.748993][ T9401] ? ksys_write+0x22a/0x250 [ 191.749032][ T9401] ? __pfx_ksys_write+0x10/0x10 [ 191.749063][ T9401] ? rcu_is_watching+0x15/0xb0 [ 191.749097][ T9401] __x64_sys_sendto+0xde/0x100 [ 191.749133][ T9401] do_syscall_64+0xfa/0x3b0 [ 191.749163][ T9401] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.749191][ T9401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.749224][ T9401] ? clear_bhb_loop+0x60/0xb0 [ 191.749256][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.749282][ T9401] RIP: 0033:0x7f86ebd8eec9 [ 191.749306][ T9401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.749329][ T9401] RSP: 002b:00007f86ecccf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 191.749355][ T9401] RAX: ffffffffffffffda RBX: 00007f86ebfe5fa0 RCX: 00007f86ebd8eec9 [ 191.749374][ T9401] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 191.749391][ T9401] RBP: 00007f86ecccf090 R08: 0000200000000140 R09: 0000000000000014 [ 191.749408][ T9401] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 191.749423][ T9401] R13: 00007f86ebfe6038 R14: 00007f86ebfe5fa0 R15: 00007fffb513bfc8 [ 191.749465][ T9401] [ 191.943736][ T9394] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 192.625959][ T9426] can: request_module (can-proto-0) failed. [ 192.938988][ T9443] netlink: 'syz.4.1035': attribute type 2 has an invalid length. [ 193.132517][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1038'. [ 193.637743][ T9462] tipc: Enabled bearer , priority 0 [ 193.651221][ T9462] syzkaller0: entered promiscuous mode [ 193.670661][ T9462] syzkaller0: entered allmulticast mode [ 193.713604][ T9462] tipc: Resetting bearer [ 193.733482][ T9461] tipc: Resetting bearer [ 193.797851][ T9461] tipc: Disabling bearer [ 193.940263][ T9478] netlink: 'syz.3.1048': attribute type 1 has an invalid length. [ 194.040171][ T9478] 8021q: adding VLAN 0 to HW filter on device bond6 [ 194.100419][ T9485] netlink: 'syz.4.1049': attribute type 1 has an invalid length. [ 194.108825][ T9485] netlink: 'syz.4.1049': attribute type 4 has an invalid length. [ 194.118045][ T9485] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1049'. [ 194.154303][ T9483] 8021q: adding VLAN 0 to HW filter on device bond6 [ 194.162723][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1048'. [ 194.176232][ T9483] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 194.197306][ T9483] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 194.256829][ T9495] FAULT_INJECTION: forcing a failure. [ 194.256829][ T9495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.270475][ T9495] CPU: 1 UID: 0 PID: 9495 Comm: syz.4.1052 Not tainted syzkaller #0 PREEMPT(full) [ 194.270505][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.270519][ T9495] Call Trace: [ 194.270527][ T9495] [ 194.270537][ T9495] dump_stack_lvl+0x189/0x250 [ 194.270570][ T9495] ? __pfx____ratelimit+0x10/0x10 [ 194.270593][ T9495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.270616][ T9495] ? __pfx__printk+0x10/0x10 [ 194.270643][ T9495] ? __might_fault+0xb0/0x130 [ 194.270680][ T9495] should_fail_ex+0x414/0x560 [ 194.270713][ T9495] _copy_from_iter+0x1de/0x1790 [ 194.270741][ T9495] ? _copy_from_iter+0x24f/0x1790 [ 194.270767][ T9495] ? __pfx__copy_from_iter+0x10/0x10 [ 194.270786][ T9495] ? sock_alloc_send_pskb+0x875/0x990 [ 194.270818][ T9495] ? __pfx__copy_from_iter+0x10/0x10 [ 194.270842][ T9495] ? page_copy_sane+0x16a/0x280 [ 194.270866][ T9495] copy_page_from_iter+0xdd/0x170 [ 194.270892][ T9495] skb_copy_datagram_from_iter+0x306/0x720 [ 194.270930][ T9495] packet_sendmsg+0x3797/0x5080 [ 194.270965][ T9495] ? aa_compat_map_file+0xa16/0xe70 [ 194.271001][ T9495] ? __pfx___might_resched+0x10/0x10 [ 194.271018][ T9495] ? __lock_acquire+0xab9/0xd20 [ 194.271060][ T9495] ? __pfx_packet_sendmsg+0x10/0x10 [ 194.271084][ T9495] ? aa_sk_perm+0x81e/0x950 [ 194.271120][ T9495] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 194.271147][ T9495] ? aa_sock_msg_perm+0xf1/0x1d0 [ 194.271168][ T9495] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.271188][ T9495] ? __pfx_packet_sendmsg+0x10/0x10 [ 194.271217][ T9495] __sock_sendmsg+0x219/0x270 [ 194.271249][ T9495] __sys_sendto+0x3bd/0x520 [ 194.271273][ T9495] ? __pfx___sys_sendto+0x10/0x10 [ 194.271291][ T9495] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 194.271326][ T9495] ? __fget_files+0x3a0/0x420 [ 194.271360][ T9495] ? ksys_write+0x22a/0x250 [ 194.271389][ T9495] ? __pfx_ksys_write+0x10/0x10 [ 194.271411][ T9495] ? rcu_is_watching+0x15/0xb0 [ 194.271435][ T9495] __x64_sys_sendto+0xde/0x100 [ 194.271466][ T9495] do_syscall_64+0xfa/0x3b0 [ 194.271486][ T9495] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.271505][ T9495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.271523][ T9495] ? clear_bhb_loop+0x60/0xb0 [ 194.271545][ T9495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.271563][ T9495] RIP: 0033:0x7f86ebd8eec9 [ 194.271580][ T9495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.271596][ T9495] RSP: 002b:00007f86ecccf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 194.271616][ T9495] RAX: ffffffffffffffda RBX: 00007f86ebfe5fa0 RCX: 00007f86ebd8eec9 [ 194.271629][ T9495] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 194.271641][ T9495] RBP: 00007f86ecccf090 R08: 0000200000000140 R09: 0000000000000014 [ 194.271657][ T9495] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 194.271668][ T9495] R13: 00007f86ebfe6038 R14: 00007f86ebfe5fa0 R15: 00007fffb513bfc8 [ 194.271696][ T9495] [ 194.589039][ T9478] veth3: entered promiscuous mode [ 194.645562][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1050'. [ 194.676224][ T9478] bond6: (slave veth3): Enslaving as an active interface with a down link [ 194.764149][ T9487] 8021q: adding VLAN 0 to HW filter on device bond6 [ 194.809825][ T9492] tipc: Started in network mode [ 194.829468][ T9492] tipc: Node identity 7e04764d84d7, cluster identity 4711 [ 194.843835][ T9492] tipc: Enabled bearer , priority 0 [ 194.966649][ T9501] syzkaller0: entered promiscuous mode [ 194.972348][ T9501] syzkaller0: entered allmulticast mode [ 194.992108][ T9501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1047'. [ 195.002044][ T9480] tipc: Resetting bearer [ 195.062758][ T9479] tipc: Resetting bearer [ 195.119372][ T9479] tipc: Disabling bearer [ 195.823748][ T9540] tipc: Enabled bearer , priority 0 [ 195.839441][ T9540] syzkaller0: entered promiscuous mode [ 195.849706][ T9540] syzkaller0: entered allmulticast mode [ 195.904143][ T9540] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 195.942852][ T9540] tipc: Resetting bearer [ 196.017208][ T9539] tipc: Resetting bearer [ 196.129347][ T9539] tipc: Disabling bearer [ 196.442632][ T9562] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1067'. [ 196.538581][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 196.574987][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1070'. [ 196.804571][ T9578] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 196.919755][ T9584] vlan3: entered allmulticast mode [ 196.950750][ T9584] hsr0: entered allmulticast mode [ 196.963681][ T9584] hsr_slave_0: entered allmulticast mode [ 196.975886][ T9584] hsr_slave_1: entered allmulticast mode [ 197.143622][ T9604] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 197.150516][ T9604] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 197.227775][ T9605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1079'. [ 197.247479][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 197.938674][ T9618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1081'. [ 198.462812][ T9639] FAULT_INJECTION: forcing a failure. [ 198.462812][ T9639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.512485][ T9639] CPU: 0 UID: 0 PID: 9639 Comm: syz.4.1088 Not tainted syzkaller #0 PREEMPT(full) [ 198.512520][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.512533][ T9639] Call Trace: [ 198.512542][ T9639] [ 198.512552][ T9639] dump_stack_lvl+0x189/0x250 [ 198.512586][ T9639] ? __pfx____ratelimit+0x10/0x10 [ 198.512611][ T9639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.512639][ T9639] ? __pfx__printk+0x10/0x10 [ 198.512671][ T9639] ? __might_fault+0xb0/0x130 [ 198.512716][ T9639] should_fail_ex+0x414/0x560 [ 198.512757][ T9639] _copy_from_iter+0x1de/0x1790 [ 198.512792][ T9639] ? rcu_is_watching+0x15/0xb0 [ 198.512817][ T9639] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 198.512852][ T9639] ? __pfx__copy_from_iter+0x10/0x10 [ 198.512880][ T9639] ? __build_skb_around+0x257/0x3e0 [ 198.512909][ T9639] ? netlink_sendmsg+0x642/0xb30 [ 198.512932][ T9639] ? skb_put+0x11b/0x210 [ 198.512962][ T9639] netlink_sendmsg+0x6b2/0xb30 [ 198.512999][ T9639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.513028][ T9639] ? aa_sock_msg_perm+0xf1/0x1d0 [ 198.513054][ T9639] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.513087][ T9639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.513112][ T9639] __sock_sendmsg+0x219/0x270 [ 198.513152][ T9639] sock_write_iter+0x258/0x330 [ 198.513188][ T9639] ? __pfx_sock_write_iter+0x10/0x10 [ 198.513248][ T9639] do_iter_readv_writev+0x619/0x8b0 [ 198.513291][ T9639] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 198.513321][ T9639] ? common_file_perm+0x1b5/0x230 [ 198.513348][ T9639] ? bpf_lsm_file_permission+0x9/0x20 [ 198.513375][ T9639] ? security_file_permission+0x75/0x290 [ 198.513407][ T9639] ? rw_verify_area+0x255/0x4d0 [ 198.513441][ T9639] vfs_writev+0x31a/0x960 [ 198.513468][ T9639] ? __lock_acquire+0xab9/0xd20 [ 198.513504][ T9639] ? __pfx_vfs_writev+0x10/0x10 [ 198.513543][ T9639] ? __fget_files+0x2a/0x420 [ 198.513569][ T9639] ? __fget_files+0x3a0/0x420 [ 198.513586][ T9639] ? __fget_files+0x2a/0x420 [ 198.513615][ T9639] do_writev+0x14d/0x2d0 [ 198.513641][ T9639] ? __pfx_do_writev+0x10/0x10 [ 198.513659][ T9639] ? rcu_is_watching+0x15/0xb0 [ 198.513688][ T9639] ? do_syscall_64+0xbe/0x3b0 [ 198.513719][ T9639] do_syscall_64+0xfa/0x3b0 [ 198.513743][ T9639] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.513767][ T9639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.513790][ T9639] ? clear_bhb_loop+0x60/0xb0 [ 198.513817][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.513840][ T9639] RIP: 0033:0x7f86ebd8eec9 [ 198.513861][ T9639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.513880][ T9639] RSP: 002b:00007f86ecccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 198.513904][ T9639] RAX: ffffffffffffffda RBX: 00007f86ebfe5fa0 RCX: 00007f86ebd8eec9 [ 198.513921][ T9639] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000008 [ 198.513935][ T9639] RBP: 00007f86ecccf090 R08: 0000000000000000 R09: 0000000000000000 [ 198.513949][ T9639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.513962][ T9639] R13: 00007f86ebfe6038 R14: 00007f86ebfe5fa0 R15: 00007fffb513bfc8 [ 198.513999][ T9639] [ 199.276214][ T9659] __nla_validate_parse: 3 callbacks suppressed [ 199.276234][ T9659] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1090'. [ 199.330894][ T9667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1096'. [ 199.606320][ T9676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1100'. [ 199.813028][ T9688] FAULT_INJECTION: forcing a failure. [ 199.813028][ T9688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.840482][ T9688] CPU: 1 UID: 0 PID: 9688 Comm: syz.3.1104 Not tainted syzkaller #0 PREEMPT(full) [ 199.840513][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 199.840527][ T9688] Call Trace: [ 199.840536][ T9688] [ 199.840545][ T9688] dump_stack_lvl+0x189/0x250 [ 199.840578][ T9688] ? __pfx____ratelimit+0x10/0x10 [ 199.840603][ T9688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.840629][ T9688] ? __pfx__printk+0x10/0x10 [ 199.840659][ T9688] ? __might_fault+0xb0/0x130 [ 199.840702][ T9688] should_fail_ex+0x414/0x560 [ 199.840740][ T9688] _copy_from_iter+0x1de/0x1790 [ 199.840774][ T9688] ? _copy_from_iter+0x24f/0x1790 [ 199.840807][ T9688] ? __pfx__copy_from_iter+0x10/0x10 [ 199.840830][ T9688] ? sock_alloc_send_pskb+0x875/0x990 [ 199.840868][ T9688] ? __pfx__copy_from_iter+0x10/0x10 [ 199.840897][ T9688] ? page_copy_sane+0x16a/0x280 [ 199.840925][ T9688] copy_page_from_iter+0xdd/0x170 [ 199.840958][ T9688] skb_copy_datagram_from_iter+0x306/0x720 [ 199.841014][ T9688] packet_sendmsg+0x3797/0x5080 [ 199.841060][ T9688] ? aa_compat_map_file+0xa16/0xe70 [ 199.841105][ T9688] ? __pfx___might_resched+0x10/0x10 [ 199.841126][ T9688] ? __lock_acquire+0xab9/0xd20 [ 199.841178][ T9688] ? __pfx_packet_sendmsg+0x10/0x10 [ 199.841207][ T9688] ? aa_sk_perm+0x81e/0x950 [ 199.841250][ T9688] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 199.841283][ T9688] ? aa_sock_msg_perm+0xf1/0x1d0 [ 199.841308][ T9688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.841333][ T9688] ? __pfx_packet_sendmsg+0x10/0x10 [ 199.841366][ T9688] __sock_sendmsg+0x219/0x270 [ 199.841404][ T9688] __sys_sendto+0x3bd/0x520 [ 199.841434][ T9688] ? __pfx___sys_sendto+0x10/0x10 [ 199.841456][ T9688] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 199.841499][ T9688] ? __fget_files+0x3a0/0x420 [ 199.841533][ T9688] ? ksys_write+0x22a/0x250 [ 199.841567][ T9688] ? __pfx_ksys_write+0x10/0x10 [ 199.841595][ T9688] ? rcu_is_watching+0x15/0xb0 [ 199.841624][ T9688] __x64_sys_sendto+0xde/0x100 [ 199.841660][ T9688] do_syscall_64+0xfa/0x3b0 [ 199.841686][ T9688] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.841709][ T9688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.841731][ T9688] ? clear_bhb_loop+0x60/0xb0 [ 199.841759][ T9688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.841782][ T9688] RIP: 0033:0x7f18eeb8eec9 [ 199.841803][ T9688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.841822][ T9688] RSP: 002b:00007f18ef995038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 199.841847][ T9688] RAX: ffffffffffffffda RBX: 00007f18eede5fa0 RCX: 00007f18eeb8eec9 [ 199.841864][ T9688] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 199.841878][ T9688] RBP: 00007f18ef995090 R08: 0000200000000140 R09: 0000000000000014 [ 199.841893][ T9688] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 199.841907][ T9688] R13: 00007f18eede6038 R14: 00007f18eede5fa0 R15: 00007ffd16b33f18 [ 199.841943][ T9688] [ 199.876860][ T9690] FAULT_INJECTION: forcing a failure. [ 199.876860][ T9690] name failslab, interval 1, probability 0, space 0, times 0 [ 200.190215][ T9690] CPU: 0 UID: 0 PID: 9690 Comm: syz.1.1105 Not tainted syzkaller #0 PREEMPT(full) [ 200.190245][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 200.190258][ T9690] Call Trace: [ 200.190266][ T9690] [ 200.190276][ T9690] dump_stack_lvl+0x189/0x250 [ 200.190311][ T9690] ? __pfx____ratelimit+0x10/0x10 [ 200.190336][ T9690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.190363][ T9690] ? __pfx__printk+0x10/0x10 [ 200.190398][ T9690] ? __lock_acquire+0xab9/0xd20 [ 200.190444][ T9690] should_fail_ex+0x414/0x560 [ 200.190485][ T9690] should_failslab+0xa8/0x100 [ 200.190521][ T9690] kmem_cache_alloc_noprof+0x73/0x3c0 [ 200.190552][ T9690] ? skb_clone+0x212/0x3a0 [ 200.190589][ T9690] skb_clone+0x212/0x3a0 [ 200.190623][ T9690] __netlink_deliver_tap+0x404/0x850 [ 200.190664][ T9690] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.190702][ T9690] netlink_deliver_tap+0x19c/0x1b0 [ 200.190729][ T9690] netlink_unicast+0x7fa/0x9e0 [ 200.190776][ T9690] ? __pfx_netlink_unicast+0x10/0x10 [ 200.190814][ T9690] ? netlink_sendmsg+0x642/0xb30 [ 200.190837][ T9690] ? skb_put+0x11b/0x210 [ 200.190868][ T9690] netlink_sendmsg+0x805/0xb30 [ 200.190905][ T9690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.190935][ T9690] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.190960][ T9690] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.190986][ T9690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.191012][ T9690] __sock_sendmsg+0x219/0x270 [ 200.191051][ T9690] sock_write_iter+0x258/0x330 [ 200.191086][ T9690] ? __pfx_sock_write_iter+0x10/0x10 [ 200.191144][ T9690] do_iter_readv_writev+0x619/0x8b0 [ 200.191186][ T9690] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 200.191216][ T9690] ? common_file_perm+0x1b5/0x230 [ 200.191242][ T9690] ? bpf_lsm_file_permission+0x9/0x20 [ 200.191267][ T9690] ? security_file_permission+0x75/0x290 [ 200.191299][ T9690] ? rw_verify_area+0x255/0x4d0 [ 200.191333][ T9690] vfs_writev+0x31a/0x960 [ 200.191360][ T9690] ? __lock_acquire+0xab9/0xd20 [ 200.191395][ T9690] ? __pfx_vfs_writev+0x10/0x10 [ 200.191435][ T9690] ? __fget_files+0x2a/0x420 [ 200.191462][ T9690] ? __fget_files+0x3a0/0x420 [ 200.191480][ T9690] ? __fget_files+0x2a/0x420 [ 200.191511][ T9690] do_writev+0x14d/0x2d0 [ 200.191536][ T9690] ? __pfx_do_writev+0x10/0x10 [ 200.191556][ T9690] ? rcu_is_watching+0x15/0xb0 [ 200.191585][ T9690] ? do_syscall_64+0xbe/0x3b0 [ 200.191616][ T9690] do_syscall_64+0xfa/0x3b0 [ 200.191639][ T9690] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.191662][ T9690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.191693][ T9690] ? clear_bhb_loop+0x60/0xb0 [ 200.191721][ T9690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.191742][ T9690] RIP: 0033:0x7f7e1338eec9 [ 200.191762][ T9690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.191780][ T9690] RSP: 002b:00007f7e115ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 200.191803][ T9690] RAX: ffffffffffffffda RBX: 00007f7e135e5fa0 RCX: 00007f7e1338eec9 [ 200.191820][ T9690] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000008 [ 200.191834][ T9690] RBP: 00007f7e115ee090 R08: 0000000000000000 R09: 0000000000000000 [ 200.191847][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.191859][ T9690] R13: 00007f7e135e6038 R14: 00007f7e135e5fa0 R15: 00007ffd39dafd68 [ 200.191896][ T9690] [ 200.549480][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.717173][ T9703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1109'. [ 200.937356][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 200.948945][ T9721] FAULT_INJECTION: forcing a failure. [ 200.948945][ T9721] name failslab, interval 1, probability 0, space 0, times 0 [ 200.991334][ T9722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1112'. [ 201.040803][ T9721] CPU: 1 UID: 0 PID: 9721 Comm: syz.3.1115 Not tainted syzkaller #0 PREEMPT(full) [ 201.040835][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 201.040849][ T9721] Call Trace: [ 201.040858][ T9721] [ 201.040868][ T9721] dump_stack_lvl+0x189/0x250 [ 201.040900][ T9721] ? __pfx____ratelimit+0x10/0x10 [ 201.040925][ T9721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.040952][ T9721] ? __pfx__printk+0x10/0x10 [ 201.040979][ T9721] ? xfrm_netlink_rcv+0x79/0x90 [ 201.041011][ T9721] ? ____sys_sendmsg+0x505/0x830 [ 201.041037][ T9721] ? __x64_sys_sendmsg+0x19b/0x260 [ 201.041077][ T9721] should_fail_ex+0x414/0x560 [ 201.041116][ T9721] should_failslab+0xa8/0x100 [ 201.041152][ T9721] kmem_cache_alloc_noprof+0x73/0x3c0 [ 201.041181][ T9721] ? skb_clone+0x212/0x3a0 [ 201.041216][ T9721] skb_clone+0x212/0x3a0 [ 201.041249][ T9721] __netlink_deliver_tap+0x404/0x850 [ 201.041289][ T9721] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.041314][ T9721] netlink_deliver_tap+0x19c/0x1b0 [ 201.041338][ T9721] netlink_sendskb+0x68/0x140 [ 201.041376][ T9721] netlink_unicast+0x397/0x9e0 [ 201.041406][ T9721] ? __asan_memcpy+0x40/0x70 [ 201.041439][ T9721] ? __pfx_netlink_unicast+0x10/0x10 [ 201.041482][ T9721] netlink_rcv_skb+0x28c/0x470 [ 201.041506][ T9721] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 201.041540][ T9721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.041581][ T9721] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.041603][ T9721] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.041638][ T9721] xfrm_netlink_rcv+0x79/0x90 [ 201.041670][ T9721] netlink_unicast+0x82f/0x9e0 [ 201.041715][ T9721] ? __pfx_netlink_unicast+0x10/0x10 [ 201.041759][ T9721] ? netlink_sendmsg+0x642/0xb30 [ 201.041780][ T9721] ? skb_put+0x11b/0x210 [ 201.041810][ T9721] netlink_sendmsg+0x805/0xb30 [ 201.041850][ T9721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.041878][ T9721] ? aa_sock_msg_perm+0xf1/0x1d0 [ 201.041903][ T9721] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.041928][ T9721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.041953][ T9721] __sock_sendmsg+0x219/0x270 [ 201.041992][ T9721] ____sys_sendmsg+0x505/0x830 [ 201.042026][ T9721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.042066][ T9721] ? import_iovec+0x74/0xa0 [ 201.042100][ T9721] ___sys_sendmsg+0x21f/0x2a0 [ 201.042132][ T9721] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.042205][ T9721] ? __fget_files+0x2a/0x420 [ 201.042224][ T9721] ? __fget_files+0x3a0/0x420 [ 201.042257][ T9721] __x64_sys_sendmsg+0x19b/0x260 [ 201.042291][ T9721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.042332][ T9721] ? __pfx_ksys_write+0x10/0x10 [ 201.042359][ T9721] ? rcu_is_watching+0x15/0xb0 [ 201.042388][ T9721] ? do_syscall_64+0xbe/0x3b0 [ 201.042419][ T9721] do_syscall_64+0xfa/0x3b0 [ 201.042442][ T9721] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.042465][ T9721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.042488][ T9721] ? clear_bhb_loop+0x60/0xb0 [ 201.042516][ T9721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.042537][ T9721] RIP: 0033:0x7f18eeb8eec9 [ 201.042557][ T9721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.042576][ T9721] RSP: 002b:00007f18ef995038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.042600][ T9721] RAX: ffffffffffffffda RBX: 00007f18eede5fa0 RCX: 00007f18eeb8eec9 [ 201.042617][ T9721] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 201.042630][ T9721] RBP: 00007f18ef995090 R08: 0000000000000000 R09: 0000000000000000 [ 201.042644][ T9721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 201.042657][ T9721] R13: 00007f18eede6038 R14: 00007f18eede5fa0 R15: 00007ffd16b33f18 [ 201.042694][ T9721] [ 201.057630][ T9725] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:20003 [ 201.690858][ T9740] FAULT_INJECTION: forcing a failure. [ 201.690858][ T9740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.751852][ T9740] CPU: 0 UID: 0 PID: 9740 Comm: syz.4.1120 Not tainted syzkaller #0 PREEMPT(full) [ 201.751888][ T9740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 201.751903][ T9740] Call Trace: [ 201.751912][ T9740] [ 201.751923][ T9740] dump_stack_lvl+0x189/0x250 [ 201.751958][ T9740] ? __pfx____ratelimit+0x10/0x10 [ 201.751985][ T9740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.752012][ T9740] ? __pfx__printk+0x10/0x10 [ 201.752046][ T9740] ? __might_fault+0xb0/0x130 [ 201.752093][ T9740] should_fail_ex+0x414/0x560 [ 201.752136][ T9740] _copy_from_iter+0x1de/0x1790 [ 201.752173][ T9740] ? _copy_from_iter+0x24f/0x1790 [ 201.752206][ T9740] ? __pfx__copy_from_iter+0x10/0x10 [ 201.752229][ T9740] ? sock_alloc_send_pskb+0x875/0x990 [ 201.752269][ T9740] ? __pfx__copy_from_iter+0x10/0x10 [ 201.752300][ T9740] ? page_copy_sane+0x16a/0x280 [ 201.752331][ T9740] copy_page_from_iter+0xdd/0x170 [ 201.752365][ T9740] skb_copy_datagram_from_iter+0x306/0x720 [ 201.752414][ T9740] packet_sendmsg+0x3797/0x5080 [ 201.752461][ T9740] ? aa_compat_map_file+0xa16/0xe70 [ 201.752507][ T9740] ? __pfx___might_resched+0x10/0x10 [ 201.752530][ T9740] ? __lock_acquire+0xab9/0xd20 [ 201.752588][ T9740] ? __pfx_packet_sendmsg+0x10/0x10 [ 201.752619][ T9740] ? aa_sk_perm+0x81e/0x950 [ 201.752663][ T9740] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 201.752696][ T9740] ? aa_sock_msg_perm+0xf1/0x1d0 [ 201.752720][ T9740] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.752746][ T9740] ? __pfx_packet_sendmsg+0x10/0x10 [ 201.752788][ T9740] __sock_sendmsg+0x219/0x270 [ 201.752828][ T9740] __sys_sendto+0x3bd/0x520 [ 201.752858][ T9740] ? __pfx___sys_sendto+0x10/0x10 [ 201.752882][ T9740] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 201.752926][ T9740] ? __fget_files+0x3a0/0x420 [ 201.752960][ T9740] ? ksys_write+0x22a/0x250 [ 201.752995][ T9740] ? __pfx_ksys_write+0x10/0x10 [ 201.753024][ T9740] ? rcu_is_watching+0x15/0xb0 [ 201.753054][ T9740] __x64_sys_sendto+0xde/0x100 [ 201.753086][ T9740] do_syscall_64+0xfa/0x3b0 [ 201.753112][ T9740] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.753136][ T9740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.753160][ T9740] ? clear_bhb_loop+0x60/0xb0 [ 201.753194][ T9740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.753217][ T9740] RIP: 0033:0x7f86ebd8eec9 [ 201.753238][ T9740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.753259][ T9740] RSP: 002b:00007f86ecccf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 201.753284][ T9740] RAX: ffffffffffffffda RBX: 00007f86ebfe5fa0 RCX: 00007f86ebd8eec9 [ 201.753301][ T9740] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 201.753316][ T9740] RBP: 00007f86ecccf090 R08: 0000200000000140 R09: 0000000000000014 [ 201.753332][ T9740] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 201.753346][ T9740] R13: 00007f86ebfe6038 R14: 00007f86ebfe5fa0 R15: 00007fffb513bfc8 [ 201.753383][ T9740] [ 202.550931][ T9772] Driver unsupported XDP return value 0 on prog (id 152) dev N/A, expect packet loss! [ 202.563268][ T9772] netlink: 'syz.3.1128': attribute type 10 has an invalid length. [ 202.584246][ T9772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.597912][ T9772] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 202.611564][ T9772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.620022][ T9772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.628708][ T9772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.636790][ T9772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.661014][ T9772] bond0: (slave batadv0): Releasing backup interface [ 202.687531][ T9776] netlink: 'syz.2.1126': attribute type 27 has an invalid length. [ 202.695707][ T9776] netlink: 'syz.2.1126': attribute type 4 has an invalid length. [ 202.703617][ T9776] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1126'. [ 203.585400][ T9803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1137'. [ 203.769566][ T9811] macvtap1: entered promiscuous mode [ 203.790925][ T9811] vlan0: entered promiscuous mode [ 203.826675][ T9811] macvtap1: entered allmulticast mode [ 203.832146][ T9811] vlan0: entered allmulticast mode [ 203.869383][ T9811] veth0_vlan: entered allmulticast mode [ 203.880999][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 204.170571][ T9844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1146'. [ 204.692562][ T9865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.929331][ T9871] netlink: 'syz.2.1156': attribute type 5 has an invalid length. [ 205.004083][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 205.142120][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 205.412621][ T9899] FAULT_INJECTION: forcing a failure. [ 205.412621][ T9899] name failslab, interval 1, probability 0, space 0, times 0 [ 205.435796][ T9899] CPU: 1 UID: 0 PID: 9899 Comm: syz.0.1163 Not tainted syzkaller #0 PREEMPT(full) [ 205.435832][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 205.435847][ T9899] Call Trace: [ 205.435857][ T9899] [ 205.435868][ T9899] dump_stack_lvl+0x189/0x250 [ 205.435907][ T9899] ? __pfx____ratelimit+0x10/0x10 [ 205.435933][ T9899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.435962][ T9899] ? __pfx__printk+0x10/0x10 [ 205.435990][ T9899] ? sctp_transport_traverse_process+0x41a/0x470 [ 205.436036][ T9899] should_fail_ex+0x414/0x560 [ 205.436077][ T9899] should_failslab+0xa8/0x100 [ 205.436114][ T9899] kmem_cache_alloc_noprof+0x73/0x3c0 [ 205.436144][ T9899] ? skb_clone+0x212/0x3a0 [ 205.436179][ T9899] skb_clone+0x212/0x3a0 [ 205.436214][ T9899] __netlink_deliver_tap+0x404/0x850 [ 205.436255][ T9899] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.436281][ T9899] netlink_deliver_tap+0x19c/0x1b0 [ 205.436318][ T9899] netlink_dump+0x92b/0xe90 [ 205.436355][ T9899] ? __pfx_netlink_dump+0x10/0x10 [ 205.436398][ T9899] ? __inet_diag_dump_start+0x89a/0xa10 [ 205.436427][ T9899] ? netlink_lookup+0x30/0x200 [ 205.436457][ T9899] __netlink_dump_start+0x5cb/0x7e0 [ 205.436490][ T9899] inet_diag_handler_cmd+0x1bf/0x290 [ 205.436522][ T9899] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 205.436548][ T9899] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 205.436572][ T9899] ? __pfx_inet_diag_dump+0x10/0x10 [ 205.436596][ T9899] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 205.436625][ T9899] ? sock_diag_lock_handler+0x19/0x290 [ 205.436648][ T9899] ? sock_diag_lock_handler+0x19/0x290 [ 205.436677][ T9899] sock_diag_rcv_msg+0x4c9/0x600 [ 205.436705][ T9899] netlink_rcv_skb+0x205/0x470 [ 205.436731][ T9899] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 205.436756][ T9899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.436794][ T9899] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.436829][ T9899] netlink_unicast+0x82f/0x9e0 [ 205.436875][ T9899] ? __pfx_netlink_unicast+0x10/0x10 [ 205.436911][ T9899] ? netlink_sendmsg+0x642/0xb30 [ 205.436932][ T9899] ? skb_put+0x11b/0x210 [ 205.436972][ T9899] netlink_sendmsg+0x805/0xb30 [ 205.437005][ T9899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.437031][ T9899] ? aa_sock_msg_perm+0xf1/0x1d0 [ 205.437054][ T9899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.437080][ T9899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.437106][ T9899] __sock_sendmsg+0x219/0x270 [ 205.437146][ T9899] sock_write_iter+0x258/0x330 [ 205.437183][ T9899] ? __pfx_sock_write_iter+0x10/0x10 [ 205.437249][ T9899] do_iter_readv_writev+0x619/0x8b0 [ 205.437298][ T9899] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 205.437344][ T9899] ? common_file_perm+0x1b5/0x230 [ 205.437369][ T9899] ? bpf_lsm_file_permission+0x9/0x20 [ 205.437403][ T9899] ? security_file_permission+0x75/0x290 [ 205.437432][ T9899] ? rw_verify_area+0x255/0x4d0 [ 205.437468][ T9899] vfs_writev+0x31a/0x960 [ 205.437493][ T9899] ? __lock_acquire+0xab9/0xd20 [ 205.437525][ T9899] ? __pfx_vfs_writev+0x10/0x10 [ 205.437561][ T9899] ? __fget_files+0x2a/0x420 [ 205.437584][ T9899] ? __fget_files+0x3a0/0x420 [ 205.437601][ T9899] ? __fget_files+0x2a/0x420 [ 205.437629][ T9899] do_writev+0x14d/0x2d0 [ 205.437652][ T9899] ? __pfx_do_writev+0x10/0x10 [ 205.437674][ T9899] ? rcu_is_watching+0x15/0xb0 [ 205.437700][ T9899] ? do_syscall_64+0xbe/0x3b0 [ 205.437728][ T9899] do_syscall_64+0xfa/0x3b0 [ 205.437750][ T9899] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.437771][ T9899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.437791][ T9899] ? clear_bhb_loop+0x60/0xb0 [ 205.437816][ T9899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.437836][ T9899] RIP: 0033:0x7fab0798eec9 [ 205.437856][ T9899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.437875][ T9899] RSP: 002b:00007fab08792038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 205.437898][ T9899] RAX: ffffffffffffffda RBX: 00007fab07be5fa0 RCX: 00007fab0798eec9 [ 205.437913][ T9899] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000008 [ 205.437926][ T9899] RBP: 00007fab08792090 R08: 0000000000000000 R09: 0000000000000000 [ 205.437938][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.437950][ T9899] R13: 00007fab07be6038 R14: 00007fab07be5fa0 R15: 00007ffe795d7b28 [ 205.437983][ T9899] [ 206.453383][ T9934] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 206.782406][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1168'. [ 206.793974][ T9929] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1171'. [ 208.573250][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 208.647173][T10005] xfrm1: entered promiscuous mode [ 208.652509][T10005] xfrm1: entered allmulticast mode [ 209.356175][T10044] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1195'. [ 209.800247][T10051] netlink: 'syz.3.1199': attribute type 4 has an invalid length. [ 211.037203][T10122] FAULT_INJECTION: forcing a failure. [ 211.037203][T10122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.081318][T10122] CPU: 1 UID: 0 PID: 10122 Comm: syz.1.1214 Not tainted syzkaller #0 PREEMPT(full) [ 211.081356][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 211.081370][T10122] Call Trace: [ 211.081379][T10122] [ 211.081388][T10122] dump_stack_lvl+0x189/0x250 [ 211.081421][T10122] ? __pfx____ratelimit+0x10/0x10 [ 211.081446][T10122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.081473][T10122] ? __pfx__printk+0x10/0x10 [ 211.081506][T10122] ? __might_fault+0xb0/0x130 [ 211.081562][T10122] should_fail_ex+0x414/0x560 [ 211.081603][T10122] _copy_from_user+0x2d/0xb0 [ 211.081636][T10122] ___sys_sendmsg+0x158/0x2a0 [ 211.081676][T10122] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.081710][T10122] ? trace_irq_disable+0x37/0x110 [ 211.081741][T10122] ? preempt_schedule_irq+0xde/0x150 [ 211.081777][T10122] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.081819][T10122] ? kasan_check_range+0x9f/0x2c0 [ 211.081864][T10122] __x64_sys_sendmsg+0x19b/0x260 [ 211.081894][T10122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.081933][T10122] ? __pfx_ksys_write+0x10/0x10 [ 211.081960][T10122] ? rcu_is_watching+0x15/0xb0 [ 211.081988][T10122] ? do_syscall_64+0xbe/0x3b0 [ 211.082017][T10122] do_syscall_64+0xfa/0x3b0 [ 211.082040][T10122] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.082062][T10122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.082085][T10122] ? clear_bhb_loop+0x60/0xb0 [ 211.082112][T10122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.082133][T10122] RIP: 0033:0x7f7e1338eec9 [ 211.082152][T10122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.082171][T10122] RSP: 002b:00007f7e115ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.082195][T10122] RAX: ffffffffffffffda RBX: 00007f7e135e6180 RCX: 00007f7e1338eec9 [ 211.082212][T10122] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000006 [ 211.082224][T10122] RBP: 00007f7e115ac090 R08: 0000000000000000 R09: 0000000000000000 [ 211.082238][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.082251][T10122] R13: 00007f7e135e6218 R14: 00007f7e135e6180 R15: 00007ffd39dafd68 [ 211.082287][T10122] [ 211.822875][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1225'. [ 211.838116][T10151] delete_channel: no stack [ 211.844732][T10141] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1222'. [ 212.507897][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1228'. [ 222.765421][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 222.765475][ T5886] Bluetooth: hci2: command 0x0406 tx timeout [ 222.771609][ T5185] Bluetooth: hci4: command 0x0406 tx timeout [ 236.389608][T10193] FAULT_INJECTION: forcing a failure. [ 236.389608][T10193] name failslab, interval 1, probability 0, space 0, times 0 [ 236.422862][T10193] CPU: 1 UID: 0 PID: 10193 Comm: syz.3.1234 Not tainted syzkaller #0 PREEMPT(full) [ 236.422896][T10193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.422923][T10193] Call Trace: [ 236.422932][T10193] [ 236.422942][T10193] dump_stack_lvl+0x189/0x250 [ 236.422978][T10193] ? __pfx____ratelimit+0x10/0x10 [ 236.423009][T10193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.423037][T10193] ? __pfx__printk+0x10/0x10 [ 236.423076][T10193] ? __pfx___might_resched+0x10/0x10 [ 236.423106][T10193] should_fail_ex+0x414/0x560 [ 236.423148][T10193] should_failslab+0xa8/0x100 [ 236.423188][T10193] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 236.423224][T10193] ? __alloc_skb+0x112/0x2d0 [ 236.423255][T10193] __alloc_skb+0x112/0x2d0 [ 236.423300][T10193] netlink_sendmsg+0x5c6/0xb30 [ 236.423341][T10193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.423372][T10193] ? aa_sock_msg_perm+0xf1/0x1d0 [ 236.423399][T10193] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.423426][T10193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.423454][T10193] __sock_sendmsg+0x219/0x270 [ 236.423496][T10193] ____sys_sendmsg+0x505/0x830 [ 236.423536][T10193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.423580][T10193] ? import_iovec+0x74/0xa0 [ 236.423616][T10193] ___sys_sendmsg+0x21f/0x2a0 [ 236.423651][T10193] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.423728][T10193] ? __fget_files+0x2a/0x420 [ 236.423751][T10193] ? __fget_files+0x3a0/0x420 [ 236.423786][T10193] __x64_sys_sendmsg+0x19b/0x260 [ 236.423821][T10193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.423873][T10193] ? __pfx_ksys_write+0x10/0x10 [ 236.423912][T10193] ? rcu_is_watching+0x15/0xb0 [ 236.423942][T10193] ? do_syscall_64+0xbe/0x3b0 [ 236.423975][T10193] do_syscall_64+0xfa/0x3b0 [ 236.424001][T10193] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.424026][T10193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.424048][T10193] ? clear_bhb_loop+0x60/0xb0 [ 236.424077][T10193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.424100][T10193] RIP: 0033:0x7f18eeb8eec9 [ 236.424120][T10193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.424141][T10193] RSP: 002b:00007f18ef995038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.424166][T10193] RAX: ffffffffffffffda RBX: 00007f18eede5fa0 RCX: 00007f18eeb8eec9 [ 236.424184][T10193] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000006 [ 236.424198][T10193] RBP: 00007f18ef995090 R08: 0000000000000000 R09: 0000000000000000 [ 236.424214][T10193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.424227][T10193] R13: 00007f18eede6038 R14: 00007f18eede5fa0 R15: 00007ffd16b33f18 [ 236.424265][T10193] [ 236.731791][T10204] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1236'. [ 236.892660][T10204] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 236.912557][T10213] netlink: 'syz.4.1237': attribute type 13 has an invalid length. [ 236.947995][T10213] veth0_macvtap: left promiscuous mode [ 236.955896][T10213] macvtap0: entered allmulticast mode [ 236.970863][T10213] macvtap0: refused to change device tx_queue_len [ 237.414995][T10242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1243'. [ 237.491440][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1244'. [ 237.518310][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1244'. [ 237.543429][T10238] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1244'. [ 237.574173][T10244] tipc: Enabling of bearer rejected, failed to enable media [ 237.996612][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'. [ 238.248618][T10268] xt_l2tp: v2 tid > 0xffff: 1114244 [ 239.129383][T10314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1261'. [ 239.185918][T10314] syzkaller0: entered promiscuous mode [ 239.191637][T10314] syzkaller0: entered allmulticast mode [ 241.192409][T10327] IPv6: sit1: Disabled Multicast RS [ 241.322713][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 241.397479][T10341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1267'. [ 241.425599][T10338] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 241.438215][T10338] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1268'. [ 242.066530][T10367] netlink: 'syz.0.1275': attribute type 2 has an invalid length. [ 242.174565][T10375] netlink: 'syz.1.1279': attribute type 1 has an invalid length. [ 242.297708][T10381] __nla_validate_parse: 1 callbacks suppressed [ 242.297730][T10381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1280'. [ 242.369396][T10376] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.411986][T10376] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 242.425384][T10376] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 242.515847][T10383] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.532487][T10383] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 242.614975][T10396] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 242.643964][T10396] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 242.856876][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 242.867343][ T31] audit: type=1800 audit(1758933395.536:2): pid=10413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1287" name="memory.events" dev="tmpfs" ino=1283 res=0 errno=0 [ 242.950284][T10415] netlink: 'syz.0.1288': attribute type 1 has an invalid length. [ 242.975715][T10407] vlan3: entered allmulticast mode [ 243.000032][T10407] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 243.010655][T10415] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1288'. [ 243.302003][T10430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1293'. [ 243.355432][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 243.697359][T10455] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 243.700738][T10456] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 243.760126][T10456] netlink: 'syz.1.1298': attribute type 4 has an invalid length. [ 243.769960][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 243.781631][T10457] sctp: [Deprecated]: syz.4.1299 (pid 10457) Use of int in max_burst socket option. [ 243.781631][T10457] Use struct sctp_assoc_value instead [ 243.803244][T10456] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1298'. [ 244.474255][T10486] netlink: 'syz.4.1308': attribute type 23 has an invalid length. [ 244.487814][T10485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1307'. [ 244.585927][T10491] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1310'. [ 244.600132][T10491] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1310'. [ 244.875592][T10501] netlink: 'syz.4.1314': attribute type 7 has an invalid length. [ 245.516558][T10531] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20000 [ 245.832879][T10536] netlink: 'syz.1.1323': attribute type 83 has an invalid length. [ 246.192607][T10556] syzkaller0: entered promiscuous mode [ 246.198538][T10556] syzkaller0: entered allmulticast mode [ 246.239639][T10565] block nbd2: not configured, cannot reconfigure [ 247.548295][T10585] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 248.811019][T10618] Unsupported ieee802154 address type: 0 [ 249.034113][T10628] validate_nla: 4 callbacks suppressed [ 249.034135][T10628] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 249.065864][T10628] __nla_validate_parse: 5 callbacks suppressed [ 249.065896][T10628] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1345'. [ 249.396216][T10643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1349'. [ 249.451165][T10644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1349'. [ 249.550690][T10651] netlink: 'syz.0.1350': attribute type 16 has an invalid length. [ 249.575705][T10651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1350'. [ 250.015987][T10665] tipc: Enabled bearer , priority 0 [ 250.038565][T10663] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1358'. [ 250.051279][T10665] syzkaller0: entered promiscuous mode [ 250.062660][T10665] syzkaller0: entered allmulticast mode [ 250.172900][T10675] tipc: Resetting bearer [ 250.242728][T10675] netlink: 'syz.2.1359': attribute type 23 has an invalid length. [ 250.364257][T10664] tipc: Resetting bearer [ 250.404262][T10664] tipc: Disabling bearer [ 250.636512][T10682] tipc: Enabled bearer , priority 0 [ 250.660782][T10685] tipc: Enabling of bearer rejected, already enabled [ 250.692905][T10682] syzkaller0: entered promiscuous mode [ 250.702608][T10682] syzkaller0: entered allmulticast mode [ 250.788122][T10682] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1364'. [ 250.824458][T10681] tipc: Resetting bearer [ 250.871924][T10694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1368'. [ 250.883077][T10681] tipc: Disabling bearer [ 251.311298][T10705] netlink: 'syz.1.1373': attribute type 3 has an invalid length. [ 251.327501][T10705] netlink: 'syz.1.1373': attribute type 3 has an invalid length. [ 251.359911][T10705] netlink: 'syz.1.1373': attribute type 3 has an invalid length. [ 251.413273][T10705] netlink: 'syz.1.1373': attribute type 3 has an invalid length. [ 251.454739][T10705] netlink: 'syz.1.1373': attribute type 3 has an invalid length. [ 251.475818][T10726] netlink: 'syz.0.1376': attribute type 1 has an invalid length. [ 251.488105][T10705] netlink: 'syz.1.1373': attribute type 3 has an invalid length. [ 251.874709][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 252.467992][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'. [ 252.865738][T10790] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1391'. [ 253.322504][T10803] 8021q: adding VLAN 0 to HW filter on device bond8 [ 253.339016][T10791] syzkaller1: entered promiscuous mode [ 253.344839][T10791] syzkaller1: entered allmulticast mode [ 253.941229][T10818] vlan0 (unregistering): left allmulticast mode [ 253.947888][T10818] veth0_vlan (unregistering): left allmulticast mode [ 253.954773][T10818] vlan0 (unregistering): left promiscuous mode [ 254.311702][T10846] __nla_validate_parse: 3 callbacks suppressed [ 254.311727][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 254.363486][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 254.365287][T10848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 254.440577][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 254.576221][T10860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1410'. [ 254.697200][T10870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 254.808498][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 255.049844][T10891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.362135][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'. [ 256.393928][T10946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.433954][T10946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.450728][T10946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.720587][T10958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.748712][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1434'. [ 256.768445][T10958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1434'. [ 257.171620][T10985] 8021q: VLANs not supported on gre0 [ 257.874726][T10988] validate_nla: 48 callbacks suppressed [ 257.874777][T10988] netlink: 'syz.4.1444': attribute type 1 has an invalid length. [ 258.719058][T11056] tipc: Enabled bearer , priority 0 [ 258.766493][T11056] syzkaller0: entered promiscuous mode [ 258.772076][T11056] syzkaller0: entered allmulticast mode [ 258.861770][T11056] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 258.876152][T11071] netlink: 'syz.1.1469': attribute type 1 has an invalid length. [ 259.061496][T11071] 8021q: adding VLAN 0 to HW filter on device bond11 [ 259.099238][T11070] delete_channel: no stack [ 259.187545][T11075] bond11: (slave veth3): Enslaving as an active interface with a down link [ 259.244248][T11079] bond11: (slave veth0_to_bond): making interface the new active one [ 259.263823][T11075] block nbd1: not configured, cannot reconfigure [ 259.302850][T11079] veth0_to_bond: entered promiscuous mode [ 259.321655][T11079] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 259.416708][T11071] bond11: (slave veth5): Enslaving as an active interface with a down link [ 259.462587][T11055] tipc: Resetting bearer [ 259.522025][T11055] tipc: Disabling bearer [ 259.556346][T11107] team0: Cannot enslave team device to itself [ 259.572259][T11112] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 259.710489][T11112] bond9: entered promiscuous mode [ 259.719839][T11112] bond9: entered allmulticast mode [ 259.721023][T11120] __nla_validate_parse: 9 callbacks suppressed [ 259.721045][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1478'. [ 259.727443][T11112] 8021q: adding VLAN 0 to HW filter on device bond9 [ 259.871538][T11126] netlink: 'syz.4.1480': attribute type 2 has an invalid length. [ 260.089656][T11133] tipc: Enabled bearer , priority 0 [ 260.098016][T11133] syzkaller0: entered promiscuous mode [ 260.103695][T11133] syzkaller0: entered allmulticast mode [ 260.164204][T11133] tipc: Resetting bearer [ 260.189118][T11132] tipc: Resetting bearer [ 260.312054][T11132] tipc: Disabling bearer [ 260.641873][T11166] netlink: 'syz.2.1492': attribute type 10 has an invalid length. [ 260.763369][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1493'. [ 260.813507][T11172] openvswitch: netlink: Flow actions attr not present in new flow. [ 260.821079][T11166] team0: Port device dummy0 added [ 261.079570][T11179] netlink: 'syz.0.1495': attribute type 9 has an invalid length. [ 261.122699][T11179] netlink: 'syz.0.1495': attribute type 9 has an invalid length. [ 261.380395][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'. [ 261.727532][T11207] netlink: 'syz.1.1507': attribute type 1 has an invalid length. [ 261.735946][T11207] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1507'. [ 261.760897][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1507'. [ 261.802360][T11207] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1507'. [ 261.841183][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1507'. [ 262.179768][T11233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1512'. [ 262.200794][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 262.455568][T11240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1517'. [ 262.612890][T11245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.681826][T11245] netlink: set zone limit has 8 unknown bytes [ 262.744418][T11253] netlink: 'syz.3.1520': attribute type 5 has an invalid length. [ 263.356370][T11276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.395300][T11277] sctp: [Deprecated]: syz.3.1527 (pid 11277) Use of int in max_burst socket option deprecated. [ 263.395300][T11277] Use struct sctp_assoc_value instead [ 263.396875][T11276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.698993][T11297] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 263.726661][T11299] netlink: 'syz.1.1532': attribute type 2 has an invalid length. [ 263.770925][T11299] netlink: 'syz.1.1532': attribute type 3 has an invalid length. [ 263.960486][T11306] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:21 [ 264.051797][T11312] openvswitch: netlink: Actions may not be safe on all matching packets [ 264.172115][T11322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.384502][T11335] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 264.799042][T11357] lo: entered allmulticast mode [ 264.843495][T11363] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 265.234706][T11378] netlink: 'syz.4.1553': attribute type 21 has an invalid length. [ 265.253695][T11378] __nla_validate_parse: 4 callbacks suppressed [ 265.253718][T11378] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1553'. [ 265.297085][T11378] netlink: 'syz.4.1553': attribute type 5 has an invalid length. [ 265.309461][T11378] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1553'. [ 265.539572][T11354] netlink: 'syz.0.1547': attribute type 23 has an invalid length. [ 266.009875][T11376] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.019315][T11376] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 266.047954][T11376] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.054698][T11376] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 266.071513][T11376] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.081111][T11376] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 266.103939][T11376] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.114082][T11376] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 270.357198][ T13] veth0_to_bond: left promiscuous mode [ 418.445665][ T32] INFO: task kworker/0:7:10825 blocked for more than 143 seconds. [ 418.453661][ T32] Not tainted syzkaller #0 [ 418.461786][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.471039][ T32] task:kworker/0:7 state:D stack:24936 pid:10825 tgid:10825 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 418.486515][ T32] Workqueue: events rfkill_global_led_trigger_worker SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 418.493352][ T32] Call Trace: [ 418.497112][ T32] [ 418.500133][ T32] __schedule+0x1798/0x4cc0 [ 418.504712][ T32] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 418.510830][ T32] ? __pfx___schedule+0x10/0x10 [ 418.515994][ T32] ? schedule+0x91/0x360 [ 418.520305][ T32] schedule+0x165/0x360 [ 418.524512][ T32] schedule_preempt_disabled+0x13/0x30 [ 418.530601][ T32] __mutex_lock+0x7e6/0x1350 [ 418.535465][ T32] ? __mutex_lock+0x5bb/0x1350 [ 418.540402][ T32] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 418.547361][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 418.552569][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 418.558806][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 418.564589][ T32] rfkill_global_led_trigger_worker+0x27/0xd0 [ 418.605812][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 418.611662][ T32] process_scheduled_works+0xae1/0x17b0 [ 418.642120][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 418.652832][ T32] worker_thread+0x8a0/0xda0 [ 418.657906][ T32] kthread+0x70e/0x8a0 [ 418.662077][ T32] ? __pfx_worker_thread+0x10/0x10 [ 418.667644][ T32] ? __pfx_kthread+0x10/0x10 [ 418.672305][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 418.677637][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.682890][ T32] ? __pfx_kthread+0x10/0x10 [ 418.687740][ T32] ret_from_fork+0x439/0x7d0 [ 418.692398][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 418.697662][ T32] ? __switch_to_asm+0x39/0x70 [ 418.702495][ T32] ? __switch_to_asm+0x33/0x70 [ 418.707367][ T32] ? __pfx_kthread+0x10/0x10 [ 418.712168][ T32] ret_from_fork_asm+0x1a/0x30 [ 418.717046][ T32] [ 418.720163][ T32] INFO: task syz.0.1547:11354 blocked for more than 143 seconds. [ 418.729216][ T32] Not tainted syzkaller #0 [ 418.734200][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.742982][ T32] task:syz.0.1547 state:D stack:23912 pid:11354 tgid:11347 ppid:5867 task_flags:0x400140 flags:0x00004006 [ 418.755178][ T32] Call Trace: [ 418.758548][ T32] [ 418.761524][ T32] __schedule+0x1798/0x4cc0 [ 418.766244][ T32] ? __lock_acquire+0xab9/0xd20 [ 418.771172][ T32] ? __lock_acquire+0xab9/0xd20 [ 418.776115][ T32] ? __pfx___schedule+0x10/0x10 [ 418.781106][ T32] ? schedule+0x91/0x360 [ 418.785538][ T32] schedule+0x165/0x360 [ 418.789852][ T32] schedule_preempt_disabled+0x13/0x30 [ 418.795503][ T32] __mutex_lock+0x7e6/0x1350 [ 418.800147][ T32] ? rcu_is_watching+0x15/0xb0 [ 418.805025][ T32] ? __mutex_lock+0x5bb/0x1350 [ 418.809851][ T32] ? rfkill_register+0x37/0x8e0 [ 418.814761][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 418.819916][ T32] ? netdev_run_todo+0xe1d/0xea0 [ 418.824919][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.830287][ T32] ? __pfx_netdev_run_todo+0x10/0x10 [ 418.835694][ T32] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 418.841484][ T32] rfkill_register+0x37/0x8e0 [ 418.846371][ T32] wiphy_register+0x214c/0x28d0 [ 418.851316][ T32] ? __pfx_wiphy_register+0x10/0x10 [ 418.856801][ T32] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 418.861969][ T32] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 418.868246][ T32] ieee80211_register_hw+0x3484/0x4100 [ 418.874131][ T32] ? ieee80211_register_hw+0x14b1/0x4100 [ 418.880007][ T32] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 418.886055][ T32] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 418.892591][ T32] ? __hrtimer_setup+0x187/0x210 [ 418.897617][ T32] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 418.903772][ T32] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 418.909955][ T32] ? __pfx__printk+0x10/0x10 [ 418.914889][ T32] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 418.921122][ T32] ? __nla_validate_parse+0x2400/0x2d40 [ 418.927334][ T32] ? __sock_sendmsg+0x219/0x270 [ 418.932363][ T32] ? ____sys_sendmsg+0x505/0x830 [ 418.937423][ T32] hwsim_new_radio_nl+0xea4/0x1b10 [ 418.942590][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 418.948780][ T32] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 418.954660][ T32] ? __nla_parse+0x40/0x60 [ 418.959476][ T32] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 418.966034][ T32] genl_family_rcv_msg_doit+0x215/0x300 [ 418.971843][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 418.978245][ T32] ? bpf_lsm_capable+0x9/0x20 [ 418.983069][ T32] ? security_capable+0x7e/0x2e0 [ 418.988160][ T32] genl_rcv_msg+0x60e/0x790 [ 418.993274][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.998511][ T32] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 419.004146][ T32] ? __asan_memcpy+0x40/0x70 [ 419.009229][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 419.014885][ T32] netlink_rcv_skb+0x205/0x470 [ 419.019927][ T32] ? __lock_acquire+0xab9/0xd20 [ 419.025110][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.030397][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.036386][ T32] ? down_read+0x1ad/0x2e0 [ 419.040883][ T32] genl_rcv+0x28/0x40 [ 419.045192][ T32] netlink_unicast+0x82f/0x9e0 [ 419.050215][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 419.055817][ T32] ? netlink_sendmsg+0x642/0xb30 [ 419.060976][ T32] ? skb_put+0x11b/0x210 [ 419.065594][ T32] netlink_sendmsg+0x805/0xb30 [ 419.070685][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.076180][ T32] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.081224][ T32] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.086720][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.092079][ T32] __sock_sendmsg+0x219/0x270 [ 419.096944][ T32] ____sys_sendmsg+0x505/0x830 [ 419.101768][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.107358][ T32] ? import_iovec+0x74/0xa0 [ 419.111932][ T32] ___sys_sendmsg+0x21f/0x2a0 [ 419.116703][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.122092][ T32] ? __fget_files+0x2a/0x420 [ 419.126823][ T32] ? __fget_files+0x3a0/0x420 [ 419.131643][ T32] __x64_sys_sendmsg+0x19b/0x260 [ 419.136740][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.142305][ T32] ? rcu_is_watching+0x15/0xb0 [ 419.147203][ T32] ? do_syscall_64+0xbe/0x3b0 [ 419.152027][ T32] do_syscall_64+0xfa/0x3b0 [ 419.156660][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.162027][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.168219][ T32] ? clear_bhb_loop+0x60/0xb0 [ 419.173057][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.179193][ T32] RIP: 0033:0x7fab0798eec9 [ 419.183734][ T32] RSP: 002b:00007fab08792038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.192330][ T32] RAX: ffffffffffffffda RBX: 00007fab07be5fa0 RCX: 00007fab0798eec9 [ 419.201001][ T32] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 419.209140][ T32] RBP: 00007fab07a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 419.217398][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.225554][ T32] R13: 00007fab07be6038 R14: 00007fab07be5fa0 R15: 00007ffe795d7b28 [ 419.233676][ T32] [ 419.236842][ T32] INFO: task syz.0.1547:11359 blocked for more than 144 seconds. [ 419.244799][ T32] Not tainted syzkaller #0 [ 419.251900][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.260919][ T32] task:syz.0.1547 state:D stack:25448 pid:11359 tgid:11347 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 419.273019][ T32] Call Trace: [ 419.276412][ T32] [ 419.279408][ T32] __schedule+0x1798/0x4cc0 [ 419.283995][ T32] ? __lock_acquire+0xab9/0xd20 [ 419.289023][ T32] ? __lock_acquire+0xab9/0xd20 [ 419.294094][ T32] ? __pfx___schedule+0x10/0x10 [ 419.299188][ T32] ? schedule+0x91/0x360 [ 419.303497][ T32] schedule+0x165/0x360 [ 419.308050][ T32] schedule_preempt_disabled+0x13/0x30 [ 419.313744][ T32] __mutex_lock+0x7e6/0x1350 [ 419.318688][ T32] ? __mutex_lock+0x5bb/0x1350 [ 419.323520][ T32] ? genl_rcv_msg+0x10d/0x790 [ 419.328753][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 419.333888][ T32] ? __dev_queue_xmit+0x27b/0x3b50 [ 419.339553][ T32] ? radix_tree_lookup+0x240/0x290 [ 419.344825][ T32] genl_rcv_msg+0x10d/0x790 [ 419.349684][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.354789][ T32] ? ref_tracker_free+0x63a/0x7d0 [ 419.360023][ T32] ? __asan_memcpy+0x40/0x70 [ 419.364694][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 419.370792][ T32] netlink_rcv_skb+0x205/0x470 [ 419.375928][ T32] ? __lock_acquire+0xab9/0xd20 [ 419.380859][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.386168][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.391502][ T32] ? down_read+0x1ad/0x2e0 [ 419.396776][ T32] genl_rcv+0x28/0x40 [ 419.400855][ T32] netlink_unicast+0x82f/0x9e0 [ 419.406127][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 419.411572][ T32] ? netlink_sendmsg+0x642/0xb30 [ 419.416759][ T32] ? skb_put+0x11b/0x210 [ 419.421083][ T32] netlink_sendmsg+0x805/0xb30 [ 419.426294][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.431645][ T32] ? aa_sock_msg_perm+0xf1/0x1d0 [ 419.436771][ T32] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.442129][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.447547][ T32] __sock_sendmsg+0x219/0x270 [ 419.452285][ T32] __sys_sendto+0x3bd/0x520 [ 419.457284][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 419.462375][ T32] ? count_memcg_event_mm+0x21/0x260 [ 419.467777][ T32] ? exc_page_fault+0x76/0xf0 [ 419.472497][ T32] ? do_user_addr_fault+0xc8a/0x1390 [ 419.477967][ T32] __x64_sys_sendto+0xde/0x100 [ 419.482816][ T32] do_syscall_64+0xfa/0x3b0 [ 419.490489][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.496411][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.502622][ T32] ? clear_bhb_loop+0x60/0xb0 [ 419.507488][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.513528][ T32] RIP: 0033:0x7fab07990d5c [ 419.518146][ T32] RSP: 002b:00007fab0874eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 419.526948][ T32] RAX: ffffffffffffffda RBX: 00007fab0874efc0 RCX: 00007fab07990d5c [ 419.535154][ T32] RDX: 0000000000000020 RSI: 00007fab0874f010 RDI: 000000000000000d [ 419.543196][ T32] RBP: 0000000000000000 R08: 00007fab0874ef14 R09: 000000000000000c [ 419.551439][ T32] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 419.559561][ T32] R13: 00007fab0874ef68 R14: 00007fab0874f010 R15: 0000000000000000 [ 419.567937][ T32] [ 419.571281][ T32] INFO: task syz.2.1549:11348 blocked for more than 144 seconds. [ 419.583944][ T32] Not tainted syzkaller #0 [ 419.589337][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.598495][ T32] task:syz.2.1549 state:D stack:24104 pid:11348 tgid:11348 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 419.610868][ T32] Call Trace: [ 419.614283][ T32] [ 419.617303][ T32] __schedule+0x1798/0x4cc0 [ 419.622054][ T32] ? __lock_acquire+0xab9/0xd20 [ 419.627027][ T32] ? __lock_acquire+0xab9/0xd20 [ 419.632029][ T32] ? __pfx___schedule+0x10/0x10 [ 419.636995][ T32] ? schedule+0x91/0x360 [ 419.641476][ T32] schedule+0x165/0x360 [ 419.645946][ T32] schedule_preempt_disabled+0x13/0x30 [ 419.651456][ T32] __mutex_lock+0x7e6/0x1350 [ 419.656186][ T32] ? __mutex_lock+0x5bb/0x1350 [ 419.660997][ T32] ? rfkill_unregister+0xc8/0x220 [ 419.666147][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 419.671313][ T32] ? __pfx_device_del+0x10/0x10 [ 419.676301][ T32] rfkill_unregister+0xc8/0x220 [ 419.681214][ T32] nfc_unregister_device+0x96/0x2a0 [ 419.686647][ T32] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 419.692434][ T32] virtual_ncidev_close+0x56/0x90 [ 419.697547][ T32] __fput+0x44c/0xa70 [ 419.701590][ T32] task_work_run+0x1d1/0x260 [ 419.706267][ T32] ? __pfx_task_work_run+0x10/0x10 [ 419.711551][ T32] ? exit_to_user_mode_loop+0x40/0x110 [ 419.717156][ T32] exit_to_user_mode_loop+0xec/0x110 [ 419.722527][ T32] do_syscall_64+0x2bd/0x3b0 [ 419.727552][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.733680][ T32] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.740067][ T32] ? clear_bhb_loop+0x60/0xb0 [ 419.745017][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.750969][ T32] RIP: 0033:0x7f4b63b8eec9 [ 419.755694][ T32] RSP: 002b:00007ffc9b44be28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 419.764281][ T32] RAX: 0000000000000000 RBX: 00007f4b63de7da0 RCX: 00007f4b63b8eec9 [ 419.772553][ T32] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 419.780704][ T32] RBP: 00007f4b63de7da0 R08: 0000000000000284 R09: 0000001c9b44c11f [ 419.788801][ T32] R10: 00007f4b63de7cb0 R11: 0000000000000246 R12: 0000000000040cfd [ 419.796896][ T32] R13: 00007f4b63de6360 R14: ffffffffffffffff R15: 00007ffc9b44bf40 [ 419.805026][ T32] [ 419.808203][ T32] INFO: task syz.2.1549:11361 blocked for more than 144 seconds. [ 419.816404][ T32] Not tainted syzkaller #0 [ 419.821390][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.830234][ T32] task:syz.2.1549 state:D stack:26920 pid:11361 tgid:11348 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 419.842282][ T32] Call Trace: [ 419.845733][ T32] [ 419.848811][ T32] __schedule+0x1798/0x4cc0 [ 419.853458][ T32] ? __lock_acquire+0xab9/0xd20 [ 419.858444][ T32] ? __lock_acquire+0xab9/0xd20 [ 419.863349][ T32] ? __pfx___schedule+0x10/0x10 [ 419.868412][ T32] ? schedule+0x91/0x360 [ 419.872751][ T32] schedule+0x165/0x360 [ 419.876987][ T32] schedule_preempt_disabled+0x13/0x30 [ 419.882500][ T32] __mutex_lock+0x7e6/0x1350 [ 419.887413][ T32] ? __mutex_lock+0x5bb/0x1350 [ 419.892244][ T32] ? genl_rcv_msg+0x10d/0x790 [ 419.897044][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 419.902224][ T32] ? __dev_queue_xmit+0x27b/0x3b50 [ 419.907797][ T32] ? radix_tree_lookup+0x240/0x290 [ 419.913160][ T32] genl_rcv_msg+0x10d/0x790 [ 419.917755][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.923025][ T32] ? ref_tracker_free+0x63a/0x7d0 [ 419.928366][ T32] ? __asan_memcpy+0x40/0x70 [ 419.933042][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 419.938556][ T32] netlink_rcv_skb+0x205/0x470 [ 419.943555][ T32] ? __lock_acquire+0xab9/0xd20 [ 419.948894][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.954595][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.960039][ T32] ? down_read+0x1ad/0x2e0 [ 419.964519][ T32] genl_rcv+0x28/0x40 [ 419.969313][ T32] netlink_unicast+0x82f/0x9e0 [ 419.974171][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 419.979557][ T32] ? netlink_sendmsg+0x642/0xb30 [ 419.984543][ T32] ? skb_put+0x11b/0x210 [ 419.988930][ T32] netlink_sendmsg+0x805/0xb30 [ 419.993760][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.999168][ T32] ? aa_sock_msg_perm+0xf1/0x1d0 [ 420.004266][ T32] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.009864][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.015312][ T32] __sock_sendmsg+0x219/0x270 [ 420.020080][ T32] __sys_sendto+0x3bd/0x520 [ 420.024610][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 420.029872][ T32] ? fd_install+0x97/0x540 [ 420.034380][ T32] ? fd_install+0x30d/0x540 [ 420.039115][ T32] __x64_sys_sendto+0xde/0x100 [ 420.043934][ T32] do_syscall_64+0xfa/0x3b0 [ 420.048644][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.053895][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.060094][ T32] ? clear_bhb_loop+0x60/0xb0 [ 420.064833][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.070845][ T32] RIP: 0033:0x7f4b63b90d5c [ 420.075377][ T32] RSP: 002b:00007f4b649f5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 420.083842][ T32] RAX: ffffffffffffffda RBX: 00007f4b649f5fc0 RCX: 00007f4b63b90d5c [ 420.092137][ T32] RDX: 0000000000000024 RSI: 00007f4b649f6010 RDI: 0000000000000005 [ 420.100234][ T32] RBP: 0000000000000000 R08: 00007f4b649f5f14 R09: 000000000000000c [ 420.108274][ T32] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 420.116438][ T32] R13: 00007f4b649f5f68 R14: 00007f4b649f6010 R15: 0000000000000000 [ 420.124464][ T32] [ 420.127758][ T32] INFO: task syz.2.1549:11365 blocked for more than 145 seconds. [ 420.135713][ T32] Not tainted syzkaller #0 [ 420.140681][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.149434][ T32] task:syz.2.1549 state:D stack:28328 pid:11365 tgid:11348 ppid:5864 task_flags:0x400140 flags:0x00004004 [ 420.161491][ T32] Call Trace: [ 420.164845][ T32] [ 420.168034][ T32] __schedule+0x1798/0x4cc0 [ 420.172698][ T32] ? __lock_acquire+0xab9/0xd20 [ 420.177680][ T32] ? __lock_acquire+0xab9/0xd20 [ 420.182621][ T32] ? __pfx___schedule+0x10/0x10 [ 420.187685][ T32] ? schedule+0x91/0x360 [ 420.191982][ T32] schedule+0x165/0x360 [ 420.196242][ T32] schedule_preempt_disabled+0x13/0x30 [ 420.201751][ T32] __mutex_lock+0x7e6/0x1350 [ 420.206588][ T32] ? __mutex_lock+0x5bb/0x1350 [ 420.211494][ T32] ? genl_rcv_msg+0x10d/0x790 [ 420.216306][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 420.221476][ T32] ? stack_trace_save+0x9c/0xe0 [ 420.226595][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 420.232145][ T32] ? radix_tree_lookup+0x240/0x290 [ 420.237380][ T32] genl_rcv_msg+0x10d/0x790 [ 420.241950][ T32] ? __lock_acquire+0xab9/0xd20 [ 420.247089][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.252230][ T32] netlink_rcv_skb+0x205/0x470 [ 420.257133][ T32] ? __lock_acquire+0xab9/0xd20 [ 420.262169][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.267309][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.272785][ T32] ? down_read+0x1ad/0x2e0 [ 420.277350][ T32] genl_rcv+0x28/0x40 [ 420.281649][ T32] netlink_unicast+0x82f/0x9e0 [ 420.286852][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 420.292252][ T32] ? netlink_sendmsg+0x642/0xb30 [ 420.297381][ T32] ? skb_put+0x11b/0x210 [ 420.301697][ T32] netlink_sendmsg+0x805/0xb30 [ 420.306745][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.312177][ T32] ? aa_sock_msg_perm+0xf1/0x1d0 [ 420.317244][ T32] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.322582][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.328063][ T32] __sock_sendmsg+0x219/0x270 [ 420.332888][ T32] __sys_sendto+0x3bd/0x520 [ 420.337663][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 420.342850][ T32] ? count_memcg_event_mm+0x21/0x260 [ 420.348490][ T32] ? exc_page_fault+0x76/0xf0 [ 420.353667][ T32] ? do_user_addr_fault+0xc8a/0x1390 [ 420.359553][ T32] __x64_sys_sendto+0xde/0x100 [ 420.364569][ T32] do_syscall_64+0xfa/0x3b0 [ 420.370167][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.375784][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.381932][ T32] ? clear_bhb_loop+0x60/0xb0 [ 420.387274][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.393264][ T32] RIP: 0033:0x7f4b63b90d5c [ 420.397927][ T32] RSP: 002b:00007f4b649d4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 420.407247][ T32] RAX: ffffffffffffffda RBX: 00007f4b649d4fc0 RCX: 00007f4b63b90d5c [ 420.416136][ T32] RDX: 0000000000000024 RSI: 00007f4b649d5010 RDI: 0000000000000008 [ 420.424251][ T32] RBP: 0000000000000000 R08: 00007f4b649d4f14 R09: 000000000000000c [ 420.432494][ T32] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 420.440700][ T32] R13: 00007f4b649d4f68 R14: 00007f4b649d5010 R15: 0000000000000000 [ 420.449750][ T32] [ 420.452978][ T32] INFO: task syz.3.1548:11356 blocked for more than 145 seconds. [ 420.461021][ T32] Not tainted syzkaller #0 [ 420.466970][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.475861][ T32] task:syz.3.1548 state:D stack:28328 pid:11356 tgid:11353 ppid:5862 task_flags:0x400140 flags:0x00004004 [ 420.488955][ T32] Call Trace: [ 420.492289][ T32] [ 420.495317][ T32] __schedule+0x1798/0x4cc0 [ 420.499881][ T32] ? __lock_acquire+0xab9/0xd20 [ 420.504769][ T32] ? __lock_acquire+0xab9/0xd20 [ 420.509707][ T32] ? __pfx___schedule+0x10/0x10 [ 420.514614][ T32] ? schedule+0x91/0x360 [ 420.518972][ T32] schedule+0x165/0x360 [ 420.523176][ T32] schedule_preempt_disabled+0x13/0x30 [ 420.528850][ T32] __mutex_lock+0x7e6/0x1350 [ 420.533509][ T32] ? __mutex_lock+0x5bb/0x1350 [ 420.538365][ T32] ? genl_rcv_msg+0x10d/0x790 [ 420.543086][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 420.548472][ T32] ? stack_trace_save+0x9c/0xe0 [ 420.553656][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 420.559347][ T32] ? radix_tree_lookup+0x240/0x290 [ 420.564545][ T32] genl_rcv_msg+0x10d/0x790 [ 420.569268][ T32] ? __lock_acquire+0xab9/0xd20 [ 420.574638][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.580194][ T32] netlink_rcv_skb+0x205/0x470 [ 420.585348][ T32] ? __lock_acquire+0xab9/0xd20 [ 420.590453][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.595617][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.601006][ T32] ? down_read+0x1ad/0x2e0 [ 420.605634][ T32] genl_rcv+0x28/0x40 [ 420.609712][ T32] netlink_unicast+0x82f/0x9e0 [ 420.614666][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 420.620103][ T32] ? netlink_sendmsg+0x642/0xb30 [ 420.625245][ T32] ? skb_put+0x11b/0x210 [ 420.629550][ T32] netlink_sendmsg+0x805/0xb30 [ 420.634348][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.639735][ T32] ? aa_sock_msg_perm+0xf1/0x1d0 [ 420.644718][ T32] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.650203][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.655623][ T32] __sock_sendmsg+0x219/0x270 [ 420.660358][ T32] __sys_sendto+0x3bd/0x520 [ 420.664901][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 420.670148][ T32] ? count_memcg_event_mm+0x21/0x260 [ 420.675547][ T32] ? exc_page_fault+0x76/0xf0 [ 420.680270][ T32] ? do_user_addr_fault+0xc8a/0x1390 [ 420.685826][ T32] __x64_sys_sendto+0xde/0x100 [ 420.690675][ T32] do_syscall_64+0xfa/0x3b0 [ 420.695302][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.700551][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.706736][ T32] ? clear_bhb_loop+0x60/0xb0 [ 420.711484][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.717690][ T32] RIP: 0033:0x7f18eeb90d5c [ 420.722154][ T32] RSP: 002b:00007f18ef972ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 420.730779][ T32] RAX: ffffffffffffffda RBX: 00007f18ef972fc0 RCX: 00007f18eeb90d5c [ 420.738950][ T32] RDX: 000000000000001c RSI: 00007f18ef973010 RDI: 0000000000000005 [ 420.747350][ T32] RBP: 0000000000000000 R08: 00007f18ef972f14 R09: 000000000000000c [ 420.755530][ T32] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 420.763547][ T32] R13: 00007f18ef972f68 R14: 00007f18ef973010 R15: 0000000000000000 [ 420.771704][ T32] [ 420.774819][ T32] INFO: task syz.1.1551:11364 blocked for more than 145 seconds. [ 420.782918][ T32] Not tainted syzkaller #0 [ 420.788125][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.796869][ T32] task:syz.1.1551 state:D stack:26152 pid:11364 tgid:11362 ppid:5871 task_flags:0x400140 flags:0x00004004 [ 420.808997][ T32] Call Trace: [ 420.812314][ T32] [ 420.815323][ T32] __schedule+0x1798/0x4cc0 [ 420.819900][ T32] ? __lock_acquire+0xab9/0xd20 [ 420.824822][ T32] ? __lock_acquire+0xab9/0xd20 [ 420.829825][ T32] ? __pfx___schedule+0x10/0x10 [ 420.834766][ T32] ? schedule+0x91/0x360 [ 420.839177][ T32] schedule+0x165/0x360 [ 420.843377][ T32] schedule_preempt_disabled+0x13/0x30 [ 420.849124][ T32] __mutex_lock+0x7e6/0x1350 [ 420.853788][ T32] ? __mutex_lock+0x5bb/0x1350 [ 420.858671][ T32] ? genl_rcv_msg+0x10d/0x790 [ 420.863491][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 420.868623][ T32] ? __dev_queue_xmit+0x27b/0x3b50 [ 420.873844][ T32] ? radix_tree_lookup+0x240/0x290 [ 420.879054][ T32] genl_rcv_msg+0x10d/0x790 [ 420.883622][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.888888][ T32] ? ref_tracker_free+0x63a/0x7d0 [ 420.893983][ T32] ? __asan_memcpy+0x40/0x70 [ 420.898718][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 420.904190][ T32] netlink_rcv_skb+0x205/0x470 [ 420.909046][ T32] ? __lock_acquire+0xab9/0xd20 [ 420.914224][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.919706][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.925957][ T32] ? down_read+0x1ad/0x2e0 [ 420.930449][ T32] genl_rcv+0x28/0x40 [ 420.935071][ T32] netlink_unicast+0x82f/0x9e0 [ 420.939957][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 420.945525][ T32] ? netlink_sendmsg+0x642/0xb30 [ 420.950603][ T32] ? skb_put+0x11b/0x210 [ 420.954914][ T32] netlink_sendmsg+0x805/0xb30 [ 420.960083][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.965556][ T32] ? aa_sock_msg_perm+0xf1/0x1d0 [ 420.970720][ T32] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.976375][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.981799][ T32] __sock_sendmsg+0x219/0x270 [ 420.986745][ T32] __sys_sendto+0x3bd/0x520 [ 420.991317][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 420.996548][ T32] ? count_memcg_event_mm+0x21/0x260 [ 421.002155][ T32] ? exc_page_fault+0x76/0xf0 [ 421.007589][ T32] ? do_user_addr_fault+0xc8a/0x1390 [ 421.013396][ T32] __x64_sys_sendto+0xde/0x100 [ 421.018380][ T32] do_syscall_64+0xfa/0x3b0 [ 421.022961][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.028610][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.034835][ T32] ? clear_bhb_loop+0x60/0xb0 [ 421.039705][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.045720][ T32] RIP: 0033:0x7f7e13390d5c [ 421.050193][ T32] RSP: 002b:00007f7e115ecec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 421.058783][ T32] RAX: ffffffffffffffda RBX: 00007f7e115ecfc0 RCX: 00007f7e13390d5c [ 421.066884][ T32] RDX: 0000000000000020 RSI: 00007f7e115ed010 RDI: 0000000000000004 [ 421.074882][ T32] RBP: 0000000000000000 R08: 00007f7e115ecf14 R09: 000000000000000c [ 421.083065][ T32] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 421.091157][ T32] R13: 00007f7e115ecf68 R14: 00007f7e115ed010 R15: 0000000000000000 [ 421.099266][ T32] [ 421.102351][ T32] INFO: task syz.4.1553:11376 blocked for more than 146 seconds. [ 421.110399][ T32] Not tainted syzkaller #0 [ 421.115446][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.124663][ T32] task:syz.4.1553 state:D stack:24824 pid:11376 tgid:11375 ppid:5866 task_flags:0x400140 flags:0x00004006 [ 421.136781][ T32] Call Trace: [ 421.140113][ T32] [ 421.143152][ T32] __schedule+0x1798/0x4cc0 [ 421.147782][ T32] ? __lock_acquire+0xab9/0xd20 [ 421.152711][ T32] ? __lock_acquire+0xab9/0xd20 [ 421.157659][ T32] ? __pfx___schedule+0x10/0x10 [ 421.162567][ T32] ? schedule+0x91/0x360 [ 421.167061][ T32] schedule+0x165/0x360 [ 421.171358][ T32] schedule_preempt_disabled+0x13/0x30 [ 421.177053][ T32] __mutex_lock+0x7e6/0x1350 [ 421.181812][ T32] ? __mutex_lock+0x5bb/0x1350 [ 421.186707][ T32] ? nfc_rfkill_set_block+0x50/0x2e0 [ 421.192349][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 421.197586][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.203032][ T32] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 421.209058][ T32] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 421.215544][ T32] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 421.221326][ T32] nfc_rfkill_set_block+0x50/0x2e0 [ 421.226578][ T32] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 421.232532][ T32] rfkill_set_block+0x1d2/0x440 [ 421.237505][ T32] rfkill_fop_write+0x44b/0x570 [ 421.242408][ T32] ? __pfx_rfkill_fop_write+0x10/0x10 [ 421.248026][ T32] ? security_file_permission+0x60/0x290 [ 421.253818][ T32] ? rw_verify_area+0x255/0x4d0 [ 421.258879][ T32] ? __lock_acquire+0xab9/0xd20 [ 421.263790][ T32] ? __pfx_rfkill_fop_write+0x10/0x10 [ 421.269264][ T32] vfs_write+0x27e/0xb30 [ 421.273575][ T32] ? __pfx_vfs_write+0x10/0x10 [ 421.278469][ T32] ? __fget_files+0x2a/0x420 [ 421.283242][ T32] ? __fget_files+0x2a/0x420 [ 421.287924][ T32] ? __fget_files+0x3a0/0x420 [ 421.292667][ T32] ? __fget_files+0x2a/0x420 [ 421.297385][ T32] ksys_write+0x145/0x250 [ 421.301772][ T32] ? __pfx_ksys_write+0x10/0x10 [ 421.306720][ T32] ? rcu_is_watching+0x15/0xb0 [ 421.311564][ T32] ? do_syscall_64+0xbe/0x3b0 [ 421.316522][ T32] do_syscall_64+0xfa/0x3b0 [ 421.321175][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.326597][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.332909][ T32] ? clear_bhb_loop+0x60/0xb0 [ 421.337738][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.344121][ T32] RIP: 0033:0x7f86ebd8eec9 [ 421.348971][ T32] RSP: 002b:00007f86ecccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.357477][ T32] RAX: ffffffffffffffda RBX: 00007f86ebfe5fa0 RCX: 00007f86ebd8eec9 [ 421.365526][ T32] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 421.373554][ T32] RBP: 00007f86ebe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 421.381661][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.389715][ T32] R13: 00007f86ebfe6038 R14: 00007f86ebfe5fa0 R15: 00007fffb513bfc8 [ 421.397818][ T32] [ 421.400979][ T32] [ 421.400979][ T32] Showing all locks held in the system: [ 421.408858][ T32] 3 locks held by kworker/u8:1/13: [ 421.414014][ T32] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 421.424126][ T32] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 421.433208][ T32] #2: ffff8880b8725918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 421.443426][ T32] 1 lock held by khungtaskd/32: [ 421.448370][ T32] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 421.458811][ T32] 1 lock held by klogd/5224: [ 421.463455][ T32] 2 locks held by getty/5627: [ 421.468234][ T32] #0: ffff88803343e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 421.478146][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 421.488548][ T32] 2 locks held by kworker/1:4/5873: [ 421.493783][ T32] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 421.503942][ T32] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 421.512974][ T32] 3 locks held by kworker/0:7/10825: [ 421.518368][ T32] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 421.529547][ T32] #1: ffffc9000acf7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 421.543139][ T32] #2: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 421.554605][ T32] 3 locks held by syz.0.1547/11354: [ 421.559919][ T32] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.568358][ T32] #1: ffffffff8f59f688 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.577708][ T32] #2: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 421.587800][ T32] 2 locks held by syz.0.1547/11359: [ 421.593048][ T32] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.601393][ T32] #1: ffffffff8f59f688 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.610638][ T32] 2 locks held by syz.2.1549/11348: [ 421.615957][ T32] #0: ffff88805b878100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 421.625841][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 421.636262][ T32] 2 locks held by syz.2.1549/11361: [ 421.641578][ T32] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.649930][ T32] #1: ffffffff8f59f688 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.659083][ T32] 2 locks held by syz.2.1549/11365: [ 421.664294][ T32] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.672923][ T32] #1: ffffffff8f59f688 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.682040][ T32] 2 locks held by syz.3.1548/11356: [ 421.687432][ T32] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.695766][ T32] #1: ffffffff8f59f688 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.704828][ T32] 2 locks held by syz.1.1551/11364: [ 421.710238][ T32] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.718581][ T32] #1: ffffffff8f59f688 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.727837][ T32] 2 locks held by syz.4.1553/11376: [ 421.733072][ T32] #0: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 421.743286][ T32] #1: ffff88805b878100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 421.753162][ T32] 2 locks held by syz-executor/11578: [ 421.758628][ T32] #0: ffff888023f1e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 421.768823][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 421.778950][ T32] 2 locks held by syz-executor/11580: [ 421.784363][ T32] #0: ffff888023f1b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 421.794523][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 421.804548][ T32] 2 locks held by syz-executor/11581: [ 421.810029][ T32] #0: ffff888024f4a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 421.820259][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 421.830317][ T32] 2 locks held by syz-executor/11582: [ 421.835856][ T32] #0: ffff8880547c1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 421.846095][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 421.856152][ T32] 2 locks held by syz-executor/11584: [ 421.861569][ T32] #0: ffff88807d5d9118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 421.871825][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 421.881880][ T32] 2 locks held by syz-executor/11589: [ 421.887511][ T32] #0: ffff888053c37918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 421.897675][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 421.907845][ T32] 2 locks held by syz-executor/11594: [ 421.913355][ T32] #0: ffff88807b73c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 421.923593][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 421.933775][ T32] 2 locks held by syz-executor/11595: [ 421.939242][ T32] #0: ffff88802599d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 421.949485][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 421.959710][ T32] 2 locks held by syz-executor/11596: [ 421.965342][ T32] #0: ffff88807b73a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 421.975859][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 421.985954][ T32] 2 locks held by syz-executor/11598: [ 421.991375][ T32] #0: ffff88807b23a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 422.001478][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 422.011955][ T32] 2 locks held by syz-executor/11605: [ 422.017762][ T32] #0: ffff888023e4c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 422.028355][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 422.038894][ T32] 2 locks held by syz-executor/11607: [ 422.044307][ T32] #0: ffff888023e4c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 422.055326][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 422.066550][ T32] 2 locks held by syz-executor/11609: [ 422.072011][ T32] #0: ffff8880794f4918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 422.082268][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 422.092688][ T32] 2 locks held by syz-executor/11612: [ 422.098182][ T32] #0: ffff888021bdf918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 422.108414][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 422.118455][ T32] 2 locks held by syz-executor/11613: [ 422.123841][ T32] #0: ffff88807dafa118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 422.134072][ T32] #1: ffffffff8f813fe8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 422.144417][ T32] [ 422.146953][ T32] ============================================= [ 422.146953][ T32] [ 422.155623][ T32] NMI backtrace for cpu 0 [ 422.155653][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 422.155679][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.155691][ T32] Call Trace: [ 422.155698][ T32] [ 422.155706][ T32] dump_stack_lvl+0x189/0x250 [ 422.155736][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.155758][ T32] ? __pfx__printk+0x10/0x10 [ 422.155801][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 422.155830][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 422.155859][ T32] ? __pfx__printk+0x10/0x10 [ 422.155888][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 422.155919][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 422.155948][ T32] watchdog+0xf93/0xfe0 [ 422.155977][ T32] ? watchdog+0x1de/0xfe0 [ 422.156007][ T32] kthread+0x70e/0x8a0 [ 422.156032][ T32] ? __pfx_watchdog+0x10/0x10 [ 422.156058][ T32] ? __pfx_kthread+0x10/0x10 [ 422.156082][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.156098][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.156115][ T32] ? __pfx_kthread+0x10/0x10 [ 422.156138][ T32] ret_from_fork+0x439/0x7d0 [ 422.156159][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 422.156182][ T32] ? __switch_to_asm+0x39/0x70 [ 422.156203][ T32] ? __switch_to_asm+0x33/0x70 [ 422.156225][ T32] ? __pfx_kthread+0x10/0x10 [ 422.156248][ T32] ret_from_fork_asm+0x1a/0x30 [ 422.156285][ T32] [ 422.156291][ T32] Sending NMI from CPU 0 to CPUs 1: [ 422.303157][ C1] NMI backtrace for cpu 1 [ 422.303178][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 422.303201][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.303216][ C1] Workqueue: 0x0 (events_unbound) [ 422.303245][ C1] RIP: 0010:sched_balance_update_blocked_averages+0xbc2/0x1580 [ 422.303284][ C1] Code: 08 4c 89 ff e8 7f 9d 8d 00 49 89 1f 48 8b 5c 24 18 48 3b 9c 24 90 00 00 00 0f 94 c0 48 8b 4c 24 50 08 c1 48 89 4c 24 50 eb 05 <48> 8b 5c 24 18 4d 8d 7e 10 4c 89 f8 48 c1 e8 03 48 89 44 24 38 42 [ 422.303302][ C1] RSP: 0018:ffffc90000127700 EFLAGS: 00000046 [ 422.303318][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 13c6610d172fca00 [ 422.303332][ C1] RDX: 0000000000000007 RSI: dffffc0000000000 RDI: 0000000000000000 [ 422.303345][ C1] RBP: ffffc90000127870 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506 [ 422.303360][ C1] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: ffff8880b873a140 [ 422.303375][ C1] R13: dffffc0000000000 R14: ffff8880b873a1c8 R15: 0000005caa214a1b [ 422.303391][ C1] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 422.303407][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.303420][ C1] CR2: 00007fff76af1fdc CR3: 000000000df36000 CR4: 00000000003526f0 [ 422.303438][ C1] Call Trace: [ 422.303446][ C1] [ 422.303462][ C1] ? sched_clock+0x3f/0x60 [ 422.303494][ C1] ? __pfx_sched_balance_update_blocked_averages+0x10/0x10 [ 422.303526][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 422.303546][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 422.303573][ C1] ? sched_balance_newidle+0x2a6/0x1030 [ 422.303594][ C1] sched_balance_newidle+0x46d/0x1030 [ 422.303615][ C1] ? __lock_acquire+0xab9/0xd20 [ 422.303644][ C1] ? sched_balance_newidle+0x2a6/0x1030 [ 422.303666][ C1] ? dequeue_entities+0x1c0/0x13d0 [ 422.303689][ C1] ? do_raw_spin_lock+0x121/0x290 [ 422.303717][ C1] pick_next_task_fair+0x40/0xba0 [ 422.303741][ C1] __pick_next_task+0xe4/0x450 [ 422.303771][ C1] __schedule+0x7a4/0x4cc0 [ 422.303804][ C1] ? __lock_acquire+0xab9/0xd20 [ 422.303833][ C1] ? __pfx___schedule+0x10/0x10 [ 422.303861][ C1] ? schedule+0x91/0x360 [ 422.303881][ C1] schedule+0x165/0x360 [ 422.303900][ C1] worker_thread+0xa82/0xda0 [ 422.303937][ C1] kthread+0x70e/0x8a0 [ 422.303963][ C1] ? __pfx_worker_thread+0x10/0x10 [ 422.303983][ C1] ? __pfx_kthread+0x10/0x10 [ 422.304019][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.304038][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.304057][ C1] ? __pfx_kthread+0x10/0x10 [ 422.304082][ C1] ret_from_fork+0x439/0x7d0 [ 422.304104][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 422.304127][ C1] ? __switch_to_asm+0x39/0x70 [ 422.304154][ C1] ? __switch_to_asm+0x33/0x70 [ 422.304179][ C1] ? __pfx_kthread+0x10/0x10 [ 422.304203][ C1] ret_from_fork_asm+0x1a/0x30 [ 422.304239][ C1] [ 422.305428][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 422.305451][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 422.305481][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 422.305499][ T32] Call Trace: [ 422.305511][ T32] [ 422.305526][ T32] dump_stack_lvl+0x99/0x250 [ 422.305562][ T32] ? __asan_memcpy+0x40/0x70 [ 422.305596][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.305629][ T32] ? __pfx__printk+0x10/0x10 [ 422.305684][ T32] vpanic+0x281/0x750 [ 422.305721][ T32] ? __pfx_vpanic+0x10/0x10 [ 422.305752][ T32] ? preempt_schedule+0xae/0xc0 [ 422.305791][ T32] ? preempt_schedule_common+0x83/0xd0 [ 422.305828][ T32] panic+0xb9/0xc0 [ 422.305857][ T32] ? __pfx_panic+0x10/0x10 [ 422.305892][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 422.305943][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 422.305988][ T32] watchdog+0xfd2/0xfe0 [ 422.306033][ T32] ? watchdog+0x1de/0xfe0 [ 422.306079][ T32] kthread+0x70e/0x8a0 [ 422.306119][ T32] ? __pfx_watchdog+0x10/0x10 [ 422.306156][ T32] ? __pfx_kthread+0x10/0x10 [ 422.306192][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 422.306219][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.306244][ T32] ? __pfx_kthread+0x10/0x10 [ 422.306281][ T32] ret_from_fork+0x439/0x7d0 [ 422.306314][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 422.306351][ T32] ? __switch_to_asm+0x39/0x70 [ 422.306384][ T32] ? __switch_to_asm+0x33/0x70 [ 422.306419][ T32] ? __pfx_kthread+0x10/0x10 [ 422.306453][ T32] ret_from_fork_asm+0x1a/0x30 [ 422.306513][ T32] [ 422.750382][ T32] Kernel Offset: disabled [ 422.754989][ T32] Rebooting in 86400 seconds..