last executing test programs: 39.255470468s ago: executing program 4 (id=406): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="41000200010007", 0x7) 38.589319156s ago: executing program 2 (id=411): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 38.39728413s ago: executing program 2 (id=413): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 38.167599016s ago: executing program 2 (id=416): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000280)={0x1, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @loopback}}}, 0x108) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x1, 0x1, [@rand_addr=0x64010101]}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 37.723933081s ago: executing program 4 (id=419): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 37.093873695s ago: executing program 2 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @broadcast}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c1d1a1d6b8d93b12202bd5dbecc88ebe"}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 36.741878305s ago: executing program 2 (id=424): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x2, 0x80805, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) 35.706888888s ago: executing program 2 (id=429): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x9, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41) 33.9555734s ago: executing program 4 (id=431): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0xc2}, 0x48) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 32.429824744s ago: executing program 4 (id=442): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) getpeername$inet6(r0, 0x0, &(0x7f0000000100)) 31.843170752s ago: executing program 4 (id=446): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x82, &(0x7f0000000340), &(0x7f0000000480)=0x10) 31.711370985s ago: executing program 3 (id=447): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000002, {0x1, 0xf0}, 0xfd}, 0x18) r3 = epoll_create(0x1) sendmsg$nl_route_sched(r0, 0x0, 0x800) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)="53cef5", 0x3}, {0x0}, {0x0}], 0x3}}], 0x1, 0x4c004) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 31.680777473s ago: executing program 1 (id=449): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 31.631009708s ago: executing program 4 (id=450): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x33, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x14, &(0x7f0000000480)=@framed={{}, [@exit, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff801}}, @map_fd={0x18, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}, 0x1, 0x0, 0x0, 0x1}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c091}, 0x20000010) 31.476659133s ago: executing program 1 (id=451): socket(0x10, 0x803, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x4d, 0x0, &(0x7f00000001c0)) 30.735393079s ago: executing program 3 (id=452): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) socket(0x1e, 0x3, 0xfffeffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 30.226556119s ago: executing program 1 (id=454): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd23, 0x25dfdbfd, {0x2, 0x20, 0x28, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 30.143059734s ago: executing program 3 (id=456): socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write$bt_hci(r4, &(0x7f0000000e80)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"8d2c6f"}}}, 0x7) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r2, 0x0, 0x0) 29.711840875s ago: executing program 1 (id=457): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) 29.154937256s ago: executing program 3 (id=460): epoll_create1(0x0) r0 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x88}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0x8000001b}) 29.053761229s ago: executing program 1 (id=461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0x4}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x40, 0x5a1, 0x0, 0x7}, 0x9c) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x440c0) 28.942742859s ago: executing program 1 (id=462): unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), 0xffffffffffffffff) 28.110169907s ago: executing program 3 (id=465): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000005c0)={{'\x00', 0x3}, {0x4}, 0x40, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)="88ff7c33bdcbc8349cfc7b9412a8026e3cb06304ed03cef662a2b8a27602cf6857117ab00cf1a937dce17459b876ac1d394142f48dacafccfb7259a80f8a213fd6fdf2c53200f3dfef55305052b6", 0x4e, 0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="97020000000000005c00128009000100626f6e64000000004c00028008000a00000000001800088000000000e00000017f00000164010102000000000500010000000000080007"], 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x16, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 27.927607536s ago: executing program 3 (id=466): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x2000808) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 20.514492856s ago: executing program 32 (id=429): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x9, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41) 16.755537799s ago: executing program 0 (id=479): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000130001002dbd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="ecff0041096e000008000a00", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 16.720695279s ago: executing program 0 (id=480): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 16.66786402s ago: executing program 0 (id=481): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.484281933s ago: executing program 33 (id=450): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x33, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x14, &(0x7f0000000480)=@framed={{}, [@exit, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffff801}}, @map_fd={0x18, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}, 0x1, 0x0, 0x0, 0x1}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c091}, 0x20000010) 16.378213854s ago: executing program 0 (id=483): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r2, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) sendmmsg$inet6(r1, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8, @private2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048005) 15.295577672s ago: executing program 0 (id=484): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}], 0x2}}], 0x2, 0x4008440) 15.245116034s ago: executing program 0 (id=485): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 13.518319905s ago: executing program 34 (id=462): unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), 0xffffffffffffffff) 12.515712251s ago: executing program 35 (id=466): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x2000808) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 0s ago: executing program 36 (id=485): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.196' (ED25519) to the list of known hosts. [ 80.403750][ T5850] cgroup: Unknown subsys name 'net' [ 80.530937][ T5850] cgroup: Unknown subsys name 'cpuset' [ 80.540975][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.355478][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.103551][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.112265][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.115885][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.121035][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.127829][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.142020][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.150555][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.162182][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.170210][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.177843][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.188693][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.190546][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.196485][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.204666][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.210037][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.218033][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.228771][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.259400][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.260077][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.276094][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.284513][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.293790][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.319567][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.328767][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.336677][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.951390][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 86.126852][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 86.272986][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 86.294616][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.302209][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.310305][ T5860] bridge_slave_0: entered allmulticast mode [ 86.317935][ T5860] bridge_slave_0: entered promiscuous mode [ 86.342511][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 86.360675][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.368089][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.375926][ T5860] bridge_slave_1: entered allmulticast mode [ 86.383903][ T5860] bridge_slave_1: entered promiscuous mode [ 86.391734][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 86.550038][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.562813][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.584596][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.591964][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.599255][ T5862] bridge_slave_0: entered allmulticast mode [ 86.606396][ T5862] bridge_slave_0: entered promiscuous mode [ 86.651600][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.658879][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.666476][ T5862] bridge_slave_1: entered allmulticast mode [ 86.674080][ T5862] bridge_slave_1: entered promiscuous mode [ 86.744410][ T5860] team0: Port device team_slave_0 added [ 86.763463][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.770757][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.778517][ T5874] bridge_slave_0: entered allmulticast mode [ 86.785708][ T5874] bridge_slave_0: entered promiscuous mode [ 86.818963][ T5860] team0: Port device team_slave_1 added [ 86.825366][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.832634][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.839981][ T5867] bridge_slave_0: entered allmulticast mode [ 86.847934][ T5867] bridge_slave_0: entered promiscuous mode [ 86.867186][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.874388][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.881960][ T5874] bridge_slave_1: entered allmulticast mode [ 86.889335][ T5874] bridge_slave_1: entered promiscuous mode [ 86.898892][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.920517][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.927763][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.934959][ T5867] bridge_slave_1: entered allmulticast mode [ 86.942630][ T5867] bridge_slave_1: entered promiscuous mode [ 86.970418][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.978461][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.985675][ T5861] bridge_slave_0: entered allmulticast mode [ 86.994196][ T5861] bridge_slave_0: entered promiscuous mode [ 87.050949][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.122989][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.132066][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.139558][ T5861] bridge_slave_1: entered allmulticast mode [ 87.147781][ T5861] bridge_slave_1: entered promiscuous mode [ 87.159003][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.173748][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.202882][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.211384][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.238000][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.255217][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.268297][ T5865] Bluetooth: hci0: command tx timeout [ 87.268304][ T5876] Bluetooth: hci1: command tx timeout [ 87.320800][ T5862] team0: Port device team_slave_0 added [ 87.347284][ T5865] Bluetooth: hci3: command tx timeout [ 87.347357][ T5876] Bluetooth: hci2: command tx timeout [ 87.360746][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.369857][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.396549][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.410634][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.427788][ T5876] Bluetooth: hci4: command tx timeout [ 87.437418][ T5862] team0: Port device team_slave_1 added [ 87.444805][ T5874] team0: Port device team_slave_0 added [ 87.474667][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.500123][ T5874] team0: Port device team_slave_1 added [ 87.522977][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.530487][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.556516][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.582621][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.622248][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.629418][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.655809][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.668888][ T5867] team0: Port device team_slave_0 added [ 87.702681][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.709817][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.736719][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.756750][ T5867] team0: Port device team_slave_1 added [ 87.787009][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.794481][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.820693][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.872104][ T5861] team0: Port device team_slave_0 added [ 87.883969][ T5860] hsr_slave_0: entered promiscuous mode [ 87.890692][ T5860] hsr_slave_1: entered promiscuous mode [ 87.936906][ T5861] team0: Port device team_slave_1 added [ 87.962627][ T5862] hsr_slave_0: entered promiscuous mode [ 87.969092][ T5862] hsr_slave_1: entered promiscuous mode [ 87.975318][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 87.981167][ T5862] Cannot create hsr debugfs directory [ 87.987770][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.994732][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.021105][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.066041][ T5874] hsr_slave_0: entered promiscuous mode [ 88.072623][ T5874] hsr_slave_1: entered promiscuous mode [ 88.078977][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 88.084711][ T5874] Cannot create hsr debugfs directory [ 88.106742][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.114276][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.140495][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.206167][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.213448][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.239462][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.252719][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.259896][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.286064][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.520164][ T5867] hsr_slave_0: entered promiscuous mode [ 88.526824][ T5867] hsr_slave_1: entered promiscuous mode [ 88.533765][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 88.539595][ T5867] Cannot create hsr debugfs directory [ 88.629735][ T5861] hsr_slave_0: entered promiscuous mode [ 88.636179][ T5861] hsr_slave_1: entered promiscuous mode [ 88.642903][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 88.648765][ T5861] Cannot create hsr debugfs directory [ 88.925394][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.938653][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.975771][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.015918][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.120200][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.141478][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.152556][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.173970][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.255321][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.266688][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.282246][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.294566][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.348607][ T5876] Bluetooth: hci0: command tx timeout [ 89.348808][ T5865] Bluetooth: hci1: command tx timeout [ 89.427254][ T5865] Bluetooth: hci2: command tx timeout [ 89.439270][ T5865] Bluetooth: hci3: command tx timeout [ 89.442275][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.456670][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.501926][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.510018][ T5865] Bluetooth: hci4: command tx timeout [ 89.520029][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.580298][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.659386][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.676177][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.697322][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.706285][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.718165][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.730620][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.766137][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.773470][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.810673][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.843704][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.850876][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.861324][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.868518][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.892836][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.900006][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.024690][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.064541][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.141813][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.166834][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.176822][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.214934][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.222258][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.262102][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.269307][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.281397][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.288635][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.306252][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.325898][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.339588][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.346803][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.400297][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.407553][ T3032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.436152][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.443407][ T3032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.564666][ T5874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.670166][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.890872][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.945004][ T5862] veth0_vlan: entered promiscuous mode [ 91.032775][ T5862] veth1_vlan: entered promiscuous mode [ 91.179679][ T5860] veth0_vlan: entered promiscuous mode [ 91.226276][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.259489][ T5860] veth1_vlan: entered promiscuous mode [ 91.274078][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.340358][ T5862] veth0_macvtap: entered promiscuous mode [ 91.363107][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.381220][ T5862] veth1_macvtap: entered promiscuous mode [ 91.392968][ T5860] veth0_macvtap: entered promiscuous mode [ 91.429801][ T5865] Bluetooth: hci1: command tx timeout [ 91.435274][ T5865] Bluetooth: hci0: command tx timeout [ 91.466438][ T5860] veth1_macvtap: entered promiscuous mode [ 91.504709][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.513259][ T5876] Bluetooth: hci2: command tx timeout [ 91.513383][ T5865] Bluetooth: hci3: command tx timeout [ 91.546650][ T5874] veth0_vlan: entered promiscuous mode [ 91.556608][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.570072][ T5861] veth0_vlan: entered promiscuous mode [ 91.590746][ T5865] Bluetooth: hci4: command tx timeout [ 91.605247][ T3032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.635754][ T3032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.654002][ T5861] veth1_vlan: entered promiscuous mode [ 91.669702][ T5874] veth1_vlan: entered promiscuous mode [ 91.680714][ T3032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.691480][ T3032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.703506][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.745539][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.815605][ T2998] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.825731][ T2998] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.854614][ T2998] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.863560][ T2998] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.933052][ T5874] veth0_macvtap: entered promiscuous mode [ 91.966646][ T5861] veth0_macvtap: entered promiscuous mode [ 91.980392][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.989774][ T5874] veth1_macvtap: entered promiscuous mode [ 92.002091][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.011461][ T5861] veth1_macvtap: entered promiscuous mode [ 92.079830][ T10] cfg80211: failed to load regulatory.db [ 92.101711][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.124719][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.145356][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.193552][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.209220][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.215485][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.255899][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.272588][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.280556][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.301403][ T5867] veth0_vlan: entered promiscuous mode [ 92.354784][ T1004] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.363965][ T1004] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.404355][ T1004] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.417903][ T1004] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.426758][ T1004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.492898][ T5867] veth1_vlan: entered promiscuous mode [ 92.500941][ T1004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.514579][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.523456][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.527639][ T1004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.542758][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'. [ 92.544522][ T1004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.725607][ T5986] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 92.791283][ T5867] veth0_macvtap: entered promiscuous mode [ 92.799732][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.814920][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.873421][ T5867] veth1_macvtap: entered promiscuous mode [ 92.881144][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.901210][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.985073][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.013542][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.071253][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 93.075778][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.113062][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.125400][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.125506][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.200491][ T2998] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.236939][ T2998] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.268434][ T2998] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.289849][ T1004] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.508916][ T5865] Bluetooth: hci0: command tx timeout [ 93.514988][ T5865] Bluetooth: hci1: command tx timeout [ 93.589414][ T5876] Bluetooth: hci2: command tx timeout [ 93.595430][ T5865] Bluetooth: hci3: command tx timeout [ 93.667482][ T5865] Bluetooth: hci4: command tx timeout [ 94.295015][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.363072][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.206565][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.241994][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.273600][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20'. [ 97.068822][ T6047] warning: `syz.0.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.878949][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 100.253772][ T6097] syzkaller0: entered promiscuous mode [ 100.259703][ T6097] syzkaller0: entered allmulticast mode [ 101.503797][ T6108] atm:sigd_send: bad message type 36 [ 102.602666][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 102.928926][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.57'. [ 103.038503][ T6152] syzkaller1: entered promiscuous mode [ 103.045356][ T6152] syzkaller1: entered allmulticast mode [ 103.094171][ T6154] netlink: 'syz.3.59': attribute type 1 has an invalid length. [ 103.309074][ T6160] netlink: 'syz.4.61': attribute type 1 has an invalid length. [ 105.065569][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.074009][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.445450][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.481919][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.061317][ T6205] syzkaller0: entered promiscuous mode [ 106.067038][ T6205] syzkaller0: entered allmulticast mode [ 106.081856][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.103004][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.121033][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.239520][ T6226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.616416][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.665241][ T6235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.712253][ T6236] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 107.863219][ T6239] tipc: Started in network mode [ 107.904440][ T6239] tipc: Node identity 2eaf63a6fd3f, cluster identity 4711 [ 107.937894][ T6239] tipc: Enabled bearer , priority 0 [ 108.066104][ T6240] syzkaller0: entered promiscuous mode [ 108.089088][ T6240] syzkaller0: entered allmulticast mode [ 108.109549][ T6240] tipc: Resetting bearer [ 108.231943][ T6238] tipc: Resetting bearer [ 108.472601][ T6260] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.854833][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 108.970207][ T9] tipc: Node number set to 3549455270 [ 109.902409][ T6238] tipc: Disabling bearer [ 109.959072][ T6276] team1: entered promiscuous mode [ 109.964262][ T6276] team1: entered allmulticast mode [ 109.980147][ T6276] 8021q: adding VLAN 0 to HW filter on device team1 [ 109.998874][ T6276] Zero length message leads to an empty skb [ 110.250333][ T6284] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 110.964631][ T6308] netlink: 'syz.4.108': attribute type 1 has an invalid length. [ 111.731090][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 113.609483][ T6372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 113.782766][ T6371] netlink: 'syz.0.129': attribute type 4 has an invalid length. [ 113.836650][ T6378] netlink: 'syz.0.129': attribute type 4 has an invalid length. [ 114.459232][ T6388] tipc: Started in network mode [ 114.468417][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 114.478978][ T6388] tipc: Node identity c662e2b48173, cluster identity 4711 [ 114.509995][ T6388] tipc: Enabled bearer , priority 0 [ 114.534548][ T6399] tipc: Started in network mode [ 114.539752][ T6399] tipc: Node identity 1, cluster identity 4711 [ 114.554800][ T6399] tipc: Node number set to 1 [ 114.569034][ T6393] bridge0: entered allmulticast mode [ 114.741000][ T6389] syzkaller0: entered promiscuous mode [ 114.755862][ T6389] syzkaller0: entered allmulticast mode [ 114.773526][ T6389] tipc: Resetting bearer [ 114.790355][ T6397] pim6reg: entered allmulticast mode [ 114.796084][ T6400] bridge_slave_1: left allmulticast mode [ 114.806289][ T6400] bridge_slave_1: left promiscuous mode [ 114.813503][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.839639][ T6400] bridge_slave_0: left allmulticast mode [ 114.860333][ T6400] bridge_slave_0: left promiscuous mode [ 114.879527][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.980581][ T6400] bridge0 (unregistering): left allmulticast mode [ 115.235513][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 115.619093][ T9] tipc: Node number set to 1192354484 [ 115.635500][ T6412] syzkaller0: entered promiscuous mode [ 115.667287][ T6412] syzkaller0: entered allmulticast mode [ 115.683372][ T6387] tipc: Resetting bearer [ 117.272000][ T6387] tipc: Disabling bearer [ 118.580075][ T6512] batman_adv: batadv0: Adding interface: dummy0 [ 118.587354][ T6512] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.666246][ T6512] batman_adv: batadv0: Interface activated: dummy0 [ 118.713302][ T6514] batadv0: mtu less than device minimum [ 118.735151][ T6515] Bluetooth: MGMT ver 1.23 [ 118.738795][ T6514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.752521][ T6514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.765051][ T6514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.777330][ T6514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.789726][ T6514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.801880][ T6514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.814671][ T6514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.826972][ T6514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 118.839408][ T6514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 119.290580][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.170'. [ 119.616444][ T6539] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.156618][ T6539] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.322642][ T6556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.176'. [ 120.505758][ T6539] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.792626][ T6539] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.119030][ T3032] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.176001][ T3032] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.256352][ T3032] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.322123][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.678851][ T6572] syzkaller1: entered promiscuous mode [ 121.719327][ T6572] syzkaller1: entered allmulticast mode [ 122.396686][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 123.748582][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 123.824896][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.198'. [ 124.339510][ T6627] syzkaller0: entered promiscuous mode [ 124.345130][ T6627] syzkaller0: entered allmulticast mode [ 124.953959][ T6643] veth1_to_bond: entered allmulticast mode [ 124.963595][ T6643] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.000597][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 126.541753][ T6643] bond0: (slave bond_slave_1): Releasing backup interface [ 126.579354][ T6648] batman_adv: batadv0: Adding interface: dummy0 [ 126.596077][ T6648] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.659427][ T6648] batman_adv: batadv0: Interface activated: dummy0 [ 126.683856][ T6646] syz.2.206: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 126.706046][ T6646] CPU: 1 UID: 0 PID: 6646 Comm: syz.2.206 Not tainted syzkaller #0 PREEMPT(full) [ 126.706074][ T6646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.706084][ T6646] Call Trace: [ 126.706091][ T6646] [ 126.706099][ T6646] dump_stack_lvl+0x189/0x250 [ 126.706127][ T6646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.706147][ T6646] ? __pfx__printk+0x10/0x10 [ 126.706170][ T6646] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 126.706189][ T6646] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 126.706210][ T6646] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 126.706232][ T6646] warn_alloc+0x214/0x310 [ 126.706264][ T6646] ? __pfx_warn_alloc+0x10/0x10 [ 126.706299][ T6646] ? __get_vm_area_node+0x28f/0x300 [ 126.706321][ T6646] ? xp_create_and_assign_umem+0x184/0xce0 [ 126.706344][ T6646] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 126.706393][ T6646] ? alloc_pages_mpol+0x3cd/0x4a0 [ 126.706418][ T6646] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.706446][ T6646] ? rcu_is_watching+0x15/0xb0 [ 126.706463][ T6646] ? xp_create_and_assign_umem+0x184/0xce0 [ 126.706478][ T6646] ? xp_create_and_assign_umem+0x184/0xce0 [ 126.706493][ T6646] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 126.706516][ T6646] ? xp_create_and_assign_umem+0x184/0xce0 [ 126.706533][ T6646] ? xp_create_and_assign_umem+0xa4/0xce0 [ 126.706555][ T6646] xp_create_and_assign_umem+0x184/0xce0 [ 126.706583][ T6646] ? dev_get_by_index+0x22/0x2e0 [ 126.706606][ T6646] ? dev_get_by_index+0x22/0x2e0 [ 126.706636][ T6646] xsk_bind+0x42d/0xf90 [ 126.706658][ T6646] ? apparmor_socket_bind+0xff/0x1e0 [ 126.706691][ T6646] __sys_bind+0x2c3/0x3e0 [ 126.706711][ T6646] ? __pfx___sys_bind+0x10/0x10 [ 126.706742][ T6646] ? rcu_is_watching+0x15/0xb0 [ 126.706765][ T6646] __x64_sys_bind+0x7a/0x90 [ 126.706784][ T6646] do_syscall_64+0xfa/0x3b0 [ 126.706800][ T6646] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.706826][ T6646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.706843][ T6646] ? clear_bhb_loop+0x60/0xb0 [ 126.706865][ T6646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.706880][ T6646] RIP: 0033:0x7f4de298eec9 [ 126.706896][ T6646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.706910][ T6646] RSP: 002b:00007f4de0bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 126.706929][ T6646] RAX: ffffffffffffffda RBX: 00007f4de2be6090 RCX: 00007f4de298eec9 [ 126.706941][ T6646] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 126.706951][ T6646] RBP: 00007f4de2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 126.706961][ T6646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.706971][ T6646] R13: 00007f4de2be6128 R14: 00007f4de2be6090 R15: 00007ffc8fbfdbd8 [ 126.707000][ T6646] [ 126.707006][ T6646] Mem-Info: [ 126.995009][ T6646] active_anon:6855 inactive_anon:0 isolated_anon:0 [ 126.995009][ T6646] active_file:3141 inactive_file:39883 isolated_file:0 [ 126.995009][ T6646] unevictable:768 dirty:342 writeback:0 [ 126.995009][ T6646] slab_reclaimable:10379 slab_unreclaimable:96546 [ 126.995009][ T6646] mapped:29284 shmem:1357 pagetables:1176 [ 126.995009][ T6646] sec_pagetables:0 bounce:0 [ 126.995009][ T6646] kernel_misc_reclaimable:0 [ 126.995009][ T6646] free:1320713 free_pcp:18079 free_cma:0 [ 127.044067][ T6646] Node 0 active_anon:27480kB inactive_anon:0kB active_file:12564kB inactive_file:159328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117132kB dirty:1376kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11936kB pagetables:4608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 127.076669][ T6646] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 127.107262][ T6646] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.136748][ T6646] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 127.144294][ T6646] Node 0 DMA32 free:1373160kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27404kB inactive_anon:0kB active_file:12564kB inactive_file:157488kB unevictable:1536kB writepending:1376kB present:3129332kB managed:2559900kB mlocked:0kB bounce:0kB free_pcp:54512kB local_pcp:21364kB free_cma:0kB [ 127.177392][ T6646] lowmem_reserve[]: 0 0 1 1 1 [ 127.182176][ T6646] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 127.212292][ T6646] lowmem_reserve[]: 0 0 0 0 0 [ 127.217813][ T6646] Node 1 Normal free:3894744kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17184kB local_pcp:6816kB free_cma:0kB [ 127.251485][ T6646] lowmem_reserve[]: 0 0 0 0 0 [ 127.256323][ T6646] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.271443][ T6646] Node 0 DMA32: 300*4kB (UM) 186*8kB (UM) 136*16kB (UM) 177*32kB (UME) 24*64kB (UME) 6*128kB (UME) 2*256kB (UM) 6*512kB (UME) 7*1024kB (M) 5*2048kB (UM) 327*4096kB (M) = 1373216kB [ 127.293671][ T6646] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 127.305977][ T6646] Node 1 Normal: 196*4kB (UE) 41*8kB (UME) 34*16kB (UME) 81*32kB (UME) 21*64kB (UME) 12*128kB (UME) 2*256kB (M) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3894744kB [ 127.324360][ T6646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.334069][ T6646] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.343439][ T6646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.354339][ T6646] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.363838][ T6646] 44377 total pagecache pages [ 127.368636][ T6646] 0 pages in swap cache [ 127.372815][ T6646] Free swap = 124996kB [ 127.376996][ T6646] Total swap = 124996kB [ 127.381501][ T6646] 2097051 pages RAM [ 127.385340][ T6646] 0 pages HighMem/MovableOnly [ 127.390088][ T6646] 424986 pages reserved [ 127.394376][ T6646] 0 pages cma reserved [ 127.420983][ T6649] net_ratelimit: 10 callbacks suppressed [ 127.421006][ T6649] batadv0: mtu less than device minimum [ 127.449995][ T6649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.462341][ T6649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.474601][ T6649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.487213][ T6649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.499428][ T6649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.511624][ T6649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.523764][ T6649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.536428][ T6649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.548868][ T6649] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.883288][ T6678] netlink: 'syz.4.215': attribute type 4 has an invalid length. [ 127.929068][ T6680] netlink: 120 bytes leftover after parsing attributes in process `syz.1.217'. [ 127.934433][ T6678] netlink: 'syz.4.215': attribute type 4 has an invalid length. [ 127.945356][ T6682] syzkaller1: entered promiscuous mode [ 127.951558][ T6682] syzkaller1: entered allmulticast mode [ 127.965902][ T6680] syz_tun: entered promiscuous mode [ 127.974024][ T6680] syz_tun: entered allmulticast mode [ 128.160937][ T6686] tipc: Failed to remove unknown binding: 66,1,1/0:1649286350/1649286352 [ 128.180445][ T6686] tipc: Failed to remove unknown binding: 66,1,1/0:1649286350/1649286352 [ 128.189925][ T6686] tipc: Failed to remove unknown binding: 66,1,1/0:1649286350/1649286352 [ 128.641140][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 128.660609][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.842153][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.100825][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 129.121045][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.231'. [ 129.145897][ T6713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.231'. [ 129.167221][ T6713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.231'. [ 129.195097][ T6713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.231'. [ 129.231582][ T6711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.265254][ T6711] bond0: (slave rose0): Enslaving as an active interface with an up link [ 129.535724][ T5934] IPVS: starting estimator thread 0... [ 129.682774][ T6727] IPVS: using max 28 ests per chain, 67200 per kthread [ 130.594366][ T6767] netlink: 'syz.3.246': attribute type 12 has an invalid length. [ 131.391572][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'. [ 131.448292][ T6791] netlink: 'syz.1.255': attribute type 12 has an invalid length. [ 131.535257][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'. [ 131.577180][ T6791] netlink: 'syz.1.255': attribute type 12 has an invalid length. [ 131.591804][ T3032] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.662296][ T3032] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.817766][ T3032] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.854597][ T3032] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.692990][ T6839] net_ratelimit: 10 callbacks suppressed [ 132.693013][ T6839] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.706806][ T6839] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.715198][ T6839] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.723366][ T6839] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.731450][ T6839] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.739443][ T6839] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.747454][ T6839] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.751029][ T6841] netlink: 'syz.1.268': attribute type 83 has an invalid length. [ 132.755484][ T6839] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.771238][ T6839] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 132.779260][ T6839] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 133.038442][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.045130][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.135278][ T6852] tipc: Started in network mode [ 133.141197][ T6852] tipc: Node identity 127f6706fb0f, cluster identity 4711 [ 133.149679][ T6852] tipc: Enabled bearer , priority 0 [ 133.339154][ T6852] syzkaller0: entered promiscuous mode [ 133.362164][ T6852] syzkaller0: entered allmulticast mode [ 133.394280][ T6852] tipc: Resetting bearer [ 133.635868][ T2998] tipc: Resetting bearer [ 133.968600][ T6851] tipc: Resetting bearer [ 134.247522][ T5947] tipc: Node number set to 3916457734 [ 134.906055][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 134.939158][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 136.113252][ T6851] tipc: Disabling bearer [ 136.288577][ T6890] netlink: 44 bytes leftover after parsing attributes in process `syz.4.279'. [ 136.444692][ T6895] netlink: 'syz.1.281': attribute type 1 has an invalid length. [ 136.463859][ T6890] team0: Port device team_slave_0 removed [ 136.609017][ T6895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.678362][ T6898] erspan0: entered allmulticast mode [ 136.702849][ T6898] bond1: (slave erspan0): making interface the new active one [ 136.770767][ T6898] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 137.637270][ T6920] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 138.576159][ T6953] IPv6: sit1: Disabled Multicast RS [ 138.600889][ T6953] sit1: entered allmulticast mode [ 138.691930][ T6960] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 138.780770][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'. [ 138.808719][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 138.829899][ T6960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.879930][ T6966] veth3: entered promiscuous mode [ 138.896547][ T6966] bond2: (slave veth3): Enslaving as an active interface with an up link [ 139.077453][ T6975] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 139.085490][ T6978] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 139.186694][ T6984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 139.260648][ T5865] block nbd0: Receive control failed (result -11) [ 139.597682][ T6999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 139.712299][ T6996] netlink: 'syz.0.316': attribute type 5 has an invalid length. [ 139.722769][ T6996] netlink: 'syz.0.316': attribute type 2 has an invalid length. [ 139.731896][ T6996] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 139.767403][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 139.984598][ T7008] tipc: Started in network mode [ 140.028085][ T7008] tipc: Node identity 4, cluster identity 4711 [ 140.034305][ T7008] tipc: Node number set to 4 [ 140.367826][ T7020] netlink: 'syz.4.323': attribute type 1 has an invalid length. [ 140.492554][ T7024] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 140.554464][ T7024] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 140.588379][ T7024] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 141.173545][ T7043] tipc: Enabling of bearer rejected, failed to enable media [ 141.234582][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.332'. [ 141.329616][ T7049] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 141.862966][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.336'. [ 142.176654][ T7059] vlan2: entered allmulticast mode [ 142.216780][ T7059] bridge0: entered allmulticast mode [ 142.245013][ T7059] bridge3: port 1(vlan2) entered blocking state [ 142.270841][ T7059] bridge3: port 1(vlan2) entered disabled state [ 142.291248][ T7059] vlan2: entered promiscuous mode [ 142.307554][ T7059] bridge0: entered promiscuous mode [ 144.271411][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.351'. [ 144.492068][ T7118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.354'. [ 144.652739][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 144.723931][ T7111] tipc: Enabled bearer , priority 0 [ 144.823661][ T7120] syzkaller0: entered promiscuous mode [ 144.829604][ T7120] syzkaller0: entered allmulticast mode [ 144.845395][ T7120] tipc: Resetting bearer [ 145.317891][ T1141] tipc: Resetting bearer [ 145.391908][ T7106] tipc: Resetting bearer [ 146.639156][ T7160] Driver unsupported XDP return value 0 on prog (id 120) dev N/A, expect packet loss! [ 147.286296][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 147.340900][ T7183] netlink: 'syz.0.374': attribute type 33 has an invalid length. [ 147.349247][ T7183] netlink: 152 bytes leftover after parsing attributes in process `syz.0.374'. [ 147.770508][ T7106] tipc: Disabling bearer [ 147.802957][ T7182] bridge_slave_1: left allmulticast mode [ 147.809041][ T7182] bridge_slave_1: left promiscuous mode [ 147.814918][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.824267][ T7182] bridge_slave_0: left allmulticast mode [ 147.830413][ T7182] bridge_slave_0: left promiscuous mode [ 147.836377][ T7182] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.562311][ T7210] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 148.789465][ T7210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.838479][ T9] IPVS: starting estimator thread 0... [ 148.937290][ T7225] IPVS: using max 23 ests per chain, 55200 per kthread [ 148.971453][ T7214] bond3: (slave veth5): Enslaving as an active interface with a down link [ 149.047680][ T7218] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 149.073010][ T7218] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 149.585383][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 149.826289][ T7249] tipc: Failed to remove unknown binding: 66,1,1/4:4293160529/4293160531 [ 149.997679][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 150.226510][ T7268] sctp: [Deprecated]: syz.4.399 (pid 7268) Use of int in maxseg socket option. [ 150.226510][ T7268] Use struct sctp_assoc_value instead [ 150.826444][ T7293] Bluetooth: MGMT ver 1.23 [ 152.616715][ T7323] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.771477][ T7323] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.827882][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.423'. [ 152.938542][ T7323] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.101119][ T7323] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.654315][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.795838][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 154.006391][ T49] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.070767][ T49] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.111370][ T49] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.140204][ T49] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.261937][ T7374] syzkaller0: entered promiscuous mode [ 154.267703][ T7374] syzkaller0: entered allmulticast mode [ 154.274852][ T1141] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.305065][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.448396][ T7360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.455394][ T7360] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 154.466595][ T7360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.475413][ T7360] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 154.526120][ T7360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.538157][ T7360] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 154.572131][ T7360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.599728][ T7360] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 154.639621][ T7360] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 154.645583][ T7360] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 155.765863][ T1141] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.807792][ T1141] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.914868][ T7400] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 156.004637][ T7400] bond4: entered promiscuous mode [ 156.054224][ T7400] bond4: entered allmulticast mode [ 156.094523][ T7400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.261664][ T7409] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.272061][ T7409] bond5: entered promiscuous mode [ 156.277431][ T7409] bond5: entered allmulticast mode [ 156.283691][ T7409] bond4: (slave bond5): Enslaving as a backup interface with a down link [ 156.719048][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.435'. [ 156.941275][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 157.235663][ T7443] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 157.431634][ T7443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.541323][ T7445] bond2: (slave veth3): Enslaving as an active interface with a down link [ 157.570159][ T7448] gretap1: entered promiscuous mode [ 157.630764][ T7448] bond2: (slave gretap1): making interface the new active one [ 157.649659][ T7448] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 157.964966][ T7469] netlink: 'syz.1.444': attribute type 4 has an invalid length. [ 158.003139][ T7469] netlink: 152 bytes leftover after parsing attributes in process `syz.1.444'. [ 158.034162][ T7469] : renamed from bond0 (while UP) [ 158.252411][ T7482] netlink: 'syz.4.450': attribute type 23 has an invalid length. [ 158.313065][ T7485] wlan1 speed is unknown, defaulting to 1000 [ 158.334342][ T7485] wlan1 speed is unknown, defaulting to 1000 [ 158.360629][ T7485] wlan1 speed is unknown, defaulting to 1000 [ 158.415843][ T7485] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 158.450858][ T7485] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 158.524506][ T7485] wlan1 speed is unknown, defaulting to 1000 [ 158.536236][ T7485] wlan1 speed is unknown, defaulting to 1000 [ 158.551441][ T7485] wlan1 speed is unknown, defaulting to 1000 [ 158.583551][ T7485] wlan1 speed is unknown, defaulting to 1000 [ 158.638970][ T7485] wlan1 speed is unknown, defaulting to 1000 [ 159.815272][ T7523] netlink: 51 bytes leftover after parsing attributes in process `syz.1.454'. [ 159.839819][ T7517] wlan1 speed is unknown, defaulting to 1000 [ 160.252345][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 160.275515][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.458'. [ 160.323167][ T7536] wlan1 speed is unknown, defaulting to 1000 [ 160.564940][ T7546] wlan1 speed is unknown, defaulting to 1000 [ 163.496189][ T7589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.468'. [ 163.528495][ T7589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.468'. [ 169.891115][ T7599] ipvlan2: entered promiscuous mode [ 169.900875][ T7599] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 170.841404][ T7604] lo speed is unknown, defaulting to 1000 [ 170.848745][ T7604] lo speed is unknown, defaulting to 1000 [ 170.855144][ T7604] lo speed is unknown, defaulting to 1000 [ 170.871003][ T7604] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 170.893622][ T7604] lo speed is unknown, defaulting to 1000 [ 170.902057][ T7604] lo speed is unknown, defaulting to 1000 [ 170.909530][ T7604] lo speed is unknown, defaulting to 1000 [ 170.916459][ T7604] lo speed is unknown, defaulting to 1000 [ 170.923644][ T7604] lo speed is unknown, defaulting to 1000 [ 171.992037][ T7612] lo speed is unknown, defaulting to 1000 [ 173.046665][ T7620] macvlan0: entered allmulticast mode [ 173.053270][ T7620] veth1_vlan: entered allmulticast mode [ 173.061171][ T7620] team0: Port device macvlan0 added [ 173.175269][ T7624] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 173.199592][ T7624] bond1: entered promiscuous mode [ 173.205055][ T7624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.230101][ T7624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.237019][ T7624] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 173.248749][ T7624] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 173.262473][ T7624] bond1: (slave wireguard0): making interface the new active one [ 173.270770][ T7624] wireguard0: entered promiscuous mode [ 173.278907][ T7624] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 173.288023][ T7627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.295578][ T7627] IPv6: NLM_F_CREATE should be set when creating new route [ 173.302857][ T7627] IPv6: NLM_F_CREATE should be set when creating new route [ 173.312974][ T7627] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.355787][ T7627] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 173.372774][ T7627] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 194.470911][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.477403][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.910177][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.916571][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 305.187404][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 305.195028][ T31] Not tainted syzkaller #0 [ 305.200015][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.208768][ T31] task:kworker/1:1 state:D stack:24840 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 305.220852][ T31] Workqueue: events rfkill_sync_work [ 305.226168][ T31] Call Trace: [ 305.229561][ T31] [ 305.232513][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 305.237106][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.243600][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 305.249303][ T31] ? __pfx___schedule+0x10/0x10 [ 305.254243][ T31] ? schedule+0x91/0x360 [ 305.258609][ T31] schedule+0x165/0x360 [ 305.262828][ T31] schedule_preempt_disabled+0x13/0x30 [ 305.268475][ T31] __mutex_lock+0x7e6/0x1350 [ 305.277136][ T31] ? __mutex_lock+0x5bb/0x1350 [ 305.281978][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 305.326915][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 305.332128][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.338249][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 305.344204][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.352269][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 305.358743][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 305.363896][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 305.371429][ T31] rfkill_set_block+0x1d2/0x440 [ 305.376329][ T31] rfkill_sync_work+0x114/0x200 [ 305.381355][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 305.387189][ T31] process_scheduled_works+0xae1/0x17b0 [ 305.392770][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.398847][ T31] worker_thread+0x8a0/0xda0 [ 305.403506][ T31] kthread+0x70e/0x8a0 [ 305.407667][ T31] ? __pfx_worker_thread+0x10/0x10 [ 305.412843][ T31] ? __pfx_kthread+0x10/0x10 [ 305.417534][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.422771][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.428603][ T31] ? __pfx_kthread+0x10/0x10 [ 305.433231][ T31] ret_from_fork+0x439/0x7d0 [ 305.437890][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 305.443032][ T31] ? __switch_to_asm+0x39/0x70 [ 305.448071][ T31] ? __switch_to_asm+0x33/0x70 [ 305.452914][ T31] ? __pfx_kthread+0x10/0x10 [ 305.457621][ T31] ret_from_fork_asm+0x1a/0x30 [ 305.462418][ T31] [ 305.465550][ T31] INFO: task syz.2.429:7383 blocked for more than 143 seconds. [ 305.473438][ T31] Not tainted syzkaller #0 [ 305.478425][ T31] Blocked by coredump. [ 305.483098][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.491861][ T31] task:syz.2.429 state:D stack:26312 pid:7383 tgid:7381 ppid:5874 task_flags:0x40054c flags:0x00004002 [ 305.503896][ T31] Call Trace: [ 305.507437][ T31] [ 305.510383][ T31] __schedule+0x1798/0x4cc0 [ 305.514907][ T31] ? validate_chain+0x897/0x2140 [ 305.519885][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 305.525805][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.531109][ T31] ? __lock_acquire+0xab9/0xd20 [ 305.536001][ T31] ? __pfx___schedule+0x10/0x10 [ 305.540935][ T31] ? schedule+0x91/0x360 [ 305.545303][ T31] schedule+0x165/0x360 [ 305.549507][ T31] schedule_timeout+0x9a/0x270 [ 305.554293][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 305.559752][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.564998][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.570352][ T31] ? wait_for_completion+0x267/0x5d0 [ 305.575678][ T31] wait_for_completion+0x2bf/0x5d0 [ 305.581153][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 305.586839][ T31] ? __flush_work+0xd2/0xbc0 [ 305.591645][ T31] ? __flush_work+0xd2/0xbc0 [ 305.596272][ T31] __flush_work+0x9b9/0xbc0 [ 305.600843][ T31] ? __flush_work+0xd2/0xbc0 [ 305.605546][ T31] ? __pfx___flush_work+0x10/0x10 [ 305.610676][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 305.616023][ T31] ? __pfx___cancel_work+0x10/0x10 [ 305.621190][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 305.626854][ T31] __cancel_work_sync+0xbe/0x110 [ 305.631850][ T31] rfkill_unregister+0x92/0x220 [ 305.636808][ T31] nfc_unregister_device+0x96/0x2a0 [ 305.642060][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 305.648056][ T31] virtual_ncidev_close+0x56/0x90 [ 305.653121][ T31] __fput+0x44c/0xa70 [ 305.657180][ T31] task_work_run+0x1d1/0x260 [ 305.661810][ T31] ? __pfx_task_work_run+0x10/0x10 [ 305.666932][ T31] do_exit+0x6b5/0x2300 [ 305.671351][ T31] ? do_raw_spin_lock+0x121/0x290 [ 305.676417][ T31] ? __pfx_do_exit+0x10/0x10 [ 305.681163][ T31] do_group_exit+0x21c/0x2d0 [ 305.685797][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.691339][ T31] get_signal+0x1286/0x1340 [ 305.695920][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 305.701583][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 305.707906][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 305.713457][ T31] exit_to_user_mode_loop+0x75/0x110 [ 305.718787][ T31] do_syscall_64+0x2bd/0x3b0 [ 305.723409][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.728708][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.734926][ T31] ? clear_bhb_loop+0x60/0xb0 [ 305.739673][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.745584][ T31] RIP: 0033:0x7f4de298eec9 [ 305.750099][ T31] RSP: 002b:00007f4de3754038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 305.758592][ T31] RAX: 0000000000000006 RBX: 00007f4de2be5fa0 RCX: 00007f4de298eec9 [ 305.766718][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 305.774783][ T31] RBP: 00007f4de2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 305.782799][ T31] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000000 [ 305.790804][ T31] R13: 00007f4de2be6038 R14: 00007f4de2be5fa0 R15: 00007ffc8fbfdbd8 [ 305.798962][ T31] [ 305.801996][ T31] INFO: task syz.4.450:7482 blocked for more than 143 seconds. [ 305.809739][ T31] Not tainted syzkaller #0 [ 305.814703][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.823439][ T31] task:syz.4.450 state:D stack:24016 pid:7482 tgid:7481 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 305.835490][ T31] Call Trace: [ 305.838920][ T31] [ 305.841892][ T31] __schedule+0x1798/0x4cc0 [ 305.846519][ T31] ? __lock_acquire+0xab9/0xd20 [ 305.851518][ T31] ? __lock_acquire+0xab9/0xd20 [ 305.856417][ T31] ? __pfx___schedule+0x10/0x10 [ 305.861390][ T31] ? schedule+0x91/0x360 [ 305.865674][ T31] schedule+0x165/0x360 [ 305.869916][ T31] schedule_preempt_disabled+0x13/0x30 [ 305.875494][ T31] __mutex_lock+0x7e6/0x1350 [ 305.880140][ T31] ? rcu_is_watching+0x15/0xb0 [ 305.884930][ T31] ? __mutex_lock+0x5bb/0x1350 [ 305.889897][ T31] ? rfkill_register+0x37/0x8e0 [ 305.894824][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 305.899995][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 305.904988][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.910581][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 305.915908][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 305.921649][ T31] rfkill_register+0x37/0x8e0 [ 305.926452][ T31] wiphy_register+0x2231/0x2aa0 [ 305.931433][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 305.936683][ T31] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 305.941977][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 305.948139][ T31] ieee80211_register_hw+0x3442/0x40a0 [ 305.953631][ T31] ? ieee80211_register_hw+0x1421/0x40a0 [ 305.959365][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 305.965213][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.971686][ T31] ? __hrtimer_setup+0x187/0x210 [ 305.976656][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 305.982576][ T31] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 305.988408][ T31] ? __pfx__printk+0x10/0x10 [ 305.993200][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 305.999322][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 306.004886][ T31] ? __sock_sendmsg+0x219/0x270 [ 306.009835][ T31] ? ____sys_sendmsg+0x505/0x830 [ 306.014898][ T31] hwsim_new_radio_nl+0xea4/0x1b10 [ 306.020272][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 306.026006][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 306.031607][ T31] ? __nla_parse+0x40/0x60 [ 306.036040][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 306.042536][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 306.048169][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 306.054263][ T31] ? bpf_lsm_capable+0x9/0x20 [ 306.059000][ T31] ? security_capable+0x7e/0x2e0 [ 306.063968][ T31] genl_rcv_msg+0x60e/0x790 [ 306.068644][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.073694][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 306.079315][ T31] netlink_rcv_skb+0x208/0x470 [ 306.084096][ T31] ? __lock_acquire+0xab9/0xd20 [ 306.089012][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.094075][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.099505][ T31] ? down_read+0x1ad/0x2e0 [ 306.103954][ T31] genl_rcv+0x28/0x40 [ 306.108023][ T31] netlink_unicast+0x82f/0x9e0 [ 306.112809][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 306.118131][ T31] ? netlink_sendmsg+0x642/0xb30 [ 306.123174][ T31] ? skb_put+0x11b/0x210 [ 306.127707][ T31] netlink_sendmsg+0x805/0xb30 [ 306.132488][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.137812][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 306.142876][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 306.148317][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.153713][ T31] __sock_sendmsg+0x219/0x270 [ 306.158986][ T31] ____sys_sendmsg+0x505/0x830 [ 306.163802][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.169252][ T31] ? import_iovec+0x74/0xa0 [ 306.173798][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 306.178525][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.183769][ T31] ? __fget_files+0x2a/0x420 [ 306.188395][ T31] ? __fget_files+0x3a0/0x420 [ 306.193234][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 306.198213][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.203700][ T31] ? rcu_is_watching+0x15/0xb0 [ 306.208689][ T31] ? do_syscall_64+0xbe/0x3b0 [ 306.213384][ T31] do_syscall_64+0xfa/0x3b0 [ 306.218050][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.223292][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.229464][ T31] ? clear_bhb_loop+0x60/0xb0 [ 306.234212][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.240426][ T31] RIP: 0033:0x7f872af8eec9 [ 306.244875][ T31] RSP: 002b:00007f872bd78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.253436][ T31] RAX: ffffffffffffffda RBX: 00007f872b1e5fa0 RCX: 00007f872af8eec9 [ 306.261599][ T31] RDX: 0000000000000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 306.269650][ T31] RBP: 00007f872b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 306.277674][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.285731][ T31] R13: 00007f872b1e6038 R14: 00007f872b1e5fa0 R15: 00007ffec99721e8 [ 306.293780][ T31] [ 306.296824][ T31] INFO: task syz.1.462:7565 blocked for more than 144 seconds. [ 306.306395][ T31] Not tainted syzkaller #0 [ 306.311462][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.320344][ T31] task:syz.1.462 state:D stack:27496 pid:7565 tgid:7559 ppid:5860 task_flags:0x400040 flags:0x00004004 [ 306.332345][ T31] Call Trace: [ 306.335640][ T31] [ 306.338632][ T31] __schedule+0x1798/0x4cc0 [ 306.343202][ T31] ? __lock_acquire+0xab9/0xd20 [ 306.348328][ T31] ? __lock_acquire+0xab9/0xd20 [ 306.353305][ T31] ? __pfx___schedule+0x10/0x10 [ 306.358249][ T31] ? schedule+0x91/0x360 [ 306.362535][ T31] schedule+0x165/0x360 [ 306.366693][ T31] schedule_preempt_disabled+0x13/0x30 [ 306.372294][ T31] __mutex_lock+0x7e6/0x1350 [ 306.376902][ T31] ? preempt_schedule+0xae/0xc0 [ 306.381835][ T31] ? __mutex_lock+0x5bb/0x1350 [ 306.386634][ T31] ? genl_rcv_msg+0x10d/0x790 [ 306.391423][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 306.396482][ T31] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 306.402515][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 306.408901][ T31] ? radix_tree_lookup+0x240/0x290 [ 306.414029][ T31] genl_rcv_msg+0x10d/0x790 [ 306.418674][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.423819][ T31] netlink_rcv_skb+0x208/0x470 [ 306.428653][ T31] ? __lock_acquire+0xab9/0xd20 [ 306.433526][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 306.438592][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.443907][ T31] ? down_read+0x1ad/0x2e0 [ 306.448366][ T31] genl_rcv+0x28/0x40 [ 306.452371][ T31] netlink_unicast+0x82f/0x9e0 [ 306.457516][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 306.462809][ T31] ? netlink_sendmsg+0x642/0xb30 [ 306.468193][ T31] ? skb_put+0x11b/0x210 [ 306.472470][ T31] netlink_sendmsg+0x805/0xb30 [ 306.478177][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.483582][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 306.488744][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 306.494077][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.499530][ T31] __sock_sendmsg+0x219/0x270 [ 306.504337][ T31] __sys_sendto+0x3bd/0x520 [ 306.508973][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 306.514042][ T31] ? count_memcg_event_mm+0x21/0x260 [ 306.519671][ T31] ? rcu_is_watching+0x15/0xb0 [ 306.524471][ T31] __x64_sys_sendto+0xde/0x100 [ 306.529397][ T31] do_syscall_64+0xfa/0x3b0 [ 306.533932][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.540306][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.546410][ T31] ? clear_bhb_loop+0x60/0xb0 [ 306.551512][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.557516][ T31] RIP: 0033:0x7f4485190d5c [ 306.562043][ T31] RSP: 002b:00007f448605bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 306.570654][ T31] RAX: ffffffffffffffda RBX: 00007f448605bfc0 RCX: 00007f4485190d5c [ 306.578777][ T31] RDX: 0000000000000020 RSI: 00007f448605c010 RDI: 0000000000000003 [ 306.586752][ T31] RBP: 0000000000000000 R08: 00007f448605bf14 R09: 000000000000000c [ 306.595048][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 306.603124][ T31] R13: 00007f448605bf68 R14: 00007f448605c010 R15: 0000000000000000 [ 306.611372][ T31] [ 306.614453][ T31] [ 306.614453][ T31] Showing all locks held in the system: [ 306.622660][ T31] 1 lock held by khungtaskd/31: [ 306.627767][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 306.637767][ T31] 4 locks held by kworker/1:1/43: [ 306.642807][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 306.654017][ T31] #1: ffffc90000b37bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 306.666637][ T31] #2: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 306.676902][ T31] #3: ffff8880305bb100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 306.686801][ T31] 2 locks held by getty/5629: [ 306.691676][ T31] #0: ffff8880306810a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 306.701527][ T31] #1: ffffc9000362c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 306.711815][ T31] 1 lock held by syz-executor/5874: [ 306.717142][ T31] #0: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 306.727516][ T31] 1 lock held by syz.2.429/7383: [ 306.732489][ T31] #0: ffff8880305bb100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 306.742327][ T31] 3 locks held by syz.4.450/7482: [ 306.747404][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 306.755613][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 306.764775][ T31] #2: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 306.774930][ T31] 2 locks held by syz.1.462/7565: [ 306.780108][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 306.788865][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 306.798188][ T31] 2 locks held by syz.3.466/7582: [ 306.803249][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 306.811587][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 306.820679][ T31] 2 locks held by syz-executor/7594: [ 306.825956][ T31] #0: ffff888023ff1118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 306.836258][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 306.846299][ T31] 2 locks held by syz-executor/7633: [ 306.851809][ T31] #0: ffff888029381118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 306.862048][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 306.872152][ T31] 2 locks held by syz.0.485/7637: [ 306.877472][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 306.885715][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 306.894814][ T31] 2 locks held by syz-executor/7640: [ 306.900157][ T31] #0: ffff88807a5f6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 306.910235][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 306.920304][ T31] 2 locks held by syz-executor/7642: [ 306.925607][ T31] #0: ffff8880318e5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 306.935798][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 306.945821][ T31] 2 locks held by syz-executor/7647: [ 306.951195][ T31] #0: ffff8880324c2118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 306.961323][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 306.971600][ T31] 2 locks held by syz-executor/7650: [ 306.976923][ T31] #0: ffff88807b50f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 306.987178][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 306.997300][ T31] 2 locks held by syz-executor/7653: [ 307.002642][ T31] #0: ffff88802f87d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 307.012865][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 307.022886][ T31] 2 locks held by syz-executor/7656: [ 307.028469][ T31] #0: ffff88807ad67918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 307.038616][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 307.048789][ T31] 2 locks held by syz-executor/7658: [ 307.054094][ T31] #0: ffff88801facb118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 307.064259][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 307.074338][ T31] 2 locks held by syz-executor/7660: [ 307.079736][ T31] #0: ffff88807ef7f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 307.089841][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 307.099890][ T31] 2 locks held by syz-executor/7666: [ 307.105183][ T31] #0: ffff888079690918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 307.115911][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 307.125927][ T31] 2 locks held by syz-executor/7669: [ 307.131380][ T31] #0: ffff888054bb1118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 307.141644][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 307.151647][ T31] 2 locks held by syz-executor/7672: [ 307.156942][ T31] #0: ffff888053287918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 307.167122][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 307.177200][ T31] 2 locks held by syz-executor/7674: [ 307.182491][ T31] #0: ffff88802c8b5918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 307.192813][ T31] #1: ffffffff8f8095a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 307.202965][ T31] [ 307.205312][ T31] ============================================= [ 307.205312][ T31] [ 307.214298][ T31] NMI backtrace for cpu 1 [ 307.214310][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 307.214323][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.214330][ T31] Call Trace: [ 307.214335][ T31] [ 307.214340][ T31] dump_stack_lvl+0x189/0x250 [ 307.214359][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.214373][ T31] ? __pfx__printk+0x10/0x10 [ 307.214395][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 307.214421][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 307.214438][ T31] ? __pfx__printk+0x10/0x10 [ 307.214456][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 307.214475][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 307.214493][ T31] watchdog+0xf93/0xfe0 [ 307.214511][ T31] ? watchdog+0x1de/0xfe0 [ 307.214530][ T31] kthread+0x70e/0x8a0 [ 307.214545][ T31] ? __pfx_watchdog+0x10/0x10 [ 307.214560][ T31] ? __pfx_kthread+0x10/0x10 [ 307.214574][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.214592][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.214608][ T31] ? __pfx_kthread+0x10/0x10 [ 307.214622][ T31] ret_from_fork+0x439/0x7d0 [ 307.214635][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 307.214649][ T31] ? __switch_to_asm+0x39/0x70 [ 307.214662][ T31] ? __switch_to_asm+0x33/0x70 [ 307.214675][ T31] ? __pfx_kthread+0x10/0x10 [ 307.214689][ T31] ret_from_fork_asm+0x1a/0x30 [ 307.214711][ T31] [ 307.214716][ T31] Sending NMI from CPU 1 to CPUs 0: [ 307.360499][ C0] NMI backtrace for cpu 0 [ 307.360516][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 307.360533][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.360542][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 307.360569][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 09 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 307.360582][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 307.360597][ C0] RAX: fe4bb7872e6cbb00 RBX: ffffffff81968528 RCX: fe4bb7872e6cbb00 [ 307.360608][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b09bc RDI: ffffffff8be33f80 [ 307.360619][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 307.360629][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa2f230 [ 307.360640][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 307.360650][ C0] FS: 0000000000000000(0000) GS:ffff888125c3c000(0000) knlGS:0000000000000000 [ 307.360662][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.360673][ C0] CR2: 00007f727a22babe CR3: 000000000df36000 CR4: 00000000003526f0 [ 307.360689][ C0] Call Trace: [ 307.360695][ C0] [ 307.360701][ C0] default_idle+0x13/0x20 [ 307.360718][ C0] default_idle_call+0x74/0xb0 [ 307.360735][ C0] do_idle+0x1e8/0x510 [ 307.360756][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 307.360775][ C0] ? __pfx_do_idle+0x10/0x10 [ 307.360800][ C0] ? do_idle+0x4ed/0x510 [ 307.360823][ C0] cpu_startup_entry+0x44/0x60 [ 307.360844][ C0] rest_init+0x2de/0x300 [ 307.360863][ C0] start_kernel+0x3a9/0x410 [ 307.360883][ C0] x86_64_start_reservations+0x24/0x30 [ 307.360904][ C0] x86_64_start_kernel+0x143/0x1c0 [ 307.360924][ C0] common_startup_64+0x13e/0x147 [ 307.360951][ C0] [ 307.364785][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 307.557551][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 307.566755][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.576815][ T31] Call Trace: [ 307.580131][ T31] [ 307.583066][ T31] dump_stack_lvl+0x99/0x250 [ 307.587680][ T31] ? __asan_memcpy+0x40/0x70 [ 307.592363][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.597574][ T31] ? __pfx__printk+0x10/0x10 [ 307.602181][ T31] vpanic+0x281/0x750 [ 307.606174][ T31] ? __pfx_vpanic+0x10/0x10 [ 307.610681][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 307.616322][ T31] ? preempt_schedule+0xae/0xc0 [ 307.621187][ T31] ? preempt_schedule_common+0x83/0xd0 [ 307.626665][ T31] panic+0xb9/0xc0 [ 307.630391][ T31] ? __pfx_panic+0x10/0x10 [ 307.634821][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 307.640319][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 307.646490][ T31] watchdog+0xfd2/0xfe0 [ 307.650661][ T31] ? watchdog+0x1de/0xfe0 [ 307.655061][ T31] kthread+0x70e/0x8a0 [ 307.659160][ T31] ? __pfx_watchdog+0x10/0x10 [ 307.663862][ T31] ? __pfx_kthread+0x10/0x10 [ 307.668464][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.673673][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.678880][ T31] ? __pfx_kthread+0x10/0x10 [ 307.683478][ T31] ret_from_fork+0x439/0x7d0 [ 307.688074][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 307.693268][ T31] ? __switch_to_asm+0x39/0x70 [ 307.698060][ T31] ? __switch_to_asm+0x33/0x70 [ 307.702848][ T31] ? __pfx_kthread+0x10/0x10 [ 307.707467][ T31] ret_from_fork_asm+0x1a/0x30 [ 307.712269][ T31] [ 307.715572][ T31] Kernel Offset: disabled [ 307.719894][ T31] Rebooting in 86400 seconds..