last executing test programs: 42.480240129s ago: executing program 2 (id=379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.295482431s ago: executing program 2 (id=383): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) 42.13137461s ago: executing program 1 (id=386): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x10012, r1, 0x0) 42.04274003s ago: executing program 2 (id=389): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x178, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x74fa}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfd4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x394a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40}, 0x4008894) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x890) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340"], 0x34}}, 0x0) 41.912563877s ago: executing program 1 (id=392): socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0x0, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0xc1, 0x4, 0x1, 0x3, 0x5, 0xfffffff8, 0x1000, 0x9, 0x5, 0x6, 0x80000001, 0xfffffffa, 0x0, 0xfffffffe, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x20100, 0x6, 0x1c00, 0x10, 0x40, 0xbed4, 0x8, 0x8000100, 0x6, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x9, 0x9, 0x4, 0x5, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x1, 0xaf9439f9, 0x0, 0x10000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdfff7ff, 0x40000002, 0xfffffffe, 0x3215b324, 0x100, 0x5, 0xffff, 0x81, 0xb, 0x5, 0x20006, 0x9, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x0, 0x8, 0x0, 0x2, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66c5, 0xd0e, 0x8, 0x1, 0x5, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 41.878835891s ago: executing program 2 (id=393): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x3ff, 0x4) 41.758236797s ago: executing program 1 (id=395): close(0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 41.611254199s ago: executing program 1 (id=397): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 41.530255728s ago: executing program 1 (id=398): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0x2, 0x1ff}) 41.270419739s ago: executing program 2 (id=399): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x23}]}}}]}, 0x3c}}, 0x0) 41.12010317s ago: executing program 1 (id=403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) 41.088292972s ago: executing program 2 (id=404): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x9, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41) 26.067241566s ago: executing program 32 (id=403): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) write$rfkill(r1, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) 26.003980768s ago: executing program 33 (id=404): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x9, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41) 1.633263353s ago: executing program 3 (id=1291): unshare(0x26020480) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, 0x0}, 0x20) 1.578060331s ago: executing program 3 (id=1292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.508125578s ago: executing program 3 (id=1294): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0x1, 0x3, 0xa5c, 0x802}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.452965542s ago: executing program 3 (id=1296): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) 564.327367ms ago: executing program 3 (id=1315): unshare(0x2c060400) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) 523.946383ms ago: executing program 3 (id=1316): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 485.169255ms ago: executing program 0 (id=1317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r2, r1, 0x0, 0x10, &(0x7f0000000580)='kmem_cache_free\x00'}, 0x30) 428.840155ms ago: executing program 0 (id=1319): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) 398.908525ms ago: executing program 4 (id=1320): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}}, 0x10) 342.880916ms ago: executing program 4 (id=1321): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 278.486418ms ago: executing program 0 (id=1322): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x7}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x4c}}, 0x44040) 167.635496ms ago: executing program 4 (id=1323): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x38, r1, 0xc88719ede475f2bf, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 166.455751ms ago: executing program 0 (id=1331): r0 = epoll_create1(0x80000) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000004c0)={0x60002001}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000580)={0x40000005}) 112.915822ms ago: executing program 4 (id=1324): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r0, &(0x7f0000005400)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12141, 0x0) 86.973126ms ago: executing program 0 (id=1325): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 57.294791ms ago: executing program 4 (id=1326): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003d00)=@newtaction={0x18, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000520001000017c400000000000203000008000100feffffff"], 0x1c}}, 0x0) 28.594497ms ago: executing program 0 (id=1327): unshare(0x2c060400) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) 0s ago: executing program 4 (id=1328): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c3"], 0x30}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 83.039012][ T5853] cgroup: Unknown subsys name 'net' [ 83.216197][ T5853] cgroup: Unknown subsys name 'cpuset' [ 83.225963][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.850652][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.372575][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.381733][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.391455][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.422496][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.430823][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.552859][ T5181] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.560808][ T5181] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.568545][ T5181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.576710][ T5181] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.584440][ T5181] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.609560][ T5181] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.617375][ T5181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.625515][ T5181] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.633926][ T5181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.641735][ T5181] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.739420][ T5181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.752493][ T5181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.760913][ T5181] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.769323][ T5181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.782685][ T5181] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.832761][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.841637][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.849812][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.860149][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.867891][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.225071][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 89.324010][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 89.464498][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 89.528392][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.536580][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.544378][ T5864] bridge_slave_0: entered allmulticast mode [ 89.552829][ T5864] bridge_slave_0: entered promiscuous mode [ 89.569435][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.577358][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.587540][ T5864] bridge_slave_1: entered allmulticast mode [ 89.594895][ T5864] bridge_slave_1: entered promiscuous mode [ 89.670734][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.679049][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.687292][ T5870] bridge_slave_0: entered allmulticast mode [ 89.695148][ T5870] bridge_slave_0: entered promiscuous mode [ 89.708272][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.715788][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.723426][ T5870] bridge_slave_1: entered allmulticast mode [ 89.730688][ T5870] bridge_slave_1: entered promiscuous mode [ 89.773435][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 89.821011][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.833517][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.870346][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.907515][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.917236][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 90.004993][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.012917][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.020137][ T5868] bridge_slave_0: entered allmulticast mode [ 90.027709][ T5868] bridge_slave_0: entered promiscuous mode [ 90.038384][ T5864] team0: Port device team_slave_0 added [ 90.071833][ T5870] team0: Port device team_slave_0 added [ 90.080272][ T5870] team0: Port device team_slave_1 added [ 90.086529][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.093723][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.100883][ T5868] bridge_slave_1: entered allmulticast mode [ 90.108421][ T5868] bridge_slave_1: entered promiscuous mode [ 90.116511][ T5864] team0: Port device team_slave_1 added [ 90.228694][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.239486][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.246826][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.272949][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.302310][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.309306][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.335341][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.348538][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.358312][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.365464][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.391441][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.429284][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.436663][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.445141][ T5875] bridge_slave_0: entered allmulticast mode [ 90.453119][ T5875] bridge_slave_0: entered promiscuous mode [ 90.467873][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.475517][ T51] Bluetooth: hci0: command tx timeout [ 90.475637][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.507173][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.543563][ T5868] team0: Port device team_slave_0 added [ 90.549624][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.556866][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.564315][ T5875] bridge_slave_1: entered allmulticast mode [ 90.571534][ T5875] bridge_slave_1: entered promiscuous mode [ 90.611534][ T5868] team0: Port device team_slave_1 added [ 90.632704][ T51] Bluetooth: hci1: command tx timeout [ 90.694816][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.702052][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.709737][ T5878] bridge_slave_0: entered allmulticast mode [ 90.715893][ T51] Bluetooth: hci2: command tx timeout [ 90.717966][ T5878] bridge_slave_0: entered promiscuous mode [ 90.745488][ T5864] hsr_slave_0: entered promiscuous mode [ 90.751911][ T5864] hsr_slave_1: entered promiscuous mode [ 90.774169][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.786504][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.807437][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.814636][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.821746][ T5878] bridge_slave_1: entered allmulticast mode [ 90.829136][ T5878] bridge_slave_1: entered promiscuous mode [ 90.840133][ T5870] hsr_slave_0: entered promiscuous mode [ 90.846706][ T5870] hsr_slave_1: entered promiscuous mode [ 90.852826][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 90.858626][ T5870] Cannot create hsr debugfs directory [ 90.872416][ T51] Bluetooth: hci3: command tx timeout [ 90.882412][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.889364][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.915288][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.952348][ T51] Bluetooth: hci4: command tx timeout [ 90.972957][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.979923][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.006454][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.019035][ T5875] team0: Port device team_slave_0 added [ 91.063393][ T5875] team0: Port device team_slave_1 added [ 91.071532][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.126547][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.214435][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.221407][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.247557][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.292543][ T5868] hsr_slave_0: entered promiscuous mode [ 91.298876][ T5868] hsr_slave_1: entered promiscuous mode [ 91.305923][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 91.311678][ T5868] Cannot create hsr debugfs directory [ 91.317991][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.325160][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.351416][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.370682][ T5878] team0: Port device team_slave_0 added [ 91.378926][ T5878] team0: Port device team_slave_1 added [ 91.542016][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.549603][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.575530][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.619761][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.626831][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.653059][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.680492][ T5875] hsr_slave_0: entered promiscuous mode [ 91.687831][ T5875] hsr_slave_1: entered promiscuous mode [ 91.694003][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 91.699742][ T5875] Cannot create hsr debugfs directory [ 91.759102][ T979] cfg80211: failed to load regulatory.db [ 91.849371][ T5878] hsr_slave_0: entered promiscuous mode [ 91.855976][ T5878] hsr_slave_1: entered promiscuous mode [ 91.862025][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 91.867870][ T5878] Cannot create hsr debugfs directory [ 91.921170][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.934770][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.983638][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.007019][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.110861][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.121317][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.160222][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.189031][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.265701][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.279810][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.292384][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.307281][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.406918][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.417358][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.444312][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.456128][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.546145][ T5878] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.553628][ T51] Bluetooth: hci0: command tx timeout [ 92.580178][ T5878] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.591544][ T5878] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.602122][ T5878] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.648389][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.713653][ T51] Bluetooth: hci1: command tx timeout [ 92.724286][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.758904][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.766167][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.786968][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.792296][ T51] Bluetooth: hci2: command tx timeout [ 92.806884][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.814062][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.839701][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.868046][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.875165][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.894090][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.916250][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.933130][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.940291][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.953348][ T51] Bluetooth: hci3: command tx timeout [ 92.986782][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.004678][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.032907][ T51] Bluetooth: hci4: command tx timeout [ 93.057813][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.078959][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.086154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.116182][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.123375][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.139865][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.147043][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.160730][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.178594][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.185816][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.284226][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.374741][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.381881][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.475441][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.482623][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.594087][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.689958][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.874206][ T5864] veth0_vlan: entered promiscuous mode [ 93.899103][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.948297][ T5864] veth1_vlan: entered promiscuous mode [ 93.963285][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.082198][ T5868] veth0_vlan: entered promiscuous mode [ 94.101843][ T5864] veth0_macvtap: entered promiscuous mode [ 94.117907][ T5868] veth1_vlan: entered promiscuous mode [ 94.135881][ T5864] veth1_macvtap: entered promiscuous mode [ 94.198327][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.211737][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.240527][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.264645][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.277089][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.286573][ T5875] veth0_vlan: entered promiscuous mode [ 94.300930][ T5875] veth1_vlan: entered promiscuous mode [ 94.307693][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.317651][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.326951][ T5868] veth0_macvtap: entered promiscuous mode [ 94.349040][ T5868] veth1_macvtap: entered promiscuous mode [ 94.467952][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.487888][ T5870] veth0_vlan: entered promiscuous mode [ 94.494667][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.502048][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.512887][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.531488][ T5875] veth0_macvtap: entered promiscuous mode [ 94.545289][ T5878] veth0_vlan: entered promiscuous mode [ 94.559252][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.578020][ T5870] veth1_vlan: entered promiscuous mode [ 94.600593][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.610254][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.621597][ T5878] veth1_vlan: entered promiscuous mode [ 94.635204][ T51] Bluetooth: hci0: command tx timeout [ 94.644370][ T5875] veth1_macvtap: entered promiscuous mode [ 94.655197][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.698978][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.717995][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.756706][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.771633][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.793717][ T51] Bluetooth: hci1: command tx timeout [ 94.822064][ T5870] veth0_macvtap: entered promiscuous mode [ 94.831692][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.841013][ T1096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.852700][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.860452][ T1096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.867124][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.870104][ T1096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.885295][ T51] Bluetooth: hci2: command tx timeout [ 94.927623][ T5878] veth0_macvtap: entered promiscuous mode [ 94.955260][ T1096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.977716][ T5878] veth1_macvtap: entered promiscuous mode [ 94.998945][ T5870] veth1_macvtap: entered promiscuous mode [ 95.033323][ T51] Bluetooth: hci3: command tx timeout [ 95.092966][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.105571][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.113910][ T51] Bluetooth: hci4: command tx timeout [ 95.123242][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.145787][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.166057][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.177160][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.202204][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.260094][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.278284][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.287874][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.301481][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.341310][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.415273][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.428110][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.443249][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.454654][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.476105][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.493676][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.708942][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.738654][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.818841][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.856454][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.951563][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.974365][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.010793][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.029449][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.545756][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 96.873007][ T51] Bluetooth: hci1: command tx timeout [ 96.956516][ T5996] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 96.962535][ T51] Bluetooth: hci2: command tx timeout [ 97.124282][ T51] Bluetooth: hci3: command tx timeout [ 97.202841][ T51] Bluetooth: hci4: command tx timeout [ 97.580433][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 98.698024][ T6071] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.486899][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.495196][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.532200][ T6115] hsr0: entered promiscuous mode [ 100.553694][ T6115] macvlan2: entered allmulticast mode [ 100.559215][ T6115] hsr0: entered allmulticast mode [ 100.572288][ T6115] hsr_slave_0: entered allmulticast mode [ 100.577984][ T6115] hsr_slave_1: entered allmulticast mode [ 100.594615][ T6115] hsr0: left allmulticast mode [ 100.599450][ T6115] hsr_slave_0: left allmulticast mode [ 100.611904][ T6115] hsr_slave_1: left allmulticast mode [ 101.552542][ T6140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.123674][ T6157] warning: `syz.1.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.427592][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.436261][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.593365][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.609102][ T6159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.795101][ T6163] geneve2: entered promiscuous mode [ 102.814235][ T6163] geneve2: entered allmulticast mode [ 102.853700][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.896040][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 102.923085][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.934385][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 102.953375][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.974268][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 102.993492][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.012489][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 103.645395][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.90'. [ 103.719212][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.90'. [ 104.759987][ T6239] dvmrp1: tun_chr_ioctl cmd 1074812117 [ 105.094538][ T6254] erspan0: entered promiscuous mode [ 105.134948][ T6254] netlink: 'syz.2.117': attribute type 2 has an invalid length. [ 105.169750][ T6254] netlink: 'syz.2.117': attribute type 1 has an invalid length. [ 105.204101][ T6260] netlink: 1 bytes leftover after parsing attributes in process `syz.1.120'. [ 106.667237][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 106.824573][ T6328] netlink: 136 bytes leftover after parsing attributes in process `syz.2.150'. [ 106.854379][ T6328] netlink: 180 bytes leftover after parsing attributes in process `syz.2.150'. [ 106.926546][ T6333] Driver unsupported XDP return value 0 on prog (id 23) dev N/A, expect packet loss! [ 107.034082][ T6336] netlink: 'syz.0.154': attribute type 39 has an invalid length. [ 107.922681][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 108.067152][ T6378] netlink: 'syz.1.173': attribute type 7 has an invalid length. [ 108.086360][ T6378] netlink: 'syz.1.173': attribute type 8 has an invalid length. [ 108.114137][ T6378] netlink: 'syz.1.173': attribute type 4 has an invalid length. [ 108.145934][ T6378] netlink: 204 bytes leftover after parsing attributes in process `syz.1.173'. [ 108.368424][ T6392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 109.080706][ T6425] Bluetooth: MGMT ver 1.23 [ 109.432611][ T6442] netlink: 277 bytes leftover after parsing attributes in process `syz.4.203'. [ 109.838552][ T6458] vxcan3: entered allmulticast mode [ 110.786077][ T6464] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 111.202952][ T6480] Zero length message leads to an empty skb [ 111.431985][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.230'. [ 111.590375][ T6502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.233'. [ 112.212844][ T6529] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 112.243231][ T6529] macsec1: entered promiscuous mode [ 112.262092][ T6529] macsec1: entered allmulticast mode [ 112.291834][ T6529] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 112.594492][ T6546] netlink: 108 bytes leftover after parsing attributes in process `syz.2.254'. [ 112.665874][ T6546] netlink: 108 bytes leftover after parsing attributes in process `syz.2.254'. [ 112.690807][ T6546] netlink: 48 bytes leftover after parsing attributes in process `syz.2.254'. [ 112.728024][ T6549] netlink: 108 bytes leftover after parsing attributes in process `syz.2.254'. [ 112.773297][ T6549] netlink: 108 bytes leftover after parsing attributes in process `syz.2.254'. [ 112.793054][ T6549] netlink: 48 bytes leftover after parsing attributes in process `syz.2.254'. [ 113.851188][ T6587] sctp: [Deprecated]: syz.2.273 (pid 6587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.851188][ T6587] Use struct sctp_sack_info instead [ 114.253484][ T6603] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.281'. [ 114.336645][ T6607] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 114.348646][ T5977] IPVS: starting estimator thread 0... [ 114.462903][ T6608] IPVS: using max 28 ests per chain, 67200 per kthread [ 114.732609][ T6622] sctp: [Deprecated]: syz.1.290 (pid 6622) Use of int in max_burst socket option deprecated. [ 114.732609][ T6622] Use struct sctp_assoc_value instead [ 115.633603][ T6661] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 115.641300][ T6661] netlink: 224 bytes leftover after parsing attributes in process `syz.1.307'. [ 116.072687][ T6684] netlink: 92 bytes leftover after parsing attributes in process `syz.2.317'. [ 116.420338][ T6696] netlink: 72 bytes leftover after parsing attributes in process `syz.1.323'. [ 117.222258][ T6727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.147373][ T6764] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 118.378671][ T6774] netlink: 'syz.4.361': attribute type 1 has an invalid length. [ 118.402650][ T6774] netlink: 'syz.4.361': attribute type 1 has an invalid length. [ 118.422248][ T6774] netlink: 160 bytes leftover after parsing attributes in process `syz.4.361'. [ 118.448725][ T6774] netlink: 'syz.4.361': attribute type 1 has an invalid length. [ 118.469425][ T6774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.361'. [ 118.599831][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 118.635851][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 118.738125][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.367'. [ 119.742008][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 119.909137][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.917249][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.957636][ T6845] netlink: 48 bytes leftover after parsing attributes in process `syz.4.394'. [ 120.095589][ T6831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.111597][ T6831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.144009][ T6831] hsr0: left promiscuous mode [ 120.299394][ T6836] geneve2: entered promiscuous mode [ 120.311507][ T6836] geneve2: entered allmulticast mode [ 120.332299][ T1149] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.366238][ T1149] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 120.412321][ T1149] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.452542][ T1149] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 120.500778][ T1149] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.562235][ T1149] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 120.588631][ T1149] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.601438][ T1149] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 121.169157][ T6886] pim6reg: entered allmulticast mode [ 121.199739][ T6884] pim6reg: left allmulticast mode [ 121.581100][ T6868] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.602249][ T6868] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 121.640824][ T6868] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.659759][ T6868] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 121.884041][ T6868] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.890020][ T6868] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 122.004868][ T6868] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.029059][ T6868] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 122.072559][ T6868] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 122.089627][ T6868] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 123.709476][ T6995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.444'. [ 123.890422][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 125.864735][ T7100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.485'. [ 126.183457][ T7120] netlink: 'syz.4.496': attribute type 1 has an invalid length. [ 126.427249][ T7136] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 126.495528][ T7140] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 126.686150][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 127.050119][ T30] audit: type=1800 audit(1758223156.745:2): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.519" name="memory.events" dev="tmpfs" ino=598 res=0 errno=0 [ 127.094918][ T30] audit: type=1804 audit(1758223156.745:3): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.519" name="/newroot/115/memory.events" dev="tmpfs" ino=598 res=1 errno=0 [ 127.107460][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.521'. [ 127.129134][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.521'. [ 127.320979][ T7187] netlink: 48 bytes leftover after parsing attributes in process `syz.4.527'. [ 127.758664][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.776710][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.795208][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.814938][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.827383][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.540'. [ 127.840553][ T7216] netlink: 84 bytes leftover after parsing attributes in process `syz.4.540'. [ 127.849846][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.4.540'. [ 128.826571][ T7276] __nla_validate_parse: 1 callbacks suppressed [ 128.826591][ T7276] netlink: 76 bytes leftover after parsing attributes in process `syz.0.568'. [ 128.935812][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.571'. [ 128.946246][ T7283] netem: change failed [ 129.078309][ T7292] netlink: 'syz.0.575': attribute type 9 has an invalid length. [ 129.086383][ T7292] netlink: 147436 bytes leftover after parsing attributes in process `syz.0.575'. [ 129.351176][ T7305] netlink: 'syz.0.581': attribute type 9 has an invalid length. [ 129.360116][ T7305] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.581'. [ 129.526655][ T7313] netlink: 'syz.4.585': attribute type 1 has an invalid length. [ 129.801656][ T7331] tipc: Started in network mode [ 129.808936][ T7331] tipc: Node identity ac14140f, cluster identity 4711 [ 129.817679][ T7331] tipc: New replicast peer: 255.255.255.255 [ 129.825230][ T7331] tipc: Enabled bearer , priority 10 [ 129.889876][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.596'. [ 130.302364][ T7355] vlan2: entered promiscuous mode [ 130.307519][ T7355] bond0: entered promiscuous mode [ 130.313565][ T7355] bond_slave_0: entered promiscuous mode [ 130.326517][ T7355] bond_slave_1: entered promiscuous mode [ 130.359432][ T7359] netlink: 'syz.0.606': attribute type 2 has an invalid length. [ 130.374553][ T7357] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 130.383546][ T7357] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 130.393225][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.607'. [ 130.403698][ T7357] block nbd0: shutting down sockets [ 130.603028][ T7371] netlink: 104 bytes leftover after parsing attributes in process `syz.4.612'. [ 130.670394][ T7375] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.687722][ T7375] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 130.943722][ T5858] tipc: Node number set to 2886997007 [ 131.353377][ T7416] netlink: del zone limit has 4 unknown bytes [ 131.711250][ T7440] syz.0.646 (7440) used greatest stack depth: 18168 bytes left [ 132.045343][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.053169][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.421313][ T7484] tipc: Enabling of bearer rejected, already enabled [ 132.720712][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.727793][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.265211][ T7567] openvswitch: netlink: IP tunnel dst address not specified [ 134.435486][ T7576] tun0: tun_chr_ioctl cmd 1074025672 [ 134.440840][ T7576] tun0: ignored: set checksum disabled [ 134.516671][ T7582] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 134.748476][ T7598] netlink: 104 bytes leftover after parsing attributes in process `syz.4.719'. [ 134.793483][ T7602] pimreg3: entered allmulticast mode [ 134.854075][ T7604] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 134.865166][ T7604] netlink: 'syz.4.722': attribute type 2 has an invalid length. [ 134.875373][ T7604] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.722'. [ 134.972464][ T7612] ip6gretap1: entered allmulticast mode [ 135.091690][ T7619] batman_adv: batadv0: Adding interface: dummy0 [ 135.098660][ T7619] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.124998][ T7619] batman_adv: batadv0: Interface activated: dummy0 [ 135.508028][ T7648] netlink: 'syz.0.744': attribute type 1 has an invalid length. [ 135.520437][ T7648] netlink: 172 bytes leftover after parsing attributes in process `syz.0.744'. [ 135.529917][ T7648] netlink: 'syz.0.744': attribute type 1 has an invalid length. [ 135.716750][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 135.752992][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 136.081311][ T7668] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 136.423353][ T5858] IPVS: starting estimator thread 0... [ 136.431121][ T7685] netlink: 104 bytes leftover after parsing attributes in process `syz.0.761'. [ 136.513019][ T7689] IPVS: using max 28 ests per chain, 67200 per kthread [ 137.280233][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 137.889420][ T7770] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 138.330689][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 138.366430][ T7788] tap0: tun_chr_ioctl cmd 1074812118 [ 138.820563][ T7821] netlink: 'syz.0.823': attribute type 1 has an invalid length. [ 139.245258][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.835'. [ 139.257613][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.835'. [ 139.298456][ T7849] netlink: 'syz.4.836': attribute type 64 has an invalid length. [ 139.385950][ T7854] netlink: 'syz.4.839': attribute type 9 has an invalid length. [ 139.653569][ T7869] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 140.001630][ T7893] siw: device registration error -23 [ 140.008239][ T7895] __nla_validate_parse: 7 callbacks suppressed [ 140.008256][ T7895] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.865'. [ 140.915885][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 140.926114][ T7957] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 140.935825][ T7957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.485460][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.905'. [ 141.494568][ T7993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.905'. [ 141.502701][ T7991] sctp: [Deprecated]: syz.4.904 (pid 7991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.502701][ T7991] Use struct sctp_sack_info instead [ 141.511664][ T7993] erspan0: entered promiscuous mode [ 141.526779][ T7993] gretap0: entered promiscuous mode [ 142.039698][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 142.361410][ T8042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.929'. [ 142.425092][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.931'. [ 142.527126][ T8052] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.934'. [ 142.921872][ T8072] ipvlan2: entered promiscuous mode [ 142.932449][ T8072] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 142.994945][ T8076] netlink: 'syz.0.947': attribute type 21 has an invalid length. [ 143.002916][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.947'. [ 143.398879][ T8100] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 143.538746][ T8110] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 143.548175][ T8110] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 143.974476][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.975'. [ 144.130925][ T8134] team0 (unregistering): Port device team_slave_0 removed [ 144.160428][ T8134] team0 (unregistering): Port device team_slave_1 removed [ 146.385629][ T8222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1016'. [ 146.968705][ T8252] netlink: 'syz.3.1037': attribute type 3 has an invalid length. [ 146.977862][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1037'. [ 146.987155][ T8252] netlink: 'syz.3.1037': attribute type 3 has an invalid length. [ 146.995272][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1037'. [ 147.240665][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1036'. [ 147.998940][ T8299] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 148.005743][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 148.054376][ T8303] netlink: 'syz.3.1055': attribute type 6 has an invalid length. [ 148.063781][ T8303] netlink: 'syz.3.1055': attribute type 6 has an invalid length. [ 148.249586][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 150.470511][ T8371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.484771][ T8371] bond0: (slave bond1): Enslaving as an active interface with an up link [ 151.054006][ T8409] netlink: 164548 bytes leftover after parsing attributes in process `syz.0.1104'. [ 151.078211][ T8410] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 151.102357][ T8410] dvmrp1: linktype set to 773 [ 151.523221][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1121'. [ 152.278242][ T8456] openvswitch: netlink: Multiple metadata blocks provided [ 152.683009][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'. [ 152.767576][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 152.780800][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 152.790746][ T8475] netlink: 58 bytes leftover after parsing attributes in process `syz.4.1135'. [ 153.885656][ T8517] netlink: 'syz.0.1154': attribute type 15 has an invalid length. [ 153.991253][ T8524] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 154.025102][ T8527] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 154.039383][ T8527] netlink: 'syz.0.1158': attribute type 2 has an invalid length. [ 154.055080][ T8527] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 154.068029][ T8527] netlink: 'syz.0.1158': attribute type 2 has an invalid length. [ 154.216061][ T8539] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1164'. [ 154.864792][ T8582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1184'. [ 155.029424][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1187'. [ 155.255531][ T8604] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1195'. [ 155.405957][ T8613] dummy0: entered promiscuous mode [ 155.412517][ T8612] dummy0: left promiscuous mode [ 155.559041][ T8625] netlink: 'syz.4.1205': attribute type 9 has an invalid length. [ 155.720440][ T8636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1210'. [ 155.840167][ T8641] netlink: 'syz.3.1212': attribute type 18 has an invalid length. [ 156.617882][ T8669] __nla_validate_parse: 3 callbacks suppressed [ 156.617902][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 156.646158][ T8669] bridge_slave_1 (unregistering): left allmulticast mode [ 156.655671][ T8669] bridge_slave_1 (unregistering): left promiscuous mode [ 156.663018][ T8669] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.793299][ T8678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.020436][ T8694] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 157.029219][ T8694] netlink: 'syz.3.1238': attribute type 4 has an invalid length. [ 157.039254][ T8694] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1238'. [ 157.232066][ T8703] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1241'. [ 157.505679][ T8720] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.1249'. [ 157.701516][ T8730] IPVS: nq: FWM 3 0x00000003 - no destination available [ 157.910605][ T8742] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 158.224813][ T8760] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 158.238410][ T8760] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 159.202535][ T8797] netlink: 'syz.0.1281': attribute type 1 has an invalid length. [ 159.230661][ T8797] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1281'. [ 159.529276][ T8805] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.625325][ T8805] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.745442][ T8805] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.866256][ T8805] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.905556][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 159.990528][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.012470][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.048420][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.057383][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.808504][ T8852] netlink: 'syz.0.1307': attribute type 3 has an invalid length. [ 160.816795][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1307'. [ 160.865069][ T8854] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1308'. [ 160.998732][ T8860] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1311'. [ 161.258104][ T8876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1318'. [ 194.156175][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.162700][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.595694][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.602185][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.112677][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 267.120297][ T31] Not tainted syzkaller #0 [ 267.125445][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 267.134185][ T31] task:kworker/0:0 state:D stack:25896 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 267.146292][ T31] Workqueue: events rfkill_sync_work [ 267.151644][ T31] Call Trace: [ 267.155035][ T31] [ 267.157992][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 267.162587][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.168973][ T31] ? __pfx___schedule+0x10/0x10 [ 267.173918][ T31] ? schedule+0x91/0x360 [ 267.178183][ T31] schedule+0x165/0x360 [ 267.182398][ T31] schedule_preempt_disabled+0x13/0x30 [ 267.188195][ T31] __mutex_lock+0x7e6/0x1350 [ 267.193555][ T31] ? __mutex_lock+0x5bb/0x1350 [ 267.198383][ T31] ? rfkill_sync_work+0x2e/0x200 [ 267.232380][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 267.237482][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 267.280658][ T31] rfkill_sync_work+0x2e/0x200 [ 267.292178][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 267.303384][ T31] process_scheduled_works+0xae1/0x17b0 [ 267.309021][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.327061][ T31] worker_thread+0x8a0/0xda0 [ 267.331784][ T31] kthread+0x70e/0x8a0 [ 267.336357][ T31] ? __pfx_worker_thread+0x10/0x10 [ 267.341506][ T31] ? __pfx_kthread+0x10/0x10 [ 267.346552][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.351792][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.357544][ T31] ? __pfx_kthread+0x10/0x10 [ 267.362891][ T31] ret_from_fork+0x436/0x7d0 [ 267.367524][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 267.373854][ T31] ? __switch_to_asm+0x39/0x70 [ 267.378646][ T31] ? __switch_to_asm+0x33/0x70 [ 267.384371][ T31] ? __pfx_kthread+0x10/0x10 [ 267.389007][ T31] ret_from_fork_asm+0x1a/0x30 [ 267.394290][ T31] [ 267.403829][ T31] INFO: task kworker/0:6:5977 blocked for more than 143 seconds. [ 267.411577][ T31] Not tainted syzkaller #0 [ 267.452210][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 267.462749][ T31] task:kworker/0:6 state:D stack:23400 pid:5977 tgid:5977 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 267.493253][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 267.499988][ T31] Call Trace: [ 267.514166][ T31] [ 267.517151][ T31] __schedule+0x1798/0x4cc0 [ 267.521695][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.543361][ T31] ? __pfx___schedule+0x10/0x10 [ 267.548282][ T31] ? schedule+0x91/0x360 [ 267.562484][ T31] schedule+0x165/0x360 [ 267.566699][ T31] schedule_preempt_disabled+0x13/0x30 [ 267.582443][ T31] __mutex_lock+0x7e6/0x1350 [ 267.587085][ T31] ? __mutex_lock+0x5bb/0x1350 [ 267.591870][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 267.622134][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 267.627325][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 267.642138][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 267.647908][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 267.672138][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 267.677997][ T31] process_scheduled_works+0xae1/0x17b0 [ 267.692155][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.698210][ T31] worker_thread+0x8a0/0xda0 [ 267.732184][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.738705][ T31] ? __kthread_parkme+0x7b/0x200 [ 267.762153][ T31] kthread+0x70e/0x8a0 [ 267.766286][ T31] ? __pfx_worker_thread+0x10/0x10 [ 267.771414][ T31] ? __pfx_kthread+0x10/0x10 [ 267.804592][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.809875][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.815552][ T31] ? __pfx_kthread+0x10/0x10 [ 267.820189][ T31] ret_from_fork+0x436/0x7d0 [ 267.824861][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 267.830190][ T31] ? __switch_to_asm+0x39/0x70 [ 267.835166][ T31] ? __switch_to_asm+0x33/0x70 [ 267.839956][ T31] ? __pfx_kthread+0x10/0x10 [ 267.844987][ T31] ret_from_fork_asm+0x1a/0x30 [ 267.849821][ T31] [ 267.853036][ T31] INFO: task syz.2.404:6863 blocked for more than 144 seconds. [ 267.860606][ T31] Not tainted syzkaller #0 [ 267.865599][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 267.889072][ T31] task:syz.2.404 state:D stack:26920 pid:6863 tgid:6863 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 267.901362][ T31] Call Trace: [ 267.905036][ T31] [ 267.908005][ T31] __schedule+0x1798/0x4cc0 [ 267.912684][ T31] ? validate_chain+0x897/0x2140 [ 267.917668][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 267.923712][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.928961][ T31] ? __lock_acquire+0xab9/0xd20 [ 267.934247][ T31] ? __pfx___schedule+0x10/0x10 [ 267.939131][ T31] ? schedule+0x91/0x360 [ 267.943441][ T31] schedule+0x165/0x360 [ 267.947662][ T31] schedule_timeout+0x9a/0x270 [ 267.952503][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 267.957933][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.963496][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.968708][ T31] ? wait_for_completion+0x267/0x5d0 [ 267.974080][ T31] wait_for_completion+0x2bf/0x5d0 [ 267.979225][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 267.984944][ T31] ? __flush_work+0xd2/0xbc0 [ 267.989587][ T31] ? __flush_work+0xd2/0xbc0 [ 267.994590][ T31] __flush_work+0x9b9/0xbc0 [ 267.999112][ T31] ? __flush_work+0xd2/0xbc0 [ 268.003974][ T31] ? __pfx___flush_work+0x10/0x10 [ 268.009042][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 268.014501][ T31] ? __pfx___cancel_work+0x10/0x10 [ 268.019644][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 268.025702][ T31] __cancel_work_sync+0xbe/0x110 [ 268.030684][ T31] rfkill_unregister+0x92/0x220 [ 268.035620][ T31] nfc_unregister_device+0x96/0x2a0 [ 268.040847][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 268.046671][ T31] virtual_ncidev_close+0x56/0x90 [ 268.051732][ T31] __fput+0x44c/0xa70 [ 268.056171][ T31] task_work_run+0x1d1/0x260 [ 268.060819][ T31] ? __pfx_task_work_run+0x10/0x10 [ 268.066029][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 268.071530][ T31] exit_to_user_mode_loop+0xec/0x110 [ 268.077123][ T31] do_syscall_64+0x2bd/0x3b0 [ 268.081741][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.087358][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.093523][ T31] ? clear_bhb_loop+0x60/0xb0 [ 268.098227][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.104291][ T31] RIP: 0033:0x7f3896d8eba9 [ 268.108739][ T31] RSP: 002b:00007ffc5ecb54d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 268.117658][ T31] RAX: 0000000000000000 RBX: 00007f3896fd7da0 RCX: 00007f3896d8eba9 [ 268.125681][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 268.133729][ T31] RBP: 00007f3896fd7da0 R08: 0000000000004d54 R09: 000000045ecb57cf [ 268.141746][ T31] R10: 00000000005f829c R11: 0000000000000246 R12: 000000000001da8f [ 268.150110][ T31] R13: 00007ffc5ecb55d0 R14: ffffffffffffffff R15: 00007ffc5ecb55f0 [ 268.158242][ T31] [ 268.161286][ T31] INFO: task syz.1.403:6868 blocked for more than 144 seconds. [ 268.168916][ T31] Not tainted syzkaller #0 [ 268.174296][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 268.183026][ T31] task:syz.1.403 state:D stack:24664 pid:6868 tgid:6865 ppid:5875 task_flags:0x400140 flags:0x00004006 [ 268.195040][ T31] Call Trace: [ 268.198445][ T31] [ 268.201395][ T31] __schedule+0x1798/0x4cc0 [ 268.206278][ T31] ? __lock_acquire+0xab9/0xd20 [ 268.211169][ T31] ? __lock_acquire+0xab9/0xd20 [ 268.216150][ T31] ? __pfx___schedule+0x10/0x10 [ 268.221031][ T31] ? schedule+0x91/0x360 [ 268.225525][ T31] schedule+0x165/0x360 [ 268.229702][ T31] schedule_preempt_disabled+0x13/0x30 [ 268.235748][ T31] __mutex_lock+0x7e6/0x1350 [ 268.240376][ T31] ? __mutex_lock+0x5bb/0x1350 [ 268.245297][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 268.250618][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 268.255714][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.260940][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 268.267315][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 268.273740][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 268.279498][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 268.284663][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 268.290414][ T31] rfkill_set_block+0x1cf/0x440 [ 268.295675][ T31] rfkill_fop_write+0x44b/0x570 [ 268.300559][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 268.306073][ T31] ? security_kernfs_init_security+0x290/0x290 [ 268.312611][ T31] ? rw_verify_area+0x255/0x4d0 [ 268.317513][ T31] ? __lock_acquire+0xab9/0xd20 [ 268.322868][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 268.328280][ T31] vfs_write+0x27b/0xb30 [ 268.332769][ T31] ? __pfx_vfs_write+0x10/0x10 [ 268.337573][ T31] ? __fget_files+0x2a/0x420 [ 268.342247][ T31] ? __fget_files+0x2a/0x420 [ 268.346851][ T31] ? __fget_files+0x3a0/0x420 [ 268.351528][ T31] ? __fget_files+0x2a/0x420 [ 268.356497][ T31] ksys_write+0x145/0x250 [ 268.360844][ T31] ? __pfx_ksys_write+0x10/0x10 [ 268.365752][ T31] ? rcu_is_watching+0x15/0xb0 [ 268.370538][ T31] ? do_syscall_64+0xbe/0x3b0 [ 268.375272][ T31] do_syscall_64+0xfa/0x3b0 [ 268.379790][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.385310][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.391380][ T31] ? clear_bhb_loop+0x60/0xb0 [ 268.396340][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.402513][ T31] RIP: 0033:0x7f10b918eba9 [ 268.406964][ T31] RSP: 002b:00007f10b9f74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.415783][ T31] RAX: ffffffffffffffda RBX: 00007f10b93d5fa0 RCX: 00007f10b918eba9 [ 268.423833][ T31] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000005 [ 268.431818][ T31] RBP: 00007f10b9211e19 R08: 0000000000000000 R09: 0000000000000000 [ 268.439933][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.448329][ T31] R13: 00007f10b93d6038 R14: 00007f10b93d5fa0 R15: 00007fff7f9a8988 [ 268.456425][ T31] [ 268.459538][ T31] [ 268.459538][ T31] Showing all locks held in the system: [ 268.468705][ T31] 3 locks held by kworker/0:0/9: [ 268.474184][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 268.486112][ T31] #1: ffffc900000e7bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 268.498690][ T31] #2: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 268.508794][ T31] 1 lock held by khungtaskd/31: [ 268.513797][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 268.523702][ T31] 3 locks held by kworker/1:1/48: [ 268.528724][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 268.539881][ T31] #1: ffffc90000b87bc0 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 268.552858][ T31] #2: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x1d/0xa0 [ 268.563064][ T31] 2 locks held by getty/5627: [ 268.567752][ T31] #0: ffff88802fe220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 268.577696][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 268.587986][ T31] 1 lock held by syz-executor/5868: [ 268.593292][ T31] #0: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 268.603497][ T31] 1 lock held by syz-executor/5870: [ 268.608722][ T31] #0: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 268.618952][ T31] 1 lock held by syz-executor/5878: [ 268.624192][ T31] #0: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 268.634402][ T31] 3 locks held by kworker/0:6/5977: [ 268.639620][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 268.650751][ T31] #1: ffffc900048dfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 268.664322][ T31] #2: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 268.675766][ T31] 1 lock held by syz.2.404/6863: [ 268.680714][ T31] #0: ffff88802fdee100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 268.690559][ T31] 2 locks held by syz.1.403/6868: [ 268.695628][ T31] #0: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 268.705790][ T31] #1: ffff88802fdee100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 268.715660][ T31] 2 locks held by syz-executor/7669: [ 268.720961][ T31] #0: ffff88805cd6f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 268.731051][ T31] #1: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 268.741079][ T31] 2 locks held by syz-executor/7670: [ 268.746413][ T31] #0: ffff88802527e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 268.756519][ T31] #1: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 268.766511][ T31] 2 locks held by syz-executor/8902: [ 268.771820][ T31] #0: ffff88805c5c3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 268.781939][ T31] #1: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 268.791942][ T31] 2 locks held by syz-executor/8903: [ 268.797387][ T31] #0: ffff88805c5c5118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 268.807501][ T31] #1: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 268.817466][ T31] 2 locks held by syz-executor/8906: [ 268.822801][ T31] #0: ffff888028a5f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 268.832928][ T31] #1: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 268.842931][ T31] 2 locks held by syz-executor/8907: [ 268.848351][ T31] #0: ffff888028a5a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 268.858622][ T31] #1: ffffffff8f812f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 268.868702][ T31] [ 268.871041][ T31] ============================================= [ 268.871041][ T31] [ 268.879814][ T31] NMI backtrace for cpu 1 [ 268.879844][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 268.879882][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.879897][ T31] Call Trace: [ 268.879905][ T31] [ 268.879914][ T31] dump_stack_lvl+0x189/0x250 [ 268.879948][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.879975][ T31] ? __pfx__printk+0x10/0x10 [ 268.880019][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 268.880055][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 268.880091][ T31] ? __pfx__printk+0x10/0x10 [ 268.880127][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 268.880166][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 268.880202][ T31] watchdog+0xf93/0xfe0 [ 268.880238][ T31] ? watchdog+0x1de/0xfe0 [ 268.880275][ T31] kthread+0x70e/0x8a0 [ 268.880307][ T31] ? __pfx_watchdog+0x10/0x10 [ 268.880336][ T31] ? __pfx_kthread+0x10/0x10 [ 268.880365][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.880400][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.880419][ T31] ? __pfx_kthread+0x10/0x10 [ 268.880442][ T31] ret_from_fork+0x436/0x7d0 [ 268.880464][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 268.880493][ T31] ? __switch_to_asm+0x39/0x70 [ 268.880520][ T31] ? __switch_to_asm+0x33/0x70 [ 268.880547][ T31] ? __pfx_kthread+0x10/0x10 [ 268.880576][ T31] ret_from_fork_asm+0x1a/0x30 [ 268.880621][ T31] [ 268.880630][ T31] Sending NMI from CPU 1 to CPUs 0: [ 269.025606][ C0] NMI backtrace for cpu 0 [ 269.025622][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 269.025641][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 269.025670][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 269.025692][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 49 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 269.025706][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 269.025721][ C0] RAX: 041aa1c777496100 RBX: ffffffff819693f8 RCX: 041aa1c777496100 [ 269.025734][ C0] RDX: 0000000000000001 RSI: ffffffff8d9ba02d RDI: ffffffff8be33c00 [ 269.025745][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 269.025757][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38f30 [ 269.025770][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 269.025780][ C0] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 269.025793][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.025804][ C0] CR2: 0000561408b73000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 269.025818][ C0] Call Trace: [ 269.025824][ C0] [ 269.025830][ C0] default_idle+0x13/0x20 [ 269.025850][ C0] default_idle_call+0x74/0xb0 [ 269.025870][ C0] do_idle+0x1e8/0x510 [ 269.025889][ C0] ? __pfx_do_idle+0x10/0x10 [ 269.025910][ C0] ? do_idle+0x5/0x510 [ 269.025925][ C0] cpu_startup_entry+0x44/0x60 [ 269.025941][ C0] rest_init+0x2de/0x300 [ 269.025963][ C0] start_kernel+0x3a9/0x410 [ 269.025983][ C0] x86_64_start_reservations+0x24/0x30 [ 269.026008][ C0] x86_64_start_kernel+0x143/0x1c0 [ 269.026032][ C0] common_startup_64+0x13e/0x147 [ 269.026063][ C0] [ 269.026598][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 269.211228][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 269.220340][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 269.230407][ T31] Call Trace: [ 269.233690][ T31] [ 269.236622][ T31] dump_stack_lvl+0x99/0x250 [ 269.241227][ T31] ? __asan_memcpy+0x40/0x70 [ 269.245827][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.251036][ T31] ? __pfx__printk+0x10/0x10 [ 269.255649][ T31] vpanic+0x281/0x750 [ 269.259650][ T31] ? __pfx_vpanic+0x10/0x10 [ 269.264169][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 269.269728][ T31] ? preempt_schedule+0xae/0xc0 [ 269.274588][ T31] ? preempt_schedule_common+0x83/0xd0 [ 269.280057][ T31] panic+0xb9/0xc0 [ 269.283789][ T31] ? __pfx_panic+0x10/0x10 [ 269.288220][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 269.293632][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 269.299801][ T31] watchdog+0xfd2/0xfe0 [ 269.303973][ T31] ? watchdog+0x1de/0xfe0 [ 269.308316][ T31] kthread+0x70e/0x8a0 [ 269.312444][ T31] ? __pfx_watchdog+0x10/0x10 [ 269.317151][ T31] ? __pfx_kthread+0x10/0x10 [ 269.321749][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.326970][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.332168][ T31] ? __pfx_kthread+0x10/0x10 [ 269.336768][ T31] ret_from_fork+0x436/0x7d0 [ 269.341361][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 269.346487][ T31] ? __switch_to_asm+0x39/0x70 [ 269.351261][ T31] ? __switch_to_asm+0x33/0x70 [ 269.356030][ T31] ? __pfx_kthread+0x10/0x10 [ 269.360634][ T31] ret_from_fork_asm+0x1a/0x30 [ 269.365421][ T31] [ 269.368804][ T31] Kernel Offset: disabled [ 269.373217][ T31] Rebooting in 86400 seconds..