last executing test programs: 25.820946852s ago: executing program 3 (id=3996): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x20, 0x12}}, 0x18}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000100)="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", 0xfb) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pread64(r5, &(0x7f00000003c0)=""/156, 0x9c, 0x2) 25.613973156s ago: executing program 3 (id=3998): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0x80087601, 0x100000000010001) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x5}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6b4a69aa92dc4ed944966910a9ffff5d904cf25051c76b4ee6c775566fe207661aeaaf97479ed85decdcd39a807f123041a359c8f4dc6dda15ef0b8789cd920e9d255229b77b4ea22feb573959197038a3e79bb088a02186b", 0xa9}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "dd7da625128742a9", "98d5cf4b9c42168cf06b183bd84ef02c", "fe6f083a", "6f7b93cfe857dd75"}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0xe00, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYRES8=r5], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r9, 0x0, 0xc}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 24.636645199s ago: executing program 3 (id=4014): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r1, 0x0, 0x14, 0x0, &(0x7f0000009e00)) socket$netlink(0x10, 0x3, 0x0) 23.194705688s ago: executing program 3 (id=4029): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10000000}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="02000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf2539000000080001007063690011000200303030303a30303a31302e300000000008007300010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x24040004) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000000c0)=@int=0x8fd, 0x4) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 22.557273817s ago: executing program 3 (id=4039): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000200025a729bd7000fddbdf250a000008ff00000102000100080006170000000008000d00ff7f0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x20040840) 22.372986734s ago: executing program 3 (id=4043): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x1c, 0x5, 0x0, 0x0, 0x5, 0xf}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1d}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x44}}, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000180)=0x6) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000140)={'geneve0\x00', {0x2, 0x0, @local}}) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32=r8, @ANYBLOB="3ade7e9d025ee26d1e0c93aae50a923772c348bfb67b40180dbec4da7fb1c7d3a0cb54c848174a93d902fc754906df61b2b9c14a406066ea476a8861773a5ca36136ac2014"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) 20.302006381s ago: executing program 1 (id=4075): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004c50b00000000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000000440)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xffffffffffffffa5}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x0, 0x2, 0x2, 0x80, 0x7}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 20.152861425s ago: executing program 1 (id=4078): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x972, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000003c0)}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000003080)={0x6, 0x0, 0x6e}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000800)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x63, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xf, 0x1b, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x6, 0x6, 0x3, 0x40, 0xffffffffffffffff}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x9, 0x8, 0x1, 0x100, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffe}, @generic={0x6, 0x0, 0x1, 0x5, 0x8}, @ldst={0x2, 0x0, 0x2, 0x6, 0x8, 0xffffffffffffffc0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000a40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0xc, 0x1}, 0x10, 0x0, r0, 0x0, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x8, 0x22, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x1, 0x1, 0xf, 0xfc, 0x80000000}, @call={0x85, 0x0, 0x0, 0x9f}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0xffffca6b, 0xaf, &(0x7f00000005c0)=""/175, 0x40f00, 0x0, '\x00', r4, @fallback=0x26, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xd, 0x5, 0x3a64}, 0x10, r7, r8, 0x6, &(0x7f0000000d80)=[0x1], &(0x7f0000000dc0)=[{0x0, 0x3, 0xd, 0xa}, {0x2, 0x4, 0xa}, {0x4, 0x3, 0xc, 0xe}, {0x4, 0x3, 0xb, 0xb}, {0x1, 0x2, 0xe, 0x5}, {0x0, 0x5, 0x7, 0x4}], 0x10, 0x1}, 0x94) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x3, 0x7, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8c0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19.838357581s ago: executing program 1 (id=4081): socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.80362186s ago: executing program 1 (id=4083): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000004000)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x7fffffff, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100de9bb80d0100410b1ab820f2aaad6028080408"], 0x28}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000001400)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4", 0xb5}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b6", 0x3}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) 19.434694992s ago: executing program 1 (id=4088): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x10000000, 0x0, 0x90}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001200)={0x0, 0x1c, &(0x7f0000001100)=[@in6={0xa, 0x4e24, 0xf7ff, @remote, 0x4}]}, &(0x7f0000001240)=0x10) 19.310067864s ago: executing program 0 (id=4091): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x38, r2, 0x1d, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x36ecad16583bbcc3}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r5 = socket$inet6(0xa, 0x80002, 0x88) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf22}, 0x48) r7 = socket$inet6(0xa, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000180)=@udp6=r7}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000180)=@udp6=r7}, 0x20) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmmsg$inet6(r9, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f0000000200)={0xa0000004}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 19.308449452s ago: executing program 2 (id=4092): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020000007a31000000000800410073697700140033"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000001740)={0x0, @in={0x2, 0x4e21, @broadcast}, @ethernet={0x306, @remote}, @nl=@unspec, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb, 0x4}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r3, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c4) 19.266377016s ago: executing program 2 (id=4093): socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.205442881s ago: executing program 0 (id=4094): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[], 0x17) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000b, 0x13, r0, 0x2d322000) 19.126683435s ago: executing program 2 (id=4095): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000002c0)={r4, 0xce6}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x23af2807}}, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0x8, 0x6f}, &(0x7f0000000140)=0x9c) 19.126117078s ago: executing program 0 (id=4096): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061103800000000005e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x9a, 0x7, 0x1, @empty, @empty, 0x0, 0x40, 0x5, 0xffff}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="0600000000000000000000000000000000000200", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44884) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8000, 0x20, 0x8, 0x9, {{0xa, 0x4, 0x1, 0x2a, 0x28, 0x66, 0x0, 0xab, 0x2f, 0x0, @broadcast, @private=0xa010100, {[@lsrr={0x83, 0x13, 0xfd, [@loopback, @local, @multicast2, @loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x200, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x7, 0x7, 0x0, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x1, 0x40, {{0x2d, 0x4, 0x0, 0x3, 0xb4, 0x64, 0x0, 0x7, 0x2f, 0x0, @loopback, @multicast1, {[@generic={0x44, 0xd, "f505d9275a20742e8ebc96"}, @timestamp_addr={0x44, 0x2c, 0x9, 0x1, 0x5, [{@rand_addr=0x64010101, 0x800}, {@private=0xa010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x1}, {@remote, 0x700000}]}, @timestamp_addr={0x44, 0xc, 0x95, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @timestamp_prespec={0x44, 0x14, 0xca, 0x3, 0x6, [{@multicast1, 0x7fff}, {@loopback, 0x9}]}, @timestamp_addr={0x44, 0x44, 0x72, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0xfffffffb}, {@broadcast, 0x1}, {@remote, 0xa3}, {@broadcast, 0x1000}, {@rand_addr=0x64010101, 0x5}, {@multicast1, 0x4}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0x7}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000780)={&(0x7f0000000200), 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x124, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040051) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=ANY=[@ANYBLOB=' \x00\x00\x00v\x00\r\v\x00@'], 0x20}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe(&(0x7f0000000980)={0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000009c0)=@gcm_128={{0x304}, "ad19d7db5e3b5db1", "b83c27a4837dd4c4768bc25ac2fa4589", "c416dc21", "9e3ae36f429ce54b"}, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x6, 0x0, 0x1, 0x80, 0xffffffffffffffff, 0x80, '\x00', r13, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r14}, &(0x7f0000002480), &(0x7f00000024c0)=r12}, 0x20) r15 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r14, &(0x7f0000000080), &(0x7f0000000040)=@udp=r15, 0x1}, 0x20) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) accept4(r10, 0x0, 0x0, 0x800) 19.096964017s ago: executing program 2 (id=4097): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010002080000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08009f000a0000000800a100000000000800a000f9ffffff08002600b409"], 0x3c}}, 0x4000084) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) 19.068154166s ago: executing program 0 (id=4098): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1884e695d9f0b902ed5bf9e3a7b794c8000000000000e40ff867fa5150800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 18.962072783s ago: executing program 2 (id=4099): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) (async) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000573ec2c50e3ac95aa05c6e50ae00005107000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) socket$phonet(0x23, 0x2, 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@private0}, &(0x7f0000000080)=0x70) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@private0}, &(0x7f0000000080)=0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f00000004c0)=""/254, 0x0, 0xfe, 0x0, 0xa76, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1}, &(0x7f0000000640), &(0x7f0000000680)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1}, &(0x7f0000000640), &(0x7f0000000680)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "0002ffff7b0800", "8e083700daf38a6d69e9b5e9c2f133d7", '\x00', "b4003a00"}, 0x28) shutdown(r4, 0x1) (async) shutdown(r4, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0x8001) socket$kcm(0x21, 0x2, 0xa) (async) socket$kcm(0x21, 0x2, 0xa) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20) 18.961844465s ago: executing program 0 (id=4100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x74}}, 0x0) 18.934134895s ago: executing program 0 (id=4101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) unshare(0x6020480) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b80), 0x20d00, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000240)=@in4={0x21, 0xfffc, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) sendmsg$nl_route(r0, 0x0, 0x44) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3558d9cf1d7bc77b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="3436bfd8a80593f40c633f001064", @ANYRES16=r11, @ANYBLOB="000126bd7000fedbdf25210000000000990005000000440000000000060008021100000100000600eb000700000010002d8055000000ef6c79d201000000"], 0x34}, 0x1, 0x0, 0x0, 0x140280a0}, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "f2effc3ee3c34996", "0e505edbe011891e499e279e069d05c8", "ba849592", "6413f7a96547ca76"}, 0x28) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 18.76561156s ago: executing program 2 (id=4102): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0x0, 0x0, 0xfffffffd}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x14008004) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$kcm(r2, 0x0, 0x50) listen(r1, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x28}}, 0x0) 18.534750198s ago: executing program 1 (id=4104): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="40009c45b6444b04000a0000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021008000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.553460711s ago: executing program 4 (id=4116): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdfff}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x5) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x8102, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x3) close(0x3) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) 15.389022536s ago: executing program 4 (id=4117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0xc}}, 0x0, 0x8}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @broadcast, @local}, &(0x7f0000000400)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x6, 0x0}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) r10 = socket(0x10, 0x6, 0x0) sendmsg$unix(r9, &(0x7f0000000980)={&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000600)="7d14379511aabc54da2da460b79a80a527c18a20ee908054d3d0a2a5924f85d5346aa996d03eebdde391941e12f0309b02f686be41ad8e058ed8c70da70c14b30db0c24a439ffbbb9791aed48ff823407a18c709170b132a2756", 0x5a}, {&(0x7f0000000880)="061d848bb1e06cce9a625208ed578503bb9b4c53164d149ce98187aea28f04a0e7e74f32501c9b937676317ccf71ea9c2527deae0cdeeeb17d18ba2e32ff8d09ec7eba039f59ae3c2579c3b1550e3fe608a372b00e5c1c660aa2f8f3fc584636ccc4124c7cb60e1531181dd9290fa5c5d17f208a17660040fadcd79f2e467c954f804fbd217214bba6e5718f241b7e84ac3e3292354a7f89d96239f0818837", 0x9f}], 0x3, &(0x7f0000000940)=[@rights={{0x20, 0x1, 0x1, [r7, 0xffffffffffffffff, r10, r3]}}], 0x20, 0x4008010}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', r6, @fallback=0xb, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0xe, 0x610000, 0x7f}, 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x89}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000"], 0x14}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a00030700000026bd7000fbdbdf2505001a00ac14141c0000e000000200000000000000000000000003000410fe2e22dd979f34292aec"], 0x38}}, 0x20000000) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x7, 0x1, 0x44, @remote, @local, 0x7, 0x14, 0x3, 0x3}}) unshare(0x22020400) pipe(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r16, &(0x7f00000064c0)=0x8, r17, 0x0, 0x2000000000000e, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x5c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), 0xffffffffffffffff) 15.301774754s ago: executing program 4 (id=4118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf251f0000000800010000000000"], 0x1c}}, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r7) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) close(r7) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f00000000c0)=0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0x1f, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1) r9 = socket$inet6(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r10, 0x0, 0x500}, 0x38) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 15.209994673s ago: executing program 4 (id=4119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) 15.208898382s ago: executing program 4 (id=4120): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, 0x0, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x60}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCX25GCALLUSERDATA(r7, 0x89e4, &(0x7f0000000200)={0x37, "1e3bec8ba2e38bce2c8c44d6499da30ccc7451c2b132cfd6863f85588840135ecd9251e402f0f4edfa270a91ee2a0e324bcb4746844a2c735e30c14c7406c40b578f01b5c642205394771a1a78514c3476fb9cc3ff2402edce8568a871be0a24c94c91295729ff2cf325c555c8c00de30e1bee4f460473d8215ad7abf1718f34"}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmsg$netlink(r7, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x41) close(0x3) 15.10790259s ago: executing program 4 (id=4121): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x3f, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @local}, 0x1, 0x0, 0x2}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) close(r12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$SIOCSIFHWADDR(r12, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="bcff03400200"}) (async) ioctl$SIOCSIFHWADDR(r12, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="bcff03400200"}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r13, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 7.016701296s ago: executing program 32 (id=4043): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x1c, 0x5, 0x0, 0x0, 0x5, 0xf}, [@FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x1d}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x44}}, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000180)=0x6) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000140)={'geneve0\x00', {0x2, 0x0, @local}}) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32=r8, @ANYBLOB="3ade7e9d025ee26d1e0c93aae50a923772c348bfb67b40180dbec4da7fb1c7d3a0cb54c848174a93d902fc754906df61b2b9c14a406066ea476a8861773a5ca36136ac2014"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) 3.009184722s ago: executing program 33 (id=4101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) unshare(0x6020480) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b80), 0x20d00, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000240)=@in4={0x21, 0xfffc, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) sendmsg$nl_route(r0, 0x0, 0x44) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3558d9cf1d7bc77b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="3436bfd8a80593f40c633f001064", @ANYRES16=r11, @ANYBLOB="000126bd7000fedbdf25210000000000990005000000440000000000060008021100000100000600eb000700000010002d8055000000ef6c79d201000000"], 0x34}, 0x1, 0x0, 0x0, 0x140280a0}, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000380)=@ccm_128={{0x303}, "f2effc3ee3c34996", "0e505edbe011891e499e279e069d05c8", "ba849592", "6413f7a96547ca76"}, 0x28) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.970215459s ago: executing program 34 (id=4104): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="40009c45b6444b04000a0000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021008000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.907617263s ago: executing program 35 (id=4102): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0x0, 0x0, 0xfffffffd}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x14008004) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$kcm(r2, 0x0, 0x50) listen(r1, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x28}}, 0x0) 0s ago: executing program 36 (id=4121): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20008850) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x3f, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @local}, 0x1, 0x0, 0x2}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) close(r12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$SIOCSIFHWADDR(r12, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="bcff03400200"}) (async) ioctl$SIOCSIFHWADDR(r12, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="bcff03400200"}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(0xffffffffffffffff, 0x0) (async) listen(0xffffffffffffffff, 0x0) r13 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r13, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) kernel console output (not intermixed with test programs): [ 476.265481][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3177'. [ 476.334877][ T8802] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.348076][ T8802] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 476.358979][ T8802] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 476.406711][T18172] wg1 speed is unknown, defaulting to 1000 [ 476.440496][T18169] wg1 speed is unknown, defaulting to 1000 [ 476.450441][ T8802] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.467889][ T8802] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 476.479636][ T8802] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 476.597933][ T8802] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.608964][ T8802] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 476.619257][ T8802] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 476.694303][T18191] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 476.745018][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3181'. [ 477.046668][T18208] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3186'. [ 477.111013][T18211] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3187'. [ 477.259357][ T8802] tipc: Resetting bearer [ 477.293020][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3189'. [ 477.443458][ T8802] ip6gre0 (unregistering): left allmulticast mode [ 477.644819][ T8802] bond8 (unregistering): (slave erspan0): Releasing active interface [ 477.713419][ T8802] dvmrp1 (unregistering): left allmulticast mode [ 477.742483][ T8802] bond1 (unregistering): (slave geneve2): Releasing active interface [ 477.766298][ T8802] team0: Port device geneve0 removed [ 477.828613][ T8802] tipc: Disabling bearer [ 478.146070][ T8802] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 478.155340][ T8802] dummy0: left promiscuous mode [ 478.167039][ T8802] bond0 (unregistering): Released all slaves [ 478.210306][ T5873] Bluetooth: hci3: command tx timeout [ 478.280736][ T8802] bond1 (unregistering): Released all slaves [ 478.383350][ T8802] bond2 (unregistering): Released all slaves [ 478.395684][ T8802] bond3 (unregistering): Released all slaves [ 478.499969][ T8802] bond4 (unregistering): (slave bond5): Releasing backup interface [ 478.507985][ T8802] bond5 (unregistering): left promiscuous mode [ 478.514796][ T8802] bond4 (unregistering): Released all slaves [ 478.618732][ T8802] bond5 (unregistering): Released all slaves [ 478.721454][ T8802] bond6 (unregistering): Released all slaves [ 478.822926][ T8802] bond7 (unregistering): Released all slaves [ 478.929443][ T8802] bond8 (unregistering): (slave veth7): Releasing active interface [ 478.940282][ T8802] bond8 (unregistering): Released all slaves [ 479.037958][ T8802] bond9 (unregistering): Released all slaves [ 479.138252][ T8802] bond10 (unregistering): Released all slaves [ 479.152988][ T8802] bond11 (unregistering): Released all slaves [ 479.165758][ T8802] bond12 (unregistering): Released all slaves [ 479.180086][ T8802] bond13 (unregistering): Released all slaves [ 479.215123][T18231] lo speed is unknown, defaulting to 1000 [ 479.230276][T18229] vlan2: entered allmulticast mode [ 479.235520][T18229] bridge0: entered allmulticast mode [ 479.263476][T18169] chnl_net:caif_netlink_parms(): no params data found [ 479.291008][T18231] lo speed is unknown, defaulting to 1000 [ 479.344238][T18231] lo speed is unknown, defaulting to 1000 [ 479.375881][T18231] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 479.454592][T18231] lo speed is unknown, defaulting to 1000 [ 479.503859][T18231] lo speed is unknown, defaulting to 1000 [ 479.536238][T18231] lo speed is unknown, defaulting to 1000 [ 479.569492][T18231] lo speed is unknown, defaulting to 1000 [ 479.576408][T18169] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.591496][T18169] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.600067][T18169] bridge_slave_0: entered allmulticast mode [ 479.609873][T18169] bridge_slave_0: entered promiscuous mode [ 479.618519][T18231] lo speed is unknown, defaulting to 1000 [ 479.619535][T18169] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.632293][T18169] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.640830][T18169] bridge_slave_1: entered allmulticast mode [ 479.650339][T18169] bridge_slave_1: entered promiscuous mode [ 479.689309][T18231] lo speed is unknown, defaulting to 1000 [ 479.709071][T18231] lo speed is unknown, defaulting to 1000 [ 479.722659][T18169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.737673][T18169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.747897][T18231] lo speed is unknown, defaulting to 1000 [ 479.755646][T18231] lo speed is unknown, defaulting to 1000 [ 479.843071][T18169] team0: Port device team_slave_0 added [ 479.855714][T18169] team0: Port device team_slave_1 added [ 479.863231][T18245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3193'. [ 479.914710][T18256] can: request_module (can-proto-5) failed. [ 479.940464][T18169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.977460][T18169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.037400][T18169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.072582][T18169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.089174][T18169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.116466][T18169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.170855][T18263] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3197'. [ 480.203378][T18260] wg1 speed is unknown, defaulting to 1000 [ 480.215350][T18169] hsr_slave_0: entered promiscuous mode [ 480.223835][T18169] hsr_slave_1: entered promiscuous mode [ 480.230996][T18169] debugfs: 'hsr0' already exists in 'hsr' [ 480.237484][T18169] Cannot create hsr debugfs directory [ 480.243267][T18260] lo speed is unknown, defaulting to 1000 [ 480.275645][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 480.288015][ T5873] Bluetooth: hci3: command tx timeout [ 480.302651][T18266] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 480.699586][T18278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3202'. [ 480.990575][T18295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3205'. [ 481.090472][ T8802] tipc: Left network mode [ 481.165192][ T8802] IPVS: stopping backup sync thread 7096 ... [ 481.263193][T18304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3209'. [ 481.280409][T18304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3209'. [ 481.291914][T18302] pim6reg1: entered promiscuous mode [ 481.310349][T18302] pim6reg1: entered allmulticast mode [ 481.402280][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'. [ 481.715711][T18169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 481.754301][T18169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 481.794606][T18169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 481.824481][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3215'. [ 481.828231][T18169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 481.858807][T18334] wg1 speed is unknown, defaulting to 1000 [ 481.865672][T18334] lo speed is unknown, defaulting to 1000 [ 482.137496][ T8802] hsr_slave_0: left promiscuous mode [ 482.143832][ T8802] hsr_slave_1: left promiscuous mode [ 482.152866][ T8802] batman_adv: batadv0: Removing interface: macvtap1 [ 482.181558][ T8802] veth1_macvtap: left promiscuous mode [ 482.370359][ T5873] Bluetooth: hci3: command tx timeout [ 482.765142][T18350] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3216'. [ 483.582748][T18362] wg1 speed is unknown, defaulting to 1000 [ 483.604050][T18362] lo speed is unknown, defaulting to 1000 [ 483.913801][T18169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.010050][T18169] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.042107][ T8790] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.049321][ T8790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.107993][ T8802] IPVS: stop unused estimator thread 0... [ 484.126526][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.133761][ T8810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.163914][T18391] wg1 speed is unknown, defaulting to 1000 [ 484.172896][T18391] lo speed is unknown, defaulting to 1000 [ 484.248962][T18396] netlink: 'syz.3.3227': attribute type 2 has an invalid length. [ 484.270510][T18396] netlink: 'syz.3.3227': attribute type 1 has an invalid length. [ 484.296753][T18396] netlink: 'syz.3.3227': attribute type 10 has an invalid length. [ 484.441855][T18396] team0: Port device vlan0 added [ 484.449067][ T5873] Bluetooth: hci3: command tx timeout [ 484.547668][T18398] wg1 speed is unknown, defaulting to 1000 [ 484.814686][T18398] lo speed is unknown, defaulting to 1000 [ 484.874081][T18411] tipc: Enabling of bearer rejected, failed to enable media [ 485.158725][T18420] syzkaller1: entered promiscuous mode [ 485.164503][T18420] syzkaller1: entered allmulticast mode [ 485.227670][T18432] __nla_validate_parse: 5 callbacks suppressed [ 485.227691][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'. [ 485.259394][T18432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'. [ 485.449657][T18169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.588042][T18444] netlink: 'syz.0.3234': attribute type 1 has an invalid length. [ 486.291104][T18457] wg1 speed is unknown, defaulting to 1000 [ 486.422000][T18457] lo speed is unknown, defaulting to 1000 [ 486.501304][T18469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3243'. [ 486.710606][T18169] veth0_vlan: entered promiscuous mode [ 486.728030][T18169] veth1_vlan: entered promiscuous mode [ 486.758975][T18169] veth0_macvtap: entered promiscuous mode [ 486.792998][T18169] veth1_macvtap: entered promiscuous mode [ 486.914936][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3248'. [ 486.932858][T18486] netlink: 'syz.0.3249': attribute type 3 has an invalid length. [ 487.044752][T18169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.064137][T18169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.189522][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.227305][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.294204][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.305761][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.331381][T18496] wg1 speed is unknown, defaulting to 1000 [ 487.380758][T18496] lo speed is unknown, defaulting to 1000 [ 487.558710][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3256'. [ 487.589514][ T8810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.602379][ T8810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.722001][T18518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3256'. [ 487.775115][ T8790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.795521][ T8790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.250002][T18534] wg1 speed is unknown, defaulting to 1000 [ 488.277814][T18534] lo speed is unknown, defaulting to 1000 [ 488.328373][T18529] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3258'. [ 488.525999][T18541] wg1 speed is unknown, defaulting to 1000 [ 488.553129][T18541] lo speed is unknown, defaulting to 1000 [ 489.121338][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3266'. [ 489.227634][T18569] netlink: 'syz.2.3267': attribute type 1 has an invalid length. [ 489.286196][T18569] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3267'. [ 489.329702][T18569] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3267'. [ 489.672022][T18584] wg1 speed is unknown, defaulting to 1000 [ 489.736730][T18584] lo speed is unknown, defaulting to 1000 [ 490.364843][T18616] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 490.580587][T18623] wg1 speed is unknown, defaulting to 1000 [ 490.616284][T18623] lo speed is unknown, defaulting to 1000 [ 490.643735][T18627] netlink: 'syz.3.3286': attribute type 4 has an invalid length. [ 490.661182][T18628] __nla_validate_parse: 2 callbacks suppressed [ 490.661202][T18628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3288'. [ 490.697238][T18628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3288'. [ 490.762399][T18628] bond1: entered promiscuous mode [ 490.767667][T18628] bond1: entered allmulticast mode [ 490.773342][T18628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.936558][T18636] ipip0: entered promiscuous mode [ 490.953564][T18628] netlink: 'syz.2.3288': attribute type 3 has an invalid length. [ 490.962003][T18628] netlink: 'syz.2.3288': attribute type 3 has an invalid length. [ 491.042345][T18637] wg1 speed is unknown, defaulting to 1000 [ 491.063946][T18637] lo speed is unknown, defaulting to 1000 [ 491.246630][T18618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3283'. [ 491.297343][T18623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3283'. [ 491.471283][T18662] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3293'. [ 491.480855][T18662] nbd: couldn't find a device at index 0 [ 491.520350][T18668] wg1 speed is unknown, defaulting to 1000 [ 491.587894][T18668] lo speed is unknown, defaulting to 1000 [ 491.969942][T18685] nftables ruleset with unbound set [ 492.219037][T18702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'. [ 492.279188][T18703] syzkaller1: entered promiscuous mode [ 492.284707][T18703] syzkaller1: entered allmulticast mode [ 492.375897][T18709] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3304'. [ 492.683221][T18727] netlink: 'syz.3.3306': attribute type 9 has an invalid length. [ 492.971998][T18736] vlan2: entered promiscuous mode [ 492.977550][T18736] macvtap0: entered promiscuous mode [ 493.004102][T18740] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3309'. [ 493.234242][T18746] wg1 speed is unknown, defaulting to 1000 [ 493.276782][T18746] lo speed is unknown, defaulting to 1000 [ 493.295039][T18733] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3310'. [ 493.514094][T18766] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3317'. [ 493.540160][T18770] netlink: 'syz.1.3318': attribute type 5 has an invalid length. [ 493.929650][T18792] wg1 speed is unknown, defaulting to 1000 [ 494.054843][T18796] bond2: entered promiscuous mode [ 494.082584][T18796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.146565][T18792] lo speed is unknown, defaulting to 1000 [ 494.174721][T18788] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.183246][T18788] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 494.201173][T18788] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 494.394951][T18814] tipc: Started in network mode [ 494.400359][T18814] tipc: Node identity 8a2590fafa28, cluster identity 4711 [ 494.408693][T18814] tipc: Enabled bearer , priority 0 [ 494.424409][T18818] macsec1: entered promiscuous mode [ 494.430631][T18818] macsec1: entered allmulticast mode [ 494.440618][T18814] syzkaller0: entered promiscuous mode [ 494.446557][T18814] syzkaller0: entered allmulticast mode [ 494.552426][T18813] tipc: Resetting bearer [ 494.639785][T18813] tipc: Disabling bearer [ 494.809197][T18834] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 494.816437][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 494.850700][T18834] wg1 speed is unknown, defaulting to 1000 [ 494.856611][ T5870] IPVS: starting estimator thread 0... [ 494.881311][T18834] lo speed is unknown, defaulting to 1000 [ 494.890224][T18828] wg1 speed is unknown, defaulting to 1000 [ 494.963956][T18828] lo speed is unknown, defaulting to 1000 [ 494.970173][T18836] IPVS: using max 25 ests per chain, 60000 per kthread [ 495.037061][T18838] tipc: Enabled bearer , priority 0 [ 495.053370][T18838] syzkaller0: entered promiscuous mode [ 495.072846][T18838] syzkaller0: entered allmulticast mode [ 495.165962][T18838] tipc: Resetting bearer [ 495.186102][T18837] tipc: Resetting bearer [ 495.246323][T18837] tipc: Disabling bearer [ 495.665869][T18862] FAULT_INJECTION: forcing a failure. [ 495.665869][T18862] name failslab, interval 1, probability 0, space 0, times 0 [ 495.700214][T18862] CPU: 1 UID: 0 PID: 18862 Comm: syz.2.3342 Not tainted syzkaller #0 PREEMPT(full) [ 495.700244][T18862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 495.700256][T18862] Call Trace: [ 495.700264][T18862] [ 495.700273][T18862] dump_stack_lvl+0x189/0x250 [ 495.700301][T18862] ? __pfx____ratelimit+0x10/0x10 [ 495.700323][T18862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.700346][T18862] ? __pfx__printk+0x10/0x10 [ 495.700387][T18862] should_fail_ex+0x414/0x560 [ 495.700420][T18862] should_failslab+0xa8/0x100 [ 495.700457][T18862] __kmalloc_cache_noprof+0x70/0x3d0 [ 495.700482][T18862] ? sctp_add_bind_addr+0x8c/0x370 [ 495.700511][T18862] sctp_add_bind_addr+0x8c/0x370 [ 495.700540][T18862] sctp_copy_local_addr_list+0x30b/0x4e0 [ 495.700573][T18862] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 495.700596][T18862] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 495.700622][T18862] ? sctp_v6_is_any+0x64/0x80 [ 495.700650][T18862] ? sctp_copy_one_addr+0x93/0x360 [ 495.700678][T18862] sctp_bind_addr_copy+0xb3/0x3c0 [ 495.700710][T18862] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 495.700735][T18862] sctp_connect_new_asoc+0x2e0/0x690 [ 495.700769][T18862] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 495.700796][T18862] ? __local_bh_enable_ip+0x12d/0x1c0 [ 495.700834][T18862] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 495.700856][T18862] ? security_sctp_bind_connect+0x7e/0x2e0 [ 495.700885][T18862] sctp_sendmsg+0x155c/0x2810 [ 495.700926][T18862] ? __pfx_sctp_sendmsg+0x10/0x10 [ 495.700957][T18862] ? aa_sk_perm+0x81e/0x950 [ 495.700991][T18862] ? __pfx_aa_sk_perm+0x10/0x10 [ 495.701027][T18862] ? sock_rps_record_flow+0x19/0x410 [ 495.701051][T18862] ? inet_sendmsg+0x2f4/0x370 [ 495.701079][T18862] __sock_sendmsg+0x19c/0x270 [ 495.701114][T18862] ____sys_sendmsg+0x505/0x830 [ 495.701155][T18862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.701191][T18862] ? import_iovec+0x74/0xa0 [ 495.701219][T18862] ___sys_sendmsg+0x21f/0x2a0 [ 495.701247][T18862] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.701314][T18862] ? __fget_files+0x2a/0x420 [ 495.701340][T18862] ? __fget_files+0x3a0/0x420 [ 495.701379][T18862] __x64_sys_sendmsg+0x19b/0x260 [ 495.701408][T18862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.701446][T18862] ? __pfx_ksys_write+0x10/0x10 [ 495.701467][T18862] ? rcu_is_watching+0x15/0xb0 [ 495.701492][T18862] ? do_syscall_64+0xbe/0x3b0 [ 495.701520][T18862] do_syscall_64+0xfa/0x3b0 [ 495.701541][T18862] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.701563][T18862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.701583][T18862] ? clear_bhb_loop+0x60/0xb0 [ 495.701607][T18862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.701626][T18862] RIP: 0033:0x7f833e78eec9 [ 495.701644][T18862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.701662][T18862] RSP: 002b:00007f833f5f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.701683][T18862] RAX: ffffffffffffffda RBX: 00007f833e9e5fa0 RCX: 00007f833e78eec9 [ 495.701703][T18862] RDX: 0000000000000041 RSI: 0000200000000040 RDI: 0000000000000003 [ 495.701715][T18862] RBP: 00007f833f5f2090 R08: 0000000000000000 R09: 0000000000000000 [ 495.701728][T18862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 495.701739][T18862] R13: 00007f833e9e6038 R14: 00007f833e9e5fa0 R15: 00007ffe7b7cebd8 [ 495.701773][T18862] [ 495.810134][T18867] netlink: 'syz.3.3341': attribute type 1 has an invalid length. [ 496.075842][T18867] __nla_validate_parse: 6 callbacks suppressed [ 496.075862][T18867] netlink: 600 bytes leftover after parsing attributes in process `syz.3.3341'. [ 496.250116][T18857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.271785][T18857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.488227][T18857] ipip0: left promiscuous mode [ 496.515404][T18874] tipc: Started in network mode [ 496.521110][T18874] tipc: Node identity ac14140f, cluster identity 4711 [ 496.547769][T18874] tipc: New replicast peer: 255.255.255.255 [ 496.554363][T18874] tipc: Enabled bearer , priority 26 [ 496.582492][ T8790] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.607752][ T8790] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.653462][ T8790] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.683786][ T8790] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.939575][T18888] bridge0: port 1(vlan2) entered blocking state [ 496.983047][T18888] bridge0: port 1(vlan2) entered disabled state [ 497.007204][T18888] vlan2: entered allmulticast mode [ 497.024874][T18888] bridge0: entered allmulticast mode [ 497.082991][T18888] vlan2: left allmulticast mode [ 497.107528][T18888] bridge0: left allmulticast mode [ 497.667534][ T5870] tipc: Node number set to 2886997007 [ 498.240811][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3363'. [ 498.336238][T18954] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 498.408259][ T5870] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 498.460876][T18961] syzkaller1: entered promiscuous mode [ 498.487244][T18961] syzkaller1: entered allmulticast mode [ 498.879112][T18975] wg1 speed is unknown, defaulting to 1000 [ 498.888754][T18975] lo speed is unknown, defaulting to 1000 [ 498.937927][T18976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3367'. [ 498.957212][T18976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3367'. [ 498.966695][T18976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3367'. [ 498.981454][T18976] netlink: 540 bytes leftover after parsing attributes in process `syz.3.3367'. [ 499.170394][ T5870] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 499.261609][T18987] netlink: 'syz.1.3370': attribute type 13 has an invalid length. [ 499.486413][T18992] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 499.681237][ T8785] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 500.276172][T19021] delete_channel: no stack [ 500.557458][T19033] netdevsim netdevsim4: loading /lib/firmware// failed with error -22 [ 500.568321][T19033] netdevsim netdevsim4: Direct firmware load for / failed with error -22 [ 500.577941][T19033] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 500.579469][T19036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3383'. [ 500.595686][T19036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3383'. [ 500.607608][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3383'. [ 500.617099][T19035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3383'. [ 500.689469][ T8796] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 500.699589][ T8796] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 501.257546][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 501.413884][T19076] veth1_to_hsr: entered promiscuous mode [ 501.424833][T19076] macvtap1: entered promiscuous mode [ 501.450010][T19076] macvtap1: entered allmulticast mode [ 501.452431][T19072] __nla_validate_parse: 2 callbacks suppressed [ 501.452448][T19072] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3394'. [ 501.466521][T19076] veth1_to_hsr: entered allmulticast mode [ 501.492519][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.594835][T19077] wg1 speed is unknown, defaulting to 1000 [ 501.598983][T19072] FAULT_INJECTION: forcing a failure. [ 501.598983][T19072] name failslab, interval 1, probability 0, space 0, times 0 [ 501.628737][T19077] lo speed is unknown, defaulting to 1000 [ 501.649248][T19072] CPU: 1 UID: 0 PID: 19072 Comm: syz.3.3394 Not tainted syzkaller #0 PREEMPT(full) [ 501.649278][T19072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 501.649289][T19072] Call Trace: [ 501.649297][T19072] [ 501.649306][T19072] dump_stack_lvl+0x189/0x250 [ 501.649332][T19072] ? __pfx____ratelimit+0x10/0x10 [ 501.649355][T19072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.649378][T19072] ? __pfx__printk+0x10/0x10 [ 501.649411][T19072] ? __pfx___might_resched+0x10/0x10 [ 501.649438][T19072] ? fs_reclaim_acquire+0x7d/0x100 [ 501.649477][T19072] should_fail_ex+0x414/0x560 [ 501.649511][T19072] should_failslab+0xa8/0x100 [ 501.649540][T19072] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 501.649566][T19072] ? nbd_add_socket+0x3ef/0x9a0 [ 501.649584][T19072] ? __kasan_kmalloc+0x93/0xb0 [ 501.649612][T19072] ? nbd_add_socket+0x3ef/0x9a0 [ 501.649629][T19072] krealloc_noprof+0x124/0x340 [ 501.649659][T19072] nbd_add_socket+0x3ef/0x9a0 [ 501.649697][T19072] ? __pfx_nbd_add_socket+0x10/0x10 [ 501.649720][T19072] ? __nla_parse+0x40/0x60 [ 501.649745][T19072] nbd_genl_connect+0x10f2/0x18f0 [ 501.649786][T19072] ? __pfx_nbd_genl_connect+0x10/0x10 [ 501.649833][T19072] ? __nla_parse+0x40/0x60 [ 501.649858][T19072] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 501.649897][T19072] genl_family_rcv_msg_doit+0x212/0x300 [ 501.649935][T19072] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 501.649980][T19072] ? stack_trace_save+0x9c/0xe0 [ 501.650010][T19072] genl_rcv_msg+0x60e/0x790 [ 501.650047][T19072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.650073][T19072] ? __pfx_nbd_genl_connect+0x10/0x10 [ 501.650120][T19072] netlink_rcv_skb+0x208/0x470 [ 501.650140][T19072] ? __lock_acquire+0xab9/0xd20 [ 501.650168][T19072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.650198][T19072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.650248][T19072] ? down_read+0x1ad/0x2e0 [ 501.650275][T19072] genl_rcv+0x28/0x40 [ 501.650300][T19072] netlink_unicast+0x82c/0x9e0 [ 501.650331][T19072] ? __pfx_netlink_unicast+0x10/0x10 [ 501.650355][T19072] ? netlink_sendmsg+0x642/0xb30 [ 501.650375][T19072] ? skb_put+0x11b/0x210 [ 501.650404][T19072] netlink_sendmsg+0x805/0xb30 [ 501.650437][T19072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.650465][T19072] ? aa_sock_msg_perm+0xf1/0x1d0 [ 501.650498][T19072] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 501.650516][T19072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.650537][T19072] __sock_sendmsg+0x219/0x270 [ 501.650569][T19072] ____sys_sendmsg+0x505/0x830 [ 501.650599][T19072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.650631][T19072] ? import_iovec+0x74/0xa0 [ 501.650655][T19072] ___sys_sendmsg+0x21f/0x2a0 [ 501.650687][T19072] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.650746][T19072] ? __fget_files+0x2a/0x420 [ 501.650768][T19072] ? __fget_files+0x3a0/0x420 [ 501.650802][T19072] __x64_sys_sendmsg+0x19b/0x260 [ 501.650826][T19072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.650858][T19072] ? __pfx_ksys_write+0x10/0x10 [ 501.650876][T19072] ? rcu_is_watching+0x15/0xb0 [ 501.650897][T19072] ? do_syscall_64+0xbe/0x3b0 [ 501.650920][T19072] do_syscall_64+0xfa/0x3b0 [ 501.650937][T19072] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.650954][T19072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.650971][T19072] ? clear_bhb_loop+0x60/0xb0 [ 501.650992][T19072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.651007][T19072] RIP: 0033:0x7fb2ac78eec9 [ 501.651023][T19072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.651038][T19072] RSP: 002b:00007fb2ad5dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.651056][T19072] RAX: ffffffffffffffda RBX: 00007fb2ac9e5fa0 RCX: 00007fb2ac78eec9 [ 501.651069][T19072] RDX: 0000000000040050 RSI: 0000200000001ac0 RDI: 0000000000000009 [ 501.651080][T19072] RBP: 00007fb2ad5dd090 R08: 0000000000000000 R09: 0000000000000000 [ 501.651090][T19072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.651100][T19072] R13: 00007fb2ac9e6038 R14: 00007fb2ac9e5fa0 R15: 00007fffe1489368 [ 501.651129][T19072] [ 501.653498][T19072] block nbd2: shutting down sockets [ 502.276398][T19102] gtp0: entered promiscuous mode [ 502.298361][T19104] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3400'. [ 502.316990][T19102] gtp0: entered allmulticast mode [ 502.417814][T19107] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3400'. [ 502.545962][T19114] netlink: 'syz.4.3403': attribute type 3 has an invalid length. [ 502.566902][T19114] netlink: 189428 bytes leftover after parsing attributes in process `syz.4.3403'. [ 502.874854][T19125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.926177][T19125] bond_slave_0: entered promiscuous mode [ 502.932786][T19125] bond_slave_1: entered promiscuous mode [ 502.951208][T19125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 502.993167][T19125] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 503.072348][T19127] bridge_slave_0: left allmulticast mode [ 503.121279][T19127] bridge_slave_0: left promiscuous mode [ 503.151108][T19127] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.185025][T19127] bridge_slave_1: left allmulticast mode [ 503.192537][T19127] bridge_slave_1: left promiscuous mode [ 503.199587][T19127] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.218753][T19127] bond0: (slave bond_slave_0): Releasing backup interface [ 503.233925][T19127] bond_slave_0: left promiscuous mode [ 503.251791][T19127] bond0: (slave bond_slave_1): Releasing backup interface [ 503.264116][T19127] bond_slave_1: left promiscuous mode [ 503.284007][T19127] team0: Port device team_slave_0 removed [ 503.301800][T19127] team0: Port device team_slave_1 removed [ 503.329750][T19127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.347393][T19127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.368768][T19127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.396962][T19127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.420723][T19127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 503.488190][ T3460] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 503.589696][ T8785] bond1: (slave macvlan2): link status definitely down, disabling slave [ 503.753973][T19148] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3409'. [ 503.767695][T19143] wg1 speed is unknown, defaulting to 1000 [ 503.775690][T19143] lo speed is unknown, defaulting to 1000 [ 503.851672][T19149] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 504.031944][T19156] wg1 speed is unknown, defaulting to 1000 [ 504.196722][T19162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3416'. [ 504.221734][T19156] lo speed is unknown, defaulting to 1000 [ 504.431952][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3419'. [ 504.483399][ T3460] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.498039][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3419'. [ 504.527232][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 504.528630][ T3460] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.563587][ T3460] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.576517][ T3460] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.607824][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3419'. [ 504.651154][T19179] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 504.975456][T19188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'. [ 505.050122][T19193] wg1 speed is unknown, defaulting to 1000 [ 505.059274][T19193] lo speed is unknown, defaulting to 1000 [ 505.549485][T19221] syzkaller1: entered promiscuous mode [ 505.555393][T19221] syzkaller1: entered allmulticast mode [ 506.455050][T19209] wg1 speed is unknown, defaulting to 1000 [ 506.479316][T19209] lo speed is unknown, defaulting to 1000 [ 506.572782][T19237] __nla_validate_parse: 4 callbacks suppressed [ 506.572800][T19237] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3439'. [ 506.612305][T19235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.619576][T19235] IPv6: NLM_F_CREATE should be set when creating new route [ 506.626874][T19235] IPv6: NLM_F_CREATE should be set when creating new route [ 506.637943][T19237] netlink: 'syz.4.3439': attribute type 10 has an invalid length. [ 506.676544][T19235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3438'. [ 506.690150][T19237] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3439'. [ 506.745956][T19237] batadv_slave_1: entered promiscuous mode [ 506.769023][T19237] bridge0: port 1(batadv_slave_1) entered blocking state [ 506.780644][T19237] bridge0: port 1(batadv_slave_1) entered disabled state [ 506.799850][T19237] batadv_slave_1: entered allmulticast mode [ 506.824824][T19237] bridge0: port 1(batadv_slave_1) entered blocking state [ 506.832163][T19237] bridge0: port 1(batadv_slave_1) entered forwarding state [ 507.150901][T19257] netlink: 'syz.1.3445': attribute type 10 has an invalid length. [ 507.178647][T19257] team0: Port device dummy0 added [ 507.196256][T19257] netlink: 'syz.1.3445': attribute type 10 has an invalid length. [ 507.235695][T19257] team0: Port device dummy0 removed [ 507.270822][T19257] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 507.502061][ T6343] IPVS: starting estimator thread 0... [ 507.597046][T19282] IPVS: using max 30 ests per chain, 72000 per kthread [ 508.043153][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'. [ 508.066697][T19298] netlink: 'syz.4.3453': attribute type 16 has an invalid length. [ 508.078544][T19298] netlink: 'syz.4.3453': attribute type 17 has an invalid length. [ 508.141836][T19298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.173082][T19294] wg1 speed is unknown, defaulting to 1000 [ 508.199104][T19294] lo speed is unknown, defaulting to 1000 [ 508.248048][T19310] wg1 speed is unknown, defaulting to 1000 [ 508.256232][T19310] lo speed is unknown, defaulting to 1000 [ 508.295294][T19311] veth1_macvtap: left promiscuous mode [ 508.303759][T19311] macsec0: entered promiscuous mode [ 508.309217][T19311] macsec0: entered allmulticast mode [ 508.340262][T19311] veth1_macvtap: entered promiscuous mode [ 508.346149][T19311] veth1_macvtap: entered allmulticast mode [ 508.352522][T19311] macsec0: left promiscuous mode [ 508.358821][T19311] macsec0: left allmulticast mode [ 508.363889][T19311] veth1_macvtap: left allmulticast mode [ 508.593512][T19321] netlink: 'syz.3.3460': attribute type 3 has an invalid length. [ 508.602041][T19321] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3460'. [ 508.861919][T19331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3464'. [ 508.916663][T19331] macvtap1: entered promiscuous mode [ 508.930494][ T3460] wlan0: Trigger new scan to find an IBSS to join [ 508.950297][T19331] bond0: entered promiscuous mode [ 508.978732][T19331] macvtap1: entered allmulticast mode [ 508.984184][T19331] bond0: entered allmulticast mode [ 508.989953][T19331] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 509.379628][T19362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3467'. [ 509.404500][T19361] macsec1: entered promiscuous mode [ 509.417652][T19361] macsec1: entered allmulticast mode [ 509.434575][T19351] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.555293][T19368] netlink: 'syz.1.3473': attribute type 4 has an invalid length. [ 509.571243][T19369] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3473'. [ 509.599057][T19369] nbd: couldn't find a device at index 0 [ 509.846404][T19385] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 509.870883][T19385] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 510.015583][T19396] bond2 (unregistering): Released all slaves [ 510.036600][T19404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 510.049015][T19404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 510.061242][T19404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 510.062424][T19401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3481'. [ 510.073585][T19404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 510.095465][T19404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 510.107691][T19404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 510.119444][T19404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 510.131867][T19404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 510.154844][T19379] wg1 speed is unknown, defaulting to 1000 [ 510.162733][T19379] lo speed is unknown, defaulting to 1000 [ 510.217520][T19404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 510.626532][T19425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3487'. [ 510.677929][T19423] wg1 speed is unknown, defaulting to 1000 [ 510.696343][T19433] delete_channel: no stack [ 510.773170][T19423] lo speed is unknown, defaulting to 1000 [ 510.946021][T19449] batadv0: entered promiscuous mode [ 511.050429][T19452] netem: invalid attributes len -16 [ 511.055674][T19452] netem: change failed [ 511.172209][T19462] vlan0: entered promiscuous mode [ 511.176688][T19463] netlink: 'syz.2.3499': attribute type 1 has an invalid length. [ 511.462340][T19463] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.487519][T19466] Bluetooth: MGMT ver 1.23 [ 511.519211][T19467] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.526571][T19467] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 511.539457][T19467] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 511.606064][T19472] veth3: entered promiscuous mode [ 511.616326][T19472] bond3: (slave veth3): Enslaving as an active interface with a down link [ 511.642890][T19490] tipc: Started in network mode [ 511.649050][T19490] tipc: Node identity ac14140f, cluster identity 4711 [ 511.659050][T19490] tipc: New replicast peer: 255.255.255.255 [ 511.665812][T19490] tipc: Enabled bearer , priority 26 [ 511.689286][ T8785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.725576][ T8785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.887596][ T8790] wlan0: Trigger new scan to find an IBSS to join [ 512.017492][T19509] tipc: Started in network mode [ 512.030390][T19509] tipc: Node identity 22ed5a8b8804, cluster identity 4711 [ 512.054351][T19509] tipc: Enabled bearer , priority 0 [ 512.179314][T19509] tipc: Disabling bearer [ 512.367004][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 512.495639][T19530] wg1 speed is unknown, defaulting to 1000 [ 512.503744][T19530] lo speed is unknown, defaulting to 1000 [ 512.669124][T19537] __nla_validate_parse: 7 callbacks suppressed [ 512.669143][T19537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3520'. [ 512.779405][ T6355] tipc: Node number set to 2886997007 [ 512.795070][T19541] wg1 speed is unknown, defaulting to 1000 [ 512.806124][T19544] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3522'. [ 512.821576][T19541] lo speed is unknown, defaulting to 1000 [ 513.077026][T19551] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 513.429475][T19581] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3531'. [ 513.525430][T19581] batadv1: entered promiscuous mode [ 513.531082][T19581] batadv1: entered allmulticast mode [ 513.556040][T19586] netlink: 'syz.0.3536': attribute type 15 has an invalid length. [ 513.838578][T19596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3539'. [ 513.850765][T19596] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3539'. [ 514.326118][T19636] sctp: [Deprecated]: syz.1.3548 (pid 19636) Use of int in max_burst socket option deprecated. [ 514.326118][T19636] Use struct sctp_assoc_value instead [ 514.672147][T19657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3547'. [ 514.678323][T19658] netlink: 'syz.3.3546': attribute type 3 has an invalid length. [ 514.682063][T19657] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 514.931356][ T3460] wlan0: Trigger new scan to find an IBSS to join [ 515.858625][ T8796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.989470][T19638] tipc: Enabled bearer , priority 0 [ 515.998300][T19640] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 515.999508][T19643] syzkaller0: entered promiscuous mode [ 516.013714][T19643] syzkaller0: entered allmulticast mode [ 516.022949][T19642] syzkaller0: entered promiscuous mode [ 516.034507][T19642] syzkaller0: entered allmulticast mode [ 516.063025][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3550'. [ 516.093833][T19657] tipc: Resetting bearer [ 516.115424][T19664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.126369][T19631] tipc: Resetting bearer [ 516.149499][T19631] tipc: Disabling bearer [ 516.200936][T19662] team1: entered promiscuous mode [ 516.206246][T19662] team1: entered allmulticast mode [ 516.408654][T19674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.417771][T19674] team0: Port device bond1 added [ 516.526422][T19685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3558'. [ 516.597505][T19685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3558'. [ 516.622118][T19688] wg1 speed is unknown, defaulting to 1000 [ 516.680359][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3558'. [ 516.759090][T19688] lo speed is unknown, defaulting to 1000 [ 516.837752][T19685] syz_tun: left allmulticast mode [ 516.842834][T19685] syz_tun: left promiscuous mode [ 516.862870][T19685] bridge0: port 3(syz_tun) entered disabled state [ 516.903073][T19685] bridge_slave_1: left allmulticast mode [ 516.977176][T19685] bridge_slave_1: left promiscuous mode [ 516.983286][T19685] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.010435][T19685] bridge_slave_0: left promiscuous mode [ 517.016557][T19685] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.235354][T19705] vlan2: entered promiscuous mode [ 517.241121][T19705] bond0: entered promiscuous mode [ 517.843606][T19739] __nla_validate_parse: 1 callbacks suppressed [ 517.843623][T19739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3570'. [ 518.321555][T19763] FAULT_INJECTION: forcing a failure. [ 518.321555][T19763] name failslab, interval 1, probability 0, space 0, times 0 [ 518.335640][T19763] CPU: 1 UID: 0 PID: 19763 Comm: syz.1.3578 Not tainted syzkaller #0 PREEMPT(full) [ 518.335657][T19763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 518.335664][T19763] Call Trace: [ 518.335669][T19763] [ 518.335674][T19763] dump_stack_lvl+0x189/0x250 [ 518.335691][T19763] ? __pfx____ratelimit+0x10/0x10 [ 518.335703][T19763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 518.335714][T19763] ? __pfx__printk+0x10/0x10 [ 518.335736][T19763] should_fail_ex+0x414/0x560 [ 518.335753][T19763] should_failslab+0xa8/0x100 [ 518.335768][T19763] __kmalloc_cache_noprof+0x70/0x3d0 [ 518.335782][T19763] ? sctp_add_bind_addr+0x8c/0x370 [ 518.335798][T19763] sctp_add_bind_addr+0x8c/0x370 [ 518.335818][T19763] sctp_copy_local_addr_list+0x30b/0x4e0 [ 518.335832][T19763] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 518.335845][T19763] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 518.335858][T19763] ? sctp_v6_is_any+0x64/0x80 [ 518.335873][T19763] ? sctp_copy_one_addr+0x93/0x360 [ 518.335887][T19763] sctp_bind_addr_copy+0xb3/0x3c0 [ 518.335899][T19763] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 518.335913][T19763] sctp_connect_new_asoc+0x2e0/0x690 [ 518.335929][T19763] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 518.335943][T19763] ? __local_bh_enable_ip+0x12d/0x1c0 [ 518.335963][T19763] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 518.335974][T19763] ? security_sctp_bind_connect+0x7e/0x2e0 [ 518.335989][T19763] sctp_sendmsg+0x155c/0x2810 [ 518.336011][T19763] ? __pfx_sctp_sendmsg+0x10/0x10 [ 518.336027][T19763] ? aa_sk_perm+0x81e/0x950 [ 518.336045][T19763] ? __pfx_aa_sk_perm+0x10/0x10 [ 518.336062][T19763] ? sock_rps_record_flow+0x19/0x410 [ 518.336075][T19763] ? inet_sendmsg+0x2f4/0x370 [ 518.336088][T19763] __sock_sendmsg+0x19c/0x270 [ 518.336106][T19763] ____sys_sendmsg+0x505/0x830 [ 518.336123][T19763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.336142][T19763] ? import_iovec+0x74/0xa0 [ 518.336157][T19763] ___sys_sendmsg+0x21f/0x2a0 [ 518.336172][T19763] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.336206][T19763] ? __fget_files+0x2a/0x420 [ 518.336221][T19763] ? __fget_files+0x3a0/0x420 [ 518.336241][T19763] __x64_sys_sendmsg+0x19b/0x260 [ 518.336256][T19763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.336280][T19763] ? __pfx_ksys_write+0x10/0x10 [ 518.336291][T19763] ? rcu_is_watching+0x15/0xb0 [ 518.336304][T19763] ? do_syscall_64+0xbe/0x3b0 [ 518.336318][T19763] do_syscall_64+0xfa/0x3b0 [ 518.336329][T19763] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.336340][T19763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.336350][T19763] ? clear_bhb_loop+0x60/0xb0 [ 518.336362][T19763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.336372][T19763] RIP: 0033:0x7fce7758eec9 [ 518.336383][T19763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.336396][T19763] RSP: 002b:00007fce7849a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.336415][T19763] RAX: ffffffffffffffda RBX: 00007fce777e5fa0 RCX: 00007fce7758eec9 [ 518.336428][T19763] RDX: 0000000000000041 RSI: 0000200000000040 RDI: 0000000000000003 [ 518.336441][T19763] RBP: 00007fce7849a090 R08: 0000000000000000 R09: 0000000000000000 [ 518.336452][T19763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.336463][T19763] R13: 00007fce777e6038 R14: 00007fce777e5fa0 R15: 00007ffe77091168 [ 518.336508][T19763] [ 518.879662][T19773] netlink: 'syz.1.3582': attribute type 1 has an invalid length. [ 518.887837][T19773] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3582'. [ 518.897061][T19773] netlink: 'syz.1.3582': attribute type 1 has an invalid length. [ 518.942730][T19768] wg1 speed is unknown, defaulting to 1000 [ 518.950614][T19768] lo speed is unknown, defaulting to 1000 [ 519.036537][T19777] net_ratelimit: 57 callbacks suppressed [ 519.036557][T19777] openvswitch: netlink: Message has 8 unknown bytes. [ 519.083604][T19777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.092755][T19777] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.105668][T19777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.122070][ T6344] lo speed is unknown, defaulting to 1000 [ 519.128269][ T6344] syz2: Port: 1 Link ACTIVE [ 519.161699][T19765] wg1 speed is unknown, defaulting to 1000 [ 519.192127][T19765] lo speed is unknown, defaulting to 1000 [ 519.599551][T19799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3587'. [ 519.902095][ T30] audit: type=1804 audit(1759447979.103:12): pid=19818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3593" name="/newroot/95/cgroup.controllers" dev="tmpfs" ino=510 res=1 errno=0 [ 519.999427][ T30] audit: type=1800 audit(1759447979.103:13): pid=19818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3593" name="cgroup.controllers" dev="tmpfs" ino=510 res=0 errno=0 [ 520.054871][ T30] audit: type=1800 audit(1759447979.133:14): pid=19818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3593" name="cgroup.controllers" dev="tmpfs" ino=510 res=0 errno=0 [ 520.087235][T19825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3596'. [ 520.221475][T19831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3597'. [ 520.231192][T19831] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3597'. [ 520.268622][T19831] netlink: 'syz.1.3597': attribute type 6 has an invalid length. [ 520.293208][T19832] wg1 speed is unknown, defaulting to 1000 [ 520.300689][T19831] netlink: 'syz.1.3597': attribute type 5 has an invalid length. [ 520.311471][T19832] lo speed is unknown, defaulting to 1000 [ 520.318189][T19831] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3597'. [ 520.424701][T19831] netlink: 'syz.1.3597': attribute type 4 has an invalid length. [ 520.496524][T19836] netlink: 'syz.1.3597': attribute type 4 has an invalid length. [ 520.515663][ T6346] lo speed is unknown, defaulting to 1000 [ 520.533782][ T6346] lo speed is unknown, defaulting to 1000 [ 520.753665][T19846] nbd2: detected capacity change from 0 to 127 [ 520.767811][ T5873] block nbd2: Receive control failed (result -32) [ 520.787863][T19847] tipc: Enabled bearer , priority 0 [ 520.796162][T19847] syzkaller0: entered promiscuous mode [ 520.802180][T19847] syzkaller0: entered allmulticast mode [ 520.872484][T19847] tipc: Resetting bearer [ 520.880490][T19847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.889461][T19847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.895098][T19857] netlink: 'syz.1.3603': attribute type 1 has an invalid length. [ 520.912133][T19845] tipc: Resetting bearer [ 520.918955][T19857] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3603'. [ 520.944529][T19845] tipc: Disabling bearer [ 522.089530][T19860] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3606'. [ 522.184364][T19875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3610'. [ 522.309353][ T8785] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 522.325627][ T8785] bond7 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 1a:48:9e:59:e4:b3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 522.352154][ T8785] bond7 (unregistering): (slave erspan0): making interface the new active one [ 522.523261][ T8785] bond7 (unregistering): (slave erspan0): Releasing active interface [ 522.614377][ T8785] dvmrp8 (unregistering): left allmulticast mode [ 522.771678][ T8785] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 522.779901][ T8785] bridge2 (unregistering): left promiscuous mode [ 522.950134][ T8785] bond14 (unregistering): (slave bridge6): Releasing backup interface [ 522.960543][ T8785] bridge6 (unregistering): left promiscuous mode [ 522.967462][ T8785] bridge6 (unregistering): left allmulticast mode [ 523.128971][ T8785] bond0 (unregistering): left promiscuous mode [ 523.135205][ T8785] bond_slave_0: left promiscuous mode [ 523.141158][ T8785] @0Ù€: left promiscuous mode [ 523.149743][ T8785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.161730][ T8785] bond_slave_0: left allmulticast mode [ 523.171151][ T8785] bond0 (unregistering): (slave c@0Ù€): Releasing backup interface [ 523.182127][ T8785] @0Ù€: left allmulticast mode [ 523.189126][ T8785] bond0 (unregistering): Released all slaves [ 523.347949][ T8785] bond1 (unregistering): Released all slaves [ 523.489661][ T8785] bond2 (unregistering): (slave bond3): Releasing backup interface [ 523.498634][ T8785] bond3 (unregistering): left promiscuous mode [ 523.504829][ T8785] bond3 (unregistering): left allmulticast mode [ 523.506351][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3618'. [ 523.512134][ T8785] bond2 (unregistering): Released all slaves [ 523.635983][ T8785] bond3 (unregistering): Released all slaves [ 523.756204][ T8785] bond4 (unregistering): Released all slaves [ 523.871748][ T8785] bond5 (unregistering): Released all slaves [ 523.989458][ T8785] bond6 (unregistering): Released all slaves [ 524.095919][ T8785] bond7 (unregistering): Released all slaves [ 524.206457][ T8785] bond8 (unregistering): (slave bond9): Releasing backup interface [ 524.214893][ T8785] bond9 (unregistering): left promiscuous mode [ 524.222644][ T8785] bond8 (unregistering): Released all slaves [ 524.329771][ T8785] bond9 (unregistering): Released all slaves [ 524.435993][ T8785] bond10 (unregistering): (slave wireguard0): Releasing backup interface [ 524.444972][ T8785] wireguard0: left promiscuous mode [ 524.452663][ T8785] bond10 (unregistering): Released all slaves [ 524.560283][ T8785] bond11 (unregistering): (slave veth11): Releasing active interface [ 524.570682][ T8785] bond11 (unregistering): Released all slaves [ 524.681541][ T8785] bond12 (unregistering): (slave wireguard1): Releasing backup interface [ 524.690319][ T8785] wireguard1: left promiscuous mode [ 524.697971][ T8785] bond12 (unregistering): Released all slaves [ 524.710990][ T8785] bond13 (unregistering): Released all slaves [ 524.816704][ T8785] bond14 (unregistering): Released all slaves [ 524.863971][T19894] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 524.874430][T19894] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 524.885304][T19894] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 524.904371][T19862] wg1 speed is unknown, defaulting to 1000 [ 524.958112][T19862] lo speed is unknown, defaulting to 1000 [ 524.958911][T19869] wg1 speed is unknown, defaulting to 1000 [ 525.034425][T19869] lo speed is unknown, defaulting to 1000 [ 525.099157][T19912] netlink: 'syz.0.3619': attribute type 13 has an invalid length. [ 525.105184][ T8785] : left promiscuous mode [ 525.107666][T19912] netlink: 'syz.0.3619': attribute type 17 has an invalid length. [ 525.169135][ T6344] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 525.518640][T19912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 525.673996][ T8785] tipc: Disabling bearer [ 525.689779][ T8785] tipc: Left network mode [ 525.771958][ T8785] IPVS: stopping backup sync thread 10678 ... [ 525.814519][T19925] wg1 speed is unknown, defaulting to 1000 [ 525.829156][T19925] lo speed is unknown, defaulting to 1000 [ 526.093097][T19945] tipc: Started in network mode [ 526.098288][T19945] tipc: Node identity a26285bfbfe5, cluster identity 4711 [ 526.105579][T19945] tipc: Enabled bearer , priority 0 [ 526.133585][T19946] syzkaller0: entered promiscuous mode [ 526.141715][T19946] syzkaller0: entered allmulticast mode [ 526.148412][T19950] netlink: 'syz.2.3628': attribute type 12 has an invalid length. [ 526.156529][T19950] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3628'. [ 526.224864][T19946] tipc: Resetting bearer [ 526.282452][T19946] tipc: Disabling bearer [ 526.310011][T19957] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3628'. [ 526.483665][T19962] warn_alloc: 1 callbacks suppressed [ 526.483686][T19962] syz.3.3630: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 526.527184][T19962] CPU: 1 UID: 0 PID: 19962 Comm: syz.3.3630 Not tainted syzkaller #0 PREEMPT(full) [ 526.527214][T19962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 526.527227][T19962] Call Trace: [ 526.527235][T19962] [ 526.527244][T19962] dump_stack_lvl+0x189/0x250 [ 526.527275][T19962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.527298][T19962] ? __pfx__printk+0x10/0x10 [ 526.527325][T19962] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 526.527347][T19962] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 526.527370][T19962] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 526.527396][T19962] warn_alloc+0x214/0x310 [ 526.527432][T19962] ? __pfx_warn_alloc+0x10/0x10 [ 526.527471][T19962] ? __get_vm_area_node+0x28f/0x300 [ 526.527497][T19962] ? fq_pie_init+0x430/0x840 [ 526.527521][T19962] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 526.527584][T19962] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 526.527617][T19962] ? rcu_is_watching+0x15/0xb0 [ 526.527636][T19962] ? fq_pie_init+0x430/0x840 [ 526.527650][T19962] ? fq_pie_init+0x430/0x840 [ 526.527663][T19962] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 526.527686][T19962] ? fq_pie_init+0x430/0x840 [ 526.527698][T19962] ? tcf_block_get+0x67/0xa0 [ 526.527712][T19962] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 526.527739][T19962] fq_pie_init+0x430/0x840 [ 526.527756][T19962] ? __pfx_fq_pie_init+0x10/0x10 [ 526.527769][T19962] qdisc_create+0x7ac/0xea0 [ 526.527798][T19962] tc_modify_qdisc+0x1538/0x20e0 [ 526.527834][T19962] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 526.527881][T19962] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 526.527901][T19962] rtnetlink_rcv_msg+0x77c/0xb70 [ 526.527921][T19962] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 526.527936][T19962] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 526.527951][T19962] ? ref_tracker_free+0x63a/0x7d0 [ 526.527974][T19962] ? __asan_memcpy+0x40/0x70 [ 526.527991][T19962] ? __pfx_ref_tracker_free+0x10/0x10 [ 526.528022][T19962] netlink_rcv_skb+0x208/0x470 [ 526.528040][T19962] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 526.528058][T19962] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.528086][T19962] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.528113][T19962] netlink_unicast+0x82c/0x9e0 [ 526.528135][T19962] ? __pfx_netlink_unicast+0x10/0x10 [ 526.528151][T19962] ? netlink_sendmsg+0x642/0xb30 [ 526.528166][T19962] ? skb_put+0x11b/0x210 [ 526.528187][T19962] netlink_sendmsg+0x805/0xb30 [ 526.528213][T19962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.528234][T19962] ? aa_sock_msg_perm+0xf1/0x1d0 [ 526.528258][T19962] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 526.528274][T19962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.528293][T19962] __sock_sendmsg+0x219/0x270 [ 526.528321][T19962] ____sys_sendmsg+0x505/0x830 [ 526.528347][T19962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.528377][T19962] ? import_iovec+0x74/0xa0 [ 526.528399][T19962] ___sys_sendmsg+0x21f/0x2a0 [ 526.528423][T19962] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.528477][T19962] ? __fget_files+0x2a/0x420 [ 526.528500][T19962] ? __fget_files+0x3a0/0x420 [ 526.528534][T19962] __x64_sys_sendmsg+0x19b/0x260 [ 526.528560][T19962] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.528598][T19962] ? rcu_is_watching+0x15/0xb0 [ 526.528623][T19962] ? do_syscall_64+0xbe/0x3b0 [ 526.528651][T19962] do_syscall_64+0xfa/0x3b0 [ 526.528672][T19962] ? lockdep_hardirqs_on+0x9c/0x150 [ 526.528694][T19962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.528714][T19962] ? clear_bhb_loop+0x60/0xb0 [ 526.528747][T19962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.528767][T19962] RIP: 0033:0x7fb2ac78eec9 [ 526.528784][T19962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.528801][T19962] RSP: 002b:00007fb2ad5dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.528823][T19962] RAX: ffffffffffffffda RBX: 00007fb2ac9e5fa0 RCX: 00007fb2ac78eec9 [ 526.528838][T19962] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000004 [ 526.528851][T19962] RBP: 00007fb2ac811f91 R08: 0000000000000000 R09: 0000000000000000 [ 526.528863][T19962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.528875][T19962] R13: 00007fb2ac9e6038 R14: 00007fb2ac9e5fa0 R15: 00007fffe1489368 [ 526.528909][T19962] [ 526.530114][T19962] Mem-Info: [ 526.674635][T19976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3632'. [ 526.679113][T19962] active_anon:6936 inactive_anon:0 isolated_anon:0 [ 526.679113][T19962] active_file:3530 inactive_file:40061 isolated_file:0 [ 526.679113][T19962] unevictable:768 dirty:118 writeback:0 [ 526.679113][T19962] slab_reclaimable:13064 slab_unreclaimable:230379 [ 526.679113][T19962] mapped:30408 shmem:1358 pagetables:1073 [ 526.679113][T19962] sec_pagetables:0 bounce:0 [ 526.679113][T19962] kernel_misc_reclaimable:0 [ 526.679113][T19962] free:1183975 free_pcp:14645 free_cma:0 [ 526.679188][T19962] Node 0 active_anon:27744kB inactive_anon:0kB active_file:14120kB inactive_file:160040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121632kB dirty:472kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14620kB pagetables:4172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 526.679244][T19962] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 526.679295][T19962] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 526.679355][T19962] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 526.679401][T19962] Node 0 DMA32 free:830676kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27700kB inactive_anon:0kB active_file:14120kB inactive_file:158228kB unevictable:1536kB writepending:472kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:46684kB local_pcp:22344kB free_cma:0kB [ 526.679469][T19962] lowmem_reserve[]: 0 0 1 1 1 [ 526.679512][T19962] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 526.679567][T19962] lowmem_reserve[]: 0 0 0 0 0 [ 526.679609][T19962] Node 1 Normal free:3889836kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11880kB local_pcp:7232kB free_cma:0kB [ 526.679670][T19962] lowmem_reserve[]: 0 0 0 0 0 [ 526.679721][T19962] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 526.679861][T19962] Node 0 DMA32: 739*4kB (UM) 733*8kB (UME) 474*16kB (UME) 260*32kB (UME) 93*64kB (UME) 64*128kB (UME) 37*256kB (UM) 32*512kB (UME) 16*1024kB (UM) 12*2048kB (UME) 177*4096kB (UM) = 830676kB [ 526.680040][T19962] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 526.680178][T19962] Node 1 Normal: 173*4kB (UME) 35*8kB (UME) 60*16kB (UME) 193*32kB (UME) 54*64kB (UME) 11*128kB (UM) 8*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3889836kB [ 527.278516][T19962] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.288976][T19962] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 527.298772][T19962] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.308581][T19962] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 527.318753][T19962] 44946 total pagecache pages [ 527.323452][T19962] 0 pages in swap cache [ 527.328204][T19962] Free swap = 124996kB [ 527.332377][T19962] Total swap = 124996kB [ 527.336530][T19962] 2097051 pages RAM [ 527.340942][T19962] 0 pages HighMem/MovableOnly [ 527.345613][T19962] 424998 pages reserved [ 527.350184][T19962] 0 pages cma reserved [ 527.377400][T19977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3632'. [ 527.386512][T19977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3632'. [ 527.483599][ T8785] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode [ 527.506336][T19985] netlink: 'syz.2.3636': attribute type 10 has an invalid length. [ 527.518482][ T8785] mac80211_hwsim hwsim6 wlan0 (unregistering): left promiscuous mode [ 527.532074][T19984] netlink: 'syz.2.3636': attribute type 10 has an invalid length. [ 527.601509][T19984] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.611856][T19984] bond0: (slave team0): Enslaving as an active interface with an up link [ 527.680029][ T8785] veth1_to_team: left promiscuous mode [ 527.726080][ T8785] hsr_slave_0: left promiscuous mode [ 527.731789][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 527.770356][ T8785] hsr_slave_1: left promiscuous mode [ 527.778895][ T8785] veth0_macvtap: left allmulticast mode [ 527.791196][T19999] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3642'. [ 527.979753][T20018] netlink: 'syz.4.3646': attribute type 10 has an invalid length. [ 527.981088][T20017] netlink: 'syz.4.3646': attribute type 10 has an invalid length. [ 528.824778][T20013] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3645'. [ 528.836769][T20013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.874132][T20018] mac80211_hwsim hwsim62 wlan1: entered promiscuous mode [ 528.882901][T20018] mac80211_hwsim hwsim62 wlan1: entered allmulticast mode [ 528.893095][T20018] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 528.958904][T20017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.990525][ T8802] bond1: (slave macvlan2): link status up again after 0 ms [ 529.042196][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 529.119673][T20046] netlink: 'syz.4.3655': attribute type 1 has an invalid length. [ 529.164714][T20051] IPv6: Can't replace route, no match found [ 529.212678][T20041] lo speed is unknown, defaulting to 1000 [ 529.220424][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 529.489871][T20057] ip6gretap0: entered promiscuous mode [ 529.526259][T20057] macsec1: entered promiscuous mode [ 529.557256][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 529.706916][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 529.819796][ T8785] IPVS: stop unused estimator thread 0... [ 529.825848][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 529.967403][ T8796] bond1: (slave macvlan2): failed to get link speed/duplex [ 530.078270][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 530.223675][T20095] netlink: 'syz.2.3669': attribute type 1 has an invalid length. [ 530.305713][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3670'. [ 530.463475][T20105] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 530.481870][T20109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3672'. [ 530.575960][T20119] net_ratelimit: 2 callbacks suppressed [ 530.575981][T20119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.730599][T20117] vlan2: entered allmulticast mode [ 530.748966][T20117] bond4: entered allmulticast mode [ 530.766448][T20133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3678'. [ 530.860279][T20140] syz.0.3679 (20140) used greatest stack depth: 17368 bytes left [ 531.174009][ T51] Bluetooth: hci3: command tx timeout [ 531.297225][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 531.322169][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3685'. [ 531.357478][T20168] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3685'. [ 531.549406][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 531.557848][T20176] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3688'. [ 531.592879][T20180] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3690'. [ 531.679489][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 531.713091][T20189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3692'. [ 531.730572][T20192] tipc: MTU too low for tipc bearer [ 531.746596][T20193] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3690'. [ 531.791254][T20193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.925353][T20189] syz_tun: entered promiscuous mode [ 531.947464][ T8796] bond1: (slave macvlan2): failed to get link speed/duplex [ 532.057481][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 532.167331][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 532.289746][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 532.408183][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 532.653460][T20218] vlan0: entered promiscuous mode [ 532.660377][T20218] bond0: entered promiscuous mode [ 532.679583][T20218] bond_slave_0: entered promiscuous mode [ 532.685705][T20218] bond_slave_1: entered promiscuous mode [ 532.717772][T20218] dummy0: entered promiscuous mode [ 532.825440][T20228] lo speed is unknown, defaulting to 1000 [ 533.076188][T20232] netlink: 'syz.4.3698': attribute type 12 has an invalid length. [ 533.257912][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 533.565059][T20239] IPVS: persistence engine module ip_vs_pe_ not found [ 533.909561][T20261] netlink: 'syz.0.3710': attribute type 15 has an invalid length. [ 534.052830][T20267] __nla_validate_parse: 3 callbacks suppressed [ 534.052850][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 534.084216][T20267] macsec2: entered promiscuous mode [ 534.092083][T20267] team0: entered promiscuous mode [ 534.097820][T20267] vlan0: entered promiscuous mode [ 534.197295][ T24] IPVS: starting estimator thread 0... [ 534.310264][T20273] IPVS: using max 24 ests per chain, 57600 per kthread [ 534.361529][T20279] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3716'. [ 534.370570][T20281] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3717'. [ 534.375288][T20281] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 534.601672][T20293] vlan2: entered allmulticast mode [ 534.785331][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3721'. [ 534.840730][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3721'. [ 534.884996][T20301] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3722'. [ 534.930581][T20301] 0ªX¹¦À: renamed from caif0 [ 534.961938][T20301] 0ªX¹¦À: entered allmulticast mode [ 534.988850][T20310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3724'. [ 535.015593][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3721'. [ 535.088132][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3721'. [ 535.348620][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3721'. [ 535.702933][T20338] netlink: 'syz.4.3733': attribute type 12 has an invalid length. [ 535.919027][ T8790] net_ratelimit: 24 callbacks suppressed [ 535.919049][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 536.023676][T20346] netlink: 'syz.4.3735': attribute type 21 has an invalid length. [ 536.057406][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 536.085101][T20344] lo speed is unknown, defaulting to 1000 [ 536.166993][ T8796] bond1: (slave macvlan2): failed to get link speed/duplex [ 536.388133][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 536.586294][T20384] netlink: 'syz.4.3744': attribute type 1 has an invalid length. [ 536.623441][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 536.747364][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 536.780930][T20394] veth5: entered promiscuous mode [ 536.857289][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 536.978453][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 537.097084][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 537.250136][T20423] lo speed is unknown, defaulting to 1000 [ 537.250205][T20424] veth0: entered promiscuous mode [ 537.283852][T20419] lo speed is unknown, defaulting to 1000 [ 537.290816][T20427] tipc: Enabling of bearer rejected, failed to enable media [ 537.645105][T20424] veth0: left promiscuous mode [ 537.676292][T20441] lo speed is unknown, defaulting to 1000 [ 537.682687][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 537.762813][T20444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 537.770462][T20444] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 537.909328][T20444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 537.915273][T20444] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 538.069814][T20444] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 538.085133][T20444] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 538.189853][T20444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 538.230575][T20444] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 538.271238][T20463] dvmrp1: entered allmulticast mode [ 538.481433][T20463] lo speed is unknown, defaulting to 1000 [ 538.522708][T20454] netlink: 'syz.4.3761': attribute type 1 has an invalid length. [ 538.556737][T20454] netlink: 'syz.4.3761': attribute type 4 has an invalid length. [ 538.575510][T20454] netlink: 'syz.4.3761': attribute type 1 has an invalid length. [ 538.584384][T20454] netlink: 'syz.4.3761': attribute type 4 has an invalid length. [ 538.621768][T20454] syzkaller0: entered promiscuous mode [ 538.629429][T20454] syzkaller0: entered allmulticast mode [ 538.821724][T20496] lo speed is unknown, defaulting to 1000 [ 538.838893][T20493] lo speed is unknown, defaulting to 1000 [ 539.287816][ T6344] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 539.682199][T20530] __nla_validate_parse: 17 callbacks suppressed [ 539.682219][T20530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'. [ 540.033906][T20537] geneve2: entered promiscuous mode [ 540.067648][T20537] geneve2: entered allmulticast mode [ 540.084996][ T8785] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 56829 - 0 [ 540.095432][ T8785] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 59404 - 0 [ 540.105112][ T8785] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 56829 - 0 [ 540.115179][ T8785] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 59404 - 0 [ 540.127755][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 540.161099][ T8785] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 56829 - 0 [ 540.173451][ T8785] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 59404 - 0 [ 540.184196][T20549] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3787'. [ 540.204007][ T8785] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 56829 - 0 [ 540.221436][ T8785] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 59404 - 0 [ 540.270348][T20552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3788'. [ 540.283683][T20553] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 540.329493][T20555] bond0: (slave dummy0): Releasing backup interface [ 540.358977][T20555] dummy0: left promiscuous mode [ 540.420437][T20562] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3791'. [ 540.470359][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3792'. [ 540.673339][T20576] batadv1: entered promiscuous mode [ 540.681765][T20576] batadv1: entered allmulticast mode [ 540.732575][T20579] netlink: 'syz.0.3795': attribute type 1 has an invalid length. [ 540.748487][T20579] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3795'. [ 540.833257][T20563] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3791'. [ 540.866010][T20584] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3798'. [ 540.879306][T20585] sctp: [Deprecated]: syz.4.3797 (pid 20585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.879306][T20585] Use struct sctp_sack_info instead [ 540.886262][T20584] netlink: 'syz.1.3798': attribute type 1 has an invalid length. [ 540.938867][ T49] net_ratelimit: 17 callbacks suppressed [ 540.938889][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 541.000647][T20589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3799'. [ 541.017806][T20587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3799'. [ 541.188901][T20595] netlink: 'syz.0.3801': attribute type 9 has an invalid length. [ 541.194265][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 541.337424][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 541.400838][T20619] tap0: tun_chr_ioctl cmd 1074025680 [ 541.468964][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 541.539048][T20633] netlink: 'syz.1.3812': attribute type 3 has an invalid length. [ 541.549231][T20633] netlink: 'syz.1.3812': attribute type 1 has an invalid length. [ 541.558052][T20637] netlink: 'syz.4.3810': attribute type 16 has an invalid length. [ 541.566316][T20637] netlink: 'syz.4.3810': attribute type 17 has an invalid length. [ 541.577759][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 541.652234][T20637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.697770][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 541.837856][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 541.904869][T20655] bond2: entered promiscuous mode [ 541.911725][T20655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 541.913417][T20658] netlink: 'syz.3.3818': attribute type 11 has an invalid length. [ 541.956974][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 542.081344][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 542.280408][T20685] pimreg3: entered allmulticast mode [ 542.464356][T20696] tipc: Enabled bearer , priority 0 [ 542.480164][T20696] syzkaller0: entered promiscuous mode [ 542.489337][T20696] syzkaller0: entered allmulticast mode [ 542.552093][T20696] tipc: Resetting bearer [ 542.604700][T20695] tipc: Resetting bearer [ 542.623244][T20695] tipc: Disabling bearer [ 542.658355][T20701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 542.984995][T20714] macvtap1: entered promiscuous mode [ 542.994284][T20714] mac80211_hwsim hwsim60 wlan1: entered promiscuous mode [ 543.581535][T20744] lo speed is unknown, defaulting to 1000 [ 543.797715][T20752] lo speed is unknown, defaulting to 1000 [ 544.110933][T20759] lo speed is unknown, defaulting to 1000 [ 545.401968][T20809] __nla_validate_parse: 20 callbacks suppressed [ 545.401987][T20809] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3860'. [ 545.518486][T20815] lo speed is unknown, defaulting to 1000 [ 545.637177][T20809] block nbd3: server does not support multiple connections per device. [ 545.645840][T20809] block nbd3: shutting down sockets [ 545.679931][T20824] lo speed is unknown, defaulting to 1000 [ 546.008162][ T49] net_ratelimit: 45 callbacks suppressed [ 546.008182][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 546.151054][T20845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3867'. [ 546.204049][T20850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3867'. [ 546.236230][T20850] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3867'. [ 546.256037][ T24] IPVS: starting estimator thread 0... [ 546.289391][ T6488] bond1: (slave macvlan2): failed to get link speed/duplex [ 546.348247][T20852] IPVS: using max 31 ests per chain, 74400 per kthread [ 546.407223][ T6488] bond1: (slave macvlan2): failed to get link speed/duplex [ 546.434366][T20859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3873'. [ 546.475410][T20859] openvswitch: netlink: Flow key attr not present in new flow. [ 546.558829][ T6488] bond1: (slave macvlan2): failed to get link speed/duplex [ 546.635878][T20869] lo speed is unknown, defaulting to 1000 [ 546.655168][T20866] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3875'. [ 546.687859][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 546.737607][T20866] block nbd3: server does not support multiple connections per device. [ 546.746079][T20866] block nbd3: shutting down sockets [ 546.807703][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 546.920869][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 547.038128][ T6488] bond1: (slave macvlan2): failed to get link speed/duplex [ 547.148062][ T6488] bond1: (slave macvlan2): failed to get link speed/duplex [ 551.117542][ T13] net_ratelimit: 35 callbacks suppressed [ 551.117562][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 551.237279][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 551.347330][ T6488] bond1: (slave macvlan2): failed to get link speed/duplex [ 551.457599][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 551.567357][ T6488] bond1: (slave macvlan2): failed to get link speed/duplex [ 551.677604][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 551.787407][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 551.907530][ T6488] bond1: (slave macvlan2): failed to get link speed/duplex [ 552.017469][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 552.127584][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 556.207407][ T49] net_ratelimit: 36 callbacks suppressed [ 556.207428][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 556.327352][ T6488] bond1: (slave macvlan2): failed to get link speed/duplex [ 556.437842][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 556.547833][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 556.657070][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 556.767836][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 556.877397][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 556.987308][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 557.097448][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 557.167030][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 557.207498][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 561.317483][ T8810] net_ratelimit: 36 callbacks suppressed [ 561.317505][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 561.437425][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 561.576388][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3877'. [ 561.652582][T20876] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3878'. [ 561.701116][T20880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3880'. [ 561.730939][T20890] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3878'. [ 562.190111][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 562.241994][T20888] lo speed is unknown, defaulting to 1000 [ 562.386679][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 562.523163][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 562.696158][T20910] batadv_slave_1: entered promiscuous mode [ 562.715920][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 562.792010][T20918] lo speed is unknown, defaulting to 1000 [ 562.823448][T20915] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3886'. [ 562.891182][T20911] batadv_slave_1: left promiscuous mode [ 563.018212][T20928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.047272][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 563.169371][ T6488] bond1: (slave macvlan2): failed to get link speed/duplex [ 563.427530][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 563.501216][T20943] tipc: Enabled bearer , priority 0 [ 563.520949][T20950] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000 [ 563.602686][T20951] syzkaller0: entered promiscuous mode [ 563.625240][T20951] syzkaller0: entered allmulticast mode [ 563.688733][T20943] tipc: Resetting bearer [ 563.715391][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3896'. [ 563.736085][T20943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3895'. [ 563.798087][T20942] tipc: Resetting bearer [ 563.877301][T20942] tipc: Disabling bearer [ 563.899375][T20970] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3901'. [ 563.901162][T20966] tipc: Enabled bearer , priority 0 [ 563.915533][T20971] netlink: 'syz.4.3903': attribute type 9 has an invalid length. [ 563.935859][T20966] syzkaller0: entered promiscuous mode [ 563.947451][T20966] syzkaller0: entered allmulticast mode [ 564.069791][T20976] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3902'. [ 564.077703][T20966] tipc: Resetting bearer [ 564.158780][T20964] tipc: Resetting bearer [ 564.204089][T20964] tipc: Disabling bearer [ 564.665872][T21005] syzkaller1: entered promiscuous mode [ 564.681882][T21005] syzkaller1: entered allmulticast mode [ 564.722444][T21005] syzkaller0: entered promiscuous mode [ 564.740864][T21005] syzkaller0: entered allmulticast mode [ 564.754937][T21005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3912'. [ 564.813406][T21011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 564.842979][T21014] Bluetooth: MGMT ver 1.23 [ 564.944416][T21005] lo speed is unknown, defaulting to 1000 [ 565.276653][T21035] lo speed is unknown, defaulting to 1000 [ 565.348792][T21037] geneve2: entered promiscuous mode [ 565.354172][T21037] geneve2: entered allmulticast mode [ 565.387522][T21028] block nbd3: server does not support multiple connections per device. [ 565.397668][T21028] block nbd3: shutting down sockets [ 565.452287][T21033] lo speed is unknown, defaulting to 1000 [ 565.745611][T21059] bond2: entered promiscuous mode [ 565.751627][T21059] bond2: entered allmulticast mode [ 565.759129][T21059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.932915][T21059] lo speed is unknown, defaulting to 1000 [ 566.427573][ T49] net_ratelimit: 14 callbacks suppressed [ 566.427595][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 566.938242][ T8785] bond1: (slave macvlan2): failed to get link speed/duplex [ 567.076985][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 567.270850][T21123] __nla_validate_parse: 7 callbacks suppressed [ 567.270870][T21123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3939'. [ 567.276293][ T8785] bond1: (slave macvlan2): failed to get link speed/duplex [ 567.440331][T21146] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3945'. [ 567.449436][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 567.557694][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 567.600564][T21165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.687421][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 567.720101][T21163] lo speed is unknown, defaulting to 1000 [ 567.741610][T21156] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3947'. [ 568.050045][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 568.277104][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 568.341247][T21199] netlink: 'syz.0.3952': attribute type 9 has an invalid length. [ 568.353898][T21199] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3952'. [ 568.979930][T21209] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 569.134623][T21224] netlink: 'syz.2.3959': attribute type 12 has an invalid length. [ 569.192047][T21223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3958'. [ 569.372792][T21238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.380133][T21238] IPv6: NLM_F_CREATE should be set when creating new route [ 569.424783][T21240] bridge2: entered allmulticast mode [ 569.433120][T21244] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 569.505784][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3967'. [ 569.573035][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3968'. [ 569.654044][T21255] netlink: 'syz.4.3970': attribute type 10 has an invalid length. [ 569.702686][T21255] team0: Port device dummy0 added [ 569.890815][T21261] Bluetooth: MGMT ver 1.23 [ 570.130567][T21268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3974'. [ 570.155843][T21235] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 570.333020][T21281] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3976'. [ 570.362070][T21281] netlink: 'syz.1.3976': attribute type 10 has an invalid length. [ 570.509190][T21283] lo speed is unknown, defaulting to 1000 [ 570.564119][T21292] netlink: 'syz.2.3981': attribute type 10 has an invalid length. [ 570.641328][T21292] team0: Port device vlan0 added [ 570.672351][T21292] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 570.727677][T21292] netlink: 480 bytes leftover after parsing attributes in process `syz.2.3981'. [ 571.072006][T21312] lo speed is unknown, defaulting to 1000 [ 571.237353][T21332] netlink: 'syz.3.3991': attribute type 1 has an invalid length. [ 571.268262][T21332] macvlan1: entered allmulticast mode [ 571.441509][ T3460] net_ratelimit: 24 callbacks suppressed [ 571.441533][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 571.738344][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 571.847433][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 571.966414][T21371] netlink: 'syz.4.4001': attribute type 10 has an invalid length. [ 572.008230][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 572.138064][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 572.256915][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 572.407362][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 572.459305][T21390] __nla_validate_parse: 7 callbacks suppressed [ 572.459323][T21390] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4009'. [ 572.533547][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 572.587781][T21403] tipc: Enabled bearer , priority 0 [ 572.630943][T21403] syzkaller0: entered promiscuous mode [ 572.636468][T21403] syzkaller0: entered allmulticast mode [ 572.703733][T21403] tipc: Resetting bearer [ 572.725333][T21401] tipc: Resetting bearer [ 572.744431][T21412] netlink: 'syz.0.4015': attribute type 21 has an invalid length. [ 572.763951][T21401] tipc: Disabling bearer [ 572.776380][T21412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4015'. [ 572.789444][T21409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4013'. [ 572.802337][T21409] bond3: entered promiscuous mode [ 572.819391][T21409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4013'. [ 572.828632][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 572.856661][T21409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4013'. [ 572.879594][T21409] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4013'. [ 572.946966][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 573.015614][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4017'. [ 573.077835][T21431] netlink: 448 bytes leftover after parsing attributes in process `syz.1.4019'. [ 573.078757][T21427] tipc: Enabled bearer , priority 0 [ 573.097906][T21427] syzkaller0: entered promiscuous mode [ 573.103411][T21427] syzkaller0: entered allmulticast mode [ 573.126713][ T24] IPVS: starting estimator thread 0... [ 573.237284][T21435] IPVS: using max 32 ests per chain, 76800 per kthread [ 573.253383][T21427] tipc: Resetting bearer [ 573.305458][T21437] lo speed is unknown, defaulting to 1000 [ 573.347638][T21426] tipc: Resetting bearer [ 573.450317][T21426] tipc: Disabling bearer [ 573.654303][T21450] tipc: Enabled bearer , priority 0 [ 573.792451][T21452] syzkaller0: entered promiscuous mode [ 573.814348][T21452] syzkaller0: entered allmulticast mode [ 573.924990][T21450] tipc: Resetting bearer [ 573.958528][T21450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4024'. [ 574.099820][T21464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4028'. [ 574.173111][T21468] sctp: [Deprecated]: syz.3.4029 (pid 21468) Use of int in max_burst socket option deprecated. [ 574.173111][T21468] Use struct sctp_assoc_value instead [ 574.180078][T21464] IPv6: sit1: Disabled Multicast RS [ 574.195180][T21464] sit1: entered allmulticast mode [ 574.278079][T21469] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 574.291431][T21469] bond5 (unregistering): Released all slaves [ 574.311812][T21447] tipc: Resetting bearer [ 574.329603][T21447] tipc: Disabling bearer [ 574.664206][T21495] netlink: 'syz.2.4034': attribute type 1 has an invalid length. [ 575.033123][T21522] netlink: 'syz.3.4043': attribute type 3 has an invalid length. [ 575.493413][T21563] IPVS: set_ctl: invalid protocol: 31 10.1.1.2:20002 [ 575.507442][T21563] netlink: 'syz.4.4051': attribute type 1 has an invalid length. [ 575.548445][T21563] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 575.562308][T21563] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 575.573860][T21563] bond3 (unregistering): Released all slaves [ 575.612181][T21567] bridge0: port 2(erspan0) entered blocking state [ 575.619502][T21567] bridge0: port 2(erspan0) entered disabled state [ 575.626181][T21567] erspan0: entered allmulticast mode [ 575.633747][T21567] erspan0: entered promiscuous mode [ 575.641051][T21567] bridge0: port 2(erspan0) entered blocking state [ 575.647739][T21567] bridge0: port 2(erspan0) entered forwarding state [ 576.104014][T21600] syzkaller0: entered promiscuous mode [ 576.112120][T21600] syzkaller0: entered allmulticast mode [ 576.482948][T21622] dummy0: entered promiscuous mode [ 576.490867][T21622] dummy0: left promiscuous mode [ 576.537087][ T8802] net_ratelimit: 22 callbacks suppressed [ 576.537109][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 576.657968][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 576.710544][T21640] lo speed is unknown, defaulting to 1000 [ 576.777801][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 576.928648][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 577.040878][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 577.205119][T21650] 8021q: adding VLAN 0 to HW filter on device bond4 [ 577.224064][T21651] 8021q: adding VLAN 0 to HW filter on device bond4 [ 577.232147][T21651] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 577.243427][T21651] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 577.263132][T21648] lo speed is unknown, defaulting to 1000 [ 577.269265][T21657] netlink: 'syz.4.4077': attribute type 4 has an invalid length. [ 577.277426][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 577.387506][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 577.498707][T21663] ip6gre1: entered allmulticast mode [ 577.517825][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 577.657402][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 577.787412][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 578.194739][T21719] sctp: [Deprecated]: syz.2.4095 (pid 21719) Use of int in max_burst socket option. [ 578.194739][T21719] Use struct sctp_assoc_value instead [ 578.226345][T21723] __nla_validate_parse: 15 callbacks suppressed [ 578.226367][T21723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4096'. [ 578.365702][T21733] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4100'. [ 578.750367][T21743] netlink: 'syz.2.4102': attribute type 1 has an invalid length. [ 578.760889][T21743] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4102'. [ 578.771118][T21743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4102'. [ 578.901261][T21747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4104'. [ 580.290211][T21759] wg1 speed is unknown, defaulting to 1000 [ 580.297738][T21759] wg1 speed is unknown, defaulting to 1000 [ 580.305254][T21759] wg1 speed is unknown, defaulting to 1000 [ 580.319318][T21759] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 580.340939][T21759] wg1 speed is unknown, defaulting to 1000 [ 580.349205][T21759] wg1 speed is unknown, defaulting to 1000 [ 580.356996][T21759] wg1 speed is unknown, defaulting to 1000 [ 580.364660][T21759] wg1 speed is unknown, defaulting to 1000 [ 580.364880][T21760] lo speed is unknown, defaulting to 1000 [ 580.373510][T21759] wg1 speed is unknown, defaulting to 1000 [ 580.385400][T21760] wg1 speed is unknown, defaulting to 1000 [ 580.403094][T21759] wg1 speed is unknown, defaulting to 1000 [ 580.419772][T21759] wg1 speed is unknown, defaulting to 1000 [ 581.441254][T21771] bond3: option mode: invalid value (254) [ 581.450436][T21771] bond3 (unregistering): Released all slaves [ 581.587804][ T8790] net_ratelimit: 32 callbacks suppressed [ 581.587825][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 581.707020][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 581.816912][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 581.927042][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 582.047256][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 582.134185][T21798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4120'. [ 582.177501][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 582.287726][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 582.397263][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 582.507025][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 582.627705][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 583.407553][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 586.617300][ T8790] net_ratelimit: 35 callbacks suppressed [ 586.617322][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 586.737301][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 586.847448][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 586.957442][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 587.067242][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 587.177439][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 587.287471][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 587.397317][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 587.507407][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 587.617290][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 591.647433][ T8802] net_ratelimit: 35 callbacks suppressed [ 591.647456][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 591.767577][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 591.877306][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 591.987465][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 592.107086][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 592.217406][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 592.327279][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 592.437357][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 592.547543][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 592.657261][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 596.747161][ T49] net_ratelimit: 36 callbacks suppressed [ 596.747185][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 596.867076][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 596.977432][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 597.087666][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 597.197463][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 597.307242][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 597.417693][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 597.527041][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 597.637285][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 597.747448][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 601.837311][ T8810] net_ratelimit: 36 callbacks suppressed [ 601.837334][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 601.957290][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 602.067266][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 602.177429][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 602.287838][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 602.397304][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 602.507226][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 602.617281][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 602.727260][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 602.837531][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 606.907050][ T49] net_ratelimit: 36 callbacks suppressed [ 606.907072][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 607.027430][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 607.137268][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 607.247572][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 607.357181][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 607.467316][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 607.577262][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 607.687611][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 607.797282][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 607.907298][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 611.986998][ T8790] net_ratelimit: 36 callbacks suppressed [ 611.987019][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 612.107268][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 612.217072][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 612.327329][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 612.437040][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 612.547450][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 612.657424][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 612.767664][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 612.877482][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 612.987386][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 614.127077][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 617.077465][ T8810] net_ratelimit: 36 callbacks suppressed [ 617.077486][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 617.197422][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 617.307303][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 617.427092][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 617.537362][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 617.648159][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 617.757433][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 617.867126][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 617.976969][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 618.087137][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 622.087433][ T8785] net_ratelimit: 35 callbacks suppressed [ 622.087455][ T8785] bond1: (slave macvlan2): failed to get link speed/duplex [ 622.207423][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 622.317264][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 622.427271][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 622.537433][ T8785] bond1: (slave macvlan2): failed to get link speed/duplex [ 622.657101][ T8785] bond1: (slave macvlan2): failed to get link speed/duplex [ 622.767854][ T8785] bond1: (slave macvlan2): failed to get link speed/duplex [ 622.877380][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 622.987453][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 623.097385][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 627.177445][ T13] net_ratelimit: 36 callbacks suppressed [ 627.177467][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 627.297288][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 627.407442][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 627.517733][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 627.627357][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 627.737326][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 627.847485][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 627.968354][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 628.076990][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 628.187303][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 632.257390][ T8802] net_ratelimit: 36 callbacks suppressed [ 632.257412][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 632.377442][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 632.487413][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 632.597305][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 632.707192][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 632.817227][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 632.927335][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 633.037482][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 633.147344][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 633.257416][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 637.339418][ T8802] net_ratelimit: 36 callbacks suppressed [ 637.339439][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 637.456978][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 637.566995][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 637.677317][ T8785] bond1: (slave macvlan2): failed to get link speed/duplex [ 637.787272][ T8785] bond1: (slave macvlan2): failed to get link speed/duplex [ 637.897134][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 638.006989][ T8785] bond1: (slave macvlan2): failed to get link speed/duplex [ 638.117227][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 638.227639][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 638.337499][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 642.428106][ T8790] net_ratelimit: 36 callbacks suppressed [ 642.428129][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 642.546991][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 642.657246][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 642.767313][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 642.877847][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 642.987009][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 643.097293][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 643.207393][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 643.317054][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 643.426994][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 647.497998][ T8785] net_ratelimit: 36 callbacks suppressed [ 647.498020][ T8785] bond1: (slave macvlan2): failed to get link speed/duplex [ 647.617396][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 647.727720][ T8785] bond1: (slave macvlan2): failed to get link speed/duplex [ 647.837299][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 647.947014][ T8785] bond1: (slave macvlan2): failed to get link speed/duplex [ 648.057042][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 648.177049][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 648.287400][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 648.397443][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 648.507323][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 652.577264][ T8810] net_ratelimit: 36 callbacks suppressed [ 652.577295][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 652.696963][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 652.807463][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 652.917247][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 653.027328][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 653.147315][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 653.258234][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 653.367403][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 653.477276][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 653.587464][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 657.677377][ T13] net_ratelimit: 36 callbacks suppressed [ 657.677399][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 657.797204][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 657.907380][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 658.017439][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 658.127794][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 658.237787][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 658.347312][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 658.457253][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 658.567386][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 658.677527][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 662.767984][ T8790] net_ratelimit: 36 callbacks suppressed [ 662.768006][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 662.887383][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 662.997281][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 663.107007][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 663.216902][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 663.327349][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 663.437370][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 663.547241][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 663.656929][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 663.767393][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 667.837456][ T3460] net_ratelimit: 36 callbacks suppressed [ 667.837477][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 667.957265][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 668.067068][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 668.177120][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 668.287315][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 668.397220][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 668.507472][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 668.617252][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 668.727416][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 668.836956][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 672.937210][ T3460] net_ratelimit: 36 callbacks suppressed [ 672.937232][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 673.057252][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 673.167056][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 673.277002][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 673.387291][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 673.497144][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 673.607513][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 673.717347][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 673.827246][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 673.937417][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 678.007701][ T3460] net_ratelimit: 36 callbacks suppressed [ 678.007722][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 678.127682][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 678.236990][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 678.347417][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 678.457258][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 678.567331][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 678.677137][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 678.787322][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 678.897247][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 679.007514][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 683.097323][ T49] net_ratelimit: 36 callbacks suppressed [ 683.097344][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 683.217400][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 683.327110][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 683.437028][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 683.557306][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 683.667247][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 683.777518][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 683.887608][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 683.997566][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 684.107046][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 688.107287][ T8790] net_ratelimit: 35 callbacks suppressed [ 688.107304][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 688.227520][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 688.337458][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 688.447937][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 688.557331][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 688.667440][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 688.787076][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 688.906980][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 689.027426][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 689.137218][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 693.117648][ T3460] net_ratelimit: 35 callbacks suppressed [ 693.117670][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 693.237262][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 693.347475][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 693.457156][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 693.567648][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 693.677980][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 693.787788][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 693.897668][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 694.007517][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 694.116990][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 698.207639][ T49] net_ratelimit: 36 callbacks suppressed [ 698.207662][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 698.327457][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 698.437228][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 698.547341][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 698.657432][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 698.767347][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 698.877306][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 698.997283][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 699.107777][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 699.217441][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 703.307375][ T8790] net_ratelimit: 36 callbacks suppressed [ 703.307396][ T8790] bond1: (slave macvlan2): failed to get link speed/duplex [ 703.427217][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 703.537312][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 703.647268][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 703.757253][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 703.867385][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 703.977212][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 704.087226][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 704.197352][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 704.307233][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 706.287612][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 708.317350][ T8810] net_ratelimit: 35 callbacks suppressed [ 708.317368][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 708.437400][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 708.547266][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 708.657248][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 708.767442][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 708.877328][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 708.987228][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 709.097320][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 709.207313][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 709.317254][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 713.387372][ T8810] net_ratelimit: 36 callbacks suppressed [ 713.387393][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 713.507154][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 713.617205][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 713.727398][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 713.837412][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 713.947247][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 714.057281][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 714.167429][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 714.277277][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 714.387315][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 718.497956][ T3460] net_ratelimit: 36 callbacks suppressed [ 718.497979][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 718.616954][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 718.727360][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 718.837384][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 718.947301][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 719.057191][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 719.167468][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 719.277263][ T13] bond1: (slave macvlan2): failed to get link speed/duplex [ 719.387009][ T8810] bond1: (slave macvlan2): failed to get link speed/duplex [ 719.497359][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 723.587231][ T8802] net_ratelimit: 36 callbacks suppressed [ 723.587255][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 723.707212][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 723.817305][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 723.927243][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 724.036944][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 724.147027][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 724.257185][ T49] bond1: (slave macvlan2): failed to get link speed/duplex [ 724.367368][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 724.477315][ T3460] bond1: (slave macvlan2): failed to get link speed/duplex [ 724.587168][ T8802] bond1: (slave macvlan2): failed to get link speed/duplex [ 724.848077][ T31] INFO: task kworker/0:3:5866 blocked for more than 143 seconds. [ 724.855852][ T31] Not tainted syzkaller #0 [ 724.862426][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 724.871991][ T31] task:kworker/0:3 state:D stack:22760 pid:5866 tgid:5866 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 724.884401][ T31] Workqueue: events rfkill_sync_work [ 724.890061][ T31] Call Trace: [ 724.893354][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 724.896277][ T31] __schedule+0x1798/0x4cc0 [ 724.901329][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 724.907391][ T31] ? __pfx___schedule+0x10/0x10 [ 724.912289][ T31] ? schedule+0x91/0x360 [ 724.916567][ T31] schedule+0x165/0x360 [ 724.920815][ T31] schedule_preempt_disabled+0x13/0x30 [ 724.926283][ T31] __mutex_lock+0x7e6/0x1350 [ 724.932009][ T31] ? __mutex_lock+0x5bb/0x1350 [ 724.937374][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 724.942688][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 724.948492][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 724.953714][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 724.960465][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 724.967409][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 724.973162][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 724.979175][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 724.984922][ T31] rfkill_set_block+0x1d2/0x440 [ 724.990657][ T31] rfkill_sync_work+0x114/0x200 [ 724.995533][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 725.001845][ T31] process_scheduled_works+0xae1/0x17b0 [ 725.042477][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 725.056671][ T31] worker_thread+0x8a0/0xda0 [ 725.061455][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 725.067948][ T31] ? __kthread_parkme+0x7b/0x200 [ 725.072919][ T31] kthread+0x70e/0x8a0 [ 725.078299][ T31] ? __pfx_worker_thread+0x10/0x10 [ 725.083450][ T31] ? __pfx_kthread+0x10/0x10 [ 725.088325][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.093550][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.098917][ T31] ? __pfx_kthread+0x10/0x10 [ 725.103543][ T31] ret_from_fork+0x439/0x7d0 [ 725.108313][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 725.113439][ T31] ? __switch_to_asm+0x39/0x70 [ 725.118380][ T31] ? __switch_to_asm+0x33/0x70 [ 725.123166][ T31] ? __pfx_kthread+0x10/0x10 [ 725.127860][ T31] ret_from_fork_asm+0x1a/0x30 [ 725.132661][ T31] [ 725.135716][ T31] INFO: task kworker/0:12:6355 blocked for more than 143 seconds. [ 725.143702][ T31] Not tainted syzkaller #0 [ 725.148730][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 725.157540][ T31] task:kworker/0:12 state:D stack:23600 pid:6355 tgid:6355 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 725.169675][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 725.176384][ T31] Call Trace: [ 725.179715][ T31] [ 725.182733][ T31] __schedule+0x1798/0x4cc0 [ 725.187458][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 725.192855][ T31] ? __pfx___schedule+0x10/0x10 [ 725.197758][ T31] ? schedule+0x91/0x360 [ 725.201995][ T31] schedule+0x165/0x360 [ 725.206134][ T31] schedule_preempt_disabled+0x13/0x30 [ 725.211624][ T31] __mutex_lock+0x7e6/0x1350 [ 725.216244][ T31] ? __mutex_lock+0x5bb/0x1350 [ 725.221053][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 725.227364][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 725.232438][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 725.238237][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 725.243963][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 725.250185][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 725.255978][ T31] process_scheduled_works+0xae1/0x17b0 [ 725.261684][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 725.267749][ T31] worker_thread+0x8a0/0xda0 [ 725.272366][ T31] kthread+0x70e/0x8a0 [ 725.276430][ T31] ? __pfx_worker_thread+0x10/0x10 [ 725.281600][ T31] ? __pfx_kthread+0x10/0x10 [ 725.286372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.291646][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.296921][ T31] ? __pfx_kthread+0x10/0x10 [ 725.301532][ T31] ret_from_fork+0x439/0x7d0 [ 725.306115][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 725.311261][ T31] ? __switch_to_asm+0x39/0x70 [ 725.316017][ T31] ? __switch_to_asm+0x33/0x70 [ 725.320908][ T31] ? __pfx_kthread+0x10/0x10 [ 725.325495][ T31] ret_from_fork_asm+0x1a/0x30 [ 725.330404][ T31] [ 725.333483][ T31] INFO: task syz.3.4043:21519 blocked for more than 143 seconds. [ 725.341444][ T31] Not tainted syzkaller #0 [ 725.346385][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 725.355086][ T31] task:syz.3.4043 state:D stack:26920 pid:21519 tgid:21519 ppid:17937 task_flags:0x400040 flags:0x00004004 [ 725.367143][ T31] Call Trace: [ 725.370428][ T31] [ 725.373372][ T31] __schedule+0x1798/0x4cc0 [ 725.377906][ T31] ? validate_chain+0x897/0x2140 [ 725.382848][ T31] ? __lock_acquire+0xab9/0xd20 [ 725.387757][ T31] ? __pfx___schedule+0x10/0x10 [ 725.392638][ T31] ? schedule+0x91/0x360 [ 725.396923][ T31] schedule+0x165/0x360 [ 725.401109][ T31] schedule_timeout+0x9a/0x270 [ 725.405868][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 725.411361][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 725.416719][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.421934][ T31] ? wait_for_completion+0x267/0x5d0 [ 725.427303][ T31] wait_for_completion+0x2bf/0x5d0 [ 725.432424][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 725.438111][ T31] ? __flush_work+0xd2/0xbc0 [ 725.442706][ T31] ? __flush_work+0xd2/0xbc0 [ 725.447340][ T31] __flush_work+0x9b9/0xbc0 [ 725.451849][ T31] ? __flush_work+0xd2/0xbc0 [ 725.456437][ T31] ? __pfx___flush_work+0x10/0x10 [ 725.461498][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 725.466865][ T31] ? __pfx___cancel_work+0x10/0x10 [ 725.471991][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 725.477653][ T31] __cancel_work_sync+0xbe/0x110 [ 725.482595][ T31] rfkill_unregister+0x92/0x220 [ 725.487510][ T31] nfc_unregister_device+0x96/0x2a0 [ 725.492720][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 725.498562][ T31] virtual_ncidev_close+0x56/0x90 [ 725.503607][ T31] __fput+0x449/0xa70 [ 725.507618][ T31] task_work_run+0x1d1/0x260 [ 725.512210][ T31] ? __pfx_task_work_run+0x10/0x10 [ 725.517356][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 725.522836][ T31] exit_to_user_mode_loop+0xec/0x110 [ 725.528203][ T31] do_syscall_64+0x2bd/0x3b0 [ 725.532806][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.538147][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.544312][ T31] ? clear_bhb_loop+0x60/0xb0 [ 725.549114][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.555002][ T31] RIP: 0033:0x7fb2ac78eec9 [ 725.559434][ T31] RSP: 002b:00007fffe14894c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 725.567922][ T31] RAX: 0000000000000000 RBX: 000000000008c5f6 RCX: 00007fb2ac78eec9 [ 725.575893][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 725.583906][ T31] RBP: 00007fb2ac9e7da0 R08: 0000000000000001 R09: 00000017e14897bf [ 725.591934][ T31] R10: 0000001b33120000 R11: 0000000000000246 R12: 00007fb2ac9e5fac [ 725.599937][ T31] R13: 00007fb2ac9e5fa0 R14: ffffffffffffffff R15: 00007fffe14895e0 [ 725.607992][ T31] [ 725.611019][ T31] INFO: task syz.0.4101:21735 blocked for more than 144 seconds. [ 725.623576][ T31] Not tainted syzkaller #0 [ 725.628583][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 725.637297][ T31] task:syz.0.4101 state:D stack:27656 pid:21735 tgid:21734 ppid:17649 task_flags:0x400140 flags:0x00004004 [ 725.649916][ T31] Call Trace: [ 725.653206][ T31] [ 725.656146][ T31] __schedule+0x1798/0x4cc0 [ 725.660703][ T31] ? __lock_acquire+0xab9/0xd20 [ 725.665574][ T31] ? __lock_acquire+0xab9/0xd20 [ 725.670463][ T31] ? __pfx___schedule+0x10/0x10 [ 725.675317][ T31] ? schedule+0x91/0x360 [ 725.679597][ T31] schedule+0x165/0x360 [ 725.683762][ T31] schedule_preempt_disabled+0x13/0x30 [ 725.689258][ T31] __mutex_lock+0x7e6/0x1350 [ 725.693845][ T31] ? __mutex_lock+0x5bb/0x1350 [ 725.698636][ T31] ? rfkill_fop_open+0x12d/0x820 [ 725.703566][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 725.708649][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 725.713940][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 725.719348][ T31] rfkill_fop_open+0x12d/0x820 [ 725.724206][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 725.729797][ T31] misc_open+0x2b9/0x330 [ 725.734068][ T31] chrdev_open+0x4cc/0x5e0 [ 725.738548][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 725.743593][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 725.749971][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 725.754907][ T31] do_dentry_open+0x953/0x13f0 [ 725.759720][ T31] vfs_open+0x3b/0x340 [ 725.763794][ T31] ? path_openat+0x2ecd/0x3830 [ 725.768647][ T31] path_openat+0x2ee5/0x3830 [ 725.773294][ T31] ? arch_stack_walk+0xfc/0x150 [ 725.778171][ T31] ? stack_depot_save_flags+0x40/0x860 [ 725.783639][ T31] ? __pfx_path_openat+0x10/0x10 [ 725.788618][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.794674][ T31] ? look_up_lock_class+0x74/0x170 [ 725.799809][ T31] do_filp_open+0x1fa/0x410 [ 725.804390][ T31] ? __lock_acquire+0xab9/0xd20 [ 725.809358][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 725.814383][ T31] ? _raw_spin_unlock+0x28/0x50 [ 725.819331][ T31] ? alloc_fd+0x64c/0x6c0 [ 725.823699][ T31] do_sys_openat2+0x121/0x1c0 [ 725.828428][ T31] ? __se_sys_futex+0x36f/0x400 [ 725.833269][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 725.838490][ T31] ? rcu_is_watching+0x15/0xb0 [ 725.843259][ T31] __x64_sys_openat+0x138/0x170 [ 725.848146][ T31] do_syscall_64+0xfa/0x3b0 [ 725.852653][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.858375][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.864667][ T31] ? clear_bhb_loop+0x60/0xb0 [ 725.869416][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.875591][ T31] RIP: 0033:0x7f353918eec9 [ 725.880175][ T31] RSP: 002b:00007f353a021038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 725.890600][ T31] RAX: ffffffffffffffda RBX: 00007f35393e5fa0 RCX: 00007f353918eec9 [ 725.898763][ T31] RDX: 0000000000000100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 725.906911][ T31] RBP: 00007f3539211f91 R08: 0000000000000000 R09: 0000000000000000 [ 725.915011][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.923121][ T31] R13: 00007f35393e6038 R14: 00007f35393e5fa0 R15: 00007ffc1063f328 [ 725.931176][ T31] [ 725.934344][ T31] INFO: task syz.0.4101:21736 blocked for more than 144 seconds. [ 725.942142][ T31] Not tainted syzkaller #0 [ 725.947196][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 725.955970][ T31] task:syz.0.4101 state:D stack:27808 pid:21736 tgid:21734 ppid:17649 task_flags:0x400040 flags:0x00004004 [ 725.968082][ T31] Call Trace: [ 725.971471][ T31] [ 725.974393][ T31] __schedule+0x1798/0x4cc0 [ 725.978935][ T31] ? kasan_save_free_info+0x46/0x50 [ 725.984132][ T31] ? __lock_acquire+0xab9/0xd20 [ 725.989042][ T31] ? __lock_acquire+0xab9/0xd20 [ 725.994166][ T31] ? __pfx___schedule+0x10/0x10 [ 725.999127][ T31] ? schedule+0x91/0x360 [ 726.003419][ T31] schedule+0x165/0x360 [ 726.007645][ T31] schedule_preempt_disabled+0x13/0x30 [ 726.013131][ T31] __mutex_lock+0x7e6/0x1350 [ 726.017756][ T31] ? __mutex_lock+0x5bb/0x1350 [ 726.022520][ T31] ? misc_open+0x51/0x330 [ 726.026908][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 726.032065][ T31] misc_open+0x51/0x330 [ 726.036226][ T31] chrdev_open+0x4cc/0x5e0 [ 726.040739][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 726.045722][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 726.052289][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 726.057293][ T31] do_dentry_open+0x953/0x13f0 [ 726.062088][ T31] vfs_open+0x3b/0x340 [ 726.066153][ T31] ? path_openat+0x2ecd/0x3830 [ 726.070963][ T31] path_openat+0x2ee5/0x3830 [ 726.075554][ T31] ? arch_stack_walk+0xfc/0x150 [ 726.080457][ T31] ? stack_depot_save_flags+0x40/0x860 [ 726.086552][ T31] ? __pfx_path_openat+0x10/0x10 [ 726.091653][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.097816][ T31] do_filp_open+0x1fa/0x410 [ 726.102468][ T31] ? __lock_acquire+0xab9/0xd20 [ 726.107547][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 726.112624][ T31] ? _raw_spin_unlock+0x28/0x50 [ 726.117933][ T31] ? alloc_fd+0x64c/0x6c0 [ 726.122310][ T31] do_sys_openat2+0x121/0x1c0 [ 726.127512][ T31] ? __se_sys_futex+0x36f/0x400 [ 726.132421][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 726.137771][ T31] ? rcu_is_watching+0x15/0xb0 [ 726.142563][ T31] __x64_sys_openat+0x138/0x170 [ 726.147492][ T31] do_syscall_64+0xfa/0x3b0 [ 726.152018][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 726.157295][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.163415][ T31] ? clear_bhb_loop+0x60/0xb0 [ 726.168164][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.174302][ T31] RIP: 0033:0x7f353918eec9 [ 726.179079][ T31] RSP: 002b:00007f353a000038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 726.187576][ T31] RAX: ffffffffffffffda RBX: 00007f35393e6090 RCX: 00007f353918eec9 [ 726.195563][ T31] RDX: 0000000000020d00 RSI: 0000200000000b80 RDI: ffffffffffffff9c [ 726.203700][ T31] RBP: 00007f3539211f91 R08: 0000000000000000 R09: 0000000000000000 [ 726.211776][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.219899][ T31] R13: 00007f35393e6128 R14: 00007f35393e6090 R15: 00007ffc1063f328 [ 726.228045][ T31] [ 726.231186][ T31] INFO: task syz.0.4101:21737 blocked for more than 144 seconds. [ 726.239058][ T31] Not tainted syzkaller #0 [ 726.244087][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.253375][ T31] task:syz.0.4101 state:D stack:26856 pid:21737 tgid:21734 ppid:17649 task_flags:0x400040 flags:0x00004004 [ 726.265811][ T31] Call Trace: [ 726.269176][ T31] [ 726.272110][ T31] __schedule+0x1798/0x4cc0 [ 726.276608][ T31] ? kasan_save_free_info+0x46/0x50 [ 726.281874][ T31] ? __lock_acquire+0xab9/0xd20 [ 726.286799][ T31] ? __lock_acquire+0xab9/0xd20 [ 726.291699][ T31] ? __pfx___schedule+0x10/0x10 [ 726.296586][ T31] ? schedule+0x91/0x360 [ 726.300881][ T31] schedule+0x165/0x360 [ 726.305032][ T31] schedule_preempt_disabled+0x13/0x30 [ 726.310548][ T31] __mutex_lock+0x7e6/0x1350 [ 726.315138][ T31] ? __mutex_lock+0x5bb/0x1350 [ 726.319957][ T31] ? misc_open+0x51/0x330 [ 726.324368][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 726.329435][ T31] misc_open+0x51/0x330 [ 726.333617][ T31] chrdev_open+0x4cc/0x5e0 [ 726.338085][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 726.343013][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 726.349384][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 726.354319][ T31] do_dentry_open+0x953/0x13f0 [ 726.359154][ T31] vfs_open+0x3b/0x340 [ 726.363208][ T31] ? path_openat+0x2ecd/0x3830 [ 726.368104][ T31] path_openat+0x2ee5/0x3830 [ 726.372719][ T31] ? arch_stack_walk+0xfc/0x150 [ 726.377636][ T31] ? stack_depot_save_flags+0x40/0x860 [ 726.383096][ T31] ? __pfx_path_openat+0x10/0x10 [ 726.388078][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.394143][ T31] do_filp_open+0x1fa/0x410 [ 726.398682][ T31] ? __lock_acquire+0xab9/0xd20 [ 726.403554][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 726.408666][ T31] ? _raw_spin_unlock+0x28/0x50 [ 726.413548][ T31] ? alloc_fd+0x64c/0x6c0 [ 726.417955][ T31] do_sys_openat2+0x121/0x1c0 [ 726.422654][ T31] ? __se_sys_futex+0x36f/0x400 [ 726.427563][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 726.432777][ T31] ? rcu_is_watching+0x15/0xb0 [ 726.437604][ T31] __x64_sys_openat+0x138/0x170 [ 726.442495][ T31] do_syscall_64+0xfa/0x3b0 [ 726.447066][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 726.452282][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.458387][ T31] ? clear_bhb_loop+0x60/0xb0 [ 726.463146][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.469089][ T31] RIP: 0033:0x7f353918eec9 [ 726.473610][ T31] RSP: 002b:00007f3539fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 726.482261][ T31] RAX: ffffffffffffffda RBX: 00007f35393e6180 RCX: 00007f353918eec9 [ 726.490917][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 726.498923][ T31] RBP: 00007f3539211f91 R08: 0000000000000000 R09: 0000000000000000 [ 726.506958][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.514952][ T31] R13: 00007f35393e6218 R14: 00007f35393e6180 R15: 00007ffc1063f328 [ 726.522968][ T31] [ 726.525990][ T31] INFO: task syz.2.4102:21742 blocked for more than 145 seconds. [ 726.533844][ T31] Not tainted syzkaller #0 [ 726.538838][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.547579][ T31] task:syz.2.4102 state:D stack:26824 pid:21742 tgid:21741 ppid:17268 task_flags:0x400040 flags:0x00004004 [ 726.559583][ T31] Call Trace: [ 726.562853][ T31] [ 726.565770][ T31] __schedule+0x1798/0x4cc0 [ 726.570309][ T31] ? kasan_save_free_info+0x46/0x50 [ 726.575504][ T31] ? __lock_acquire+0xab9/0xd20 [ 726.580388][ T31] ? __lock_acquire+0xab9/0xd20 [ 726.585257][ T31] ? __pfx___schedule+0x10/0x10 [ 726.590139][ T31] ? schedule+0x91/0x360 [ 726.594372][ T31] schedule+0x165/0x360 [ 726.598538][ T31] schedule_preempt_disabled+0x13/0x30 [ 726.603983][ T31] __mutex_lock+0x7e6/0x1350 [ 726.608689][ T31] ? __mutex_lock+0x5bb/0x1350 [ 726.613471][ T31] ? misc_open+0x51/0x330 [ 726.617821][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 726.622849][ T31] misc_open+0x51/0x330 [ 726.627068][ T31] chrdev_open+0x4cc/0x5e0 [ 726.631505][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 726.636432][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 726.642875][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 726.647875][ T31] do_dentry_open+0x953/0x13f0 [ 726.652668][ T31] vfs_open+0x3b/0x340 [ 726.656795][ T31] ? path_openat+0x2ecd/0x3830 [ 726.661564][ T31] path_openat+0x2ee5/0x3830 [ 726.666141][ T31] ? arch_stack_walk+0xfc/0x150 [ 726.671039][ T31] ? stack_depot_save_flags+0x40/0x860 [ 726.676502][ T31] ? __pfx_path_openat+0x10/0x10 [ 726.681491][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.688046][ T31] do_filp_open+0x1fa/0x410 [ 726.692567][ T31] ? __lock_acquire+0xab9/0xd20 [ 726.697461][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 726.702517][ T31] ? _raw_spin_unlock+0x28/0x50 [ 726.707428][ T31] ? alloc_fd+0x64c/0x6c0 [ 726.711954][ T31] do_sys_openat2+0x121/0x1c0 [ 726.716619][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 726.721847][ T31] ? exc_page_fault+0x76/0xf0 [ 726.726514][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 726.731833][ T31] __x64_sys_openat+0x138/0x170 [ 726.736678][ T31] do_syscall_64+0xfa/0x3b0 [ 726.741220][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 726.746405][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.752513][ T31] ? clear_bhb_loop+0x60/0xb0 [ 726.757230][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.763158][ T31] RIP: 0033:0x7f833e78eec9 [ 726.770984][ T31] RSP: 002b:00007f833f5f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 726.779483][ T31] RAX: ffffffffffffffda RBX: 00007f833e9e5fa0 RCX: 00007f833e78eec9 [ 726.787551][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 726.795542][ T31] RBP: 00007f833e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 726.803575][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.811616][ T31] R13: 00007f833e9e6038 R14: 00007f833e9e5fa0 R15: 00007ffe7b7cebd8 [ 726.819678][ T31] [ 726.822715][ T31] INFO: task syz.1.4104:21745 blocked for more than 145 seconds. [ 726.830476][ T31] Not tainted syzkaller #0 [ 726.835419][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.844092][ T31] task:syz.1.4104 state:D stack:28328 pid:21745 tgid:21744 ppid:16969 task_flags:0x400040 flags:0x00004004 [ 726.856136][ T31] Call Trace: [ 726.859459][ T31] [ 726.862403][ T31] __schedule+0x1798/0x4cc0 [ 726.866972][ T31] ? kasan_save_free_info+0x46/0x50 [ 726.872227][ T31] ? __lock_acquire+0xab9/0xd20 [ 726.877132][ T31] ? __lock_acquire+0xab9/0xd20 [ 726.881999][ T31] ? __pfx___schedule+0x10/0x10 [ 726.886934][ T31] ? schedule+0x91/0x360 [ 726.891211][ T31] schedule+0x165/0x360 [ 726.895355][ T31] schedule_preempt_disabled+0x13/0x30 [ 726.900833][ T31] __mutex_lock+0x7e6/0x1350 [ 726.905434][ T31] ? __mutex_lock+0x5bb/0x1350 [ 726.910254][ T31] ? misc_open+0x51/0x330 [ 726.914585][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 726.919645][ T31] misc_open+0x51/0x330 [ 726.923795][ T31] chrdev_open+0x4cc/0x5e0 [ 726.928561][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 726.933514][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 726.939883][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 726.944837][ T31] do_dentry_open+0x953/0x13f0 [ 726.949635][ T31] vfs_open+0x3b/0x340 [ 726.953685][ T31] ? path_openat+0x2ecd/0x3830 [ 726.958491][ T31] path_openat+0x2ee5/0x3830 [ 726.963109][ T31] ? arch_stack_walk+0xfc/0x150 [ 726.968008][ T31] ? stack_depot_save_flags+0x40/0x860 [ 726.973465][ T31] ? __pfx_path_openat+0x10/0x10 [ 726.978404][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.984472][ T31] do_filp_open+0x1fa/0x410 [ 726.989019][ T31] ? __lock_acquire+0xab9/0xd20 [ 726.993860][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 726.998915][ T31] ? _raw_spin_unlock+0x28/0x50 [ 727.003754][ T31] ? alloc_fd+0x64c/0x6c0 [ 727.008116][ T31] do_sys_openat2+0x121/0x1c0 [ 727.012781][ T31] ? __se_sys_futex+0x36f/0x400 [ 727.017797][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 727.023152][ T31] ? rcu_is_watching+0x15/0xb0 [ 727.027972][ T31] __x64_sys_openat+0x138/0x170 [ 727.032819][ T31] do_syscall_64+0xfa/0x3b0 [ 727.037354][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.042559][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.048685][ T31] ? clear_bhb_loop+0x60/0xb0 [ 727.053385][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.059373][ T31] RIP: 0033:0x7fce7758eec9 [ 727.063793][ T31] RSP: 002b:00007fce7849a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 727.072253][ T31] RAX: ffffffffffffffda RBX: 00007fce777e5fa0 RCX: 00007fce7758eec9 [ 727.080251][ T31] RDX: 0000000000020000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 727.088296][ T31] RBP: 00007fce77611f91 R08: 0000000000000000 R09: 0000000000000000 [ 727.096279][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.106855][ T31] R13: 00007fce777e6038 R14: 00007fce777e5fa0 R15: 00007ffe77091168 [ 727.114855][ T31] [ 727.117956][ T31] [ 727.117956][ T31] Showing all locks held in the system: [ 727.125674][ T31] 1 lock held by khungtaskd/31: [ 727.130578][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 727.140504][ T31] 2 locks held by getty/5630: [ 727.145174][ T31] #0: ffff8880337760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 727.155017][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 727.165164][ T31] 4 locks held by kworker/0:3/5866: [ 727.170527][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 727.181593][ T31] #1: ffffc90003f07bc0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 727.194063][ T31] #2: ffffffff8f80a9c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 727.204188][ T31] #3: ffff888033e54100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 727.213953][ T31] 3 locks held by kworker/0:12/6355: [ 727.219379][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 727.230400][ T31] #1: ffffc90005a87bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 727.243927][ T31] #2: ffffffff8f80a9c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 727.255422][ T31] 1 lock held by syz.3.4043/21519: [ 727.260600][ T31] #0: ffff888033e54100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 727.270440][ T31] 2 locks held by syz.0.4101/21735: [ 727.275630][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.284118][ T31] #1: ffffffff8f80a9c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 727.294190][ T31] 1 lock held by syz.0.4101/21736: [ 727.299334][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.307847][ T31] 1 lock held by syz.0.4101/21737: [ 727.312980][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.321534][ T31] 1 lock held by syz.2.4102/21742: [ 727.326650][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.335158][ T31] 1 lock held by syz.1.4104/21745: [ 727.340439][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.348968][ T31] 1 lock held by syz.4.4121/21801: [ 727.354069][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.362550][ T31] 1 lock held by syz.4.4121/21802: [ 727.367666][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.376095][ T31] 1 lock held by syz.4.4121/21803: [ 727.381228][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.389688][ T31] 1 lock held by syz-executor/21806: [ 727.395032][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.403610][ T31] 1 lock held by syz-executor/21810: [ 727.409049][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.417801][ T31] 1 lock held by syz-executor/21811: [ 727.423112][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.431605][ T31] 1 lock held by syz-executor/21812: [ 727.436946][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.445716][ T31] 1 lock held by syz-executor/21814: [ 727.451110][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.459654][ T31] 1 lock held by syz-executor/21817: [ 727.464926][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.473451][ T31] 1 lock held by syz-executor/21821: [ 727.478796][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.487305][ T31] 1 lock held by syz-executor/21822: [ 727.492596][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.501095][ T31] 1 lock held by syz-executor/21823: [ 727.506379][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.514868][ T31] 1 lock held by syz-executor/21825: [ 727.520192][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.528699][ T31] 1 lock held by syz-executor/21827: [ 727.534066][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.542584][ T31] 1 lock held by syz-executor/21831: [ 727.547959][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.556448][ T31] 1 lock held by syz-executor/21832: [ 727.561849][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.570488][ T31] 1 lock held by syz-executor/21833: [ 727.575795][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.584313][ T31] 1 lock held by syz-executor/21835: [ 727.589639][ T31] #0: ffffffff8e9c2788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 727.598213][ T31] [ 727.600542][ T31] ============================================= [ 727.600542][ T31] [ 727.609300][ T31] NMI backtrace for cpu 1 [ 727.609314][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 727.609327][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 727.609334][ T31] Call Trace: [ 727.609339][ T31] [ 727.609344][ T31] dump_stack_lvl+0x189/0x250 [ 727.609365][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.609377][ T31] ? __pfx__printk+0x10/0x10 [ 727.609398][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 727.609416][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 727.609432][ T31] ? __pfx__printk+0x10/0x10 [ 727.609447][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 727.609466][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 727.609483][ T31] watchdog+0xf93/0xfe0 [ 727.609504][ T31] ? watchdog+0x1de/0xfe0 [ 727.609521][ T31] kthread+0x70e/0x8a0 [ 727.609535][ T31] ? __pfx_watchdog+0x10/0x10 [ 727.609548][ T31] ? __pfx_kthread+0x10/0x10 [ 727.609561][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 727.609572][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.609582][ T31] ? __pfx_kthread+0x10/0x10 [ 727.609595][ T31] ret_from_fork+0x439/0x7d0 [ 727.609606][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 727.609619][ T31] ? __switch_to_asm+0x39/0x70 [ 727.609631][ T31] ? __switch_to_asm+0x33/0x70 [ 727.609643][ T31] ? __pfx_kthread+0x10/0x10 [ 727.609655][ T31] ret_from_fork_asm+0x1a/0x30 [ 727.609676][ T31] [ 727.609680][ T31] Sending NMI from CPU 1 to CPUs 0: [ 727.755426][ C0] NMI backtrace for cpu 0 [ 727.755444][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 727.755463][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 727.755475][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 727.755499][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 69 14 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 727.755515][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 727.755531][ C0] RAX: 85896328fd676700 RBX: ffffffff81968528 RCX: 85896328fd676700 [ 727.755544][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b22b6 RDI: ffffffff8be33f80 [ 727.755557][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 727.755570][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa30830 [ 727.755584][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 727.755595][ C0] FS: 0000000000000000(0000) GS:ffff888125c39000(0000) knlGS:0000000000000000 [ 727.755609][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 727.755621][ C0] CR2: 000055d813dbd000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 727.755637][ C0] Call Trace: [ 727.755645][ C0] [ 727.755652][ C0] default_idle+0x13/0x20 [ 727.755673][ C0] default_idle_call+0x74/0xb0 [ 727.755695][ C0] do_idle+0x1e8/0x510 [ 727.755723][ C0] ? __pfx_do_idle+0x10/0x10 [ 727.755756][ C0] cpu_startup_entry+0x44/0x60 [ 727.755781][ C0] rest_init+0x2de/0x300 [ 727.755804][ C0] start_kernel+0x3a9/0x410 [ 727.755830][ C0] x86_64_start_reservations+0x24/0x30 [ 727.755850][ C0] x86_64_start_kernel+0x143/0x1c0 [ 727.755869][ C0] common_startup_64+0x13e/0x147 [ 727.755903][ C0] [ 727.756427][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 727.936933][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 727.946093][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 727.956148][ T31] Call Trace: [ 727.959432][ T31] [ 727.962362][ T31] dump_stack_lvl+0x99/0x250 [ 727.966958][ T31] ? __asan_memcpy+0x40/0x70 [ 727.971558][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.976756][ T31] ? __pfx__printk+0x10/0x10 [ 727.981365][ T31] vpanic+0x281/0x750 [ 727.985348][ T31] ? __pfx_vpanic+0x10/0x10 [ 727.989846][ T31] ? preempt_schedule+0xae/0xc0 [ 727.994694][ T31] ? preempt_schedule_common+0x83/0xd0 [ 728.000157][ T31] panic+0xb9/0xc0 [ 728.003878][ T31] ? __pfx_panic+0x10/0x10 [ 728.008291][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 728.013672][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 728.019833][ T31] watchdog+0xfd2/0xfe0 [ 728.023995][ T31] ? watchdog+0x1de/0xfe0 [ 728.028333][ T31] kthread+0x70e/0x8a0 [ 728.032440][ T31] ? __pfx_watchdog+0x10/0x10 [ 728.037120][ T31] ? __pfx_kthread+0x10/0x10 [ 728.041716][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 728.046914][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 728.052116][ T31] ? __pfx_kthread+0x10/0x10 [ 728.056705][ T31] ret_from_fork+0x439/0x7d0 [ 728.061298][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 728.066495][ T31] ? __switch_to_asm+0x39/0x70 [ 728.071776][ T31] ? __switch_to_asm+0x33/0x70 [ 728.076538][ T31] ? __pfx_kthread+0x10/0x10 [ 728.081128][ T31] ret_from_fork_asm+0x1a/0x30 [ 728.085909][ T31] [ 728.089223][ T31] Kernel Offset: disabled [ 728.093550][ T31] Rebooting in 86400 seconds..