last executing test programs: 21.420119839s ago: executing program 3 (id=2644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000f5ff000000000000000000000004f4ffffffffffff00000000000000000000000000000a00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000300)=0x101) connect$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={r5, 0x716a, 0x10}, 0xc) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4004800, &(0x7f0000000180)={0xa, 0x4c22, 0x10003, @remote, 0xfffffffc}, 0x1c) 21.22685328s ago: executing program 3 (id=2645): syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x80800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x4, @none, 0x7, 0x1}, 0xe) 21.039796874s ago: executing program 3 (id=2647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0xb, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x40}}, 0x20000041) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x58}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) 20.728992671s ago: executing program 3 (id=2650): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006120600800a0000040502"], 0x528}}, 0xc000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)="ad56b6c582fcf2a9ae0dc7c75854c7beef915d564c90c200", 0x11) r2 = accept4(r0, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r5, 0x5}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xffffffff, 0x5, 0x6f0, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8044) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf2517000000400006803c00040067636d28"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) r10 = socket(0x40000000015, 0x5, 0x0) bind$inet(r10, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8000000000000001}) sendto$inet(r10, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x2, 0x1, @loopback}, 0x10) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r12, 0x112, 0x4, 0x0, &(0x7f00000000c0)) sendmmsg$inet(r11, &(0x7f0000000580), 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x104}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 20.285101251s ago: executing program 3 (id=2655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x3, 'pim6reg1\x00', {0x6}, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x1, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x7}}}, 0x24}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFCTH_POLICY={0x0, 0x4, 0x0, 0x1, {0x0, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x0, 0x14}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4e045) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) (async) socket$netlink(0x10, 0x3, 0xe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$inet(0x2, 0x3, 0x33) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r6, &(0x7f0000000040)={'c', ' *:* ', 'w\x00'}, 0x8) (async) vmsplice(r6, &(0x7f00000000c0), 0x0, 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) (async) splice(r5, 0x0, r7, 0x0, 0x10d00, 0xf) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) ioctl$RFKILL_IOC_MAX_SIZE(r5, 0x2, &(0x7f0000000180)=0x8) (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r3, &(0x7f0000000000)="0a000200010078", 0x7) 19.984760294s ago: executing program 3 (id=2658): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d0000000400008004000000ffffffff05000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d5588e2690a47640fa5c936eb46dc1d4e39c277f71fdf1b1386950979c153f0f3c5b5ec59f0d0a367a0a710bf82816532301c72ceb9e1a9dbb718c476f9e7fc87894385342e945fa90e55373df330420b6e87ffe43ed81d590403d5415f8292e19e456b643cb0234923eada6f666f872183cd4feed26", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000080000400"/28], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x26, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x12d}}}}]}, 0x58}}, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r11) sendmsg$NFC_CMD_LLC_SDREQ(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b48b1b7e", @ANYBLOB="9281d6e694fa96f8ca89c42e17101c7ee312f44c6b266a586a1203f3e9cd0f4d3fce0f59cfdfe696f3d46a2a2c4db28b0b497798", @ANYBLOB="01002dbd7000ffdbdf25130000000c000100", @ANYRES32, @ANYBLOB="c4001380", @ANYRES32], 0x2b4}, 0x1, 0x0, 0x0, 0x4054}, 0x8c4) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r7, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}, 0xcd}], 0x1, 0x1, 0x0) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd2e, 0x24dfdc03}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4090) r12 = socket$tipc(0x1e, 0x2, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0c000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="000000000000a818b2b1000000000000000000001d7219b62b1b5c3d91b13894942ea00c669579c94b1a7a093ced3607d0c385464bcb033186970f83970c39a303e8af1b422b95cdedda9f499d91a8595d23d50f05e9b85ff04bfc37d1fac389adf3dfb4834bc85d3e71584e3fbf72f807e75fc11a009e690a6a13d25b15b9fd3ed7f3e7ccdfc1febc1036b6df593dbc2093f2116042abd452149b6ec0fcaa7ee89c099ab40b4d041e47adeae8653af28d608577c4474b6d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)="d8d5c003fe0c786770b2f66918b982269b8bcf0f88e3c3c1c2e0a49d0d9e8f3c1b2d0e06c0f677c569cefb8c76ea44b798d04c2aad093b7e5ebd9c1a8ac652049814eaf472", &(0x7f0000000140), 0x5, r14}, 0x38) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', r3, 0x2f, 0x0, 0x10, 0x8, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x700, 0x80, 0x5, 0x2}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000500), 0x10002, r14}, 0x38) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r13) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) 18.991784965s ago: executing program 1 (id=2671): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0x3, 0x7f, {{0x30, 0x4, 0x2, 0x3e, 0xc0, 0x65, 0x0, 0x18, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x24}, {[@end, @ssrr={0x89, 0xb, 0xa4, [@empty, @loopback]}, @cipso={0x86, 0x1d, 0x2, [{0x5, 0xf, "795cbc6581c915c951e90823c2"}, {0x0, 0x8, "f902ba134855"}]}, @generic={0x83, 0x11, "2a4d62750fe97ca4287df0c3ddfc5e"}, @ra={0x94, 0x4}, @cipso={0x86, 0x31, 0x3, [{0x7, 0x4, 'i<'}, {0x1, 0xe, "fba59d17576216ff60ac0854"}, {0x6, 0x4, "ee27"}, {0x6, 0xf, "e44cca510d63b2116560e5a7a4"}, {0x2, 0x6, "79b516b8"}]}, @ssrr={0x89, 0x13, 0x4a, [@local, @broadcast, @broadcast, @local]}, @lsrr={0x83, 0xb, 0x65, [@multicast1, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0xed, 0x1, 0x8, [{@local, 0x1}, {@private=0xa010102, 0x8}, {@multicast1, 0x6}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0x14, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x0) unshare(0x6a040000) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000740)="fe89cb8a3d09cb84c6ce47c895bcdc1e16901bd3af21e0f04a6e086b9eccf458055589043f1ea4a904196cda01858e62091b59d0cf2bdc62bd7d580232e1afc8d79917eaf1f0be57fb0132c1304948681e1bd66878434f6338104a9a200123b403dbb372732ef9bad661e0f42b21244c3993c550199db2518bea5197e9e99e0a8594a1ffb7cb6c499f25454f6e070de5f111fed23cb2f6ce4baa12f11c986c29e2c23c96349d290c8fc2994b902aee9cf129873a093b9d0819e57f88925af5d41ccf7d5eb7168f932acbf5315adbd73896411827404f", 0xd6}, {&(0x7f00000002c0)="7980b46d4f1bb78c2a567b3b400dbe8b64ed5b0de401e28f5ad66238c5057b4fb50e8b9e546f1c61ab248a7f134352ced4811472271a08f6e35044004f53208cd84e7cee0d4df405ab295eb7a6a9d492817d02aaf837d254e51b27c546010aff08074d886cddc155f076e32bc488f824c4b45768c50444cb155fd0b52ceaa25c65c3d0850b", 0x85}, {&(0x7f0000000580)="46b09b59b16d798f8340504ffd1f2f9704d621bf6578738fd021b1927ef5a4abd90737c5f1fd7b5fee5e106e5b9743081d6a883f9440f7ec5110eccf7355fba5bc8642c6400ab287e37dadaa595e59cdead07dfced8aa67be238a725784a04bd75c6a7435560c6a6", 0x68}, {&(0x7f0000000840)="20852b2212dd3106a35ed388d773220ee6850f73633841bb170ff81c9f295f0fe04c76cc80b999984ea0ad565ed2b82f6c9263e14a7faa19c1063725ede07a2064b2252045161f1f0318519818ac3fb42b553f92ccd6771861ee5c9392768a5337ba2c0ae8cc20b540491032bbfc9808845e5e13aa7ca24f2dbbf203f8566d3e48b7778056a20b24a82405f9811689d404cb9b02ce97a09cd981b0b170a32d598d622aeb79831a5fbc3aa2b7e797efdf1c445525842008153f630e7c8cfbaa223620e0ffbf05", 0xc6}], 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0xffffffffffffff04) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x12, 0xffffffffffffffff, 0x91081000) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x7, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000080)="b2", 0x1, 0x24008811, &(0x7f0000000040)={0xa, 0x1, 0x41, @private2, 0xfffffffe}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x2}, 0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESDEC], 0xe0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 18.418743781s ago: executing program 4 (id=2677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8, 0x300}, 0x50) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x30, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="30000000120001000000000000000000100000000c003500000000000000000008002e800400328008002f"], 0x30}], 0x1}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 18.277173709s ago: executing program 2 (id=2678): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xfffffffffffffffc}}}]}]}, 0xac}}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept(r1, 0x0, 0x0) 18.276362295s ago: executing program 1 (id=2679): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000040000000000200000611060000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000040)=0x26d, 0x4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) close(0xffffffffffffffff) (async) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r11, {0x9, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x8001, 0x6361, 0x3, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4010) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r11, {0x10, 0xd}, {0x1, 0xb}, {0x6, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002d00010026bdf000fcdbdf25000c000000000000", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) r12 = socket$unix(0x1, 0xffffffffffffffff, 0x0) bind$unix(r12, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r13 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba00001b2cc32b38d3740000ffffffefffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x20000000) (async) socket$inet(0x2, 0xa, 0x2) 18.276001038s ago: executing program 4 (id=2680): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef000100ffffff89"], 0x280) (async) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef000100ffffff89"], 0x280) 18.092907491s ago: executing program 2 (id=2681): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r3, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r2, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB="070000003400000000000000b5312ffbefb0c73259a16744b840b926fd7e4619bfda94b37945b5418570e35b1c24c8fa0bd879d95bcf80928e8d4330549fea173bce01a3f07f5163c7aee6441197ba4c177cf8564e10f1ee6421802f33100bd9884b8df415fd0ac8a19c970ea06a9b23dfd0f405b6d9bc24d59ea2b7ad0d3fdc155594dd35fd23c0c35404c8", @ANYRES32=r5, @ANYRES64=r4], 0x20) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup=r6, r1, 0x31, 0x2004, r1, @value, @void, @void, @void, r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x36, 0x0, &(0x7f0000000140)="c1181000b95d02ff4284860186ddf9c4bada7d57cf3d9e20c49a8a0f17ae72008e6507ac417ad67cb82406b10d16cab55b0074dec85f", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.933589199s ago: executing program 2 (id=2682): r0 = socket(0x10, 0x800, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYRES8], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0xfffffffffffffe87) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e00000000", 0x59) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001b80)={'veth1_macvtap\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x3}, {0x200}]}}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000004a00010029bd7000fbdbdf250a008000", @ANYBLOB="3f384941c2e9d31372ba2409dae2a778c122e4f46095dcff85afa271bf5660f0ed5202765cc561f36a0dcbd46da120b4be1fccf1e4d7f37f05ed8fa770dc0cad7789b590b99c6db4a22050eb0f56a24943c3618be42dce1c05609cc19d9d29a6a53ff8c8816117b82e627a4fd4e3b967635b6eeac38fe4e9468adfeafaa9212f2e48e5806eb2ce6f4dde6a619b9de9d10894c4952c3a2e82843d76614ca709a5616eafad687e5e3fe3", @ANYRES16=r3], 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x4010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8}, 0x94) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfdab, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x8004) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0xb35, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r8, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02742e86cfba54a3335729a5ce8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRESDEC=r9, @ANYRESHEX, @ANYRES32, @ANYRES32=r7, @ANYRES64=r1, @ANYRES32=r7, @ANYRESHEX, @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b621e4}, 0x4044805) socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) 16.717229053s ago: executing program 1 (id=2683): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 16.711377525s ago: executing program 4 (id=2684): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private1, 0x80000000}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000008000000ff"], 0x20, 0x40000}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x30004000) r2 = socket(0x2, 0x3, 0xff) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0x68) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x88, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r4, 0x900a}, &(0x7f0000000200)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c800) 16.5288905s ago: executing program 4 (id=2686): socket$alg(0x26, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000a7d4635d7b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x48, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x3f) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r0, @ANYBLOB="000000000000000008000c00040007000c001a8004"], 0x34}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xa8, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f0000000dc0), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendto$llc(0xffffffffffffffff, &(0x7f0000000d40)="2207bce218a419e8df80ddd690dc9b6a261f8230313d2c284f19d3bdcd52ddbc3fa504e4cdd1d89f7f590ea98b1b0e0e8413e76cb842863b1cf0cb827c7504149c6a694557412e3ee8f22a7ee9cf62682d7be88168a7e6847e87599839a2441732e4", 0x62, 0x10, &(0x7f0000000840)={0x1a, 0x207, 0x6, 0x8, 0x9, 0x3, @remote}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x0, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xfff1}, {0xfff1, 0xfff1}, {0xfffa, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4004802) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000013c0)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0xa5, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x4, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x40040) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=@newtfilter={0x2d0, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x2a4, 0x2, [@TCA_BPF_ACT={0x258, 0x1, [@m_connmark={0x13c, 0x18, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7fffffff, 0x3, 0x7, 0x7}, 0x275}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x20000000, 0x3, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x9, 0x10000000, 0x5, 0x7fff}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3f, 0x9, 0x2, 0x4, 0x1000}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xffff749b, 0x7, 0xf, 0xffffffc0}, 0x219}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x0, 0x200, 0xfffffff8}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x5, 0x3, 0x1}}}]}, {0x47, 0x6, "9716760c50e7e7b1456734d75ea1c7ba81ec1c27b441c67e76dbafa4854e12dd7b54a733a132c47ad0aa71dcda46646f169919ab387b9f39b0cf4c4ba98e863bf7dfd5"}, {0xc}, {0xc}}}, @m_ife={0x118, 0x17, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}]}, {0xd9, 0x6, "225fa88b7b60876a6d75a23add199530746df9323533775174148bde19754f22abb76f94ed7e5f5bd7f08ff0c7cc98c15f1287ed8135dfb8469897fcdc1cdb63e51a4ff4d1d908b521ac3078811e1f0667344dbc247b8f60c620985cafb6d1348b81e5553e943f42a948ea0e017da2d580eaa7a2facc4f2c33058e308c714bda952e688fe063ef74c99f67ce68625af2d2e264d13584ae5640462b55bbda1bb5a70e820789076fcc83dc9780fe35ca0c7468c2fa7638077415fb6e1cea2094424f0d9e643e8f9af65af374ee00a497308a21e205a0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x5, 0x5, {0xfd, 0x1, 0x0, 0xd, 0x2}, {0x4, 0x0, 0xdef8, 0xfe4a, 0x40}, 0x8, 0x3, 0x3}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x8848}, 0x2000c006) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x1, 0x7, 0x80, 0x0, {{0x7, 0x4, 0x2, 0x6, 0x1c, 0x65, 0x0, 0x5, 0x29, 0x0, @empty, @broadcast, {[@noop, @cipso={0x86, 0x6}, @end]}}}}}) r15 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r15, &(0x7f00000000c0)={0x1d, r16}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)=ANY=[@ANYBLOB="e4030000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fcdbdf250e0000003c00018014000200776c616e310000000000000000000000080003000100000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c0001801400020064766d7270310000000000000000000014000200626f6e645f736c6176655f310000000008000300000000000800030001000000a4000280080002002fffffff4e000500c4a8193e155b273d206fbcb3d9ab08336275bab1a051109e0053425d5da77b136341bda56f6ea1833a8b3e45dbb7e43c647b3a076aa7be524ac8cf9390f932b6d9d66c96930837d215da00004000050088ad4257ec7f389a335ffb118d493ff5b2d8d6ab40c962b419d30d6ffb618ea173e46b3ad07a9eea816047b0b52907a1fdb6f938d2312ff1d1e067ca080002000200000014000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="6801028088000380f0ff008008000100810000001c00018004000300040003000800020047504c0008000100080000000c0001800800020047504c0028000180070002002c25000004000300080001000700000008000100020000000800010006000000200001800c0002002d2d40277b5c2d000500020000200000080001000000010008000180040003008d000400a728d2b454a3c10e444f425d1d0fba8a84d58f4aba3378f6754325bd19319d6e9918728f3d30b235eee277d174b271055932aab3248721226e738baa19d5f86f88fe3af28c2957d7f02e2c36b4f21ded677504000000db069537b776666c80413af46cfdebe2d8c82ed241c902c0211d755a4aafd9ad498a3931efca92b2b40123cdae78b282c3bb09000000450005000083341725fa5b75a3c284e7c97ebd2e29ace005765390e98ff97e1c2f1044e07eadcee1742a7f5741986188a83ebfcfe52c40a9bd4f363d2efd7652d48c96949500000004000420bc00028008000200020000000400010004000100080002002a0600000800020078f500009800038014000180480002004750ef0008000100070000002400018005000200000000000800020047504c000800020047504c00040003000400030010000180040003000400030004000300400001800c000200e92d5c5e29247b000d0002007d7d28262f5d2d2c000000000800010009000000040003000800020047504c000400030008000100040000000c000180080001000600000060000180080003000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="14000200766c616e310000000000000000000000080003000300000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES8=r3, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1c00018008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES16=r7, @ANYBLOB="0800030000000000"], 0x3e4}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) pselect6(0x40, &(0x7f0000000640)={0x80000000, 0x97, 0x5, 0x97dc, 0x3, 0x0, 0x8000000000000001, 0x2}, &(0x7f0000000680)={0x0, 0x6, 0x8, 0x3, 0x10001, 0x927, 0x9, 0x3}, &(0x7f00000006c0)={0x4, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0xf92, 0x4, 0x40b1}, &(0x7f0000000700), &(0x7f00000007c0)={&(0x7f0000000780)={[0x7]}, 0x8}) 16.395413029s ago: executing program 1 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], 0xd4}}, 0x0) 16.213266237s ago: executing program 1 (id=2690): r0 = socket$kcm(0x23, 0x2, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x3, 0x1, 0x2, 0x4, 0x0, 0xb1, 0xfff, {0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8001, 0x2a1, 0x2, 0xc9a9, 0x8}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x3ff, 0x6, 0x6}, &(0x7f0000000280)=0x10) (async) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1f}, 0x0) 16.122845438s ago: executing program 4 (id=2691): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x17, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xe52}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) socket$inet(0x2, 0x800, 0x62f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2d64657669636573202b63707561636374202d72646d61202b6993222d68756765746c62202b6e6574202b696f20"], 0x2e) 16.061098532s ago: executing program 1 (id=2693): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x3aef) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 15.963567804s ago: executing program 4 (id=2694): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9ac, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x70}}], 0x2, 0x2400c044) shutdown(r1, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) readv(r6, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) r7 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r7, &(0x7f0000000480), 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0x9, 0x3, 0x14, 0xa1}) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001bc0)={0x30, r10, 0x1, 0x200000, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x12, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x30}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010) 15.616260064s ago: executing program 2 (id=2698): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=0x14, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7, 0x4008, 0x4, 0x2, {{0xb, 0x4, 0x1, 0x0, 0x2c, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast1, @broadcast, {[@ssrr={0x89, 0xb, 0x91, [@broadcast, @multicast1]}, @timestamp={0x44, 0xc, 0x37, 0x0, 0x7, [0xff, 0x8]}]}}}}}) sendto$packet(r1, &(0x7f0000000240)="e5bbe71b0cf8e0cb18ffaaad1d9d4acbdf878911b3cf6c74b4ca99f9187772fee634fa2de3f25edee772cdb17574840da5096db0404b525b0e877e2e53020385af936b44ff76e8c01adaaa50f2287595052e71de9449ba76b120f533865842ee4b9f9f58d93a9b776259df497672fba0a1b5f89153dcf37127bbfc41eefc", 0x7e, 0x8000, &(0x7f0000000380)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000006909000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xd4, &(0x7f0000000040)=""/212}, 0x25) 15.461048082s ago: executing program 2 (id=2699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006480000000c0a01030000000000000000070000070900020073797a31000000000900010073797a30000000001c00038018000080040001"], 0xdc}}, 0x4000000) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x18fd9ca9fb75925e}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006500)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000640)={0xa, 0x0, 0x1, @local, 0x5597bac7}, 0x1c) sendto$inet6(r4, &(0x7f0000000000)="80003724090000ce", 0x8, 0x800, &(0x7f0000000180)={0xa, 0x4e21, 0xfffffff8, @mcast1, 0x9}, 0x1c) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000500)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="4ab9e38837b2738e0f712ee4b1a72e98fbadae56d52b94191da14b18972e0a6cb5182f0d67974b653f0f6b41d05147d870573cf7932ec21a4ab027042e7975d5936002b339ce0d6c1de26f9f66dd75e063961e00e083d72a043f1793eb0245db2d00f8ad662fc381455c6939c3620526c3b74582f64b0cc67e6655f943e26d9cf9b014d42ed64adfd50131abff43ff86a8d1f1f36c6e5d106d538ceada71087e8fde5c4aede26a3a6f4f12a5389d66e113f7d969c6040b5f5a333b182b4b7bc272d1f78294735126fe1e773de140b06193439260bb038301a96a2b3a6ce67373077a7465b49c977f185c", 0xea}, {&(0x7f00000000c0)="4ad05a41c50f8aab96609f3bc860b47c0a381f94482a30bf961f9ea8946d28ed185a09e2f5c8fd4290", 0x29}, {&(0x7f0000000400)="756545df50d9765b6acce02b941537e594038c2ffe6bb5a4506db21383cdf3545a3f6ac8b452b5392809eb6b71a3cab721967779b7976d7b9848f9e3b086ce921387b1e3eca3ebbf784cec8ad255dd50f8a383ac709307c16760a9e793355c3c5873ddda9ee4bc5183911bf059381dda027d7b2edb41ebd027b5a340e25f0f36a6f8b8c35926f5ca99ca567bbda09d3cc2fc02e0f5fe940150db82feaedc2c21b40d97523422cd3edc5da146fb5a3f0942be84d938293e2dc7d625ba3993c6b51a572ce50cd6cc56", 0xc8}, {&(0x7f0000000d00)="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", 0x3cf}, {&(0x7f0000000280)="943b4de57ada852f04b03e9863d907c04104927589a0df7adadfbc5a984b0fe7c44838df0cb97e0f1542f530de7afe76", 0x30}], 0x5}}], 0x2, 0x48094) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) 15.393771312s ago: executing program 0 (id=2701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xa0, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0xffffffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x4, @empty, 0xf}, @in6={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}]}, &(0x7f0000000180)=0x10) 15.388165144s ago: executing program 2 (id=2702): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pselect6(0x40, &(0x7f0000000000)={0x4, 0x4, 0x7f, 0xfffffffffffffffa, 0x62, 0x4, 0x0, 0x9}, &(0x7f0000000040)={0x7ff, 0x101, 0xa65, 0x4, 0x4, 0x6, 0x0, 0x8000000000000000}, &(0x7f0000000080)={0x3, 0x2, 0x1, 0x400, 0x8, 0xfffffffffffffff9, 0x7444, 0x3d4}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x1]}, 0x8}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x6ae7dcb9bc99ab1f, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r2, 0x1) 15.311646957s ago: executing program 0 (id=2703): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 15.21316515s ago: executing program 0 (id=2704): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001440)={0x0, 0x7}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) 15.187224646s ago: executing program 0 (id=2705): r0 = socket(0x2b, 0x80801, 0x1) socket$kcm(0x29, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x1, 0xfff, 0x0, 0x8, 0x9, 0xd, 0x4, 0x5, r2}, 0x20) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @mcast1, 0xfffffffe}, 0x1c) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$L2TP_CMD_SESSION_CREATE(r0, 0x0, 0x50) unshare(0x22020400) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0), 0x4) 15.135065168s ago: executing program 0 (id=2706): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x74, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}}, 0x0) 15.029083676s ago: executing program 0 (id=2707): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xb, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x48}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fa00ffff090000000800000008000300", @ANYRES32=r4], 0x5c}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100", @ANYRES32=0x0, @ANYBLOB="c0bd9bd448ad3f86e4e08237dcd6f9074de18cdc09f63047b9a9018f3fc57d6dcd51d625231e65356e89cf90c84136161dbb67930aa68c8d72d4b47d56f0b0ccd8375f7f62854db3164c32ec675403c9c8334bbbad1dc1c931554b0e12d8749a041fe9e7d2146b02156102c87130e9b48d90871413d54f5795e932970aec24d2c479e706c61a49ca9e"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0xfffffe1d}, 0x94) 4.157419313s ago: executing program 32 (id=2658): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d0000000400008004000000ffffffff05000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d5588e2690a47640fa5c936eb46dc1d4e39c277f71fdf1b1386950979c153f0f3c5b5ec59f0d0a367a0a710bf82816532301c72ceb9e1a9dbb718c476f9e7fc87894385342e945fa90e55373df330420b6e87ffe43ed81d590403d5415f8292e19e456b643cb0234923eada6f666f872183cd4feed26", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000080000400"/28], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x26, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x12d}}}}]}, 0x58}}, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r11) sendmsg$NFC_CMD_LLC_SDREQ(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b48b1b7e", @ANYBLOB="9281d6e694fa96f8ca89c42e17101c7ee312f44c6b266a586a1203f3e9cd0f4d3fce0f59cfdfe696f3d46a2a2c4db28b0b497798", @ANYBLOB="01002dbd7000ffdbdf25130000000c000100", @ANYRES32, @ANYBLOB="c4001380", @ANYRES32], 0x2b4}, 0x1, 0x0, 0x0, 0x4054}, 0x8c4) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r7, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}, 0xcd}], 0x1, 0x1, 0x0) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd2e, 0x24dfdc03}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4090) r12 = socket$tipc(0x1e, 0x2, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0c000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="000000000000a818b2b1000000000000000000001d7219b62b1b5c3d91b13894942ea00c669579c94b1a7a093ced3607d0c385464bcb033186970f83970c39a303e8af1b422b95cdedda9f499d91a8595d23d50f05e9b85ff04bfc37d1fac389adf3dfb4834bc85d3e71584e3fbf72f807e75fc11a009e690a6a13d25b15b9fd3ed7f3e7ccdfc1febc1036b6df593dbc2093f2116042abd452149b6ec0fcaa7ee89c099ab40b4d041e47adeae8653af28d608577c4474b6d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)="d8d5c003fe0c786770b2f66918b982269b8bcf0f88e3c3c1c2e0a49d0d9e8f3c1b2d0e06c0f677c569cefb8c76ea44b798d04c2aad093b7e5ebd9c1a8ac652049814eaf472", &(0x7f0000000140), 0x5, r14}, 0x38) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', r3, 0x2f, 0x0, 0x10, 0x8, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x700, 0x80, 0x5, 0x2}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000500), 0x10002, r14}, 0x38) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r13) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) 149.671534ms ago: executing program 33 (id=2693): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x3aef) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) socket(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 115.5008ms ago: executing program 34 (id=2702): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pselect6(0x40, &(0x7f0000000000)={0x4, 0x4, 0x7f, 0xfffffffffffffffa, 0x62, 0x4, 0x0, 0x9}, &(0x7f0000000040)={0x7ff, 0x101, 0xa65, 0x4, 0x4, 0x6, 0x0, 0x8000000000000000}, &(0x7f0000000080)={0x3, 0x2, 0x1, 0x400, 0x8, 0xfffffffffffffff9, 0x7444, 0x3d4}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x1]}, 0x8}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x6ae7dcb9bc99ab1f, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r2, 0x1) 59.245558ms ago: executing program 35 (id=2694): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9ac, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x70}}], 0x2, 0x2400c044) shutdown(r1, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) readv(r6, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) r7 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r7, &(0x7f0000000480), 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0x9, 0x3, 0x14, 0xa1}) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001bc0)={0x30, r10, 0x1, 0x200000, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x12, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}]}, 0x30}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010) 0s ago: executing program 36 (id=2707): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xb, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x48}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fa00ffff090000000800000008000300", @ANYRES32=r4], 0x5c}}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100", @ANYRES32=0x0, @ANYBLOB="c0bd9bd448ad3f86e4e08237dcd6f9074de18cdc09f63047b9a9018f3fc57d6dcd51d625231e65356e89cf90c84136161dbb67930aa68c8d72d4b47d56f0b0ccd8375f7f62854db3164c32ec675403c9c8334bbbad1dc1c931554b0e12d8749a041fe9e7d2146b02156102c87130e9b48d90871413d54f5795e932970aec24d2c479e706c61a49ca9e"], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0xfffffe1d}, 0x94) kernel console output (not intermixed with test programs): p+0x60/0xb0 [ 281.738434][T10979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.738458][T10979] RIP: 0033:0x7f58e678eec9 [ 281.738480][T10979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.738503][T10979] RSP: 002b:00007f58e7580038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.738529][T10979] RAX: ffffffffffffffda RBX: 00007f58e69e6090 RCX: 00007f58e678eec9 [ 281.738547][T10979] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 281.738562][T10979] RBP: 00007f58e7580090 R08: 0000000000000000 R09: 0000000000000000 [ 281.738578][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.738593][T10979] R13: 00007f58e69e6128 R14: 00007f58e69e6090 R15: 00007ffebdf7e6d8 [ 281.738634][T10979] [ 281.951511][T10989] siw: device registration error -23 [ 281.954084][T10976] active_anon:3872 inactive_anon:0 isolated_anon:0 [ 281.954084][T10976] active_file:3479 inactive_file:39953 isolated_file:0 [ 281.954084][T10976] unevictable:768 dirty:180 writeback:0 [ 281.954084][T10976] slab_reclaimable:11853 slab_unreclaimable:132453 [ 281.954084][T10976] mapped:29215 shmem:1368 pagetables:988 [ 281.954084][T10976] sec_pagetables:0 bounce:0 [ 281.954084][T10976] kernel_misc_reclaimable:0 [ 281.954084][T10976] free:1284340 free_pcp:21554 free_cma:0 [ 282.467502][T10976] Node 0 active_anon:15440kB inactive_anon:0kB active_file:13916kB inactive_file:159608kB unevictable:7036kB isolated(anon):0kB isolated(file):0kB mapped:122504kB dirty:728kB writeback:0kB shmem:9488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13072kB pagetables:4068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 282.505297][T10976] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 282.590646][T10976] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.691019][T10976] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 282.710817][T10976] Node 0 DMA32 free:1234576kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15340kB inactive_anon:0kB active_file:13916kB inactive_file:159608kB unevictable:11836kB writepending:728kB zspages:0kB present:3129332kB managed:2561672kB mlocked:10400kB bounce:0kB free_pcp:54408kB local_pcp:19828kB free_cma:0kB [ 282.788399][T10976] lowmem_reserve[]: 0 0 1 1 1 [ 282.812462][T10976] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 282.850947][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 282.862772][T10976] lowmem_reserve[]: 0 0 0 0 0 [ 282.900546][T10976] Node 1 Normal free:3891780kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18636kB local_pcp:8684kB free_cma:0kB [ 283.045848][T10976] lowmem_reserve[]: 0 0 0 0 0 [ 283.050652][T10976] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 283.115258][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 283.119190][T10976] Node 0 [ 283.164794][T11018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.175115][T11018] IPv6: NLM_F_CREATE should be set when creating new route [ 283.229439][T11024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.236786][T11024] IPv6: NLM_F_CREATE should be set when creating new route [ 283.305893][T10976] DMA32: 106*4kB (UE) 132*8kB (UME) 43*16kB (UE) 62*32kB (UE) 77*64kB (UME) 108*128kB (UME) 46*256kB (UME) 69*512kB (UME) 40*1024kB (UM) 3*2048kB (UME) 271*4096kB (UM) = 1227128kB [ 283.362886][T10976] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.385471][T10976] Node 1 Normal: 203*4kB (UME) 47*8kB (UME) 38*16kB (UME) 90*32kB (UME) 32*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3891780kB [ 283.435846][T10976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.457080][T10976] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.482929][T10976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.503028][T10976] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.522528][T10976] 48341 total pagecache pages [ 283.532735][T10976] 0 pages in swap cache [ 283.547921][T10976] Free swap = 124996kB [ 283.572900][T10976] Total swap = 124996kB [ 283.593775][T10976] 2097051 pages RAM [ 283.597731][T10976] 0 pages HighMem/MovableOnly [ 283.614327][T10976] 424543 pages reserved [ 283.618674][T10976] 0 pages cma reserved [ 283.809128][T11030] FAULT_INJECTION: forcing a failure. [ 283.809128][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 283.844663][T11030] CPU: 1 UID: 0 PID: 11030 Comm: syz.3.1347 Not tainted syzkaller #0 PREEMPT(full) [ 283.844697][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.844711][T11030] Call Trace: [ 283.844720][T11030] [ 283.844729][T11030] dump_stack_lvl+0x189/0x250 [ 283.844758][T11030] ? __pfx____ratelimit+0x10/0x10 [ 283.844792][T11030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.844816][T11030] ? __pfx__printk+0x10/0x10 [ 283.844846][T11030] ? __pfx___might_resched+0x10/0x10 [ 283.844870][T11030] ? fs_reclaim_acquire+0x7d/0x100 [ 283.844910][T11030] should_fail_ex+0x414/0x560 [ 283.844941][T11030] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 283.844974][T11030] should_failslab+0xa8/0x100 [ 283.844997][T11030] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 283.845025][T11030] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 283.845057][T11030] ? alloc_inode+0x67/0x1b0 [ 283.845087][T11030] ? __pfx_simple_start_creating+0x10/0x10 [ 283.845112][T11030] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 283.845142][T11030] alloc_inode+0x67/0x1b0 [ 283.845176][T11030] new_inode+0x22/0x170 [ 283.845202][T11030] __debugfs_create_file+0x14d/0x4f0 [ 283.845239][T11030] debugfs_create_file_full+0x3f/0x60 [ 283.845274][T11030] ref_tracker_dir_debugfs+0x14e/0x270 [ 283.845305][T11030] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 283.845367][T11030] ? trace_kmalloc+0x1f/0xd0 [ 283.845399][T11030] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 283.845438][T11030] ? __raw_spin_lock_init+0x45/0x100 [ 283.845471][T11030] alloc_netdev_mqs+0x272/0x11b0 [ 283.845501][T11030] ? __pfx_vlan_setup+0x10/0x10 [ 283.845540][T11030] rtnl_create_link+0x31f/0xd10 [ 283.845580][T11030] rtnl_newlink_create+0x25c/0xb00 [ 283.845611][T11030] ? __lock_acquire+0xab9/0xd20 [ 283.845640][T11030] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 283.845670][T11030] ? __pfx___mutex_lock+0x10/0x10 [ 283.845710][T11030] ? ns_capable+0x8a/0xf0 [ 283.845740][T11030] rtnl_newlink+0x16e4/0x1c80 [ 283.845788][T11030] ? __pfx_rtnl_newlink+0x10/0x10 [ 283.845816][T11030] ? is_bpf_text_address+0x26/0x2b0 [ 283.845847][T11030] ? is_bpf_text_address+0x292/0x2b0 [ 283.845870][T11030] ? is_bpf_text_address+0x26/0x2b0 [ 283.845900][T11030] ? __lock_acquire+0xab9/0xd20 [ 283.845936][T11030] ? __lock_acquire+0xab9/0xd20 [ 283.845982][T11030] ? is_bpf_text_address+0x26/0x2b0 [ 283.846011][T11030] ? is_bpf_text_address+0x292/0x2b0 [ 283.846034][T11030] ? is_bpf_text_address+0x26/0x2b0 [ 283.846069][T11030] ? __lock_acquire+0xab9/0xd20 [ 283.846120][T11030] ? __pfx_rtnl_newlink+0x10/0x10 [ 283.846141][T11030] rtnetlink_rcv_msg+0x7cf/0xb70 [ 283.846162][T11030] ? __lock_acquire+0xab9/0xd20 [ 283.846187][T11030] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 283.846208][T11030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.846250][T11030] netlink_rcv_skb+0x205/0x470 [ 283.846272][T11030] ? __lock_acquire+0xab9/0xd20 [ 283.846293][T11030] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 283.846317][T11030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 283.846355][T11030] ? netlink_deliver_tap+0x2e/0x1b0 [ 283.846388][T11030] netlink_unicast+0x82f/0x9e0 [ 283.846433][T11030] ? __pfx_netlink_unicast+0x10/0x10 [ 283.846470][T11030] ? netlink_sendmsg+0x642/0xb30 [ 283.846490][T11030] ? skb_put+0x11b/0x210 [ 283.846520][T11030] netlink_sendmsg+0x805/0xb30 [ 283.846556][T11030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.846584][T11030] ? aa_sock_msg_perm+0xf1/0x1d0 [ 283.846618][T11030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.846639][T11030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.846663][T11030] __sock_sendmsg+0x21c/0x270 [ 283.846700][T11030] ____sys_sendmsg+0x505/0x830 [ 283.846733][T11030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.846777][T11030] ? import_iovec+0x74/0xa0 [ 283.846803][T11030] ___sys_sendmsg+0x21f/0x2a0 [ 283.846833][T11030] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.846903][T11030] ? __fget_files+0x2a/0x420 [ 283.846923][T11030] ? __fget_files+0x3a0/0x420 [ 283.846955][T11030] __x64_sys_sendmsg+0x19b/0x260 [ 283.846986][T11030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.847025][T11030] ? __pfx_ksys_write+0x10/0x10 [ 283.847060][T11030] ? do_syscall_64+0xbe/0xfa0 [ 283.847092][T11030] do_syscall_64+0xfa/0xfa0 [ 283.847117][T11030] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.847144][T11030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.847165][T11030] ? clear_bhb_loop+0x60/0xb0 [ 283.847193][T11030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.847214][T11030] RIP: 0033:0x7fe07218eec9 [ 283.847234][T11030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.847253][T11030] RSP: 002b:00007fe072f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.847276][T11030] RAX: ffffffffffffffda RBX: 00007fe0723e5fa0 RCX: 00007fe07218eec9 [ 283.847293][T11030] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 283.847307][T11030] RBP: 00007fe072f97090 R08: 0000000000000000 R09: 0000000000000000 [ 283.847320][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.847333][T11030] R13: 00007fe0723e6038 R14: 00007fe0723e5fa0 R15: 00007ffc107f87f8 [ 283.847371][T11030] [ 283.849693][T11030] debugfs: out of free dentries, can not create file 'netdev@ffff888052fae610' [ 284.201127][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 284.242044][T11022] lo speed is unknown, defaulting to 1000 [ 284.289918][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1350'. [ 284.669634][T11047] xt_NFQUEUE: number of queues (32773) out of range (got 98305) [ 284.771503][T11049] xt_HMARK: spi-set and port-set can't be combined [ 284.894731][T11053] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 284.909856][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1355'. [ 284.981426][T11053] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1355'. [ 285.231436][T11067] vxcan2: entered allmulticast mode [ 285.238012][T11070] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 285.265212][T11073] FAULT_INJECTION: forcing a failure. [ 285.265212][T11073] name failslab, interval 1, probability 0, space 0, times 0 [ 285.311950][T11073] CPU: 1 UID: 0 PID: 11073 Comm: syz.0.1360 Not tainted syzkaller #0 PREEMPT(full) [ 285.311982][T11073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.311996][T11073] Call Trace: [ 285.312005][T11073] [ 285.312015][T11073] dump_stack_lvl+0x189/0x250 [ 285.312044][T11073] ? __pfx____ratelimit+0x10/0x10 [ 285.312070][T11073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.312094][T11073] ? __pfx__printk+0x10/0x10 [ 285.312125][T11073] ? __pfx___might_resched+0x10/0x10 [ 285.312147][T11073] ? fs_reclaim_acquire+0x7d/0x100 [ 285.312188][T11073] should_fail_ex+0x414/0x560 [ 285.312218][T11073] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 285.312250][T11073] should_failslab+0xa8/0x100 [ 285.312273][T11073] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 285.312302][T11073] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 285.312333][T11073] ? alloc_inode+0x67/0x1b0 [ 285.312365][T11073] ? __pfx_simple_start_creating+0x10/0x10 [ 285.312389][T11073] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 285.312420][T11073] alloc_inode+0x67/0x1b0 [ 285.312454][T11073] new_inode+0x22/0x170 [ 285.312479][T11073] __debugfs_create_file+0x14d/0x4f0 [ 285.312517][T11073] debugfs_create_file_full+0x3f/0x60 [ 285.312553][T11073] ref_tracker_dir_debugfs+0x14e/0x270 [ 285.312583][T11073] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 285.312653][T11073] ? trace_kmalloc+0x1f/0xd0 [ 285.312679][T11073] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 285.312718][T11073] ? __raw_spin_lock_init+0x45/0x100 [ 285.312752][T11073] alloc_netdev_mqs+0x272/0x11b0 [ 285.312784][T11073] ? __pfx_vlan_setup+0x10/0x10 [ 285.312822][T11073] rtnl_create_link+0x31f/0xd10 [ 285.312859][T11073] rtnl_newlink_create+0x25c/0xb00 [ 285.312890][T11073] ? __mutex_lock+0x5bb/0x1350 [ 285.312924][T11073] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 285.312954][T11073] ? __pfx___mutex_lock+0x10/0x10 [ 285.312994][T11073] ? ns_capable+0x8a/0xf0 [ 285.313022][T11073] rtnl_newlink+0x16e4/0x1c80 [ 285.313046][T11073] ? netlink_deliver_tap+0x19c/0x1b0 [ 285.313084][T11073] ? __pfx_rtnl_newlink+0x10/0x10 [ 285.313135][T11073] ? kasan_quarantine_put+0xdd/0x220 [ 285.313166][T11073] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.313200][T11073] ? nlmon_xmit+0xb0/0x100 [ 285.313232][T11073] ? kmem_cache_free+0x19b/0x690 [ 285.313274][T11073] ? __local_bh_enable_ip+0x12d/0x1c0 [ 285.313298][T11073] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.313326][T11073] ? __local_bh_enable_ip+0x12d/0x1c0 [ 285.313349][T11073] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 285.313378][T11073] ? __dev_queue_xmit+0x27b/0x3b50 [ 285.313406][T11073] ? __dev_queue_xmit+0x27b/0x3b50 [ 285.313432][T11073] ? __dev_queue_xmit+0x27b/0x3b50 [ 285.313462][T11073] ? __dev_queue_xmit+0x1d79/0x3b50 [ 285.313488][T11073] ? kasan_save_track+0x3e/0x80 [ 285.313516][T11073] ? __kasan_slab_alloc+0x6c/0x80 [ 285.313552][T11073] ? __lock_acquire+0xab9/0xd20 [ 285.313603][T11073] ? __pfx_rtnl_newlink+0x10/0x10 [ 285.313624][T11073] rtnetlink_rcv_msg+0x7cf/0xb70 [ 285.313656][T11073] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 285.313677][T11073] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.313696][T11073] ? ref_tracker_free+0x63a/0x7d0 [ 285.313724][T11073] ? __asan_memcpy+0x40/0x70 [ 285.313750][T11073] ? __pfx_ref_tracker_free+0x10/0x10 [ 285.313789][T11073] netlink_rcv_skb+0x205/0x470 [ 285.313812][T11073] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 285.313836][T11073] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.313873][T11073] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.313907][T11073] netlink_unicast+0x82f/0x9e0 [ 285.313952][T11073] ? __pfx_netlink_unicast+0x10/0x10 [ 285.313989][T11073] ? netlink_sendmsg+0x642/0xb30 [ 285.314010][T11073] ? skb_put+0x11b/0x210 [ 285.314039][T11073] netlink_sendmsg+0x805/0xb30 [ 285.314074][T11073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.314103][T11073] ? aa_sock_msg_perm+0xf1/0x1d0 [ 285.314136][T11073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.314158][T11073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.314183][T11073] __sock_sendmsg+0x21c/0x270 [ 285.314219][T11073] ____sys_sendmsg+0x505/0x830 [ 285.314254][T11073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.314291][T11073] ? import_iovec+0x74/0xa0 [ 285.314317][T11073] ___sys_sendmsg+0x21f/0x2a0 [ 285.314348][T11073] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.314418][T11073] ? __fget_files+0x2a/0x420 [ 285.314437][T11073] ? __fget_files+0x3a0/0x420 [ 285.314470][T11073] __x64_sys_sendmsg+0x19b/0x260 [ 285.314500][T11073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 285.314539][T11073] ? __pfx_ksys_write+0x10/0x10 [ 285.314574][T11073] ? do_syscall_64+0xbe/0xfa0 [ 285.314607][T11073] do_syscall_64+0xfa/0xfa0 [ 285.314637][T11073] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.314664][T11073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.314686][T11073] ? clear_bhb_loop+0x60/0xb0 [ 285.314713][T11073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.314735][T11073] RIP: 0033:0x7f58e678eec9 [ 285.314755][T11073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.314774][T11073] RSP: 002b:00007f58e7580038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.314797][T11073] RAX: ffffffffffffffda RBX: 00007f58e69e6090 RCX: 00007f58e678eec9 [ 285.314814][T11073] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 285.314828][T11073] RBP: 00007f58e7580090 R08: 0000000000000000 R09: 0000000000000000 [ 285.314842][T11073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.314855][T11073] R13: 00007f58e69e6128 R14: 00007f58e69e6090 R15: 00007ffebdf7e6d8 [ 285.314893][T11073] [ 285.922499][T11073] debugfs: out of free dentries, can not create file 'netdev@ffff8880300c2610' [ 285.960442][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1363'. [ 286.214426][T11094] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 286.323625][T11103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1370'. [ 286.340656][T11103] netlink: 'syz.4.1370': attribute type 10 has an invalid length. [ 286.381458][T11103] wlan1: mtu less than device minimum [ 286.411895][T11103] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 286.586223][T11114] syzkaller0: entered promiscuous mode [ 286.599487][T11114] syzkaller0: entered allmulticast mode [ 286.608947][T11113] tipc: Enabled bearer , priority 0 [ 286.654372][T11122] siw: device registration error -23 [ 286.690942][T11124] FAULT_INJECTION: forcing a failure. [ 286.690942][T11124] name failslab, interval 1, probability 0, space 0, times 0 [ 286.691588][T11122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1376'. [ 286.713697][T11124] CPU: 1 UID: 0 PID: 11124 Comm: syz.4.1377 Not tainted syzkaller #0 PREEMPT(full) [ 286.713724][T11124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.713736][T11124] Call Trace: [ 286.713743][T11124] [ 286.713751][T11124] dump_stack_lvl+0x189/0x250 [ 286.713776][T11124] ? __pfx____ratelimit+0x10/0x10 [ 286.713798][T11124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.713818][T11124] ? __pfx__printk+0x10/0x10 [ 286.713840][T11124] ? __pfx___might_resched+0x10/0x10 [ 286.713860][T11124] ? fs_reclaim_acquire+0x7d/0x100 [ 286.713894][T11124] should_fail_ex+0x414/0x560 [ 286.713921][T11124] should_failslab+0xa8/0x100 [ 286.713940][T11124] kmem_cache_alloc_noprof+0x74/0x6e0 [ 286.713966][T11124] ? security_inode_alloc+0x39/0x330 [ 286.713998][T11124] security_inode_alloc+0x39/0x330 [ 286.714026][T11124] inode_init_always_gfp+0x9ed/0xdc0 [ 286.714061][T11124] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 286.714088][T11124] alloc_inode+0x82/0x1b0 [ 286.714116][T11124] new_inode+0x22/0x170 [ 286.714137][T11124] __debugfs_create_file+0x14d/0x4f0 [ 286.714168][T11124] debugfs_create_file_full+0x3f/0x60 [ 286.714199][T11124] ref_tracker_dir_debugfs+0x14e/0x270 [ 286.714225][T11124] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 286.714276][T11124] ? trace_kmalloc+0x1f/0xd0 [ 286.714298][T11124] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 286.714330][T11124] ? __raw_spin_lock_init+0x45/0x100 [ 286.714359][T11124] alloc_netdev_mqs+0x272/0x11b0 [ 286.714384][T11124] ? __pfx_vlan_setup+0x10/0x10 [ 286.714417][T11124] rtnl_create_link+0x31f/0xd10 [ 286.714456][T11124] rtnl_newlink_create+0x25c/0xb00 [ 286.714482][T11124] ? __lock_acquire+0xab9/0xd20 [ 286.714505][T11124] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 286.714530][T11124] ? __pfx___mutex_lock+0x10/0x10 [ 286.714567][T11124] ? ns_capable+0x8a/0xf0 [ 286.714595][T11124] rtnl_newlink+0x16e4/0x1c80 [ 286.714619][T11124] ? netlink_deliver_tap+0x19c/0x1b0 [ 286.714656][T11124] ? __pfx_rtnl_newlink+0x10/0x10 [ 286.714706][T11124] ? kasan_quarantine_put+0xdd/0x220 [ 286.714736][T11124] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.714769][T11124] ? nlmon_xmit+0xb0/0x100 [ 286.714799][T11124] ? kmem_cache_free+0x19b/0x690 [ 286.714841][T11124] ? __local_bh_enable_ip+0x12d/0x1c0 [ 286.714865][T11124] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.714893][T11124] ? __local_bh_enable_ip+0x12d/0x1c0 [ 286.714914][T11124] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 286.714937][T11124] ? __dev_queue_xmit+0x27b/0x3b50 [ 286.714959][T11124] ? __dev_queue_xmit+0x27b/0x3b50 [ 286.714979][T11124] ? __dev_queue_xmit+0x27b/0x3b50 [ 286.715002][T11124] ? __dev_queue_xmit+0x1d79/0x3b50 [ 286.715023][T11124] ? kasan_save_track+0x3e/0x80 [ 286.715046][T11124] ? __kasan_slab_alloc+0x6c/0x80 [ 286.715074][T11124] ? __lock_acquire+0xab9/0xd20 [ 286.715114][T11124] ? __pfx_rtnl_newlink+0x10/0x10 [ 286.715130][T11124] rtnetlink_rcv_msg+0x7cf/0xb70 [ 286.715151][T11124] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 286.715167][T11124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.715182][T11124] ? ref_tracker_free+0x63a/0x7d0 [ 286.715206][T11124] ? __asan_memcpy+0x40/0x70 [ 286.715227][T11124] ? __pfx_ref_tracker_free+0x10/0x10 [ 286.715259][T11124] netlink_rcv_skb+0x205/0x470 [ 286.715278][T11124] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 286.715296][T11124] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.715324][T11124] ? netlink_deliver_tap+0x2e/0x1b0 [ 286.715350][T11124] netlink_unicast+0x82f/0x9e0 [ 286.715386][T11124] ? __pfx_netlink_unicast+0x10/0x10 [ 286.715415][T11124] ? netlink_sendmsg+0x642/0xb30 [ 286.715431][T11124] ? skb_put+0x11b/0x210 [ 286.715459][T11124] netlink_sendmsg+0x805/0xb30 [ 286.715487][T11124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.715508][T11124] ? aa_sock_msg_perm+0xf1/0x1d0 [ 286.715534][T11124] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.715551][T11124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.715570][T11124] __sock_sendmsg+0x21c/0x270 [ 286.715598][T11124] ____sys_sendmsg+0x505/0x830 [ 286.715624][T11124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.715655][T11124] ? import_iovec+0x74/0xa0 [ 286.715680][T11124] ___sys_sendmsg+0x21f/0x2a0 [ 286.715703][T11124] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.715757][T11124] ? __fget_files+0x2a/0x420 [ 286.715771][T11124] ? __fget_files+0x3a0/0x420 [ 286.715796][T11124] __x64_sys_sendmsg+0x19b/0x260 [ 286.715819][T11124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.715849][T11124] ? __pfx_ksys_write+0x10/0x10 [ 286.715877][T11124] ? do_syscall_64+0xbe/0xfa0 [ 286.715901][T11124] do_syscall_64+0xfa/0xfa0 [ 286.715921][T11124] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.715941][T11124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.715959][T11124] ? clear_bhb_loop+0x60/0xb0 [ 286.715980][T11124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.715996][T11124] RIP: 0033:0x7fa0d658eec9 [ 286.716012][T11124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.716028][T11124] RSP: 002b:00007fa0d7423038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.716047][T11124] RAX: ffffffffffffffda RBX: 00007fa0d67e5fa0 RCX: 00007fa0d658eec9 [ 286.716059][T11124] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 286.716070][T11124] RBP: 00007fa0d7423090 R08: 0000000000000000 R09: 0000000000000000 [ 286.716081][T11124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.716091][T11124] R13: 00007fa0d67e6038 R14: 00007fa0d67e5fa0 R15: 00007ffd8ea530f8 [ 286.716120][T11124] [ 286.716201][T11124] debugfs: out of free dentries, can not create file 'netdev@ffff8880765c8610' [ 287.302580][T11113] tipc: Resetting bearer [ 287.415132][T11113] tipc: Disabling bearer [ 287.447926][T11136] netlink: 'syz.4.1380': attribute type 1 has an invalid length. [ 287.490783][T11136] 8021q: adding VLAN 0 to HW filter on device bond6 [ 287.539846][T11140] bond6: (slave veth7): Enslaving as an active interface with a down link [ 287.555212][T11137] tipc: Enabled bearer , priority 0 [ 287.604394][T11136] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 287.622257][T11136] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 287.669158][T11137] syzkaller0: entered promiscuous mode [ 287.675582][T11137] syzkaller0: entered allmulticast mode [ 287.703947][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1379'. [ 287.743340][T11146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1379'. [ 287.868443][T11131] tipc: Resetting bearer [ 288.006226][T11131] tipc: Disabling bearer [ 288.230024][T11163] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 288.263867][T11166] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 288.311084][T11166] netlink: 'syz.2.1385': attribute type 1 has an invalid length. [ 288.344589][T11145] lo speed is unknown, defaulting to 1000 [ 288.363764][T11166] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1385'. [ 288.580342][T11173] hsr0: entered promiscuous mode [ 288.586182][T11173] hsr0: entered allmulticast mode [ 288.593104][T11173] hsr_slave_0: entered allmulticast mode [ 288.601635][T11173] hsr_slave_1: entered allmulticast mode [ 288.688906][T11158] lo speed is unknown, defaulting to 1000 [ 289.265828][T11157] lo speed is unknown, defaulting to 1000 [ 289.355130][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 289.487101][T11190] netlink: 'syz.2.1393': attribute type 4 has an invalid length. [ 290.161678][T11213] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1397'. [ 290.223403][T11211] pim6reg: entered allmulticast mode [ 290.689559][T11231] netlink: 'syz.4.1404': attribute type 7 has an invalid length. [ 290.829765][T11220] lo speed is unknown, defaulting to 1000 [ 291.068169][T11245] netlink: 'syz.3.1408': attribute type 1 has an invalid length. [ 291.320621][T11256] FAULT_INJECTION: forcing a failure. [ 291.320621][T11256] name failslab, interval 1, probability 0, space 0, times 0 [ 291.343935][T11256] CPU: 1 UID: 0 PID: 11256 Comm: syz.0.1410 Not tainted syzkaller #0 PREEMPT(full) [ 291.343968][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.343982][T11256] Call Trace: [ 291.343990][T11256] [ 291.344000][T11256] dump_stack_lvl+0x189/0x250 [ 291.344028][T11256] ? __pfx____ratelimit+0x10/0x10 [ 291.344054][T11256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.344078][T11256] ? __pfx__printk+0x10/0x10 [ 291.344113][T11256] ? __mutex_trylock_common+0x153/0x260 [ 291.344149][T11256] should_fail_ex+0x414/0x560 [ 291.344181][T11256] should_failslab+0xa8/0x100 [ 291.344205][T11256] __kmalloc_cache_noprof+0x6f/0x6f0 [ 291.344236][T11256] ? __hw_addr_add_ex+0x1f4/0x770 [ 291.344270][T11256] __hw_addr_add_ex+0x1f4/0x770 [ 291.344304][T11256] dev_addr_init+0x14f/0x230 [ 291.344335][T11256] ? __pfx_dev_addr_init+0x10/0x10 [ 291.344375][T11256] alloc_netdev_mqs+0x2b1/0x11b0 [ 291.344403][T11256] ? __pfx_vlan_setup+0x10/0x10 [ 291.344441][T11256] rtnl_create_link+0x31f/0xd10 [ 291.344478][T11256] rtnl_newlink_create+0x25c/0xb00 [ 291.344507][T11256] ? __lock_acquire+0xab9/0xd20 [ 291.344534][T11256] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 291.344564][T11256] ? __pfx___mutex_lock+0x10/0x10 [ 291.344603][T11256] ? ns_capable+0x8a/0xf0 [ 291.344630][T11256] rtnl_newlink+0x16e4/0x1c80 [ 291.344654][T11256] ? netlink_deliver_tap+0x19c/0x1b0 [ 291.344691][T11256] ? __pfx_rtnl_newlink+0x10/0x10 [ 291.344740][T11256] ? kasan_quarantine_put+0xdd/0x220 [ 291.344770][T11256] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.344802][T11256] ? nlmon_xmit+0xb0/0x100 [ 291.344834][T11256] ? kmem_cache_free+0x19b/0x690 [ 291.344880][T11256] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.344903][T11256] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.344931][T11256] ? __local_bh_enable_ip+0x12d/0x1c0 [ 291.344954][T11256] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 291.344982][T11256] ? __dev_queue_xmit+0x27b/0x3b50 [ 291.345011][T11256] ? __dev_queue_xmit+0x27b/0x3b50 [ 291.345037][T11256] ? __dev_queue_xmit+0x27b/0x3b50 [ 291.345066][T11256] ? __dev_queue_xmit+0x1d79/0x3b50 [ 291.345099][T11256] ? kasan_save_track+0x3e/0x80 [ 291.345128][T11256] ? __kasan_slab_alloc+0x6c/0x80 [ 291.345164][T11256] ? __lock_acquire+0xab9/0xd20 [ 291.345215][T11256] ? __pfx_rtnl_newlink+0x10/0x10 [ 291.345236][T11256] rtnetlink_rcv_msg+0x7cf/0xb70 [ 291.345262][T11256] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 291.345283][T11256] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.345302][T11256] ? ref_tracker_free+0x63a/0x7d0 [ 291.345332][T11256] ? __asan_memcpy+0x40/0x70 [ 291.345359][T11256] ? __pfx_ref_tracker_free+0x10/0x10 [ 291.345400][T11256] netlink_rcv_skb+0x205/0x470 [ 291.345425][T11256] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 291.345449][T11256] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.345486][T11256] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.345519][T11256] netlink_unicast+0x82f/0x9e0 [ 291.345564][T11256] ? __pfx_netlink_unicast+0x10/0x10 [ 291.345599][T11256] ? netlink_sendmsg+0x642/0xb30 [ 291.345621][T11256] ? skb_put+0x11b/0x210 [ 291.345648][T11256] netlink_sendmsg+0x805/0xb30 [ 291.345683][T11256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.345711][T11256] ? aa_sock_msg_perm+0xf1/0x1d0 [ 291.345744][T11256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.345765][T11256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.345790][T11256] __sock_sendmsg+0x21c/0x270 [ 291.345827][T11256] ____sys_sendmsg+0x505/0x830 [ 291.345861][T11256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.345897][T11256] ? import_iovec+0x74/0xa0 [ 291.345923][T11256] ___sys_sendmsg+0x21f/0x2a0 [ 291.345953][T11256] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.346025][T11256] ? __fget_files+0x2a/0x420 [ 291.346045][T11256] ? __fget_files+0x3a0/0x420 [ 291.346077][T11256] __x64_sys_sendmsg+0x19b/0x260 [ 291.346111][T11256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.346149][T11256] ? __pfx_ksys_write+0x10/0x10 [ 291.346181][T11256] ? do_syscall_64+0xbe/0xfa0 [ 291.346213][T11256] do_syscall_64+0xfa/0xfa0 [ 291.346238][T11256] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.346263][T11256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.346286][T11256] ? clear_bhb_loop+0x60/0xb0 [ 291.346313][T11256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.346335][T11256] RIP: 0033:0x7f58e678eec9 [ 291.346355][T11256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.346375][T11256] RSP: 002b:00007f58e7580038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.346399][T11256] RAX: ffffffffffffffda RBX: 00007f58e69e6090 RCX: 00007f58e678eec9 [ 291.346415][T11256] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 291.346429][T11256] RBP: 00007f58e7580090 R08: 0000000000000000 R09: 0000000000000000 [ 291.346443][T11256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 291.346456][T11256] R13: 00007f58e69e6128 R14: 00007f58e69e6090 R15: 00007ffebdf7e6d8 [ 291.346494][T11256] [ 292.413938][T11280] tipc: Enabling of bearer rejected, failed to enable media [ 292.589630][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1417'. [ 293.882662][T11314] FAULT_INJECTION: forcing a failure. [ 293.882662][T11314] name failslab, interval 1, probability 0, space 0, times 0 [ 293.923023][T11314] CPU: 0 UID: 0 PID: 11314 Comm: syz.2.1423 Not tainted syzkaller #0 PREEMPT(full) [ 293.923056][T11314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.923070][T11314] Call Trace: [ 293.923079][T11314] [ 293.923088][T11314] dump_stack_lvl+0x189/0x250 [ 293.923118][T11314] ? __pfx____ratelimit+0x10/0x10 [ 293.923144][T11314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.923168][T11314] ? __pfx__printk+0x10/0x10 [ 293.923198][T11314] ? __pfx___might_resched+0x10/0x10 [ 293.923221][T11314] ? fs_reclaim_acquire+0x7d/0x100 [ 293.923260][T11314] should_fail_ex+0x414/0x560 [ 293.923293][T11314] should_failslab+0xa8/0x100 [ 293.923316][T11314] __kvmalloc_node_noprof+0x158/0x910 [ 293.923351][T11314] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 293.923389][T11314] alloc_netdev_mqs+0x8a6/0x11b0 [ 293.923427][T11314] rtnl_create_link+0x31f/0xd10 [ 293.923465][T11314] rtnl_newlink_create+0x25c/0xb00 [ 293.923496][T11314] ? __lock_acquire+0xab9/0xd20 [ 293.923524][T11314] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 293.923553][T11314] ? __pfx___mutex_lock+0x10/0x10 [ 293.923603][T11314] ? ns_capable+0x8a/0xf0 [ 293.923632][T11314] rtnl_newlink+0x16e4/0x1c80 [ 293.923656][T11314] ? netlink_deliver_tap+0x19c/0x1b0 [ 293.923694][T11314] ? __pfx_rtnl_newlink+0x10/0x10 [ 293.923745][T11314] ? kasan_quarantine_put+0xdd/0x220 [ 293.923775][T11314] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.923807][T11314] ? nlmon_xmit+0xb0/0x100 [ 293.923839][T11314] ? kmem_cache_free+0x19b/0x690 [ 293.923879][T11314] ? __local_bh_enable_ip+0x12d/0x1c0 [ 293.923902][T11314] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.923928][T11314] ? __local_bh_enable_ip+0x12d/0x1c0 [ 293.923950][T11314] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 293.923978][T11314] ? __dev_queue_xmit+0x27b/0x3b50 [ 293.924006][T11314] ? __dev_queue_xmit+0x27b/0x3b50 [ 293.924031][T11314] ? __dev_queue_xmit+0x27b/0x3b50 [ 293.924060][T11314] ? __dev_queue_xmit+0x1d79/0x3b50 [ 293.924086][T11314] ? kasan_save_track+0x3e/0x80 [ 293.924113][T11314] ? __kasan_slab_alloc+0x6c/0x80 [ 293.924147][T11314] ? __lock_acquire+0xab9/0xd20 [ 293.924195][T11314] ? __pfx_rtnl_newlink+0x10/0x10 [ 293.924215][T11314] rtnetlink_rcv_msg+0x7cf/0xb70 [ 293.924241][T11314] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 293.924261][T11314] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 293.924280][T11314] ? ref_tracker_free+0x63a/0x7d0 [ 293.924307][T11314] ? __asan_memcpy+0x40/0x70 [ 293.924333][T11314] ? __pfx_ref_tracker_free+0x10/0x10 [ 293.924373][T11314] netlink_rcv_skb+0x205/0x470 [ 293.924397][T11314] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 293.924421][T11314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 293.924458][T11314] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.924491][T11314] netlink_unicast+0x82f/0x9e0 [ 293.924534][T11314] ? __pfx_netlink_unicast+0x10/0x10 [ 293.924569][T11314] ? netlink_sendmsg+0x642/0xb30 [ 293.924591][T11314] ? skb_put+0x11b/0x210 [ 293.924661][T11314] netlink_sendmsg+0x805/0xb30 [ 293.924694][T11314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.924720][T11314] ? aa_sock_msg_perm+0xf1/0x1d0 [ 293.924749][T11314] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.924768][T11314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.924793][T11314] __sock_sendmsg+0x21c/0x270 [ 293.924826][T11314] ____sys_sendmsg+0x505/0x830 [ 293.924858][T11314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.924891][T11314] ? import_iovec+0x74/0xa0 [ 293.924915][T11314] ___sys_sendmsg+0x21f/0x2a0 [ 293.924941][T11314] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.925007][T11314] ? __fget_files+0x2a/0x420 [ 293.925026][T11314] ? __fget_files+0x3a0/0x420 [ 293.925057][T11314] __x64_sys_sendmsg+0x19b/0x260 [ 293.925085][T11314] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.925122][T11314] ? __pfx_ksys_write+0x10/0x10 [ 293.925157][T11314] ? do_syscall_64+0xbe/0xfa0 [ 293.925186][T11314] do_syscall_64+0xfa/0xfa0 [ 293.925210][T11314] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.925235][T11314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.925257][T11314] ? clear_bhb_loop+0x60/0xb0 [ 293.925282][T11314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.925302][T11314] RIP: 0033:0x7f0eb218eec9 [ 293.925323][T11314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.925342][T11314] RSP: 002b:00007f0eb2f3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.925365][T11314] RAX: ffffffffffffffda RBX: 00007f0eb23e5fa0 RCX: 00007f0eb218eec9 [ 293.925381][T11314] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 293.925394][T11314] RBP: 00007f0eb2f3e090 R08: 0000000000000000 R09: 0000000000000000 [ 293.925407][T11314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 293.925420][T11314] R13: 00007f0eb23e6038 R14: 00007f0eb23e5fa0 R15: 00007fff0d93b6d8 [ 293.925459][T11314] [ 295.214426][T11333] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1431'. [ 295.226750][T11333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1431'. [ 295.261860][T11333] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1431'. [ 295.311760][T11333] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1431'. [ 295.422133][T11351] FAULT_INJECTION: forcing a failure. [ 295.422133][T11351] name failslab, interval 1, probability 0, space 0, times 0 [ 295.512204][T11351] CPU: 0 UID: 0 PID: 11351 Comm: syz.4.1436 Not tainted syzkaller #0 PREEMPT(full) [ 295.512237][T11351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 295.512252][T11351] Call Trace: [ 295.512261][T11351] [ 295.512271][T11351] dump_stack_lvl+0x189/0x250 [ 295.512300][T11351] ? __pfx____ratelimit+0x10/0x10 [ 295.512327][T11351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.512350][T11351] ? __pfx__printk+0x10/0x10 [ 295.512380][T11351] ? __pfx___might_resched+0x10/0x10 [ 295.512403][T11351] ? fs_reclaim_acquire+0x7d/0x100 [ 295.512442][T11351] should_fail_ex+0x414/0x560 [ 295.512474][T11351] should_failslab+0xa8/0x100 [ 295.512497][T11351] __kvmalloc_node_noprof+0x158/0x910 [ 295.512532][T11351] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 295.512571][T11351] alloc_netdev_mqs+0x8a6/0x11b0 [ 295.512609][T11351] rtnl_create_link+0x31f/0xd10 [ 295.512647][T11351] rtnl_newlink_create+0x25c/0xb00 [ 295.512686][T11351] ? __lock_acquire+0xab9/0xd20 [ 295.512714][T11351] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 295.512743][T11351] ? __pfx___mutex_lock+0x10/0x10 [ 295.512785][T11351] ? ns_capable+0x8a/0xf0 [ 295.512812][T11351] rtnl_newlink+0x16e4/0x1c80 [ 295.512834][T11351] ? netlink_deliver_tap+0x19c/0x1b0 [ 295.512869][T11351] ? __pfx_rtnl_newlink+0x10/0x10 [ 295.512918][T11351] ? kasan_quarantine_put+0xdd/0x220 [ 295.512946][T11351] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.512978][T11351] ? nlmon_xmit+0xb0/0x100 [ 295.513009][T11351] ? kmem_cache_free+0x19b/0x690 [ 295.513051][T11351] ? __local_bh_enable_ip+0x12d/0x1c0 [ 295.513074][T11351] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.513101][T11351] ? __local_bh_enable_ip+0x12d/0x1c0 [ 295.513123][T11351] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 295.513152][T11351] ? __dev_queue_xmit+0x27b/0x3b50 [ 295.513181][T11351] ? __dev_queue_xmit+0x27b/0x3b50 [ 295.513207][T11351] ? __dev_queue_xmit+0x27b/0x3b50 [ 295.513236][T11351] ? __dev_queue_xmit+0x1d79/0x3b50 [ 295.513263][T11351] ? kasan_save_track+0x3e/0x80 [ 295.513291][T11351] ? __kasan_slab_alloc+0x6c/0x80 [ 295.513327][T11351] ? __lock_acquire+0xab9/0xd20 [ 295.513377][T11351] ? __pfx_rtnl_newlink+0x10/0x10 [ 295.513398][T11351] rtnetlink_rcv_msg+0x7cf/0xb70 [ 295.513425][T11351] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 295.513445][T11351] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.513464][T11351] ? ref_tracker_free+0x63a/0x7d0 [ 295.513494][T11351] ? __asan_memcpy+0x40/0x70 [ 295.513521][T11351] ? __pfx_ref_tracker_free+0x10/0x10 [ 295.513562][T11351] netlink_rcv_skb+0x205/0x470 [ 295.513587][T11351] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 295.513610][T11351] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.513647][T11351] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.513688][T11351] netlink_unicast+0x82f/0x9e0 [ 295.513732][T11351] ? __pfx_netlink_unicast+0x10/0x10 [ 295.513768][T11351] ? netlink_sendmsg+0x642/0xb30 [ 295.513789][T11351] ? skb_put+0x11b/0x210 [ 295.513816][T11351] netlink_sendmsg+0x805/0xb30 [ 295.513850][T11351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.513878][T11351] ? aa_sock_msg_perm+0xf1/0x1d0 [ 295.513911][T11351] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 295.513932][T11351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.513957][T11351] __sock_sendmsg+0x21c/0x270 [ 295.513994][T11351] ____sys_sendmsg+0x505/0x830 [ 295.514027][T11351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.514064][T11351] ? import_iovec+0x74/0xa0 [ 295.514090][T11351] ___sys_sendmsg+0x21f/0x2a0 [ 295.514118][T11351] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.514187][T11351] ? __fget_files+0x2a/0x420 [ 295.514205][T11351] ? __fget_files+0x3a0/0x420 [ 295.514237][T11351] __x64_sys_sendmsg+0x19b/0x260 [ 295.514267][T11351] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.514305][T11351] ? __pfx_ksys_write+0x10/0x10 [ 295.514341][T11351] ? do_syscall_64+0xbe/0xfa0 [ 295.514373][T11351] do_syscall_64+0xfa/0xfa0 [ 295.514398][T11351] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.514424][T11351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.514447][T11351] ? clear_bhb_loop+0x60/0xb0 [ 295.514474][T11351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.514495][T11351] RIP: 0033:0x7fa0d658eec9 [ 295.514517][T11351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.514536][T11351] RSP: 002b:00007fa0d7423038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.514560][T11351] RAX: ffffffffffffffda RBX: 00007fa0d67e5fa0 RCX: 00007fa0d658eec9 [ 295.514576][T11351] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 295.514591][T11351] RBP: 00007fa0d7423090 R08: 0000000000000000 R09: 0000000000000000 [ 295.514605][T11351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.514618][T11351] R13: 00007fa0d67e6038 R14: 00007fa0d67e5fa0 R15: 00007ffd8ea530f8 [ 295.514655][T11351] [ 296.043011][T11339] lo speed is unknown, defaulting to 1000 [ 296.391345][T11366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1439'. [ 296.403999][T11364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1437'. [ 296.894821][T11381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1441'. [ 297.008721][T11378] syzkaller1: entered promiscuous mode [ 297.014506][T11378] syzkaller1: entered allmulticast mode [ 297.025506][T11378] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 297.156754][T11384] syzkaller1: entered promiscuous mode [ 297.162475][T11384] syzkaller1: entered allmulticast mode [ 297.434954][T11391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1444'. [ 297.492969][T11391] vlan5: entered promiscuous mode [ 297.498136][T11391] gretap0: entered promiscuous mode [ 297.822317][T11413] FAULT_INJECTION: forcing a failure. [ 297.822317][T11413] name failslab, interval 1, probability 0, space 0, times 0 [ 297.845337][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'. [ 297.867799][T11413] CPU: 0 UID: 0 PID: 11413 Comm: syz.0.1449 Not tainted syzkaller #0 PREEMPT(full) [ 297.867830][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.867845][T11413] Call Trace: [ 297.867853][T11413] [ 297.867863][T11413] dump_stack_lvl+0x189/0x250 [ 297.867891][T11413] ? __pfx____ratelimit+0x10/0x10 [ 297.867918][T11413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.867942][T11413] ? __pfx__printk+0x10/0x10 [ 297.867971][T11413] ? __pfx___might_resched+0x10/0x10 [ 297.868001][T11413] should_fail_ex+0x414/0x560 [ 297.868033][T11413] should_failslab+0xa8/0x100 [ 297.868056][T11413] __kmalloc_cache_noprof+0x6f/0x6f0 [ 297.868087][T11413] ? __asan_memset+0x22/0x50 [ 297.868112][T11413] ? alloc_netdev_mqs+0xb97/0x11b0 [ 297.868143][T11413] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 297.868173][T11413] alloc_netdev_mqs+0xb97/0x11b0 [ 297.868211][T11413] rtnl_create_link+0x31f/0xd10 [ 297.868249][T11413] rtnl_newlink_create+0x25c/0xb00 [ 297.868286][T11413] ? __lock_acquire+0xab9/0xd20 [ 297.868315][T11413] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 297.868344][T11413] ? __pfx___mutex_lock+0x10/0x10 [ 297.868385][T11413] ? ns_capable+0x8a/0xf0 [ 297.868413][T11413] rtnl_newlink+0x16e4/0x1c80 [ 297.868437][T11413] ? netlink_deliver_tap+0x19c/0x1b0 [ 297.868474][T11413] ? __pfx_rtnl_newlink+0x10/0x10 [ 297.868526][T11413] ? kasan_quarantine_put+0xdd/0x220 [ 297.868556][T11413] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.868594][T11413] ? nlmon_xmit+0xb0/0x100 [ 297.868625][T11413] ? kmem_cache_free+0x19b/0x690 [ 297.868668][T11413] ? __local_bh_enable_ip+0x12d/0x1c0 [ 297.868692][T11413] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.868720][T11413] ? __local_bh_enable_ip+0x12d/0x1c0 [ 297.868744][T11413] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 297.868772][T11413] ? __dev_queue_xmit+0x27b/0x3b50 [ 297.868800][T11413] ? __dev_queue_xmit+0x27b/0x3b50 [ 297.868826][T11413] ? __dev_queue_xmit+0x27b/0x3b50 [ 297.868856][T11413] ? __dev_queue_xmit+0x1d79/0x3b50 [ 297.868882][T11413] ? kasan_save_track+0x3e/0x80 [ 297.868910][T11413] ? __kasan_slab_alloc+0x6c/0x80 [ 297.868947][T11413] ? __lock_acquire+0xab9/0xd20 [ 297.868998][T11413] ? __pfx_rtnl_newlink+0x10/0x10 [ 297.869019][T11413] rtnetlink_rcv_msg+0x7cf/0xb70 [ 297.869046][T11413] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 297.869067][T11413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.869086][T11413] ? ref_tracker_free+0x63a/0x7d0 [ 297.869115][T11413] ? __asan_memcpy+0x40/0x70 [ 297.869142][T11413] ? __pfx_ref_tracker_free+0x10/0x10 [ 297.869182][T11413] netlink_rcv_skb+0x205/0x470 [ 297.869206][T11413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 297.869230][T11413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.869274][T11413] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.869307][T11413] netlink_unicast+0x82f/0x9e0 [ 297.869352][T11413] ? __pfx_netlink_unicast+0x10/0x10 [ 297.869388][T11413] ? netlink_sendmsg+0x642/0xb30 [ 297.869409][T11413] ? skb_put+0x11b/0x210 [ 297.869437][T11413] netlink_sendmsg+0x805/0xb30 [ 297.869472][T11413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.869500][T11413] ? aa_sock_msg_perm+0xf1/0x1d0 [ 297.869533][T11413] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.869554][T11413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.869579][T11413] __sock_sendmsg+0x21c/0x270 [ 297.869615][T11413] ____sys_sendmsg+0x505/0x830 [ 297.869648][T11413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.869687][T11413] ? import_iovec+0x74/0xa0 [ 297.869712][T11413] ___sys_sendmsg+0x21f/0x2a0 [ 297.869742][T11413] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.869814][T11413] ? __fget_files+0x2a/0x420 [ 297.869833][T11413] ? __fget_files+0x3a0/0x420 [ 297.869865][T11413] __x64_sys_sendmsg+0x19b/0x260 [ 297.869895][T11413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.869934][T11413] ? __pfx_ksys_write+0x10/0x10 [ 297.869970][T11413] ? do_syscall_64+0xbe/0xfa0 [ 297.870001][T11413] do_syscall_64+0xfa/0xfa0 [ 297.870027][T11413] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.870052][T11413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.870074][T11413] ? clear_bhb_loop+0x60/0xb0 [ 297.870102][T11413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.870122][T11413] RIP: 0033:0x7f58e678eec9 [ 297.870142][T11413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.870160][T11413] RSP: 002b:00007f58e7580038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.870184][T11413] RAX: ffffffffffffffda RBX: 00007f58e69e6090 RCX: 00007f58e678eec9 [ 297.870200][T11413] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 297.870214][T11413] RBP: 00007f58e7580090 R08: 0000000000000000 R09: 0000000000000000 [ 297.870228][T11413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.870241][T11413] R13: 00007f58e69e6128 R14: 00007f58e69e6090 R15: 00007ffebdf7e6d8 [ 297.870285][T11413] [ 298.428565][T11397] lo speed is unknown, defaulting to 1000 [ 298.430384][T11416] netlink: 'syz.3.1451': attribute type 2 has an invalid length. [ 298.546226][T11426] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 298.705988][T11426] netlink: 'syz.2.1450': attribute type 3 has an invalid length. [ 298.782213][T11426] netlink: 'syz.2.1450': attribute type 1 has an invalid length. [ 298.894462][T11426] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1450'. [ 298.999159][T11429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1453'. [ 299.108754][T11440] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1453'. [ 299.736184][T11467] netlink: 'syz.3.1457': attribute type 5 has an invalid length. [ 299.746686][T11467] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1457'. [ 299.848661][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1460'. [ 299.887430][T11443] lo speed is unknown, defaulting to 1000 [ 300.170001][T11483] tipc: Enabled bearer , priority 0 [ 300.213103][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 300.430285][T11483] bridge_slave_1: left allmulticast mode [ 300.436887][T11483] bridge_slave_1: left promiscuous mode [ 300.456010][T11483] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.466712][T11483] bridge_slave_0: left allmulticast mode [ 300.472682][T11483] bridge_slave_0: left promiscuous mode [ 300.478729][T11483] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.657749][T11445] lo speed is unknown, defaulting to 1000 [ 300.782600][T11482] tipc: Disabling bearer [ 300.920669][T11514] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1469'. [ 300.947768][T11518] tipc: Enabled bearer , priority 0 [ 300.956263][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 301.024862][T11518] tipc: Disabling bearer [ 301.129227][T11466] lo speed is unknown, defaulting to 1000 [ 301.173181][T11528] netlink: 14679 bytes leftover after parsing attributes in process `syz.4.1473'. [ 301.243507][T11528] IPv6: Can't replace route, no match found [ 301.356078][T11533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.842653][T11553] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 301.902195][T11553] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 302.327514][T11572] dvmrp8: entered allmulticast mode [ 302.758442][T11566] lo speed is unknown, defaulting to 1000 [ 302.797115][T11582] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 303.079648][T11593] block nbd0: server does not support multiple connections per device. [ 303.094888][T11593] block nbd0: shutting down sockets [ 303.265912][T11603] __nla_validate_parse: 3 callbacks suppressed [ 303.265935][T11603] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1485'. [ 303.315677][T11604] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.410121][T11606] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.1487'. [ 303.419764][T11606] openvswitch: netlink: Key type 112 is out of range max 32 [ 303.578565][T11577] lo speed is unknown, defaulting to 1000 [ 303.636924][T11595] lo speed is unknown, defaulting to 1000 [ 303.850030][T11617] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1491'. [ 304.174832][T11629] geneve0: entered promiscuous mode [ 304.180525][T11629] geneve0: entered allmulticast mode [ 306.380466][T11628] lo speed is unknown, defaulting to 1000 [ 306.477738][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1498'. [ 306.730224][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 306.893937][T11658] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1501'. [ 306.976943][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1502'. [ 307.054377][T11661] vlan3: entered promiscuous mode [ 307.197916][T11666] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1503'. [ 307.217701][T11666] netlink: 'syz.3.1503': attribute type 1 has an invalid length. [ 307.271736][T11665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1503'. [ 308.694109][T11705] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1515'. [ 308.784713][T11712] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 308.819830][T11712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1518'. [ 308.864281][T11716] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1520'. [ 308.975338][T11722] syzkaller1: entered promiscuous mode [ 309.003654][T11722] syzkaller1: entered allmulticast mode [ 309.402577][T11710] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20001 [ 309.525094][T11693] lo speed is unknown, defaulting to 1000 [ 310.177927][T11755] syzkaller0: entered promiscuous mode [ 310.227422][T11755] syzkaller0: entered allmulticast mode [ 310.245065][T11754] tipc: Enabled bearer , priority 0 [ 310.287766][T11763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1529'. [ 310.307597][T11761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1528'. [ 310.379694][T11754] tipc: Resetting bearer [ 310.421377][T11754] tipc: Disabling bearer [ 310.598894][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 310.641117][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 310.659465][T11774] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1533'. [ 310.668742][T11771] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1534'. [ 310.692992][T11776] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1534'. [ 310.791214][T11784] bond5: (slave dummy0): Releasing active interface [ 310.996194][T11784] bridge_slave_0: left allmulticast mode [ 311.002115][T11784] bridge_slave_0: left promiscuous mode [ 311.008415][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.111052][T11784] bridge_slave_1: left allmulticast mode [ 311.160980][T11784] bridge_slave_1: left promiscuous mode [ 311.203568][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.456018][T11784] .`: (slave bond_slave_0): Releasing backup interface [ 311.521089][T11784] .`: (slave bond_slave_1): Releasing backup interface [ 311.575487][T11784] team0: Port device team_slave_0 removed [ 311.601503][T11784] team0: Port device team_slave_1 removed [ 311.609120][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.624343][T11784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.675962][T11784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.684206][T11784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.701497][T11784] bond1: (slave gretap1): Releasing active interface [ 311.736158][T11784] batman_adv: batadv0: Removing interface: vlan4 [ 311.746274][T11784] bond6: (slave veth7): Releasing active interface [ 311.946052][T11820] tipc: Enabled bearer , priority 0 [ 312.028328][T11820] tipc: Disabling bearer [ 312.271162][T11833] netlink: 'syz.4.1543': attribute type 5 has an invalid length. [ 312.282126][T11833] netlink: 'syz.4.1543': attribute type 8 has an invalid length. [ 312.299155][T11838] netlink: 'syz.1.1541': attribute type 6 has an invalid length. [ 312.322949][T11838] netlink: 'syz.1.1541': attribute type 5 has an invalid length. [ 312.357281][T11833] geneve3: entered promiscuous mode [ 312.362565][T11833] geneve3: entered allmulticast mode [ 312.394039][ T1113] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 312.402484][ T1113] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 312.403460][T11838] netlink: 'syz.1.1541': attribute type 4 has an invalid length. [ 312.424707][ T1113] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 312.447668][ T1113] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 312.462603][T11772] lo speed is unknown, defaulting to 1000 [ 312.509201][T11844] netlink: 'syz.1.1541': attribute type 4 has an invalid length. [ 312.545941][T11846] netlink: 'syz.4.1545': attribute type 1 has an invalid length. [ 313.098255][T11867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.148109][ T6949] lo speed is unknown, defaulting to 1000 [ 313.155146][ T6949] syz1: Port: 1 Link DOWN [ 313.377245][T11834] lo speed is unknown, defaulting to 1000 [ 314.044227][T11895] __nla_validate_parse: 7 callbacks suppressed [ 314.044249][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1555'. [ 314.230200][T11883] lo speed is unknown, defaulting to 1000 [ 314.817165][T11912] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1561'. [ 314.844054][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 314.870648][T11910] netlink: 'syz.4.1560': attribute type 8 has an invalid length. [ 314.967599][T11916] netlink: 'syz.1.1563': attribute type 7 has an invalid length. [ 314.993730][T11916] netlink: 'syz.1.1563': attribute type 8 has an invalid length. [ 315.256842][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1566'. [ 315.297555][T11921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1562'. [ 315.468376][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'. [ 315.818995][T11959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1573'. [ 315.963274][T11934] lo speed is unknown, defaulting to 1000 [ 316.147088][T11971] nbd: must specify at least one socket [ 317.219822][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'. [ 317.976922][T12046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1599'. [ 318.101532][T12050] Unsupported ieee802154 address type: 0 [ 318.114298][T12046] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 318.160908][T12046] bond5 (unregistering): Released all slaves [ 318.823881][T12074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 318.946865][T12078] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 319.053225][T12079] xfrm1: entered allmulticast mode [ 319.152476][T12041] lo speed is unknown, defaulting to 1000 [ 319.176973][T12088] bridge0: entered promiscuous mode [ 319.199909][T12088] bridge0: port 2(macvlan2) entered blocking state [ 319.236529][T12088] bridge0: port 2(macvlan2) entered disabled state [ 319.249959][T12088] macvlan2: entered allmulticast mode [ 319.257150][T12088] bridge0: entered allmulticast mode [ 319.270020][T12088] macvlan2: left allmulticast mode [ 319.275916][T12088] bridge0: left allmulticast mode [ 319.282606][T12088] bridge0: left promiscuous mode [ 319.328543][T12105] __nla_validate_parse: 1 callbacks suppressed [ 319.328564][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 319.452099][T12076] lo speed is unknown, defaulting to 1000 [ 319.617782][T12110] netlink: 'syz.3.1616': attribute type 5 has an invalid length. [ 319.648417][T12116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1618'. [ 319.970784][T12133] netlink: 'syz.3.1619': attribute type 15 has an invalid length. [ 320.017048][T12130] gretap0: entered allmulticast mode [ 320.060178][T12131] macsec1: entered promiscuous mode [ 320.066208][T12131] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 320.091428][T12131] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 320.213591][T12141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'. [ 320.427567][T12147] block nbd3: not configured, cannot reconfigure [ 320.588134][T12147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1624'. [ 320.634140][T12157] IPv6: addrconf: prefix option has invalid lifetime [ 320.638461][T12126] lo speed is unknown, defaulting to 1000 [ 320.756742][T12161] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 320.784952][T12166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1630'. [ 320.885839][T12162] warn_alloc: 1 callbacks suppressed [ 320.885862][T12162] syz.1.1628: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 320.930299][T12162] CPU: 0 UID: 0 PID: 12162 Comm: syz.1.1628 Not tainted syzkaller #0 PREEMPT(full) [ 320.930331][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.930350][T12162] Call Trace: [ 320.930359][T12162] [ 320.930369][T12162] dump_stack_lvl+0x189/0x250 [ 320.930402][T12162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.930426][T12162] ? __pfx__printk+0x10/0x10 [ 320.930449][T12162] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 320.930480][T12162] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 320.930520][T12162] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 320.930554][T12162] warn_alloc+0x214/0x310 [ 320.930594][T12162] ? __pfx_warn_alloc+0x10/0x10 [ 320.930642][T12162] ? __get_vm_area_node+0x28f/0x300 [ 320.930674][T12162] ? nf_tables_newset+0x1330/0x2540 [ 320.930708][T12162] __vmalloc_node_range_noprof+0x690/0x12d0 [ 320.930775][T12162] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.930807][T12162] ? nf_tables_newset+0x1330/0x2540 [ 320.930840][T12162] ? rcu_is_watching+0x15/0xb0 [ 320.930866][T12162] ? nf_tables_newset+0x1330/0x2540 [ 320.930907][T12162] __kvmalloc_node_noprof+0x674/0x910 [ 320.930935][T12162] ? nf_tables_newset+0x1330/0x2540 [ 320.930964][T12162] ? nft_set_lookup+0x128/0x150 [ 320.931012][T12162] ? nft_hash_privsize+0x7f/0xf0 [ 320.931040][T12162] nf_tables_newset+0x1330/0x2540 [ 320.931084][T12162] ? __pfx_nf_tables_newset+0x10/0x10 [ 320.931147][T12162] ? __nla_parse+0x40/0x60 [ 320.931184][T12162] nfnetlink_rcv+0x11d9/0x2590 [ 320.931260][T12162] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 320.931314][T12162] ? ref_tracker_free+0x63a/0x7d0 [ 320.931377][T12162] ? __netlink_deliver_tap+0x807/0x850 [ 320.931401][T12162] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.931445][T12162] netlink_unicast+0x82f/0x9e0 [ 320.931490][T12162] ? __pfx_netlink_unicast+0x10/0x10 [ 320.931533][T12162] ? netlink_sendmsg+0x642/0xb30 [ 320.931555][T12162] ? skb_put+0x11b/0x210 [ 320.931583][T12162] netlink_sendmsg+0x805/0xb30 [ 320.931618][T12162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.931647][T12162] ? aa_sock_msg_perm+0xf1/0x1d0 [ 320.931692][T12162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.931712][T12162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.931737][T12162] __sock_sendmsg+0x21c/0x270 [ 320.931772][T12162] ____sys_sendmsg+0x505/0x830 [ 320.931804][T12162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.931841][T12162] ? import_iovec+0x74/0xa0 [ 320.931867][T12162] ___sys_sendmsg+0x21f/0x2a0 [ 320.931895][T12162] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.931964][T12162] ? __fget_files+0x2a/0x420 [ 320.931983][T12162] ? __fget_files+0x3a0/0x420 [ 320.932015][T12162] __x64_sys_sendmsg+0x19b/0x260 [ 320.932044][T12162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.932090][T12162] ? do_syscall_64+0xbe/0xfa0 [ 320.932123][T12162] do_syscall_64+0xfa/0xfa0 [ 320.932148][T12162] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.932174][T12162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.932195][T12162] ? clear_bhb_loop+0x60/0xb0 [ 320.932222][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.932250][T12162] RIP: 0033:0x7f4583f8eec9 [ 320.932271][T12162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.932289][T12162] RSP: 002b:00007f4584e2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.932312][T12162] RAX: ffffffffffffffda RBX: 00007f45841e6090 RCX: 00007f4583f8eec9 [ 320.932327][T12162] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000011 [ 320.932341][T12162] RBP: 00007f4584011f91 R08: 0000000000000000 R09: 0000000000000000 [ 320.932354][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.932366][T12162] R13: 00007f45841e6128 R14: 00007f45841e6090 R15: 00007ffd552cd8d8 [ 320.932403][T12162] [ 321.030349][T12162] Mem-Info: [ 321.306832][T12162] active_anon:8028 inactive_anon:0 isolated_anon:0 [ 321.306832][T12162] active_file:3479 inactive_file:39969 isolated_file:0 [ 321.306832][T12162] unevictable:768 dirty:199 writeback:0 [ 321.306832][T12162] slab_reclaimable:11652 slab_unreclaimable:136889 [ 321.306832][T12162] mapped:29270 shmem:5453 pagetables:938 [ 321.306832][T12162] sec_pagetables:0 bounce:0 [ 321.306832][T12162] kernel_misc_reclaimable:0 [ 321.306832][T12162] free:1278275 free_pcp:17631 free_cma:0 [ 321.355156][T12162] Node 0 active_anon:32112kB inactive_anon:0kB active_file:13916kB inactive_file:159672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117080kB dirty:796kB writeback:0kB shmem:20276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13448kB pagetables:3604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 321.387848][T12162] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 321.419359][T12162] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.455872][T12162] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 321.461798][T12162] Node 0 DMA32 free:1205960kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27812kB inactive_anon:0kB active_file:13916kB inactive_file:159672kB unevictable:1536kB writepending:796kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:56512kB local_pcp:32908kB free_cma:0kB [ 321.555384][T12162] lowmem_reserve[]: 0 0 1 1 1 [ 321.560207][T12162] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.600402][T12162] lowmem_reserve[]: 0 0 0 0 0 [ 321.605497][T12162] Node 1 Normal free:3891780kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18708kB local_pcp:8716kB free_cma:0kB [ 321.652514][T12162] lowmem_reserve[]: 0 0 0 0 0 [ 321.666105][T12162] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 321.679857][T12162] Node 0 DMA32: 1108*4kB (UME) 207*8kB (UME) 701*16kB (UME) 831*32kB (UME) 229*64kB (UME) 66*128kB (UME) 33*256kB (UME) 9*512kB (UME) 24*1024kB (UM) 7*2048kB (UME) 267*4096kB (UM) = 1212600kB [ 321.700150][T12162] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 321.712895][T12162] Node 1 Normal: 203*4kB (UME) 47*8kB (UME) 38*16kB (UME) 90*32kB (UME) 32*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3891780kB [ 321.738909][T12162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.804498][T12162] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.832171][T12162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.857277][T12162] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.866912][T12162] 44823 total pagecache pages [ 321.871763][T12162] 0 pages in swap cache [ 321.877408][T12162] Free swap = 124996kB [ 321.881670][T12162] Total swap = 124996kB [ 321.886713][T12189] batman_adv: batadv0: Adding interface: dummy0 [ 321.899416][T12189] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.932957][T12162] 2097051 pages RAM [ 321.943309][T12162] 0 pages HighMem/MovableOnly [ 321.953724][T12162] 424543 pages reserved [ 321.957850][T12189] batman_adv: batadv0: Interface activated: dummy0 [ 321.957924][T12162] 0 pages cma reserved [ 322.249407][T12206] netlink: 'syz.3.1637': attribute type 13 has an invalid length. [ 322.437746][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.715025][T12099] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.733579][T12099] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 47226 - 0 [ 322.751829][T12099] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.772301][T12099] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 47226 - 0 [ 322.813055][T12099] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.831948][T12099] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 47226 - 0 [ 322.857785][T12199] Set syz1 is full, maxelem 6117 reached [ 322.861069][T12099] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.892645][T12099] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 47226 - 0 [ 322.998743][T12229] scsi_nl_rcv_msg: discarding partial skb [ 323.108771][T12237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1646'. [ 323.392286][T12234] lo speed is unknown, defaulting to 1000 [ 323.873846][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1650'. [ 323.901845][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1650'. [ 323.933162][T12263] syzkaller1: entered promiscuous mode [ 323.942142][T12263] syzkaller1: entered allmulticast mode [ 323.965946][T12260] tipc: Enabled bearer , priority 0 [ 323.991161][T12265] syzkaller0: entered promiscuous mode [ 324.000616][T12265] syzkaller0: entered allmulticast mode [ 324.176938][T12269] ipvlan0: entered promiscuous mode [ 324.533081][T12278] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 324.615013][T12265] tipc: Resetting bearer [ 324.705029][T12265] tipc: Disabling bearer [ 324.742080][T12261] lo speed is unknown, defaulting to 1000 [ 324.831317][T12282] tipc: Enabled bearer , priority 0 [ 324.907009][T12286] syzkaller0: entered promiscuous mode [ 324.912543][T12286] syzkaller0: entered allmulticast mode [ 324.968757][T12282] tipc: Resetting bearer [ 325.092131][T12281] tipc: Resetting bearer [ 325.160007][T12281] tipc: Disabling bearer [ 325.184604][T12255] lo speed is unknown, defaulting to 1000 [ 325.512533][T12303] SET target dimension over the limit! [ 325.583569][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 325.859025][T12319] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.026566][T12290] lo speed is unknown, defaulting to 1000 [ 326.636031][T12348] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 327.060705][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1679'. [ 327.247626][T12382] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 327.583039][T12365] lo speed is unknown, defaulting to 1000 [ 328.203154][T12430] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1699'. [ 328.386214][T12427] bond7: (slave bond_slave_1): Device is not bonding slave [ 328.420638][T12427] bond7: option active_slave: invalid value (bond_slave_1) [ 328.445051][T12427] bond7 (unregistering): Released all slaves [ 328.730348][T12458] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 328.876949][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1698'. [ 329.308664][T12467] lo speed is unknown, defaulting to 1000 [ 329.467254][T12487] netlink: 'syz.0.1711': attribute type 11 has an invalid length. [ 330.176591][T12528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 330.590914][T12547] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1725'. [ 330.634895][T12515] lo speed is unknown, defaulting to 1000 [ 330.684414][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 330.770092][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1726'. [ 331.161104][T12576] syzkaller1: entered promiscuous mode [ 331.182929][T12576] syzkaller1: entered allmulticast mode [ 331.434652][T12591] pimreg: entered allmulticast mode [ 331.458708][T12595] pimreg: left allmulticast mode [ 331.587600][T12516] lo speed is unknown, defaulting to 1000 [ 332.557521][T12621] batadv_slave_0: entered promiscuous mode [ 332.567860][T12619] batadv_slave_0: left promiscuous mode [ 332.768184][T12593] lo speed is unknown, defaulting to 1000 [ 332.930627][T12637] netlink: 'syz.3.1747': attribute type 178 has an invalid length. [ 333.389230][T12653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1752'. [ 333.417281][T12653] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.543858][T12653] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.641645][T12660] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1754'. [ 333.730868][T12653] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.839646][T12653] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.146516][T12095] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.154341][T12674] netlink: 'syz.0.1757': attribute type 4 has an invalid length. [ 334.158719][T12095] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.241346][T12095] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.363068][T12100] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.569091][T12675] lo speed is unknown, defaulting to 1000 [ 334.786867][T12694] tipc: Enabled bearer , priority 0 [ 334.883690][T12694] tipc: Resetting bearer [ 334.906773][T12703] netlink: 'syz.3.1766': attribute type 4 has an invalid length. [ 335.042218][T12687] tipc: Disabling bearer [ 335.181313][T12716] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1769'. [ 335.182851][T12708] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1768'. [ 335.565624][T12735] tipc: Enabling of bearer rejected, failed to enable media [ 335.906714][T12756] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1779'. [ 335.998369][T12757] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1779'. [ 336.663722][T12771] lo speed is unknown, defaulting to 1000 [ 337.055727][T12786] lo speed is unknown, defaulting to 1000 [ 337.400271][T12798] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 337.524338][T12819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1794'. [ 337.537854][T12819] tipc: Invalid UDP bearer configuration [ 337.537921][T12819] tipc: Enabling of bearer rejected, failed to enable media [ 337.565838][T12800] syzkaller0: entered promiscuous mode [ 337.571369][T12800] syzkaller0: entered allmulticast mode [ 338.142273][T12840] netlink: 'syz.0.1799': attribute type 2 has an invalid length. [ 338.172462][T12844] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1800'. [ 338.520094][T12856] bond4: option packets_per_slave: invalid value (18446744073642442750) [ 338.547099][T12856] bond4: option packets_per_slave: allowed values 0 - 65535 [ 338.584605][T12856] bond4 (unregistering): Released all slaves [ 338.929582][T12883] tipc: Enabled bearer , priority 0 [ 338.940027][T12883] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1810'. [ 338.941706][T12885] syzkaller0: entered promiscuous mode [ 338.955008][T12885] syzkaller0: entered allmulticast mode [ 338.962065][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1809'. [ 339.175018][T12899] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1813'. [ 339.185601][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 339.204868][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1811'. [ 339.232858][T12898] netlink: 'syz.1.1811': attribute type 18 has an invalid length. [ 339.524820][T12916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1818'. [ 339.626897][T12913] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 339.730989][T12896] lo speed is unknown, defaulting to 1000 [ 340.197263][T12946] netlink: 'syz.2.1827': attribute type 1 has an invalid length. [ 340.207676][T12946] netlink: 'syz.2.1827': attribute type 2 has an invalid length. [ 340.758911][T12985] tipc: Enabled bearer , priority 0 [ 340.766870][T12985] syzkaller0: entered promiscuous mode [ 340.772376][T12985] syzkaller0: entered allmulticast mode [ 340.943086][T12978] lo speed is unknown, defaulting to 1000 [ 341.022672][T12985] tipc: Resetting bearer [ 341.048032][T12984] tipc: Resetting bearer [ 341.115352][T12984] tipc: Disabling bearer [ 341.246376][T13006] netlink: 'syz.0.1839': attribute type 2 has an invalid length. [ 341.284556][T13006] __nla_validate_parse: 4 callbacks suppressed [ 341.284576][T13006] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1839'. [ 341.806854][T13001] lo speed is unknown, defaulting to 1000 [ 341.809968][T13016] pim6reg1: entered promiscuous mode [ 341.827906][T13016] pim6reg1: entered allmulticast mode [ 341.907045][T13020] sctp: [Deprecated]: syz.2.1842 (pid 13020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.907045][T13020] Use struct sctp_sack_info instead [ 342.148968][T13022] tipc: Enabling of bearer rejected, already enabled [ 342.177004][T13022] tipc: Resetting bearer [ 342.194244][T13022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1844'. [ 342.659779][T13033] netlink: 'syz.1.1846': attribute type 1 has an invalid length. [ 342.668270][T13032] netlink: 'syz.2.1850': attribute type 10 has an invalid length. [ 342.673334][T13037] netlink: 'syz.2.1850': attribute type 10 has an invalid length. [ 342.692590][T13032] bond0: (slave wlan1): Opening slave failed [ 342.705046][T13037] bond0: (slave wlan1): Opening slave failed [ 342.705550][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1849'. [ 342.742374][T13035] vlan3: entered promiscuous mode [ 342.747896][T13035] dummy0: entered promiscuous mode [ 343.204288][T13066] .`: (slave `): Releasing backup interface [ 343.250703][T13066] batman_adv: batadv0: Interface deactivated: dummy0 [ 343.262935][T13066] batman_adv: batadv0: Removing interface: dummy0 [ 343.518314][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 343.586146][T13074] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.672588][T13091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1863'. [ 343.825797][T13059] lo speed is unknown, defaulting to 1000 [ 343.904158][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1866'. [ 344.273709][T12100] bond0: (slave ip6gretap1): link status up again after 0 ms [ 344.313565][T12100] bond0: (slave ip6gretap1): link status up again after 0 ms [ 344.321008][T12100] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 344.437964][T13123] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 344.458950][T13128] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1874'. [ 344.486476][T13125] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1874'. [ 344.540568][T13125] dvmrp1: entered allmulticast mode [ 344.553102][T12100] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 344.612246][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 344.673388][T12100] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 344.792963][T12095] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 344.819363][T13113] lo speed is unknown, defaulting to 1000 [ 345.163617][T12100] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 345.231993][T13125] lo speed is unknown, defaulting to 1000 [ 345.323870][T13150] netlink: 'syz.4.1879': attribute type 1 has an invalid length. [ 345.533231][T12095] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 345.626546][T13153] netlink: 'syz.4.1880': attribute type 4 has an invalid length. [ 345.648825][ T1212] lo speed is unknown, defaulting to 1000 [ 345.654752][T12095] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 345.688254][ T1212] syz1: Port: 1 Link ACTIVE [ 345.709230][T13153] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1880'. [ 345.902272][T13165] netlink: 'syz.2.1885': attribute type 4 has an invalid length. [ 346.069503][T13171] tipc: Enabling not permitted [ 346.083201][T13171] tipc: Enabling of bearer rejected, failed to enable media [ 346.620834][T13203] bridge0: port 2(erspan0) entered blocking state [ 346.632089][T13203] bridge0: port 2(erspan0) entered disabled state [ 346.644172][T13203] erspan0: entered allmulticast mode [ 346.671447][T13203] erspan0: entered promiscuous mode [ 346.682086][T13203] bridge0: port 2(erspan0) entered blocking state [ 346.689234][T13203] bridge0: port 2(erspan0) entered forwarding state [ 346.726622][T13204] erspan0: left allmulticast mode [ 346.747366][T13204] erspan0: left promiscuous mode [ 346.764824][T13204] bridge0: port 2(erspan0) entered disabled state [ 347.058095][T13180] lo speed is unknown, defaulting to 1000 [ 347.124487][T13211] __nla_validate_parse: 1 callbacks suppressed [ 347.124509][T13211] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1899'. [ 347.296877][T13200] lo speed is unknown, defaulting to 1000 [ 347.463533][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 347.499181][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 347.530978][T13224] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1901'. [ 347.666120][T13224] gretap4: entered promiscuous mode [ 347.824264][T13233] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1904'. [ 348.273866][T13249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1909'. [ 348.508035][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 348.528670][T13263] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1912'. [ 348.724543][T12094] net_ratelimit: 17 callbacks suppressed [ 348.724564][T12094] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 348.879310][T12094] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 348.990269][T13246] lo speed is unknown, defaulting to 1000 [ 349.003002][T12094] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 349.256219][T13281] vlan4: entered allmulticast mode [ 349.278578][T13281] bridge_slave_0: entered allmulticast mode [ 349.402698][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1920'. [ 349.430804][T13287] vlan0: entered promiscuous mode [ 349.436709][T13287] gretap0: entered promiscuous mode [ 349.516708][T13289] netlink: 'syz.4.1921': attribute type 1 has an invalid length. [ 349.533264][T12100] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 349.538431][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 349.604722][T13292] tipc: Enabled bearer , priority 0 [ 349.612426][T13293] tipc: Enabling of bearer rejected, already enabled [ 349.652492][T13289] netlink: 'syz.4.1921': attribute type 4 has an invalid length. [ 349.656167][T13293] syzkaller0: entered promiscuous mode [ 349.676414][T13293] syzkaller0: entered allmulticast mode [ 349.689903][T13247] lo speed is unknown, defaulting to 1000 [ 349.698812][ T6951] lo speed is unknown, defaulting to 1000 [ 349.716970][T13297] tipc: Resetting bearer [ 349.723194][ T6951] syz1: Port: 1 Link DOWN [ 349.733047][T12100] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 349.751026][T13291] tipc: Resetting bearer [ 349.836262][T13291] tipc: Disabling bearer [ 350.273063][T12098] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 350.493014][T12100] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 350.609031][T12096] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 350.750472][T12096] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 350.863219][T12096] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 351.273726][T13336] macsec1: entered promiscuous mode [ 351.279021][T13336] ip6gretap0: entered promiscuous mode [ 351.481597][T13350] netlink: 'syz.4.1936': attribute type 11 has an invalid length. [ 351.763450][T13356] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 352.137349][T13366] __nla_validate_parse: 7 callbacks suppressed [ 352.137372][T13366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1940'. [ 352.154153][T13366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1940'. [ 352.166267][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 352.178049][T13366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1940'. [ 352.207414][T13367] netlink: 'syz.1.1940': attribute type 30 has an invalid length. [ 352.219888][T13366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1940'. [ 352.236594][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1940'. [ 352.256365][T13366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1940'. [ 352.273319][T13366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1940'. [ 352.295156][T13366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1940'. [ 352.310167][T13366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1940'. [ 352.459695][T13334] lo speed is unknown, defaulting to 1000 [ 353.582502][T13424] syzkaller1: entered promiscuous mode [ 353.588279][T13424] syzkaller1: entered allmulticast mode [ 353.604624][T13424] sctp: [Deprecated]: syz.1.1955 (pid 13424) Use of struct sctp_assoc_value in delayed_ack socket option. [ 353.604624][T13424] Use struct sctp_sack_info instead [ 354.598477][T13445] lo speed is unknown, defaulting to 1000 [ 355.178128][T13487] netlink: 'syz.4.1970': attribute type 1 has an invalid length. [ 355.217505][T13487] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.247224][T13487] bond8: (slave ip6gretap2): making interface the new active one [ 355.257104][T13487] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 355.293378][T13487] veth9: entered promiscuous mode [ 355.310031][T13487] bond8: (slave veth9): Enslaving as an active interface with a down link [ 355.348265][T13487] erspan0: entered allmulticast mode [ 355.351482][T13496] netlink: 'syz.1.1972': attribute type 7 has an invalid length. [ 355.363475][T13496] x_tables: duplicate underflow at hook 1 [ 355.369906][T13496] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 355.415967][T13487] bond8: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 355.677919][T13505] netlink: 'syz.4.1975': attribute type 13 has an invalid length. [ 355.714600][T13505] bond9: option fail_over_mac: invalid value (6) [ 355.726008][T13505] bond9 (unregistering): Released all slaves [ 355.759799][T13507] macsec3: entered promiscuous mode [ 355.765343][T13507] batadv0: entered promiscuous mode [ 355.773846][T13507] batadv0: left promiscuous mode [ 356.272248][T13462] lo speed is unknown, defaulting to 1000 [ 356.287051][T13457] lo speed is unknown, defaulting to 1000 [ 356.348132][T13452] lo speed is unknown, defaulting to 1000 [ 356.396223][T13448] lo speed is unknown, defaulting to 1000 [ 356.470957][T13461] lo speed is unknown, defaulting to 1000 [ 357.143172][T13541] __nla_validate_parse: 182 callbacks suppressed [ 357.143194][T13541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1982'. [ 357.205366][T13541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1982'. [ 357.250527][T13541] netlink: 'syz.4.1982': attribute type 4 has an invalid length. [ 358.205231][T13563] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1989'. [ 358.363982][T13574] !: renamed from dummy0 (while UP) [ 358.370091][T13575] netlink: 'syz.3.1992': attribute type 9 has an invalid length. [ 358.397002][T13575] netlink: 'syz.3.1992': attribute type 7 has an invalid length. [ 358.408122][T13575] netlink: 'syz.3.1992': attribute type 8 has an invalid length. [ 358.980823][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 359.030918][T13612] hsr_slave_0: left promiscuous mode [ 359.062418][T13612] hsr_slave_1: left promiscuous mode [ 359.601728][T13584] lo speed is unknown, defaulting to 1000 [ 359.917833][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'. [ 360.271437][T13672] netlink: 'syz.4.2010': attribute type 5 has an invalid length. [ 360.533460][T13672] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 360.576907][T13672] bond9 (unregistering): Released all slaves [ 360.707721][T13673] syzkaller0: entered promiscuous mode [ 360.713540][T13673] syzkaller0: entered allmulticast mode [ 361.992607][T13697] IPVS: Unknown mcast interface: pim6reg1 [ 362.119956][T13707] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2019'. [ 362.251139][T13717] xt_l2tp: invalid flags combination: 8 [ 362.437383][T13723] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2024'. [ 362.535045][T13728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2027'. [ 362.679710][T13734] net_ratelimit: 6 callbacks suppressed [ 362.679730][T13734] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 362.789082][T13717] lo speed is unknown, defaulting to 1000 [ 362.931408][T13737] netlink: 'syz.3.2030': attribute type 21 has an invalid length. [ 362.963865][T13737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2030'. [ 363.446020][T13753] netlink: 'syz.3.2034': attribute type 10 has an invalid length. [ 363.466221][T13753] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2034'. [ 363.581316][T13758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2035'. [ 363.596187][T13758] netlink: 'syz.2.2035': attribute type 6 has an invalid length. [ 363.618289][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 363.725511][T13754] syzkaller1: entered promiscuous mode [ 363.731481][T13754] syzkaller1: entered allmulticast mode [ 363.842328][T13756] delete_channel: no stack [ 364.044883][T13774] netlink: 'syz.0.2041': attribute type 3 has an invalid length. [ 364.056096][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2040'. [ 364.068827][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2040'. [ 364.558024][T13780] lo speed is unknown, defaulting to 1000 [ 364.659431][ T10] hid-generic 0005:16C0:05DF.0001: unknown main item tag 0x0 [ 364.753665][ T10] hid-generic 0005:16C0:05DF.0001: hidraw0: BLUETOOTH HID v0.87 Device [syz0] on aa:aa:aa:aa:aa:aa [ 365.195694][T13818] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2052'. [ 365.372087][T13836] syzkaller1: entered promiscuous mode [ 365.385714][T13836] syzkaller1: entered allmulticast mode [ 365.408164][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'. [ 365.481827][T13845] Unsupported ieee802154 address type: 0 [ 366.558409][T13863] lo speed is unknown, defaulting to 1000 [ 366.709443][T13893] netlink: 'syz.3.2073': attribute type 5 has an invalid length. [ 366.812637][T13895] netlink: 'syz.4.2074': attribute type 10 has an invalid length. [ 367.747346][T13940] __nla_validate_parse: 7 callbacks suppressed [ 367.747369][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 367.769321][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'. [ 368.059755][T13961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2090'. [ 368.131572][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 368.167395][T13929] lo speed is unknown, defaulting to 1000 [ 368.503545][T13970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 368.728465][T13969] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 368.889763][T13988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2097'. [ 368.934194][T13939] lo speed is unknown, defaulting to 1000 [ 368.958626][T13992] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2100'. [ 369.288503][T14002] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2101'. [ 369.389509][T14002] tap0: tun_chr_ioctl cmd 2147767507 [ 369.739883][T14015] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 369.826452][T14020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2106'. [ 369.909472][T14023] netlink: 'syz.1.2106': attribute type 10 has an invalid length. [ 369.964456][T14020] 8021q: adding VLAN 0 to HW filter on device bond5 [ 369.965133][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2105'. [ 370.206694][T14045] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 370.410678][T14058] netlink: 'syz.4.2117': attribute type 1 has an invalid length. [ 370.576915][T14070] 8021q: adding VLAN 0 to HW filter on device bond9 [ 370.585615][T14070] bond0: (slave bond9): Enslaving as an active interface with a down link [ 370.674683][T14078] netlink: 'syz.2.2120': attribute type 10 has an invalid length. [ 370.776614][T14070] .` (unregistering): Released all slaves [ 370.859778][T14078] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.884982][T14078] team0: entered promiscuous mode [ 370.890843][T14078] geneve0: entered promiscuous mode [ 370.900426][T14078] bond0: (slave team0): Enslaving as an active interface with an up link [ 371.026256][T14093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.064943][T14093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.177102][T14093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.612710][T14132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.669391][T14138] netlink: 'syz.1.2135': attribute type 1 has an invalid length. [ 371.716438][T14132] bond0: (slave rose0): Enslaving as an active interface with an up link [ 371.801374][T14140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.864262][T14138] 8021q: adding VLAN 0 to HW filter on device bond6 [ 371.913544][T14142] veth11: entered promiscuous mode [ 371.926703][T14142] bond6: (slave veth11): Enslaving as an active interface with a down link [ 371.937422][T14126] lo speed is unknown, defaulting to 1000 [ 372.012718][T14155] netlink: 'syz.4.2138': attribute type 13 has an invalid length. [ 372.023292][T14155] netlink: 'syz.4.2138': attribute type 17 has an invalid length. [ 372.137397][T14155] erspan0: left allmulticast mode [ 372.265070][T14155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.284967][ T10] lo speed is unknown, defaulting to 1000 [ 372.290953][ T10] syz1: Port: 1 Link ACTIVE [ 372.327143][T14168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.543568][T14162] lo speed is unknown, defaulting to 1000 [ 372.827203][T14174] netlink: 'syz.1.2142': attribute type 21 has an invalid length. [ 373.210121][T14184] 8021q: adding VLAN 0 to HW filter on device bond10 [ 373.346898][T14184] bond8: (slave ip6gretap2): Releasing active interface [ 373.355121][T14184] bond8: (slave ip6gretap2): the permanent HWaddr of slave - e2:12:6e:f3:17:88 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 373.380169][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.404957][T14184] bond8: (slave veth9): Releasing active interface [ 373.452345][T14184] bond0: (slave bond9): Releasing active interface [ 373.603140][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.633077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.732176][T14214] netlink: 'syz.0.2153': attribute type 10 has an invalid length. [ 373.741046][T14214] wlan1: mtu less than device minimum [ 373.746756][T14214] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 374.556676][T14266] __nla_validate_parse: 11 callbacks suppressed [ 374.556698][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2166'. [ 374.983150][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2169'. [ 375.103885][T14281] team1: entered promiscuous mode [ 375.109160][T14281] team1: entered allmulticast mode [ 375.114938][T14257] lo speed is unknown, defaulting to 1000 [ 375.125628][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2169'. [ 375.195015][T14281] team2: entered promiscuous mode [ 375.200365][T14281] team2: entered allmulticast mode [ 375.426326][T14295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2173'. [ 375.574484][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2176'. [ 375.603451][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2176'. [ 375.623019][T14310] netlink: 'syz.3.2178': attribute type 2 has an invalid length. [ 375.998686][T14330] macsec3: entered allmulticast mode [ 376.010436][T14330] batadv0: entered allmulticast mode [ 376.056562][T14330] batadv0: left allmulticast mode [ 376.128338][T14340] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 376.136568][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2189'. [ 376.147315][T14343] tipc: Enabling of bearer rejected, failed to enable media [ 376.206200][T14351] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2189'. [ 376.291903][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2190'. [ 376.304969][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2190'. [ 376.753211][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 377.260757][T14393] syzkaller0: Caught tx_queue_len zero misconfig [ 377.612103][T14412] netlink: 'syz.3.2201': attribute type 39 has an invalid length. [ 377.773396][T14415] netlink: 'syz.1.2204': attribute type 13 has an invalid length. [ 378.013850][T14425] netlink: 'syz.2.2207': attribute type 21 has an invalid length. [ 378.100914][T14406] lo speed is unknown, defaulting to 1000 [ 378.226189][T14432] netlink: 'syz.2.2210': attribute type 18 has an invalid length. [ 378.678466][T14433] lo speed is unknown, defaulting to 1000 [ 378.867979][T14450] vlan3: entered promiscuous mode [ 378.912909][T14450] bond0: entered promiscuous mode [ 378.918006][T14450] ip6gretap1: entered promiscuous mode [ 379.112285][T14448] IPVS: Scheduler module ip_vs_sip not found [ 379.273638][T14456] netlink: 'syz.0.2217': attribute type 1 has an invalid length. [ 379.326506][T14462] tipc: Enabled bearer , priority 0 [ 379.475275][T14467] netlink: 'syz.0.2221': attribute type 1 has an invalid length. [ 379.485927][T14462] tipc: Resetting bearer [ 379.706401][T14477] pim6reg: entered allmulticast mode [ 379.722777][T14477] pim6reg: left allmulticast mode [ 379.917662][T14486] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20000 [ 380.092588][T14499] __nla_validate_parse: 10 callbacks suppressed [ 380.092610][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2230'. [ 380.750844][T14541] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2239'. [ 381.020275][T14562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2243'. [ 382.212041][T14550] bridge0: entered allmulticast mode [ 382.219909][T14566] veth0_to_bridge: left allmulticast mode [ 382.230469][T14566] veth0_to_bridge: left promiscuous mode [ 382.236582][T14566] bridge0: port 1(veth0_to_bridge) entered disabled state [ 382.389149][T14576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2247'. [ 382.488774][T14578] tipc: Enabled bearer , priority 0 [ 382.505760][T14578] syzkaller0: entered promiscuous mode [ 382.511289][T14578] syzkaller0: entered allmulticast mode [ 382.594262][T14578] tipc: Resetting bearer [ 382.594685][T14583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2251'. [ 382.631061][T14587] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2252'. [ 382.653622][T14590] siw: device registration error -23 [ 382.694174][T14577] tipc: Resetting bearer [ 382.786933][T14577] tipc: Disabling bearer [ 383.061722][T14609] netlink: 'syz.3.2256': attribute type 1 has an invalid length. [ 383.069838][T14609] netlink: 'syz.3.2256': attribute type 2 has an invalid length. [ 383.080100][T14596] lo speed is unknown, defaulting to 1000 [ 383.725548][T14602] lo speed is unknown, defaulting to 1000 [ 383.957645][T14635] syz_tun: entered allmulticast mode [ 384.058134][T14634] syz_tun: left allmulticast mode [ 384.173070][T14642] netlink: 'syz.1.2265': attribute type 1 has an invalid length. [ 384.212067][T14647] tipc: Enabling of bearer rejected, already enabled [ 384.319598][T14642] gretap2: entered promiscuous mode [ 384.358130][T14647] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 384.368288][T14647] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 384.545142][T14665] batadv_slave_1: entered promiscuous mode [ 384.585818][T14665] batadv_slave_1: left promiscuous mode [ 384.735474][T14680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2274'. [ 384.759189][T14680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.921687][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 385.015597][T14688] netlink: 'syz.0.2277': attribute type 9 has an invalid length. [ 385.031759][T14688] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2277'. [ 385.141027][T14691] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2279'. [ 385.335814][T14697] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2282'. [ 385.413291][T14700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2284'. [ 385.424989][T14700] netlink: 'syz.0.2284': attribute type 20 has an invalid length. [ 385.489973][T14704] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2283'. [ 385.577257][T14706] netlink: 'syz.0.2285': attribute type 4 has an invalid length. [ 385.586214][T14706] netlink: 'syz.0.2285': attribute type 4 has an invalid length. [ 385.611884][T14706] syzkaller0: entered promiscuous mode [ 385.619066][T14706] syzkaller0: entered allmulticast mode [ 385.887837][T14715] tipc: Enabled bearer , priority 0 [ 385.895965][T14716] syzkaller0: entered promiscuous mode [ 385.905988][T14716] syzkaller0: entered allmulticast mode [ 385.969741][T14715] tipc: Resetting bearer [ 386.116005][T14722] tipc: Resetting bearer [ 386.173949][T14733] netlink: 'syz.2.2293': attribute type 5 has an invalid length. [ 386.184298][T14722] tipc: Disabling bearer [ 386.319264][T14743] netlink: 'syz.2.2296': attribute type 1 has an invalid length. [ 386.334595][T14746] netlink: 'syz.2.2296': attribute type 1 has an invalid length. [ 387.197689][T14769] lo speed is unknown, defaulting to 1000 [ 387.265439][T14771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2304'. [ 387.299869][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2304'. [ 387.388188][T14774] sctp: [Deprecated]: syz.4.2304 (pid 14774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.388188][T14774] Use struct sctp_sack_info instead [ 387.499801][T14764] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20001 [ 387.769326][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 387.819135][T14779] macsec0: entered promiscuous mode [ 387.835211][T14779] gretap0: entered promiscuous mode [ 387.861203][T14779] macsec0: entered allmulticast mode [ 387.889464][T14779] gretap0: left promiscuous mode [ 388.202997][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 388.273801][T14786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2307'. [ 388.386361][T14787] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2307'. [ 388.423748][T14787] openvswitch: netlink: Message has 512 unknown bytes. [ 388.534607][T14793] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2309'. [ 388.740994][T14797] bond11: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 388.750894][T14797] bond11: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 388.772900][T14803] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 389.528719][T14814] validate_nla: 1 callbacks suppressed [ 389.528742][T14814] netlink: 'syz.0.2313': attribute type 6 has an invalid length. [ 389.551084][T14814] netlink: 'syz.0.2313': attribute type 5 has an invalid length. [ 389.610461][T14814] netlink: 'syz.0.2313': attribute type 4 has an invalid length. [ 389.637381][T14814] netlink: 'syz.0.2313': attribute type 4 has an invalid length. [ 389.701624][T14817] veth12: entered promiscuous mode [ 389.727271][T14817] veth12: entered allmulticast mode [ 389.877181][T14820] netlink: 'syz.1.2316': attribute type 5 has an invalid length. [ 390.064343][T14828] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 390.135309][T14812] lo speed is unknown, defaulting to 1000 [ 390.215434][T14835] __nla_validate_parse: 4 callbacks suppressed [ 390.215454][T14835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2321'. [ 390.661041][T14853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2326'. [ 390.720297][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2327'. [ 390.806907][T14857] syzkaller1: entered promiscuous mode [ 390.812429][T14857] syzkaller1: entered allmulticast mode [ 390.833857][ T5841] Bluetooth: hci0: command tx timeout [ 390.917442][T14836] lo speed is unknown, defaulting to 1000 [ 391.352479][T14865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2329'. [ 391.686225][T14875] netlink: 'syz.1.2332': attribute type 8 has an invalid length. [ 391.889313][T14887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2335'. [ 391.898747][T14887] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2335'. [ 392.081918][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2337'. [ 392.224597][T14907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2339'. [ 392.626989][T14929] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2345'. [ 392.816348][T14938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 392.825629][T14938] netlink: 'syz.3.2348': attribute type 6 has an invalid length. [ 392.881591][T14938] netlink: 'syz.3.2348': attribute type 6 has an invalid length. [ 392.897791][T14942] vlan4: entered promiscuous mode [ 392.906882][T14942] !: entered promiscuous mode [ 392.948738][T12097] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.957587][T12097] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.973665][T14935] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.997628][T14944] lo: left allmulticast mode [ 393.031052][T14935] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.136130][T12097] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.167424][T12097] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.196949][T12097] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.223671][T12097] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.212374][T14996] tap0: tun_chr_ioctl cmd 1074025677 [ 394.223116][T14996] tap0: linktype set to 804 [ 394.254282][T14962] lo speed is unknown, defaulting to 1000 [ 394.666125][T15004] openvswitch: netlink: IP tunnel dst address not specified [ 394.874014][T14980] lo speed is unknown, defaulting to 1000 [ 395.649126][T15040] netlink: 'syz.4.2378': attribute type 1 has an invalid length. [ 395.676683][T15040] __nla_validate_parse: 11 callbacks suppressed [ 395.676703][T15040] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2378'. [ 396.125929][T15070] netlink: 'syz.3.2384': attribute type 1 has an invalid length. [ 396.141900][T15046] lo speed is unknown, defaulting to 1000 [ 396.161597][T15071] netlink: 'syz.3.2384': attribute type 1 has an invalid length. [ 396.233888][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2387'. [ 396.261818][T15070] bond4: entered promiscuous mode [ 396.277572][T15070] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.307476][T15071] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 396.455393][T15079] syzkaller0: entered promiscuous mode [ 396.467984][T15079] syzkaller0: entered allmulticast mode [ 396.968754][T15110] IPv6: addrconf: prefix option has invalid lifetime [ 397.376361][T15128] 8021q: adding VLAN 0 to HW filter on device bond8 [ 397.426705][T15127] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 397.439849][T15127] netlink: 'syz.4.2398': attribute type 4 has an invalid length. [ 397.706833][T15144] bond12: entered promiscuous mode [ 397.712452][T15144] bond12: entered allmulticast mode [ 397.718767][T15144] 8021q: adding VLAN 0 to HW filter on device bond12 [ 397.831143][T15144] bond12 (unregistering): Released all slaves [ 398.008957][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2409'. [ 398.200013][T15173] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 398.241792][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2413'. [ 398.268643][T15173] netlink: 'syz.0.2411': attribute type 4 has an invalid length. [ 398.454117][T15191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2416'. [ 398.562573][T15201] netlink: 'syz.4.2418': attribute type 1 has an invalid length. [ 398.686924][T15205] netlink: 'syz.1.2419': attribute type 13 has an invalid length. [ 398.789152][T15204] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 398.801327][T15204] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 398.850731][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2420'. [ 399.075515][T15217] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2422'. [ 399.095336][T15205] tipc: Resetting bearer [ 399.168122][T15210] batadv_slave_1: entered promiscuous mode [ 399.194569][T15197] lo speed is unknown, defaulting to 1000 [ 399.369286][T15208] batadv_slave_1: left promiscuous mode [ 399.812455][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2430'. [ 399.867983][T15249] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 400.102131][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2428'. [ 401.581521][T15298] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2441'. [ 401.635924][T15302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2442'. [ 401.688966][T15303] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2442'. [ 402.757910][T15290] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 402.788040][T15290] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 402.813957][T15290] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 403.415821][T15341] netlink: 'syz.2.2454': attribute type 1 has an invalid length. [ 403.612368][T15326] lo speed is unknown, defaulting to 1000 [ 403.650745][T15351] xt_hashlimit: max too large, truncated to 1048576 [ 404.207037][T15361] dvmrp0: entered allmulticast mode [ 404.709380][T15386] netlink: 'syz.3.2465': attribute type 64 has an invalid length. [ 404.768436][T15386] pimreg: tun_chr_ioctl cmd 1074025677 [ 404.788797][T15386] pimreg: linktype set to 780 [ 404.800840][T15386] pimreg: tun_chr_ioctl cmd 35111 [ 404.817717][T15391] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2467'. [ 404.873270][T15368] lo speed is unknown, defaulting to 1000 [ 405.279102][T15413] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 405.358506][T15376] lo speed is unknown, defaulting to 1000 [ 405.422075][T15419] batadv_slave_0: entered promiscuous mode [ 405.436599][T15413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2474'. [ 405.449606][T15422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2476'. [ 405.462419][T15413] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2474'. [ 405.497359][T15413] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2474'. [ 406.001337][T15438] netlink: 360 bytes leftover after parsing attributes in process `syz.2.2480'. [ 406.292398][T15442] syzkaller1: entered promiscuous mode [ 406.315175][T15442] syzkaller1: entered allmulticast mode [ 406.413835][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'. [ 406.877803][T15440] lo speed is unknown, defaulting to 1000 [ 407.299835][T15493] netlink: 'syz.1.2497': attribute type 23 has an invalid length. [ 407.301260][T15471] netlink: 'syz.0.2491': attribute type 10 has an invalid length. [ 407.311086][T15484] syzkaller1: entered promiscuous mode [ 407.332070][T15494] netlink: 'syz.1.2497': attribute type 23 has an invalid length. [ 407.344353][T15484] syzkaller1: entered allmulticast mode [ 407.363478][T15493] netlink: 'syz.1.2497': attribute type 2 has an invalid length. [ 407.391733][T15471] wlan1: mtu less than device minimum [ 407.400701][T15471] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 407.402647][T15493] __nla_validate_parse: 135 callbacks suppressed [ 407.402667][T15493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2497'. [ 408.349453][T15544] pim6reg1: entered promiscuous mode [ 408.369256][T15544] pim6reg1: entered allmulticast mode [ 408.740489][T15561] netlink: 'syz.4.2517': attribute type 1 has an invalid length. [ 408.751221][T15540] lo speed is unknown, defaulting to 1000 [ 408.812115][T15561] 8021q: adding VLAN 0 to HW filter on device bond13 [ 408.985368][T15570] netlink: 'syz.1.2519': attribute type 1 has an invalid length. [ 408.993267][T15570] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2519'. [ 409.002334][T15570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2519'. [ 409.155582][T15573] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 409.165060][T15573] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 409.177664][T15573] tipc: Resetting bearer [ 409.198038][T15583] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2522'. [ 409.644654][T15595] syz.2.2525 (15595) used obsolete PPPIOCDETACH ioctl [ 410.233604][T15627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2534'. [ 410.255607][T15627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2534'. [ 410.372658][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2537'. [ 410.506200][T15652] macvlan2: entered promiscuous mode [ 410.512000][T15652] syz_tun: entered promiscuous mode [ 410.523089][T15652] team0: Port device macvlan2 added [ 410.655772][T15656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2543'. [ 410.665950][T15661] netlink: 'syz.2.2546': attribute type 1 has an invalid length. [ 410.679316][T15661] netlink: 9864 bytes leftover after parsing attributes in process `syz.2.2546'. [ 410.759340][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2543'. [ 411.645908][T15682] lo speed is unknown, defaulting to 1000 [ 412.006914][T15731] bond7: option primary_reselect: invalid value (255) [ 412.016370][T15731] bond7 (unregistering): Released all slaves [ 412.352290][T15741] netlink: 'syz.0.2564': attribute type 15 has an invalid length. [ 412.386817][T15743] netlink: 'syz.0.2564': attribute type 15 has an invalid length. [ 412.408671][T15743] __nla_validate_parse: 7 callbacks suppressed [ 412.408691][T15743] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2564'. [ 412.615535][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2566'. [ 412.633847][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2566'. [ 412.706531][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2566'. [ 412.785935][T15758] 8021q: adding VLAN 0 to HW filter on device bond14 [ 412.832419][T15772] Àÿ: renamed from team_slave_1 [ 413.066743][T15784] tipc: Enabling of bearer rejected, already enabled [ 413.176012][T15788] netlink: 'syz.3.2575': attribute type 10 has an invalid length. [ 413.184618][T15788] netlink: 'syz.3.2575': attribute type 10 has an invalid length. [ 413.204423][T15788] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 413.224633][T15786] bond_slave_0: entered allmulticast mode [ 413.437840][T15811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2582'. [ 413.562937][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2583'. [ 414.041709][T15840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2593'. [ 414.065712][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 414.076815][T15839] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 414.241114][T15835] lo speed is unknown, defaulting to 1000 [ 414.472093][T15857] bond6: Removing last arp target with arp_interval on [ 414.678442][T15873] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2604'. [ 414.714400][T15879] netlink: 'syz.2.2601': attribute type 4 has an invalid length. [ 414.975643][T15889] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2607'. [ 416.014981][T15951] xt_TCPMSS: Only works on TCP SYN packets [ 416.408586][T15973] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 416.614444][T15923] lo speed is unknown, defaulting to 1000 [ 416.717564][T15980] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 416.868130][T15980] team3: entered promiscuous mode [ 416.896014][T15980] team3: entered allmulticast mode [ 417.280956][T15967] lo speed is unknown, defaulting to 1000 [ 417.399936][T15997] Bluetooth: MGMT ver 1.23 [ 417.487080][T16004] __nla_validate_parse: 12 callbacks suppressed [ 417.487100][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2638'. [ 418.291438][T16006] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 418.713955][T16033] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 419.186894][T16046] netlink: 'syz.3.2650': attribute type 2 has an invalid length. [ 419.216049][T16046] : entered promiscuous mode [ 419.476700][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 419.483039][ T5841] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 419.553553][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 419.590327][T16060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2654'. [ 419.599480][T16060] netlink: 'syz.0.2654': attribute type 1 has an invalid length. [ 419.625680][T16060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2654'. [ 419.632569][T16064] SET target dimension over the limit! [ 419.644760][T16060] nbd: must specify at least one socket [ 419.675460][T16021] lo speed is unknown, defaulting to 1000 [ 419.746222][T16074] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2656'. [ 419.806233][T16076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2657'. [ 419.916666][T16084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2660'. [ 419.946778][T16079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2658'. [ 419.968121][T16079] netlink: 34 bytes leftover after parsing attributes in process `syz.3.2658'. [ 420.307278][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2661'. [ 420.675514][T16118] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 420.689476][T16119] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 420.735754][T16122] netlink: 'syz.2.2667': attribute type 6 has an invalid length. [ 420.738478][T16121] netlink: 'syz.2.2667': attribute type 6 has an invalid length. [ 420.791070][T16121] netlink: 'syz.2.2667': attribute type 6 has an invalid length. [ 420.822113][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2667'. [ 421.003961][T16132] bond0: entered promiscuous mode [ 421.014002][T16132] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 421.029671][T16132] hsr0: entered promiscuous mode [ 421.288118][T16130] lo speed is unknown, defaulting to 1000 [ 421.293083][T16148] netlink: 'syz.0.2675': attribute type 6 has an invalid length. [ 421.312361][T16148] netlink: 'syz.0.2675': attribute type 5 has an invalid length. [ 421.374780][T16148] netlink: 'syz.0.2675': attribute type 4 has an invalid length. [ 421.492521][T16148] netlink: 'syz.0.2675': attribute type 4 has an invalid length. [ 423.368026][T16178] lo speed is unknown, defaulting to 1000 [ 423.370870][T16191] __nla_validate_parse: 8 callbacks suppressed [ 423.370890][T16191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2686'. [ 423.389522][T16182] siw: device registration error -23 [ 423.563363][T16205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2689'. [ 423.803347][T16217] netlink: 'syz.4.2691': attribute type 32 has an invalid length. [ 423.887142][T16218] netlink: 'syz.1.2693': attribute type 12 has an invalid length. [ 424.049431][T16220] netlink: 'syz.4.2694': attribute type 13 has an invalid length. [ 424.079114][T16220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.370906][T16235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2699'. [ 424.384422][T16235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2699'. [ 424.729950][T16250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2706'. [ 445.316111][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 498.593044][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 506.756909][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 568.196815][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 571.392954][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 571.400582][ T31] Not tainted syzkaller #0 [ 571.405634][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.414426][ T31] task:kworker/0:1 state:D stack:24200 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 571.426709][ T31] Workqueue: events rfkill_uevent_work [ 571.432237][ T31] Call Trace: [ 571.435655][ T31] [ 571.438601][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 571.443426][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 571.449144][ T31] ? __pfx___schedule+0x10/0x10 [ 571.454701][ T31] ? schedule+0x91/0x360 [ 571.459286][ T31] schedule+0x165/0x360 [ 571.463736][ T31] schedule_preempt_disabled+0x13/0x30 [ 571.469238][ T31] __mutex_lock+0x7e6/0x1350 [ 571.509725][ T31] ? __mutex_lock+0x5bb/0x1350 [ 571.514796][ T31] ? rfkill_uevent_work+0x1d/0xa0 [ 571.519878][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 571.525019][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 571.530786][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 571.536274][ T31] rfkill_uevent_work+0x1d/0xa0 [ 571.542728][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 571.548485][ T31] process_scheduled_works+0xae1/0x17b0 [ 571.554426][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 571.560456][ T31] worker_thread+0x8a0/0xda0 [ 571.565160][ T31] kthread+0x711/0x8a0 [ 571.569268][ T31] ? __pfx_worker_thread+0x10/0x10 [ 571.574600][ T31] ? __pfx_kthread+0x10/0x10 [ 571.579236][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 571.584599][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.589836][ T31] ? __pfx_kthread+0x10/0x10 [ 571.594614][ T31] ret_from_fork+0x4bc/0x870 [ 571.599238][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 571.604414][ T31] ? __switch_to_asm+0x39/0x70 [ 571.609185][ T31] ? __switch_to_asm+0x33/0x70 [ 571.614035][ T31] ? __pfx_kthread+0x10/0x10 [ 571.618638][ T31] ret_from_fork_asm+0x1a/0x30 [ 571.623495][ T31] [ 571.626655][ T31] INFO: task kworker/1:10:6954 blocked for more than 143 seconds. [ 571.634657][ T31] Not tainted syzkaller #0 [ 571.639591][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.648363][ T31] task:kworker/1:10 state:D stack:23960 pid:6954 tgid:6954 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 571.660486][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 571.667321][ T31] Call Trace: [ 571.670600][ T31] [ 571.673641][ T31] __schedule+0x1798/0x4cc0 [ 571.678166][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 571.683580][ T31] ? __pfx___schedule+0x10/0x10 [ 571.688461][ T31] ? schedule+0x91/0x360 [ 571.692844][ T31] schedule+0x165/0x360 [ 571.697055][ T31] schedule_preempt_disabled+0x13/0x30 [ 571.702538][ T31] __mutex_lock+0x7e6/0x1350 [ 571.707195][ T31] ? __mutex_lock+0x5bb/0x1350 [ 571.711964][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 571.718379][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 571.723491][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 571.729242][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 571.735063][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 571.741141][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 571.746894][ T31] process_scheduled_works+0xae1/0x17b0 [ 571.752460][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 571.758585][ T31] worker_thread+0x8a0/0xda0 [ 571.763235][ T31] kthread+0x711/0x8a0 [ 571.767312][ T31] ? __pfx_worker_thread+0x10/0x10 [ 571.772425][ T31] ? __pfx_kthread+0x10/0x10 [ 571.777189][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 571.782395][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.787644][ T31] ? __pfx_kthread+0x10/0x10 [ 571.792247][ T31] ret_from_fork+0x4bc/0x870 [ 571.800323][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 571.805586][ T31] ? __switch_to_asm+0x39/0x70 [ 571.810355][ T31] ? __switch_to_asm+0x33/0x70 [ 571.815194][ T31] ? __pfx_kthread+0x10/0x10 [ 571.819813][ T31] ret_from_fork_asm+0x1a/0x30 [ 571.824637][ T31] [ 571.827663][ T31] INFO: task kworker/1:14:6958 blocked for more than 143 seconds. [ 571.837887][ T31] Not tainted syzkaller #0 [ 571.842903][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.851589][ T31] task:kworker/1:14 state:D stack:23544 pid:6958 tgid:6958 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 571.863863][ T31] Workqueue: events rfkill_sync_work [ 571.869185][ T31] Call Trace: [ 571.872465][ T31] [ 571.875948][ T31] __schedule+0x1798/0x4cc0 [ 571.880478][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 571.886997][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 571.892390][ T31] ? __pfx___schedule+0x10/0x10 [ 571.897315][ T31] ? schedule+0x91/0x360 [ 571.901564][ T31] schedule+0x165/0x360 [ 571.905817][ T31] schedule_preempt_disabled+0x13/0x30 [ 571.911275][ T31] __mutex_lock+0x7e6/0x1350 [ 571.915932][ T31] ? __mutex_lock+0x5bb/0x1350 [ 571.920704][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 571.926074][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 571.931105][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 571.936367][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 571.942265][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 571.948724][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 571.954530][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 571.959648][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 571.965467][ T31] rfkill_set_block+0x1cf/0x440 [ 571.970336][ T31] rfkill_sync_work+0x114/0x200 [ 571.975304][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 571.981031][ T31] process_scheduled_works+0xae1/0x17b0 [ 571.986736][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 571.992941][ T31] worker_thread+0x8a0/0xda0 [ 571.997578][ T31] ? __kthread_parkme+0x7b/0x200 [ 572.002571][ T31] kthread+0x711/0x8a0 [ 572.006760][ T31] ? __pfx_worker_thread+0x10/0x10 [ 572.011876][ T31] ? __pfx_kthread+0x10/0x10 [ 572.016523][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 572.021723][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.027017][ T31] ? __pfx_kthread+0x10/0x10 [ 572.031616][ T31] ret_from_fork+0x4bc/0x870 [ 572.036396][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 572.041540][ T31] ? __switch_to_asm+0x39/0x70 [ 572.046587][ T31] ? __switch_to_asm+0x33/0x70 [ 572.051389][ T31] ? __pfx_kthread+0x10/0x10 [ 572.056095][ T31] ret_from_fork_asm+0x1a/0x30 [ 572.060916][ T31] [ 572.064150][ T31] INFO: task syz.3.2658:16078 blocked for more than 144 seconds. [ 572.071878][ T31] Not tainted syzkaller #0 [ 572.076964][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.086107][ T31] task:syz.3.2658 state:D stack:24584 pid:16078 tgid:16078 ppid:5833 task_flags:0x400040 flags:0x00080002 [ 572.098076][ T31] Call Trace: [ 572.101356][ T31] [ 572.104455][ T31] __schedule+0x1798/0x4cc0 [ 572.108996][ T31] ? validate_chain+0x897/0x2140 [ 572.114110][ T31] ? __lock_acquire+0xab9/0xd20 [ 572.118983][ T31] ? __pfx___schedule+0x10/0x10 [ 572.123902][ T31] ? schedule+0x91/0x360 [ 572.128149][ T31] schedule+0x165/0x360 [ 572.132310][ T31] schedule_timeout+0x9a/0x270 [ 572.137116][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 572.142497][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 572.147746][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.153027][ T31] ? wait_for_completion+0x267/0x5d0 [ 572.158342][ T31] wait_for_completion+0x2bf/0x5d0 [ 572.163512][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 572.169243][ T31] ? __flush_work+0xd2/0xbc0 [ 572.173868][ T31] ? __flush_work+0xd2/0xbc0 [ 572.178475][ T31] __flush_work+0x9b9/0xbc0 [ 572.183029][ T31] ? __flush_work+0xd2/0xbc0 [ 572.187644][ T31] ? __pfx___flush_work+0x10/0x10 [ 572.192716][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 572.198042][ T31] ? __pfx___cancel_work+0x10/0x10 [ 572.203269][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 572.208951][ T31] __cancel_work_sync+0xbe/0x110 [ 572.213971][ T31] rfkill_unregister+0x92/0x220 [ 572.218855][ T31] nfc_unregister_device+0x96/0x2a0 [ 572.224087][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 572.229815][ T31] virtual_ncidev_close+0x56/0x90 [ 572.234871][ T31] __fput+0x449/0xa70 [ 572.238861][ T31] task_work_run+0x1d4/0x260 [ 572.243490][ T31] ? __pfx_task_work_run+0x10/0x10 [ 572.248659][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 572.254230][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 572.259552][ T31] do_syscall_64+0x2bd/0xfa0 [ 572.264188][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.269397][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.275491][ T31] ? clear_bhb_loop+0x60/0xb0 [ 572.280178][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.286098][ T31] RIP: 0033:0x7fe07218eec9 [ 572.290517][ T31] RSP: 002b:00007ffc107f8958 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 572.298996][ T31] RAX: 0000000000000000 RBX: 00007fe0723e7da0 RCX: 00007fe07218eec9 [ 572.307020][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 572.315026][ T31] RBP: 00007fe0723e7da0 R08: 0000000000000234 R09: 0000001e107f8c4f [ 572.323023][ T31] R10: 00007fe0723e7cb0 R11: 0000000000000246 R12: 0000000000066b38 [ 572.331018][ T31] R13: 00007fe0723e6360 R14: ffffffffffffffff R15: 00007ffc107f8a70 [ 572.339072][ T31] [ 572.342127][ T31] INFO: task syz.1.2693:16218 blocked for more than 144 seconds. [ 572.349907][ T31] Not tainted syzkaller #0 [ 572.354978][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.363667][ T31] task:syz.1.2693 state:D stack:24616 pid:16218 tgid:16214 ppid:5825 task_flags:0x400140 flags:0x00080003 [ 572.375629][ T31] Call Trace: [ 572.378929][ T31] [ 572.381875][ T31] __schedule+0x1798/0x4cc0 [ 572.386427][ T31] ? __lock_acquire+0xab9/0xd20 [ 572.391288][ T31] ? __lock_acquire+0xab9/0xd20 [ 572.396201][ T31] ? __pfx___schedule+0x10/0x10 [ 572.401098][ T31] ? schedule+0x91/0x360 [ 572.405370][ T31] schedule+0x165/0x360 [ 572.409527][ T31] schedule_preempt_disabled+0x13/0x30 [ 572.415025][ T31] __mutex_lock+0x7e6/0x1350 [ 572.419627][ T31] ? __mutex_lock+0x5bb/0x1350 [ 572.424416][ T31] ? rfkill_register+0x37/0x8e0 [ 572.429274][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 572.434361][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 572.439309][ T31] ? nl80211_common_reg_change_event+0x55d/0x6b0 [ 572.445675][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 572.450972][ T31] ? __queue_delayed_work+0x282/0x2d0 [ 572.456388][ T31] rfkill_register+0x37/0x8e0 [ 572.461074][ T31] wiphy_register+0x2231/0x2aa0 [ 572.465992][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 572.471211][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 572.477342][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 572.482887][ T31] ? ieee80211_register_hw+0x14a1/0x40d0 [ 572.488534][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 572.494365][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 572.500264][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 572.506210][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 572.512568][ T31] ? __hrtimer_setup+0x187/0x210 [ 572.517683][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 572.523566][ T31] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 572.529350][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 572.535449][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 572.540993][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 572.546134][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 572.551263][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 572.557041][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 572.562606][ T31] ? rcu_is_watching+0x15/0xb0 [ 572.567383][ T31] ? __nla_parse+0x40/0x60 [ 572.571804][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 572.578182][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 572.583773][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 572.589873][ T31] ? bpf_lsm_capable+0x9/0x20 [ 572.594733][ T31] ? security_capable+0x7e/0x2e0 [ 572.599717][ T31] genl_rcv_msg+0x60e/0x790 [ 572.604259][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.609287][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 572.614861][ T31] netlink_rcv_skb+0x205/0x470 [ 572.619621][ T31] ? __lock_acquire+0xab9/0xd20 [ 572.624497][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.629524][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.634896][ T31] ? down_read+0x1ad/0x2e0 [ 572.639338][ T31] genl_rcv+0x28/0x40 [ 572.643352][ T31] netlink_unicast+0x82f/0x9e0 [ 572.648150][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 572.653474][ T31] ? netlink_sendmsg+0x642/0xb30 [ 572.658409][ T31] ? skb_put+0x11b/0x210 [ 572.662713][ T31] netlink_sendmsg+0x805/0xb30 [ 572.667505][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.673014][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 572.677995][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 572.683319][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.688618][ T31] __sock_sendmsg+0x21c/0x270 [ 572.693339][ T31] ____sys_sendmsg+0x505/0x830 [ 572.698113][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.703425][ T31] ? import_iovec+0x74/0xa0 [ 572.707926][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 572.712599][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.717841][ T31] ? __fget_files+0x2a/0x420 [ 572.722422][ T31] ? __fget_files+0x3a0/0x420 [ 572.727116][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 572.732060][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.737569][ T31] ? do_syscall_64+0xbe/0xfa0 [ 572.742269][ T31] do_syscall_64+0xfa/0xfa0 [ 572.746819][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.752021][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.758225][ T31] ? clear_bhb_loop+0x60/0xb0 [ 572.762946][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.768857][ T31] RIP: 0033:0x7f4583f8eec9 [ 572.773299][ T31] RSP: 002b:00007f4584e2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.781713][ T31] RAX: ffffffffffffffda RBX: 00007f45841e6090 RCX: 00007f4583f8eec9 [ 572.789709][ T31] RDX: 0000000004000804 RSI: 0000200000000140 RDI: 0000000000000007 [ 572.797718][ T31] RBP: 00007f4584011f91 R08: 0000000000000000 R09: 0000000000000000 [ 572.805746][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.813747][ T31] R13: 00007f45841e6128 R14: 00007f45841e6090 R15: 00007ffd552cd8d8 [ 572.821737][ T31] [ 572.824796][ T31] INFO: task syz.4.2694:16220 blocked for more than 144 seconds. [ 572.832521][ T31] Not tainted syzkaller #0 [ 572.837898][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.846612][ T31] task:syz.4.2694 state:D stack:22496 pid:16220 tgid:16219 ppid:5834 task_flags:0x400140 flags:0x00080002 [ 572.858573][ T31] Call Trace: [ 572.861848][ T31] [ 572.864802][ T31] __schedule+0x1798/0x4cc0 [ 572.869322][ T31] ? __lock_acquire+0xab9/0xd20 [ 572.874203][ T31] ? __lock_acquire+0xab9/0xd20 [ 572.879081][ T31] ? __pfx___schedule+0x10/0x10 [ 572.883969][ T31] ? schedule+0x91/0x360 [ 572.888220][ T31] schedule+0x165/0x360 [ 572.892379][ T31] schedule_preempt_disabled+0x13/0x30 [ 572.897863][ T31] __mutex_lock+0x7e6/0x1350 [ 572.902463][ T31] ? __mutex_lock+0x5bb/0x1350 [ 572.907260][ T31] ? genl_rcv_msg+0x10d/0x790 [ 572.911946][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 572.917041][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 572.922164][ T31] ? radix_tree_lookup+0x240/0x290 [ 572.927318][ T31] genl_rcv_msg+0x10d/0x790 [ 572.931847][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.936926][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 572.941963][ T31] ? __asan_memcpy+0x40/0x70 [ 572.946623][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 572.952033][ T31] netlink_rcv_skb+0x205/0x470 [ 572.956840][ T31] ? __lock_acquire+0xab9/0xd20 [ 572.961701][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.966766][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.972074][ T31] ? down_read+0x1ad/0x2e0 [ 572.976540][ T31] genl_rcv+0x28/0x40 [ 572.980530][ T31] netlink_unicast+0x82f/0x9e0 [ 572.985342][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 572.990637][ T31] ? netlink_sendmsg+0x642/0xb30 [ 572.995709][ T31] ? skb_put+0x11b/0x210 [ 572.999995][ T31] netlink_sendmsg+0x805/0xb30 [ 573.004966][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.010263][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 573.015288][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.020590][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.026077][ T31] __sock_sendmsg+0x21c/0x270 [ 573.030809][ T31] __sys_sendto+0x3bd/0x520 [ 573.035392][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 573.040429][ T31] ? count_memcg_event_mm+0x21/0x260 [ 573.045805][ T31] ? exc_page_fault+0x82/0x100 [ 573.050657][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 573.056010][ T31] __x64_sys_sendto+0xde/0x100 [ 573.060817][ T31] do_syscall_64+0xfa/0xfa0 [ 573.065411][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.070666][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.076788][ T31] ? clear_bhb_loop+0x60/0xb0 [ 573.081473][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.087404][ T31] RIP: 0033:0x7fa0d6590d5c [ 573.091839][ T31] RSP: 002b:00007fa0d7421ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 573.100295][ T31] RAX: ffffffffffffffda RBX: 00007fa0d7421fc0 RCX: 00007fa0d6590d5c [ 573.108340][ T31] RDX: 0000000000000024 RSI: 00007fa0d7422010 RDI: 000000000000000f [ 573.116362][ T31] RBP: 0000000000000000 R08: 00007fa0d7421f14 R09: 000000000000000c [ 573.124364][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000f [ 573.132340][ T31] R13: 00007fa0d7421f68 R14: 00007fa0d7422010 R15: 0000000000000000 [ 573.140375][ T31] [ 573.143443][ T31] INFO: task syz.4.2694:16225 blocked for more than 145 seconds. [ 573.151212][ T31] Not tainted syzkaller #0 [ 573.156211][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.164939][ T31] task:syz.4.2694 state:D stack:27104 pid:16225 tgid:16219 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 573.176914][ T31] Call Trace: [ 573.180194][ T31] [ 573.183159][ T31] __schedule+0x1798/0x4cc0 [ 573.187709][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.192573][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.197458][ T31] ? __pfx___schedule+0x10/0x10 [ 573.202333][ T31] ? schedule+0x91/0x360 [ 573.206619][ T31] schedule+0x165/0x360 [ 573.210785][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.216280][ T31] __mutex_lock+0x7e6/0x1350 [ 573.220886][ T31] ? __mutex_lock+0x5bb/0x1350 [ 573.225695][ T31] ? genl_rcv_msg+0x10d/0x790 [ 573.230385][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.235487][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 573.240639][ T31] ? radix_tree_lookup+0x240/0x290 [ 573.245815][ T31] genl_rcv_msg+0x10d/0x790 [ 573.250331][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.255623][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 573.260659][ T31] ? __asan_memcpy+0x40/0x70 [ 573.265283][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 573.270671][ T31] netlink_rcv_skb+0x205/0x470 [ 573.275552][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.280412][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.285481][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.290794][ T31] ? down_read+0x1ad/0x2e0 [ 573.295238][ T31] genl_rcv+0x28/0x40 [ 573.299224][ T31] netlink_unicast+0x82f/0x9e0 [ 573.304113][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 573.309413][ T31] ? netlink_sendmsg+0x642/0xb30 [ 573.314394][ T31] ? skb_put+0x11b/0x210 [ 573.318660][ T31] netlink_sendmsg+0x805/0xb30 [ 573.323519][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.328829][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 573.333798][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.339079][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.344426][ T31] __sock_sendmsg+0x21c/0x270 [ 573.349145][ T31] __sys_sendto+0x3bd/0x520 [ 573.353682][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 573.358706][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.363598][ T31] ? fd_install+0x97/0x540 [ 573.368023][ T31] ? fd_install+0x30d/0x540 [ 573.372535][ T31] __x64_sys_sendto+0xde/0x100 [ 573.378984][ T31] do_syscall_64+0xfa/0xfa0 [ 573.383686][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.388994][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.395238][ T31] ? clear_bhb_loop+0x60/0xb0 [ 573.399925][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.405859][ T31] RIP: 0033:0x7fa0d6590d5c [ 573.410272][ T31] RSP: 002b:00007fa0d7400ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 573.418721][ T31] RAX: ffffffffffffffda RBX: 00007fa0d7400fc0 RCX: 00007fa0d6590d5c [ 573.426725][ T31] RDX: 0000000000000024 RSI: 00007fa0d7401010 RDI: 0000000000000011 [ 573.434722][ T31] RBP: 0000000000000000 R08: 00007fa0d7400f14 R09: 000000000000000c [ 573.442748][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000011 [ 573.450734][ T31] R13: 00007fa0d7400f68 R14: 00007fa0d7401010 R15: 0000000000000000 [ 573.458761][ T31] [ 573.461796][ T31] INFO: task syz.2.2702:16241 blocked for more than 145 seconds. [ 573.469614][ T31] Not tainted syzkaller #0 [ 573.474574][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.483286][ T31] task:syz.2.2702 state:D stack:27104 pid:16241 tgid:16239 ppid:5826 task_flags:0x400140 flags:0x00080002 [ 573.495262][ T31] Call Trace: [ 573.498539][ T31] [ 573.501475][ T31] __schedule+0x1798/0x4cc0 [ 573.506024][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.510900][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.515775][ T31] ? __pfx___schedule+0x10/0x10 [ 573.520635][ T31] ? schedule+0x91/0x360 [ 573.524918][ T31] schedule+0x165/0x360 [ 573.529090][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.534574][ T31] __mutex_lock+0x7e6/0x1350 [ 573.539170][ T31] ? __mutex_lock+0x5bb/0x1350 [ 573.543952][ T31] ? genl_rcv_msg+0x10d/0x790 [ 573.548635][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.553685][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 573.558815][ T31] ? radix_tree_lookup+0x240/0x290 [ 573.563950][ T31] genl_rcv_msg+0x10d/0x790 [ 573.568551][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.573647][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 573.578716][ T31] ? __asan_memcpy+0x40/0x70 [ 573.583349][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 573.588816][ T31] netlink_rcv_skb+0x205/0x470 [ 573.593614][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.598470][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.603539][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.608838][ T31] ? down_read+0x1ad/0x2e0 [ 573.613295][ T31] genl_rcv+0x28/0x40 [ 573.617289][ T31] netlink_unicast+0x82f/0x9e0 [ 573.622155][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 573.627474][ T31] ? netlink_sendmsg+0x642/0xb30 [ 573.632412][ T31] ? skb_put+0x11b/0x210 [ 573.636686][ T31] netlink_sendmsg+0x805/0xb30 [ 573.641518][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.646874][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 573.651834][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.657160][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.662456][ T31] __sock_sendmsg+0x21c/0x270 [ 573.667187][ T31] __sys_sendto+0x3bd/0x520 [ 573.671701][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 573.676777][ T31] ? count_memcg_event_mm+0x21/0x260 [ 573.682094][ T31] ? exc_page_fault+0x82/0x100 [ 573.686904][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 573.692236][ T31] __x64_sys_sendto+0xde/0x100 [ 573.697053][ T31] do_syscall_64+0xfa/0xfa0 [ 573.701562][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.706801][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.713017][ T31] ? clear_bhb_loop+0x60/0xb0 [ 573.717720][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.723645][ T31] RIP: 0033:0x7f0eb2190d5c [ 573.728064][ T31] RSP: 002b:00007f0eb2f3cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 573.736511][ T31] RAX: ffffffffffffffda RBX: 00007f0eb2f3cfc0 RCX: 00007f0eb2190d5c [ 573.744524][ T31] RDX: 0000000000000020 RSI: 00007f0eb2f3d010 RDI: 0000000000000003 [ 573.752495][ T31] RBP: 0000000000000000 R08: 00007f0eb2f3cf14 R09: 000000000000000c [ 573.760521][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 573.768523][ T31] R13: 00007f0eb2f3cf68 R14: 00007f0eb2f3d010 R15: 0000000000000000 [ 573.776549][ T31] [ 573.779589][ T31] INFO: task syz.0.2707:16252 blocked for more than 145 seconds. [ 573.787380][ T31] Not tainted syzkaller #0 [ 573.792337][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.801092][ T31] task:syz.0.2707 state:D stack:27104 pid:16252 tgid:16251 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 573.813086][ T31] Call Trace: [ 573.816388][ T31] [ 573.819327][ T31] __schedule+0x1798/0x4cc0 [ 573.823883][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.828736][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.833640][ T31] ? __pfx___schedule+0x10/0x10 [ 573.838510][ T31] ? schedule+0x91/0x360 [ 573.842829][ T31] schedule+0x165/0x360 [ 573.847016][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.852480][ T31] __mutex_lock+0x7e6/0x1350 [ 573.857107][ T31] ? __mutex_lock+0x5bb/0x1350 [ 573.861887][ T31] ? genl_rcv_msg+0x10d/0x790 [ 573.866600][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.871641][ T31] ? stack_trace_save+0x9c/0xe0 [ 573.876562][ T31] ? radix_tree_lookup+0x240/0x290 [ 573.881698][ T31] genl_rcv_msg+0x10d/0x790 [ 573.886249][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.891104][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.896222][ T31] netlink_rcv_skb+0x205/0x470 [ 573.901005][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.905886][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.910917][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.916259][ T31] ? down_read+0x1ad/0x2e0 [ 573.920686][ T31] genl_rcv+0x28/0x40 [ 573.924716][ T31] netlink_unicast+0x82f/0x9e0 [ 573.929528][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 573.934861][ T31] ? netlink_sendmsg+0x642/0xb30 [ 573.939799][ T31] ? skb_put+0x11b/0x210 [ 573.944080][ T31] netlink_sendmsg+0x805/0xb30 [ 573.948854][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.954375][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 573.959444][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.964833][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.970148][ T31] __sock_sendmsg+0x21c/0x270 [ 573.974861][ T31] __sys_sendto+0x3bd/0x520 [ 573.979371][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 573.984445][ T31] ? count_memcg_event_mm+0x21/0x260 [ 573.989761][ T31] ? exc_page_fault+0x82/0x100 [ 573.994563][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 573.999859][ T31] __x64_sys_sendto+0xde/0x100 [ 574.004715][ T31] do_syscall_64+0xfa/0xfa0 [ 574.009232][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.014467][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.020540][ T31] ? clear_bhb_loop+0x60/0xb0 [ 574.025281][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.031191][ T31] RIP: 0033:0x7f58e6790d5c [ 574.035682][ T31] RSP: 002b:00007f58e759fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 574.044139][ T31] RAX: ffffffffffffffda RBX: 00007f58e759ffc0 RCX: 00007f58e6790d5c [ 574.052203][ T31] RDX: 000000000000001c RSI: 00007f58e75a0010 RDI: 0000000000000004 [ 574.060216][ T31] RBP: 0000000000000000 R08: 00007f58e759ff14 R09: 000000000000000c [ 574.068237][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 574.076268][ T31] R13: 00007f58e759ff68 R14: 00007f58e75a0010 R15: 0000000000000000 [ 574.084324][ T31] [ 574.087386][ T31] INFO: task syz.0.2707:16253 blocked for more than 146 seconds. [ 574.095309][ T31] Not tainted syzkaller #0 [ 574.100271][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.108971][ T31] task:syz.0.2707 state:D stack:28296 pid:16253 tgid:16251 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 574.120933][ T31] Call Trace: [ 574.124236][ T31] [ 574.127169][ T31] __schedule+0x1798/0x4cc0 [ 574.131684][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.136578][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.141431][ T31] ? __pfx___schedule+0x10/0x10 [ 574.146359][ T31] ? schedule+0x91/0x360 [ 574.150621][ T31] schedule+0x165/0x360 [ 574.154840][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.160310][ T31] __mutex_lock+0x7e6/0x1350 [ 574.164938][ T31] ? __mutex_lock+0x5bb/0x1350 [ 574.169718][ T31] ? genl_rcv_msg+0x10d/0x790 [ 574.174456][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.179491][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 574.184654][ T31] ? radix_tree_lookup+0x240/0x290 [ 574.189767][ T31] genl_rcv_msg+0x10d/0x790 [ 574.194312][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.199350][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 574.204454][ T31] ? __asan_memcpy+0x40/0x70 [ 574.209073][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 574.214501][ T31] netlink_rcv_skb+0x205/0x470 [ 574.219267][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.224153][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.229185][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.234511][ T31] ? down_read+0x1ad/0x2e0 [ 574.238936][ T31] genl_rcv+0x28/0x40 [ 574.242966][ T31] netlink_unicast+0x82f/0x9e0 [ 574.247750][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 574.253063][ T31] ? netlink_sendmsg+0x642/0xb30 [ 574.258004][ T31] ? skb_put+0x11b/0x210 [ 574.262248][ T31] netlink_sendmsg+0x805/0xb30 [ 574.267039][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.272329][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 574.277315][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.282624][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.287960][ T31] __sock_sendmsg+0x21c/0x270 [ 574.292719][ T31] __sys_sendto+0x3bd/0x520 [ 574.297244][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 574.302268][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.307165][ T31] ? fd_install+0x97/0x540 [ 574.311591][ T31] ? fd_install+0x30d/0x540 [ 574.316126][ T31] __x64_sys_sendto+0xde/0x100 [ 574.320895][ T31] do_syscall_64+0xfa/0xfa0 [ 574.325421][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.330629][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.336713][ T31] ? clear_bhb_loop+0x60/0xb0 [ 574.341395][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.347331][ T31] RIP: 0033:0x7f58e6790d5c [ 574.351750][ T31] RSP: 002b:00007f58e757eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 574.360189][ T31] RAX: ffffffffffffffda RBX: 00007f58e757efc0 RCX: 00007f58e6790d5c [ 574.368190][ T31] RDX: 0000000000000024 RSI: 00007f58e757f010 RDI: 0000000000000003 [ 574.376194][ T31] RBP: 0000000000000000 R08: 00007f58e757ef14 R09: 000000000000000c [ 574.384221][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 574.392209][ T31] R13: 00007f58e757ef68 R14: 00007f58e757f010 R15: 0000000000000000 [ 574.400244][ T31] [ 574.403293][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 574.412316][ T31] INFO: task syz.0.2707:16257 blocked for more than 146 seconds. [ 574.420089][ T31] Not tainted syzkaller #0 [ 574.425050][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.433751][ T31] task:syz.0.2707 state:D stack:26088 pid:16257 tgid:16251 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 574.445812][ T31] Call Trace: [ 574.449108][ T31] [ 574.452050][ T31] __schedule+0x1798/0x4cc0 [ 574.456589][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.461445][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.466327][ T31] ? __pfx___schedule+0x10/0x10 [ 574.471194][ T31] ? schedule+0x91/0x360 [ 574.475480][ T31] schedule+0x165/0x360 [ 574.479636][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.485137][ T31] __mutex_lock+0x7e6/0x1350 [ 574.489736][ T31] ? __mutex_lock+0x5bb/0x1350 [ 574.494527][ T31] ? genl_rcv_msg+0x10d/0x790 [ 574.499208][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.504276][ T31] ? stack_trace_save+0x9c/0xe0 [ 574.509138][ T31] ? radix_tree_lookup+0x240/0x290 [ 574.514282][ T31] genl_rcv_msg+0x10d/0x790 [ 574.518791][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.523659][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.528699][ T31] netlink_rcv_skb+0x205/0x470 [ 574.533483][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.538336][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.543413][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.548710][ T31] ? down_read+0x1ad/0x2e0 [ 574.553187][ T31] genl_rcv+0x28/0x40 [ 574.557207][ T31] netlink_unicast+0x82f/0x9e0 [ 574.562019][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 574.567362][ T31] ? netlink_sendmsg+0x642/0xb30 [ 574.572304][ T31] ? skb_put+0x11b/0x210 [ 574.576575][ T31] netlink_sendmsg+0x805/0xb30 [ 574.581351][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.586679][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 574.591621][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.596955][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.602246][ T31] __sock_sendmsg+0x21c/0x270 [ 574.606966][ T31] __sys_sendto+0x3bd/0x520 [ 574.611478][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 574.616529][ T31] ? count_memcg_event_mm+0x21/0x260 [ 574.621839][ T31] ? exc_page_fault+0x82/0x100 [ 574.626638][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 574.631929][ T31] __x64_sys_sendto+0xde/0x100 [ 574.636769][ T31] do_syscall_64+0xfa/0xfa0 [ 574.641291][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.646522][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.652590][ T31] ? clear_bhb_loop+0x60/0xb0 [ 574.657295][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.663262][ T31] RIP: 0033:0x7f58e6790d5c [ 574.667696][ T31] RSP: 002b:00007f58e753cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 574.676223][ T31] RAX: ffffffffffffffda RBX: 00007f58e753cfc0 RCX: 00007f58e6790d5c [ 574.684249][ T31] RDX: 0000000000000024 RSI: 00007f58e753d010 RDI: 0000000000000004 [ 574.692231][ T31] RBP: 0000000000000000 R08: 00007f58e753cf14 R09: 000000000000000c [ 574.700229][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 574.708218][ T31] R13: 00007f58e753cf68 R14: 00007f58e753d010 R15: 0000000000000000 [ 574.716219][ T31] [ 574.719232][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 574.728293][ T31] [ 574.728293][ T31] Showing all locks held in the system: [ 574.736086][ T31] 3 locks held by kworker/0:1/10: [ 574.741107][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.752135][ T31] #1: ffffc900000f7ba0 ((work_completion)(&rfkill->uevent_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.764805][ T31] #2: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_uevent_work+0x1d/0xa0 [ 574.774933][ T31] 1 lock held by khungtaskd/31: [ 574.779776][ T31] #0: ffffffff8e13d320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 574.789733][ T31] 2 locks held by getty/5589: [ 574.794492][ T31] #0: ffff88814dd4b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.804406][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 574.814597][ T31] 3 locks held by kworker/1:10/6954: [ 574.819870][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.830855][ T31] #1: ffffc90003ccfba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.844487][ T31] #2: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 574.855852][ T31] 4 locks held by kworker/1:14/6958: [ 574.861124][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.872153][ T31] #1: ffffc9000ac17ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.884630][ T31] #2: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 574.894702][ T31] #3: ffff8880285b7100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 574.904516][ T31] 1 lock held by syz.3.2658/16078: [ 574.909620][ T31] #0: ffff8880285b7100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 574.919417][ T31] 3 locks held by syz.1.2693/16218: [ 574.924726][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.932991][ T31] #1: ffffffff8f545228 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 574.941967][ T31] #2: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 574.951989][ T31] 2 locks held by syz.4.2694/16220: [ 574.957243][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.965544][ T31] #1: ffffffff8f545228 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 574.974555][ T31] 2 locks held by syz.4.2694/16225: [ 574.979746][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.988027][ T31] #1: ffffffff8f545228 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 574.997113][ T31] 2 locks held by syz.2.2702/16241: [ 575.002301][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.010666][ T31] #1: ffffffff8f545228 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.019769][ T31] 2 locks held by syz.0.2707/16252: [ 575.025119][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.033407][ T31] #1: ffffffff8f545228 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.042396][ T31] 2 locks held by syz.0.2707/16253: [ 575.047660][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.055963][ T31] #1: ffffffff8f545228 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.065019][ T31] 2 locks held by syz.0.2707/16257: [ 575.070247][ T31] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 575.078566][ T31] #1: ffffffff8f545228 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 575.087629][ T31] 2 locks held by syz-executor/16262: [ 575.093060][ T31] #0: ffff888021b3b118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.103112][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.113179][ T31] 2 locks held by syz-executor/16267: [ 575.118578][ T31] #0: ffff888023db7118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.128680][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.138763][ T31] 2 locks held by syz-executor/16268: [ 575.144170][ T31] #0: ffff88802ac6f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.154305][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.164289][ T31] 2 locks held by syz-executor/16269: [ 575.169683][ T31] #0: ffff88802e915918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.179821][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.189789][ T31] 2 locks held by syz-executor/16270: [ 575.195234][ T31] #0: ffff88802ac69918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.205283][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.215318][ T31] 2 locks held by syz-executor/16272: [ 575.220691][ T31] #0: ffff888027e42118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.230735][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.240835][ T31] 2 locks held by syz-executor/16277: [ 575.246245][ T31] #0: ffff88804daa6918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.256379][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.266395][ T31] 2 locks held by syz-executor/16278: [ 575.271775][ T31] #0: ffff888027e47918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.281897][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.291905][ T31] 2 locks held by syz-executor/16279: [ 575.297409][ T31] #0: ffff888047f0e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.307469][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.317482][ T31] 2 locks held by syz-executor/16280: [ 575.322899][ T31] #0: ffff888047f0d118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.333041][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.343141][ T31] 2 locks held by syz-executor/16282: [ 575.348512][ T31] #0: ffff88802962f918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.358644][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.368620][ T31] 2 locks held by syz-executor/16286: [ 575.374070][ T31] #0: ffff88807650c118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.384146][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.394155][ T31] 2 locks held by syz-executor/16287: [ 575.399521][ T31] #0: ffff88807650f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.409594][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.419671][ T31] 2 locks held by syz-executor/16288: [ 575.425082][ T31] #0: ffff88807650e918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.435210][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.445167][ T31] 2 locks held by syz-executor/16290: [ 575.450529][ T31] #0: ffff888021735918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 575.460631][ T31] #1: ffffffff8f7be1a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 575.470607][ T31] [ 575.473040][ T31] ============================================= [ 575.473040][ T31] [ 575.481537][ T31] NMI backtrace for cpu 1 [ 575.481549][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 575.481577][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 575.481586][ T31] Call Trace: [ 575.481592][ T31] [ 575.481598][ T31] dump_stack_lvl+0x189/0x250 [ 575.481618][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.481633][ T31] ? __pfx__printk+0x10/0x10 [ 575.481656][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 575.481681][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 575.481705][ T31] ? __pfx__printk+0x10/0x10 [ 575.481722][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 575.481746][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 575.481770][ T31] watchdog+0xf60/0xfa0 [ 575.481788][ T31] ? watchdog+0x1e2/0xfa0 [ 575.481805][ T31] kthread+0x711/0x8a0 [ 575.481826][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.481839][ T31] ? __pfx_kthread+0x10/0x10 [ 575.481859][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.481874][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.481890][ T31] ? __pfx_kthread+0x10/0x10 [ 575.481909][ T31] ret_from_fork+0x4bc/0x870 [ 575.481925][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.481944][ T31] ? __switch_to_asm+0x39/0x70 [ 575.481959][ T31] ? __switch_to_asm+0x33/0x70 [ 575.481974][ T31] ? __pfx_kthread+0x10/0x10 [ 575.481994][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.482041][ T31] [ 575.482047][ T31] Sending NMI from CPU 1 to CPUs 0: [ 575.626855][ C0] NMI backtrace for cpu 0 [ 575.626873][ C0] CPU: 0 UID: 0 PID: 10267 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) [ 575.626893][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 575.626906][ C0] Workqueue: events_unbound toggle_allocation_gate [ 575.626939][ C0] RIP: 0010:__pte_offset_map_lock+0xf3/0x210 [ 575.626965][ C0] Code: 01 41 0f 94 c6 31 ff e8 bb 3c ae ff 45 20 ee 45 0f b6 f6 49 f7 de 49 31 ee 48 81 e5 80 00 00 00 49 bd 00 00 e0 ff ff ff 0f 00 <4c> 0f 44 6c 24 20 31 ff 48 89 ee e8 8d 3c ae ff 4d 21 f5 49 c1 ed [ 575.626981][ C0] RSP: 0018:ffffc9001af37628 EFLAGS: 00000246 [ 575.626996][ C0] RAX: ffffffff82115c25 RBX: ffff88813ff1caa8 RCX: ffff8880263c5ac0 [ 575.627010][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 575.627020][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff82115589 [ 575.627032][ C0] R10: dffffc0000000000 R11: fffff94000010cf9 R12: 1ffff11027fe3955 [ 575.627045][ C0] R13: 000fffffffe00000 R14: 000000013ff1e067 R15: ffffea0000000000 [ 575.627059][ C0] FS: 0000000000000000(0000) GS:ffff888125d0f000(0000) knlGS:0000000000000000 [ 575.627073][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.627085][ C0] CR2: 00005601dc6ae000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 575.627100][ C0] Call Trace: [ 575.627107][ C0] [ 575.627118][ C0] ? __kmalloc_cache_node_noprof+0x87/0x6f0 [ 575.627145][ C0] __text_poke+0x2e6/0xa10 [ 575.627172][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 575.627195][ C0] ? __kmalloc_cache_node_noprof+0x87/0x6f0 [ 575.627220][ C0] ? __pfx___text_poke+0x10/0x10 [ 575.627241][ C0] ? rcu_is_watching+0x15/0xb0 [ 575.627261][ C0] ? trace_contention_end+0x39/0x120 [ 575.627291][ C0] smp_text_poke_batch_finish+0xd0f/0x1130 [ 575.627323][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 575.627361][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 575.627411][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 575.627439][ C0] static_key_disable_cpuslocked+0xc5/0x1b0 [ 575.627466][ C0] static_key_disable+0x1a/0x20 [ 575.627488][ C0] toggle_allocation_gate+0x1a1/0x240 [ 575.627516][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 575.627548][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 575.627578][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 575.627596][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 575.627615][ C0] process_scheduled_works+0xae1/0x17b0 [ 575.627650][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 575.627678][ C0] worker_thread+0x8a0/0xda0 [ 575.627717][ C0] kthread+0x711/0x8a0 [ 575.627741][ C0] ? __pfx_worker_thread+0x10/0x10 [ 575.627760][ C0] ? __pfx_kthread+0x10/0x10 [ 575.627783][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.627803][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.627824][ C0] ? __pfx_kthread+0x10/0x10 [ 575.627846][ C0] ret_from_fork+0x4bc/0x870 [ 575.627866][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 575.627888][ C0] ? __switch_to_asm+0x39/0x70 [ 575.627908][ C0] ? __switch_to_asm+0x33/0x70 [ 575.627927][ C0] ? __pfx_kthread+0x10/0x10 [ 575.627950][ C0] ret_from_fork_asm+0x1a/0x30 [ 575.627981][ C0] [ 575.628884][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 575.943374][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 575.952501][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 575.962557][ T31] Call Trace: [ 575.965842][ T31] [ 575.968786][ T31] dump_stack_lvl+0x99/0x250 [ 575.973420][ T31] ? __asan_memcpy+0x40/0x70 [ 575.978030][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.983253][ T31] ? __pfx__printk+0x10/0x10 [ 575.987862][ T31] vpanic+0x237/0x6d0 [ 575.991860][ T31] ? __pfx_vpanic+0x10/0x10 [ 575.996382][ T31] ? preempt_schedule_common+0x83/0xd0 [ 576.001876][ T31] panic+0xb9/0xc0 [ 576.005646][ T31] ? __pfx_panic+0x10/0x10 [ 576.010075][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 576.015466][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 576.021640][ T31] watchdog+0xf9f/0xfa0 [ 576.025809][ T31] ? watchdog+0x1e2/0xfa0 [ 576.030153][ T31] kthread+0x711/0x8a0 [ 576.034244][ T31] ? __pfx_watchdog+0x10/0x10 [ 576.038923][ T31] ? __pfx_kthread+0x10/0x10 [ 576.043525][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.048733][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 576.053938][ T31] ? __pfx_kthread+0x10/0x10 [ 576.058540][ T31] ret_from_fork+0x4bc/0x870 [ 576.063140][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 576.068265][ T31] ? __switch_to_asm+0x39/0x70 [ 576.073038][ T31] ? __switch_to_asm+0x33/0x70 [ 576.077810][ T31] ? __pfx_kthread+0x10/0x10 [ 576.082412][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.087196][ T31] [ 576.090553][ T31] Kernel Offset: disabled [ 576.094878][ T31] Rebooting in 86400 seconds..