last executing test programs: 18.787659481s ago: executing program 3 (id=766): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x900, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x1bc, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x44080}, 0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}], 0x1, 0xc0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c692edff7972e550419", @ANYRES16=r10, @ANYBLOB="0100ffffffff00000000010000001c0007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r11, @ANYBLOB="0c000200ff7f000000000000"], 0x3c}}, 0x20000000) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r13, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRESHEX=r14, @ANYBLOB="a183000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) getsockopt$bt_hci(r12, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 18.171999594s ago: executing program 4 (id=779): r0 = socket(0x1e, 0xa, 0x7) recvfrom(r0, &(0x7f0000000000)=""/12, 0xc, 0x102, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80) (async) recvfrom(r0, &(0x7f0000000000)=""/12, 0xc, 0x102, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0xff, @multicast1, 0x4e24, 0x4, 'wlc\x00', 0x4, 0x3, 0x42}, 0x2c) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x0, 0xfffffffd, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0x10) recvmsg$unix(r0, &(0x7f0000001680)={&(0x7f0000000140), 0x6e, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/223, 0xdf}, {&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/137, 0x89}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}, 0x160) (async) recvmsg$unix(r0, &(0x7f0000001680)={&(0x7f0000000140), 0x6e, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/223, 0xdf}, {&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/137, 0x89}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}, 0x160) bind$can_raw(r3, &(0x7f00000016c0), 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001700)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001700)={'geneve0\x00', 0x0}) recvmsg$kcm(r10, &(0x7f0000001a00)={&(0x7f0000001740)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001980)=[{&(0x7f00000017c0)=""/185, 0xb9}, {&(0x7f0000001880)=""/212, 0xd4}], 0x2, &(0x7f00000019c0)=""/57, 0x39}, 0x8000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001a40)={0x1, 'pim6reg1\x00', {}, 0x10}) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001a40)={0x1, 'pim6reg1\x00', {}, 0x10}) getsockname$packet(r0, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001ac0)=0x14) bind$packet(r1, &(0x7f0000001b00)={0x11, 0x9, r12, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b40)='io.stat\x00', 0x0, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b40)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001b80)={0x2, 0x352, 0x9, 0x7ff, 0x400, 0x8, 0x63, 0x401}, &(0x7f0000001bc0)=0x20) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001b80)={0x2, 0x352, 0x9, 0x7ff, 0x400, 0x8, 0x63, 0x401, 0x0}, &(0x7f0000001bc0)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r13, 0x84, 0x22, &(0x7f0000001c00)={0x5, 0x8, 0x1, 0x7, r14}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d80)={&(0x7f0000001c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x9, [@enum={0xf, 0xa, 0x0, 0x6, 0x4, [{0xb, 0xffffffff}, {0x2, 0x7}, {0x1, 0x8}, {0x3, 0x5}, {0x8, 0x22}, {0x10, 0x6}, {0x3, 0x8}, {0x0, 0x1}, {0xb, 0x1}, {0xe, 0x8a0}]}, @var={0x5, 0x0, 0x0, 0xe, 0x3}, @volatile={0x8, 0x0, 0x0, 0x9, 0x3}, @union={0x4, 0x4, 0x0, 0x5, 0x0, 0xe79, [{0xb, 0x1, 0x1}, {0x8, 0x3}, {0xc, 0x1}, {0xa, 0x1, 0x37b5}]}, @var={0x10, 0x0, 0x0, 0xe, 0x5, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61, 0x0, 0x2e, 0x30]}}, &(0x7f0000001d40)=""/58, 0xe5, 0x3a, 0x0, 0x401}, 0x28) sendmsg$NFT_BATCH(r6, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x8020) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x8020) pwrite64(r4, &(0x7f0000001f00)="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", 0x1000, 0x3f0) ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000002f00)) recvmsg$unix(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002f40)=""/232, 0xe8}], 0x1, &(0x7f0000003080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x40010000) bind$inet6(r16, &(0x7f0000003180)={0xa, 0x4e20, 0x35c, @mcast1, 0x2}, 0x1c) ioctl$sock_SIOCDELRT(r16, 0x890c, &(0x7f0000003200)={0x0, @nl=@unspec, @llc={0x1a, 0x4, 0x7, 0x4, 0x9a, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @isdn={0x22, 0xc5, 0x4, 0x3, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x34, &(0x7f00000031c0)='veth0_virt_wifi\x00', 0xb628, 0xfffffffffffffff9, 0x3ff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003400)={0x74, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000034c0)={0xc, 0x1f, &(0x7f0000003280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xf42e}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @ldst={0x0, 0x1, 0x3, 0xa, 0x0, 0xffffffffffffffe0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @printk={@s}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000003380)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x1b, r19, 0x8, &(0x7f00000033c0)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, r20, r17, 0x2, &(0x7f0000003440)=[r19, r8, r9], &(0x7f0000003480)=[{0x5, 0x5, 0x1, 0xc}, {0x0, 0x4, 0x6, 0xf}], 0x10, 0x7ff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000034c0)={0xc, 0x1f, &(0x7f0000003280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xf42e}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @ldst={0x0, 0x1, 0x3, 0xa, 0x0, 0xffffffffffffffe0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @printk={@s}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000003380)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x1b, r19, 0x8, &(0x7f00000033c0)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, r20, r17, 0x2, &(0x7f0000003440)=[r19, r8, r9], &(0x7f0000003480)=[{0x5, 0x5, 0x1, 0xc}, {0x0, 0x4, 0x6, 0xf}], 0x10, 0x7ff}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r21 = syz_genetlink_get_family_id$devlink(&(0x7f00000035c0), r7) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)={0x4c, r21, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003680)={&(0x7f0000003600)={0x4c, r21, 0x2, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$can_raw(r18, &(0x7f00000037c0)={&(0x7f0000003700)={0x1d, r12}, 0x10, &(0x7f0000003780)={&(0x7f0000003740)=@can={{0x3, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "32bc9d3a7246ccde"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$can_bcm(r7, &(0x7f0000003800)={0x1d, r11}, 0x10) (async) connect$can_bcm(r7, &(0x7f0000003800)={0x1d, r11}, 0x10) r22 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003880), r2) sendmsg$NL80211_CMD_FRAME(r15, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x28, r22, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc10, 0x52}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x40400a5) 18.05355813s ago: executing program 4 (id=782): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r3, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40016) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000800)) recvmmsg(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002880)=""/233, 0xe9}, {&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000300)=""/250, 0xfa}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000000400)=""/162, 0xa2}, {&(0x7f0000000240)=""/140, 0x8c}], 0x6, &(0x7f0000000600)=""/90, 0x5a}, 0x3f}, {{&(0x7f0000000680)=@caif=@rfm, 0x80, &(0x7f0000001940)=[{&(0x7f0000000700)=""/161, 0xa1}, {&(0x7f0000000000)=""/33, 0x21}, {&(0x7f00000007c0)=""/37, 0x25}, {&(0x7f0000002140)=""/238, 0xee}, {&(0x7f0000000900)=""/40, 0x28}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x6, &(0x7f00000019c0)=""/58, 0x3a}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001a00)=""/64, 0x40}, {&(0x7f0000001a40)=""/169, 0xa9}, {&(0x7f0000001b00)=""/78, 0x4e}, {&(0x7f0000001b80)}, {&(0x7f0000001bc0)=""/137, 0x89}], 0x5}, 0x6}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001d80)=""/28, 0x1c}, {&(0x7f0000001d40)=""/20, 0x14}, {&(0x7f0000001d00)}, {&(0x7f0000001dc0)=""/142, 0x8e}, {&(0x7f0000001e80)=""/158, 0x9e}, {&(0x7f0000001f40)=""/52, 0x34}, {&(0x7f0000002780)=""/92, 0x5c}], 0x7, &(0x7f0000002000)=""/170, 0xaa}, 0x8}, {{&(0x7f00000020c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000002580)=""/151, 0x97}, 0xff}], 0x5, 0x20, &(0x7f0000001b80)={0x0, 0x3938700}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) write$cgroup_subtree(r10, &(0x7f00000000c0)=ANY=[], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r8}, 0x18) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r12, 0x0) accept4$rose(r12, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r13 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r13, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r7}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r0, @ANYBLOB="40005200060010"], 0x24}}, 0x0) 17.948079403s ago: executing program 0 (id=783): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 17.946335896s ago: executing program 1 (id=785): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 17.791641815s ago: executing program 1 (id=786): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 17.790811485s ago: executing program 3 (id=787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x68, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x0, 0xfffc, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0x1, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x5d3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x16, 0xd4a, 0x7, 0x6}, {0xf, 0x2, 0x4, 0xda, 0x7ff, 0x50}, 0x8, 0x5, 0x1ef3}}, @TCA_TBF_BURST={0x8, 0x6, 0x2}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000005}, 0x4008000) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa22a}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x85}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.652873211s ago: executing program 0 (id=789): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip_vti0\x00', 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000007000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 17.587810733s ago: executing program 1 (id=790): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) 17.550234325s ago: executing program 3 (id=791): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r3}, 0x70) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf230800000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 17.504366049s ago: executing program 1 (id=792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000806000103000604"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x2, r4}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x2, r7}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x124, r9, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x114a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x477c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff2e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x111}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x300000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x8001) 17.447653652s ago: executing program 2 (id=793): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_newaddr={0x18, 0x14, 0x385, 0x0, 0x0, {0x2, 0x80, 0x48}}, 0x18}}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r5 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}, 0x6}]}, &(0x7f0000000100)=0x10) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x34, 0x0, &(0x7f0000000040)=0x1) ioctl$TUNSETNOCSUM(r4, 0xff07, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x80000001, 0x2, 0x0, 0x40, 0x100ad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) socketpair(0x2, 0x5, 0x9, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000780)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/102, 0x66}], 0x1, &(0x7f0000000700)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x61) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a547ae412132", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) r10 = accept4(r0, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000040)=0x80, 0x81800) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) getsockopt$ARPT_SO_GET_INFO(r9, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x0, [0x101, 0x3b562a42]}, &(0x7f0000000840)=0x44) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r11, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.385942496s ago: executing program 0 (id=794): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x80000800}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x166a, 0x9}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e22, 0x8, @mcast2, 0x6}}, 0x5, 0x6}, &(0x7f0000000400)=0x90) sendmsg$nl_route_sched(r0, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x80b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x3a, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 17.214918728s ago: executing program 0 (id=795): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e0ffac", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80800) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000000003800ff7f0000320f000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001b0000000000000000000200000000000000"], 0x48) 17.163605687s ago: executing program 3 (id=796): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x51e7, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x18}}], 0x2, 0x4001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r3) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x7edffffe) ppoll(&(0x7f0000000100)=[{r0, 0x20}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) 17.099369751s ago: executing program 4 (id=797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xfff, @mcast2, 0x1}, 0x1c) r2 = socket$inet(0x2, 0x6, 0x0) sendto$inet(r2, &(0x7f0000000240)="7f213a604f7c16d8d2a7a14a24c844c5b62be9adb568f601f9d34691dcc913f3255287f70498516b7c3c420c9d10da1920b6e12dc631f551d489680687f9baec61c476a5ef81d561cfa0be407db2dd04b9aa5f7a6fa0697322af7c6dae55bc310a2260ea4fd116992794ea317654b6fbc0fe15b1ace8c6b0db6e99c80a15b67d9ad837ea56366d6e69966fad448c10451182b06fddc2bbe670c5702aa5e7982431c215456c1ad1e0aa9e7cec850cf9d3b2fe7307fc67acd9becd3dc56d57ca93da7253f694e57b996c835ad9bc3b3e96108d5e8b899965a1e34a886a121a1ea7e85fdd9e", 0xe4, 0x8c091, &(0x7f0000000340)={0x2, 0x4e22, @private=0xa010102}, 0x10) syz_init_net_socket$x25(0xb, 0x5, 0x27) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4030010}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x8, @private0, 0x2d65}}, 0x10001, 0x1, 0x6, 0x80000000, 0x2}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000004c0)={0xb84, 0x200, 0x3, 0x1ff, r8}, &(0x7f0000000500)=0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x24, r5, 0x800, 0x70bd25, 0x80000000, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) 16.93127881s ago: executing program 4 (id=798): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x424b}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x48}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x107f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x2, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000004, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0xfffffff9, 0x100006, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x3, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0xffff, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x3, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda5a, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0xfffffffe, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x3, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x8000399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0x4, 0x8000009, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x6, 0x80000001, 0x4, 0x5, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x4, 0xec2, 0x6, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x103, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x6, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x365, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7fb, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x3, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x5, 0xfff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x1f97, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x401, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x4, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$inet(0x2, 0x3, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="08002cbd7000fedbdf250700000008001700", @ANYRES32=r3, @ANYBLOB="14002003ff010000010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004805}, 0x4) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="08002cbd7000fedbdf250700000008001700", @ANYRES32=r3, @ANYBLOB="14002003ff010000010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004805}, 0x4) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) (async) close(r11) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r12, 0x8b1a, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r13 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690036000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 16.767839955s ago: executing program 0 (id=799): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 16.738018333s ago: executing program 2 (id=800): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="18080400430001002c0012801100010062726964676500006c6176650000000014000580060002"], 0x4c}, 0x1, 0x3f00, 0x0, 0x38f54add4fcfee77}, 0x4000000) 16.708913576s ago: executing program 1 (id=801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3}, {0x61}, {0x6}]}) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)={'veth1_to_batadv\x00'}) 16.554130755s ago: executing program 0 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000005c0)={r5, 0x6}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r7, 0x0, 0x0, 0x80000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 64) r9 = socket(0x2, 0x2, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x5c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x0) 16.483670709s ago: executing program 4 (id=803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000700000ad8000000180a01010000000000000000050000060900010073797a300000000014000380080002400000000104000380040003800900010073797a3000000004090002"], 0x62c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 16.483417729s ago: executing program 3 (id=804): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0xff000000, 0x40000}, 0x0) 16.483096251s ago: executing program 2 (id=805): ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x7, 0x40, 0x4, 0x1, 0x5b80}) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x4000085) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x50}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400400000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r2], 0x50}}, 0x2) 16.390668588s ago: executing program 4 (id=806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000c80)={0x5e4, 0x0, 0x7}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="163c4d267aecab6a", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x18}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x5c}}, 0x40045) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x300, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x463}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc50}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe9a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb67}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3487}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8589}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x20004}, 0x80) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$inet6(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="29908231db0794467111ed689e0866f8fe322148afedf55e8765ea2b41d85d17f55285f4d73a9d86028cd80c59a6cdc148a0092564ac6b191138381eb17a606bb994a0f41c36283dad5331e3eefc6692", 0x50}], 0x1}, 0x40000) recvmsg$can_raw(r6, &(0x7f0000000a40)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000800)=""/166, 0xa6}, {&(0x7f0000000280)=""/33, 0x21}, {&(0x7f00000006c0)=""/33, 0x21}, {&(0x7f00000008c0)=""/68, 0x44}, {&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000700)=""/52, 0x34}, {&(0x7f0000000ac0)=""/100, 0x64}], 0xa, &(0x7f0000000c00)=""/96, 0x60}, 0x5af9f8660b7d1d52) recvmsg$qrtr(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ec0)=""/64, 0x40}, {&(0x7f0000000740)=""/178, 0xb2}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x2) 16.382932892s ago: executing program 3 (id=807): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)=0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x27, r2, 0x0, 0x1, 0x7, 0x1, "0c2836bc5e2b9ccd9bfb81e24132b74621079212dcad378e7b2a9015c5d2bd9b27704860a4b690603b4ad083afbd9fbe9248f10b46a4c61d3d2978f5d820ed", 0x21}, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000100)="f43ebe9a24e8cda27003d5aa45d9f83b58a1eb3431e93bad436e666f2a7409416946154b2fe62b216d2b6fdd420e27ba75c7d718e51d3887e1fd92e5a84d493d09f11d38768f116a45491cb6d2b2a7b1fca7a6d56ed149ac5e346377fdaad59a33d99fb3fd72088f62863fca6a1012030ec85ce7dc9b99e5b0feb5a5e131e02c5615eaeb44049d4621f902ab8af656f5563c6181d50bf244c636a6b1e8d78155d7c3d32b60b2657fdba3c4f4b1d3dae13c276db429ab3233697a1714764ba31b40f21a598e7cf99ce2753c40b291fbf073436bf9dc220f84000000", 0xdb}, {&(0x7f0000000200)="593c40655b21c89d5f92559e2c86cc91bd04abfe10", 0x15}, {&(0x7f0000000600)="4a11ffeb5b5d64d9dab101e3f518b2ec63ec112a980bb2affefa321d907b7f4cc707f0c3af83ec3cfd252728c54d66b697d4afb7f63813a5f30d59610cd1385d47ad487dd1e48178798172c19c951d3321b8abc31e455d7eff862ce26509ac571ca95d54f4a8f5f14203e1a0a34fd8c97906ec567c9209f4dea8d2e51c63e7d032da6a14fd2d7bdd159fad71ae5d4b506728f790d4f139d60000000000000000002b5e", 0xa3}, {&(0x7f0000000300)="ab68658c75fe6793cfcd590ed79546196f4792b83982e974b2699039", 0x1c}, {&(0x7f0000000340)="7629ecdc92abcc4fbbd4be1c1beb5dfee26d8ad64b3580c3ff1edd58ea9bf3b325d3cb2d1255a302b3065d357e5923a2b26168c719c133e5b7734ebeb56fb615a14bbbb7d0df9c950a63", 0x4a}], 0x5, &(0x7f00000006c0)=ANY=[], 0xf8, 0x40850}, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) 16.31951041s ago: executing program 1 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000300)=[{r2, 0x1040}], 0x1, 0x81) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000140)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000700)=""/155, 0x9b}, {&(0x7f0000000600)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0xf5ffffff}, 0x40000003) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r5) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 16.243879295s ago: executing program 2 (id=809): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000013000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x81764109abc7f5e6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'lo\x00'}) 16.199377207s ago: executing program 2 (id=810): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000160033060000000000000080ff0100000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000fcffffffffffffff04d232000000fc02000000000000000000230000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000050000000000000004000000020000000000000006000000020000000a00049819000000000000000c0015005c073500010000"], 0xfc}}, 0x0) 16.103909416s ago: executing program 2 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b000000080003", @ANYRES32=r2, @ANYBLOB="0400460005003400a9000000080026006c0900"], 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.196021416s ago: executing program 32 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000005c0)={r5, 0x6}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r7, 0x0, 0x0, 0x80000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 64) r9 = socket(0x2, 0x2, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x5c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x0) 1.140727698s ago: executing program 33 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000300)=[{r2, 0x1040}], 0x1, 0x81) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000140)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000700)=""/155, 0x9b}, {&(0x7f0000000600)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0xf5ffffff}, 0x40000003) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) close(r5) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 1.096793619s ago: executing program 34 (id=807): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000240)=0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x27, r2, 0x0, 0x1, 0x7, 0x1, "0c2836bc5e2b9ccd9bfb81e24132b74621079212dcad378e7b2a9015c5d2bd9b27704860a4b690603b4ad083afbd9fbe9248f10b46a4c61d3d2978f5d820ed", 0x21}, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000100)="f43ebe9a24e8cda27003d5aa45d9f83b58a1eb3431e93bad436e666f2a7409416946154b2fe62b216d2b6fdd420e27ba75c7d718e51d3887e1fd92e5a84d493d09f11d38768f116a45491cb6d2b2a7b1fca7a6d56ed149ac5e346377fdaad59a33d99fb3fd72088f62863fca6a1012030ec85ce7dc9b99e5b0feb5a5e131e02c5615eaeb44049d4621f902ab8af656f5563c6181d50bf244c636a6b1e8d78155d7c3d32b60b2657fdba3c4f4b1d3dae13c276db429ab3233697a1714764ba31b40f21a598e7cf99ce2753c40b291fbf073436bf9dc220f84000000", 0xdb}, {&(0x7f0000000200)="593c40655b21c89d5f92559e2c86cc91bd04abfe10", 0x15}, {&(0x7f0000000600)="4a11ffeb5b5d64d9dab101e3f518b2ec63ec112a980bb2affefa321d907b7f4cc707f0c3af83ec3cfd252728c54d66b697d4afb7f63813a5f30d59610cd1385d47ad487dd1e48178798172c19c951d3321b8abc31e455d7eff862ce26509ac571ca95d54f4a8f5f14203e1a0a34fd8c97906ec567c9209f4dea8d2e51c63e7d032da6a14fd2d7bdd159fad71ae5d4b506728f790d4f139d60000000000000000002b5e", 0xa3}, {&(0x7f0000000300)="ab68658c75fe6793cfcd590ed79546196f4792b83982e974b2699039", 0x1c}, {&(0x7f0000000340)="7629ecdc92abcc4fbbd4be1c1beb5dfee26d8ad64b3580c3ff1edd58ea9bf3b325d3cb2d1255a302b3065d357e5923a2b26168c719c133e5b7734ebeb56fb615a14bbbb7d0df9c950a63", 0x4a}], 0x5, &(0x7f00000006c0)=ANY=[], 0xf8, 0x40850}, 0x800) (async) socket$nl_route(0x10, 0x3, 0x0) 1.031891374s ago: executing program 35 (id=806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000c80)={0x5e4, 0x0, 0x7}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="163c4d267aecab6a", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x18}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x5c}}, 0x40045) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x300, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x463}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc50}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe9a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb67}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3487}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8589}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x20004}, 0x80) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$inet6(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)="29908231db0794467111ed689e0866f8fe322148afedf55e8765ea2b41d85d17f55285f4d73a9d86028cd80c59a6cdc148a0092564ac6b191138381eb17a606bb994a0f41c36283dad5331e3eefc6692", 0x50}], 0x1}, 0x40000) recvmsg$can_raw(r6, &(0x7f0000000a40)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000800)=""/166, 0xa6}, {&(0x7f0000000280)=""/33, 0x21}, {&(0x7f00000006c0)=""/33, 0x21}, {&(0x7f00000008c0)=""/68, 0x44}, {&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000700)=""/52, 0x34}, {&(0x7f0000000ac0)=""/100, 0x64}], 0xa, &(0x7f0000000c00)=""/96, 0x60}, 0x5af9f8660b7d1d52) recvmsg$qrtr(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ec0)=""/64, 0x40}, {&(0x7f0000000740)=""/178, 0xb2}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x2) 0s ago: executing program 36 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b000000080003", @ANYRES32=r2, @ANYBLOB="0400460005003400a9000000080026006c0900"], 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.133' (ED25519) to the list of known hosts. [ 65.814338][ T5814] cgroup: Unknown subsys name 'net' [ 65.927223][ T5814] cgroup: Unknown subsys name 'cpuset' [ 65.935498][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.299622][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.754546][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.764301][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.765857][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.771935][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.780716][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.793098][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.815268][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.815418][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.829935][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.844409][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.845993][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.859378][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.860098][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.873808][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.876535][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.882723][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.889582][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.895309][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.903376][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.917068][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.924753][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.935892][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.935900][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.950990][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.960208][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.569909][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 70.666560][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 70.711348][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 70.802096][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 70.847506][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 70.869089][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.876368][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.883730][ T5836] bridge_slave_0: entered allmulticast mode [ 70.891324][ T5836] bridge_slave_0: entered promiscuous mode [ 70.935454][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.942592][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.950422][ T5836] bridge_slave_1: entered allmulticast mode [ 70.957394][ T5836] bridge_slave_1: entered promiscuous mode [ 71.057362][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.067067][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.074511][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.081630][ T5826] bridge_slave_0: entered allmulticast mode [ 71.088742][ T5826] bridge_slave_0: entered promiscuous mode [ 71.124699][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.148253][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.155449][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.162569][ T5826] bridge_slave_1: entered allmulticast mode [ 71.170010][ T5826] bridge_slave_1: entered promiscuous mode [ 71.176675][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.184378][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.191483][ T5839] bridge_slave_0: entered allmulticast mode [ 71.198603][ T5839] bridge_slave_0: entered promiscuous mode [ 71.241525][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.248869][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.256146][ T5839] bridge_slave_1: entered allmulticast mode [ 71.263192][ T5839] bridge_slave_1: entered promiscuous mode [ 71.270466][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.277908][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.288232][ T5824] bridge_slave_0: entered allmulticast mode [ 71.288910][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.295850][ T5824] bridge_slave_0: entered promiscuous mode [ 71.301660][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.309562][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.319854][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.327042][ T5824] bridge_slave_1: entered allmulticast mode [ 71.334637][ T5824] bridge_slave_1: entered promiscuous mode [ 71.353533][ T5836] team0: Port device team_slave_0 added [ 71.407980][ T5836] team0: Port device team_slave_1 added [ 71.414560][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.421717][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.428942][ T5832] bridge_slave_0: entered allmulticast mode [ 71.437042][ T5832] bridge_slave_0: entered promiscuous mode [ 71.447091][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.492547][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.499743][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.507470][ T5832] bridge_slave_1: entered allmulticast mode [ 71.514560][ T5832] bridge_slave_1: entered promiscuous mode [ 71.523098][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.549301][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.561608][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.608031][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.633427][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.643401][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.650693][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.677455][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.705249][ T5826] team0: Port device team_slave_0 added [ 71.735937][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.742884][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.769018][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.782599][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.793546][ T5826] team0: Port device team_slave_1 added [ 71.801610][ T5839] team0: Port device team_slave_0 added [ 71.828347][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.850607][ T5839] team0: Port device team_slave_1 added [ 71.858413][ T5824] team0: Port device team_slave_0 added [ 71.899488][ T5824] team0: Port device team_slave_1 added [ 71.924946][ T5833] Bluetooth: hci4: command tx timeout [ 71.925173][ T5148] Bluetooth: hci0: command tx timeout [ 71.938368][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.945373][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.971388][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.003887][ T5148] Bluetooth: hci1: command tx timeout [ 72.004053][ T5833] Bluetooth: hci2: command tx timeout [ 72.009550][ T5148] Bluetooth: hci3: command tx timeout [ 72.027814][ T5832] team0: Port device team_slave_0 added [ 72.035070][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.042017][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.068452][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.079991][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.087055][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.112968][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.140322][ T5836] hsr_slave_0: entered promiscuous mode [ 72.146679][ T5836] hsr_slave_1: entered promiscuous mode [ 72.155001][ T5832] team0: Port device team_slave_1 added [ 72.182484][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.189598][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.215905][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.227492][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.234614][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.260648][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.273118][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.280113][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.306058][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.341067][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.348107][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.374611][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.433045][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.440730][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.466629][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.509311][ T5826] hsr_slave_0: entered promiscuous mode [ 72.516990][ T5826] hsr_slave_1: entered promiscuous mode [ 72.524327][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 72.530119][ T5826] Cannot create hsr debugfs directory [ 72.622097][ T5824] hsr_slave_0: entered promiscuous mode [ 72.628623][ T5824] hsr_slave_1: entered promiscuous mode [ 72.635398][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 72.641120][ T5824] Cannot create hsr debugfs directory [ 72.685269][ T5839] hsr_slave_0: entered promiscuous mode [ 72.691728][ T5839] hsr_slave_1: entered promiscuous mode [ 72.698038][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 72.703816][ T5839] Cannot create hsr debugfs directory [ 72.748892][ T5832] hsr_slave_0: entered promiscuous mode [ 72.755664][ T5832] hsr_slave_1: entered promiscuous mode [ 72.761845][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 72.767743][ T5832] Cannot create hsr debugfs directory [ 73.160452][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.171609][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.198182][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.219722][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.278373][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.296701][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.308582][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.320663][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.395291][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.416170][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.432068][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.453080][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.535487][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.547821][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.558188][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.567730][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.690334][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.701666][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.712746][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.734708][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.741512][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.758518][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.814500][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.827594][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.855320][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.862555][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.886174][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.893290][ T4539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.902558][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.909671][ T4539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.935525][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.942596][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.971169][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.004317][ T5827] Bluetooth: hci4: command tx timeout [ 74.009744][ T5148] Bluetooth: hci0: command tx timeout [ 74.042022][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.053044][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.085259][ T5148] Bluetooth: hci2: command tx timeout [ 74.085281][ T5827] Bluetooth: hci3: command tx timeout [ 74.090825][ T5833] Bluetooth: hci1: command tx timeout [ 74.129100][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.141154][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.195554][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.202718][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.250646][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.269173][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.287299][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.294469][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.321316][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.328457][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.362519][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.369708][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.418114][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.495357][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.515705][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.522808][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.538942][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.564939][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.572004][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.660663][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.683317][ T5836] veth0_vlan: entered promiscuous mode [ 74.768069][ T5836] veth1_vlan: entered promiscuous mode [ 74.866097][ T5826] veth0_vlan: entered promiscuous mode [ 74.901183][ T5826] veth1_vlan: entered promiscuous mode [ 74.981535][ T5836] veth0_macvtap: entered promiscuous mode [ 75.000737][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.016274][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.028025][ T5836] veth1_macvtap: entered promiscuous mode [ 75.079756][ T5826] veth0_macvtap: entered promiscuous mode [ 75.116010][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.123665][ T5826] veth1_macvtap: entered promiscuous mode [ 75.146042][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.173584][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.200947][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.220882][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.229703][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.246639][ T5832] veth0_vlan: entered promiscuous mode [ 75.256440][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.267034][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.276476][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.293380][ T5824] veth0_vlan: entered promiscuous mode [ 75.309600][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.318538][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.333116][ T5832] veth1_vlan: entered promiscuous mode [ 75.346150][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.360207][ T5824] veth1_vlan: entered promiscuous mode [ 75.396408][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.466221][ T5832] veth0_macvtap: entered promiscuous mode [ 75.518892][ T5832] veth1_macvtap: entered promiscuous mode [ 75.571701][ T5824] veth0_macvtap: entered promiscuous mode [ 75.585567][ T5824] veth1_macvtap: entered promiscuous mode [ 75.618297][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.627489][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.650111][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.690429][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.698637][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.699255][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.742338][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.760862][ T5839] veth0_vlan: entered promiscuous mode [ 75.777470][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.785777][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.797646][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.830095][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.839061][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.855538][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.868306][ T5839] veth1_vlan: entered promiscuous mode [ 75.881790][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.905316][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.913150][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.939406][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.941934][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.981131][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.017953][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.033514][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.080690][ T5839] veth0_macvtap: entered promiscuous mode [ 76.087317][ T5148] Bluetooth: hci4: command tx timeout [ 76.092786][ T5833] Bluetooth: hci0: command tx timeout [ 76.164178][ T5148] Bluetooth: hci2: command tx timeout [ 76.166913][ T5827] Bluetooth: hci3: command tx timeout [ 76.169649][ T5833] Bluetooth: hci1: command tx timeout [ 76.190420][ T5839] veth1_macvtap: entered promiscuous mode [ 76.223185][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.234331][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.254856][ T5944] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.300049][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.308590][ T5943] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2'. [ 76.319304][ T5944] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 76.342796][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.357929][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.370290][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.389564][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.415542][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.460438][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.468749][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.488938][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.501274][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.530155][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.592128][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.831665][ T5960] syz_tun: entered allmulticast mode [ 76.912612][ T5955] pimreg: entered allmulticast mode [ 76.948839][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.001136][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.117815][ T5970] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11'. [ 77.159665][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 77.205661][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.224193][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.346378][ T5976] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14'. [ 77.572053][ T5953] syz_tun: left allmulticast mode [ 77.653891][ T5983] netlink: 'syz.2.16': attribute type 26 has an invalid length. [ 77.733647][ T5983] syzkaller0: entered promiscuous mode [ 77.739246][ T5983] syzkaller0: entered allmulticast mode [ 77.811197][ T5987] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 77.866241][ T5996] netlink: 64 bytes leftover after parsing attributes in process `syz.4.18'. [ 77.897816][ T5987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.168615][ T5833] Bluetooth: hci0: command tx timeout [ 78.168629][ T5827] Bluetooth: hci4: command tx timeout [ 78.247884][ T5827] Bluetooth: hci3: command tx timeout [ 78.250972][ T5833] Bluetooth: hci1: command tx timeout [ 78.253323][ T5827] Bluetooth: hci2: command tx timeout [ 78.336509][ T6013] netlink: 48 bytes leftover after parsing attributes in process `syz.2.26'. [ 78.432468][ T6022] FAULT_INJECTION: forcing a failure. [ 78.432468][ T6022] name failslab, interval 1, probability 0, space 0, times 1 [ 78.447528][ T6022] CPU: 1 UID: 0 PID: 6022 Comm: syz.4.30 Not tainted syzkaller #0 PREEMPT(full) [ 78.447551][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.447569][ T6022] Call Trace: [ 78.447576][ T6022] [ 78.447583][ T6022] dump_stack_lvl+0x189/0x250 [ 78.447617][ T6022] ? __pfx____ratelimit+0x10/0x10 [ 78.447639][ T6022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.447661][ T6022] ? __pfx__printk+0x10/0x10 [ 78.447685][ T6022] ? __pfx___might_resched+0x10/0x10 [ 78.447702][ T6022] ? fs_reclaim_acquire+0x7d/0x100 [ 78.447731][ T6022] should_fail_ex+0x414/0x560 [ 78.447760][ T6022] should_failslab+0xa8/0x100 [ 78.447779][ T6022] __kmalloc_node_noprof+0xd2/0x800 [ 78.447801][ T6022] ? alloc_slab_obj_exts+0x3e/0x100 [ 78.447829][ T6022] alloc_slab_obj_exts+0x3e/0x100 [ 78.447850][ T6022] __memcg_slab_post_alloc_hook+0x31d/0x7d0 [ 78.447891][ T6022] ? kasan_unpoison+0x48/0x70 [ 78.447917][ T6022] __kvmalloc_node_noprof+0x6d8/0x910 [ 78.447942][ T6022] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 78.447971][ T6022] alloc_netdev_mqs+0x8a6/0x11b0 [ 78.447998][ T6022] rtnl_create_link+0x31f/0xd10 [ 78.448025][ T6022] rtnl_newlink_create+0x25c/0xb00 [ 78.448048][ T6022] ? __lock_acquire+0xab9/0xd20 [ 78.448141][ T6022] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 78.448164][ T6022] ? __pfx___mutex_lock+0x10/0x10 [ 78.448204][ T6022] ? ns_capable+0x8a/0xf0 [ 78.448227][ T6022] rtnl_newlink+0x16e4/0x1c80 [ 78.448252][ T6022] ? netlink_deliver_tap+0x19c/0x1b0 [ 78.448280][ T6022] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.448326][ T6022] ? kasan_quarantine_put+0xdd/0x220 [ 78.448347][ T6022] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.448381][ T6022] ? nlmon_xmit+0xb0/0x100 [ 78.448398][ T6022] ? kmem_cache_free+0x19b/0x690 [ 78.448430][ T6022] ? __local_bh_enable_ip+0x12d/0x1c0 [ 78.448449][ T6022] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.448476][ T6022] ? __local_bh_enable_ip+0x12d/0x1c0 [ 78.448493][ T6022] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 78.448515][ T6022] ? __dev_queue_xmit+0x27b/0x3b50 [ 78.448535][ T6022] ? __dev_queue_xmit+0x27b/0x3b50 [ 78.448552][ T6022] ? __dev_queue_xmit+0x27b/0x3b50 [ 78.448572][ T6022] ? __dev_queue_xmit+0x1d79/0x3b50 [ 78.448589][ T6022] ? kasan_save_track+0x3e/0x80 [ 78.448609][ T6022] ? __kasan_slab_alloc+0x6c/0x80 [ 78.448636][ T6022] ? __lock_acquire+0xab9/0xd20 [ 78.448680][ T6022] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.448702][ T6022] rtnetlink_rcv_msg+0x7cf/0xb70 [ 78.448730][ T6022] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 78.448753][ T6022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.448773][ T6022] ? ref_tracker_free+0x63a/0x7d0 [ 78.448791][ T6022] ? __asan_memcpy+0x40/0x70 [ 78.448811][ T6022] ? __pfx_ref_tracker_free+0x10/0x10 [ 78.448825][ T6022] ? __skb_clone+0x63/0x7a0 [ 78.448854][ T6022] netlink_rcv_skb+0x208/0x470 [ 78.448872][ T6022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.448896][ T6022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 78.448924][ T6022] ? netlink_deliver_tap+0x2e/0x1b0 [ 78.448950][ T6022] netlink_unicast+0x82f/0x9e0 [ 78.448981][ T6022] ? __pfx_netlink_unicast+0x10/0x10 [ 78.449006][ T6022] ? netlink_sendmsg+0x642/0xb30 [ 78.449021][ T6022] ? skb_put+0x11b/0x210 [ 78.449041][ T6022] netlink_sendmsg+0x805/0xb30 [ 78.449068][ T6022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.449095][ T6022] ? aa_sock_msg_perm+0xf1/0x1d0 [ 78.449121][ T6022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 78.449137][ T6022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.449155][ T6022] __sock_sendmsg+0x21c/0x270 [ 78.449181][ T6022] ____sys_sendmsg+0x505/0x830 [ 78.449206][ T6022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.449234][ T6022] ? import_iovec+0x74/0xa0 [ 78.449258][ T6022] ___sys_sendmsg+0x21f/0x2a0 [ 78.449279][ T6022] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.449335][ T6022] ? __fget_files+0x2a/0x420 [ 78.449349][ T6022] ? __fget_files+0x3a0/0x420 [ 78.449377][ T6022] __x64_sys_sendmsg+0x19b/0x260 [ 78.449398][ T6022] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 78.449427][ T6022] ? __pfx_ksys_write+0x10/0x10 [ 78.449454][ T6022] ? do_syscall_64+0xbe/0xfa0 [ 78.449480][ T6022] do_syscall_64+0xfa/0xfa0 [ 78.449501][ T6022] ? lockdep_hardirqs_on+0x9c/0x150 [ 78.449522][ T6022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.449539][ T6022] ? clear_bhb_loop+0x60/0xb0 [ 78.449559][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.449576][ T6022] RIP: 0033:0x7fda1098f6c9 [ 78.449603][ T6022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.449616][ T6022] RSP: 002b:00007fda117c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.449635][ T6022] RAX: ffffffffffffffda RBX: 00007fda10be5fa0 RCX: 00007fda1098f6c9 [ 78.449648][ T6022] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 78.449658][ T6022] RBP: 00007fda117c2090 R08: 0000000000000000 R09: 0000000000000000 [ 78.449667][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.449677][ T6022] R13: 00007fda10be6038 R14: 00007fda10be5fa0 R15: 00007ffc88dcbce8 [ 78.449708][ T6022] [ 79.154653][ T6030] netlink: 'syz.3.33': attribute type 10 has an invalid length. [ 79.162319][ T6030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.33'. [ 79.262490][ T6030] team0: Port device geneve0 added [ 79.278338][ T6034] pim6reg527: entered allmulticast mode [ 79.519281][ T6058] netlink: 48 bytes leftover after parsing attributes in process `syz.0.41'. [ 79.919411][ T6077] netlink: 'syz.3.48': attribute type 5 has an invalid length. [ 79.944932][ T6077] FAULT_INJECTION: forcing a failure. [ 79.944932][ T6077] name failslab, interval 1, probability 0, space 0, times 0 [ 79.961375][ T6077] CPU: 0 UID: 0 PID: 6077 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT(full) [ 79.961397][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.961407][ T6077] Call Trace: [ 79.961414][ T6077] [ 79.961422][ T6077] dump_stack_lvl+0x189/0x250 [ 79.961449][ T6077] ? __pfx____ratelimit+0x10/0x10 [ 79.961471][ T6077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.961492][ T6077] ? __pfx__printk+0x10/0x10 [ 79.961511][ T6077] ? __mutex_trylock_common+0x153/0x260 [ 79.961538][ T6077] should_fail_ex+0x414/0x560 [ 79.961567][ T6077] should_failslab+0xa8/0x100 [ 79.961584][ T6077] __kmalloc_cache_noprof+0x6f/0x6f0 [ 79.961604][ T6077] ? __hw_addr_add_ex+0x1f4/0x770 [ 79.961628][ T6077] __hw_addr_add_ex+0x1f4/0x770 [ 79.961650][ T6077] dev_addr_init+0x14f/0x230 [ 79.961677][ T6077] ? __pfx_dev_addr_init+0x10/0x10 [ 79.961709][ T6077] alloc_netdev_mqs+0x2b1/0x11b0 [ 79.961727][ T6077] ? __pfx_vxlan_setup+0x10/0x10 [ 79.961752][ T6077] rtnl_create_link+0x31f/0xd10 [ 79.961782][ T6077] rtnl_newlink_create+0x25c/0xb00 [ 79.961805][ T6077] ? __lock_acquire+0xab9/0xd20 [ 79.961825][ T6077] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 79.961846][ T6077] ? __pfx___mutex_lock+0x10/0x10 [ 79.961873][ T6077] ? full_name_hash+0x89/0xe0 [ 79.961889][ T6077] ? netdev_name_node_lookup+0x32/0x120 [ 79.961915][ T6077] rtnl_newlink+0x16e4/0x1c80 [ 79.961939][ T6077] ? netlink_deliver_tap+0x19c/0x1b0 [ 79.961967][ T6077] ? __pfx_rtnl_newlink+0x10/0x10 [ 79.962013][ T6077] ? kasan_quarantine_put+0xdd/0x220 [ 79.962034][ T6077] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.962062][ T6077] ? nlmon_xmit+0xb0/0x100 [ 79.962079][ T6077] ? kmem_cache_free+0x19b/0x690 [ 79.962111][ T6077] ? __local_bh_enable_ip+0x12d/0x1c0 [ 79.962135][ T6077] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.962158][ T6077] ? __local_bh_enable_ip+0x12d/0x1c0 [ 79.962174][ T6077] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 79.962196][ T6077] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.962215][ T6077] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.962231][ T6077] ? __dev_queue_xmit+0x27b/0x3b50 [ 79.962249][ T6077] ? __dev_queue_xmit+0x1d79/0x3b50 [ 79.962266][ T6077] ? kasan_save_track+0x3e/0x80 [ 79.962285][ T6077] ? __kasan_slab_alloc+0x6c/0x80 [ 79.962310][ T6077] ? __lock_acquire+0xab9/0xd20 [ 79.962351][ T6077] ? __pfx_rtnl_newlink+0x10/0x10 [ 79.962374][ T6077] rtnetlink_rcv_msg+0x7cf/0xb70 [ 79.962401][ T6077] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 79.962423][ T6077] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.962444][ T6077] ? ref_tracker_free+0x63a/0x7d0 [ 79.962461][ T6077] ? __asan_memcpy+0x40/0x70 [ 79.962480][ T6077] ? __pfx_ref_tracker_free+0x10/0x10 [ 79.962494][ T6077] ? __skb_clone+0x63/0x7a0 [ 79.962523][ T6077] netlink_rcv_skb+0x208/0x470 [ 79.962541][ T6077] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.962565][ T6077] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 79.962592][ T6077] ? netlink_deliver_tap+0x2e/0x1b0 [ 79.962616][ T6077] netlink_unicast+0x82f/0x9e0 [ 79.962648][ T6077] ? __pfx_netlink_unicast+0x10/0x10 [ 79.962672][ T6077] ? netlink_sendmsg+0x642/0xb30 [ 79.962687][ T6077] ? skb_put+0x11b/0x210 [ 79.962707][ T6077] netlink_sendmsg+0x805/0xb30 [ 79.962734][ T6077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.962755][ T6077] ? aa_sock_msg_perm+0xf1/0x1d0 [ 79.962780][ T6077] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 79.962795][ T6077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.962812][ T6077] __sock_sendmsg+0x21c/0x270 [ 79.962838][ T6077] ____sys_sendmsg+0x52d/0x830 [ 79.962863][ T6077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.962889][ T6077] ? import_iovec+0x74/0xa0 [ 79.962913][ T6077] ___sys_sendmsg+0x21f/0x2a0 [ 79.962934][ T6077] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.962995][ T6077] ? __might_fault+0xb0/0x130 [ 79.963021][ T6077] __sys_sendmmsg+0x227/0x430 [ 79.963043][ T6077] ? __pfx___sys_sendmmsg+0x10/0x10 [ 79.963071][ T6077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 79.963112][ T6077] ? ksys_write+0x22a/0x250 [ 79.963144][ T6077] ? __pfx_ksys_write+0x10/0x10 [ 79.963170][ T6077] __x64_sys_sendmmsg+0xa0/0xc0 [ 79.963188][ T6077] do_syscall_64+0xfa/0xfa0 [ 79.963209][ T6077] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.963230][ T6077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.963246][ T6077] ? clear_bhb_loop+0x60/0xb0 [ 79.963267][ T6077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.963283][ T6077] RIP: 0033:0x7fd57e38f6c9 [ 79.963298][ T6077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.963310][ T6077] RSP: 002b:00007fd57f2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 79.963328][ T6077] RAX: ffffffffffffffda RBX: 00007fd57e5e5fa0 RCX: 00007fd57e38f6c9 [ 79.963341][ T6077] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 79.963352][ T6077] RBP: 00007fd57f2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.963362][ T6077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.963372][ T6077] R13: 00007fd57e5e6038 R14: 00007fd57e5e5fa0 R15: 00007ffcd24cdb88 [ 79.963401][ T6077] [ 79.963562][ T6077] Zero length message leads to an empty skb [ 80.403950][ T6085] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.668233][ T6098] netlink: 96 bytes leftover after parsing attributes in process `syz.2.56'. [ 80.668414][ T6097] netlink: 'syz.4.55': attribute type 15 has an invalid length. [ 80.692234][ T6098] vlan2: entered allmulticast mode [ 80.714519][ T6098] gretap0: entered allmulticast mode [ 80.860886][ T6102] netlink: 'syz.3.58': attribute type 3 has an invalid length. [ 81.051836][ T6112] netlink: 'syz.1.62': attribute type 1 has an invalid length. [ 81.059627][ T6112] netlink: 'syz.1.62': attribute type 2 has an invalid length. [ 81.159452][ T6121] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.441863][ T6136] netlink: 'syz.3.70': attribute type 5 has an invalid length. [ 81.473224][ T6134] syzkaller0: entered promiscuous mode [ 81.482819][ T6134] syzkaller0: entered allmulticast mode [ 81.493164][ T6134] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 81.493639][ T6138] FAULT_INJECTION: forcing a failure. [ 81.493639][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 81.533949][ T6138] CPU: 1 UID: 0 PID: 6138 Comm: syz.2.71 Not tainted syzkaller #0 PREEMPT(full) [ 81.533971][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.533980][ T6138] Call Trace: [ 81.533988][ T6138] [ 81.533996][ T6138] dump_stack_lvl+0x189/0x250 [ 81.534022][ T6138] ? __pfx____ratelimit+0x10/0x10 [ 81.534053][ T6138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.534075][ T6138] ? __pfx__printk+0x10/0x10 [ 81.534100][ T6138] ? __pfx___might_resched+0x10/0x10 [ 81.534124][ T6138] should_fail_ex+0x414/0x560 [ 81.534154][ T6138] should_failslab+0xa8/0x100 [ 81.534173][ T6138] __kmalloc_cache_noprof+0x6f/0x6f0 [ 81.534197][ T6138] ? __asan_memset+0x22/0x50 [ 81.534215][ T6138] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 81.534243][ T6138] alloc_netdev_mqs+0xbf8/0x11b0 [ 81.534271][ T6138] rtnl_create_link+0x31f/0xd10 [ 81.534299][ T6138] rtnl_newlink_create+0x25c/0xb00 [ 81.534322][ T6138] ? __lock_acquire+0xab9/0xd20 [ 81.534345][ T6138] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 81.534367][ T6138] ? __pfx___mutex_lock+0x10/0x10 [ 81.534402][ T6138] ? ns_capable+0x8a/0xf0 [ 81.534425][ T6138] rtnl_newlink+0x16e4/0x1c80 [ 81.534450][ T6138] ? netlink_deliver_tap+0x19c/0x1b0 [ 81.534481][ T6138] ? __pfx_rtnl_newlink+0x10/0x10 [ 81.534532][ T6138] ? kasan_quarantine_put+0xdd/0x220 [ 81.534554][ T6138] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.534583][ T6138] ? nlmon_xmit+0xb0/0x100 [ 81.534601][ T6138] ? kmem_cache_free+0x19b/0x690 [ 81.534634][ T6138] ? __local_bh_enable_ip+0x12d/0x1c0 [ 81.534653][ T6138] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.534676][ T6138] ? __local_bh_enable_ip+0x12d/0x1c0 [ 81.534694][ T6138] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 81.534716][ T6138] ? __dev_queue_xmit+0x27b/0x3b50 [ 81.534736][ T6138] ? __dev_queue_xmit+0x27b/0x3b50 [ 81.534753][ T6138] ? __dev_queue_xmit+0x27b/0x3b50 [ 81.534774][ T6138] ? __dev_queue_xmit+0x1d79/0x3b50 [ 81.534790][ T6138] ? kasan_save_track+0x3e/0x80 [ 81.534811][ T6138] ? __kasan_slab_alloc+0x6c/0x80 [ 81.534838][ T6138] ? __lock_acquire+0xab9/0xd20 [ 81.534883][ T6138] ? __pfx_rtnl_newlink+0x10/0x10 [ 81.534905][ T6138] rtnetlink_rcv_msg+0x7cf/0xb70 [ 81.534933][ T6138] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 81.534956][ T6138] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.534977][ T6138] ? ref_tracker_free+0x63a/0x7d0 [ 81.534994][ T6138] ? __asan_memcpy+0x40/0x70 [ 81.535015][ T6138] ? __pfx_ref_tracker_free+0x10/0x10 [ 81.535029][ T6138] ? __skb_clone+0x63/0x7a0 [ 81.535063][ T6138] netlink_rcv_skb+0x208/0x470 [ 81.535081][ T6138] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 81.535106][ T6138] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 81.535136][ T6138] ? netlink_deliver_tap+0x2e/0x1b0 [ 81.535162][ T6138] netlink_unicast+0x82f/0x9e0 [ 81.535195][ T6138] ? __pfx_netlink_unicast+0x10/0x10 [ 81.535220][ T6138] ? netlink_sendmsg+0x642/0xb30 [ 81.535235][ T6138] ? skb_put+0x11b/0x210 [ 81.535255][ T6138] netlink_sendmsg+0x805/0xb30 [ 81.535283][ T6138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.535304][ T6138] ? aa_sock_msg_perm+0xf1/0x1d0 [ 81.535329][ T6138] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 81.535346][ T6138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.535364][ T6138] __sock_sendmsg+0x21c/0x270 [ 81.535389][ T6138] ____sys_sendmsg+0x505/0x830 [ 81.535415][ T6138] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.535444][ T6138] ? import_iovec+0x74/0xa0 [ 81.535469][ T6138] ___sys_sendmsg+0x21f/0x2a0 [ 81.535490][ T6138] ? __pfx____sys_sendmsg+0x10/0x10 [ 81.535566][ T6138] ? __fget_files+0x2a/0x420 [ 81.535582][ T6138] ? __fget_files+0x3a0/0x420 [ 81.535610][ T6138] __x64_sys_sendmsg+0x19b/0x260 [ 81.535632][ T6138] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 81.535662][ T6138] ? __pfx_ksys_write+0x10/0x10 [ 81.535689][ T6138] ? do_syscall_64+0xbe/0xfa0 [ 81.535716][ T6138] do_syscall_64+0xfa/0xfa0 [ 81.535736][ T6138] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.535757][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.535775][ T6138] ? clear_bhb_loop+0x60/0xb0 [ 81.535796][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.535812][ T6138] RIP: 0033:0x7fb1f958f6c9 [ 81.535828][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.535841][ T6138] RSP: 002b:00007fb1fa4a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.535859][ T6138] RAX: ffffffffffffffda RBX: 00007fb1f97e5fa0 RCX: 00007fb1f958f6c9 [ 81.535872][ T6138] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 81.535882][ T6138] RBP: 00007fb1fa4a1090 R08: 0000000000000000 R09: 0000000000000000 [ 81.535893][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.535903][ T6138] R13: 00007fb1f97e6038 R14: 00007fb1f97e5fa0 R15: 00007fff46e4cbd8 [ 81.535936][ T6138] [ 82.121311][ T6142] syzkaller0: mtu greater than device maximum [ 82.267313][ T5827] block nbd0: Receive control failed (result -32) [ 82.447683][ T6154] xt_connbytes: Forcing CT accounting to be enabled [ 82.545790][ T6151] syzkaller0: entered allmulticast mode [ 82.649327][ T6163] __nla_validate_parse: 2 callbacks suppressed [ 82.649344][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 82.698374][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.835996][ T6169] netlink: 'syz.1.82': attribute type 5 has an invalid length. [ 82.854112][ T6169] FAULT_INJECTION: forcing a failure. [ 82.854112][ T6169] name failslab, interval 1, probability 0, space 0, times 0 [ 82.879379][ T6169] CPU: 0 UID: 0 PID: 6169 Comm: syz.1.82 Not tainted syzkaller #0 PREEMPT(full) [ 82.879403][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.879413][ T6169] Call Trace: [ 82.879421][ T6169] [ 82.879429][ T6169] dump_stack_lvl+0x189/0x250 [ 82.879456][ T6169] ? __pfx____ratelimit+0x10/0x10 [ 82.879479][ T6169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.879501][ T6169] ? __pfx__printk+0x10/0x10 [ 82.879525][ T6169] ? __pfx___might_resched+0x10/0x10 [ 82.879543][ T6169] ? fs_reclaim_acquire+0x7d/0x100 [ 82.879573][ T6169] should_fail_ex+0x414/0x560 [ 82.879602][ T6169] should_failslab+0xa8/0x100 [ 82.879620][ T6169] __kvmalloc_node_noprof+0x158/0x910 [ 82.879644][ T6169] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 82.879671][ T6169] alloc_netdev_mqs+0x8a6/0x11b0 [ 82.879699][ T6169] rtnl_create_link+0x31f/0xd10 [ 82.879727][ T6169] rtnl_newlink_create+0x25c/0xb00 [ 82.879751][ T6169] ? __lock_acquire+0xab9/0xd20 [ 82.879774][ T6169] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 82.879796][ T6169] ? __pfx___mutex_lock+0x10/0x10 [ 82.879828][ T6169] ? full_name_hash+0x89/0xe0 [ 82.879844][ T6169] ? netdev_name_node_lookup+0x32/0x120 [ 82.879891][ T6169] rtnl_newlink+0x16e4/0x1c80 [ 82.879917][ T6169] ? netlink_deliver_tap+0x19c/0x1b0 [ 82.879947][ T6169] ? __pfx_rtnl_newlink+0x10/0x10 [ 82.879998][ T6169] ? kasan_quarantine_put+0xdd/0x220 [ 82.880021][ T6169] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.880050][ T6169] ? nlmon_xmit+0xb0/0x100 [ 82.880068][ T6169] ? kmem_cache_free+0x19b/0x690 [ 82.880101][ T6169] ? __local_bh_enable_ip+0x12d/0x1c0 [ 82.880120][ T6169] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.880143][ T6169] ? __local_bh_enable_ip+0x12d/0x1c0 [ 82.880161][ T6169] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 82.880184][ T6169] ? __dev_queue_xmit+0x27b/0x3b50 [ 82.880203][ T6169] ? __dev_queue_xmit+0x27b/0x3b50 [ 82.880220][ T6169] ? __dev_queue_xmit+0x27b/0x3b50 [ 82.880241][ T6169] ? __dev_queue_xmit+0x1d79/0x3b50 [ 82.880259][ T6169] ? kasan_save_track+0x3e/0x80 [ 82.880279][ T6169] ? __kasan_slab_alloc+0x6c/0x80 [ 82.880307][ T6169] ? __lock_acquire+0xab9/0xd20 [ 82.880351][ T6169] ? __pfx_rtnl_newlink+0x10/0x10 [ 82.880374][ T6169] rtnetlink_rcv_msg+0x7cf/0xb70 [ 82.880402][ T6169] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 82.880428][ T6169] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.880449][ T6169] ? ref_tracker_free+0x63a/0x7d0 [ 82.880467][ T6169] ? __asan_memcpy+0x40/0x70 [ 82.880487][ T6169] ? __pfx_ref_tracker_free+0x10/0x10 [ 82.880502][ T6169] ? __skb_clone+0x63/0x7a0 [ 82.880531][ T6169] netlink_rcv_skb+0x208/0x470 [ 82.880549][ T6169] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 82.880575][ T6169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.880605][ T6169] ? netlink_deliver_tap+0x2e/0x1b0 [ 82.880630][ T6169] netlink_unicast+0x82f/0x9e0 [ 82.880662][ T6169] ? __pfx_netlink_unicast+0x10/0x10 [ 82.880688][ T6169] ? netlink_sendmsg+0x642/0xb30 [ 82.880703][ T6169] ? skb_put+0x11b/0x210 [ 82.880724][ T6169] netlink_sendmsg+0x805/0xb30 [ 82.880751][ T6169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.880773][ T6169] ? aa_sock_msg_perm+0xf1/0x1d0 [ 82.880798][ T6169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 82.880815][ T6169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.880834][ T6169] __sock_sendmsg+0x21c/0x270 [ 82.880859][ T6169] ____sys_sendmsg+0x52d/0x830 [ 82.880889][ T6169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.880917][ T6169] ? import_iovec+0x74/0xa0 [ 82.880942][ T6169] ___sys_sendmsg+0x21f/0x2a0 [ 82.880964][ T6169] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.881025][ T6169] ? __might_fault+0xb0/0x130 [ 82.881051][ T6169] __sys_sendmmsg+0x227/0x430 [ 82.881075][ T6169] ? __pfx___sys_sendmmsg+0x10/0x10 [ 82.881103][ T6169] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.881142][ T6169] ? ksys_write+0x22a/0x250 [ 82.881166][ T6169] ? __pfx_ksys_write+0x10/0x10 [ 82.881193][ T6169] __x64_sys_sendmmsg+0xa0/0xc0 [ 82.881214][ T6169] do_syscall_64+0xfa/0xfa0 [ 82.881235][ T6169] ? lockdep_hardirqs_on+0x9c/0x150 [ 82.881256][ T6169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.881272][ T6169] ? clear_bhb_loop+0x60/0xb0 [ 82.881292][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.881308][ T6169] RIP: 0033:0x7f65e1d8f6c9 [ 82.881323][ T6169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.881337][ T6169] RSP: 002b:00007f65e2bb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.881355][ T6169] RAX: ffffffffffffffda RBX: 00007f65e1fe5fa0 RCX: 00007f65e1d8f6c9 [ 82.881367][ T6169] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 82.881378][ T6169] RBP: 00007f65e2bb3090 R08: 0000000000000000 R09: 0000000000000000 [ 82.881389][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.881399][ T6169] R13: 00007f65e1fe6038 R14: 00007f65e1fe5fa0 R15: 00007ffc5e55b3f8 [ 82.881429][ T6169] [ 83.536450][ T6187] netlink: 'syz.2.87': attribute type 2 has an invalid length. [ 83.550908][ T6185] netlink: 140 bytes leftover after parsing attributes in process `syz.1.89'. [ 83.698354][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 83.761373][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 83.896178][ T6203] netlink: 'syz.4.98': attribute type 5 has an invalid length. [ 83.924492][ T6203] FAULT_INJECTION: forcing a failure. [ 83.924492][ T6203] name failslab, interval 1, probability 0, space 0, times 0 [ 83.941152][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: syz.4.98 Not tainted syzkaller #0 PREEMPT(full) [ 83.941174][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.941184][ T6203] Call Trace: [ 83.941190][ T6203] [ 83.941198][ T6203] dump_stack_lvl+0x189/0x250 [ 83.941222][ T6203] ? __pfx____ratelimit+0x10/0x10 [ 83.941244][ T6203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.941265][ T6203] ? __pfx__printk+0x10/0x10 [ 83.941286][ T6203] ? __pfx___might_resched+0x10/0x10 [ 83.941309][ T6203] should_fail_ex+0x414/0x560 [ 83.941338][ T6203] should_failslab+0xa8/0x100 [ 83.941357][ T6203] __kmalloc_cache_noprof+0x6f/0x6f0 [ 83.941379][ T6203] ? __asan_memset+0x22/0x50 [ 83.941395][ T6203] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 83.941422][ T6203] alloc_netdev_mqs+0xbf8/0x11b0 [ 83.941448][ T6203] rtnl_create_link+0x31f/0xd10 [ 83.941473][ T6203] rtnl_newlink_create+0x25c/0xb00 [ 83.941496][ T6203] ? __lock_acquire+0xab9/0xd20 [ 83.941517][ T6203] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 83.941538][ T6203] ? __pfx___mutex_lock+0x10/0x10 [ 83.941569][ T6203] ? full_name_hash+0x89/0xe0 [ 83.941586][ T6203] ? netdev_name_node_lookup+0x32/0x120 [ 83.941613][ T6203] rtnl_newlink+0x16e4/0x1c80 [ 83.941639][ T6203] ? netlink_deliver_tap+0x19c/0x1b0 [ 83.941676][ T6203] ? __pfx_rtnl_newlink+0x10/0x10 [ 83.941726][ T6203] ? kasan_quarantine_put+0xdd/0x220 [ 83.941747][ T6203] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.941776][ T6203] ? nlmon_xmit+0xb0/0x100 [ 83.941794][ T6203] ? kmem_cache_free+0x19b/0x690 [ 83.941827][ T6203] ? __local_bh_enable_ip+0x12d/0x1c0 [ 83.941846][ T6203] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.941868][ T6203] ? __local_bh_enable_ip+0x12d/0x1c0 [ 83.941885][ T6203] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 83.941907][ T6203] ? __dev_queue_xmit+0x27b/0x3b50 [ 83.941926][ T6203] ? __dev_queue_xmit+0x27b/0x3b50 [ 83.941943][ T6203] ? __dev_queue_xmit+0x27b/0x3b50 [ 83.941963][ T6203] ? __dev_queue_xmit+0x1d79/0x3b50 [ 83.941980][ T6203] ? kasan_save_track+0x3e/0x80 [ 83.942000][ T6203] ? __kasan_slab_alloc+0x6c/0x80 [ 83.942027][ T6203] ? __lock_acquire+0xab9/0xd20 [ 83.942070][ T6203] ? __pfx_rtnl_newlink+0x10/0x10 [ 83.942092][ T6203] rtnetlink_rcv_msg+0x7cf/0xb70 [ 83.942119][ T6203] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 83.942142][ T6203] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 83.942163][ T6203] ? ref_tracker_free+0x63a/0x7d0 [ 83.942180][ T6203] ? __asan_memcpy+0x40/0x70 [ 83.942201][ T6203] ? __pfx_ref_tracker_free+0x10/0x10 [ 83.942215][ T6203] ? __skb_clone+0x63/0x7a0 [ 83.942243][ T6203] netlink_rcv_skb+0x208/0x470 [ 83.942261][ T6203] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 83.942286][ T6203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 83.942314][ T6203] ? netlink_deliver_tap+0x2e/0x1b0 [ 83.942339][ T6203] netlink_unicast+0x82f/0x9e0 [ 83.942372][ T6203] ? __pfx_netlink_unicast+0x10/0x10 [ 83.942395][ T6203] ? netlink_sendmsg+0x642/0xb30 [ 83.942406][ T6203] ? skb_put+0x11b/0x210 [ 83.942421][ T6203] netlink_sendmsg+0x805/0xb30 [ 83.942441][ T6203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.942456][ T6203] ? aa_sock_msg_perm+0xf1/0x1d0 [ 83.942483][ T6203] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 83.942496][ T6203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.942509][ T6203] __sock_sendmsg+0x21c/0x270 [ 83.942529][ T6203] ____sys_sendmsg+0x52d/0x830 [ 83.942547][ T6203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.942572][ T6203] ? import_iovec+0x74/0xa0 [ 83.942591][ T6203] ___sys_sendmsg+0x21f/0x2a0 [ 83.942612][ T6203] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.942695][ T6203] ? __might_fault+0xb0/0x130 [ 83.942715][ T6203] __sys_sendmmsg+0x227/0x430 [ 83.942733][ T6203] ? __pfx___sys_sendmmsg+0x10/0x10 [ 83.942754][ T6203] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 83.942786][ T6203] ? ksys_write+0x22a/0x250 [ 83.942804][ T6203] ? __pfx_ksys_write+0x10/0x10 [ 83.942825][ T6203] __x64_sys_sendmmsg+0xa0/0xc0 [ 83.942840][ T6203] do_syscall_64+0xfa/0xfa0 [ 83.942857][ T6203] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.942873][ T6203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.942886][ T6203] ? clear_bhb_loop+0x60/0xb0 [ 83.942902][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.942914][ T6203] RIP: 0033:0x7fda1098f6c9 [ 83.942926][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.942936][ T6203] RSP: 002b:00007fda117c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 83.942951][ T6203] RAX: ffffffffffffffda RBX: 00007fda10be5fa0 RCX: 00007fda1098f6c9 [ 83.942961][ T6203] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 83.942969][ T6203] RBP: 00007fda117c2090 R08: 0000000000000000 R09: 0000000000000000 [ 83.942977][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.942984][ T6203] R13: 00007fda10be6038 R14: 00007fda10be5fa0 R15: 00007ffc88dcbce8 [ 83.943007][ T6203] [ 84.684938][ T6224] xt_connbytes: Forcing CT accounting to be enabled [ 84.694657][ T6225] netlink: 140 bytes leftover after parsing attributes in process `syz.1.104'. [ 84.801374][ T6231] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 84.852848][ T6232] netlink: 'syz.2.110': attribute type 1 has an invalid length. [ 84.860598][ T6232] netlink: 9188 bytes leftover after parsing attributes in process `syz.2.110'. [ 85.006924][ T6242] netlink: 96 bytes leftover after parsing attributes in process `syz.1.111'. [ 85.016211][ T6242] 8021q: VLANs not supported on ip_vti0 [ 85.134865][ T6247] netlink: 104 bytes leftover after parsing attributes in process `syz.2.114'. [ 85.392920][ T6253] tipc: Started in network mode [ 85.398030][ T6253] tipc: Node identity 96e775c3c5a2, cluster identity 4711 [ 85.407365][ T6253] tipc: Enabled bearer , priority 0 [ 85.436740][ T6253] syzkaller0: entered promiscuous mode [ 85.463226][ T6253] syzkaller0: entered allmulticast mode [ 85.532996][ T6253] tipc: Resetting bearer [ 85.607521][ T6252] tipc: Resetting bearer [ 85.662181][ T6265] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.124'. [ 85.674091][ T6265] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.124'. [ 85.736945][ T6252] tipc: Disabling bearer [ 85.899196][ T6280] veth0: entered promiscuous mode [ 86.478978][ T6313] 8021q: VLANs not supported on ip_vti0 [ 86.514221][ T6316] IPv6: NLM_F_CREATE should be specified when creating new route [ 86.680099][ T980] cfg80211: failed to load regulatory.db [ 86.686739][ T6325] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20001 [ 86.942543][ T6340] netlink: 'syz.4.150': attribute type 2 has an invalid length. [ 87.033406][ T6344] tipc: Enabling of bearer rejected, failed to enable media [ 87.052702][ T6348] nbd: must specify a size in bytes for the device [ 87.246419][ T6356] 8021q: VLANs not supported on ip6_vti0 [ 87.891939][ T6389] Bluetooth: MGMT ver 1.23 [ 88.129194][ T6393] syzkaller0: entered allmulticast mode [ 88.143498][ T6398] netlink: 'syz.2.178': attribute type 5 has an invalid length. [ 88.178472][ T6406] __nla_validate_parse: 10 callbacks suppressed [ 88.178488][ T6406] netlink: 48 bytes leftover after parsing attributes in process `syz.4.181'. [ 88.185628][ T6393] warning: `syz.3.176' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.269592][ T6409] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.188217][ T6417] netlink: 96 bytes leftover after parsing attributes in process `syz.2.185'. [ 89.241290][ T6423] x_tables: unsorted entry at hook 1 [ 89.396386][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 89.525923][ T6438] xt_connbytes: Forcing CT accounting to be enabled [ 89.805819][ T6443] netlink: 140 bytes leftover after parsing attributes in process `syz.1.195'. [ 89.856378][ T980] IPVS: starting estimator thread 0... [ 89.881169][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.197'. [ 89.892752][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 89.904516][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.912221][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.980988][ T6450] IPVS: using max 28 ests per chain, 67200 per kthread [ 90.108972][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 90.288877][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 90.362987][ T6464] netlink: 96 bytes leftover after parsing attributes in process `syz.1.203'. [ 90.447802][ T6464] vlan2: entered allmulticast mode [ 90.473306][ T6464] erspan0: entered allmulticast mode [ 90.556387][ T6472] xt_connbytes: Forcing CT accounting to be enabled [ 90.790225][ T6478] netlink: 140 bytes leftover after parsing attributes in process `syz.4.209'. [ 91.106556][ T6492] tipc: Enabled bearer , priority 0 [ 91.235581][ T6493] tipc: Disabling bearer [ 91.768353][ T6523] 8021q: VLANs not supported on ip6tnl0 [ 91.776090][ T6524] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 92.116958][ T6543] bond0: entered promiscuous mode [ 92.136704][ T6543] bond_slave_0: entered promiscuous mode [ 92.148481][ T6543] bond_slave_1: entered promiscuous mode [ 92.161853][ T6543] batadv0: entered promiscuous mode [ 92.186711][ T6543] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 92.361998][ T6553] $Hÿ: renamed from bond0 (while UP) [ 92.402635][ T6553] $Hÿ: entered promiscuous mode [ 92.414983][ T6553] bond_slave_0: entered promiscuous mode [ 92.420952][ T6553] bond_slave_1: entered promiscuous mode [ 93.112416][ T6579] syzkaller0: entered promiscuous mode [ 93.128476][ T6579] syzkaller0: entered allmulticast mode [ 93.191118][ T6593] vlan3: entered allmulticast mode [ 93.214654][ T6593] gretap0: entered allmulticast mode [ 93.433105][ T6615] __nla_validate_parse: 11 callbacks suppressed [ 93.433123][ T6615] netlink: 140 bytes leftover after parsing attributes in process `syz.1.258'. [ 93.617663][ T6626] syz_tun: entered allmulticast mode [ 93.676180][ T6626] pimreg: entered allmulticast mode [ 93.710264][ T6635] netlink: 96 bytes leftover after parsing attributes in process `syz.0.265'. [ 93.740609][ T6635] vlan3: entered allmulticast mode [ 93.764464][ T6635] erspan0: entered allmulticast mode [ 93.908874][ T6643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.269'. [ 94.140621][ T6659] netlink: 100 bytes leftover after parsing attributes in process `syz.3.273'. [ 94.234322][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 94.277591][ T6664] netlink: 140 bytes leftover after parsing attributes in process `syz.2.275'. [ 94.426428][ T6625] syz_tun: left allmulticast mode [ 94.518817][ T6676] netlink: 312 bytes leftover after parsing attributes in process `syz.2.280'. [ 94.602817][ T6673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.279'. [ 94.608419][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.282'. [ 94.624515][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.4.282'. [ 95.361729][ T6721] bond2 (unregistering): Released all slaves [ 95.417597][ T6730] FAULT_INJECTION: forcing a failure. [ 95.417597][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 95.430272][ T6730] CPU: 1 UID: 0 PID: 6730 Comm: syz.3.301 Not tainted syzkaller #0 PREEMPT(full) [ 95.430293][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.430302][ T6730] Call Trace: [ 95.430309][ T6730] [ 95.430317][ T6730] dump_stack_lvl+0x189/0x250 [ 95.430344][ T6730] ? __pfx____ratelimit+0x10/0x10 [ 95.430366][ T6730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.430388][ T6730] ? __pfx__printk+0x10/0x10 [ 95.430417][ T6730] should_fail_ex+0x414/0x560 [ 95.430446][ T6730] should_failslab+0xa8/0x100 [ 95.430466][ T6730] kmem_cache_alloc_noprof+0x74/0x6e0 [ 95.430489][ T6730] ? skb_clone+0x212/0x3a0 [ 95.430513][ T6730] skb_clone+0x212/0x3a0 [ 95.430534][ T6730] bpf_clone_redirect+0xad/0x3d0 [ 95.430555][ T6730] ? __lock_acquire+0xab9/0xd20 [ 95.430576][ T6730] ? bpf_test_run+0x192/0x7a0 [ 95.430600][ T6730] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 95.430629][ T6730] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 95.430652][ T6730] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.430674][ T6730] ? ktime_get+0x45/0x200 [ 95.430692][ T6730] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 95.430712][ T6730] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 95.430741][ T6730] ? __local_bh_disable_ip+0xf1/0x190 [ 95.430759][ T6730] ? __pfx___cant_migrate+0x10/0x10 [ 95.430781][ T6730] ? ktime_get+0x1d2/0x200 [ 95.430804][ T6730] ? bpf_test_timer_enter+0x196/0x260 [ 95.430823][ T6730] bpf_test_run+0x313/0x7a0 [ 95.430869][ T6730] ? __pfx_bpf_test_run+0x10/0x10 [ 95.430919][ T6730] ? convert___skb_to_skb+0x3d/0x590 [ 95.430944][ T6730] bpf_prog_test_run_skb+0xb4e/0x1550 [ 95.430977][ T6730] ? __fget_files+0x2a/0x420 [ 95.430999][ T6730] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 95.431023][ T6730] bpf_prog_test_run+0x2c7/0x340 [ 95.431046][ T6730] __sys_bpf+0x562/0x860 [ 95.431064][ T6730] ? __pfx___sys_bpf+0x10/0x10 [ 95.431105][ T6730] ? ksys_write+0x22a/0x250 [ 95.431129][ T6730] ? __pfx_ksys_write+0x10/0x10 [ 95.431157][ T6730] __x64_sys_bpf+0x7c/0x90 [ 95.431185][ T6730] do_syscall_64+0xfa/0xfa0 [ 95.431206][ T6730] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.431227][ T6730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.431243][ T6730] ? clear_bhb_loop+0x60/0xb0 [ 95.431263][ T6730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.431279][ T6730] RIP: 0033:0x7fd57e38f6c9 [ 95.431297][ T6730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.431311][ T6730] RSP: 002b:00007fd57f2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.431329][ T6730] RAX: ffffffffffffffda RBX: 00007fd57e5e5fa0 RCX: 00007fd57e38f6c9 [ 95.431342][ T6730] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 95.431353][ T6730] RBP: 00007fd57f2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.431363][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.431373][ T6730] R13: 00007fd57e5e6038 R14: 00007fd57e5e5fa0 R15: 00007ffcd24cdb88 [ 95.431403][ T6730] [ 95.842541][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.995332][ T6748] erspan0: entered promiscuous mode [ 96.046356][ T6748] vlan3: entered promiscuous mode [ 96.222945][ T6734] bond1: Removing last arp target with arp_interval on [ 96.245980][ T6763] sctp: [Deprecated]: syz.0.307 (pid 6763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.245980][ T6763] Use struct sctp_sack_info instead [ 96.266404][ T6739] bond2 (unregistering): Released all slaves [ 96.439388][ T6766] bond0: entered promiscuous mode [ 96.492965][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.605499][ T6770] bond1: entered promiscuous mode [ 96.610887][ T6770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.704207][ T6784] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 96.761675][ T6784] bond1: (slave lo): Enslaving as a backup interface with an up link [ 96.791167][ T6784] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 96.962605][ T6809] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 96.980162][ T6808] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 97.002650][ T6809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.039875][ T6808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.276791][ T6825] netlink: 'syz.3.324': attribute type 32 has an invalid length. [ 97.306080][ T6833] FAULT_INJECTION: forcing a failure. [ 97.306080][ T6833] name failslab, interval 1, probability 0, space 0, times 0 [ 97.320111][ T6825] bond2: Setting coupled_control to off (0) [ 97.364755][ T6833] CPU: 1 UID: 0 PID: 6833 Comm: syz.1.327 Not tainted syzkaller #0 PREEMPT(full) [ 97.364778][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.364787][ T6833] Call Trace: [ 97.364794][ T6833] [ 97.364801][ T6833] dump_stack_lvl+0x189/0x250 [ 97.364828][ T6833] ? __pfx____ratelimit+0x10/0x10 [ 97.364851][ T6833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.364872][ T6833] ? __pfx__printk+0x10/0x10 [ 97.364890][ T6833] ? rcu_is_watching+0x15/0xb0 [ 97.364910][ T6833] ? trace_fib_table_lookup+0x85/0x200 [ 97.364937][ T6833] should_fail_ex+0x414/0x560 [ 97.364965][ T6833] should_failslab+0xa8/0x100 [ 97.364983][ T6833] kmem_cache_alloc_noprof+0x74/0x6e0 [ 97.365004][ T6833] ? __pfx_find_exception+0x10/0x10 [ 97.365029][ T6833] ? dst_alloc+0x105/0x170 [ 97.365046][ T6833] ? fib_lookup+0x76/0x440 [ 97.365066][ T6833] dst_alloc+0x105/0x170 [ 97.365089][ T6833] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 97.365111][ T6833] ? ip_route_output_key_hash_rcu+0x1321/0x23e0 [ 97.365136][ T6833] ? ip_route_output_key_hash+0xc1/0x280 [ 97.365159][ T6833] ip_route_output_key_hash+0x174/0x280 [ 97.365184][ T6833] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 97.365210][ T6833] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 97.365237][ T6833] ? dst_release+0x72/0x1b0 [ 97.365257][ T6833] __ip4_datagram_connect+0x8f4/0x1270 [ 97.365302][ T6833] __ip6_datagram_connect+0x9f0/0x1150 [ 97.365336][ T6833] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 97.365358][ T6833] ? __local_bh_enable_ip+0x12d/0x1c0 [ 97.365377][ T6833] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 97.365405][ T6833] ip6_datagram_connect_v6_only+0x63/0xa0 [ 97.365432][ T6833] __sys_connect+0x316/0x440 [ 97.365456][ T6833] ? __fget_files+0x3a0/0x420 [ 97.365473][ T6833] ? __pfx___sys_connect+0x10/0x10 [ 97.365510][ T6833] ? __pfx_ksys_write+0x10/0x10 [ 97.365539][ T6833] __x64_sys_connect+0x7a/0x90 [ 97.365564][ T6833] do_syscall_64+0xfa/0xfa0 [ 97.365586][ T6833] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.365607][ T6833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.365622][ T6833] ? clear_bhb_loop+0x60/0xb0 [ 97.365643][ T6833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.365659][ T6833] RIP: 0033:0x7f65e1d8f6c9 [ 97.365675][ T6833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.365686][ T6833] RSP: 002b:00007f65e2bb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 97.365704][ T6833] RAX: ffffffffffffffda RBX: 00007f65e1fe5fa0 RCX: 00007f65e1d8f6c9 [ 97.365716][ T6833] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 97.365726][ T6833] RBP: 00007f65e2bb3090 R08: 0000000000000000 R09: 0000000000000000 [ 97.365736][ T6833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.365746][ T6833] R13: 00007f65e1fe6038 R14: 00007f65e1fe5fa0 R15: 00007ffc5e55b3f8 [ 97.365777][ T6833] [ 98.254672][ T6854] netlink: 'syz.0.334': attribute type 1 has an invalid length. [ 98.447630][ T6862] netlink: 'syz.0.334': attribute type 16 has an invalid length. [ 98.474885][ T6862] netlink: 'syz.0.334': attribute type 3 has an invalid length. [ 98.514649][ T6863] __nla_validate_parse: 21 callbacks suppressed [ 98.514665][ T6863] netlink: 80 bytes leftover after parsing attributes in process `syz.0.334'. [ 98.518716][ T6862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.334'. [ 98.624288][ T6870] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 98.654921][ T6871] netlink: 48 bytes leftover after parsing attributes in process `syz.2.339'. [ 98.661287][ T6869] netlink: 'syz.2.339': attribute type 1 has an invalid length. [ 98.708020][ T6869] netlink: 'syz.2.339': attribute type 3 has an invalid length. [ 98.733782][ T6869] netlink: 224 bytes leftover after parsing attributes in process `syz.2.339'. [ 98.873150][ T6881] netlink: 68 bytes leftover after parsing attributes in process `syz.4.343'. [ 99.061757][ T6892] netlink: 68 bytes leftover after parsing attributes in process `syz.4.344'. [ 99.198161][ T6896] netlink: 84 bytes leftover after parsing attributes in process `syz.0.346'. [ 99.211708][ T6898] netlink: 56 bytes leftover after parsing attributes in process `syz.2.347'. [ 99.228263][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.347'. [ 99.228340][ T6901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'. [ 99.254226][ T6898] netlink: 'syz.2.347': attribute type 3 has an invalid length. [ 99.268935][ T6901] erspan0: entered promiscuous mode [ 99.286081][ T6898] netlink: 'syz.2.347': attribute type 2 has an invalid length. [ 99.314385][ T6901] erspan0: left promiscuous mode [ 99.514141][ T6911] tipc: Enabling of bearer rejected, failed to enable media [ 99.679359][ T6923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.689697][ T6926] xt_connbytes: Forcing CT accounting to be enabled [ 100.046541][ T6937] bond0: entered promiscuous mode [ 100.065552][ T6937] bond_slave_0: entered promiscuous mode [ 100.071412][ T6937] bond_slave_1: entered promiscuous mode [ 100.115939][ T6937] batadv0: entered promiscuous mode [ 100.123568][ T6937] debugfs: 'hsr1' already exists in 'hsr' [ 100.131512][ T6937] Cannot create hsr debugfs directory [ 100.139779][ T6937] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 100.359474][ T6957] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 100.391919][ T6957] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 100.753024][ T6983] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.793493][ T6986] syz_tun: entered allmulticast mode [ 100.828532][ T6989] FAULT_INJECTION: forcing a failure. [ 100.828532][ T6989] name failslab, interval 1, probability 0, space 0, times 0 [ 100.867052][ T6989] CPU: 0 UID: 0 PID: 6989 Comm: syz.4.379 Not tainted syzkaller #0 PREEMPT(full) [ 100.867075][ T6989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.867085][ T6989] Call Trace: [ 100.867092][ T6989] [ 100.867099][ T6989] dump_stack_lvl+0x189/0x250 [ 100.867125][ T6989] ? __pfx____ratelimit+0x10/0x10 [ 100.867148][ T6989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.867168][ T6989] ? __pfx__printk+0x10/0x10 [ 100.867191][ T6989] ? __pfx___might_resched+0x10/0x10 [ 100.867208][ T6989] ? fs_reclaim_acquire+0x7d/0x100 [ 100.867237][ T6989] should_fail_ex+0x414/0x560 [ 100.867264][ T6989] should_failslab+0xa8/0x100 [ 100.867281][ T6989] __kmalloc_noprof+0xcb/0x7f0 [ 100.867303][ T6989] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 100.867325][ T6989] ? __local_bh_enable_ip+0x12d/0x1c0 [ 100.867357][ T6989] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 100.867385][ T6989] genl_family_rcv_msg_doit+0xb8/0x300 [ 100.867413][ T6989] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 100.867441][ T6989] ? apparmor_capable+0x137/0x1b0 [ 100.867462][ T6989] ? bpf_lsm_capable+0x9/0x20 [ 100.867481][ T6989] ? security_capable+0x7e/0x2e0 [ 100.867509][ T6989] genl_rcv_msg+0x60e/0x790 [ 100.867536][ T6989] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.867554][ T6989] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 100.867571][ T6989] ? __pfx_nl80211_join_ibss+0x10/0x10 [ 100.867590][ T6989] ? __pfx_nl80211_post_doit+0x10/0x10 [ 100.867610][ T6989] ? __asan_memcpy+0x40/0x70 [ 100.867630][ T6989] ? __pfx_ref_tracker_free+0x10/0x10 [ 100.867655][ T6989] netlink_rcv_skb+0x208/0x470 [ 100.867669][ T6989] ? __lock_acquire+0xab9/0xd20 [ 100.867686][ T6989] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.867707][ T6989] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.867742][ T6989] ? down_read+0x1ad/0x2e0 [ 100.867761][ T6989] genl_rcv+0x28/0x40 [ 100.867783][ T6989] netlink_unicast+0x82f/0x9e0 [ 100.867814][ T6989] ? __pfx_netlink_unicast+0x10/0x10 [ 100.867838][ T6989] ? netlink_sendmsg+0x642/0xb30 [ 100.867853][ T6989] ? skb_put+0x11b/0x210 [ 100.867874][ T6989] netlink_sendmsg+0x805/0xb30 [ 100.867899][ T6989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.867918][ T6989] ? aa_sock_msg_perm+0xf1/0x1d0 [ 100.867941][ T6989] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.867957][ T6989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.867974][ T6989] __sock_sendmsg+0x21c/0x270 [ 100.868000][ T6989] ____sys_sendmsg+0x505/0x830 [ 100.868023][ T6989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.868050][ T6989] ? import_iovec+0x74/0xa0 [ 100.868073][ T6989] ___sys_sendmsg+0x21f/0x2a0 [ 100.868093][ T6989] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.868149][ T6989] ? __fget_files+0x2a/0x420 [ 100.868164][ T6989] ? __fget_files+0x3a0/0x420 [ 100.868192][ T6989] __x64_sys_sendmsg+0x19b/0x260 [ 100.868213][ T6989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.868241][ T6989] ? __pfx_ksys_write+0x10/0x10 [ 100.868268][ T6989] ? do_syscall_64+0xbe/0xfa0 [ 100.868294][ T6989] do_syscall_64+0xfa/0xfa0 [ 100.868315][ T6989] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.868374][ T6989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.868391][ T6989] ? clear_bhb_loop+0x60/0xb0 [ 100.868412][ T6989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.868428][ T6989] RIP: 0033:0x7fda1098f6c9 [ 100.868444][ T6989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.868461][ T6989] RSP: 002b:00007fda117c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.868479][ T6989] RAX: ffffffffffffffda RBX: 00007fda10be5fa0 RCX: 00007fda1098f6c9 [ 100.868492][ T6989] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 100.868503][ T6989] RBP: 00007fda117c2090 R08: 0000000000000000 R09: 0000000000000000 [ 100.868513][ T6989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.868523][ T6989] R13: 00007fda10be6038 R14: 00007fda10be5fa0 R15: 00007ffc88dcbce8 [ 100.868555][ T6989] [ 101.503612][ T7001] º: renamed from veth1_vlan (while UP) [ 101.610267][ T6984] syz_tun: left allmulticast mode [ 102.786831][ T7086] Cannot find del_set index 0 as target [ 103.161454][ T7086] syzkaller0: entered promiscuous mode [ 103.177256][ T7086] syzkaller0: entered allmulticast mode [ 103.581379][ T7131] __nla_validate_parse: 22 callbacks suppressed [ 103.581396][ T7131] netlink: 40 bytes leftover after parsing attributes in process `syz.2.411'. [ 103.772259][ T7138] netlink: 56 bytes leftover after parsing attributes in process `syz.0.415'. [ 103.899637][ T7142] netlink: 'syz.1.416': attribute type 9 has an invalid length. [ 104.672726][ T7081] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.687087][ T7081] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 104.718446][ T7081] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.724685][ T7081] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 104.732103][ T7148] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 104.754365][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 104.779019][ T7081] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.799328][ T7081] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 104.834599][ T7147] netlink: 'syz.0.417': attribute type 1 has an invalid length. [ 104.857422][ T7147] netlink: 'syz.0.417': attribute type 2 has an invalid length. [ 104.892914][ T7081] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.921115][ T7081] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 105.033363][ T7081] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 105.044874][ T7081] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 105.129194][ T7166] netlink: 56 bytes leftover after parsing attributes in process `syz.0.422'. [ 105.191527][ T7170] netlink: 88 bytes leftover after parsing attributes in process `syz.1.424'. [ 105.322920][ T7175] netlink: 'syz.2.425': attribute type 21 has an invalid length. [ 105.360578][ T7175] netlink: 132 bytes leftover after parsing attributes in process `syz.2.425'. [ 105.380777][ T7179] netlink: 56 bytes leftover after parsing attributes in process `syz.0.427'. [ 105.618150][ T7192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.428'. [ 106.024048][ T7214] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 106.091050][ T7217] netlink: 'syz.0.435': attribute type 10 has an invalid length. [ 106.107089][ T7217] batman_adv: batadv0: Adding interface: netdevsim0 [ 106.114750][ T7217] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.154341][ T7217] batman_adv: batadv0: Interface activated: netdevsim0 [ 106.380149][ T7230] netlink: 56 bytes leftover after parsing attributes in process `syz.0.437'. [ 106.463594][ T7236] netlink: 56 bytes leftover after parsing attributes in process `syz.3.439'. [ 107.394712][ T30] audit: type=1804 audit(1762964442.639:2): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.453" name="/newroot/92/cgroup.controllers" dev="tmpfs" ino=489 res=1 errno=0 [ 107.497423][ T30] audit: type=1800 audit(1762964442.639:3): pid=7282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.453" name="cgroup.controllers" dev="tmpfs" ino=489 res=0 errno=0 [ 108.652107][ T7349] __nla_validate_parse: 9 callbacks suppressed [ 108.652124][ T7349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.473'. [ 108.927718][ T7361] netlink: 'syz.2.476': attribute type 4 has an invalid length. [ 109.056726][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 109.247327][ T7378] netlink: 48 bytes leftover after parsing attributes in process `syz.0.483'. [ 109.452341][ T7393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.487'. [ 109.566896][ T7395] netlink: 68 bytes leftover after parsing attributes in process `syz.0.488'. [ 109.588120][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 109.598892][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 109.788345][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.492'. [ 109.815849][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 109.885756][ T7417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.120443][ T7426] netlink: 48 bytes leftover after parsing attributes in process `syz.4.498'. [ 110.367274][ T7446] netlink: 'syz.3.504': attribute type 11 has an invalid length. [ 110.432764][ T7446] netlink: 'syz.3.504': attribute type 3 has an invalid length. [ 110.966464][ T7484] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 110.986328][ T7484] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 111.530364][ T7521] Cannot find del_set index 0 as target [ 111.622840][ T7515] xt_CT: No such helper "pptp" [ 111.919986][ T7548] netlink: 'syz.0.534': attribute type 11 has an invalid length. [ 112.522459][ T7584] team0: Device vti0 is of different type [ 112.813892][ T7606] netlink: 'syz.0.550': attribute type 17 has an invalid length. [ 112.830845][ T7606] gretap0: entered promiscuous mode [ 112.854676][ T7606] gretap0: left promiscuous mode [ 113.138740][ T7622] nbd: must specify at least one socket [ 113.329129][ T7642] Cannot find set identified by id 65534 to match [ 113.474338][ T7654] netlink: 'syz.0.567': attribute type 29 has an invalid length. [ 113.509114][ T7656] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 113.722346][ T7666] __nla_validate_parse: 18 callbacks suppressed [ 113.722362][ T7666] netlink: 68 bytes leftover after parsing attributes in process `syz.4.571'. [ 114.005138][ T7681] netlink: 48 bytes leftover after parsing attributes in process `syz.3.578'. [ 114.145603][ T7685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.165750][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.581'. [ 114.403007][ T7703] netlink: 'syz.2.587': attribute type 1 has an invalid length. [ 114.559357][ T7713] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 114.581389][ T7717] FAULT_INJECTION: forcing a failure. [ 114.581389][ T7717] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.584042][ T7713] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 114.604949][ T7713] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 114.626092][ T7717] CPU: 1 UID: 0 PID: 7717 Comm: syz.4.589 Not tainted syzkaller #0 PREEMPT(full) [ 114.626114][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.626124][ T7717] Call Trace: [ 114.626131][ T7717] [ 114.626138][ T7717] dump_stack_lvl+0x189/0x250 [ 114.626165][ T7717] ? __pfx____ratelimit+0x10/0x10 [ 114.626188][ T7717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.626208][ T7717] ? __pfx__printk+0x10/0x10 [ 114.626225][ T7717] ? __might_fault+0xb0/0x130 [ 114.626257][ T7717] should_fail_ex+0x414/0x560 [ 114.626285][ T7717] _copy_from_user+0x2d/0xb0 [ 114.626304][ T7717] ___sys_sendmsg+0x158/0x2a0 [ 114.626324][ T7717] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.626372][ T7717] ? __fget_files+0x2a/0x420 [ 114.626386][ T7717] ? __fget_files+0x3a0/0x420 [ 114.626410][ T7717] __x64_sys_sendmsg+0x19b/0x260 [ 114.626431][ T7717] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.626457][ T7717] ? __pfx_ksys_write+0x10/0x10 [ 114.626482][ T7717] ? do_syscall_64+0xbe/0xfa0 [ 114.626507][ T7717] do_syscall_64+0xfa/0xfa0 [ 114.626532][ T7717] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.626554][ T7717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.626570][ T7717] ? clear_bhb_loop+0x60/0xb0 [ 114.626601][ T7717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.626617][ T7717] RIP: 0033:0x7fda1098f6c9 [ 114.626632][ T7717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.626645][ T7717] RSP: 002b:00007fda117c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.626663][ T7717] RAX: ffffffffffffffda RBX: 00007fda10be5fa0 RCX: 00007fda1098f6c9 [ 114.626675][ T7717] RDX: 0000000004000000 RSI: 0000200000004340 RDI: 0000000000000003 [ 114.626684][ T7717] RBP: 00007fda117c2090 R08: 0000000000000000 R09: 0000000000000000 [ 114.626694][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.626703][ T7717] R13: 00007fda10be6038 R14: 00007fda10be5fa0 R15: 00007ffc88dcbce8 [ 114.626732][ T7717] [ 114.852525][ T7703] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 114.865083][ T7703] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 114.892535][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 115.006368][ T61] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.026847][ T61] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.042541][ T7729] netlink: 52 bytes leftover after parsing attributes in process `syz.4.592'. [ 115.052971][ T61] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.080954][ T61] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.204761][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 115.312650][ T7740] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.365463][ T7740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.372880][ T7740] IPv6: NLM_F_CREATE should be set when creating new route [ 115.653271][ T7761] FAULT_INJECTION: forcing a failure. [ 115.653271][ T7761] name failslab, interval 1, probability 0, space 0, times 0 [ 115.666848][ T7756] Driver unsupported XDP return value 0 on prog (id 124) dev N/A, expect packet loss! [ 115.697663][ T7756] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 115.705774][ T7761] CPU: 0 UID: 0 PID: 7761 Comm: syz.0.604 Not tainted syzkaller #0 PREEMPT(full) [ 115.705795][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.705804][ T7761] Call Trace: [ 115.705811][ T7761] [ 115.705818][ T7761] dump_stack_lvl+0x189/0x250 [ 115.705844][ T7761] ? __pfx____ratelimit+0x10/0x10 [ 115.705867][ T7761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.705887][ T7761] ? __pfx__printk+0x10/0x10 [ 115.705910][ T7761] ? __pfx___might_resched+0x10/0x10 [ 115.705928][ T7761] ? fs_reclaim_acquire+0x7d/0x100 [ 115.705956][ T7761] should_fail_ex+0x414/0x560 [ 115.705984][ T7761] should_failslab+0xa8/0x100 [ 115.706003][ T7761] kmem_cache_alloc_node_noprof+0x77/0x710 [ 115.706025][ T7761] ? __alloc_skb+0x112/0x2d0 [ 115.706047][ T7761] __alloc_skb+0x112/0x2d0 [ 115.706067][ T7761] netlink_sendmsg+0x5c6/0xb30 [ 115.706092][ T7761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.706112][ T7761] ? aa_sock_msg_perm+0xf1/0x1d0 [ 115.706137][ T7761] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.706153][ T7761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.706169][ T7761] __sock_sendmsg+0x21c/0x270 [ 115.706193][ T7761] ____sys_sendmsg+0x505/0x830 [ 115.706216][ T7761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.706244][ T7761] ? import_iovec+0x74/0xa0 [ 115.706268][ T7761] ___sys_sendmsg+0x21f/0x2a0 [ 115.706289][ T7761] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.706345][ T7761] ? __fget_files+0x2a/0x420 [ 115.706361][ T7761] ? __fget_files+0x3a0/0x420 [ 115.706387][ T7761] __x64_sys_sendmsg+0x19b/0x260 [ 115.706409][ T7761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.706437][ T7761] ? __pfx_ksys_write+0x10/0x10 [ 115.706464][ T7761] ? do_syscall_64+0xbe/0xfa0 [ 115.706490][ T7761] do_syscall_64+0xfa/0xfa0 [ 115.706511][ T7761] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.706533][ T7761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.706550][ T7761] ? clear_bhb_loop+0x60/0xb0 [ 115.706571][ T7761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.706587][ T7761] RIP: 0033:0x7f68bdf8f6c9 [ 115.706602][ T7761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.706616][ T7761] RSP: 002b:00007f68bee0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.706634][ T7761] RAX: ffffffffffffffda RBX: 00007f68be1e5fa0 RCX: 00007f68bdf8f6c9 [ 115.706647][ T7761] RDX: 0000000004000000 RSI: 0000200000004340 RDI: 0000000000000003 [ 115.706658][ T7761] RBP: 00007f68bee0c090 R08: 0000000000000000 R09: 0000000000000000 [ 115.706668][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.706678][ T7761] R13: 00007f68be1e6038 R14: 00007f68be1e5fa0 R15: 00007ffcb577cff8 [ 115.706710][ T7761] [ 115.707737][ T7765] netlink: 52 bytes leftover after parsing attributes in process `syz.2.608'. [ 115.926078][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.609'. [ 116.109161][ T7774] bond2: entered allmulticast mode [ 116.115577][ T7774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.371599][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.617'. [ 116.428917][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'. [ 116.607516][ T7804] x_tables: duplicate underflow at hook 1 [ 117.015735][ T7828] netlink: 'syz.1.628': attribute type 4 has an invalid length. [ 117.240694][ T7833] sctp: [Deprecated]: syz.1.629 (pid 7833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.240694][ T7833] Use struct sctp_sack_info instead [ 117.876667][ T7877] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 118.147033][ T7885] team_slave_0: entered promiscuous mode [ 118.152895][ T7885] team_slave_1: entered promiscuous mode [ 118.194840][ T7885] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 118.239834][ T7885] team0: Device macvtap1 is already an upper device of the team interface [ 118.300101][ T7885] team_slave_0: left promiscuous mode [ 118.305612][ T7885] team_slave_1: left promiscuous mode [ 118.463555][ T7906] vlan3: entered allmulticast mode [ 118.468922][ T7906] gretap0: entered allmulticast mode [ 118.521885][ T7888] 0: reclassify loop, rule prio 0, protocol 800 [ 118.569393][ T7914] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 118.605905][ T7913] netlink: 'syz.4.655': attribute type 29 has an invalid length. [ 118.866715][ T7925] netlink: 'syz.0.659': attribute type 4 has an invalid length. [ 118.918614][ T7930] netlink: 'syz.0.659': attribute type 4 has an invalid length. [ 118.927253][ T7928] raw_sendmsg: syz.1.660 forgot to set AF_INET. Fix it! [ 119.090900][ T7932] netlink: 'syz.2.661': attribute type 1 has an invalid length. [ 119.106784][ T7937] __nla_validate_parse: 12 callbacks suppressed [ 119.106798][ T7937] netlink: 68 bytes leftover after parsing attributes in process `syz.1.663'. [ 119.250681][ T7945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.666'. [ 119.347894][ T7949] netlink: 'syz.2.667': attribute type 1 has an invalid length. [ 119.380419][ T7949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.669258][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.674'. [ 119.812827][ T7978] netlink: 96 bytes leftover after parsing attributes in process `syz.3.676'. [ 119.938003][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 120.222294][ T7999] team0: Device ip6gre1 is of different type [ 120.275822][ T8005] netlink: 'syz.3.682': attribute type 7 has an invalid length. [ 120.390304][ T8008] netlink: 'syz.4.686': attribute type 12 has an invalid length. [ 120.417596][ T8008] netlink: 'syz.4.686': attribute type 29 has an invalid length. [ 120.446430][ T8008] netlink: 148 bytes leftover after parsing attributes in process `syz.4.686'. [ 120.603429][ T8019] netlink: 56 bytes leftover after parsing attributes in process `syz.3.691'. [ 120.724884][ T8028] trusted_key: syz.1.693 sent an empty control message without MSG_MORE. [ 120.810501][ T8040] xt_l2tp: v2 doesn't support IP mode [ 120.864978][ T8040] xt_l2tp: v2 doesn't support IP mode [ 121.068128][ T8053] dvmrp0: entered allmulticast mode [ 121.097335][ T8060] netlink: 140 bytes leftover after parsing attributes in process `syz.1.703'. [ 121.247058][ T8072] netlink: 'syz.4.706': attribute type 2 has an invalid length. [ 121.604485][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.712'. [ 121.657990][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 121.914322][ T8110] netlink: 'syz.1.717': attribute type 24 has an invalid length. [ 121.925721][ T8104] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 121.945188][ T8104] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 122.594497][ T8147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.860463][ T8164] wg1: entered promiscuous mode [ 122.875665][ T8164] wg1: entered allmulticast mode [ 124.130801][ T8231] netlink: 'syz.1.762': attribute type 21 has an invalid length. [ 124.138670][ T8231] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.142125][ T8234] __nla_validate_parse: 12 callbacks suppressed [ 124.142139][ T8234] netlink: 140 bytes leftover after parsing attributes in process `syz.3.764'. [ 124.473625][ T8249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.768'. [ 124.501598][ T8249] gre1: entered promiscuous mode [ 124.618961][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 124.743642][ T8266] netlink: 'syz.2.775': attribute type 4 has an invalid length. [ 124.765466][ T8266] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 124.779561][ T8266] netlink: 228 bytes leftover after parsing attributes in process `syz.2.775'. [ 124.897274][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 124.907273][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 124.937496][ T8275] xt_ecn: cannot match TCP bits for non-tcp packets [ 125.022742][ T8281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.780'. [ 125.071333][ T8281] : renamed from bridge_slave_0 (while UP) [ 125.285424][ T5890] IPVS: starting estimator thread 0... [ 125.315082][ T8304] batadv_slave_1: entered promiscuous mode [ 125.338829][ T8303] batadv_slave_1: left promiscuous mode [ 125.373804][ T8301] IPVS: using max 27 ests per chain, 64800 per kthread [ 125.811330][ T8331] netlink: 10 bytes leftover after parsing attributes in process `syz.0.794'. [ 125.932606][ T8334] validate_nla: 2 callbacks suppressed [ 125.932622][ T8334] netlink: 'syz.3.796': attribute type 7 has an invalid length. [ 125.958075][ T61] netdevsim netdevsim3 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.967514][ T61] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.977769][ T8334] netlink: 'syz.3.796': attribute type 7 has an invalid length. [ 126.006151][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 126.204525][ T61] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.224030][ T61] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.455947][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 126.786591][ T8380] tc_dump_action: action bad kind [ 270.323895][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 270.331414][ T31] Not tainted syzkaller #0 [ 270.338380][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.347107][ T31] task:kworker/0:0 state:D stack:24744 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 270.359138][ T31] Workqueue: events rfkill_sync_work [ 270.364492][ T31] Call Trace: [ 270.367773][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 270.370696][ T31] __schedule+0x1798/0x4cc0 [ 270.375294][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 270.381652][ T31] ? __pfx___schedule+0x10/0x10 [ 270.387281][ T31] ? schedule+0x91/0x360 [ 270.391834][ T31] schedule+0x165/0x360 [ 270.396144][ T31] schedule_preempt_disabled+0x13/0x30 [ 270.401850][ T31] __mutex_lock+0x7e6/0x1350 [ 270.407673][ T31] ? __mutex_lock+0x5bb/0x1350 [ 270.427923][ T31] ? rfkill_sync_work+0x2e/0x200 [ 270.432902][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 270.466625][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 270.472485][ T31] rfkill_sync_work+0x2e/0x200 [ 270.477913][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 270.484204][ T31] process_scheduled_works+0xae1/0x17b0 [ 270.489787][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.496040][ T31] worker_thread+0x8a0/0xda0 [ 270.500650][ T31] kthread+0x711/0x8a0 [ 270.505185][ T31] ? __pfx_worker_thread+0x10/0x10 [ 270.510314][ T31] ? __pfx_kthread+0x10/0x10 [ 270.515052][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.520262][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.525522][ T31] ? __pfx_kthread+0x10/0x10 [ 270.530120][ T31] ret_from_fork+0x4bc/0x870 [ 270.534777][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 270.539899][ T31] ? __switch_to_asm+0x39/0x70 [ 270.545027][ T31] ? __switch_to_asm+0x33/0x70 [ 270.549785][ T31] ? __pfx_kthread+0x10/0x10 [ 270.554946][ T31] ret_from_fork_asm+0x1a/0x30 [ 270.559721][ T31] [ 270.562850][ T31] INFO: task kworker/0:3:5883 blocked for more than 143 seconds. [ 270.572112][ T31] Not tainted syzkaller #0 [ 270.577411][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.586470][ T31] task:kworker/0:3 state:D stack:24200 pid:5883 tgid:5883 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 270.599059][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 270.606187][ T31] Call Trace: [ 270.609455][ T31] [ 270.612367][ T31] __schedule+0x1798/0x4cc0 [ 270.617493][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 270.622861][ T31] ? __pfx___schedule+0x10/0x10 [ 270.628151][ T31] ? schedule+0x91/0x360 [ 270.632387][ T31] schedule+0x165/0x360 [ 270.636997][ T31] schedule_preempt_disabled+0x13/0x30 [ 270.642461][ T31] __mutex_lock+0x7e6/0x1350 [ 270.647533][ T31] ? __mutex_lock+0x5bb/0x1350 [ 270.652296][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 270.659212][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 270.664643][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 270.670357][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 270.676645][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 270.682718][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 270.688911][ T31] process_scheduled_works+0xae1/0x17b0 [ 270.694846][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.700830][ T31] worker_thread+0x8a0/0xda0 [ 270.705890][ T31] kthread+0x711/0x8a0 [ 270.709959][ T31] ? __pfx_worker_thread+0x10/0x10 [ 270.715605][ T31] ? __pfx_kthread+0x10/0x10 [ 270.720204][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.725911][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.731103][ T31] ? __pfx_kthread+0x10/0x10 [ 270.736123][ T31] ret_from_fork+0x4bc/0x870 [ 270.740704][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 270.746240][ T31] ? __switch_to_asm+0x39/0x70 [ 270.750988][ T31] ? __switch_to_asm+0x33/0x70 [ 270.756162][ T31] ? __pfx_kthread+0x10/0x10 [ 270.760741][ T31] ret_from_fork_asm+0x1a/0x30 [ 270.765958][ T31] [ 270.768978][ T31] INFO: task kworker/0:4:5890 blocked for more than 143 seconds. [ 270.778702][ T31] Not tainted syzkaller #0 [ 270.783642][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 270.792826][ T31] task:kworker/0:4 state:D stack:21000 pid:5890 tgid:5890 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 270.805523][ T31] Workqueue: events rfkill_sync_work [ 270.810820][ T31] Call Trace: [ 270.814247][ T31] [ 270.817187][ T31] __schedule+0x1798/0x4cc0 [ 270.821682][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 270.827117][ T31] ? __pfx___schedule+0x10/0x10 [ 270.831985][ T31] ? schedule+0x91/0x360 [ 270.836464][ T31] schedule+0x165/0x360 [ 270.840633][ T31] schedule_preempt_disabled+0x13/0x30 [ 270.846574][ T31] __mutex_lock+0x7e6/0x1350 [ 270.851158][ T31] ? __mutex_lock+0x5bb/0x1350 [ 270.856373][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 270.861735][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 270.867189][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.872376][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 270.878702][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 270.888307][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 270.894411][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 270.899515][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 270.905791][ T31] rfkill_set_block+0x1d2/0x440 [ 270.910656][ T31] rfkill_sync_work+0x114/0x200 [ 270.915878][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 270.921587][ T31] process_scheduled_works+0xae1/0x17b0 [ 270.927599][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.933585][ T31] worker_thread+0x8a0/0xda0 [ 270.938655][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 270.945483][ T31] ? __kthread_parkme+0x7b/0x200 [ 270.950420][ T31] kthread+0x711/0x8a0 [ 270.954928][ T31] ? __pfx_worker_thread+0x10/0x10 [ 270.960030][ T31] ? __pfx_kthread+0x10/0x10 [ 270.965718][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.970935][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.976674][ T31] ? __pfx_kthread+0x10/0x10 [ 270.981277][ T31] ret_from_fork+0x4bc/0x870 [ 270.986282][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 270.991392][ T31] ? __switch_to_asm+0x39/0x70 [ 270.996622][ T31] ? __switch_to_asm+0x33/0x70 [ 271.001372][ T31] ? __pfx_kthread+0x10/0x10 [ 271.006553][ T31] ret_from_fork_asm+0x1a/0x30 [ 271.011323][ T31] [ 271.014934][ T31] INFO: task syz.0.802:8364 blocked for more than 144 seconds. [ 271.022475][ T31] Not tainted syzkaller #0 [ 271.032200][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.041258][ T31] task:syz.0.802 state:D stack:22888 pid:8364 tgid:8363 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 271.054503][ T31] Call Trace: [ 271.057789][ T31] [ 271.060712][ T31] __schedule+0x1798/0x4cc0 [ 271.065658][ T31] ? __lock_acquire+0xab9/0xd20 [ 271.070501][ T31] ? __lock_acquire+0xab9/0xd20 [ 271.075789][ T31] ? __pfx___schedule+0x10/0x10 [ 271.080640][ T31] ? schedule+0x91/0x360 [ 271.085327][ T31] schedule+0x165/0x360 [ 271.089475][ T31] schedule_preempt_disabled+0x13/0x30 [ 271.095456][ T31] __mutex_lock+0x7e6/0x1350 [ 271.100056][ T31] ? rcu_is_watching+0x15/0xb0 [ 271.105199][ T31] ? __mutex_lock+0x5bb/0x1350 [ 271.109960][ T31] ? rfkill_register+0x37/0x8e0 [ 271.114936][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 271.119966][ T31] ? netdev_run_todo+0xe1d/0xea0 [ 271.125177][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.130365][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 271.135707][ T31] ? __pfx_mod_delayed_work_on+0x10/0x10 [ 271.141347][ T31] rfkill_register+0x37/0x8e0 [ 271.146415][ T31] wiphy_register+0x2231/0x2aa0 [ 271.151265][ T31] ? __pfx_wiphy_register+0x10/0x10 [ 271.156885][ T31] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 271.161989][ T31] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 271.168616][ T31] ieee80211_register_hw+0x3473/0x40d0 [ 271.174594][ T31] ? ieee80211_register_hw+0x13e1/0x40d0 [ 271.180218][ T31] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 271.186448][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 271.192334][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 271.198662][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 271.205411][ T31] ? __hrtimer_setup+0x187/0x210 [ 271.210337][ T31] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 271.216678][ T31] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 271.222427][ T31] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 271.228869][ T31] ? __nla_validate_parse+0x2400/0x2d40 [ 271.234774][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 271.239875][ T31] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 271.245403][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 271.251114][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 271.257088][ T31] ? rcu_is_watching+0x15/0xb0 [ 271.261837][ T31] ? __nla_parse+0x40/0x60 [ 271.266751][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 271.273099][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 271.279100][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 271.285629][ T31] ? bpf_lsm_capable+0x9/0x20 [ 271.290293][ T31] ? security_capable+0x7e/0x2e0 [ 271.295662][ T31] genl_rcv_msg+0x60e/0x790 [ 271.300167][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.305612][ T31] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 271.311151][ T31] ? __asan_memcpy+0x40/0x70 [ 271.316165][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 271.321527][ T31] netlink_rcv_skb+0x208/0x470 [ 271.326707][ T31] ? __lock_acquire+0xab9/0xd20 [ 271.331552][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.337129][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.342426][ T31] ? down_read+0x1ad/0x2e0 [ 271.347244][ T31] genl_rcv+0x28/0x40 [ 271.351213][ T31] netlink_unicast+0x82f/0x9e0 [ 271.356399][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 271.361672][ T31] ? netlink_sendmsg+0x642/0xb30 [ 271.367007][ T31] ? skb_put+0x11b/0x210 [ 271.371252][ T31] netlink_sendmsg+0x805/0xb30 [ 271.376431][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.381700][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 271.387145][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.392417][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.398109][ T31] __sock_sendmsg+0x21c/0x270 [ 271.402782][ T31] ____sys_sendmsg+0x505/0x830 [ 271.407796][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.413086][ T31] ? import_iovec+0x74/0xa0 [ 271.417619][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 271.422292][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.427566][ T31] ? __fget_files+0x2a/0x420 [ 271.432151][ T31] ? __fget_files+0x3a0/0x420 [ 271.437186][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 271.442112][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.447800][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.453274][ T31] ? do_syscall_64+0xbe/0xfa0 [ 271.458571][ T31] do_syscall_64+0xfa/0xfa0 [ 271.463152][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.468881][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.475510][ T31] ? clear_bhb_loop+0x60/0xb0 [ 271.480201][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.486486][ T31] RIP: 0033:0x7f68bdf8f6c9 [ 271.490897][ T31] RSP: 002b:00007f68bee0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.499864][ T31] RAX: ffffffffffffffda RBX: 00007f68be1e5fa0 RCX: 00007f68bdf8f6c9 [ 271.508234][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000009 [ 271.516609][ T31] RBP: 00007f68be011f91 R08: 0000000000000000 R09: 0000000000000000 [ 271.525228][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.533199][ T31] R13: 00007f68be1e6038 R14: 00007f68be1e5fa0 R15: 00007ffcb577cff8 [ 271.541575][ T31] [ 271.544977][ T31] INFO: task syz.3.807:8373 blocked for more than 144 seconds. [ 271.552512][ T31] Not tainted syzkaller #0 [ 271.557981][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.567029][ T31] task:syz.3.807 state:D stack:25960 pid:8373 tgid:8373 ppid:5836 task_flags:0x400040 flags:0x00080002 [ 271.579310][ T31] Call Trace: [ 271.582572][ T31] [ 271.585930][ T31] __schedule+0x1798/0x4cc0 [ 271.590455][ T31] ? validate_chain+0x897/0x2140 [ 271.595929][ T31] ? __lock_acquire+0xab9/0xd20 [ 271.600786][ T31] ? __pfx___schedule+0x10/0x10 [ 271.609711][ T31] ? schedule+0x91/0x360 [ 271.615979][ T31] schedule+0x165/0x360 [ 271.620155][ T31] schedule_timeout+0x9a/0x270 [ 271.625012][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 271.630393][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.635622][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.640909][ T31] ? wait_for_completion+0x267/0x5d0 [ 271.646252][ T31] wait_for_completion+0x2bf/0x5d0 [ 271.651371][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 271.657093][ T31] ? __flush_work+0xd2/0xbc0 [ 271.661694][ T31] ? __flush_work+0xd2/0xbc0 [ 271.666512][ T31] __flush_work+0x9b9/0xbc0 [ 271.671026][ T31] ? __flush_work+0xd2/0xbc0 [ 271.675958][ T31] ? __pfx___flush_work+0x10/0x10 [ 271.680986][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 271.686652][ T31] ? __pfx___cancel_work+0x10/0x10 [ 271.691779][ T31] ? nfc_genl_device_removed+0x23c/0x330 [ 271.697539][ T31] __cancel_work_sync+0xbe/0x110 [ 271.702488][ T31] rfkill_unregister+0x92/0x220 [ 271.707428][ T31] nfc_unregister_device+0x96/0x2a0 [ 271.712632][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 271.718539][ T31] virtual_ncidev_close+0x56/0x90 [ 271.723569][ T31] __fput+0x44c/0xa70 [ 271.728142][ T31] task_work_run+0x1d4/0x260 [ 271.732786][ T31] ? __pfx_task_work_run+0x10/0x10 [ 271.738383][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 271.744227][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 271.749500][ T31] do_syscall_64+0x2bd/0xfa0 [ 271.754558][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.759749][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.766503][ T31] ? clear_bhb_loop+0x60/0xb0 [ 271.771178][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.777508][ T31] RIP: 0033:0x7fd57e38f6c9 [ 271.781939][ T31] RSP: 002b:00007ffcd24cdce8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 271.791232][ T31] RAX: 0000000000000000 RBX: 00007fd57e5e7da0 RCX: 00007fd57e38f6c9 [ 271.799595][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 271.807968][ T31] RBP: 00007fd57e5e7da0 R08: 0000000000000000 R09: 00000007d24cdfdf [ 271.816348][ T31] R10: 000000000003fd94 R11: 0000000000000246 R12: 000000000001f25d [ 271.824857][ T31] R13: 00007fd57e5e6180 R14: ffffffffffffffff R15: 00007ffcd24cde00 [ 271.832844][ T31] [ 271.836459][ T31] INFO: task syz.1.808:8381 blocked for more than 144 seconds. [ 271.844735][ T31] Not tainted syzkaller #0 [ 271.849673][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 271.858918][ T31] task:syz.1.808 state:D stack:27112 pid:8381 tgid:8374 ppid:5826 task_flags:0x400040 flags:0x00080002 [ 271.871268][ T31] Call Trace: [ 271.874917][ T31] [ 271.877842][ T31] __schedule+0x1798/0x4cc0 [ 271.882335][ T31] ? __lock_acquire+0xab9/0xd20 [ 271.887684][ T31] ? __lock_acquire+0xab9/0xd20 [ 271.892540][ T31] ? __pfx___schedule+0x10/0x10 [ 271.897852][ T31] ? schedule+0x91/0x360 [ 271.902092][ T31] schedule+0x165/0x360 [ 271.906679][ T31] schedule_preempt_disabled+0x13/0x30 [ 271.912301][ T31] __mutex_lock+0x7e6/0x1350 [ 271.917339][ T31] ? __mutex_lock+0x5bb/0x1350 [ 271.922096][ T31] ? genl_rcv_msg+0x10d/0x790 [ 271.930080][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 271.935568][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 271.940678][ T31] ? radix_tree_lookup+0x240/0x290 [ 271.946460][ T31] genl_rcv_msg+0x10d/0x790 [ 271.950975][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.956398][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 271.961414][ T31] ? __asan_memcpy+0x40/0x70 [ 271.966440][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 271.971803][ T31] netlink_rcv_skb+0x208/0x470 [ 271.977105][ T31] ? __lock_acquire+0xab9/0xd20 [ 271.981965][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.987140][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.992444][ T31] ? down_read+0x1ad/0x2e0 [ 271.997017][ T31] genl_rcv+0x28/0x40 [ 272.001009][ T31] netlink_unicast+0x82f/0x9e0 [ 272.005940][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 272.011520][ T31] ? netlink_sendmsg+0x642/0xb30 [ 272.017821][ T31] ? skb_put+0x11b/0x210 [ 272.022074][ T31] netlink_sendmsg+0x805/0xb30 [ 272.026887][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.032171][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 272.037239][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.042523][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.047949][ T31] __sock_sendmsg+0x21c/0x270 [ 272.052633][ T31] __sys_sendto+0x3bd/0x520 [ 272.057254][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 272.062277][ T31] ? count_memcg_event_mm+0x21/0x260 [ 272.067716][ T31] ? exc_page_fault+0x82/0x100 [ 272.072489][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 272.077903][ T31] __x64_sys_sendto+0xde/0x100 [ 272.082668][ T31] do_syscall_64+0xfa/0xfa0 [ 272.087462][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.092848][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.099033][ T31] ? clear_bhb_loop+0x60/0xb0 [ 272.103843][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.109740][ T31] RIP: 0033:0x7f65e1d9155c [ 272.114246][ T31] RSP: 002b:00007f65e2bb1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 272.122665][ T31] RAX: ffffffffffffffda RBX: 00007f65e2bb1fc0 RCX: 00007f65e1d9155c [ 272.130719][ T31] RDX: 0000000000000020 RSI: 00007f65e2bb2010 RDI: 0000000000000003 [ 272.138794][ T31] RBP: 0000000000000000 R08: 00007f65e2bb1f14 R09: 000000000000000c [ 272.147171][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 272.155666][ T31] R13: 00007f65e2bb1f68 R14: 00007f65e2bb2010 R15: 0000000000000000 [ 272.163652][ T31] [ 272.167495][ T31] INFO: task syz.4.806:8380 blocked for more than 145 seconds. [ 272.175697][ T31] Not tainted syzkaller #0 [ 272.180721][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.190864][ T31] task:syz.4.806 state:D stack:25640 pid:8380 tgid:8375 ppid:5839 task_flags:0x400040 flags:0x00080002 [ 272.203050][ T31] Call Trace: [ 272.206728][ T31] [ 272.209654][ T31] __schedule+0x1798/0x4cc0 [ 272.214714][ T31] ? __lock_acquire+0xab9/0xd20 [ 272.219576][ T31] ? __lock_acquire+0xab9/0xd20 [ 272.224910][ T31] ? __pfx___schedule+0x10/0x10 [ 272.229795][ T31] ? schedule+0x91/0x360 [ 272.234698][ T31] schedule+0x165/0x360 [ 272.238866][ T31] schedule_preempt_disabled+0x13/0x30 [ 272.245873][ T31] __mutex_lock+0x7e6/0x1350 [ 272.250785][ T31] ? __mutex_lock+0x5bb/0x1350 [ 272.255959][ T31] ? genl_rcv_msg+0x10d/0x790 [ 272.260630][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 272.266297][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 272.271408][ T31] ? radix_tree_lookup+0x240/0x290 [ 272.276821][ T31] genl_rcv_msg+0x10d/0x790 [ 272.281339][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.286458][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 272.291486][ T31] ? __asan_memcpy+0x40/0x70 [ 272.296120][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 272.301497][ T31] netlink_rcv_skb+0x208/0x470 [ 272.306746][ T31] ? __lock_acquire+0xab9/0xd20 [ 272.311621][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.317138][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.322439][ T31] ? down_read+0x1ad/0x2e0 [ 272.327314][ T31] genl_rcv+0x28/0x40 [ 272.331285][ T31] netlink_unicast+0x82f/0x9e0 [ 272.336529][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 272.341807][ T31] ? netlink_sendmsg+0x642/0xb30 [ 272.347198][ T31] ? skb_put+0x11b/0x210 [ 272.351432][ T31] netlink_sendmsg+0x805/0xb30 [ 272.356743][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.362044][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 272.367444][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.372716][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.378439][ T31] __sock_sendmsg+0x21c/0x270 [ 272.383113][ T31] __sys_sendto+0x3bd/0x520 [ 272.388160][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 272.393173][ T31] ? count_memcg_event_mm+0x21/0x260 [ 272.398925][ T31] ? exc_page_fault+0x82/0x100 [ 272.404217][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 272.409509][ T31] __x64_sys_sendto+0xde/0x100 [ 272.414648][ T31] do_syscall_64+0xfa/0xfa0 [ 272.419143][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.424855][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.430909][ T31] ? clear_bhb_loop+0x60/0xb0 [ 272.436043][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.441920][ T31] RIP: 0033:0x7fda1099155c [ 272.446746][ T31] RSP: 002b:00007fda117c0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 272.455542][ T31] RAX: ffffffffffffffda RBX: 00007fda117c0fc0 RCX: 00007fda1099155c [ 272.463500][ T31] RDX: 0000000000000020 RSI: 00007fda117c1010 RDI: 0000000000000007 [ 272.472012][ T31] RBP: 0000000000000000 R08: 00007fda117c0f14 R09: 000000000000000c [ 272.480414][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 272.488919][ T31] R13: 00007fda117c0f68 R14: 00007fda117c1010 R15: 0000000000000000 [ 272.497388][ T31] [ 272.500405][ T31] INFO: task syz.4.806:8388 blocked for more than 145 seconds. [ 272.508450][ T31] Not tainted syzkaller #0 [ 272.513468][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 272.522521][ T31] task:syz.4.806 state:D stack:28360 pid:8388 tgid:8375 ppid:5839 task_flags:0x400040 flags:0x00080002 [ 272.534824][ T31] Call Trace: [ 272.538089][ T31] [ 272.540999][ T31] __schedule+0x1798/0x4cc0 [ 272.546008][ T31] ? __lock_acquire+0xab9/0xd20 [ 272.550850][ T31] ? __lock_acquire+0xab9/0xd20 [ 272.556229][ T31] ? __pfx___schedule+0x10/0x10 [ 272.561077][ T31] ? schedule+0x91/0x360 [ 272.566618][ T31] schedule+0x165/0x360 [ 272.570768][ T31] schedule_preempt_disabled+0x13/0x30 [ 272.576429][ T31] __mutex_lock+0x7e6/0x1350 [ 272.581027][ T31] ? __mutex_lock+0x5bb/0x1350 [ 272.585841][ T31] ? genl_rcv_msg+0x10d/0x790 [ 272.590518][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 272.595588][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 272.600703][ T31] ? radix_tree_lookup+0x240/0x290 [ 272.606520][ T31] genl_rcv_msg+0x10d/0x790 [ 272.611019][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.616478][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 272.621491][ T31] ? __asan_memcpy+0x40/0x70 [ 272.626526][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 272.631886][ T31] netlink_rcv_skb+0x208/0x470 [ 272.637127][ T31] ? __lock_acquire+0xab9/0xd20 [ 272.641987][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 272.647387][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.652666][ T31] ? down_read+0x1ad/0x2e0 [ 272.657534][ T31] genl_rcv+0x28/0x40 [ 272.661514][ T31] netlink_unicast+0x82f/0x9e0 [ 272.666709][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 272.671986][ T31] ? netlink_sendmsg+0x642/0xb30 [ 272.677364][ T31] ? skb_put+0x11b/0x210 [ 272.681610][ T31] netlink_sendmsg+0x805/0xb30 [ 272.686806][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.692079][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 272.697446][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.702728][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.708469][ T31] __sock_sendmsg+0x21c/0x270 [ 272.713140][ T31] __sys_sendto+0x3bd/0x520 [ 272.718240][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 272.723249][ T31] ? count_memcg_event_mm+0x21/0x260 [ 272.730157][ T31] ? exc_page_fault+0x82/0x100 [ 272.735482][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 272.740779][ T31] __x64_sys_sendto+0xde/0x100 [ 272.745998][ T31] do_syscall_64+0xfa/0xfa0 [ 272.750490][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.756313][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.762366][ T31] ? clear_bhb_loop+0x60/0xb0 [ 272.767497][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.773378][ T31] RIP: 0033:0x7fda1099155c [ 272.778241][ T31] RSP: 002b:00007fda1179fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 272.787043][ T31] RAX: ffffffffffffffda RBX: 00007fda1179ffc0 RCX: 00007fda1099155c [ 272.795395][ T31] RDX: 0000000000000020 RSI: 00007fda117a0010 RDI: 0000000000000006 [ 272.803350][ T31] RBP: 0000000000000000 R08: 00007fda1179ff14 R09: 000000000000000c [ 272.811949][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 272.820226][ T31] R13: 00007fda1179ff68 R14: 00007fda117a0010 R15: 0000000000000000 [ 272.828686][ T31] [ 272.831725][ T31] [ 272.831725][ T31] Showing all locks held in the system: [ 272.840222][ T31] 3 locks held by kworker/0:0/9: [ 272.845453][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 272.856722][ T31] #1: ffffc900000e7ba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 272.869350][ T31] #2: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 272.879449][ T31] 1 lock held by khungtaskd/31: [ 272.884648][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 272.895010][ T31] 2 locks held by getty/5588: [ 272.899684][ T31] #0: ffff88803066b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 272.909867][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 272.920367][ T31] 3 locks held by kworker/0:3/5883: [ 272.925942][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 272.937326][ T31] #1: ffffc900044cfba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 272.951336][ T31] #2: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 272.963169][ T31] 4 locks held by kworker/0:4/5890: [ 272.969856][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 272.981086][ T31] #1: ffffc9000454fba0 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 272.993700][ T31] #2: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x2e/0x200 [ 273.003815][ T31] #3: ffff88805730f100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 273.013505][ T31] 1 lock held by kworker/u8:12/7039: [ 273.018924][ T31] 3 locks held by syz.0.802/8364: [ 273.023997][ T31] #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 273.032200][ T31] #1: ffffffff8f3313a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 273.041189][ T31] #2: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.051336][ T31] 1 lock held by syz.3.807/8373: [ 273.056378][ T31] #0: ffff88805730f100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 273.066397][ T31] 2 locks held by syz.1.808/8381: [ 273.071416][ T31] #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 273.079671][ T31] #1: ffffffff8f3313a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 273.088678][ T31] 2 locks held by syz.4.806/8380: [ 273.093861][ T31] #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 273.102148][ T31] #1: ffffffff8f3313a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 273.111152][ T31] 2 locks held by syz.4.806/8388: [ 273.116213][ T31] #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 273.124487][ T31] #1: ffffffff8f3313a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 273.133482][ T31] 2 locks held by syz.2.811/8397: [ 273.138590][ T31] #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 273.146838][ T31] #1: ffffffff8f3313a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 273.155839][ T31] 2 locks held by syz-executor/8403: [ 273.161113][ T31] #0: ffff88807ca2b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.171168][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.181148][ T31] 2 locks held by syz-executor/8405: [ 273.186475][ T31] #0: ffff888029ad8918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.196522][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.206576][ T31] 2 locks held by syz-executor/8406: [ 273.211871][ T31] #0: ffff888029adf918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.222018][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.231988][ T31] 2 locks held by syz-executor/8407: [ 273.237283][ T31] #0: ffff888054091118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.247346][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.257294][ T31] 2 locks held by syz-executor/8409: [ 273.262570][ T31] #0: ffff8880281c3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.272644][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.282637][ T31] 2 locks held by syz-executor/8418: [ 273.288022][ T31] #0: ffff8880248bb918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.298218][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.308182][ T31] 2 locks held by syz-executor/8419: [ 273.313442][ T31] #0: ffff888054845118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.323471][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.333438][ T31] 2 locks held by syz-executor/8422: [ 273.338739][ T31] #0: ffff88807d416118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.348804][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.358751][ T31] 2 locks held by syz-executor/8423: [ 273.364067][ T31] #0: ffff88807d412918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.374146][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.384130][ T31] 2 locks held by syz-executor/8425: [ 273.389412][ T31] #0: ffff888057035118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.399516][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.409484][ T31] 2 locks held by syz-executor/8435: [ 273.414785][ T31] #0: ffff88807a777118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.424852][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.434795][ T31] 2 locks held by syz-executor/8437: [ 273.440072][ T31] #0: ffff88807a775118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.450333][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.460295][ T31] 2 locks held by syz-executor/8438: [ 273.465603][ T31] #0: ffff88807a770918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.475642][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.485599][ T31] 2 locks held by syz-executor/8439: [ 273.490872][ T31] #0: ffff8880285d1918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.500907][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.510924][ T31] 2 locks held by syz-executor/8440: [ 273.516272][ T31] #0: ffff8880269ed918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650 [ 273.526400][ T31] #1: ffffffff8f5ab5a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 273.536389][ T31] [ 273.538706][ T31] ============================================= [ 273.538706][ T31] [ 273.547145][ T31] NMI backtrace for cpu 0 [ 273.547162][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 273.547180][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.547189][ T31] Call Trace: [ 273.547196][ T31] [ 273.547203][ T31] dump_stack_lvl+0x189/0x250 [ 273.547229][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.547249][ T31] ? __pfx__printk+0x10/0x10 [ 273.547277][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 273.547297][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 273.547317][ T31] ? __pfx__printk+0x10/0x10 [ 273.547338][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 273.547366][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 273.547388][ T31] watchdog+0xf60/0xfa0 [ 273.547409][ T31] ? watchdog+0x1e2/0xfa0 [ 273.547430][ T31] kthread+0x711/0x8a0 [ 273.547455][ T31] ? __pfx_watchdog+0x10/0x10 [ 273.547471][ T31] ? __pfx_kthread+0x10/0x10 [ 273.547495][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 273.547517][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.547538][ T31] ? __pfx_kthread+0x10/0x10 [ 273.547560][ T31] ret_from_fork+0x4bc/0x870 [ 273.547580][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 273.547605][ T31] ? __switch_to_asm+0x39/0x70 [ 273.547618][ T31] ? __switch_to_asm+0x33/0x70 [ 273.547631][ T31] ? __pfx_kthread+0x10/0x10 [ 273.547652][ T31] ret_from_fork_asm+0x1a/0x30 [ 273.547682][ T31] [ 273.547688][ T31] Sending NMI from CPU 0 to CPUs 1: [ 273.692617][ C1] NMI backtrace for cpu 1 [ 273.692633][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 273.692650][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.692660][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 273.692684][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 273.692698][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 273.692712][ C1] RAX: 98bd780c98414e00 RBX: ffffffff81967bf7 RCX: 98bd780c98414e00 [ 273.692724][ C1] RDX: 0000000000000001 RSI: ffffffff8d70dd33 RDI: ffffffff8bbf0760 [ 273.692735][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 273.692747][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce470 [ 273.692758][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003956b58 [ 273.692769][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 273.692781][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 273.692792][ C1] CR2: 00007f17c4317d60 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 273.692806][ C1] Call Trace: [ 273.692814][ C1] [ 273.692819][ C1] default_idle+0x13/0x20 [ 273.692834][ C1] default_idle_call+0x73/0xb0 [ 273.692850][ C1] do_idle+0x1e7/0x510 [ 273.692874][ C1] ? __pfx_do_idle+0x10/0x10 [ 273.692890][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 273.692912][ C1] ? complete+0xb1/0x1b0 [ 273.692930][ C1] cpu_startup_entry+0x44/0x60 [ 273.692946][ C1] start_secondary+0x101/0x110 [ 273.692966][ C1] common_startup_64+0x13e/0x147 [ 273.692993][ C1]