last executing test programs: 19.587334588s ago: executing program 0 (id=2610): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 19.499080929s ago: executing program 0 (id=2611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000400)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) (async) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @local]}]}}}}}}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002080)={'vxcan0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000005c80)=[{{&(0x7f0000000340)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000640)="d0ebca0d929d0a090917b2eb278c46daa2086fe32bd762121f33a858f96482543dbb321156a403fe48b43107be45b818ea1208f4617f673c3ef46ae474cbf9f467b5013892d2fd2d63ce3b959cc0467f6f41c61daadaba710fa89d3782a7d2af09fc79b2a9cbc9d3333efcb1e83627ca8d5f165cd6bd74691ab5beb5b7e3cbd054802f88e0d4eeec0a8ac0ec1b182863293456402debff4c22e800b16491f881b0c7e4e89732fe5465e45541f5b021aad480ecd101f231e5232e04709c20cbde539398dc103637403a1b3b81a566631cc84b4ec72ad0d1e6a0f1b79555894ddd5380faf366a2474f9f5302b0bd019c", 0xef}, {&(0x7f0000000740)="a0df37ca054ee75ae295689158c813b5f9c9f279", 0x14}, {&(0x7f0000000780)="f2062fad2800d7a56948f7f9b12b84236ee0040319658c8cf59cb4189fe719206ebb0e70378519331fd1affd98b52870a49f66bac39792e86cb42eb850e08628107b5615ac4a8e71f5a658537cb423360bf65f49945832c761df8fcc606fc687c3324cdd70ddd638a91182083ca9009a5cbd64fde740b1d961479fd898ca6b142cb15084d7", 0x85}, {&(0x7f0000000840)="a7fea05b96c0e1f6586360d67ea05ab58f769f9f35814ce730aa1a2e58c75eb4b359f67d1de26140c24e8d2ee34f29d5ff628304122dfe0bc52738d919ef1a229151bfb00a52872f585f72f262c4bd9a8a46ecef247a0eaa4af10b94c5bc35dbba7ea0d171d611abdc110f2ef700dc6097fbb53703da22c8df1749ae246057dd6ee2a082858c81e5c6be7532e947622a6802d4166077fa979ac49a1c33dca42c8b80df66e5a4f6d0b5009048737b94286689539fe3828bbc72", 0xb9}, {&(0x7f0000000900)="4dc4f3dc15350220db6d6a58dbd6471dcd9b1a7a3c0339f65d86bd3ae9f71deb8f6efa3b36440b662f738ffa2f1c2bb15fc51b916bba67260b3bf1b4cb647ca9b6ff2bc4e255a91f40d5085f7e11251b7dcbe5b0bbe0917258c424af32ed00201cfe109c7bac217a5aa690f585672dc20108d05b2e6503c247f116a03c7337c455addd89eb5b3841797b48b3ca7bde1ba4ea449b511a32949ff65d11f0447b8a", 0xa0}], 0x5}}, {{&(0x7f0000000ac0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000b00)="d3cfc63bf5011e06bf50a2d45c4d68fda869e9fe50", 0x15}, {&(0x7f0000000b40)="697a03b4eb764bf2d7bac6c79d204863db950510ae792f2ca4e74617eb4f2f1a246a102f25277fe782ae35434ad266bd92e548aea9c946c01da43169e59e075d0df916d8a9d6de287b6745f25c5e0a84701ea54183c234fdeb21e2a92b1beefa37511bfaefd8ea5cab4e4893feb53e8c633679f93a631ab800dc33ab9653321f3f4149e89879100df900c7fd19dad527d2650b3dda5714330d267cfb2fa6913794784fc5717b0b7982ea212e5427d1449e9fd7", 0xb3}, {&(0x7f0000000c00)="b06d3f6b478b735da1711f0507873ed08b34d10be49075641affb699a0a4eb9af275c85580edb574501bfa2b757b7d688f6aaa593b58cca2c52aae65ebfb2056b62033b63106fd448e4de90f7977d3bed16d0fd667f5c4770429cd599525463c35fcfc2941f61ffc933ac6a053", 0x6d}, {&(0x7f0000000c80)="661f511ef6f162dd5bc4dfe09fece9a3c7515858c0e1205be194b592c1a945a47e7dc4f8c7fa49fce7b6816e50f3468b7760ad08e92bb91ad43c6db880d0aa85964a5d621b7a44f0b60a2e13f6488670b751424f441848ff468700decaa25fc3b6b99b8367f01e8ad0d36d043425fdce7b31e9666a1fd8ef22f3f56e80867add910a9194e3b6e426c37dc602738afbb58772a8f57a1b5e705382a463ba69ac35d5d7787a5cfc57d7d94b271e30cc6a9479aa74a614440e878a367c827e515fcc2b64ce8c79301fa3747137f93c11f62a890ac551ea30de34cf872cb63646298559786724ccd143717c53a397ec02632ff712e68b1f", 0xf5}, {&(0x7f0000000d80)="5620cdb79d3176606fca9bf28652e664781d568b8e459066693e0dc2baee9c5f32f850254d9cac8cb99a211f93b6e23e62a1e557671ef7aea126e6aef617c6", 0x3f}], 0x5, &(0x7f0000000e40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x84, 0x0, 0x7, {[@generic={0x82, 0x4, "4ada"}, @timestamp_prespec={0x44, 0x44, 0x30, 0x3, 0x9, [{@rand_addr=0x64010102, 0x5}, {@private=0xa010100, 0x100}, {@loopback, 0xb5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@empty, 0x2}, {@local, 0x29}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xf}, {@local, 0x1}]}, @generic={0x82, 0x8, "198c7007c845"}, @lsrr={0x83, 0xb, 0xa3, [@local, @dev={0xac, 0x14, 0x14, 0x1a}]}, @lsrr={0x83, 0x17, 0x2a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @broadcast, @multicast2]}]}}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000f00)="04f7b0b3daf299e3aeb03f2fe4e29b58aa1f2bd3ef63c81dca1b947fd93e0cb96d5c89cb68d637", 0x27}, {&(0x7f0000001f40)="3cc7377f7349cb070cae20d01397491b8790628ae05e3b216df262aced51522691fb708b4bb05ecf3addc81bb1fd4ea3ba8fcbc27caac6aa69789f8d7a775b69ef83df3c445026136324b0f904592995dde42438e9bb132a2cbf3757b092c058b3e9cd43726b2ef2d318ea2448cc25c8354977dd694d1c762369733ca3ff825a12e1521fe24b926b5a89dff938df48ee82ff88dc500ec42a84d31a365582040ad1781823fe9583c0bcb8838089591a9d457d205d631ec1960596c1ad8ada155b7b1d41d7a4ca1c0e3a363a7e91cd6f016ccf9a2ea10b5e11ba6315744c016f02", 0xe0}], 0x2, &(0x7f00000020c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x90}}, {{&(0x7f0000002180)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002200)=[{&(0x7f00000021c0)="e39d603269d4da023c1c6862f9e5eb8f3447f721c9e769296dfeae5053fcfd92d0df6ba3c98dee07c71417323c17", 0x2e}], 0x1, &(0x7f0000002240)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe8a}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @loopback}}}], 0x68}}, {{&(0x7f00000022c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000003480)=[{&(0x7f0000002300)="02f25513c1b5343c1b2cdc5a4fb7f60a62518e51e09a8a2a5336cc1593f68035f1904723f72b623d57de5745672c6c65ff29e7fba093e18cb946ba33dbd95e92d4ea3f7a2057e911b6aa050b7ed43ff195fd8309c174a07647343e89e8d37a", 0x5f}, {&(0x7f0000002380)="3b2dd73a69d35e66183b32fa920d23bc7bc152bd0661c04413115f2d0ecb66ab444f91672f553058ef4c4121b0bb44933e2a336b00da441f7ce4c0d1a933cd11bb8e453525e5e5bfc2c25c534ee6131dd903c93421cd9df8cd57b0e83c38f2a4fc90d1c28a9f1f89444d3b7587d36f465ed7eb1ac39aa18650e29ba894c6f87cc43076a13a656723cbf5b871ab7d981f87990d2ab29d6a0e59997ccc59917673d498d9d080436239b381be8d8751a452186976e6652d417456713734dc2ef31e64b97da0d2e2dae5f624c87dc3c4a85cbf3af60f15868523031f7bb1a449ce4c465e1e09061d30b9c91446", 0xeb}, {&(0x7f0000002480)="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", 0x1000}], 0x3, &(0x7f00000034c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xb8}}, {{&(0x7f0000003580)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000048c0)=[{&(0x7f00000035c0)="fcebe4c58a203c1a38b88e96263d3be8aab83656f867218f841368f84786e8989efc4a9e1bc9ee26897ddfacf30f8120013bc8b9b50640f6fead46b32a2190bc1324b9a675f5a838ff73da80a365967a1b4a268d11793c90fef490e748c9a479a4ddda1b81f64ec9feeaa47d213d7b3be62384ac1d27722a9ae0a1f61a6a96a4b25ad2a9844ca5bd58a17a9773324facc2036c875a1b907dce02ca5fb1bbdcf8caf64113899569aa9b51d197f3c29404e5a4b62f5ee7dd4f88658be60b4e9a3a26efcb2bf420e1481dcc312bb307dbbb69ca1ddc97362ff4dd37d6c2d29875f4e4eaac", 0xe3}, {&(0x7f00000036c0)="014ea0f8f81a13fad007f1fb88446071b30fa657c3bb829b3785274d5c59b3f55136f8a0d870f462114111daa216acfd5cd5f6732740c7a1788804a5bd1aa872fae1904e46063ddb441b36953a35fb20295b8820fc6bea1f9cefd370726029586cf414bf9111f5f8b37dfe0a707dc8c7ce0f1a1ab80897d10f6fb8dfb5626a5f2fb2ca7e6c2b1db4dcfc0e1f34aa8f2d2341ba0e7b1ec3c276fd7092fb3eb0fdfa8f815724b030849b6f4c6f5191a2f828c723e15e54d45ff43f2406a47ad775225b64e59302292f38467ef461ae290f40d2bf4e", 0xd4}, {&(0x7f00000037c0)="21973a110de1577c83ede637331139569c19fa55a5ce5260eef8ea2462cb1b4b5ecef661bf07dbda9a7295ddb23cfd2923ae86f214871b04a8e9cd74fbae91dc257839d7482830243be8d056abc8e9637241b95d31fe52351a61d8f73fc316c1e32ec60fab01ba830feff9", 0x6b}, {&(0x7f0000003840)="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", 0x1000}, {&(0x7f0000004840)="57df570c14051bcff65a84099dab9c483fb4f215bde7e15c44ac06e204ed479706e74f716c6a193f6789a942cf79aa9678c98cb579d93ab7225bc76ef55454874114a3de733ad16e6a1babe71f83217e32ab0c26", 0x54}], 0x5}}, {{&(0x7f0000004940)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000005b80)=[{&(0x7f0000004980)="f4301e52ce14a0c7e25d766fb47c11c4ff4d407c6dcd6bd0ba080a4bc38c32f77d80a8721d670a7919116fca3fac964141effba5bead87361532cd990e69cb16bd3cb50d08fd124338cb438d4ca74b89dff8a3af09369da42b50781109a339bc5dce263cd1c98fd0ed8e72794c68e4a2edea18963ba4954443a07eecda31c27d443363e48db622b03b236759ae98d3a4e57037fa96c2366e8ddd8ee7c37c36975e574713d3db3776cee8e9072d4551f850f5088d3483a4d311b6a9ab54c2a4df4980822626803beb9bf36e9dccd8be894f4f4cd1", 0xd4}, {&(0x7f0000004a80)="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", 0x1000}, {&(0x7f0000005a80)="6b74ba2d0b698a43b89d01a27b77d386650cbe59cf1a4da094ecf70f4af320a262027fe697e199b195e5923a292234ca34a55ce43406c62331123f2b0c66d89b8724bf34c2524e798cad093904705d2df4a6ca4b663da31e18862d8ed07aa6a668215df6c5ad64a6709611e243e2a3a7dbd01c27d0edeaec8d3fb13c26be09d50c3d9bb6fc335627f90554cf6f873c9f8f0715aa7a09150b500e47bb51473cb9a5cfc2417eab9ef0d3491dfc523482f817eab371859010b309aff4a5ce165b1bf38e87d61d82092024a8158ef9fe8bcddd8ab073070d5f66d9bed09bf86d0dc4e2", 0xe1}], 0x3, &(0x7f0000005bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @loopback}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0x67, 0x0, 0x8, [0x800, 0xc, 0x8, 0x2, 0x40, 0x6, 0x0, 0x0, 0x101, 0x3]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x90}}], 0x7, 0x20040000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000084090100000400000001000000010d3d000000e9628831526541495f08964d9b0ec11a7df43566330292119485af63eb5d6a38eded9f072b2be29733103bcc25a1f833687dcf4f433dbe27d4fa1c4fef1d4454ff6f32e7fe66fda5dd0a33c95c3dbd0c7d3aff3f8b63e61457cc101d79f8bc6719bccffe155b2ca6b893133a7b41cb6e023b1f6153c3988b1f66c6cf127755b9172fc23fa0ff8a42b2"], &(0x7f0000000f40)=""/4079, 0x32, 0xfef, 0x8}, 0x28) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xc00007d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$can_raw(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@can={{}, 0x3, 0x2, 0x0, 0x0, "b48aaea6ed350389"}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) close(r1) (async) close(r1) 19.174998425s ago: executing program 0 (id=2612): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x2}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f00000004c0)={0x88, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e23, @empty}}}, 0x108) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r4, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000200)=""/172, 0xac}], 0x1}, 0xf}], 0x1, 0x40000100, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r7, &(0x7f0000000300)="89", 0x1) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e20, 0x3, @private2, 0x7}}}, 0x90) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000100)="0000000000000002", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x91d]}, &(0x7f0000000480)=0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) 19.004987146s ago: executing program 2 (id=2613): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) unshare(0x8040480) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x1}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x20050800) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r5, 0x40001, {0x2, 0x0, 0x6}, 0x1}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x18000000000002a0, 0xe, 0xc00, &(0x7f00000001c0)="b9ff05000000000c5c26fc000000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000100)=""/3, &(0x7f00000001c0)=0x3) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r8}, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) 18.997811487s ago: executing program 4 (id=2614): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc094}, 0x48006) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) 18.728097917s ago: executing program 4 (id=2617): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0xfffffbff) poll(&(0x7f0000000540)=[{r0, 0x94c3}, {r0, 0x2b78}, {r0, 0x8}, {r0, 0x3d894f7ffe332f18}, {r0, 0x10}, {r0, 0x4001}, {r0, 0x4680}, {0xffffffffffffffff, 0x8}, {r0, 0x402}], 0x9, 0x400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="000000000000fdffb60800000d0000007b8af8ff00000000bfa200000000000007020000f8fff4ffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x101b, &(0x7f0000001640)=""/4123}, 0x94) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200)=0x7a, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25210000000000990000100000050000000400ec0044002c80080000000900000008000000400000000800000004000000080000000104000008000000a991ffff0800000000000000d351e93a2b107e0b0800000500ffffff"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000040000000a0000008000000040010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000dfff00"/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0xf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x260480ac}, 0x20004000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r11 = socket(0x1, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r11, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000000000000000001000000000000000000002ce7a4b2099614bd9a9b7d6a0e52fe2163d7d4bfb3b4da225d609db73138d6fc56272bdd8c55d53b5a1f6def502f7f5b9271485501945c52b70d50c59683582ab1c317e963ce5f41567e44f572b45fe1f2ce283c0a99d62e9434747b447e710a7d3a48eaf86ff1ce510ee16f138bc1e1be5ea30ea464e0d2b4ae1a2ec9f8a8031e83a9b845c39f1abfe4b52cbd5033072015597d1d27195ff975b2791a16a27f4d6f69ceccff1d473b8486ea86ca0c84d326f59d033faaead5d3597cd1f46ff415a787c812620aa9810dbec6e61e883b6c89c75714715131af2eeae760474bb3e18b3db28ce317204599"], 0x0, 0x4e, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 18.653338799s ago: executing program 2 (id=2618): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r3, &(0x7f00000002c0)="88", 0x1, 0x14, &(0x7f0000000400)={0xa, 0x4e23, 0x1000, @remote, 0x9}, 0x1c) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, 0xfffffffffffffffd, &(0x7f0000000b00)) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x2, {0x3, 0x1, 0x4}, 0x1}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x2, {0x1, 0x0, 0x6}}, 0x18) bind$can_j1939(r7, &(0x7f0000000400)={0x1d, r8, 0x5, {0x2, 0xf0, 0x4}, 0x1}, 0x18) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="488724861500090527bd7000fddbdf25022000cb", @ANYRES32=r2, @ANYBLOB="08000400000000000800090007000000080002000a010101080009000600000008000800000200000800090008010000"], 0x48}, 0x1, 0x0, 0x0, 0x4044814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000799ffd231aff70a2cb8b9f8293fe17849f85c3e9869ed8b8918e6379cb7a2580ebd38a2668ff5af2c397a1c92186c2929ff202c71ea25a72fb343cb295df1f9c03ed01e30fd5141688a48e69b5d20740a76b8f034b0d6e8848664fa661db", @ANYRES16=r10, @ANYBLOB="010022bd7000ffcbdfa52100000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8840) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095", @ANYRESOCT=r9, @ANYRESDEC=r9], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x16}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004804}, 0x20004000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r13, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.207788191s ago: executing program 0 (id=2621): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, 0x0, 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001900010001000000fedbdf250a100000000400070036000008001e000100000014000700fe8000000000000000000000000000bb"], 0x38}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e000300"}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000008000000911176000000000095"], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r5, 0x0, 0xcf, &(0x7f00000005c0), 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_PLIMIT, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}, @qdisc_kind_options=@q_htb={{}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x8}]}}]}, 0x48}}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r6, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}}, 0x0) (async, rerun: 64) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8840) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdbd67c12945"}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r9, 0xc038586a, &(0x7f0000000400)={r1, &(0x7f00000000c0)='!\x00', 0xe1101, &(0x7f0000000240)={@_ha_fsid={[0x8, 0x1]}, {0xffff, 0x1, 0xe, 0x9}}, 0x6, &(0x7f0000000280), &(0x7f0000000380)=0x4}) bind$bt_hci(r10, &(0x7f00000006c0)={0x1f, 0x1, 0x2}, 0x6) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 17.9757722s ago: executing program 2 (id=2624): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8006000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x4000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000240)={0x1ff, 0x722, 0xf, 0x4}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x134, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0xbc, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 17.975279725s ago: executing program 0 (id=2625): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x3, {0x0, 0x0, 0x0, 0x0, 0x12124, 0xad85}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xfffffffe}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@getstats={0x1c, 0x5e, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x7a31, 0x7ff}, @sack_perm, @sack_perm, @mss={0x2, 0x4}, @window={0x3, 0x800, 0x6}, @window={0x3, 0x1, 0x10}, @sack_perm], 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000800006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r9, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd64fde9e200000000fc01000000000000000000000000000000000000000000000100ffffac1414aa01c326b2c835b96a90e3dc81b7292e39cc64043b4004d5a84b1c8adadb8adc08466ace265c83ec653aab94dd1e18d5b462925b5ad7860447de7d3f98a867791145d37f317aa7d3162a74a1030f6b508d2aadf7224f8cba0d9a382272af7b163f680d078561ee3f0134"], 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) 17.913400268s ago: executing program 1 (id=2626): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102385, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000000050001000600000016000300686173683a6e65742c706e55ddd3b06a4b1b57f3fe75eb4c51446f72742c6e65740000000900020073697a31000000000c000780080012"], 0x5c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x74}, 0x1, 0x0, 0x0, 0x4008884}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="894476234618"}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) 17.901986942s ago: executing program 3 (id=2627): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="020a40000f0000002cbd7000fedbdf250800120003000400c06b6e00010000000600000001a50000030000000000000000000000000000000000000000000000ffffffff00000000000000000000000005001a0000000000000000000000000000000001fc0200000000000000000000000000002a0004f0a1"], 0x78}}, 0x24040000) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x2}, 0x8) close(r1) sendmsg$nl_route(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)=@mpls_getroute={0x23c, 0x1a, 0x400, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x14, 0x80, 0xa8, 0xfe, 0x1, 0x43b72113e705bf03, 0x1, 0x200}, [@RTA_DST={0x8, 0x1, {0xe}}, @RTA_NEWDST={0x84, 0x13, [{}, {0x0, 0x0, 0x1}, {0x40000, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x40}, {0x300}, {0xffff2}, {0x2, 0x0, 0x1}, {0x9cc, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xe}, {0x10, 0x0, 0x1}, {}, {0x9}, {0x7}, {0xb, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8}, {0x8}, {0x4}, {0x8000, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x9, 0x0, 0x1}, {0x3, 0x0, 0x1}, {}, {0x3}, {0x999}, {0x6, 0x0, 0x1}, {0x4d}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1ff}, {0x4}, {0x400, 0x0, 0x1}, {0x5}, {0x6, 0x0, 0x1}, {0x7}, {0x8001, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x32cf9, 0x0, 0x1}, {0x100}, {0x9}, {0x3, 0x0, 0x1}, {0x610, 0x0, 0x1}, {0x4000, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7}, {0xfbe, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x7dcd, 0x0, 0x1}, {0x5, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0x4}, {0xc}, {0x9}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1ff}, {0x6}, {0x4, 0x0, 0x1}, {0x4}, {0x3ff}, {0xf8000}, {0x92c, 0x0, 0x1}, {0x9, 0x0, 0x1}, {}, {0x4}, {0x2}, {0x4, 0x0, 0x1}, {0x101}, {0x7, 0x0, 0x1}, {0xe, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x85, 0x0, 0x1}, {0x5}, {0x200}, {0x3}, {0x3}, {0x7, 0x0, 0x1}, {0x596, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x8}, {0x7f}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}, @RTA_NEWDST={0x84, 0x13, [{0x932, 0x0, 0x1}, {0x2}, {0x9}, {0x1}, {0x3ff, 0x0, 0x1}, {0x7}, {0x5, 0x0, 0x1}, {0x7}, {}, {0x7, 0x0, 0x1}, {0x800}, {0x6, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x15}, {0xffbff, 0x0, 0x1}, {0x80e}, {0x3, 0x0, 0x1}, {}, {0xfffc0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x2}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x670f, 0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x8}, {0x10}, {0xd7, 0x0, 0x1}, {0x4}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20004080}, 0x80) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x5, &(0x7f0000000480)=[{0x101, 0x2, 0xf2, 0x4}, {0x1, 0x2, 0x8, 0x400}, {0x9, 0xd, 0x7, 0x1ff}, {0xab, 0x2, 0x6, 0x5}, {0x5, 0xd, 0x8f, 0x5}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000640)="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", 0x714}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/24, 0x18}], 0x1}, 0x2101) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) 17.683219126s ago: executing program 4 (id=2628): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) unshare(0x8040480) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x1}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x20050800) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r5, 0x40001, {0x2, 0x0, 0x6}, 0x1}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x18000000000002a0, 0xe, 0xc00, &(0x7f00000001c0)="b9ff05000000000c5c26fc000000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000100)=""/3, &(0x7f00000001c0)=0x3) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r8}, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) 17.658112346s ago: executing program 2 (id=2629): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4) (async) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000200)) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) write(r2, &(0x7f0000000240)="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", 0x1cb) (async) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)={'c', ' *:* ', 'rw\x00'}, 0x9) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f00000000c0)=0x100, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'virt_wifi0\x00', 0x2000}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="881a010018000000000000000c0000230c6b5970"], &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x28) (rerun: 32) 17.616694029s ago: executing program 1 (id=2630): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRESDEC=r2, @ANYRESDEC=r0], 0x3c}}, 0x2400c081) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x13c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x78f7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5cdfc17d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}}]}, 0x13c}}, 0x20000010) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096a68e15670b"], 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYRESDEC=r1, @ANYBLOB="0000000006380010180012800800010076746900c1cc74f2eb3776eae000000108000a00", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x440b0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRESDEC=r2, @ANYRESDEC=r0], 0x3c}}, 0x2400c081) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x13c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x78f7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5cdfc17d}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff}}]}, 0x13c}}, 0x20000010) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096a68e15670b"], 0x20}}, 0x40000c0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYRESDEC=r1, @ANYBLOB="0000000006380010180012800800010076746900c1cc74f2eb3776eae000000108000a00", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x440b0) (async) 17.459850958s ago: executing program 1 (id=2631): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@perf_event={0x7ff}}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@ifindex, r1, 0x25, 0x2014, r2, @value=r3}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) connect$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 17.432172951s ago: executing program 4 (id=2632): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0xac}}, 0x10) connect$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64=0xffffffffffffffff], 0x32600) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="5de31166a7b6b26ab04f9d7cf2d1a22553af559c847956c80774b6e619747e625ee50155c1cbe70cd54ba4a5de99ac95ce515d9abe2bed450ddc185b3bd55be7468a3d934886ff556c5f6f7a2bc7a3c22661bfed2988d18014205bc3cb4bcae82a03e9632c5627729869b67e1e849502804c7941d5d3ff5ceb998ab638d4921aa23f1ccbef08cbd60bd1ad69ac872d3ccee8126adeadd5ee0b1c9d062170ede346a9c0cce6799f89f4ef364d6844ba609c5b338d0ddab0f59fade090e4decfef19d817504c2fb87ba37949ba9f298a329e47dc9a4fb9799ffa77a323284c13", @ANYRESOCT=r5, @ANYRESDEC=r3], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x14) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x24000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000652ffae3"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x6}, 0x94) sendmmsg$inet(r0, &(0x7f0000005200)=[{}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000240)={'wg2\x00', &(0x7f0000000680)=@ethtool_dump={0x3e, 0x2753f3d2, 0x5, 0x4d, "f86410a3bd3da7c626f358f675cb651f9db934b353f5a64b2ab60672b042d6ec95b2de56c7ad07d759b8679b8028b3fb0a7e9deeae163479b1215adab460ac3923833043964834da56bc87be26"}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_lsm={0x1d, 0x23, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000001040000000000001000000085100000f9ffffff8510000003000000b7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r6, @ANYBLOB="000000000000001908e68000fcffffff1811000095c9a8eff0c7e2a628238e7ebb6ef37c5c5b776cf12b1a49ac64491f285c0ed670b08819ec1f95b379e20f399e19645394358bf0886479147cce35d52a4a89dffe5ecac7fc5b57d1c275637ee842666f7fa2a3ac245a5be6fee45e4bfcf65d5a2b417cd3711969dca64c9c05109664c7f1ddbda01eef9c441c3df3ed", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x5f, 0xb2, &(0x7f00000008c0)=""/178, 0x40f00, 0xd, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x0, 0xc, 0x9, 0x35}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000d80)=[{0x2, 0x5, 0x1000, 0xa}, {0x4, 0x4, 0x9, 0x5}, {0x1, 0x4, 0xa}], 0x10, 0x7fffffff}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) 17.421076958s ago: executing program 2 (id=2633): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @rand_addr=0x64010181}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000020000000a000400230000000b00000200"/28, @ANYRES32=r2], 0x20, 0x404a055}, 0x0) 17.303623862s ago: executing program 1 (id=2634): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.286142828s ago: executing program 4 (id=2635): syz_emit_ethernet(0x3f, &(0x7f00000000c0)={@random="eb3051d38356", @broadcast, @void, {@x25={0x805, {0x3, 0x2, 0x0, "5fefd821e3fff4de1026f54e535470586fc05ca9ccb1f7307c7b4430fd300eede9ddfb0a8dbb312d3d64eae4d338"}}}}, &(0x7f0000000100)={0x0, 0x2, [0xf38, 0x1c1, 0x767, 0xd03]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_OKEY={0x8, 0x5, 0x14}]}}}]}, 0x48}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x23}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c00018014000300fe80000000000000000000000000002014000400fe80000000000000000000000000002f0c000280e0fe01009800feff05000340000200003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400fe8800000000000000000000000001013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c000280050001"], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 17.224187392s ago: executing program 1 (id=2636): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x94) 17.167820696s ago: executing program 4 (id=2637): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRES64], 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r4, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8224}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r3) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x9, @remote, 0x8}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000880)="127d", 0x2}], 0x1}}], 0x2, 0x0) (async) shutdown(r5, 0x1) (async) getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x800) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000340)="b9ff0a03076804268c989e14f088a8", 0x0, 0x10500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) 17.155888506s ago: executing program 1 (id=2638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0f0016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f000000aa40)={0x0, 0x0, &(0x7f000000aa00)={&(0x7f00000006c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB="4fecf8e720498e87c609a1ac10a207af68bad238580d22c1f67052e11dd2ab86eff72dff89b0c63a35668d5172f19f6947f66adaaa866414c8532f5f804ea6e254bf8082f30a0dcc6df8b4ffd79beb00ef4ec2c61c79fab4a0adeded0008fbb4b0127cc8a7ff6f52f5b85071a14625cb4065f57170d0121a58916ba5f8626e35ed88ea4bf97997f7e5a340f97bcc787bd3d727c08d5cc668fae9805be266ccde3d37b19ecb8791e670b57ca0e30836a4d00361cb19f748269b59f84a19519b15befa43ec1364913055b32ce413865154684311bea9d8720b2a7d0597"], 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) socket(0x2c, 0x3, 0x3bb2b5fd) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xff8, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x1) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="b3e0b5569b73a25275c9a444d75bbeced7f663a8904b61e0", 0x18}], 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="110725bd7b74f7f3232cae6154ec3c9b000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (async) unshare(0x40600) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="7f3b08", @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf252c000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x200408c4) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x1000000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x44004) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711858000000000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) (async) socket$key(0xf, 0x3, 0x2) 17.075946122s ago: executing program 0 (id=2639): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x6720f15ce8555866) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xfff3}, {0x6, 0x5}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004840) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet(0x2, 0x3, 0x1) sendto(r10, 0x0, 0x0, 0x4c55, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r11, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r11, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x10, 0x4}, 0x2c) socket$kcm(0xa, 0x2, 0x0) (async) r12 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r12, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r12, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) socket$netlink(0x10, 0x3, 0x0) r13 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r13, 0x8982, &(0x7f0000000080)) 16.966219132s ago: executing program 3 (id=2640): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYBLOB='\b'], 0x38}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000240), 0x4) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0x1a2, 0x40010000, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x2a}, 0x60) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x4000000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="291d7a0300"/23, @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYRESHEX=r5, @ANYRES16=r2, @ANYRES16=r4, @ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000080)=0x6100204) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) epoll_create(0x400) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="d4000000400007012bbd7000fedbdf25027c00150400c280b6000180b00010"], 0xd4}, 0x1, 0x0, 0x0, 0x4805}, 0xc000) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 16.423133043s ago: executing program 2 (id=2641): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x25dfdbff, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5, 0x400}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010102}]}, 0x24}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x50200, 0x4071}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x4000015) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) (async) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/247, 0xf7}, 0x5}], 0x1, 0x1, 0x0) (async) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8080010}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r9, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xc, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x66, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb5, 0x3}}, @supported_rates={0x1, 0x8, [{0x5, 0x1}, {0x14}, {0x6c}, {0x24, 0x1}, {0x3}, {0xc}, {0x6, 0x1}, {0xb, 0x1}]}, @perr={0x84, 0x28, {0x5, 0x2, [{{0x0, 0x1}, @broadcast, 0x7f, @value=@device_b, 0x2b}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x9}]}}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0xf}, @chsw_timing={0x68, 0x4, {0x401, 0x4}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x4000009, 0xffffffff, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x6b, 0x0, 0xf7, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102}}}}) (async) write$tun(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) (async) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000021000108fcfffffffcffffff02200000000000deffffffff070001"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r0, 0x0) 16.151805815s ago: executing program 3 (id=2642): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) unshare(0x8040480) r2 = socket$netlink(0x10, 0x3, 0x8000000004) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x1}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x20050800) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r5, 0x40001, {0x2, 0x0, 0x6}, 0x1}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x18000000000002a0, 0xe, 0xc00, &(0x7f00000001c0)="b9ff05000000000c5c26fc000000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000100)=""/3, &(0x7f00000001c0)=0x3) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r8}, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) 16.015503363s ago: executing program 3 (id=2643): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x80, 0x10, 0x437, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x50483, 0xcc5}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x39}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x2}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x8}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x7}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004085}, 0x0) r6 = socket(0x2d, 0x2, 0x0) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r9 = socket(0x2d, 0x2, 0x0) bind$xdp(r9, &(0x7f0000000080)={0x2d, 0x0, r8, 0xc}, 0x10) r10 = socket(0x2d, 0x2, 0x0) bind$xdp(r10, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xcdd, 0x8000, 0x1000, 0x6, 0x6}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={r11, @in={{0x2, 0x4e20, @multicast1}}, 0x6a64, 0x0, 0xffff7fff, 0x0, 0x82e4}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000100)={r12, 0x4, 0xf7fc}, &(0x7f0000000140)=0x8) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00012bbd7000fddbdf250d000000050038000100000005002f000100000008003a00ff0100000500290000000002000000000000000005002f000000000005002f00000000002f86"], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000001) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000380)=0x8, 0x8) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x801}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000020000000000000000"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r15 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r15, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000045, [0x2, 0x89ff]}}) 15.863662366s ago: executing program 3 (id=2644): socketpair(0x2a, 0xc, 0xffffd933, &(0x7f0000000000)) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@dellink={0x28, 0x11, 0x0, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x1, 0x20}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 15.863116554s ago: executing program 3 (id=2645): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000040000000000180000008d085c0763f1b9d4e6c7f5f8ec90939461758e1da0e76405a446f88353ed7983a289e67df0dbdb25be1fe90c41e0c3361f517f0679184ed5bda1d4acab279a12a050a45bf324d948", @ANYRES32=0xffffffffffffffff], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1e}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x565b02, 0x0) (async) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffcb, 0x2000037d, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) (async) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r0], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) (async, rerun: 32) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601080000000083cc000000000000050005000a000000050001000700000005000400000000000900020073795a310000000015000300686173683a69702c706f72742c6e6574000000000c0007800800064000000001"], 0x5c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x1, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x7) (async, rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40), 0x0, 0x4004) (async, rerun: 64) r6 = socket$key(0xf, 0x3, 0x2) writev(r6, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) socket$nl_generic(0x10, 0x3, 0x10) 2.023099325s ago: executing program 32 (id=2639): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x6720f15ce8555866) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xfff3}, {0x6, 0x5}}, [{0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004840) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet(0x2, 0x3, 0x1) sendto(r10, 0x0, 0x0, 0x4c55, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r11, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r11, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x10, 0x4}, 0x2c) socket$kcm(0xa, 0x2, 0x0) (async) r12 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r12, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r12, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) socket$netlink(0x10, 0x3, 0x0) r13 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r13, 0x8982, &(0x7f0000000080)) 1.997363042s ago: executing program 33 (id=2638): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0f0016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f000000aa40)={0x0, 0x0, &(0x7f000000aa00)={&(0x7f00000006c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB="4fecf8e720498e87c609a1ac10a207af68bad238580d22c1f67052e11dd2ab86eff72dff89b0c63a35668d5172f19f6947f66adaaa866414c8532f5f804ea6e254bf8082f30a0dcc6df8b4ffd79beb00ef4ec2c61c79fab4a0adeded0008fbb4b0127cc8a7ff6f52f5b85071a14625cb4065f57170d0121a58916ba5f8626e35ed88ea4bf97997f7e5a340f97bcc787bd3d727c08d5cc668fae9805be266ccde3d37b19ecb8791e670b57ca0e30836a4d00361cb19f748269b59f84a19519b15befa43ec1364913055b32ce413865154684311bea9d8720b2a7d0597"], 0x130}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) socket(0x2c, 0x3, 0x3bb2b5fd) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xff8, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x1) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000040)="b3e0b5569b73a25275c9a444d75bbeced7f663a8904b61e0", 0x18}], 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="110725bd7b74f7f3232cae6154ec3c9b000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) (async) unshare(0x40600) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="7f3b08", @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf252c000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x200408c4) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x1000000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x44004) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711858000000000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) (async) socket$key(0xf, 0x3, 0x2) 1.957645597s ago: executing program 34 (id=2637): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRES64], 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0)=0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r4, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8224}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r3) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x9, @remote, 0x8}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000880)="127d", 0x2}], 0x1}}], 0x2, 0x0) (async) shutdown(r5, 0x1) (async) getsockopt$bt_hci(r5, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x800) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000340)="b9ff0a03076804268c989e14f088a8", 0x0, 0x10500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) 1.012813022s ago: executing program 35 (id=2641): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x25dfdbff, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5, 0x400}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010102}]}, 0x24}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x50200, 0x4071}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x4000015) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) (async) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/247, 0xf7}, 0x5}], 0x1, 0x1, 0x0) (async) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8080010}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa4, r9, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xc, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x66, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb5, 0x3}}, @supported_rates={0x1, 0x8, [{0x5, 0x1}, {0x14}, {0x6c}, {0x24, 0x1}, {0x3}, {0xc}, {0x6, 0x1}, {0xb, 0x1}]}, @perr={0x84, 0x28, {0x5, 0x2, [{{0x0, 0x1}, @broadcast, 0x7f, @value=@device_b, 0x2b}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x9}]}}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @challenge={0x10, 0x1, 0xf}, @chsw_timing={0x68, 0x4, {0x401, 0x4}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x4000009, 0xffffffff, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x6b, 0x0, 0xf7, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102}}}}) (async) write$tun(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) (async) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000021000108fcfffffffcffffff02200000000000deffffffff070001"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r0, 0x0) 0s ago: executing program 36 (id=2645): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000040000000000180000008d085c0763f1b9d4e6c7f5f8ec90939461758e1da0e76405a446f88353ed7983a289e67df0dbdb25be1fe90c41e0c3361f517f0679184ed5bda1d4acab279a12a050a45bf324d948", @ANYRES32=0xffffffffffffffff], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1e}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x565b02, 0x0) (async) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffcb, 0x2000037d, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) (async) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r0], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) (async, rerun: 32) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601080000000083cc000000000000050005000a000000050001000700000005000400000000000900020073795a310000000015000300686173683a69702c706f72742c6e6574000000000c0007800800064000000001"], 0x5c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x3, 0x1, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x7) (async, rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40), 0x0, 0x4004) (async, rerun: 64) r6 = socket$key(0xf, 0x3, 0x2) writev(r6, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): tcf_action_init_1+0x10/0x10 [ 274.781713][T12182] ? _raw_read_unlock+0x28/0x50 [ 274.781728][T12182] ? tc_action_load_ops+0x247/0x540 [ 274.781746][T12182] ? stack_depot_save_flags+0x33/0x810 [ 274.781784][T12182] ? netlink_unicast+0x75c/0x8e0 [ 274.781798][T12182] ? netlink_sendmsg+0x813/0xb40 [ 274.781818][T12182] ? __nla_parse+0x40/0x60 [ 274.781840][T12182] tcf_action_init+0x31e/0xb40 [ 274.781871][T12182] ? __pfx_tcf_action_init+0x10/0x10 [ 274.781920][T12182] ? __pfx___nla_validate_parse+0x10/0x10 [ 274.781940][T12182] ? trace_sched_exit_tp+0x3a/0x130 [ 274.781988][T12182] tc_ctl_action+0x43b/0xc70 [ 274.782022][T12182] ? __pfx_tc_ctl_action+0x10/0x10 [ 274.782047][T12182] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 274.782070][T12182] ? lockdep_hardirqs_on+0x7a/0x110 [ 274.782129][T12182] ? __pfx_tc_ctl_action+0x10/0x10 [ 274.782149][T12182] rtnetlink_rcv_msg+0x77e/0xbe0 [ 274.782168][T12182] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 274.782181][T12182] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.782194][T12182] ? ref_tracker_free+0x693/0x840 [ 274.782211][T12182] ? __pfx_ref_tracker_free+0x10/0x10 [ 274.782240][T12182] netlink_rcv_skb+0x232/0x4b0 [ 274.782256][T12182] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.782272][T12182] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 274.782301][T12182] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.782318][T12182] ? netlink_deliver_tap+0x2e/0x1b0 [ 274.782341][T12182] netlink_unicast+0x75c/0x8e0 [ 274.782368][T12182] netlink_sendmsg+0x813/0xb40 [ 274.782392][T12182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.782413][T12182] ? aa_sock_msg_perm+0xf1/0x1b0 [ 274.782436][T12182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.782459][T12182] ____sys_sendmsg+0x972/0x9f0 [ 274.782478][T12182] ? __might_fault+0xaf/0x130 [ 274.782504][T12182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.782527][T12182] ? import_iovec+0x73/0xa0 [ 274.782547][T12182] ___sys_sendmsg+0x2a5/0x360 [ 274.782562][T12182] ? __lock_acquire+0x6b5/0x2cf0 [ 274.782582][T12182] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.782629][T12182] ? __fget_files+0x2a/0x420 [ 274.782645][T12182] ? __fget_files+0x3a0/0x420 [ 274.782671][T12182] __x64_sys_sendmsg+0x1bd/0x2a0 [ 274.782688][T12182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.782712][T12182] ? __pfx_ksys_write+0x10/0x10 [ 274.782741][T12182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.782758][T12182] do_syscall_64+0x174/0x580 [ 274.782781][T12182] ? trace_irq_disable+0x3b/0x140 [ 274.782802][T12182] ? clear_bhb_loop+0x40/0x90 [ 274.782821][T12182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.782835][T12182] RIP: 0033:0x7f647999ce59 [ 274.782850][T12182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.782863][T12182] RSP: 002b:00007f647a77c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.782881][T12182] RAX: ffffffffffffffda RBX: 00007f6479c15fa0 RCX: 00007f647999ce59 [ 274.782892][T12182] RDX: 0000000000000000 RSI: 00002000000096c0 RDI: 0000000000000003 [ 274.782903][T12182] RBP: 00007f647a77c090 R08: 0000000000000000 R09: 0000000000000000 [ 274.782912][T12182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.782922][T12182] R13: 00007f6479c16038 R14: 00007f6479c15fa0 R15: 00007ffebf668328 [ 274.782951][T12182] [ 274.785372][T11924] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.193434][ T11] block nbd4: Possible stuck request ffff88802744e000: control (read@0,1024B). Runtime 60 seconds [ 275.204903][ T11] block nbd4: Possible stuck request ffff88802744e1c0: control (read@1024,1024B). Runtime 60 seconds [ 275.216525][ T11] block nbd4: Possible stuck request ffff88802744e380: control (read@2048,1024B). Runtime 60 seconds [ 275.228245][ T11] block nbd4: Possible stuck request ffff88802744e540: control (read@3072,1024B). Runtime 60 seconds [ 275.239695][T11924] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.258128][T11924] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.279381][T11924] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.495168][T12216] Cannot find del_set index 0 as target [ 275.947302][T12234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1648'. [ 276.019444][T12238] netlink: 'syz.3.1649': attribute type 46 has an invalid length. [ 276.102002][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1649'. [ 276.138484][T12238] netlink: 'syz.3.1649': attribute type 46 has an invalid length. [ 276.232051][T12245] FAULT_INJECTION: forcing a failure. [ 276.232051][T12245] name failslab, interval 1, probability 0, space 0, times 0 [ 276.295155][T12245] CPU: 1 UID: 0 PID: 12245 Comm: syz.1.1651 Not tainted syzkaller #0 PREEMPT(full) [ 276.295179][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.295189][T12245] Call Trace: [ 276.295195][T12245] [ 276.295202][T12245] dump_stack_lvl+0xe8/0x150 [ 276.295227][T12245] should_fail_ex+0x412/0x560 [ 276.295250][T12245] should_failslab+0xa8/0x100 [ 276.295266][T12245] ? skb_clone+0x212/0x3a0 [ 276.295284][T12245] kmem_cache_alloc_noprof+0x87/0x650 [ 276.295313][T12245] skb_clone+0x212/0x3a0 [ 276.295334][T12245] __netlink_deliver_tap+0x404/0x850 [ 276.295365][T12245] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.295384][T12245] netlink_deliver_tap+0x19c/0x1b0 [ 276.295403][T12245] netlink_sendskb+0x68/0x140 [ 276.295423][T12245] netlink_rcv_skb+0x2b6/0x4b0 [ 276.295441][T12245] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 276.295459][T12245] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.295489][T12245] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.295506][T12245] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.295529][T12245] netlink_unicast+0x75c/0x8e0 [ 276.295557][T12245] netlink_sendmsg+0x813/0xb40 [ 276.295584][T12245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.295605][T12245] ? aa_sock_msg_perm+0xf1/0x1b0 [ 276.295628][T12245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.295653][T12245] ____sys_sendmsg+0x972/0x9f0 [ 276.295669][T12245] ? __might_fault+0xaf/0x130 [ 276.295702][T12245] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.295728][T12245] ? import_iovec+0x73/0xa0 [ 276.295751][T12245] ___sys_sendmsg+0x2a5/0x360 [ 276.295767][T12245] ? __lock_acquire+0x6b5/0x2cf0 [ 276.295790][T12245] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.295842][T12245] ? __fget_files+0x2a/0x420 [ 276.295860][T12245] ? __fget_files+0x3a0/0x420 [ 276.295889][T12245] __x64_sys_sendmsg+0x1bd/0x2a0 [ 276.295909][T12245] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.295936][T12245] ? __pfx_ksys_write+0x10/0x10 [ 276.295966][T12245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.295983][T12245] do_syscall_64+0x174/0x580 [ 276.296001][T12245] ? trace_irq_disable+0x3b/0x140 [ 276.296022][T12245] ? clear_bhb_loop+0x40/0x90 [ 276.296041][T12245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.296057][T12245] RIP: 0033:0x7f961e99ce59 [ 276.296073][T12245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.296086][T12245] RSP: 002b:00007f961f822028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.296104][T12245] RAX: ffffffffffffffda RBX: 00007f961ec15fa0 RCX: 00007f961e99ce59 [ 276.296115][T12245] RDX: 0000000000000000 RSI: 00002000000096c0 RDI: 0000000000000003 [ 276.296125][T12245] RBP: 00007f961f822090 R08: 0000000000000000 R09: 0000000000000000 [ 276.296135][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.296144][T12245] R13: 00007f961ec16038 R14: 00007f961ec15fa0 R15: 00007ffe6d70e948 [ 276.296170][T12245] [ 276.630616][ T30] audit: type=1800 audit(1780466696.127:5): pid=12210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1640" name="memory.events" dev="tmpfs" ino=1575 res=0 errno=0 [ 276.753750][T12250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1652'. [ 276.884145][T12253] vcan0: tx drop: invalid sa for name 0x0000000000040001 [ 277.091554][T12267] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1658'. [ 277.118014][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 277.147386][T12267] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1658'. [ 277.161782][T12273] netlink: 'syz.3.1661': attribute type 13 has an invalid length. [ 277.175678][T12273] gretap0: refused to change device tx_queue_len [ 277.183277][T12273] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 277.400687][T12280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1662'. [ 277.459997][T12280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.952564][T12306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1670'. [ 278.054739][T12315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1670'. [ 278.120985][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'. [ 279.341403][ C0] ip6_tunnel: 0 xmit: Local address not yet configured! [ 279.581193][T12394] 8021q: adding VLAN 0 to HW filter on device bond8 [ 279.630532][T12394] 8021q: adding VLAN 0 to HW filter on device bond9 [ 279.651189][T12394] bond8: (slave bond9): Enslaving as an active interface with an up link [ 279.723212][T12411] vcan0: tx drop: invalid sa for name 0x0000000000040001 [ 279.738621][T12409] bond8 (unregistering): (slave bond9): Releasing backup interface [ 279.750203][T12409] bond8 (unregistering): Released all slaves [ 279.830621][T12392] syzkaller1: entered promiscuous mode [ 279.843498][T12392] syzkaller1: entered allmulticast mode [ 279.993651][T12422] bond9 (unregistering): Released all slaves [ 280.593228][T12473] netlink: 'syz.2.1711': attribute type 14 has an invalid length. [ 280.620894][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 281.368386][T12510] tun0: tun_chr_ioctl cmd 1074812117 [ 281.375029][T12510] __nla_validate_parse: 9 callbacks suppressed [ 281.375047][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 282.134742][T12547] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.282635][T12563] netlink: 'syz.1.1732': attribute type 10 has an invalid length. [ 282.350065][T12563] team0 (unregistering): Port device bridge2 removed [ 282.362872][T12565] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1732'. [ 282.418577][T12563] team0 (unregistering): Port device vxlan0 removed [ 282.452228][T12547] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.464648][T12569] vcan0: tx drop: invalid sa for name 0x0000000000040001 [ 282.486726][ T7800] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.499092][ T7800] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.534868][ T7800] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.562254][ T7800] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.612439][T12547] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.703593][T12547] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.775129][T12583] xt_cluster: node mask cannot exceed total number of nodes [ 283.006492][ T182] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.023307][T12592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1742'. [ 283.090189][ T182] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.163285][ T182] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.242784][ T182] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.250701][T12600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1745'. [ 283.293045][T12600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1745'. [ 283.326297][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 283.471734][T12609] netlink: 'syz.2.1748': attribute type 14 has an invalid length. [ 283.819372][T12622] vlan2: entered promiscuous mode [ 283.831442][T12622] bridge0: entered promiscuous mode [ 283.835729][T12631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1752'. [ 284.144121][T12642] netlink: 'syz.1.1755': attribute type 32 has an invalid length. [ 284.235398][T12640] netlink: 'syz.0.1753': attribute type 10 has an invalid length. [ 284.282231][T12640] team0: Port device veth1_to_hsr added [ 284.883297][ T3349] tipc: Subscription rejected, illegal request [ 285.073220][T12684] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1763'. [ 285.134283][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1763'. [ 285.352645][T12696] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1766'. [ 285.634142][T12710] tipc: Enabled bearer , priority 0 [ 285.642671][T12710] syzkaller0: entered promiscuous mode [ 285.648825][T12710] syzkaller0: entered allmulticast mode [ 285.698031][T12710] tipc: Resetting bearer [ 285.710648][T12709] tipc: Resetting bearer [ 285.742841][T12709] tipc: Disabling bearer [ 286.324560][T12752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.388283][T12752] __nla_validate_parse: 5 callbacks suppressed [ 286.388301][T12752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1781'. [ 286.452677][T12752] nbd: must specify at least one socket [ 286.560760][T12739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1781'. [ 286.578252][T12739] nbd: must specify at least one socket [ 286.746664][T12757] bridge0: left promiscuous mode [ 286.772466][T12757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.961479][T12757] batman_adv: batadv0: Interface activated: – [ 287.059450][T12757] batadv0: mtu less than device minimum [ 287.071389][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.086245][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.098032][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.110011][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.121705][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.133473][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.145227][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.156939][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.168648][T12757] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.176911][T12790] netlink: 'syz.1.1793': attribute type 4 has an invalid length. [ 287.227852][T12791] netlink: 'syz.1.1793': attribute type 4 has an invalid length. [ 287.245088][T12793] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 287.258556][T12757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.452114][T12757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 287.494013][T12757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.512239][T12757] veth1_macvtap: left promiscuous mode [ 287.520969][T12757] veth0_macvtap: left promiscuous mode [ 287.528201][T12757] veth0_macvtap: entered promiscuous mode [ 287.536278][T12757] veth1_macvtap: entered promiscuous mode [ 287.550940][T12757] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 287.659430][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 287.733910][ T5746] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 287.786603][ T7800] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 287.858782][ T7800] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 287.894782][ T7800] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 287.975340][T12817] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1799'. [ 287.996841][ T7800] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 288.016337][T12815] syzkaller0: entered promiscuous mode [ 288.032069][T12815] syzkaller0: entered allmulticast mode [ 288.163730][T12823] netlink: 'syz.0.1803': attribute type 2 has an invalid length. [ 288.184381][T12823] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 288.209665][T12823] netlink: 'syz.0.1803': attribute type 1 has an invalid length. [ 288.235791][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1803'. [ 288.544848][T12839] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1807'. [ 288.620760][ T5746] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 288.946931][T12860] syzkaller0: entered promiscuous mode [ 288.961043][T12860] syzkaller0: entered allmulticast mode [ 289.020539][T12865] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 289.030383][T12865] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 289.421382][T12882] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.449369][T12882] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.523228][T12882] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.536058][T12882] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.554878][T12890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1821'. [ 289.576009][T12890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1821'. [ 289.587872][T12893] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1821'. [ 289.592997][T12892] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1822'. [ 289.598166][T12893] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1821'. [ 289.623877][T12882] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.646538][T12882] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.751454][T12882] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.767157][T12882] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.090986][T12917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.117960][ T7799] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.127782][ T7799] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.151299][T12921] wg1: entered promiscuous mode [ 290.168311][T12921] wg1: entered allmulticast mode [ 290.229823][T11921] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.243033][T11921] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.332670][ T3349] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.383465][ T3349] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.478184][ T3349] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.501857][ T3349] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.193648][T12963] syzkaller0: entered promiscuous mode [ 291.207290][T12963] syzkaller0: entered allmulticast mode [ 291.499114][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 291.804517][T12985] netlink: 'syz.4.1849': attribute type 1 has an invalid length. [ 291.963732][T12994] __nla_validate_parse: 4 callbacks suppressed [ 291.963748][T12994] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1850'. [ 292.007677][T12990] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1849'. [ 292.058342][T12996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1850'. [ 292.068008][T12994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1850'. [ 292.103250][T13000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.200886][T12985] 8021q: adding VLAN 0 to HW filter on device bond3 [ 292.230499][T12985] bond2: (slave bond3): making interface the new active one [ 292.258735][T12985] bond2: (slave bond3): Enslaving as an active interface with an up link [ 292.376160][T13006] netlink: 'syz.1.1852': attribute type 10 has an invalid length. [ 292.405736][T13006] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1852'. [ 292.439772][ T182] net_ratelimit: 31 callbacks suppressed [ 292.439791][ T182] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 292.461733][ T182] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 292.541378][T12996] vlan2: entered promiscuous mode [ 292.878028][T13022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1855'. [ 292.913428][T13022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1855'. [ 293.052085][ T7799] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 293.066692][ T7799] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 293.611019][ T182] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 293.625717][ T182] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 294.179691][ T182] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 294.194290][ T182] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 294.699646][ C0] ip6_tunnel: 0 xmit: Local address not yet configured! [ 294.740767][T11927] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 294.755439][T11927] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 296.021844][T13043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.043015][T13037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1860'. [ 296.135588][T13049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.401113][T13067] netlink: 'syz.0.1866': attribute type 61 has an invalid length. [ 296.422934][T13069] xt_hashlimit: overflow, try lower: 6/0 [ 296.431034][T13068] netlink: 'syz.0.1866': attribute type 61 has an invalid length. [ 297.105134][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.309788][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.332267][T13084] ip6tnl3: entered allmulticast mode [ 297.429803][T13089] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 297.790062][T13116] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 297.859592][ T3349] net_ratelimit: 11 callbacks suppressed [ 297.859609][ T3349] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 297.880391][ T3349] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 297.899152][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 297.978783][T13111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1878'. [ 298.017466][T13127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.186081][T13135] nbd: must specify a size in bytes for the device [ 298.195710][T13135] nbd: couldn't find device at index 1 [ 298.218340][T13136] netlink: 'syz.2.1885': attribute type 2 has an invalid length. [ 298.311969][T13139] syzkaller0: entered promiscuous mode [ 298.317518][T13139] syzkaller0: entered allmulticast mode [ 298.330086][T13139] netlink: 'syz.1.1887': attribute type 1 has an invalid length. [ 298.419006][ T7799] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 298.433658][ T7799] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 298.477941][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1888'. [ 298.491578][T13143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1889'. [ 298.506751][T13143] ip6gre2: entered promiscuous mode [ 298.512591][T13143] ip6gre2: entered allmulticast mode [ 298.625119][T13146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1890'. [ 298.648105][T13148] gretap0: entered promiscuous mode [ 298.717645][T13150] tipc: Enabling of bearer rejected, failed to enable media [ 298.959035][ T3349] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 298.973661][ T3349] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 299.078349][T13165] netlink: 'syz.1.1895': attribute type 1 has an invalid length. [ 299.163972][T13168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.510586][ T7799] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 299.513445][T13185] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.525422][ T7799] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 300.099088][ T7800] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 300.626071][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1907'. [ 300.824357][T13244] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1913'. [ 300.935643][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'. [ 301.117026][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'. [ 301.497573][T13277] netlink: 'syz.2.1922': attribute type 1 has an invalid length. [ 301.562122][T13281] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 301.584932][T13281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1923'. [ 301.594159][T13281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1923'. [ 301.603704][T13275] nbd3: detected capacity change from 0 to 63 [ 301.607554][T13281] netlink: 'syz.0.1923': attribute type 5 has an invalid length. [ 301.622152][T13277] netlink: 'syz.2.1922': attribute type 1 has an invalid length. [ 301.634828][T13282] block nbd3: NBD_DISCONNECT [ 301.657063][T13282] block nbd3: Disconnected due to user request. [ 301.685328][T13282] block nbd3: shutting down sockets [ 301.699481][T13285] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 301.708137][T13285] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 301.730980][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.740234][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 301.755185][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.764319][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 301.772182][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.781283][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 301.789074][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.798088][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 301.827479][T12012] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.838759][T12012] Buffer I/O error on dev nbd3, logical block 0, async page read [ 301.847990][T12012] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.858706][T12012] Buffer I/O error on dev nbd3, logical block 1, async page read [ 301.872023][T12012] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.890987][T12012] Buffer I/O error on dev nbd3, logical block 2, async page read [ 301.914696][T12012] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.925728][T12012] Buffer I/O error on dev nbd3, logical block 3, async page read [ 301.934711][T12012] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.959521][T12012] Buffer I/O error on dev nbd3, logical block 0, async page read [ 301.967651][T12012] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 301.979986][T12012] Buffer I/O error on dev nbd3, logical block 1, async page read [ 302.006955][T12012] ldm_validate_partition_table(): Disk read failed. [ 302.018282][T12012] Dev nbd3: unable to read RDB block 0 [ 302.026782][T12012] nbd3: unable to read partition table [ 302.051191][T12012] ldm_validate_partition_table(): Disk read failed. [ 302.061704][T12012] Dev nbd3: unable to read RDB block 0 [ 302.070426][T12012] nbd3: unable to read partition table [ 302.373237][T13311] netlink: 'syz.0.1932': attribute type 1 has an invalid length. [ 302.405458][T13311] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 302.422338][T13317] netlink: 'syz.3.1933': attribute type 3 has an invalid length. [ 302.494769][T13317] nbd: must specify a size in bytes for the device [ 302.957708][T13345] netlink: 'syz.0.1941': attribute type 27 has an invalid length. [ 303.005988][T13347] net_ratelimit: 11 callbacks suppressed [ 303.006005][T13347] openvswitch: netlink: IP tunnel dst address not specified [ 303.169346][ T7800] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 303.184169][ T7800] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 303.435522][T13367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.600137][T13376] netlink: 'syz.2.1952': attribute type 1 has an invalid length. [ 303.666100][T13364] batman_adv: batadv0: Interface deactivated: – [ 303.793170][T13364] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 303.800513][T13364] ip6gre1: left promiscuous mode [ 303.805498][T13364] ip6gre1: left allmulticast mode [ 303.818247][T13364] vxlan1: left promiscuous mode [ 303.825091][T13364] vxlan1: left allmulticast mode [ 303.831491][T13364] ip6gre2: left promiscuous mode [ 303.836452][T13364] ip6gre2: left allmulticast mode [ 303.850388][T13364] geneve3: left promiscuous mode [ 303.871694][T13364] ip6tnl3: left allmulticast mode [ 303.877987][T13376] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 303.891476][ T7800] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.928342][ T7800] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 52821 - 0 [ 303.957209][ T7800] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 303.993063][ T7800] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.023102][ T7800] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 52821 - 0 [ 304.044937][T13396] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20004 [ 304.052940][ T7800] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.071817][ T7800] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.080761][ T7800] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 52821 - 0 [ 304.091678][ T7800] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 304.102236][ T7800] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.116965][ T7800] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 52821 - 0 [ 304.126263][ T7800] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 305.156077][T13441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.206916][T13450] __nla_validate_parse: 5 callbacks suppressed [ 305.206934][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 305.349908][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 305.385152][T13450] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1960'. [ 305.471039][T13460] SET target dimension over the limit! [ 305.584414][ T11] block nbd4: Possible stuck request ffff88802744e000: control (read@0,1024B). Runtime 90 seconds [ 305.595972][ T11] block nbd4: Possible stuck request ffff88802744e1c0: control (read@1024,1024B). Runtime 90 seconds [ 305.621442][ T11] block nbd4: Possible stuck request ffff88802744e380: control (read@2048,1024B). Runtime 90 seconds [ 305.632910][ T11] block nbd4: Possible stuck request ffff88802744e540: control (read@3072,1024B). Runtime 90 seconds [ 306.145429][T13490] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.254012][T13506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.472660][T13515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1977'. [ 306.521402][T13515] veth1_to_team: entered promiscuous mode [ 306.551435][T13515] veth1_to_team: left promiscuous mode [ 306.791563][T13533] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1981'. [ 306.807626][T13535] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1983'. [ 306.837021][T13535] netlink: Unknown conntrack attr (0) [ 307.203120][T13553] xt_CT: You must specify a L4 protocol and not use inversions on it [ 307.279067][T13560] xfrm0: entered allmulticast mode [ 307.728578][T13581] nbd: nbd0 already in use [ 307.736648][T13581] block nbd0: NBD_DISCONNECT [ 307.742116][T13583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1996'. [ 307.751861][T13581] block nbd0: Send disconnect failed -32 [ 307.761870][T13585] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.773459][T13581] block nbd0: shutting down sockets [ 307.984605][T13585] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.131075][T13585] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.177526][T13613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.216778][T13609] bridge0: port 1(erspan0) entered blocking state [ 308.267581][T13609] bridge0: port 1(erspan0) entered disabled state [ 308.300654][T13618] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2001'. [ 308.322471][T13609] erspan0: entered allmulticast mode [ 308.327261][T13618] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2001'. [ 308.346173][T13609] erspan0: entered promiscuous mode [ 308.360633][T13609] bridge0: port 1(erspan0) entered blocking state [ 308.368672][T13609] bridge0: port 1(erspan0) entered forwarding state [ 308.452992][T13626] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.465384][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2004'. [ 308.477112][T13615] erspan0: left allmulticast mode [ 308.489831][T13615] erspan0: left promiscuous mode [ 308.506765][T13615] bridge0: port 1(erspan0) entered disabled state [ 308.547684][T13627] tipc: Enabling of bearer rejected, failed to enable media [ 308.574754][T13585] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.682816][T13623] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 308.872300][ T7800] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.948580][ T7800] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.012344][T13652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.043846][T11926] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.323285][ T7799] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.826340][T13693] nbd: must specify a size in bytes for the device [ 310.014617][T13704] pim6reg: entered allmulticast mode [ 310.062628][T13704] pim6reg: left allmulticast mode [ 311.064682][T13728] __nla_validate_parse: 5 callbacks suppressed [ 311.064701][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 311.098565][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 311.120711][T13743] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2030'. [ 311.351597][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 311.517912][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 311.811887][T13766] netlink: 'syz.1.2037': attribute type 13 has an invalid length. [ 311.878333][T13771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2038'. [ 311.931917][T13771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2038'. [ 311.949009][T13771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2038'. [ 311.971328][T13771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2038'. [ 312.011287][T13771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2038'. [ 312.421582][T13787] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 312.433829][T13781] syzkaller0: entered promiscuous mode [ 312.447590][T13781] syzkaller0: entered allmulticast mode [ 312.535437][T13787] 8021q: adding VLAN 0 to HW filter on device bond8 [ 312.613284][T13787] netlink: 'syz.0.2044': attribute type 10 has an invalid length. [ 315.194671][T13790] bond8: (slave dummy0): making interface the new active one [ 315.203253][T13790] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 315.213873][T13787] dummy0: entered promiscuous mode [ 315.225440][T13787] bond8: (slave dummy0): Releasing active interface [ 315.255550][T13803] Unsupported ieee802154 address type: 0 [ 315.320102][T13801] bridge0: port 4(vlan3) entered disabled state [ 315.407107][T13807] netlink: 'syz.3.2051': attribute type 1 has an invalid length. [ 315.970670][T13846] tipc: Enabling of bearer rejected, already enabled [ 316.012644][T13846] tipc: Enabling of bearer rejected, failed to enable media [ 316.484490][T13865] netlink: 'syz.1.2067': attribute type 1 has an invalid length. [ 316.514486][T13865] nbd: couldn't find device at index -427251215 [ 316.668030][T13872] __nla_validate_parse: 27 callbacks suppressed [ 316.668049][T13872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2068'. [ 316.759726][T13878] IPv6: addrconf: prefix option has invalid lifetime [ 316.923778][T13882] veth0: entered promiscuous mode [ 316.966601][T13880] IPVS: set_ctl: invalid protocol: 108 172.30.1.4:20000 [ 316.977751][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2072'. [ 317.044575][T13888] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2074'. [ 317.106042][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.134137][T13893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 317.540676][T13915] netlink: 'syz.3.2082': attribute type 49 has an invalid length. [ 317.544313][T13909] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 317.601033][T13909] bond10 (unregistering): Released all slaves [ 317.856179][T13930] sctp: [Deprecated]: syz.4.2086 (pid 13930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.856179][T13930] Use struct sctp_sack_info instead [ 317.913730][T13891] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 318.160547][T13936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2087'. [ 318.493385][T13945] netlink: 'syz.1.2089': attribute type 39 has an invalid length. [ 318.518619][T13951] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2090'. [ 318.543942][T13951] ksmbd: Unknown IPC event: 1, ignore. [ 318.706453][T13961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2093'. [ 318.728295][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 318.744078][T13961] netlink: 'syz.4.2093': attribute type 10 has an invalid length. [ 319.342278][T13989] netlink: 'syz.4.2101': attribute type 2 has an invalid length. [ 319.376634][T13989] netlink: 'syz.4.2101': attribute type 8 has an invalid length. [ 319.379993][T13994] netlink: 'syz.1.2102': attribute type 12 has an invalid length. [ 319.398541][T13989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2101'. [ 319.428059][T13992] syzkaller1: entered allmulticast mode [ 320.221774][T14027] netlink: 'syz.2.2113': attribute type 21 has an invalid length. [ 320.296297][T14027] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2113'. [ 320.435787][T14040] netlink: 'syz.0.2118': attribute type 13 has an invalid length. [ 320.444096][T14040] netlink: 'syz.0.2118': attribute type 17 has an invalid length. [ 320.478807][T14044] netlink: 'syz.4.2120': attribute type 30 has an invalid length. [ 320.523643][T14044] bond4: option arp_missed_max: invalid value (0) [ 320.530717][T14044] bond4: option arp_missed_max: allowed values 1 - 255 [ 320.549817][T14044] bond4 (unregistering): Released all slaves [ 320.711782][T14059] netlink: Unknown conntrack attr (0) [ 321.710844][T14116] __nla_validate_parse: 3 callbacks suppressed [ 321.710874][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2137'. [ 321.750570][T14115] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 321.822451][T14111] syzkaller1: entered promiscuous mode [ 321.847018][T14111] syzkaller1: entered allmulticast mode [ 321.957704][T14129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2141'. [ 322.005166][T14123] sch_tbf: peakrate 226 is lower than or equals to rate 2048 ! [ 322.063278][T14127] syzkaller0: entered promiscuous mode [ 322.082421][T14127] syzkaller0: entered allmulticast mode [ 322.353584][T14139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2143'. [ 322.448786][T14151] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2145'. [ 322.549917][T14156] xt_TCPMSS: Only works on TCP SYN packets [ 322.668080][T14155] tipc: Enabled bearer , priority 0 [ 322.869434][T14167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2153'. [ 322.922952][T14155] syzkaller0: entered promiscuous mode [ 322.935076][T14155] syzkaller0: entered allmulticast mode [ 322.958061][T14157] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 323.033406][T14168] tipc: Resetting bearer [ 323.067787][T14153] tipc: Resetting bearer [ 323.090247][T14153] tipc: Disabling bearer [ 323.100911][T14169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2152'. [ 323.293253][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2157'. [ 323.315423][T14183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2158'. [ 323.350485][T14183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2158'. [ 323.383687][T14183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2158'. [ 323.448820][T14193] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.754845][T14209] batadv1: entered promiscuous mode [ 323.777011][T14209] batadv1: entered allmulticast mode [ 323.801550][T14209] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 324.078014][T14221] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 324.104597][T14221] bond4 (unregistering): Released all slaves [ 324.127466][T14226] netlink: 'syz.2.2169': attribute type 1 has an invalid length. [ 324.527823][T14240] m1Ie5nè‹Ò: entered promiscuous mode [ 324.803264][T14254] 8021q: adding VLAN 0 to HW filter on device bond4 [ 324.953906][T14265] netlink: 'syz.3.2184': attribute type 1 has an invalid length. [ 324.965730][T14263] xt_hashlimit: max too large, truncated to 1048576 [ 325.045093][T14267] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 325.450435][T14296] macsec0: entered allmulticast mode [ 325.480278][T14296] veth1_macvtap: entered allmulticast mode [ 326.059154][ C0] ip6_tunnel: 0 xmit: Local address not yet configured! [ 326.118296][T14316] FAULT_INJECTION: forcing a failure. [ 326.118296][T14316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.131865][T14316] CPU: 1 UID: 0 PID: 14316 Comm: syz.4.2198 Not tainted syzkaller #0 PREEMPT(full) [ 326.131888][T14316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.131897][T14316] Call Trace: [ 326.131903][T14316] [ 326.131910][T14316] dump_stack_lvl+0xe8/0x150 [ 326.131934][T14316] should_fail_ex+0x412/0x560 [ 326.131955][T14316] _copy_from_user+0x2d/0xb0 [ 326.131975][T14316] ____sys_sendmsg+0x308/0x9f0 [ 326.132001][T14316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.132026][T14316] ? import_iovec+0x73/0xa0 [ 326.132047][T14316] ___sys_sendmsg+0x2a5/0x360 [ 326.132064][T14316] ? __lock_acquire+0x6b5/0x2cf0 [ 326.132085][T14316] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.132132][T14316] ? __fget_files+0x2a/0x420 [ 326.132149][T14316] ? __fget_files+0x3a0/0x420 [ 326.132176][T14316] __x64_sys_sendmsg+0x1bd/0x2a0 [ 326.132196][T14316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.132222][T14316] ? __pfx_ksys_write+0x10/0x10 [ 326.132251][T14316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.132269][T14316] do_syscall_64+0x174/0x580 [ 326.132285][T14316] ? trace_irq_disable+0x3b/0x140 [ 326.132305][T14316] ? clear_bhb_loop+0x40/0x90 [ 326.132324][T14316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.132339][T14316] RIP: 0033:0x7f647999ce59 [ 326.132355][T14316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.132367][T14316] RSP: 002b:00007f647a77c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.132384][T14316] RAX: ffffffffffffffda RBX: 00007f6479c15fa0 RCX: 00007f647999ce59 [ 326.132396][T14316] RDX: 0000000004000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 326.132406][T14316] RBP: 00007f647a77c090 R08: 0000000000000000 R09: 0000000000000000 [ 326.132416][T14316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.132425][T14316] R13: 00007f6479c16038 R14: 00007f6479c15fa0 R15: 00007ffebf668328 [ 326.132466][T14316] [ 326.745124][T14346] netlink: 'syz.3.2210': attribute type 1 has an invalid length. [ 326.894987][T14346] __nla_validate_parse: 74 callbacks suppressed [ 326.895007][T14346] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2210'. [ 326.952216][T14358] dvmrp0: entered allmulticast mode [ 326.959027][T14346] bond11: entered promiscuous mode [ 326.970858][T14346] bond11: entered allmulticast mode [ 326.991406][T14346] 8021q: adding VLAN 0 to HW filter on device bond11 [ 327.297109][T14380] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2219'. [ 327.694424][ T30] audit: type=1800 audit(1780466747.207:6): pid=14376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2218" name="memory.events" dev="tmpfs" ino=2338 res=0 errno=0 [ 328.062002][T14409] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 328.074748][T14416] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 328.097430][T14414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2229'. [ 328.121154][T14409] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 328.126074][T14420] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2231'. [ 328.165500][T14409] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 328.241373][T14409] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 328.803187][T11927] smbdirect: ib_dev[syz2] removed [ 328.924352][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 329.080060][T14435] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.321714][T14459] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2242'. [ 329.344834][T14460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2240'. [ 329.884433][T14488] erspan1: entered promiscuous mode [ 329.903694][T14488] erspan1: entered allmulticast mode [ 330.048520][T14497] netlink: 'syz.4.2252': attribute type 142 has an invalid length. [ 330.159170][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2255'. [ 330.176088][T14502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2255'. [ 330.229844][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2254'. [ 330.448203][T14512] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 330.705437][T14524] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.883699][T14524] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.094964][T14524] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.138285][T14536] tipc: Cannot configure node identity twice [ 331.292576][T14524] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.325666][T14539] syzkaller1: entered promiscuous mode [ 331.332911][T14539] syzkaller1: entered allmulticast mode [ 331.614051][T11927] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.665189][T11927] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.701401][ T7800] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.787946][ T7800] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.931128][T14575] bridge0: port 1(batadv1) entered blocking state [ 331.969205][T14575] bridge0: port 1(batadv1) entered disabled state [ 332.012059][T14575] batadv1: entered allmulticast mode [ 332.050030][T14575] batadv1: entered promiscuous mode [ 332.419010][ T7800] batman_adv: batadv1: IGMP Querier appeared [ 332.425099][ T7800] batman_adv: batadv1: MLD Querier appeared [ 332.462269][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 332.469144][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.499748][T14591] netlink: 'syz.3.2282': attribute type 4 has an invalid length. [ 332.552000][T14591] netlink: 'syz.3.2282': attribute type 4 has an invalid length. [ 332.733213][T14595] tipc: Started in network mode [ 332.748176][T14595] tipc: Node identity 9207f8f4ff9d, cluster identity 4711 [ 332.772359][T14595] tipc: Enabled bearer , priority 0 [ 332.787031][T14597] syzkaller0: entered promiscuous mode [ 332.798965][T14597] syzkaller0: entered allmulticast mode [ 332.831404][T14595] batman_adv: batadv0: Adding interface: dummy0 [ 332.851372][T14595] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 332.916438][T14594] tipc: Resetting bearer [ 332.993679][T14594] tipc: Disabling bearer [ 333.026033][T14609] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.196894][T14618] syzkaller1: entered promiscuous mode [ 333.218794][T14618] syzkaller1: entered allmulticast mode [ 333.246250][T14623] netlink: 'syz.4.2293': attribute type 16 has an invalid length. [ 333.255852][T14618] netlink: 'syz.3.2292': attribute type 32 has an invalid length. [ 333.257005][T14625] IPVS: ip_vs_add_dest(): server weight less than zero [ 333.274333][T14618] __nla_validate_parse: 6 callbacks suppressed [ 333.274350][T14618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'. [ 333.429948][T14618] bond12: Setting coupled_control to off (0) [ 334.300077][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 334.324762][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 334.611444][T14676] netlink: 'syz.2.2310': attribute type 1 has an invalid length. [ 334.916425][T14676] bond11: (slave gretap3): making interface the new active one [ 334.951848][T14676] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 335.593821][T14744] netlink: 'syz.2.2329': attribute type 3 has an invalid length. [ 335.603542][T14744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2329'. [ 335.661949][ T11] block nbd4: Possible stuck request ffff88802744e000: control (read@0,1024B). Runtime 120 seconds [ 335.673352][ T11] block nbd4: Possible stuck request ffff88802744e1c0: control (read@1024,1024B). Runtime 120 seconds [ 335.685434][ T11] block nbd4: Possible stuck request ffff88802744e380: control (read@2048,1024B). Runtime 120 seconds [ 335.697621][ T11] block nbd4: Possible stuck request ffff88802744e540: control (read@3072,1024B). Runtime 120 seconds [ 335.840116][T14746] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2330'. [ 336.163365][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2337'. [ 336.187436][T14765] syzkaller1: entered promiscuous mode [ 336.208249][T14765] syzkaller1: entered allmulticast mode [ 336.483589][T14793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2342'. [ 336.515092][T14793] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2342'. [ 336.587657][T14801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2344'. [ 336.700837][T14808] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.721035][T14811] FAULT_INJECTION: forcing a failure. [ 336.721035][T14811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.765252][T14811] CPU: 1 UID: 0 PID: 14811 Comm: syz.4.2347 Not tainted syzkaller #0 PREEMPT(full) [ 336.765275][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.765282][T14811] Call Trace: [ 336.765288][T14811] [ 336.765295][T14811] dump_stack_lvl+0xe8/0x150 [ 336.765318][T14811] should_fail_ex+0x412/0x560 [ 336.765336][T14811] _copy_to_user+0x31/0xb0 [ 336.765354][T14811] simple_read_from_buffer+0xe1/0x170 [ 336.765374][T14811] proc_fail_nth_read+0x1bb/0x230 [ 336.765394][T14811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.765412][T14811] ? rw_verify_area+0x2a6/0x4d0 [ 336.765428][T14811] ? tun_chr_write_iter+0xe0/0x200 [ 336.765440][T14811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.765456][T14811] vfs_read+0x20c/0xa70 [ 336.765477][T14811] ? __pfx___mutex_lock+0x10/0x10 [ 336.765493][T14811] ? __pfx_vfs_read+0x10/0x10 [ 336.765511][T14811] ? __fget_files+0x2a/0x420 [ 336.765530][T14811] ? __fget_files+0x3a0/0x420 [ 336.765544][T14811] ? __fget_files+0x2a/0x420 [ 336.765565][T14811] ksys_read+0x150/0x270 [ 336.765585][T14811] ? __pfx_ksys_read+0x10/0x10 [ 336.765612][T14811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.765629][T14811] do_syscall_64+0x174/0x580 [ 336.765644][T14811] ? trace_irq_disable+0x3b/0x140 [ 336.765664][T14811] ? clear_bhb_loop+0x40/0x90 [ 336.765683][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.765698][T14811] RIP: 0033:0x7f647995d68e [ 336.765713][T14811] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 336.765725][T14811] RSP: 002b:00007f6477bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.765742][T14811] RAX: ffffffffffffffda RBX: 00007f6477bf66c0 RCX: 00007f647995d68e [ 336.765752][T14811] RDX: 000000000000000f RSI: 00007f6477bf60a0 RDI: 0000000000000007 [ 336.765761][T14811] RBP: 00007f6477bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 336.765770][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.765779][T14811] R13: 00007f6479c16128 R14: 00007f6479c16090 R15: 00007ffebf668328 [ 336.765804][T14811] [ 336.790723][T14812] netlink: 732 bytes leftover after parsing attributes in process `syz.3.2348'. [ 336.914259][T14821] netlink: 'syz.3.2348': attribute type 10 has an invalid length. [ 337.043187][T14821] batman_adv: batadv0: Removing interface: – [ 337.274504][T14828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.364725][T14841] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 337.617500][T14850] nbd: nbd2 already in use [ 337.628790][T14850] block nbd2: NBD_DISCONNECT [ 337.651049][T14850] block nbd2: Send disconnect failed -32 [ 337.672132][T14850] block nbd2: shutting down sockets [ 337.752190][T14857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.313129][T14893] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 338.382304][T14897] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.393705][T14898] bridge_slave_0: entered promiscuous mode [ 338.411304][T14898] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 338.551568][T14909] __nla_validate_parse: 4 callbacks suppressed [ 338.551586][T14909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2376'. [ 338.594869][T14916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2377'. [ 338.624669][T14916] veth1_to_team: entered promiscuous mode [ 338.642067][T14916] veth1_to_team: left promiscuous mode [ 338.665072][T14917] syzkaller0: entered promiscuous mode [ 338.673798][T14917] syzkaller0: entered allmulticast mode [ 338.813565][T14917] sctp: [Deprecated]: syz.3.2378 (pid 14917) Use of int in max_burst socket option. [ 338.813565][T14917] Use struct sctp_assoc_value instead [ 338.956797][T14927] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2383'. [ 339.067627][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2384'. [ 339.087289][T14928] syzkaller0: entered promiscuous mode [ 339.093543][T14928] syzkaller0: entered allmulticast mode [ 339.104438][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 339.806780][T14947] netlink: 'syz.3.2387': attribute type 1 has an invalid length. [ 339.839365][T14949] netlink: 'syz.1.2388': attribute type 16 has an invalid length. [ 343.530407][T14947] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 343.911215][T14978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2395'. [ 344.262185][T14993] netlink: 'syz.2.2399': attribute type 1 has an invalid length. [ 344.694813][T15013] netlink: 'syz.0.2403': attribute type 14 has an invalid length. [ 344.975202][T15022] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2406'. [ 345.000452][T15020] tipc: Enabled bearer , priority 0 [ 345.276444][T15023] syzkaller0: entered promiscuous mode [ 345.282330][T15023] syzkaller0: entered allmulticast mode [ 345.288761][T15023] tipc: Resetting bearer [ 345.542053][T15015] tipc: Resetting bearer [ 348.612699][T15015] tipc: Disabling bearer [ 348.624819][T11926] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.633611][T11926] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.656980][T10749] tipc: Node number set to 1838872820 [ 348.678630][T11926] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.719495][T11926] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.820148][T15055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2416'. [ 348.916889][T15060] syzkaller1: entered promiscuous mode [ 348.923715][T15065] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 348.931837][T15060] syzkaller1: entered allmulticast mode [ 348.964026][T15067] netlink: 'syz.4.2415': attribute type 1 has an invalid length. [ 349.006414][T15067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2415'. [ 349.126439][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2419'. [ 349.164263][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2420'. [ 349.201298][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2420'. [ 349.966198][T15105] netlink: 'syz.1.2425': attribute type 5 has an invalid length. [ 350.306228][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2427'. [ 350.629492][T15123] Bluetooth: MGMT ver 1.23 [ 350.658992][T15125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2432'. [ 350.686279][T15125] netlink: 'syz.0.2432': attribute type 1 has an invalid length. [ 350.737125][T15125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2432'. [ 350.882063][T15133] netlink: 'syz.0.2433': attribute type 1 has an invalid length. [ 351.002861][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'. [ 351.013023][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2435'. [ 351.103274][T15118] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2430'. [ 351.596228][T15153] netlink: 'syz.4.2438': attribute type 3 has an invalid length. [ 352.347150][T15204] batman_adv: batadv0: Interface deactivated: vlan0 [ 352.631369][T15219] syzkaller1: entered promiscuous mode [ 352.650571][T15219] syzkaller1: entered allmulticast mode [ 352.713160][T15223] syzkaller0: entered promiscuous mode [ 352.729295][T15223] syzkaller0: entered allmulticast mode [ 352.949744][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 352.985445][T15239] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 353.164939][T15250] FAULT_INJECTION: forcing a failure. [ 353.164939][T15250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.180607][T15250] CPU: 0 UID: 0 PID: 15250 Comm: syz.3.2469 Not tainted syzkaller #0 PREEMPT(full) [ 353.180630][T15250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 353.180639][T15250] Call Trace: [ 353.180645][T15250] [ 353.180652][T15250] dump_stack_lvl+0xe8/0x150 [ 353.180675][T15250] should_fail_ex+0x412/0x560 [ 353.180699][T15250] _copy_from_iter+0x1d3/0x1670 [ 353.180720][T15250] ? rcu_is_watching+0x15/0xb0 [ 353.180741][T15250] ? __pfx__copy_from_iter+0x10/0x10 [ 353.180762][T15250] ? netlink_sendmsg+0x650/0xb40 [ 353.180779][T15250] ? skb_put+0x11b/0x210 [ 353.180798][T15250] netlink_sendmsg+0x6c0/0xb40 [ 353.180821][T15250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.180840][T15250] ? aa_sock_msg_perm+0xf1/0x1b0 [ 353.180862][T15250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 353.180884][T15250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.180898][T15250] sock_write_iter+0x49b/0x4f0 [ 353.180918][T15250] ? __pfx_sock_write_iter+0x10/0x10 [ 353.180943][T15250] ? bpf_lsm_file_permission+0x9/0x20 [ 353.180966][T15250] ? security_file_permission+0x75/0x260 [ 353.180991][T15250] vfs_write+0x61d/0xb90 [ 353.181018][T15250] ? __pfx_vfs_write+0x10/0x10 [ 353.181045][T15250] ? __fget_files+0x2a/0x420 [ 353.181071][T15250] ksys_write+0x150/0x270 [ 353.181094][T15250] ? __pfx_ksys_write+0x10/0x10 [ 353.181122][T15250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.181139][T15250] do_syscall_64+0x174/0x580 [ 353.181154][T15250] ? trace_irq_disable+0x3b/0x140 [ 353.181176][T15250] ? clear_bhb_loop+0x40/0x90 [ 353.181195][T15250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.181211][T15250] RIP: 0033:0x7fb9c179ce59 [ 353.181226][T15250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.181239][T15250] RSP: 002b:00007fb9c261e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 353.181255][T15250] RAX: ffffffffffffffda RBX: 00007fb9c1a15fa0 RCX: 00007fb9c179ce59 [ 353.181266][T15250] RDX: 0000000000000027 RSI: 0000200000005c00 RDI: 0000000000000004 [ 353.181276][T15250] RBP: 00007fb9c261e090 R08: 0000000000000000 R09: 0000000000000000 [ 353.181285][T15250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.181294][T15250] R13: 00007fb9c1a16038 R14: 00007fb9c1a15fa0 R15: 00007ffe14f4e618 [ 353.181319][T15250] [ 353.918776][T15276] netlink: 'syz.3.2474': attribute type 62 has an invalid length. [ 354.058164][T15280] netlink: 'syz.4.2475': attribute type 1 has an invalid length. [ 354.087954][T15280] __nla_validate_parse: 36 callbacks suppressed [ 354.087972][T15280] netlink: 276 bytes leftover after parsing attributes in process `syz.4.2475'. [ 354.331103][T15285] bond11: left promiscuous mode [ 354.352461][T15285] erspan1: left promiscuous mode [ 354.407529][T15266] infiniband sy{1: set down [ 354.417609][T15266] infiniband sy{1: added bond0 [ 354.524879][T15295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.534705][T15266] smbdirect: ib_dev[sy{1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 354.577262][T15295] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.587286][T15266] smbdirect: ib_dev[sy{1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 354.628072][T15266] smbdirect: ib_dev[sy{1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 354.635805][T15295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.750328][T15266] RDS/IB: sy{1: added [ 354.778501][T15266] smc: adding ib device sy{1 with port count 1 [ 354.800794][T15266] smc: ib device sy{1 port 1 has no pnetid [ 354.882986][T15303] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 354.896309][T15303] bond6 (unregistering): Released all slaves [ 354.989586][ T182] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 355.146215][T15308] syzkaller1: entered promiscuous mode [ 355.154882][T15308] syzkaller1: entered allmulticast mode [ 355.378784][T15330] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2481'. [ 355.514060][T15330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2481'. [ 355.572224][T15334] netlink: 'syz.4.2485': attribute type 1 has an invalid length. [ 355.626433][T15334] bond6: entered promiscuous mode [ 355.631455][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2485'. [ 355.650256][T15334] 8021q: adding VLAN 0 to HW filter on device bond6 [ 355.768065][T15343] netlink: 105 bytes leftover after parsing attributes in process `syz.4.2487'. [ 356.047393][T15358] sctp: [Deprecated]: syz.3.2490 (pid 15358) Use of int in max_burst socket option. [ 356.047393][T15358] Use struct sctp_assoc_value instead [ 356.311643][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2494'. [ 356.741725][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'. [ 357.114814][T15407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2504'. [ 357.180732][T15413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2505'. [ 357.274223][T15418] netlink: 'syz.2.2504': attribute type 1 has an invalid length. [ 357.604745][T15435] netlink: 'syz.2.2508': attribute type 30 has an invalid length. [ 357.931494][T15440] syz.0.2512 (15440) used obsolete PPPIOCDETACH ioctl [ 357.978227][T15440] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2512'. [ 358.921136][T15496] bond7: option packets_per_slave: invalid value (18446744073709551609) [ 358.948401][T15496] bond7: option packets_per_slave: allowed values 0 - 65535 [ 359.030737][T15496] bond7 (unregistering): Released all slaves [ 359.179896][T15515] __nla_validate_parse: 4 callbacks suppressed [ 359.179915][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2531'. [ 359.247913][T15519] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2534'. [ 359.316435][T15524] batman_adv: batadv0: Removing interface: dummy0 [ 359.397905][T15524] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 359.769804][T15551] netlink: 'syz.4.2546': attribute type 2 has an invalid length. [ 359.791255][T15551] netlink: 'syz.4.2546': attribute type 2 has an invalid length. [ 359.832689][T15549] netlink: 'syz.3.2544': attribute type 1 has an invalid length. [ 360.005214][T15564] nbd: must specify at least one socket [ 360.297558][T15574] macsec0: entered promiscuous mode [ 360.350891][T15572] macsec0: left promiscuous mode [ 360.378538][T15592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2554'. [ 360.398484][T15593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2554'. [ 360.492015][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2554'. [ 360.521840][T15599] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2555'. [ 360.701321][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2558'. [ 360.883212][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2560'. [ 360.998452][T15626] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2562'. [ 361.155698][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2564'. [ 361.427047][T15653] macsec0: entered promiscuous mode [ 361.523098][T15639] macsec0: left promiscuous mode [ 361.645909][T15674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.679941][T15678] netlink: 'syz.4.2574': attribute type 1 has an invalid length. [ 361.784815][T15678] bond7: entered promiscuous mode [ 361.793499][T15678] bond7: entered allmulticast mode [ 361.800338][T15678] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.263215][T15705] macsec0: entered promiscuous mode [ 362.317916][T15704] macsec0: left promiscuous mode [ 362.531859][T15737] bond11: entered promiscuous mode [ 362.537612][T15737] 8021q: adding VLAN 0 to HW filter on device bond11 [ 363.005652][T15766] nbd: couldn't find device at index 0 [ 363.274165][T15778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 363.281533][T15778] IPv6: NLM_F_CREATE should be set when creating new route [ 363.288794][T15778] IPv6: NLM_F_CREATE should be set when creating new route [ 363.312847][T15775] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 363.954083][T15812] veth1: entered promiscuous mode [ 364.227331][T15827] __nla_validate_parse: 14 callbacks suppressed [ 364.227349][T15827] netlink: 1335 bytes leftover after parsing attributes in process `syz.4.2614'. [ 364.558356][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2619'. [ 364.571367][T15844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2619'. [ 364.603167][T15844] ip6gre3: entered promiscuous mode [ 364.608515][T15844] ip6gre3: entered allmulticast mode [ 364.625805][T15844] netlink: 'syz.3.2619': attribute type 6 has an invalid length. [ 364.642990][T15844] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2619'. [ 364.679901][T15844] syzkaller0: entered promiscuous mode [ 364.685770][T15844] syzkaller0: entered allmulticast mode [ 365.653572][T15899] netlink: 'syz.2.2629': attribute type 10 has an invalid length. [ 365.667157][T15899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2629'. [ 365.742612][ T11] block nbd4: Possible stuck request ffff88802744e000: control (read@0,1024B). Runtime 150 seconds [ 365.754215][ T11] block nbd4: Possible stuck request ffff88802744e1c0: control (read@1024,1024B). Runtime 150 seconds [ 365.765943][ T11] block nbd4: Possible stuck request ffff88802744e380: control (read@2048,1024B). Runtime 150 seconds [ 365.777631][ T11] block nbd4: Possible stuck request ffff88802744e540: control (read@3072,1024B). Runtime 150 seconds [ 365.828539][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 365.850835][ T7800] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.860046][T15919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 365.869834][ T7800] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.879419][ T7800] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.892556][ T7800] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.905467][T15921] netlink: 'syz.4.2635': attribute type 3 has an invalid length. [ 366.033492][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2638'. [ 366.045776][T15930] netlink: 'syz.1.2638': attribute type 22 has an invalid length. [ 366.054338][T15930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2638'. [ 366.191976][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 366.202390][T15939] syz.3.2640: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 366.219024][T15939] CPU: 1 UID: 0 PID: 15939 Comm: syz.3.2640 Not tainted syzkaller #0 PREEMPT(full) [ 366.219076][T15939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 366.219106][T15939] Call Trace: [ 366.219116][T15939] [ 366.219124][T15939] dump_stack_lvl+0xe8/0x150 [ 366.219148][T15939] warn_alloc+0x249/0x340 [ 366.219173][T15939] ? stack_trace_save+0xa9/0x100 [ 366.219199][T15939] ? __pfx_warn_alloc+0x10/0x10 [ 366.219229][T15939] ? kasan_save_track+0x4f/0x80 [ 366.219249][T15939] ? kasan_save_track+0x3e/0x80 [ 366.219268][T15939] ? __kasan_kmalloc+0x93/0xb0 [ 366.219287][T15939] ? __kmalloc_cache_noprof+0x31c/0x660 [ 366.219307][T15939] ? xskq_create+0x56/0x170 [ 366.219329][T15939] ? xsk_setsockopt+0x54c/0x990 [ 366.219347][T15939] ? do_sock_setsockopt+0x17c/0x1b0 [ 366.219364][T15939] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 366.219380][T15939] ? do_syscall_64+0x174/0x580 [ 366.219398][T15939] __vmalloc_node_range_noprof+0x132/0x1750 [ 366.219447][T15939] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 366.219474][T15939] ? __kasan_kmalloc+0x93/0xb0 [ 366.219503][T15939] vmalloc_user_noprof+0xad/0xe0 [ 366.219523][T15939] ? xskq_create+0xbf/0x170 [ 366.219545][T15939] xskq_create+0xbf/0x170 [ 366.219570][T15939] xsk_init_queue+0x8a/0xe0 [ 366.219592][T15939] xsk_setsockopt+0x54c/0x990 [ 366.219614][T15939] ? __pfx_xsk_setsockopt+0x10/0x10 [ 366.219633][T15939] ? __pfx_aa_sk_perm+0x10/0x10 [ 366.219657][T15939] ? aa_sock_opt_perm+0xff/0x1a0 [ 366.219684][T15939] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 366.219704][T15939] ? __pfx_xsk_setsockopt+0x10/0x10 [ 366.219725][T15939] do_sock_setsockopt+0x17c/0x1b0 [ 366.219745][T15939] __x64_sys_setsockopt+0x13d/0x1b0 [ 366.219764][T15939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.219782][T15939] do_syscall_64+0x174/0x580 [ 366.219808][T15939] ? trace_irq_disable+0x3b/0x140 [ 366.219832][T15939] ? clear_bhb_loop+0x40/0x90 [ 366.219852][T15939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.219868][T15939] RIP: 0033:0x7fb9c179ce59 [ 366.219884][T15939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.219897][T15939] RSP: 002b:00007fb9c261e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 366.219915][T15939] RAX: ffffffffffffffda RBX: 00007fb9c1a15fa0 RCX: 00007fb9c179ce59 [ 366.219928][T15939] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 366.219937][T15939] RBP: 00007fb9c1832d6f R08: 0000000000000004 R09: 0000000000000000 [ 366.219946][T15939] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.219955][T15939] R13: 00007fb9c1a16038 R14: 00007fb9c1a15fa0 R15: 00007ffe14f4e618 [ 366.219976][T15939] [ 366.219995][T15939] Mem-Info: [ 366.386606][T15941] netlink: 'syz.3.2640': attribute type 10 has an invalid length. [ 366.393597][T15939] active_anon:6024 inactive_anon:0 isolated_anon:0 [ 366.393597][T15939] active_file:3281 inactive_file:40071 isolated_file:0 [ 366.393597][T15939] unevictable:768 dirty:229 writeback:0 [ 366.393597][T15939] slab_reclaimable:11814 slab_unreclaimable:961062 [ 366.393597][T15939] mapped:29718 shmem:1305 pagetables:1325 [ 366.393597][T15939] sec_pagetables:0 bounce:0 [ 366.393597][T15939] kernel_misc_reclaimable:0 [ 366.393597][T15939] free:444698 free_pcp:25797 free_cma:0 [ 366.396657][T15941] openvswitch: netlink: Message has 2 unknown bytes. [ 366.400258][T15939] Node 0 active_anon:24096kB inactive_anon:0kB active_file:13124kB inactive_file:160084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118872kB dirty:916kB writeback:0kB shmem:3684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14672kB pagetables:5152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 366.407148][T15941] netlink: 'syz.3.2640': attribute type 10 has an invalid length. [ 366.409532][T15939] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 366.409584][T15939] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 366.409653][T15939] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 366.409693][T15939] Node 0 DMA32 free:366344kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24096kB inactive_anon:0kB active_file:13124kB inactive_file:160084kB unevictable:1536kB writepending:916kB zspages:0kB present:3129332kB managed:2552596kB mlocked:0kB bounce:0kB free_pcp:39344kB local_pcp:14792kB free_cma:0kB [ 366.409742][T15939] lowmem_reserve[]: 0 0 0 0 0 [ 366.409787][T15939] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 366.409837][T15939] lowmem_reserve[]: 0 0 0 0 0 [ 366.409876][T15939] Node 1 Normal free:1401184kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:63840kB local_pcp:33764kB free_cma:0kB [ 366.409929][T15939] lowmem_reserve[]: 0 0 0 0 0 [ 366.409966][T15939] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 366.422643][T15941] bond0: (slave –): Enslaving as an active interface with an up link [ 366.440103][T15939] 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 366.440172][T15939] Node 0 DMA32: 3766*4kB (UME) 3700*8kB (UME) 1587*16kB (UM) 297*32kB (UME) 59*64kB (UME) 69*128kB (UM) 181*256kB (UME) 113*512kB (UME) 66*1024kB (UM) 50*2048kB (UM) 0*4096kB = 366344kB [ 366.440330][T15939] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 366.440432][T15939] Node 1 Normal: 4*4kB (UM) 12*8kB (UM) 9*16kB (UM) 11*32kB (UM) 14*64kB (UM) 11*128kB (UM) 10*256kB (UM) 10*512kB (UM) 10*1024kB (UM) 8*2048kB (U) 333*4096kB (UM) = 1401184kB [ 366.440607][T15939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.440621][T15939] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.440634][T15939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.440647][T15939] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 366.440659][T15939] 44653 total pagecache pages [ 366.440672][T15939] 0 pages in swap cache [ 366.440679][T15939] Free swap = 124996kB [ 366.440687][T15939] Total swap = 124996kB [ 366.440694][T15939] 2097051 pages RAM [ 366.440701][T15939] 0 pages HighMem/MovableOnly [ 366.440709][T15939] 427119 pages reserved [ 366.440716][T15939] 0 pages cma reserved [ 367.147856][ T7800] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 367.156265][ T7800] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 367.165809][ T7800] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 367.175193][T11927] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 369.090601][ T5000] udevd[5000]: worker [7261] /devices/virtual/block/nbd4 is taking a long time [ 378.541902][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.288468][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.302287][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.313777][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.325738][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.333939][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.364545][ T5636] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.382204][ T5636] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.391668][ T5636] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.402068][ T5636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.410620][ T5636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.421303][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.433341][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.441209][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.455559][ T4949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.467586][ T4949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.480750][ T5636] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.499981][ T5636] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.520776][ T5642] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.537794][ T5642] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.546008][ T5642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.272641][ T5642] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 382.286767][ T5642] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 382.297845][ T5642] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 382.310484][ T5642] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 382.320286][ T5642] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 382.802656][T15976] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.811456][T15976] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.819858][T15976] bridge_slave_0: entered allmulticast mode [ 382.827879][T15976] bridge_slave_0: entered promiscuous mode [ 382.851197][T15976] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.858768][T15976] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.866517][T15976] bridge_slave_1: entered allmulticast mode [ 382.874781][T15976] bridge_slave_1: entered promiscuous mode [ 382.930682][T15976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.953010][T15976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.056744][T15976] team0: Port device team_slave_0 added [ 383.087388][T15976] team0: Port device team_slave_1 added [ 383.210877][T15976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.217974][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.244534][T15976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.258617][T15976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.266269][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.292905][T15976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.316455][ T5638] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 383.333515][ T5638] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 383.353103][ T5638] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 383.366593][ T5638] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 383.377660][ T5638] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 383.407537][T15976] hsr_slave_0: entered promiscuous mode [ 383.417958][T15976] hsr_slave_1: entered promiscuous mode [ 383.425020][T15976] debugfs: 'hsr0' already exists in 'hsr' [ 383.431368][T15976] Cannot create hsr debugfs directory [ 383.501178][ T5638] Bluetooth: hci6: command tx timeout [ 383.580769][ T5638] Bluetooth: hci5: command tx timeout [ 383.662593][ T5638] Bluetooth: hci7: command tx timeout [ 383.836485][T15974] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.844678][T15974] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.852443][T15974] bridge_slave_0: entered allmulticast mode [ 383.860718][T15974] bridge_slave_0: entered promiscuous mode [ 383.898468][T15974] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.906718][T15974] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.914249][T15974] bridge_slave_1: entered allmulticast mode [ 383.921395][T15974] bridge_slave_1: entered promiscuous mode [ 384.064832][T15974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.082549][T15972] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.091090][T15972] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.098347][T15972] bridge_slave_0: entered allmulticast mode [ 384.105933][T15972] bridge_slave_0: entered promiscuous mode [ 384.115533][T15974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.179550][T15972] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.190488][T15972] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.197788][T15972] bridge_slave_1: entered allmulticast mode [ 384.206825][T15972] bridge_slave_1: entered promiscuous mode [ 384.283518][T15974] team0: Port device team_slave_0 added [ 384.341794][T15974] team0: Port device team_slave_1 added [ 384.379243][ T5638] Bluetooth: hci8: command tx timeout [ 384.392038][T15972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.433527][T15972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.465417][T15974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.472502][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.498528][T15974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.527852][T15972] team0: Port device team_slave_0 added [ 384.534551][T15974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.542075][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.569616][T15974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.591423][T15972] team0: Port device team_slave_1 added [ 384.645667][T15972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.652790][T15972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.678761][T15972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.704645][T15972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.711650][T15972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.737806][T15972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.765564][T16005] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.772967][T16005] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.780556][T16005] bridge_slave_0: entered allmulticast mode [ 384.787594][T16005] bridge_slave_0: entered promiscuous mode [ 384.814089][T16005] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.821372][T16005] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.828673][T16005] bridge_slave_1: entered allmulticast mode [ 384.836052][T16005] bridge_slave_1: entered promiscuous mode [ 384.862620][T15974] hsr_slave_0: entered promiscuous mode [ 384.869783][T15974] hsr_slave_1: entered promiscuous mode [ 384.875983][T15974] debugfs: 'hsr0' already exists in 'hsr' [ 384.882233][T15974] Cannot create hsr debugfs directory [ 384.912926][T15972] hsr_slave_0: entered promiscuous mode [ 384.919723][T15972] hsr_slave_1: entered promiscuous mode [ 384.925970][T15972] debugfs: 'hsr0' already exists in 'hsr' [ 384.932156][T15972] Cannot create hsr debugfs directory [ 384.972013][T16005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.006507][T16005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.080436][T16005] team0: Port device team_slave_0 added [ 385.106598][T16005] team0: Port device team_slave_1 added [ 385.169894][T16005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.176940][T16005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.203858][T16005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.227117][T16005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.234242][T16005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.260886][T16005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.419373][ T5638] Bluetooth: hci9: command tx timeout [ 385.424730][T16005] hsr_slave_0: entered promiscuous mode [ 385.432143][T16005] hsr_slave_1: entered promiscuous mode [ 385.438658][T16005] debugfs: 'hsr0' already exists in 'hsr' [ 385.444778][T16005] Cannot create hsr debugfs directory [ 385.580449][ T5638] Bluetooth: hci6: command tx timeout [ 385.595665][T16026] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.603609][T16026] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.611546][T16026] bridge_slave_0: entered allmulticast mode [ 385.618653][T16026] bridge_slave_0: entered promiscuous mode [ 385.639412][T16026] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.647040][T16026] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.654803][T16026] bridge_slave_1: entered allmulticast mode [ 385.660993][ T5638] Bluetooth: hci5: command tx timeout [ 385.667645][T16026] bridge_slave_1: entered promiscuous mode [ 385.751402][ T5638] Bluetooth: hci7: command tx timeout [ 385.768391][T16026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.782948][T16026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.840173][T16026] team0: Port device team_slave_0 added [ 385.848899][T16026] team0: Port device team_slave_1 added [ 385.896290][T16026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.903614][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.930051][T16026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.943058][T16026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.950763][T16026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.977215][T16026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.045984][T16026] hsr_slave_0: entered promiscuous mode [ 386.052815][T16026] hsr_slave_1: entered promiscuous mode [ 386.059936][T16026] debugfs: 'hsr0' already exists in 'hsr' [ 386.065736][T16026] Cannot create hsr debugfs directory [ 386.459631][ T5638] Bluetooth: hci8: command tx timeout [ 387.517110][ T5638] Bluetooth: hci9: command tx timeout [ 387.659097][ T5638] Bluetooth: hci6: command tx timeout [ 387.739067][ T5638] Bluetooth: hci5: command tx timeout [ 387.819234][ T5638] Bluetooth: hci7: command tx timeout [ 388.539408][ T5638] Bluetooth: hci8: command tx timeout [ 389.580042][ T5638] Bluetooth: hci9: command tx timeout [ 389.749204][ T5638] Bluetooth: hci6: command tx timeout [ 389.819218][ T5638] Bluetooth: hci5: command tx timeout [ 389.899089][ T5638] Bluetooth: hci7: command tx timeout [ 390.629094][ T5638] Bluetooth: hci8: command tx timeout [ 391.659543][ T5638] Bluetooth: hci9: command tx timeout [ 393.899338][ C0] ip6_tunnel: 0 xmit: Local address not yet configured! [ 395.276990][ T5000] udevd[5000]: worker [7261] /devices/virtual/block/nbd4 timeout; kill it [ 395.286912][ T5000] udevd[5000]: seq 15759 '/devices/virtual/block/nbd4' killed [ 395.819961][ T11] block nbd4: Possible stuck request ffff88802744e000: control (read@0,1024B). Runtime 180 seconds [ 395.831158][ T11] block nbd4: Possible stuck request ffff88802744e1c0: control (read@1024,1024B). Runtime 180 seconds [ 395.842649][ T11] block nbd4: Possible stuck request ffff88802744e380: control (read@2048,1024B). Runtime 180 seconds [ 395.855503][ T11] block nbd4: Possible stuck request ffff88802744e540: control (read@3072,1024B). Runtime 180 seconds [ 404.139602][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 425.899871][ T11] block nbd4: Possible stuck request ffff88802744e000: control (read@0,1024B). Runtime 210 seconds [ 425.911161][ T11] block nbd4: Possible stuck request ffff88802744e1c0: control (read@1024,1024B). Runtime 210 seconds [ 425.922618][ T11] block nbd4: Possible stuck request ffff88802744e380: control (read@2048,1024B). Runtime 210 seconds [ 425.934108][ T11] block nbd4: Possible stuck request ffff88802744e540: control (read@3072,1024B). Runtime 210 seconds [ 439.980559][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.319180][ T5642] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 441.335300][ T5642] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 441.348355][ T5642] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 441.356714][ T5642] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 441.365797][ T5642] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 441.445961][ T5638] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 441.475008][ T4949] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 441.487362][ T5638] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 441.499800][ T4949] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 441.512284][ T5638] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 441.529396][ T5638] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 441.530600][ T4949] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 441.545786][ T5638] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 441.548771][ T4949] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 441.562382][ T5638] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 442.352074][ T5636] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 442.371700][ T5636] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 442.383758][ T5636] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 442.393500][ T5636] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 442.401348][ T5636] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 442.798991][T16070] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.806491][T16070] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.814642][T16070] bridge_slave_0: entered allmulticast mode [ 442.825048][T16070] bridge_slave_0: entered promiscuous mode [ 442.855072][T16070] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.862769][T16070] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.870149][T16070] bridge_slave_1: entered allmulticast mode [ 442.877973][T16070] bridge_slave_1: entered promiscuous mode [ 442.962559][T16070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.976006][T16070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.049962][T16070] team0: Port device team_slave_0 added [ 443.075559][T16070] team0: Port device team_slave_1 added [ 443.129623][T16070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.136624][T16070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.162666][T16070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.197935][T16070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.205361][T16070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.231963][T16070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.397381][ T5636] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 443.411737][ T5636] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 443.420866][ T5638] Bluetooth: hci10: command tx timeout [ 443.430101][ T5636] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 443.442106][ T5636] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 443.450004][ T5636] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 443.503931][T16070] hsr_slave_0: entered promiscuous mode [ 443.511680][T16070] hsr_slave_1: entered promiscuous mode [ 443.518310][T16070] debugfs: 'hsr0' already exists in 'hsr' [ 443.526228][T16070] Cannot create hsr debugfs directory [ 443.549937][T16076] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.557183][T16076] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.565798][T16076] bridge_slave_0: entered allmulticast mode [ 443.574847][T16076] bridge_slave_0: entered promiscuous mode [ 443.610776][T16076] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.618668][T16076] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.626854][T16076] bridge_slave_1: entered allmulticast mode [ 443.634935][T16076] bridge_slave_1: entered promiscuous mode [ 443.671144][ T5636] Bluetooth: hci12: command tx timeout [ 443.671154][ T4949] Bluetooth: hci11: command tx timeout [ 443.732715][T16076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.789781][T16076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.897066][T16076] team0: Port device team_slave_0 added [ 443.912125][T16076] team0: Port device team_slave_1 added [ 444.017395][T16076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.024615][T16076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.051263][T16076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.075040][T16073] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.082597][T16073] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.090474][T16073] bridge_slave_0: entered allmulticast mode [ 444.097560][T16073] bridge_slave_0: entered promiscuous mode [ 444.112620][T16076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.120142][T16076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.146487][T16076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.169885][T16073] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.177074][T16073] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.184592][T16073] bridge_slave_1: entered allmulticast mode [ 444.192049][T16073] bridge_slave_1: entered promiscuous mode [ 444.262996][T16073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.334292][T16073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.459855][ T5636] Bluetooth: hci13: command tx timeout [ 444.463212][T16076] hsr_slave_0: entered promiscuous mode [ 444.473549][T16076] hsr_slave_1: entered promiscuous mode [ 444.480229][T16076] debugfs: 'hsr0' already exists in 'hsr' [ 444.485984][T16076] Cannot create hsr debugfs directory [ 444.504883][T16073] team0: Port device team_slave_0 added [ 444.548383][T16073] team0: Port device team_slave_1 added [ 444.641672][T16073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.648729][T16073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.677266][T16073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.712667][T16073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.720356][T16073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.747247][T16073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.855341][T16103] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.864144][T16103] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.872970][T16103] bridge_slave_0: entered allmulticast mode [ 444.881157][T16103] bridge_slave_0: entered promiscuous mode [ 444.908114][T16103] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.924967][T16103] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.932736][T16103] bridge_slave_1: entered allmulticast mode [ 444.941627][T16103] bridge_slave_1: entered promiscuous mode [ 444.977606][T16073] hsr_slave_0: entered promiscuous mode [ 444.984561][T16073] hsr_slave_1: entered promiscuous mode [ 444.991471][T16073] debugfs: 'hsr0' already exists in 'hsr' [ 444.997210][T16073] Cannot create hsr debugfs directory [ 445.072992][T16103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.117264][T16103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.212925][T16103] team0: Port device team_slave_0 added [ 445.243258][T16103] team0: Port device team_slave_1 added [ 445.291631][T16103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.298636][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.324683][T16103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.359970][T16103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.366958][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.394401][T16103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.497506][T16103] hsr_slave_0: entered promiscuous mode [ 445.503201][ T5636] Bluetooth: hci10: command tx timeout [ 445.510015][ T5636] Bluetooth: hci14: command tx timeout [ 445.516664][T16103] hsr_slave_1: entered promiscuous mode [ 445.523517][T16103] debugfs: 'hsr0' already exists in 'hsr' [ 445.530196][T16103] Cannot create hsr debugfs directory [ 445.683259][T16126] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.690962][T16126] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.698203][T16126] bridge_slave_0: entered allmulticast mode [ 445.706457][T16126] bridge_slave_0: entered promiscuous mode [ 445.728063][T16126] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.736136][T16126] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.744747][ T5636] Bluetooth: hci11: command tx timeout [ 445.749625][ T5636] Bluetooth: hci12: command tx timeout [ 445.752418][T16126] bridge_slave_1: entered allmulticast mode [ 445.766438][T16126] bridge_slave_1: entered promiscuous mode [ 445.832831][T16126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.863077][T16126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.911655][T16126] team0: Port device team_slave_0 added [ 445.920060][T16126] team0: Port device team_slave_1 added [ 445.962111][T16126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.969510][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.996609][T16126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.009495][T16126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.016460][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.042742][T16126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.093022][T16126] hsr_slave_0: entered promiscuous mode [ 446.100076][T16126] hsr_slave_1: entered promiscuous mode [ 446.106303][T16126] debugfs: 'hsr0' already exists in 'hsr' [ 446.112969][T16126] Cannot create hsr debugfs directory [ 446.539739][ T5636] Bluetooth: hci13: command tx timeout [ 447.589517][ T4949] Bluetooth: hci10: command tx timeout [ 447.591788][ T5636] Bluetooth: hci14: command tx timeout [ 447.819194][ T5636] Bluetooth: hci12: command tx timeout [ 447.819926][ T4949] Bluetooth: hci11: command tx timeout [ 448.619642][ T4949] Bluetooth: hci13: command tx timeout [ 449.659359][ T4949] Bluetooth: hci10: command tx timeout [ 449.669475][ T4949] Bluetooth: hci14: command tx timeout [ 449.909470][ T4949] Bluetooth: hci11: command tx timeout [ 449.909482][ T5636] Bluetooth: hci12: command tx timeout [ 450.699878][ T5636] Bluetooth: hci13: command tx timeout [ 451.739612][ T5636] Bluetooth: hci14: command tx timeout [ 455.980952][ T11] block nbd4: Possible stuck request ffff88802744e000: control (read@0,1024B). Runtime 240 seconds [ 455.992254][ T11] block nbd4: Possible stuck request ffff88802744e1c0: control (read@1024,1024B). Runtime 240 seconds [ 456.003768][ T11] block nbd4: Possible stuck request ffff88802744e380: control (read@2048,1024B). Runtime 240 seconds [ 456.015377][ T11] block nbd4: Possible stuck request ffff88802744e540: control (read@3072,1024B). Runtime 240 seconds [ 475.820427][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 486.062519][ T11] block nbd4: Possible stuck request ffff88802744e000: control (read@0,1024B). Runtime 270 seconds [ 486.073963][ T11] block nbd4: Possible stuck request ffff88802744e1c0: control (read@1024,1024B). Runtime 270 seconds [ 486.085518][ T11] block nbd4: Possible stuck request ffff88802744e380: control (read@2048,1024B). Runtime 270 seconds [ 486.096846][ T11] block nbd4: Possible stuck request ffff88802744e540: control (read@3072,1024B). Runtime 270 seconds [ 501.406373][ T4949] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 501.424568][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.436603][ T4949] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 501.447920][ T4949] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 501.460780][ T5638] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 501.470520][ T5638] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 501.486924][ T5636] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 501.512215][ T5638] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 501.530909][ T5638] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 501.542458][ T5638] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 501.554174][ T5638] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 501.592937][ T4949] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 501.606684][ T4949] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 501.624347][ T4949] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 501.633972][ T4949] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 501.644800][ T4949] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 502.398803][ T4949] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 502.415229][ T4949] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 502.430331][ T4949] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 502.442018][ T4949] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 502.452238][ T4949] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 502.932473][T16165] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.940837][T16165] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.948198][T16165] bridge_slave_0: entered allmulticast mode [ 502.957024][T16165] bridge_slave_0: entered promiscuous mode [ 502.975174][T16165] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.982608][T16165] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.990225][T16165] bridge_slave_1: entered allmulticast mode [ 502.997403][T16165] bridge_slave_1: entered promiscuous mode [ 503.072259][T16165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.101935][T16165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.202812][T16165] team0: Port device team_slave_0 added [ 503.228362][T16165] team0: Port device team_slave_1 added [ 503.323352][T16165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.330713][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.357763][T16165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.371734][T16165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.378718][T16165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.404870][T16165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.570199][T16165] hsr_slave_0: entered promiscuous mode [ 503.576665][T16165] hsr_slave_1: entered promiscuous mode [ 503.582535][ T4949] Bluetooth: hci15: command tx timeout [ 503.584674][T16165] debugfs: 'hsr0' already exists in 'hsr' [ 503.595097][T16165] Cannot create hsr debugfs directory [ 503.605399][T16169] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.612745][T16169] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.620785][T16169] bridge_slave_0: entered allmulticast mode [ 503.627909][T16169] bridge_slave_0: entered promiscuous mode [ 503.649994][T16169] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.658591][T16169] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.665827][ T4949] Bluetooth: hci16: command tx timeout [ 503.673342][T16169] bridge_slave_1: entered allmulticast mode [ 503.681119][T16169] bridge_slave_1: entered promiscuous mode [ 503.741425][ T4949] Bluetooth: hci17: command tx timeout [ 503.747868][T16169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.781789][T16169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.867075][T16169] team0: Port device team_slave_0 added [ 503.896473][T16169] team0: Port device team_slave_1 added [ 503.960327][T16167] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.968311][T16167] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.976371][T16167] bridge_slave_0: entered allmulticast mode [ 503.984684][T16167] bridge_slave_0: entered promiscuous mode [ 503.993166][T16169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.000335][T16169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.027155][T16169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.052221][T16167] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.060321][T16167] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.067641][T16167] bridge_slave_1: entered allmulticast mode [ 504.075389][T16167] bridge_slave_1: entered promiscuous mode [ 504.083580][T16169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.090963][T16169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.117180][T16169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.186264][T16167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.228588][T16167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.326513][T16167] team0: Port device team_slave_0 added [ 504.354231][T16169] hsr_slave_0: entered promiscuous mode [ 504.361604][T16169] hsr_slave_1: entered promiscuous mode [ 504.368173][T16169] debugfs: 'hsr0' already exists in 'hsr' [ 504.374596][T16169] Cannot create hsr debugfs directory [ 504.417530][ T5638] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 504.427764][T16167] team0: Port device team_slave_1 added [ 504.436894][ T5638] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 504.447307][ T5638] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 504.461102][ T5638] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 504.473589][ T5638] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 504.539666][ T5638] Bluetooth: hci18: command tx timeout [ 504.605749][T16167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.613737][T16167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.641457][T16167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.696798][T16167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.705481][T16167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.733375][T16167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.792131][T16196] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.803447][T16196] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.814400][T16196] bridge_slave_0: entered allmulticast mode [ 504.827539][T16196] bridge_slave_0: entered promiscuous mode [ 504.844254][T16196] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.851897][T16196] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.860205][T16196] bridge_slave_1: entered allmulticast mode [ 504.867344][T16196] bridge_slave_1: entered promiscuous mode [ 504.970580][T16196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.985815][T16196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.012704][T16167] hsr_slave_0: entered promiscuous mode [ 505.019565][T16167] hsr_slave_1: entered promiscuous mode [ 505.025843][T16167] debugfs: 'hsr0' already exists in 'hsr' [ 505.031773][T16167] Cannot create hsr debugfs directory [ 505.103952][T16196] team0: Port device team_slave_0 added [ 505.113652][T16196] team0: Port device team_slave_1 added [ 505.250482][T16196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.258093][T16196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.284676][T16196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.299546][T16196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.306617][T16196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.332889][T16196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.494565][T16196] hsr_slave_0: entered promiscuous mode [ 505.501991][T16196] hsr_slave_1: entered promiscuous mode [ 505.508318][T16196] debugfs: 'hsr0' already exists in 'hsr' [ 505.515217][T16196] Cannot create hsr debugfs directory [ 505.669235][ T5638] Bluetooth: hci15: command tx timeout [ 505.739526][ T5638] Bluetooth: hci16: command tx timeout [ 505.831172][ T5638] Bluetooth: hci17: command tx timeout [ 505.916229][T16233] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.930928][T16233] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.938666][T16233] bridge_slave_0: entered allmulticast mode [ 505.948241][T16233] bridge_slave_0: entered promiscuous mode [ 505.956906][T16233] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.964495][T16233] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.972089][T16233] bridge_slave_1: entered allmulticast mode [ 505.980769][T16233] bridge_slave_1: entered promiscuous mode [ 506.031233][T16233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.051037][T16233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.099778][T16233] team0: Port device team_slave_0 added [ 506.115886][T16233] team0: Port device team_slave_1 added [ 506.146686][T16233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.154080][T16233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.181081][T16233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.209963][T16233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.216917][T16233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.244044][T16233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.311513][T16233] hsr_slave_0: entered promiscuous mode [ 506.318074][T16233] hsr_slave_1: entered promiscuous mode [ 506.325188][T16233] debugfs: 'hsr0' already exists in 'hsr' [ 506.331473][T16233] Cannot create hsr debugfs directory [ 506.569752][ T4949] Bluetooth: hci19: command tx timeout [ 506.619142][T16256] Bluetooth: hci18: command tx timeout [ 507.739086][T16256] Bluetooth: hci15: command tx timeout [ 507.819153][T16256] Bluetooth: hci16: command tx timeout [ 507.899665][T16256] Bluetooth: hci17: command tx timeout [ 508.635075][T16256] Bluetooth: hci8: command 0x0406 tx timeout [ 508.642508][T16255] Bluetooth: hci9: command 0x0406 tx timeout [ 508.645767][T16256] Bluetooth: hci19: command tx timeout [ 508.651527][T16255] Bluetooth: hci5: command 0x0406 tx timeout [ 508.658437][T16256] Bluetooth: hci6: command 0x0406 tx timeout [ 508.661073][T16255] Bluetooth: hci7: command 0x0406 tx timeout [ 508.702730][ T5636] Bluetooth: hci18: command tx timeout [ 509.819219][T16254] Bluetooth: hci15: command tx timeout [ 509.899115][T16254] Bluetooth: hci16: command tx timeout [ 509.979620][T16254] Bluetooth: hci17: command tx timeout [ 510.699163][T16254] Bluetooth: hci19: command tx timeout [ 510.779242][T16254] Bluetooth: hci18: command tx timeout [ 512.780000][T16254] Bluetooth: hci19: command tx timeout [ 516.140789][ T11] block nbd4: Possible stuck request ffff88802744e000: control (read@0,1024B). Runtime 300 seconds [ 516.152050][ T11] block nbd4: Possible stuck request ffff88802744e1c0: control (read@1024,1024B). Runtime 300 seconds [ 516.163550][ T11] block nbd4: Possible stuck request ffff88802744e380: control (read@2048,1024B). Runtime 300 seconds [ 516.175104][ T11] block nbd4: Possible stuck request ffff88802744e540: control (read@3072,1024B). Runtime 300 seconds [ 524.469687][ T31] INFO: task syz.4.2637:15925 blocked for more than 143 seconds. [ 524.477468][ T31] Not tainted syzkaller #0 [ 524.483028][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.492208][ T31] task:syz.4.2637 state:D stack:26328 pid:15925 tgid:15924 ppid:5631 task_flags:0x480140 flags:0x00080002 [ 524.504635][ T31] Call Trace: [ 524.508019][ T31] [ 524.511643][ T31] __schedule+0x1821/0x5740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 524.516349][ T31] ? __pfx___schedule+0x10/0x10 [ 524.522579][ T31] ? schedule+0x90/0x360 [ 524.526887][ T31] schedule+0x164/0x360 [ 524.531617][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 524.537345][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 524.562765][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 524.587803][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 524.602229][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 524.608488][ T31] nbd_set_size+0x454/0x680 [ 524.613234][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 524.618302][ T31] ? nla_memcpy+0x5b/0xc0 [ 524.623079][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 524.628485][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 524.634851][ T31] ? rcu_is_watching+0x15/0xb0 [ 524.640103][ T31] ? trace_kmalloc+0x2a/0xf0 [ 524.644754][ T31] ? __nla_parse+0x40/0x60 [ 524.649633][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 524.656056][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 524.663042][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 524.668621][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 524.675283][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 524.680712][ T31] genl_rcv_msg+0x61c/0x7a0 [ 524.685240][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.690984][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 524.696736][ T31] netlink_rcv_skb+0x232/0x4b0 [ 524.702356][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.707436][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.713146][ T31] ? down_read+0x270/0x2e0 [ 524.717674][ T31] ? genl_rcv+0xd/0x40 [ 524.722432][ T31] genl_rcv+0x28/0x40 [ 524.726441][ T31] netlink_unicast+0x75c/0x8e0 [ 524.731769][ T31] netlink_sendmsg+0x813/0xb40 [ 524.736583][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.742469][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 524.747569][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.753451][ T31] ____sys_sendmsg+0x972/0x9f0 [ 524.758305][ T31] ? __might_fault+0xaf/0x130 [ 524.763518][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.769314][ T31] ? import_iovec+0x73/0xa0 [ 524.773953][ T31] ___sys_sendmsg+0x2a5/0x360 [ 524.778621][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 524.784414][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.790213][ T31] ? futex_wait+0x2a2/0x390 [ 524.794816][ T31] ? __fget_files+0x2a/0x420 [ 524.799889][ T31] ? __fget_files+0x3a0/0x420 [ 524.804621][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 524.809724][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.815229][ T31] ? rcu_is_watching+0x15/0xb0 [ 524.820229][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.826374][ T31] do_syscall_64+0x174/0x580 [ 524.831144][ T31] ? trace_irq_disable+0x3b/0x140 [ 524.836233][ T31] ? clear_bhb_loop+0x40/0x90 [ 524.841159][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.847103][ T31] RIP: 0033:0x7f647999ce59 [ 524.851819][ T31] RSP: 002b:00007f647a77c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.860538][ T31] RAX: ffffffffffffffda RBX: 00007f6479c15fa0 RCX: 00007f647999ce59 [ 524.868570][ T31] RDX: 0000000024000004 RSI: 00002000000007c0 RDI: 0000000000000005 [ 524.876682][ T31] RBP: 00007f6479a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 524.884849][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.893009][ T31] R13: 00007f6479c16038 R14: 00007f6479c15fa0 R15: 00007ffebf668328 [ 524.901117][ T31] [ 524.904149][ T31] INFO: task syz.4.2637:15926 blocked for more than 143 seconds. [ 524.913263][ T31] Not tainted syzkaller #0 [ 524.918226][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.926981][ T31] task:syz.4.2637 state:D stack:26656 pid:15926 tgid:15924 ppid:5631 task_flags:0x400040 flags:0x00080002 [ 524.939156][ T31] Call Trace: [ 524.942490][ T31] [ 524.945437][ T31] __schedule+0x1821/0x5740 [ 524.950043][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 524.955022][ T31] ? __pfx___schedule+0x10/0x10 [ 524.959961][ T31] ? schedule+0x90/0x360 [ 524.964219][ T31] schedule+0x164/0x360 [ 524.968371][ T31] schedule_preempt_disabled+0x13/0x30 [ 524.973961][ T31] __mutex_lock+0x7f7/0x1550 [ 524.978590][ T31] ? kernel_text_address+0xa5/0xe0 [ 524.983832][ T31] ? __mutex_lock+0x608/0x1550 [ 524.988621][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 524.993429][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 524.998478][ T31] ? stack_trace_save+0xa9/0x100 [ 525.003551][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 525.008504][ T31] ? radix_tree_lookup+0x240/0x290 [ 525.013858][ T31] genl_rcv_msg+0x10b/0x7a0 [ 525.018403][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.023697][ T31] netlink_rcv_skb+0x232/0x4b0 [ 525.028500][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.033569][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.038922][ T31] ? down_read+0x270/0x2e0 [ 525.043358][ T31] ? genl_rcv+0xd/0x40 [ 525.047423][ T31] genl_rcv+0x28/0x40 [ 525.051542][ T31] netlink_unicast+0x75c/0x8e0 [ 525.056396][ T31] netlink_sendmsg+0x813/0xb40 [ 525.061364][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.066702][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.071706][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.077014][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.082391][ T31] __sys_sendto+0x672/0x710 [ 525.086907][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 525.092046][ T31] ? do_futex+0x333/0x420 [ 525.096448][ T31] ? rcu_is_watching+0x15/0xb0 [ 525.101761][ T31] __x64_sys_sendto+0xde/0x100 [ 525.106582][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.112736][ T31] do_syscall_64+0x174/0x580 [ 525.117339][ T31] ? clear_bhb_loop+0x40/0x90 [ 525.122095][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.128007][ T31] RIP: 0033:0x7f647995d68e [ 525.132777][ T31] RSP: 002b:00007f6477bf4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 525.141264][ T31] RAX: ffffffffffffffda RBX: 00007f6477bf66c0 RCX: 00007f647995d68e [ 525.149316][ T31] RDX: 000000000000001c RSI: 00007f6477bf5000 RDI: 0000000000000005 [ 525.157293][ T31] RBP: 0000000000000000 R08: 00007f6477bf4f04 R09: 000000000000000c [ 525.165350][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 525.173448][ T31] R13: 00007f6477bf4f58 R14: 00007f6477bf5000 R15: 0000000000000000 [ 525.182386][ T31] [ 525.185464][ T31] INFO: task syz.1.2638:15930 blocked for more than 144 seconds. [ 525.196248][ T31] Not tainted syzkaller #0 [ 525.201942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 525.211022][ T31] task:syz.1.2638 state:D stack:26024 pid:15930 tgid:15929 ppid:5630 task_flags:0x400140 flags:0x00080002 [ 525.223034][ T31] Call Trace: [ 525.226321][ T31] [ 525.229396][ T31] __schedule+0x1821/0x5740 [ 525.233951][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 525.239192][ T31] ? __pfx___schedule+0x10/0x10 [ 525.244085][ T31] ? schedule+0x90/0x360 [ 525.248318][ T31] schedule+0x164/0x360 [ 525.252597][ T31] schedule_preempt_disabled+0x13/0x30 [ 525.258088][ T31] __mutex_lock+0x7f7/0x1550 [ 525.262893][ T31] ? __mutex_lock+0x608/0x1550 [ 525.267705][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 525.272516][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 525.277589][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 525.282625][ T31] ? radix_tree_lookup+0x240/0x290 [ 525.287805][ T31] genl_rcv_msg+0x10b/0x7a0 [ 525.292526][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.297593][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 525.303123][ T31] netlink_rcv_skb+0x232/0x4b0 [ 525.307922][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.313098][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.318431][ T31] ? down_read+0x270/0x2e0 [ 525.322949][ T31] ? genl_rcv+0xd/0x40 [ 525.327077][ T31] genl_rcv+0x28/0x40 [ 525.331215][ T31] netlink_unicast+0x75c/0x8e0 [ 525.336017][ T31] netlink_sendmsg+0x813/0xb40 [ 525.341105][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.346410][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.351594][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.356919][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.362307][ T31] __sys_sendto+0x672/0x710 [ 525.366842][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 525.372037][ T31] ? exc_page_fault+0x6a/0xc0 [ 525.376759][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 525.382120][ T31] __x64_sys_sendto+0xde/0x100 [ 525.386890][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.393065][ T31] do_syscall_64+0x174/0x580 [ 525.397688][ T31] ? trace_irq_disable+0x3b/0x140 [ 525.402807][ T31] ? clear_bhb_loop+0x40/0x90 [ 525.407518][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.413570][ T31] RIP: 0033:0x7f961e95d68e [ 525.418023][ T31] RSP: 002b:00007f961f820e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 525.426588][ T31] RAX: ffffffffffffffda RBX: 00007f961f8226c0 RCX: 00007f961e95d68e [ 525.434710][ T31] RDX: 0000000000000020 RSI: 00007f961f821000 RDI: 0000000000000004 [ 525.443240][ T31] RBP: 0000000000000000 R08: 00007f961f820f04 R09: 000000000000000c [ 525.451467][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 525.459669][ T31] R13: 00007f961f820f58 R14: 00007f961f821000 R15: 0000000000000000 [ 525.467677][ T31] [ 525.471286][ T31] INFO: task syz.0.2639:15932 blocked for more than 144 seconds. [ 525.479738][ T31] Not tainted syzkaller #0 [ 525.484707][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 525.493705][ T31] task:syz.0.2639 state:D stack:28072 pid:15932 tgid:15931 ppid:5632 task_flags:0x400040 flags:0x00080002 [ 525.506411][ T31] Call Trace: [ 525.510038][ T31] [ 525.513014][ T31] __schedule+0x1821/0x5740 [ 525.517510][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 525.522582][ T31] ? __pfx___schedule+0x10/0x10 [ 525.527468][ T31] ? schedule+0x90/0x360 [ 525.531863][ T31] schedule+0x164/0x360 [ 525.536051][ T31] schedule_preempt_disabled+0x13/0x30 [ 525.541645][ T31] __mutex_lock+0x7f7/0x1550 [ 525.546272][ T31] ? kernel_text_address+0xa5/0xe0 [ 525.551507][ T31] ? __mutex_lock+0x608/0x1550 [ 525.556311][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 525.561285][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 525.566349][ T31] ? stack_trace_save+0xa9/0x100 [ 525.571667][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 525.576640][ T31] ? radix_tree_lookup+0x240/0x290 [ 525.582349][ T31] genl_rcv_msg+0x10b/0x7a0 [ 525.586886][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.592682][ T31] netlink_rcv_skb+0x232/0x4b0 [ 525.597481][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.603021][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.608344][ T31] ? down_read+0x270/0x2e0 [ 525.613321][ T31] ? genl_rcv+0xd/0x40 [ 525.617431][ T31] genl_rcv+0x28/0x40 [ 525.622128][ T31] netlink_unicast+0x75c/0x8e0 [ 525.626922][ T31] netlink_sendmsg+0x813/0xb40 [ 525.632088][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.637406][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.642483][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.647797][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.653238][ T31] __sys_sendto+0x672/0x710 [ 525.657768][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 525.663102][ T31] ? exc_page_fault+0x6a/0xc0 [ 525.667813][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 525.673202][ T31] __x64_sys_sendto+0xde/0x100 [ 525.677993][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.684365][ T31] do_syscall_64+0x174/0x580 [ 525.689134][ T31] ? trace_irq_disable+0x3b/0x140 [ 525.694190][ T31] ? clear_bhb_loop+0x40/0x90 [ 525.698904][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.704814][ T31] RIP: 0033:0x7f7eb3f5d68e [ 525.709564][ T31] RSP: 002b:00007f7eb4eb6e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 525.718025][ T31] RAX: ffffffffffffffda RBX: 00007f7eb4eb86c0 RCX: 00007f7eb3f5d68e [ 525.726245][ T31] RDX: 0000000000000020 RSI: 00007f7eb4eb6fe0 RDI: 0000000000000003 [ 525.734402][ T31] RBP: 0000000000000000 R08: 00007f7eb4eb6ea4 R09: 000000000000000c [ 525.742619][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 525.750649][ T31] R13: 00007f7eb4eb6ef8 R14: 00007f7eb4eb6fe0 R15: 0000000000000000 [ 525.758622][ T31] [ 525.761809][ T31] INFO: task syz.2.2641:15946 blocked for more than 144 seconds. [ 525.769608][ T31] Not tainted syzkaller #0 [ 525.774552][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 525.783338][ T31] task:syz.2.2641 state:D stack:27064 pid:15946 tgid:15943 ppid:5643 task_flags:0x400040 flags:0x00080002 [ 525.795455][ T31] Call Trace: [ 525.798798][ T31] [ 525.801857][ T31] __schedule+0x1821/0x5740 [ 525.806410][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 525.811441][ T31] ? preempt_schedule_notrace+0x57/0x90 [ 525.817004][ T31] ? __pfx___schedule+0x10/0x10 [ 525.822081][ T31] ? schedule+0x90/0x360 [ 525.826367][ T31] schedule+0x164/0x360 [ 525.830597][ T31] schedule_preempt_disabled+0x13/0x30 [ 525.836108][ T31] __mutex_lock+0x7f7/0x1550 [ 525.840838][ T31] ? __mutex_lock+0x608/0x1550 [ 525.845643][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 525.850384][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 525.855422][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 525.860472][ T31] ? radix_tree_lookup+0x240/0x290 [ 525.865621][ T31] genl_rcv_msg+0x10b/0x7a0 [ 525.870198][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.875278][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 525.880837][ T31] netlink_rcv_skb+0x232/0x4b0 [ 525.885631][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.890714][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.896027][ T31] ? down_read+0x270/0x2e0 [ 525.900774][ T31] ? genl_rcv+0xd/0x40 [ 525.904890][ T31] genl_rcv+0x28/0x40 [ 525.908926][ T31] netlink_unicast+0x75c/0x8e0 [ 525.913714][ T31] netlink_sendmsg+0x813/0xb40 [ 525.918505][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.923970][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.928982][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.934286][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.939706][ T31] __sys_sendto+0x672/0x710 [ 525.944237][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 525.949340][ T31] ? fd_install+0x94/0x3d0 [ 525.953765][ T31] ? fd_install+0x306/0x3d0 [ 525.958263][ T31] __x64_sys_sendto+0xde/0x100 [ 525.963147][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.969310][ T31] do_syscall_64+0x174/0x580 [ 525.973916][ T31] ? trace_irq_disable+0x3b/0x140 [ 525.979223][ T31] ? clear_bhb_loop+0x40/0x90 [ 525.983945][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.989902][ T31] RIP: 0033:0x7f55b895d68e [ 525.994325][ T31] RSP: 002b:00007f55b9805e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 526.002889][ T31] RAX: ffffffffffffffda RBX: 00007f55b98076c0 RCX: 00007f55b895d68e [ 526.011020][ T31] RDX: 0000000000000020 RSI: 00007f55b9806000 RDI: 000000000000000c [ 526.019090][ T31] RBP: 0000000000000000 R08: 00007f55b9805f04 R09: 000000000000000c [ 526.027090][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 526.035133][ T31] R13: 00007f55b9805f58 R14: 00007f55b9806000 R15: 0000000000000000 [ 526.043257][ T31] [ 526.046312][ T31] INFO: task syz.3.2645:15962 blocked for more than 144 seconds. [ 526.054098][ T31] Not tainted syzkaller #0 [ 526.059245][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 526.067951][ T31] task:syz.3.2645 state:D stack:28760 pid:15962 tgid:15960 ppid:5633 task_flags:0x400040 flags:0x00080002 [ 526.080023][ T31] Call Trace: [ 526.083335][ T31] [ 526.086266][ T31] __schedule+0x1821/0x5740 [ 526.090828][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 526.095788][ T31] ? __pfx___schedule+0x10/0x10 [ 526.100766][ T31] ? schedule+0x90/0x360 [ 526.105051][ T31] schedule+0x164/0x360 [ 526.109275][ T31] schedule_preempt_disabled+0x13/0x30 [ 526.114743][ T31] __mutex_lock+0x7f7/0x1550 [ 526.119658][ T31] ? kernel_text_address+0xa5/0xe0 [ 526.124813][ T31] ? __mutex_lock+0x608/0x1550 [ 526.129672][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 526.134361][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 526.139636][ T31] ? stack_trace_save+0xa9/0x100 [ 526.144610][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 526.149627][ T31] ? radix_tree_lookup+0x240/0x290 [ 526.154750][ T31] genl_rcv_msg+0x10b/0x7a0 [ 526.159378][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.164452][ T31] netlink_rcv_skb+0x232/0x4b0 [ 526.169297][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.174345][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.179799][ T31] ? down_read+0x270/0x2e0 [ 526.184255][ T31] ? genl_rcv+0xd/0x40 [ 526.188327][ T31] genl_rcv+0x28/0x40 [ 526.192366][ T31] netlink_unicast+0x75c/0x8e0 [ 526.197147][ T31] netlink_sendmsg+0x813/0xb40 [ 526.202012][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.207333][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 526.212349][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 526.217653][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.223242][ T31] __sys_sendto+0x672/0x710 [ 526.227786][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 526.233052][ T31] ? exc_page_fault+0x6a/0xc0 [ 526.237774][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 526.243175][ T31] __x64_sys_sendto+0xde/0x100 [ 526.247973][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.254124][ T31] do_syscall_64+0x174/0x580 [ 526.258721][ T31] ? trace_irq_disable+0x3b/0x140 [ 526.263881][ T31] ? clear_bhb_loop+0x40/0x90 [ 526.268596][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.274566][ T31] RIP: 0033:0x7fb9c175d68e [ 526.279086][ T31] RSP: 002b:00007fb9c25fbe28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 526.287536][ T31] RAX: ffffffffffffffda RBX: 00007fb9c25fd6c0 RCX: 00007fb9c175d68e [ 526.295598][ T31] RDX: 0000000000000020 RSI: 00007fb9c25fbfe0 RDI: 0000000000000003 [ 526.303862][ T31] RBP: 0000000000000000 R08: 00007fb9c25fbea4 R09: 000000000000000c [ 526.311912][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 526.319995][ T31] R13: 00007fb9c25fbef8 R14: 00007fb9c25fbfe0 R15: 0000000000000000 [ 526.328018][ T31] [ 526.331209][ T31] [ 526.331209][ T31] Showing all locks held in the system: [ 526.339856][ T31] 2 locks held by ksoftirqd/1/23: [ 526.344997][ T31] #0: ffff8880b873aee0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 526.355516][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 526.364905][ T31] 1 lock held by khungtaskd/31: [ 526.369935][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 526.380887][ T31] 2 locks held by getty/5387: [ 526.385614][ T31] #0: ffff88803760e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 526.396126][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 526.406874][ T31] 1 lock held by udevd/7261: [ 526.411943][ T31] #0: ffff88802733c350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 526.421472][ T31] 6 locks held by syz.4.2637/15925: [ 526.426697][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.434974][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.444228][ T31] #2: ffff88802720fa60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 526.454876][ T31] #3: ffff888027202bd8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 526.464373][ T31] #4: ffff8880272025a0 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 526.476511][ T31] #5: ffff8880272025d8 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 526.489019][ T31] 2 locks held by syz.4.2637/15926: [ 526.494246][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.502555][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.511616][ T31] 2 locks held by syz.1.2638/15930: [ 526.516803][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.525127][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.534203][ T31] 2 locks held by syz.0.2639/15932: [ 526.539566][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.547803][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.556821][ T31] 2 locks held by syz.2.2641/15946: [ 526.562249][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.571026][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.580688][ T31] 2 locks held by syz.3.2645/15962: [ 526.585898][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.594208][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.603338][ T31] 2 locks held by syz-executor/15972: [ 526.608718][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.617613][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.627218][ T31] 2 locks held by syz-executor/15974: [ 526.633267][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.642218][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.651718][ T31] 2 locks held by syz-executor/15976: [ 526.657097][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.666051][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.675689][ T31] 2 locks held by syz-executor/16005: [ 526.681562][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.690272][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.699991][ T31] 2 locks held by syz-executor/16026: [ 526.705391][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.713802][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.722900][ T31] 2 locks held by syz-executor/16070: [ 526.728303][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.737192][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.746810][ T31] 2 locks held by syz-executor/16073: [ 526.752631][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.761466][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.770908][ T31] 2 locks held by syz-executor/16076: [ 526.776285][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.785161][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.794580][ T31] 2 locks held by syz-executor/16103: [ 526.800473][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.808687][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.818157][ T31] 2 locks held by syz-executor/16126: [ 526.824288][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.832956][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.842621][ T31] 2 locks held by syz-executor/16165: [ 526.848037][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.856802][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.866616][ T31] 2 locks held by syz-executor/16167: [ 526.872400][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.881186][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.890577][ T31] 2 locks held by syz-executor/16169: [ 526.895939][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.904623][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.913879][ T31] 2 locks held by syz-executor/16196: [ 526.919372][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.927579][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.936697][ T31] 2 locks held by syz-executor/16233: [ 526.943017][ T31] #0: ffffffff8fe392e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.951809][ T31] #1: ffffffff8fe39120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.961298][ T31] [ 526.963644][ T31] ============================================= [ 526.963644][ T31] [ 526.972781][ T31] NMI backtrace for cpu 0 [ 526.972793][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 526.972804][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 526.972810][ T31] Call Trace: [ 526.972814][ T31] [ 526.972818][ T31] dump_stack_lvl+0xe8/0x150 [ 526.972852][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 526.972868][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 526.972880][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 526.972894][ T31] sys_info+0x135/0x170 [ 526.972956][ T31] watchdog+0xfd3/0x1030 [ 526.972980][ T31] ? watchdog+0x1c9/0x1030 [ 526.972996][ T31] kthread+0x389/0x470 [ 526.973015][ T31] ? __pfx_watchdog+0x10/0x10 [ 526.973027][ T31] ? __pfx_kthread+0x10/0x10 [ 526.973039][ T31] ret_from_fork+0x514/0xb70 [ 526.973062][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 526.973072][ T31] ? __switch_to+0xc79/0x1410 [ 526.973087][ T31] ? __pfx_kthread+0x10/0x10 [ 526.973099][ T31] ret_from_fork_asm+0x1a/0x30 [ 526.973117][ T31] [ 526.973121][ T31] Sending NMI from CPU 0 to CPUs 1: [ 527.086860][ C1] NMI backtrace for cpu 1 [ 527.086877][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 527.086895][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.086905][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 527.086928][ C1] Code: 6b 7d 02 e9 d3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 31 20 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 527.087019][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 527.087034][ C1] RAX: 00000000001b5195 RBX: ffffffff819a845a RCX: 0000000080000001 [ 527.087045][ C1] RDX: 0000000000000001 RSI: ffffffff8dfae239 RDI: ffffffff8c28b7e0 [ 527.087056][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 527.087068][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 527.087079][ C1] R13: 1ffff11003b5a000 R14: 0000000000000001 R15: 1ffff11003b5a000 [ 527.087090][ C1] FS: 0000000000000000(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000 [ 527.087103][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.087114][ C1] CR2: 0000560e6f3a4ee8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 527.087128][ C1] Call Trace: [ 527.087137][ C1] [ 527.087143][ C1] default_idle+0x9/0x20 [ 527.087162][ C1] default_idle_call+0x72/0xb0 [ 527.087182][ C1] do_idle+0x36a/0x5f0 [ 527.087209][ C1] ? __pfx_do_idle+0x10/0x10 [ 527.087231][ C1] cpu_startup_entry+0x43/0x60 [ 527.087248][ C1] start_secondary+0x101/0x110 [ 527.087264][ C1] common_startup_64+0x13e/0x147 [ 527.087292][ C1] [ 527.253722][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 527.260580][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 527.269679][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.279725][ T31] Call Trace: [ 527.282996][ T31] [ 527.285919][ T31] vpanic+0x56c/0xa60 [ 527.289897][ T31] ? __pfx___schedule+0x10/0x10 [ 527.294737][ T31] ? __pfx_vpanic+0x10/0x10 [ 527.299230][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 527.305554][ T31] panic+0xc5/0xd0 [ 527.309267][ T31] ? __pfx_panic+0x10/0x10 [ 527.313685][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 527.319054][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 527.325203][ T31] watchdog+0x102c/0x1030 [ 527.329542][ T31] ? watchdog+0x1c9/0x1030 [ 527.333958][ T31] kthread+0x389/0x470 [ 527.338040][ T31] ? __pfx_watchdog+0x10/0x10 [ 527.342735][ T31] ? __pfx_kthread+0x10/0x10 [ 527.347316][ T31] ret_from_fork+0x514/0xb70 [ 527.351897][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 527.356995][ T31] ? __switch_to+0xc79/0x1410 [ 527.361668][ T31] ? __pfx_kthread+0x10/0x10 [ 527.366252][ T31] ret_from_fork_asm+0x1a/0x30 [ 527.371014][ T31] [ 527.374205][ T31] Kernel Offset: disabled [ 527.378528][ T31] Rebooting in 86400 seconds..