last executing test programs: 21.411618573s ago: executing program 2 (id=1299): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x4008000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x8040480) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113900000000008510000002000000b70a0000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmsg$alg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) recvmmsg$unix(r8, 0x0, 0x0, 0x12040, 0x0) getsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f00000005c0)="08000000010000", 0x7) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)='+', 0x1) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x14a5, @remote, 0xe}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000480)=']', 0x1}], 0x1}}], 0x1, 0x20000004) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000440)={0x101, 0x0, 0xe, 0x8a8, 0x4fc949ad, 0x7, 0x1, 0x2}, &(0x7f00000004c0)=0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x1, 0x0, &(0x7f0000000040)="97", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="bf", 0x0, 0x8000}, 0x50) 21.098710666s ago: executing program 2 (id=1302): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4008000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x8040480) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113900000000008510000002000000b70a0000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$alg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) recvmmsg$unix(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12040, 0x0) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000005c0)="08000000010000", 0x7) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)='+', 0x1) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x14a5, @remote, 0xe}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000480)=']', 0x1}], 0x1}}], 0x1, 0x20000004) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000440)={0x101, 0x0, 0xe, 0x8a8, 0x4fc949ad, 0x7, 0x1, 0x2}, &(0x7f00000004c0)=0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x1, 0x0, &(0x7f0000000040)="97", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="bf", 0x0, 0x8000}, 0x50) 20.935774464s ago: executing program 2 (id=1303): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x1, {0x2, 0xff, 0x4}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, 0x0, 0x20000050) 20.382094273s ago: executing program 2 (id=1307): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a80480003"], 0x2c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=' m=', 0x3}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000b5b9243184676ef46a4800008400000006000000d000000000000000"], 0x18, 0x20080084}], 0x1, 0x815) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) bind$ax25(r6, &(0x7f0000000540)={{0x3, @default}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) sendto$ax25(r6, 0x0, 0x20, 0x40, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x7a) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x101}, 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 20.028521287s ago: executing program 4 (id=1312): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x4008000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x8040480) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113900000000008510000002000000b70a0000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmsg$alg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) recvmmsg$unix(r8, &(0x7f0000000a00), 0x0, 0x12040, 0x0) getsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f00000005c0)="08000000010000", 0x7) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)='+', 0x1) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x14a5, @remote, 0xe}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000480)=']', 0x1}], 0x1}}], 0x1, 0x20000004) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000440)={0x101, 0x0, 0xe, 0x8a8, 0x4fc949ad, 0x7, 0x1, 0x2}, &(0x7f00000004c0)=0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x1, 0x0, &(0x7f0000000040)="97", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="bf", 0x0, 0x8000}, 0x50) 19.392694731s ago: executing program 3 (id=1315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e0008e81d8a02ae3c5324922f991eb92d0701feffffff00000000017c0000040042800c00018006000600"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r2) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x93e07d4b91115c01}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0xdc, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x8cbb93ee9869b66}, @iv={0x18}], 0x30, 0x20000000}], 0x1, 0xc050) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r10, 0x1, 0x0, 0x25dfdbfe, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x44}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x60, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x4020010) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000000)=[{r11, 0x40}, {r11}, {r11, 0x912a}, {r11, 0x1}, {r11, 0x20}, {r12, 0x7fbde394f8d7e671}], 0x6, &(0x7f0000000040), &(0x7f0000000080)={[0xffffffffffffff53]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x9, 0xa, 0x40, @dev={0xfe, 0x80, '\x00', 0x3a}, @mcast1, 0x10, 0x700, 0x1, 0x4}}) 19.190042273s ago: executing program 4 (id=1318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x8000000}, 0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r11, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r11, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r11, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x238}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001080)=ANY=[@ANYBLOB="3800000018000100000000000000000002009000fc00000900000000060015000200000014001680100008800c00018006"], 0x38}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 19.136318805s ago: executing program 3 (id=1319): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket(0x40000000015, 0x805, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xba2ceb09c15e9291}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x3, 0x8}}]}}]}, 0x64}}, 0x0) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b40)={0x5, 0x0}, 0x8) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x14, &(0x7f0000000b80)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @alu={0x4, 0x0, 0xc, 0x9, 0x5, 0x50, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x2}, @map_idx={0x18, 0x7}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x101}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000c40)='syzkaller\x00', 0x68d4, 0x4c, &(0x7f0000000e40)=""/76, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000ec0)=[{0x0, 0x3}, {0x1, 0x5, 0x0, 0x9}], 0x10, 0x874}, 0x94) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000fc0)={0x0, 0xc8, 0x10}, 0xc) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x3, 0x5, 0x4, 0x536, 0x11800, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) (async) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)={0x1b, 0x0, 0x0, 0x6f7, 0x0, 0x1, 0x9038, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@o_path={&(0x7f0000001100)='./file0\x00', 0x0, 0x6000, r0}, 0x18) (async) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r14}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r14}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50) (async) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r16}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xa}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r15}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x2, 0x18, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x2, 0x4c, &(0x7f00000008c0)=""/76, 0x41100, 0x66, '\x00', r6, @fallback=0x20, r7, 0x8, &(0x7f0000000680)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x8, 0xaa, 0x9}, 0x10, r8, r9, 0xa, &(0x7f0000001180)=[0xffffffffffffffff, r10, r11, r12, r13, r14, r16], &(0x7f00000011c0)=[{0x5, 0x3, 0xc, 0x4}, {0x0, 0x3, 0x9, 0xa}, {0x1, 0x1, 0xc, 0xc}, {0x3, 0x4, 0xb, 0x2}, {0x3, 0x4, 0x1, 0x5}, {0x4, 0x3, 0xf, 0xa}, {0x0, 0x4, 0x4, 0xb}, {0x1, 0x3, 0x8, 0x9}, {0x0, 0x2, 0xd, 0x4}, {0x0, 0x2, 0xd, 0x4}], 0x10, 0x8}, 0x94) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000001e40)=""/4046, 0xfce}, {&(0x7f00000007c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000580)=""/133, 0x85}], 0x9}, 0x0) 18.870161719s ago: executing program 3 (id=1322): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x2, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="186a00000900000000000002050000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c000000020601040000000000000000000000000500010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000022c814edc9e165a992a388dd988e32d2cc23d24c91054f5b689e5cc9595c54ed9c01a2d2c94ad75cfd98f7142548a7aa8710039c969c6f393e7f8e25f6179f0599ac5296f5e784a973128d6f592421a877fa6928c5ea9e60de180369f72c934b2d884c12bca4d57bb5025ae221c0ea03f69a1fddf949f883dd69572f97505a0747dd565193"], 0x4c}}, 0x0) close(r1) write$cgroup_pressure(r1, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x5c, @local, 0x4e24, 0x1, 'sed\x00', 0x8, 0x7, 0x32}, 0x2c) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) 18.867902223s ago: executing program 4 (id=1323): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, 0x0}}], 0x1, 0x2022, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001040)=ANY=[@ANYBLOB="1b0000000000000000000000cb3f3dc500000000d2861cbe6abdd473e95f59b2e0454dacf95b02b5fece57c770f909d017415407e82166296017d5a955a2426e8359e41676fe2534b75520f4b5449dfd83d48219dc4ca2dd9b47d4870009b0be127be4a41358832c398e5d853fb5404a30380ca9558bcb4f49", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x8100, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 18.823977068s ago: executing program 1 (id=1325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 18.750715868s ago: executing program 1 (id=1326): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x2000}, 0x94) 18.642129898s ago: executing program 1 (id=1327): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4008000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x8040480) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113900000000008510000002000000b70a0000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$alg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) recvmmsg$unix(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12040, 0x0) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f00000005c0)="08000000010000", 0x7) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)='+', 0x1) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x14a5, @remote, 0xe}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000480)=']', 0x1}], 0x1}}], 0x1, 0x20000004) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000440)={0x101, 0x0, 0xe, 0x8a8, 0x4fc949ad, 0x7, 0x1, 0x2}, &(0x7f00000004c0)=0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x1, 0x0, &(0x7f0000000040)="97", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="bf", 0x0, 0x8000}, 0x50) 18.218707678s ago: executing program 1 (id=1330): syz_emit_ethernet(0xa6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x6, 0xfff5}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x2, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x4, 0x56}]}}}}}}}, 0x0) 18.090716861s ago: executing program 1 (id=1332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x10, 0x10}, {0x3, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7fffffff}, @TCA_CAKE_RAW={0x8}]}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) gettid() recvfrom(r2, &(0x7f0000000280)=""/209, 0xd1, 0x10000, &(0x7f0000000380)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {0x4}, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000400)={'virt_wifi0\x00', @multicast}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 18.000159813s ago: executing program 4 (id=1333): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a4000000040000000103000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.890122463s ago: executing program 1 (id=1334): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f00000002c0)=0xfffffffffffffe26) r1 = socket(0x10, 0x80003, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x58, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000f000001000f0e00"}}}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84c}, 0x40008a0) 17.883721926s ago: executing program 4 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15015c1a7fff0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 17.839548274s ago: executing program 3 (id=1337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 32) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) (rerun: 32) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async, rerun: 32) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000053c0)={0x8, 0x5, 0x8200, 0x80, 0x6, 0x62e9, 0x7d4a, 0x290}, &(0x7f0000005400)=0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) shutdown(r0, 0x2) clock_gettime(0x0, &(0x7f0000005340)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005140)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000180)=""/19, 0x13}], 0x2, &(0x7f0000000200)=""/131, 0x83}, 0x6537}, {{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000440)=""/99, 0x63}, {&(0x7f00000004c0)=""/93, 0x5d}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x4, &(0x7f0000001580)=""/160, 0xa0}, 0x4}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001640)=""/129, 0x81}], 0x1, &(0x7f0000001740)=""/112, 0x70}, 0x4}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000017c0)=""/200, 0xc8}, {&(0x7f00000018c0)=""/47, 0x2f}], 0x2, &(0x7f0000001940)=""/142, 0x8e}, 0x7}, {{&(0x7f0000001a00)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000001a80)=""/230, 0xe6}, {&(0x7f0000001b80)=""/42, 0x2a}, {&(0x7f0000001bc0)=""/248, 0xf8}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x4, &(0x7f0000002d00)=""/102, 0x66}, 0x2}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002d80)=""/208, 0xd0}], 0x1, &(0x7f0000002ec0)=""/4096, 0x1000}, 0x40}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000003ec0)=""/164, 0xa4}, {&(0x7f0000003f80)=""/35, 0x23}, {&(0x7f0000003fc0)=""/154, 0x9a}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f00000040c0)=""/48, 0x30}], 0x1, &(0x7f0000004140)=""/4096, 0x1000}, 0x6}], 0x8, 0x40002000, &(0x7f0000005380)={r4, r5+10000000}) 17.665955608s ago: executing program 4 (id=1339): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cd52d3e65c1874cb45340250bf2a6f3d70d6152c0de7f114dc498d086bfd6f4171e0ec6ff1963d5074ce25ea68c70ea6219913f5b8e27c10a3ad03a3cb2a56bb2d72c2d18a5d924dbee81f13dedabb38c8c6d6279af73afefdd4f92e164e82413254138184723e44a6fc0f09b060c8c1470c097af127442f763972fceef2bec44424963f5934b3f01f396e2107"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="8a000000000000000000000006000000181126b1", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000480000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x760}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r8) (async) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000011100000000000000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000000b40)=[{{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1, &(0x7f00000004c0)=""/143, 0x8f}, 0x7}, {{&(0x7f0000000580)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000600)=""/60, 0x3c}, {&(0x7f0000000980)=""/156, 0x9c}, {&(0x7f0000000a80)=""/156, 0x9c}], 0x4, &(0x7f0000000680)=""/4, 0x4}, 0x2}], 0x2, 0x0, &(0x7f0000000c00)={r9, r10+10000000}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)={0x38, r11, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xfffffffd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x186}]}]}, 0x38}}, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 17.554133258s ago: executing program 3 (id=1342): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000fe880000000000000000000000000006ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c0000000000000000000000000d000000000000000000000000000000000000ffffffffffffb603716f0000000000000000000000000000feffffffffffffff000a000000000000feffffffff7f400002000000000002080000000000000000000101000000000044000500ac14141500000000000000000000000000003a72db5f4e4c502900007f000001000000000000000000000000060000000403"], 0xfc}}, 0x0) 17.499573815s ago: executing program 2 (id=1343): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, 0x0}}], 0x1, 0x2022, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001040)=ANY=[@ANYBLOB="1b0000000000000000000000cb3f3dc500000000d2861cbe6abdd473e95f59b2e0454dacf95b02b5fece57c770f909d017415407e82166296017d5a955a2426e8359e41676fe2534b75520f4b5449dfd83d48219dc4ca2dd9b47d4870009b0be127be4a41358832c398e5d853fb5404a30380ca9558bcb4f49", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x8100, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) 17.438016222s ago: executing program 3 (id=1344): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (fail_nth: 10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x4000000) r8 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, 0x0, 0x0) setsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000140)=0x4, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {0x0}], 0x2}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) 16.591183964s ago: executing program 2 (id=1346): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010004b040000", @ANYRES32=0x0, @ANYBLOB="00000000181002001c00a4800800000094a3cfa32d2ad0000c00028008000b40000000011400030000000000bf000000000000000000e9ff662368461306f1e7b4ae06d67036a5a485861795edc5d0cd5b3ef143cfd5a542d8bad0c2b85c581075c32560c77520a8951d900f90668f61f48bbc2264f3e39a764fbc55abeaaa54637ea8f94f8bf2218262446cc44e705fbe94c12d48bb50d23fc86133f766e3f0a883b4be5ed40720b53f9b9fb84e7422952d4da5c7b5ad72cb48c467eba5bff64dd8915ff88510a9b6d904e5a527871ebdf256ee6beb7cf25a73d8516cbfc80fccaecd8b5a1b0cd0ef8d4e1415da8892965792f6f53e0b2ba3dfec0766259ca73c213ccdead7ed55bd6db4ac7969f3cfca6e28d20586ac6bbc5e8417e8716ec8d70d2f16c5c9805fb5e5baf11cffafff03b09c125664cdd158c2b8542a2ac8e124b04dc68f37d11c4d02cdbbe4548c70c5adccdca07157cf74"], 0x50}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r4, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xfffffffd, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3, 0xc}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=r0, @ANYRES32=0x0], 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r8) pipe(0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x4e29, 0x5, @loopback, 0x1}, 0x7) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x41) 16.577077288s ago: executing program 0 (id=1356): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b70200000f001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076003008cd4aa9c18ed0f", 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7, 0x3, 0x0, 0x5}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a"], 0x26}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000740)={0x0, 0x1, 0x2, 0x8000000000400}) 16.351608623s ago: executing program 0 (id=1347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet(0x2, 0xa, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c00feffff7f080005000400000008000500", @ANYRES32=r4], 0x54}}, 0x0) 16.210070804s ago: executing program 0 (id=1348): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x2, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="186a00000900000000000002050000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c000000020601040000000000000000000000000500010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e65740000000022c814edc9e165a992a388dd988e32d2cc23d24c91054f5b689e5cc9595c54ed9c01a2d2c94ad75cfd98f7142548a7aa8710039c969c6f393e7f8e25f6179f0599ac5296f5e784a973128d6f592421a877fa6928c5ea9e60de180369f72c934b2d884c12bca4d57bb5025ae221c0ea03f69a1fddf949f883dd69572f97505a0747dd565193"], 0x4c}}, 0x0) close(r1) write$cgroup_pressure(r1, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000300)={0x5c, @local, 0x4e24, 0x1, 'sed\x00', 0x8, 0x7, 0x32}, 0x2c) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) 15.376109101s ago: executing program 0 (id=1349): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x4008000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x8040480) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113900000000008510000002000000b70a0000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmsg$alg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000008c0)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) recvmmsg$unix(r8, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12040, 0x0) getsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f00000005c0)="08000000010000", 0x7) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)='+', 0x1) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{&(0x7f0000000340)={0xa, 0x4e22, 0x14a5, @remote, 0xe}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000480)=']', 0x1}], 0x1}}], 0x1, 0x20000004) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000440)={0x101, 0x0, 0xe, 0x8a8, 0x4fc949ad, 0x7, 0x1, 0x2}, &(0x7f00000004c0)=0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x1, 0x0, &(0x7f0000000040)="97", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="bf", 0x0, 0x8000}, 0x50) 15.307100863s ago: executing program 0 (id=1350): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x1, {0x2, 0xff, 0x4}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 15.181999368s ago: executing program 0 (id=1351): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000480), 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071102c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) socket$netlink(0x10, 0x3, 0x16) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd170d32bc4ec8f6, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}, 0x94) (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x5) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x1, &(0x7f00000006c0), 0x4) r8 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xffff}}, 0xd, 0x0, 0x45, 0xc0000000, 0x50, 0x401, 0x8}, &(0x7f0000000500)=0x9c) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r5, 0x0, 0x0}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) connect$rose(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001"], 0x24}}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.50970209s ago: executing program 32 (id=1334): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f00000002c0)=0xfffffffffffffe26) r1 = socket(0x10, 0x80003, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x58, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000f000001000f0e00"}}}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84c}, 0x40008a0) 2.488052942s ago: executing program 33 (id=1339): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) (async) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cd52d3e65c1874cb45340250bf2a6f3d70d6152c0de7f114dc498d086bfd6f4171e0ec6ff1963d5074ce25ea68c70ea6219913f5b8e27c10a3ad03a3cb2a56bb2d72c2d18a5d924dbee81f13dedabb38c8c6d6279af73afefdd4f92e164e82413254138184723e44a6fc0f09b060c8c1470c097af127442f763972fceef2bec44424963f5934b3f01f396e2107"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="8a000000000000000000000006000000181126b1", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000480000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x760}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r8) (async) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000011100000000000000000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000000b40)=[{{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1, &(0x7f00000004c0)=""/143, 0x8f}, 0x7}, {{&(0x7f0000000580)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000840)=""/229, 0xe5}, {&(0x7f0000000600)=""/60, 0x3c}, {&(0x7f0000000980)=""/156, 0x9c}, {&(0x7f0000000a80)=""/156, 0x9c}], 0x4, &(0x7f0000000680)=""/4, 0x4}, 0x2}], 0x2, 0x0, &(0x7f0000000c00)={r9, r10+10000000}) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000340)={0x38, r11, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xfffffffd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x186}]}]}, 0x38}}, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.42359994s ago: executing program 34 (id=1346): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010004b040000", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r4, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xfffffffd, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3, 0xc}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=r0, @ANYRES32=0x0], 0x50) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r8, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x8000850) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r8) pipe(0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x4e29, 0x5, @loopback, 0x1}, 0x7) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x41) 1.376687971s ago: executing program 35 (id=1344): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (fail_nth: 10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000002020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x4000000) r8 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, 0x0, 0x0) setsockopt$packet_int(r8, 0x107, 0xb, &(0x7f0000000140)=0x4, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x34}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {0x0}], 0x2}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) 0s ago: executing program 36 (id=1351): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000480), 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071102c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) socket$netlink(0x10, 0x3, 0x16) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd170d32bc4ec8f6, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}, 0x94) (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x5) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x1, &(0x7f00000006c0), 0x4) r8 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xffff}}, 0xd, 0x0, 0x45, 0xc0000000, 0x50, 0x401, 0x8}, &(0x7f0000000500)=0x9c) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r5, 0x0, 0x0}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) connect$rose(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001"], 0x24}}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 86] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.584'. [ 133.033077][ T7995] netlink: 'syz.2.580': attribute type 1 has an invalid length. [ 133.040800][ T7995] netlink: 224 bytes leftover after parsing attributes in process `syz.2.580'. [ 133.103546][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.585'. [ 133.179217][ T7997] netlink: 64 bytes leftover after parsing attributes in process `syz.4.585'. [ 133.628233][ T8014] tipc: Enabled bearer , priority 0 [ 133.636195][ T8014] syzkaller0: entered promiscuous mode [ 133.641741][ T8014] syzkaller0: entered allmulticast mode [ 133.650312][ T8014] netlink: 452 bytes leftover after parsing attributes in process `syz.2.592'. [ 133.668317][ T8011] tipc: Resetting bearer [ 133.742975][ T8011] tipc: Disabling bearer [ 134.049588][ T8035] netlink: 'syz.3.600': attribute type 5 has an invalid length. [ 134.050180][ T8039] tc_dump_action: action bad kind [ 134.139580][ T8043] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 134.257937][ T8035] openvswitch: netlink: Duplicate or invalid key (type 0). [ 134.313157][ T8035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.576024][ T8056] erspan0: entered promiscuous mode [ 134.593146][ T8056] erspan0: left promiscuous mode [ 134.763277][ T8058] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 135.008482][ T8065] macsec1: entered promiscuous mode [ 135.023644][ T8065] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 135.025203][ T8070] netlink: 'syz.4.607': attribute type 21 has an invalid length. [ 135.050489][ T8065] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 135.200663][ T8077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.207989][ T8077] IPv6: NLM_F_CREATE should be set when creating new route [ 135.215276][ T8077] IPv6: NLM_F_CREATE should be set when creating new route [ 135.604395][ T8089] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 135.632597][ T8089] __nla_validate_parse: 4 callbacks suppressed [ 135.632620][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 135.701312][ T8095] netlink: 84 bytes leftover after parsing attributes in process `syz.3.617'. [ 135.714139][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.620'. [ 135.739631][ T8094] netlink: 44 bytes leftover after parsing attributes in process `syz.4.620'. [ 135.865679][ T8094] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 136.138206][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 136.157092][ T8114] tls_set_device_offload_rx: netdev not found [ 136.211338][ T8116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.489402][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 136.952522][ T8137] netlink: 'syz.2.634': attribute type 16 has an invalid length. [ 136.960318][ T8137] netlink: 'syz.2.634': attribute type 3 has an invalid length. [ 137.007866][ T8137] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.634'. [ 137.428256][ T8143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.637'. [ 137.499137][ T8143] tipc: Enabled bearer , priority 0 [ 137.506830][ T8143] veth0_vlan: entered allmulticast mode [ 137.549381][ T8143] tipc: Resetting bearer [ 137.566043][ T8142] tipc: Disabling bearer [ 137.927475][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 138.112739][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 138.274922][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.813221][ T8182] FAULT_INJECTION: forcing a failure. [ 138.813221][ T8182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.865887][ T8182] CPU: 0 UID: 0 PID: 8182 Comm: syz.0.648 Not tainted syzkaller #0 PREEMPT(full) [ 138.865915][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.865927][ T8182] Call Trace: [ 138.865934][ T8182] [ 138.865943][ T8182] dump_stack_lvl+0x189/0x250 [ 138.865973][ T8182] ? __pfx____ratelimit+0x10/0x10 [ 138.866009][ T8182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.866033][ T8182] ? __pfx__printk+0x10/0x10 [ 138.866058][ T8182] ? __might_fault+0xb0/0x130 [ 138.866091][ T8182] ? rcu_is_watching+0x15/0xb0 [ 138.866113][ T8182] should_fail_ex+0x414/0x560 [ 138.866141][ T8182] _copy_from_user+0x2d/0xb0 [ 138.866164][ T8182] ___sys_sendmsg+0x158/0x2a0 [ 138.866188][ T8182] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.866212][ T8182] ? kstrtouint+0x6e/0xe0 [ 138.866255][ T8182] ? rcu_is_watching+0x15/0xb0 [ 138.866274][ T8182] ? lock_release+0x4b/0x3e0 [ 138.866304][ T8182] ? __might_fault+0xcc/0x130 [ 138.866335][ T8182] __sys_sendmmsg+0x227/0x430 [ 138.866359][ T8182] ? __pfx___sys_sendmmsg+0x10/0x10 [ 138.866379][ T8182] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 138.866421][ T8182] ? ksys_write+0x22a/0x250 [ 138.866449][ T8182] ? __pfx_ksys_write+0x10/0x10 [ 138.866474][ T8182] ? rcu_is_watching+0x15/0xb0 [ 138.866497][ T8182] __x64_sys_sendmmsg+0xa0/0xc0 [ 138.866520][ T8182] do_syscall_64+0xfa/0x3b0 [ 138.866538][ T8182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.866557][ T8182] ? clear_bhb_loop+0x60/0xb0 [ 138.866579][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.866598][ T8182] RIP: 0033:0x7f4181f8ebe9 [ 138.866615][ T8182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.866631][ T8182] RSP: 002b:00007f4182de8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 138.866652][ T8182] RAX: ffffffffffffffda RBX: 00007f41821b5fa0 RCX: 00007f4181f8ebe9 [ 138.866667][ T8182] RDX: 0000000000000005 RSI: 0000200000005280 RDI: 0000000000000004 [ 138.866679][ T8182] RBP: 00007f4182de8090 R08: 0000000000000000 R09: 0000000000000000 [ 138.866691][ T8182] R10: 000000002004c890 R11: 0000000000000246 R12: 0000000000000001 [ 138.866703][ T8182] R13: 00007f41821b6038 R14: 00007f41821b5fa0 R15: 00007ffc5401cd48 [ 138.866731][ T8182] [ 139.199152][ T8192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.391802][ T8197] macvtap3: entered promiscuous mode [ 139.412289][ T8197] macvtap3: entered allmulticast mode [ 139.565359][ T8209] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 139.627988][ T8212] netlink: 'syz.3.660': attribute type 32 has an invalid length. [ 140.138685][ T8230] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 140.744694][ T8254] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.765354][ T8255] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 140.945771][ T8254] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.042301][ T8254] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.141294][ T8254] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.288822][ T3003] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.320651][ T3003] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.347274][ T3003] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.371947][ T8274] __nla_validate_parse: 7 callbacks suppressed [ 141.371967][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 141.403618][ T3003] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.576669][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 142.422739][ T8307] netlink: 'syz.0.687': attribute type 1 has an invalid length. [ 142.472820][ T8307] netlink: 224 bytes leftover after parsing attributes in process `syz.0.687'. [ 142.519910][ T8311] netlink: 40 bytes leftover after parsing attributes in process `syz.0.687'. [ 142.554263][ T8312] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 142.615034][ T8314] bond0: option all_slaves_active: invalid value (20) [ 142.668993][ T8319] netlink: 'syz.2.692': attribute type 13 has an invalid length. [ 142.691940][ T8319] netlink: 'syz.2.692': attribute type 17 has an invalid length. [ 142.783653][ T8321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.691'. [ 142.827974][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 142.840186][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'. [ 142.853587][ T8319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.016603][ T8333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.154257][ T8331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.692'. [ 143.240617][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 143.388115][ T8344] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 143.432298][ T8344] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 143.565680][ T8349] vlan2: entered promiscuous mode [ 143.748132][ T8355] netlink: 80 bytes leftover after parsing attributes in process `syz.0.701'. [ 144.148849][ T8364] tipc: Enabling of bearer rejected, failed to enable media [ 144.652732][ T8382] lo speed is unknown, defaulting to 1000 [ 144.669246][ T8382] lo speed is unknown, defaulting to 1000 [ 144.690943][ T8382] lo speed is unknown, defaulting to 1000 [ 144.832353][ T8382] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.913212][ T8382] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 145.108233][ T8375] batadv_slave_1: entered promiscuous mode [ 145.135618][ T8395] tipc: Started in network mode [ 145.155151][ T8395] tipc: Node identity 062b7233299d, cluster identity 4711 [ 145.214266][ T8395] tipc: Enabled bearer , priority 0 [ 145.252994][ T8382] lo speed is unknown, defaulting to 1000 [ 145.253317][ T8399] syzkaller0: entered promiscuous mode [ 145.309539][ T8399] syzkaller0: entered allmulticast mode [ 145.328718][ T8375] batadv_slave_1: left promiscuous mode [ 145.346850][ T8382] lo speed is unknown, defaulting to 1000 [ 145.429794][ T8382] lo speed is unknown, defaulting to 1000 [ 145.449868][ T8395] tipc: Resetting bearer [ 145.470482][ T8382] lo speed is unknown, defaulting to 1000 [ 145.502822][ T8382] lo speed is unknown, defaulting to 1000 [ 145.514421][ T8382] lo speed is unknown, defaulting to 1000 [ 145.522767][ T8382] lo speed is unknown, defaulting to 1000 [ 145.529533][ T8413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.572198][ T8416] netlink: 'syz.3.712': attribute type 16 has an invalid length. [ 145.580280][ T8416] netlink: 'syz.3.712': attribute type 3 has an invalid length. [ 145.670450][ T8380] tipc: Resetting bearer [ 145.709250][ T8380] tipc: Disabling bearer [ 146.285950][ T8435] macvtap1: entered promiscuous mode [ 146.309429][ T8435] vlan0: entered promiscuous mode [ 146.473788][ T8441] __nla_validate_parse: 4 callbacks suppressed [ 146.473810][ T8441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.721'. [ 146.864028][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.726'. [ 146.908989][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.1.726'. [ 147.135054][ T8467] netlink: 'syz.4.730': attribute type 1 has an invalid length. [ 147.196724][ T8469] netlink: 'syz.0.731': attribute type 32 has an invalid length. [ 147.402800][ T8467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.787715][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 147.966114][ T8500] netlink: 'syz.3.739': attribute type 13 has an invalid length. [ 148.004575][ T8500] netlink: 'syz.3.739': attribute type 17 has an invalid length. [ 148.179714][ T8513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.210182][ T8500] 0ªX¹¦À: left allmulticast mode [ 148.228955][ T8500] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 148.257973][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.745'. [ 148.305588][ T8515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 148.357319][ T8515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 148.492408][ T8528] netlink: 44 bytes leftover after parsing attributes in process `syz.4.748'. [ 148.636347][ T8530] netlink: 'syz.2.749': attribute type 16 has an invalid length. [ 148.665675][ T8530] netlink: 'syz.2.749': attribute type 3 has an invalid length. [ 148.698372][ T8530] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.749'. [ 149.054633][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.754'. [ 149.114695][ T8544] geneve4: entered promiscuous mode [ 150.295547][ T8598] macsec2: entered promiscuous mode [ 150.332167][ T8598] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 150.383864][ T8598] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 150.873781][ T8620] netlink: 'syz.3.777': attribute type 4 has an invalid length. [ 151.076896][ T8635] syz_tun: entered promiscuous mode [ 151.452770][ T8658] FAULT_INJECTION: forcing a failure. [ 151.452770][ T8658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.466215][ T8658] CPU: 1 UID: 0 PID: 8658 Comm: syz.1.790 Not tainted syzkaller #0 PREEMPT(full) [ 151.466243][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.466256][ T8658] Call Trace: [ 151.466264][ T8658] [ 151.466273][ T8658] dump_stack_lvl+0x189/0x250 [ 151.466302][ T8658] ? __pfx____ratelimit+0x10/0x10 [ 151.466333][ T8658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.466357][ T8658] ? __pfx__printk+0x10/0x10 [ 151.466384][ T8658] ? __might_fault+0xb0/0x130 [ 151.466417][ T8658] ? rcu_is_watching+0x15/0xb0 [ 151.466439][ T8658] should_fail_ex+0x414/0x560 [ 151.466470][ T8658] _copy_from_iter+0x1db/0x16f0 [ 151.466492][ T8658] ? rcu_is_watching+0x15/0xb0 [ 151.466513][ T8658] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 151.466542][ T8658] ? __pfx__copy_from_iter+0x10/0x10 [ 151.466563][ T8658] ? __build_skb_around+0x257/0x3e0 [ 151.466598][ T8658] ? netlink_sendmsg+0x642/0xb30 [ 151.466615][ T8658] ? skb_put+0x11b/0x210 [ 151.466636][ T8658] netlink_sendmsg+0x6b2/0xb30 [ 151.466659][ T8658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.466679][ T8658] ? aa_sock_msg_perm+0xf1/0x1d0 [ 151.466698][ T8658] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.466721][ T8658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.466759][ T8658] __sock_sendmsg+0x219/0x270 [ 151.466788][ T8658] ____sys_sendmsg+0x505/0x830 [ 151.466813][ T8658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.466840][ T8658] ? import_iovec+0x74/0xa0 [ 151.466864][ T8658] ___sys_sendmsg+0x21f/0x2a0 [ 151.466887][ T8658] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.466929][ T8658] ? __fget_files+0x2a/0x420 [ 151.466947][ T8658] ? __fget_files+0x3a0/0x420 [ 151.466970][ T8658] __x64_sys_sendmsg+0x19b/0x260 [ 151.466993][ T8658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.467039][ T8658] ? __pfx_ksys_write+0x10/0x10 [ 151.467065][ T8658] ? rcu_is_watching+0x15/0xb0 [ 151.467087][ T8658] ? rcu_is_watching+0x15/0xb0 [ 151.467109][ T8658] do_syscall_64+0xfa/0x3b0 [ 151.467127][ T8658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.467147][ T8658] ? clear_bhb_loop+0x60/0xb0 [ 151.467169][ T8658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.467189][ T8658] RIP: 0033:0x7fa99398ebe9 [ 151.467207][ T8658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.467224][ T8658] RSP: 002b:00007fa9947b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.467246][ T8658] RAX: ffffffffffffffda RBX: 00007fa993bb5fa0 RCX: 00007fa99398ebe9 [ 151.467261][ T8658] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 151.467274][ T8658] RBP: 00007fa9947b7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.467287][ T8658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.467299][ T8658] R13: 00007fa993bb6038 R14: 00007fa993bb5fa0 R15: 00007fffd9a43e58 [ 151.467324][ T8658] [ 151.770013][ T8660] __nla_validate_parse: 9 callbacks suppressed [ 151.770042][ T8660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.788'. [ 151.786565][ T8660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.788'. [ 151.948138][ T8669] netlink: 'syz.2.796': attribute type 32 has an invalid length. [ 152.024923][ T8672] nbd0: detected capacity change from 127 to 0 [ 152.378987][ T8687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.798'. [ 152.416257][ T8689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.798'. [ 152.528903][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 152.582174][ T8695] netlink: 'syz.1.800': attribute type 32 has an invalid length. [ 152.638186][ T8695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.800'. [ 152.913082][ T8707] tipc: Started in network mode [ 152.928449][ T8707] tipc: Node identity f254dd2bdfdd, cluster identity 4711 [ 152.953002][ T8707] tipc: Enabled bearer , priority 0 [ 152.994714][ T8714] syzkaller0: entered promiscuous mode [ 153.007463][ T8714] syzkaller0: entered allmulticast mode [ 153.088678][ T8707] tipc: Resetting bearer [ 153.116619][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 153.253904][ T8725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.808'. [ 153.291143][ T8725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.808'. [ 153.334550][ T8706] tipc: Resetting bearer [ 153.350096][ T8706] tipc: Disabling bearer [ 153.565397][ T8734] tipc: Enabling of bearer rejected, already enabled [ 153.833144][ T8742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.917323][ T8742] team0: Port device bond2 added [ 154.213402][ T8764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.820'. [ 154.259541][ T8764] geneve5: entered promiscuous mode [ 154.457954][ T8776] pimreg: entered allmulticast mode [ 154.632860][ T8788] gretap0: entered promiscuous mode [ 154.644963][ T8788] macvtap1: entered promiscuous mode [ 154.650887][ T8788] macvtap1: entered allmulticast mode [ 154.657304][ T8788] gretap0: entered allmulticast mode [ 154.902858][ T8800] netlink: 'syz.3.836': attribute type 10 has an invalid length. [ 155.329682][ T8825] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 155.402197][ T8825] bond4: entered promiscuous mode [ 155.416085][ T8830] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 155.417529][ T8825] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.488515][ T8825] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 155.520867][ T8825] vlan2: entered allmulticast mode [ 155.526142][ T8825] batadv0: entered allmulticast mode [ 155.597588][ T8838] 8021q: VLANs not supported on ip6_vti0 [ 155.662840][ T8830] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.691265][ T8830] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 155.722220][ T8847] netlink: 'syz.1.849': attribute type 16 has an invalid length. [ 155.741251][ T8830] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 155.751772][ T8847] netlink: 'syz.1.849': attribute type 17 has an invalid length. [ 155.827079][ T8830] bond4: (slave wireguard0): making interface the new active one [ 155.863811][ T8830] wireguard0: entered promiscuous mode [ 155.871096][ T8830] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 156.239683][ T8858] syz_tun: entered promiscuous mode [ 156.256212][ T7185] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.287913][ T7185] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.330037][ T7185] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.358962][ T7185] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.473725][ T8881] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 156.479887][ T8885] FAULT_INJECTION: forcing a failure. [ 156.479887][ T8885] name failslab, interval 1, probability 0, space 0, times 0 [ 156.494132][ T8881] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 156.496336][ T8885] CPU: 1 UID: 0 PID: 8885 Comm: syz.0.866 Not tainted syzkaller #0 PREEMPT(full) [ 156.496365][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.496380][ T8885] Call Trace: [ 156.496388][ T8885] [ 156.496398][ T8885] dump_stack_lvl+0x189/0x250 [ 156.496432][ T8885] ? __pfx____ratelimit+0x10/0x10 [ 156.496465][ T8885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.496491][ T8885] ? __pfx__printk+0x10/0x10 [ 156.496529][ T8885] should_fail_ex+0x414/0x560 [ 156.496561][ T8885] should_failslab+0xa8/0x100 [ 156.496596][ T8885] kmem_cache_alloc_noprof+0x73/0x3c0 [ 156.496628][ T8885] ? skb_clone+0x212/0x3a0 [ 156.496656][ T8885] skb_clone+0x212/0x3a0 [ 156.496683][ T8885] __netlink_deliver_tap+0x404/0x850 [ 156.496726][ T8885] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.496761][ T8885] netlink_deliver_tap+0x19c/0x1b0 [ 156.496796][ T8885] netlink_unicast+0x7fa/0x9e0 [ 156.496831][ T8885] ? __pfx_netlink_unicast+0x10/0x10 [ 156.496863][ T8885] ? netlink_sendmsg+0x642/0xb30 [ 156.496882][ T8885] ? skb_put+0x11b/0x210 [ 156.496904][ T8885] netlink_sendmsg+0x805/0xb30 [ 156.496929][ T8885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.496952][ T8885] ? aa_sock_msg_perm+0xf1/0x1d0 [ 156.496973][ T8885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.496998][ T8885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.497020][ T8885] __sock_sendmsg+0x219/0x270 [ 156.497052][ T8885] ____sys_sendmsg+0x505/0x830 [ 156.497079][ T8885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.497109][ T8885] ? import_iovec+0x74/0xa0 [ 156.497138][ T8885] ___sys_sendmsg+0x21f/0x2a0 [ 156.497163][ T8885] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.497206][ T8885] ? __fget_files+0x2a/0x420 [ 156.497225][ T8885] ? __fget_files+0x3a0/0x420 [ 156.497250][ T8885] __x64_sys_sendmsg+0x19b/0x260 [ 156.497283][ T8885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.497312][ T8885] ? __pfx_ksys_write+0x10/0x10 [ 156.497340][ T8885] ? rcu_is_watching+0x15/0xb0 [ 156.497366][ T8885] ? rcu_is_watching+0x15/0xb0 [ 156.497389][ T8885] do_syscall_64+0xfa/0x3b0 [ 156.497408][ T8885] ? rcu_is_watching+0x15/0xb0 [ 156.497429][ T8885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.497452][ T8885] ? clear_bhb_loop+0x60/0xb0 [ 156.497476][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.497499][ T8885] RIP: 0033:0x7f4181f8ebe9 [ 156.497518][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.497538][ T8885] RSP: 002b:00007f4182de8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.497557][ T8885] RAX: ffffffffffffffda RBX: 00007f41821b5fa0 RCX: 00007f4181f8ebe9 [ 156.497570][ T8885] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 156.497583][ T8885] RBP: 00007f4182de8090 R08: 0000000000000000 R09: 0000000000000000 [ 156.497598][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.497610][ T8885] R13: 00007f41821b6038 R14: 00007f41821b5fa0 R15: 00007ffc5401cd48 [ 156.497636][ T8885] [ 156.972698][ T8905] __nla_validate_parse: 12 callbacks suppressed [ 156.972721][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 157.297884][ T8918] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) ! [ 157.345935][ T8922] sch_fq: defrate 270991360 ignored. [ 157.593103][ T8933] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 157.600894][ T8933] netlink: 224 bytes leftover after parsing attributes in process `syz.3.880'. [ 157.626468][ T8932] vlan0 (unregistering): left promiscuous mode [ 157.777171][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 157.884201][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.884'. [ 157.903268][ T8945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.884'. [ 157.978000][ T8948] netlink: 'syz.4.887': attribute type 32 has an invalid length. [ 158.265837][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 158.309356][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 158.557226][ T8969] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 158.573768][ T8972] netlink: 'syz.0.895': attribute type 32 has an invalid length. [ 158.602836][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.895'. [ 158.616084][ T8974] netlink: 'syz.1.893': attribute type 1 has an invalid length. [ 158.621748][ T8969] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 158.654110][ T8974] netlink: 224 bytes leftover after parsing attributes in process `syz.1.893'. [ 158.825788][ T8984] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 158.826072][ T5987] IPVS: starting estimator thread 0... [ 158.965101][ T8989] IPVS: using max 35 ests per chain, 84000 per kthread [ 158.974688][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'. [ 159.037427][ T9004] netlink: 'syz.4.902': attribute type 1 has an invalid length. [ 159.284530][ T9015] FAULT_INJECTION: forcing a failure. [ 159.284530][ T9015] name failslab, interval 1, probability 0, space 0, times 0 [ 159.287191][ T9016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.309086][ T9015] CPU: 0 UID: 0 PID: 9015 Comm: syz.2.904 Not tainted syzkaller #0 PREEMPT(full) [ 159.309115][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.309127][ T9015] Call Trace: [ 159.309134][ T9015] [ 159.309142][ T9015] dump_stack_lvl+0x189/0x250 [ 159.309171][ T9015] ? __pfx____ratelimit+0x10/0x10 [ 159.309200][ T9015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.309224][ T9015] ? __pfx__printk+0x10/0x10 [ 159.309253][ T9015] ? fs_reclaim_acquire+0x7d/0x100 [ 159.309285][ T9015] ? rcu_is_watching+0x15/0xb0 [ 159.309304][ T9015] ? __pfx___might_resched+0x10/0x10 [ 159.309323][ T9015] ? lock_acquire+0x5f/0x360 [ 159.309353][ T9015] should_fail_ex+0x414/0x560 [ 159.309382][ T9015] should_failslab+0xa8/0x100 [ 159.309413][ T9015] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 159.309442][ T9015] ? __alloc_skb+0x112/0x2d0 [ 159.309463][ T9015] __alloc_skb+0x112/0x2d0 [ 159.309483][ T9015] tipc_msg_build+0x13b/0xcf0 [ 159.309518][ T9015] ? aa_label_sk_perm+0x4cd/0x630 [ 159.309548][ T9015] ? __pfx_tipc_msg_build+0x10/0x10 [ 159.309581][ T9015] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 159.309610][ T9015] ? tipc_sk_filtering+0x13c/0x510 [ 159.309637][ T9015] __tipc_sendstream+0x8ac/0x1290 [ 159.309685][ T9015] ? __pfx___tipc_sendstream+0x10/0x10 [ 159.309713][ T9015] ? tipc_sendstream+0x47/0x70 [ 159.309745][ T9015] ? __pfx_woken_wake_function+0x10/0x10 [ 159.309774][ T9015] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 159.309800][ T9015] tipc_sendstream+0x55/0x70 [ 159.309827][ T9015] ? __pfx_tipc_sendstream+0x10/0x10 [ 159.309863][ T9015] __sock_sendmsg+0x219/0x270 [ 159.309893][ T9015] ____sys_sendmsg+0x52d/0x830 [ 159.309917][ T9015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.309943][ T9015] ? import_iovec+0x74/0xa0 [ 159.309968][ T9015] ___sys_sendmsg+0x21f/0x2a0 [ 159.309990][ T9015] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.310014][ T9015] ? kstrtouint+0x6e/0xe0 [ 159.310068][ T9015] ? rcu_is_watching+0x15/0xb0 [ 159.310088][ T9015] ? lock_release+0x4b/0x3e0 [ 159.310118][ T9015] ? __might_fault+0xcc/0x130 [ 159.310148][ T9015] __sys_sendmmsg+0x227/0x430 [ 159.310172][ T9015] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.310192][ T9015] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 159.310238][ T9015] ? ksys_write+0x22a/0x250 [ 159.310266][ T9015] ? __pfx_ksys_write+0x10/0x10 [ 159.310292][ T9015] ? rcu_is_watching+0x15/0xb0 [ 159.310315][ T9015] __x64_sys_sendmmsg+0xa0/0xc0 [ 159.310338][ T9015] do_syscall_64+0xfa/0x3b0 [ 159.310357][ T9015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.310377][ T9015] ? clear_bhb_loop+0x60/0xb0 [ 159.310400][ T9015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.310420][ T9015] RIP: 0033:0x7fae14b8ebe9 [ 159.310438][ T9015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.310456][ T9015] RSP: 002b:00007fae159d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.310479][ T9015] RAX: ffffffffffffffda RBX: 00007fae14db6090 RCX: 00007fae14b8ebe9 [ 159.310494][ T9015] RDX: 0000000000000005 RSI: 0000200000005280 RDI: 0000000000000004 [ 159.310507][ T9015] RBP: 00007fae159d9090 R08: 0000000000000000 R09: 0000000000000000 [ 159.310520][ T9015] R10: 000000002004c890 R11: 0000000000000246 R12: 0000000000000001 [ 159.310532][ T9015] R13: 00007fae14db6128 R14: 00007fae14db6090 R15: 00007fffcc368848 [ 159.310555][ T9015] [ 160.450600][ T9044] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20002 [ 160.815158][ T9070] FAULT_INJECTION: forcing a failure. [ 160.815158][ T9070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.871524][ T9070] CPU: 0 UID: 0 PID: 9070 Comm: syz.3.923 Not tainted syzkaller #0 PREEMPT(full) [ 160.871552][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.871565][ T9070] Call Trace: [ 160.871573][ T9070] [ 160.871581][ T9070] dump_stack_lvl+0x189/0x250 [ 160.871611][ T9070] ? __pfx____ratelimit+0x10/0x10 [ 160.871639][ T9070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.871660][ T9070] ? __pfx__printk+0x10/0x10 [ 160.871685][ T9070] ? __might_fault+0xb0/0x130 [ 160.871712][ T9070] ? rcu_is_watching+0x15/0xb0 [ 160.871730][ T9070] should_fail_ex+0x414/0x560 [ 160.871758][ T9070] _copy_from_iter+0x1db/0x16f0 [ 160.871780][ T9070] ? rcu_is_watching+0x15/0xb0 [ 160.871799][ T9070] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 160.871839][ T9070] ? __pfx__copy_from_iter+0x10/0x10 [ 160.871860][ T9070] ? __build_skb_around+0x257/0x3e0 [ 160.871893][ T9070] ? netlink_sendmsg+0x642/0xb30 [ 160.871911][ T9070] ? skb_put+0x11b/0x210 [ 160.871931][ T9070] netlink_sendmsg+0x6b2/0xb30 [ 160.871953][ T9070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.871972][ T9070] ? aa_sock_msg_perm+0xf1/0x1d0 [ 160.871990][ T9070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.872011][ T9070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.872028][ T9070] __sock_sendmsg+0x219/0x270 [ 160.872055][ T9070] ____sys_sendmsg+0x505/0x830 [ 160.872079][ T9070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.872105][ T9070] ? import_iovec+0x74/0xa0 [ 160.872129][ T9070] ___sys_sendmsg+0x21f/0x2a0 [ 160.872150][ T9070] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.872199][ T9070] ? __fget_files+0x2a/0x420 [ 160.872214][ T9070] ? __fget_files+0x3a0/0x420 [ 160.872234][ T9070] __x64_sys_sendmsg+0x19b/0x260 [ 160.872256][ T9070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.872281][ T9070] ? __pfx_ksys_write+0x10/0x10 [ 160.872304][ T9070] ? rcu_is_watching+0x15/0xb0 [ 160.872325][ T9070] ? rcu_is_watching+0x15/0xb0 [ 160.872343][ T9070] do_syscall_64+0xfa/0x3b0 [ 160.872360][ T9070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.872380][ T9070] ? clear_bhb_loop+0x60/0xb0 [ 160.872402][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.872423][ T9070] RIP: 0033:0x7fd97238ebe9 [ 160.872440][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.872458][ T9070] RSP: 002b:00007fd97318c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.872480][ T9070] RAX: ffffffffffffffda RBX: 00007fd9725b6090 RCX: 00007fd97238ebe9 [ 160.872495][ T9070] RDX: 000000002000c800 RSI: 0000200000000380 RDI: 0000000000000009 [ 160.872509][ T9070] RBP: 00007fd97318c090 R08: 0000000000000000 R09: 0000000000000000 [ 160.872521][ T9070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.872533][ T9070] R13: 00007fd9725b6128 R14: 00007fd9725b6090 R15: 00007ffcd9c028a8 [ 160.872557][ T9070] [ 161.186326][ T9069] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 161.202790][ T9074] netlink: 'syz.0.926': attribute type 1 has an invalid length. [ 161.229403][ T9074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.237719][ T9080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.277580][ T9074] bond2: (slave geneve5): making interface the new active one [ 161.290878][ T9074] bond2: (slave geneve5): Enslaving as an active interface with an up link [ 161.301522][ T9082] tipc: Enabled bearer , priority 0 [ 161.310914][ T9078] syzkaller0: entered promiscuous mode [ 161.318924][ T9078] syzkaller0: entered allmulticast mode [ 161.349403][ T9078] tipc: Resetting bearer [ 161.357318][ T9082] tipc: Enabling of bearer rejected, already enabled [ 161.430358][ T9087] tipc: Resetting bearer [ 161.464335][ T9087] tipc: Disabling bearer [ 161.783178][ T9110] dummy0: entered promiscuous mode [ 161.790001][ T9110] dummy0: left promiscuous mode [ 162.153770][ T9138] __nla_validate_parse: 11 callbacks suppressed [ 162.153793][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.948'. [ 162.282462][ T9138] gretap0: entered promiscuous mode [ 162.287802][ T9138] macvtap2: entered promiscuous mode [ 162.311888][ T9138] macvtap2: entered allmulticast mode [ 162.342942][ T9138] gretap0: entered allmulticast mode [ 162.443010][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 162.603350][ T9149] macvlan1: left allmulticast mode [ 162.619500][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.953'. [ 162.621299][ T9149] veth1_vlan: left allmulticast mode [ 162.635042][ T9172] netlink: 'syz.4.955': attribute type 4 has an invalid length. [ 162.670448][ T9149] geneve2: left allmulticast mode [ 162.967227][ T9188] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 163.095009][ T9196] tipc: Enabling of bearer rejected, already enabled [ 163.129383][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 163.169993][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 163.186412][ T9202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.966'. [ 163.197827][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 163.289571][ T9207] netlink: 64 bytes leftover after parsing attributes in process `syz.2.968'. [ 163.296817][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 163.482683][ T9216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.970'. [ 163.747491][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 164.041296][ T9239] FAULT_INJECTION: forcing a failure. [ 164.041296][ T9239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.060378][ T9239] CPU: 0 UID: 0 PID: 9239 Comm: syz.1.978 Not tainted syzkaller #0 PREEMPT(full) [ 164.060407][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.060419][ T9239] Call Trace: [ 164.060427][ T9239] [ 164.060435][ T9239] dump_stack_lvl+0x189/0x250 [ 164.060465][ T9239] ? __pfx____ratelimit+0x10/0x10 [ 164.060494][ T9239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.060531][ T9239] ? __pfx__printk+0x10/0x10 [ 164.060557][ T9239] ? __might_fault+0xb0/0x130 [ 164.060590][ T9239] ? rcu_is_watching+0x15/0xb0 [ 164.060611][ T9239] should_fail_ex+0x414/0x560 [ 164.060640][ T9239] _copy_from_iter+0x1db/0x16f0 [ 164.060661][ T9239] ? rep_movs_alternative+0x4a/0x90 [ 164.060689][ T9239] ? __pfx__copy_from_iter+0x10/0x10 [ 164.060707][ T9239] ? sock_alloc_send_pskb+0x875/0x990 [ 164.060734][ T9239] ? __pfx__copy_from_iter+0x10/0x10 [ 164.060754][ T9239] ? page_copy_sane+0x16a/0x280 [ 164.060774][ T9239] copy_page_from_iter+0xdd/0x170 [ 164.060797][ T9239] skb_copy_datagram_from_iter+0x306/0x720 [ 164.060829][ T9239] unix_stream_sendmsg+0x5d1/0xdf0 [ 164.060864][ T9239] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 164.060893][ T9239] ? aa_sock_msg_perm+0xda/0x1d0 [ 164.060912][ T9239] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 164.060934][ T9239] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 164.060960][ T9239] __sock_sendmsg+0x219/0x270 [ 164.060989][ T9239] ____sys_sendmsg+0x505/0x830 [ 164.061031][ T9239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.061059][ T9239] ? import_iovec+0x74/0xa0 [ 164.061084][ T9239] ___sys_sendmsg+0x21f/0x2a0 [ 164.061108][ T9239] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.061142][ T9239] ? sb_end_write+0xe9/0x1c0 [ 164.061169][ T9239] ? __pfx_vfs_write+0x10/0x10 [ 164.061202][ T9239] __x64_sys_sendmsg+0x19b/0x260 [ 164.061226][ T9239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.061254][ T9239] ? __pfx_ksys_write+0x10/0x10 [ 164.061280][ T9239] ? rcu_is_watching+0x15/0xb0 [ 164.061304][ T9239] ? rcu_is_watching+0x15/0xb0 [ 164.061326][ T9239] do_syscall_64+0xfa/0x3b0 [ 164.061345][ T9239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.061366][ T9239] ? clear_bhb_loop+0x60/0xb0 [ 164.061389][ T9239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.061410][ T9239] RIP: 0033:0x7fa99398ebe9 [ 164.061433][ T9239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.061451][ T9239] RSP: 002b:00007fa9947b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.061474][ T9239] RAX: ffffffffffffffda RBX: 00007fa993bb5fa0 RCX: 00007fa99398ebe9 [ 164.061489][ T9239] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 164.061511][ T9239] RBP: 00007fa9947b7090 R08: 0000000000000000 R09: 0000000000000000 [ 164.061524][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.061536][ T9239] R13: 00007fa993bb6038 R14: 00007fa993bb5fa0 R15: 00007fffd9a43e58 [ 164.061561][ T9239] [ 164.352306][ T9235] netlink: 'syz.4.976': attribute type 10 has an invalid length. [ 164.360973][ T9235] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 164.464666][ T9249] netlink: 'syz.1.978': attribute type 1 has an invalid length. [ 165.084823][ T9288] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 165.112439][ T9288] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 165.211027][ T9290] tun0: tun_chr_ioctl cmd 1074025681 [ 165.231818][ T9290] geneve0: mtu greater than device maximum [ 165.555799][ T9317] netlink: 'syz.4.1004': attribute type 9 has an invalid length. [ 165.748017][ T9331] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 165.998740][ T9339] netlink: 'syz.2.1012': attribute type 16 has an invalid length. [ 166.054148][ T9339] netlink: 'syz.2.1012': attribute type 3 has an invalid length. [ 166.568086][ T9353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.606590][ T9353] veth1_vlan: left allmulticast mode [ 166.659564][ T9353] vlan0: left promiscuous mode [ 166.668122][ T9353] gretap0: left allmulticast mode [ 166.706647][ T9357] macsec2: entered promiscuous mode [ 166.721508][ T9357] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 166.741510][ T9357] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 166.803925][ T3500] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.842573][ T3500] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.860045][ T3500] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.929284][ T3500] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.387673][ T9401] netlink: 'syz.3.1028': attribute type 32 has an invalid length. [ 167.469568][ T9403] __nla_validate_parse: 11 callbacks suppressed [ 167.469588][ T9403] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1027'. [ 167.493242][ T9403] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1027'. [ 168.307838][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 168.542698][ T9454] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1043'. [ 168.574358][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 168.575624][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1041'. [ 168.611616][ T9461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1041'. [ 168.838095][ T9474] FAULT_INJECTION: forcing a failure. [ 168.838095][ T9474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.854977][ T9475] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 168.881668][ T9474] CPU: 0 UID: 0 PID: 9474 Comm: syz.4.1048 Not tainted syzkaller #0 PREEMPT(full) [ 168.881698][ T9474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.881712][ T9474] Call Trace: [ 168.881719][ T9474] [ 168.881728][ T9474] dump_stack_lvl+0x189/0x250 [ 168.881760][ T9474] ? __pfx____ratelimit+0x10/0x10 [ 168.881792][ T9474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.881817][ T9474] ? __pfx__printk+0x10/0x10 [ 168.881845][ T9474] ? __might_fault+0xb0/0x130 [ 168.881880][ T9474] ? rcu_is_watching+0x15/0xb0 [ 168.881904][ T9474] should_fail_ex+0x414/0x560 [ 168.881934][ T9474] _copy_from_user+0x2d/0xb0 [ 168.881960][ T9474] ___sys_sendmsg+0x158/0x2a0 [ 168.881984][ T9474] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.882030][ T9474] ? __fget_files+0x2a/0x420 [ 168.882049][ T9474] ? __fget_files+0x3a0/0x420 [ 168.882073][ T9474] __x64_sys_sendmsg+0x19b/0x260 [ 168.882098][ T9474] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.882127][ T9474] ? __pfx_ksys_write+0x10/0x10 [ 168.882154][ T9474] ? rcu_is_watching+0x15/0xb0 [ 168.882178][ T9474] ? rcu_is_watching+0x15/0xb0 [ 168.882212][ T9474] do_syscall_64+0xfa/0x3b0 [ 168.882231][ T9474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.882251][ T9474] ? clear_bhb_loop+0x60/0xb0 [ 168.882275][ T9474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.882302][ T9474] RIP: 0033:0x7f87a298ebe9 [ 168.882321][ T9474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.882339][ T9474] RSP: 002b:00007f87a3888038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.882362][ T9474] RAX: ffffffffffffffda RBX: 00007f87a2bb5fa0 RCX: 00007f87a298ebe9 [ 168.882378][ T9474] RDX: 000000002000c050 RSI: 0000200000000300 RDI: 0000000000000004 [ 168.882392][ T9474] RBP: 00007f87a3888090 R08: 0000000000000000 R09: 0000000000000000 [ 168.882405][ T9474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.882417][ T9474] R13: 00007f87a2bb6038 R14: 00007f87a2bb5fa0 R15: 00007ffc83839b58 [ 168.882443][ T9474] [ 169.128377][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 169.405720][ T9488] netlink: 'syz.1.1052': attribute type 16 has an invalid length. [ 169.414087][ T9488] netlink: 'syz.1.1052': attribute type 3 has an invalid length. [ 169.431754][ T9488] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1052'. [ 169.442730][ T9490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 169.574473][ T9496] netlink: 'syz.4.1054': attribute type 1 has an invalid length. [ 169.744664][ T9503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.937361][ T9496] veth5: entered promiscuous mode [ 169.955930][ T9496] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 170.290303][ T9533] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 170.431241][ T9533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.569714][ T9540] bond3: (slave geneve4): making interface the new active one [ 170.600755][ T9540] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 170.667714][ T9551] netlink: 'syz.4.1070': attribute type 8 has an invalid length. [ 170.811285][ T9560] dummy0: entered promiscuous mode [ 170.835693][ T9560] dummy0: left promiscuous mode [ 171.176173][ T9577] macvtap3: entered promiscuous mode [ 171.196791][ T9577] macvtap3: entered allmulticast mode [ 171.215461][ T9577] gretap0: entered allmulticast mode [ 171.378980][ T9583] macvlan1: left allmulticast mode [ 171.400340][ T9583] veth1_vlan: left allmulticast mode [ 171.416093][ T9583] macvtap1: left allmulticast mode [ 171.424025][ T9583] geneve3: left allmulticast mode [ 171.430007][ T9583] macvtap3: left allmulticast mode [ 171.435850][ T9583] gretap0: left allmulticast mode [ 171.884823][ T9608] vlan2: entered promiscuous mode [ 171.922904][ T9611] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 171.935374][ T9611] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 172.027673][ T9611] netlink: 'syz.3.1092': attribute type 1 has an invalid length. [ 172.306490][ T9631] macvtap4: entered promiscuous mode [ 172.385156][ T9641] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 172.568037][ T9655] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 172.645588][ T9661] FAULT_INJECTION: forcing a failure. [ 172.645588][ T9661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.659784][ T9661] CPU: 1 UID: 0 PID: 9661 Comm: syz.0.1110 Not tainted syzkaller #0 PREEMPT(full) [ 172.659816][ T9661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.659830][ T9661] Call Trace: [ 172.659838][ T9661] [ 172.659846][ T9661] dump_stack_lvl+0x189/0x250 [ 172.659877][ T9661] ? __pfx____ratelimit+0x10/0x10 [ 172.659908][ T9661] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.659946][ T9661] ? __pfx__printk+0x10/0x10 [ 172.659978][ T9661] ? __might_fault+0xb0/0x130 [ 172.660012][ T9661] ? rcu_is_watching+0x15/0xb0 [ 172.660034][ T9661] should_fail_ex+0x414/0x560 [ 172.660065][ T9661] _copy_from_iter+0x1db/0x16f0 [ 172.660086][ T9661] ? rep_movs_alternative+0x4a/0x90 [ 172.660116][ T9661] ? __pfx__copy_from_iter+0x10/0x10 [ 172.660133][ T9661] ? sock_alloc_send_pskb+0x875/0x990 [ 172.660162][ T9661] ? __pfx__copy_from_iter+0x10/0x10 [ 172.660183][ T9661] ? page_copy_sane+0x16a/0x280 [ 172.660204][ T9661] copy_page_from_iter+0xdd/0x170 [ 172.660228][ T9661] skb_copy_datagram_from_iter+0x306/0x720 [ 172.660261][ T9661] unix_stream_sendmsg+0x5d1/0xdf0 [ 172.660304][ T9661] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 172.660333][ T9661] ? aa_sock_msg_perm+0xda/0x1d0 [ 172.660354][ T9661] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.660377][ T9661] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 172.660404][ T9661] __sock_sendmsg+0x219/0x270 [ 172.660432][ T9661] ____sys_sendmsg+0x505/0x830 [ 172.660458][ T9661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.660484][ T9661] ? import_iovec+0x74/0xa0 [ 172.660510][ T9661] ___sys_sendmsg+0x21f/0x2a0 [ 172.660533][ T9661] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.660567][ T9661] ? sb_end_write+0xe9/0x1c0 [ 172.660594][ T9661] ? __pfx_vfs_write+0x10/0x10 [ 172.660632][ T9661] __x64_sys_sendmsg+0x19b/0x260 [ 172.660657][ T9661] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.660685][ T9661] ? __pfx_ksys_write+0x10/0x10 [ 172.660710][ T9661] ? rcu_is_watching+0x15/0xb0 [ 172.660733][ T9661] ? rcu_is_watching+0x15/0xb0 [ 172.660755][ T9661] do_syscall_64+0xfa/0x3b0 [ 172.660774][ T9661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.660794][ T9661] ? clear_bhb_loop+0x60/0xb0 [ 172.660818][ T9661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.660839][ T9661] RIP: 0033:0x7f4181f8ebe9 [ 172.660858][ T9661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.660877][ T9661] RSP: 002b:00007f4182de8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.660905][ T9661] RAX: ffffffffffffffda RBX: 00007f41821b5fa0 RCX: 00007f4181f8ebe9 [ 172.660927][ T9661] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 172.660942][ T9661] RBP: 00007f4182de8090 R08: 0000000000000000 R09: 0000000000000000 [ 172.660955][ T9661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.660967][ T9661] R13: 00007f41821b6038 R14: 00007f41821b5fa0 R15: 00007ffc5401cd48 [ 172.660992][ T9661] [ 172.995608][ T9658] nbd1: detected capacity change from 0 to 549764202496 [ 173.018080][ T9661] netlink: 'syz.0.1110': attribute type 1 has an invalid length. [ 173.028692][ T9661] __nla_validate_parse: 14 callbacks suppressed [ 173.028709][ T9661] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1110'. [ 173.164796][ T5869] block nbd1: Receive control failed (result -104) [ 173.219539][ T9679] netlink: 'syz.3.1113': attribute type 16 has an invalid length. [ 173.245470][ T9679] netlink: 'syz.3.1113': attribute type 3 has an invalid length. [ 173.255273][ T9679] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.1113'. [ 173.475150][ T9699] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1122'. [ 173.502707][ T9699] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1122'. [ 173.609048][ T9699] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1122'. [ 174.113314][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 174.210341][ T9725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1129'. [ 174.238310][ T9719] tipc: Enabled bearer , priority 0 [ 174.246970][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 174.259988][ T9717] tipc: Resetting bearer [ 174.420721][ T9717] tipc: Disabling bearer [ 174.534646][ T9732] validate_nla: 1 callbacks suppressed [ 174.534666][ T9732] netlink: 'syz.4.1131': attribute type 9 has an invalid length. [ 174.577248][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 174.743030][ T9740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.756057][ T9740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.804147][ T9740] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 174.854853][ T9746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1133'. [ 174.940037][ T9740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.973969][ T9740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.008663][ T9740] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.063582][ T9755] tipc: Enabling of bearer rejected, failed to enable media [ 175.109419][ T9740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.120766][ T9740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.133210][ T9740] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.164079][ T9769] FAULT_INJECTION: forcing a failure. [ 175.164079][ T9769] name failslab, interval 1, probability 0, space 0, times 0 [ 175.181534][ T9769] CPU: 0 UID: 0 PID: 9769 Comm: syz.1.1141 Not tainted syzkaller #0 PREEMPT(full) [ 175.181563][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.181577][ T9769] Call Trace: [ 175.181584][ T9769] [ 175.181593][ T9769] dump_stack_lvl+0x189/0x250 [ 175.181624][ T9769] ? __pfx____ratelimit+0x10/0x10 [ 175.181655][ T9769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.181679][ T9769] ? __pfx__printk+0x10/0x10 [ 175.181709][ T9769] ? fs_reclaim_acquire+0x7d/0x100 [ 175.181742][ T9769] ? __pfx___might_resched+0x10/0x10 [ 175.181770][ T9769] ? lock_acquire+0x5f/0x360 [ 175.181801][ T9769] should_fail_ex+0x414/0x560 [ 175.181831][ T9769] should_failslab+0xa8/0x100 [ 175.181862][ T9769] __kmalloc_cache_noprof+0x70/0x3d0 [ 175.181890][ T9769] ? tcf_block_get_ext+0x68d/0x17d0 [ 175.181922][ T9769] tcf_block_get_ext+0x68d/0x17d0 [ 175.181959][ T9769] ? __pfx_prio_init+0x10/0x10 [ 175.181985][ T9769] tcf_block_get+0x67/0xa0 [ 175.182014][ T9769] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 175.182048][ T9769] prio_init+0x36/0x80 [ 175.182073][ T9769] qdisc_create+0x7a9/0xea0 [ 175.182104][ T9769] tc_modify_qdisc+0x1538/0x20e0 [ 175.182138][ T9769] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 175.182186][ T9769] ? lock_release+0x4b/0x3e0 [ 175.182214][ T9769] ? bpf_lsm_capable+0x9/0x20 [ 175.182241][ T9769] ? security_capable+0x7e/0x2e0 [ 175.182273][ T9769] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 175.182294][ T9769] rtnetlink_rcv_msg+0x77c/0xb70 [ 175.182321][ T9769] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 175.182345][ T9769] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.182370][ T9769] ? __netlink_lookup+0xbd/0x810 [ 175.182384][ T9769] ? rcu_is_watching+0x15/0xb0 [ 175.182401][ T9769] ? rcu_is_watching+0x15/0xb0 [ 175.182419][ T9769] netlink_rcv_skb+0x205/0x470 [ 175.182444][ T9769] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.182469][ T9769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.182504][ T9769] netlink_unicast+0x82f/0x9e0 [ 175.182530][ T9769] ? __pfx_netlink_unicast+0x10/0x10 [ 175.182552][ T9769] ? netlink_sendmsg+0x642/0xb30 [ 175.182566][ T9769] ? skb_put+0x11b/0x210 [ 175.182582][ T9769] netlink_sendmsg+0x805/0xb30 [ 175.182600][ T9769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.182616][ T9769] ? aa_sock_msg_perm+0xf1/0x1d0 [ 175.182632][ T9769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.182651][ T9769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.182668][ T9769] __sock_sendmsg+0x219/0x270 [ 175.182692][ T9769] ____sys_sendmsg+0x505/0x830 [ 175.182711][ T9769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.182732][ T9769] ? import_iovec+0x74/0xa0 [ 175.182757][ T9769] ___sys_sendmsg+0x21f/0x2a0 [ 175.182775][ T9769] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.182806][ T9769] ? __fget_files+0x2a/0x420 [ 175.182820][ T9769] ? __fget_files+0x3a0/0x420 [ 175.182837][ T9769] __x64_sys_sendmsg+0x19b/0x260 [ 175.182855][ T9769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.182877][ T9769] ? __pfx_ksys_write+0x10/0x10 [ 175.182898][ T9769] ? rcu_is_watching+0x15/0xb0 [ 175.182915][ T9769] ? rcu_is_watching+0x15/0xb0 [ 175.182932][ T9769] do_syscall_64+0xfa/0x3b0 [ 175.182946][ T9769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.182968][ T9769] ? clear_bhb_loop+0x60/0xb0 [ 175.182986][ T9769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.183002][ T9769] RIP: 0033:0x7fa99398ebe9 [ 175.183017][ T9769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.183032][ T9769] RSP: 002b:00007fa9947b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.183050][ T9769] RAX: ffffffffffffffda RBX: 00007fa993bb5fa0 RCX: 00007fa99398ebe9 [ 175.183062][ T9769] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 175.183073][ T9769] RBP: 00007fa9947b7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.183083][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.183093][ T9769] R13: 00007fa993bb6038 R14: 00007fa993bb5fa0 R15: 00007fffd9a43e58 [ 175.183112][ T9769] [ 175.595519][ T9740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 175.641131][ T9740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.678050][ T9740] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 175.869771][ T9787] netlink: 'syz.1.1150': attribute type 16 has an invalid length. [ 175.877925][ T9787] netlink: 'syz.1.1150': attribute type 3 has an invalid length. [ 175.945628][ T7185] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.964840][ T7185] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 175.988784][ T7185] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 176.030979][ T9785] bond0: Unable to set down delay as MII monitoring is disabled [ 176.084473][ T9790] macsec2: entered promiscuous mode [ 176.116490][ T9790] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 176.140167][ T9790] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 176.217055][ T7185] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.243146][ T7185] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 176.285903][ T7185] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 176.325400][ T7185] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.343545][ T7185] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 176.352717][ T7185] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 176.376813][ T9803] netlink: 'syz.4.1155': attribute type 10 has an invalid length. [ 176.421553][ T7185] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.463001][ T7185] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 176.471360][ T7185] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 176.911321][ T9824] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 176.945486][ T9827] netlink: 'syz.3.1163': attribute type 1 has an invalid length. [ 177.050197][ T9835] netlink: 'syz.0.1166': attribute type 32 has an invalid length. [ 177.418785][ T9859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.960250][ T9879] tipc: Started in network mode [ 177.962113][ T9883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.965721][ T9879] tipc: Node identity , cluster identity 4711 [ 177.981786][ T9879] tipc: Failed to set node id, please configure manually [ 177.988862][ T9879] tipc: Enabling of bearer rejected, failed to enable media [ 178.035082][ T9887] FAULT_INJECTION: forcing a failure. [ 178.035082][ T9887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.080298][ T9887] CPU: 1 UID: 0 PID: 9887 Comm: syz.4.1183 Not tainted syzkaller #0 PREEMPT(full) [ 178.080330][ T9887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.080344][ T9887] Call Trace: [ 178.080352][ T9887] [ 178.080361][ T9887] dump_stack_lvl+0x189/0x250 [ 178.080392][ T9887] ? __pfx____ratelimit+0x10/0x10 [ 178.080423][ T9887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.080449][ T9887] ? __pfx__printk+0x10/0x10 [ 178.080481][ T9887] ? rcu_is_watching+0x15/0xb0 [ 178.080503][ T9887] should_fail_ex+0x414/0x560 [ 178.080533][ T9887] _copy_to_user+0x31/0xb0 [ 178.080558][ T9887] simple_read_from_buffer+0xe1/0x170 [ 178.080591][ T9887] proc_fail_nth_read+0x1b3/0x220 [ 178.080615][ T9887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.080640][ T9887] ? rw_verify_area+0x2a6/0x4d0 [ 178.080665][ T9887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.080689][ T9887] vfs_read+0x1fd/0xa30 [ 178.080713][ T9887] ? fdget_pos+0x247/0x320 [ 178.080734][ T9887] ? __pfx___mutex_lock+0x10/0x10 [ 178.080765][ T9887] ? __pfx_vfs_read+0x10/0x10 [ 178.080796][ T9887] ? __fget_files+0x3a0/0x420 [ 178.080813][ T9887] ? __fget_files+0x2a/0x420 [ 178.080835][ T9887] ksys_read+0x145/0x250 [ 178.080863][ T9887] ? __pfx_ksys_read+0x10/0x10 [ 178.080888][ T9887] ? rcu_is_watching+0x15/0xb0 [ 178.080911][ T9887] ? rcu_is_watching+0x15/0xb0 [ 178.080933][ T9887] do_syscall_64+0xfa/0x3b0 [ 178.080952][ T9887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.080978][ T9887] ? clear_bhb_loop+0x60/0xb0 [ 178.081002][ T9887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.081022][ T9887] RIP: 0033:0x7f87a298d5fc [ 178.081040][ T9887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.081059][ T9887] RSP: 002b:00007f87a3888030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.081083][ T9887] RAX: ffffffffffffffda RBX: 00007f87a2bb5fa0 RCX: 00007f87a298d5fc [ 178.081099][ T9887] RDX: 000000000000000f RSI: 00007f87a38880a0 RDI: 0000000000000005 [ 178.081112][ T9887] RBP: 00007f87a3888090 R08: 0000000000000000 R09: 0000000000000000 [ 178.081126][ T9887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.081139][ T9887] R13: 00007f87a2bb6038 R14: 00007f87a2bb5fa0 R15: 00007ffc83839b58 [ 178.081171][ T9887] [ 178.627251][ T9907] __nla_validate_parse: 8 callbacks suppressed [ 178.627271][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 178.692904][ T9917] netlink: 'syz.1.1195': attribute type 16 has an invalid length. [ 178.721641][ T9917] netlink: 'syz.1.1195': attribute type 3 has an invalid length. [ 178.748662][ T9917] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1195'. [ 179.052445][ T9933] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1201'. [ 179.061776][ T9933] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1201'. [ 179.070802][ T9933] netlink: 'syz.4.1201': attribute type 5 has an invalid length. [ 179.080568][ T9933] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1201'. [ 179.385557][ T9951] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 179.497250][ T9951] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.516148][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 179.560778][ T9958] bond5: (slave geneve6): making interface the new active one [ 179.592314][ T9958] bond5: (slave geneve6): Enslaving as an active interface with an up link [ 179.610325][ T9960] dummy0: entered promiscuous mode [ 179.620945][ T9960] dummy0: left promiscuous mode [ 179.860892][ T9977] netlink: 'syz.3.1216': attribute type 21 has an invalid length. [ 179.916970][ T9977] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1216'. [ 179.969578][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 180.006587][ T9982] macvtap4: entered promiscuous mode [ 180.012488][ T9982] macvtap4: entered allmulticast mode [ 180.158012][ T9991] netlink: 'syz.4.1221': attribute type 13 has an invalid length. [ 180.192104][ T9991] netlink: 'syz.4.1221': attribute type 17 has an invalid length. [ 180.223204][ T9990] veth0_to_team: left allmulticast mode [ 180.283229][ T9990] syzkaller0: left allmulticast mode [ 180.289362][ T9990] tipc: Resetting bearer [ 180.300007][ T9990] tipc: Resetting bearer [ 180.309831][ T9990] geneve3: left allmulticast mode [ 180.316815][ T9990] macvtap1: left allmulticast mode [ 180.322461][ T9990] gretap0: left allmulticast mode [ 180.397125][ T9991] syz_tun: left promiscuous mode [ 180.441719][ T9991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.459885][ T9991] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.475472][ T9991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.494561][ T9996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1223'. [ 180.534120][ T9996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1223'. [ 181.900312][T10069] FAULT_INJECTION: forcing a failure. [ 181.900312][T10069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.939725][T10069] CPU: 1 UID: 0 PID: 10069 Comm: syz.4.1243 Not tainted syzkaller #0 PREEMPT(full) [ 181.939757][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.939772][T10069] Call Trace: [ 181.939781][T10069] [ 181.939790][T10069] dump_stack_lvl+0x189/0x250 [ 181.939822][T10069] ? __pfx____ratelimit+0x10/0x10 [ 181.939853][T10069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.939879][T10069] ? __pfx__printk+0x10/0x10 [ 181.939906][T10069] ? __might_fault+0xb0/0x130 [ 181.939940][T10069] ? rcu_is_watching+0x15/0xb0 [ 181.939963][T10069] should_fail_ex+0x414/0x560 [ 181.939994][T10069] _copy_from_iter+0x1db/0x16f0 [ 181.940023][T10069] ? rep_movs_alternative+0x4a/0x90 [ 181.940053][T10069] ? __pfx__copy_from_iter+0x10/0x10 [ 181.940072][T10069] ? sock_alloc_send_pskb+0x875/0x990 [ 181.940101][T10069] ? __pfx__copy_from_iter+0x10/0x10 [ 181.940123][T10069] ? page_copy_sane+0x16a/0x280 [ 181.940145][T10069] copy_page_from_iter+0xdd/0x170 [ 181.940168][T10069] skb_copy_datagram_from_iter+0x306/0x720 [ 181.940203][T10069] unix_stream_sendmsg+0x5d1/0xdf0 [ 181.940242][T10069] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 181.940273][T10069] ? aa_sock_msg_perm+0xda/0x1d0 [ 181.940293][T10069] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.940316][T10069] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 181.940343][T10069] __sock_sendmsg+0x219/0x270 [ 181.940373][T10069] ____sys_sendmsg+0x505/0x830 [ 181.940399][T10069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.940426][T10069] ? import_iovec+0x74/0xa0 [ 181.940451][T10069] ___sys_sendmsg+0x21f/0x2a0 [ 181.940475][T10069] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.940496][T10069] ? trace_save_cmdline+0x35b/0x500 [ 181.940534][T10069] ? sb_end_write+0xe9/0x1c0 [ 181.940561][T10069] ? __pfx_vfs_write+0x10/0x10 [ 181.940594][T10069] __x64_sys_sendmsg+0x19b/0x260 [ 181.940619][T10069] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.940652][T10069] ? __pfx_ksys_write+0x10/0x10 [ 181.940683][T10069] ? rcu_is_watching+0x15/0xb0 [ 181.940706][T10069] do_syscall_64+0xfa/0x3b0 [ 181.940724][T10069] ? rcu_is_watching+0x15/0xb0 [ 181.940744][T10069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.940765][T10069] ? clear_bhb_loop+0x60/0xb0 [ 181.940790][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.940811][T10069] RIP: 0033:0x7f87a298ebe9 [ 181.940830][T10069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.940849][T10069] RSP: 002b:00007f87a3888038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.940873][T10069] RAX: ffffffffffffffda RBX: 00007f87a2bb5fa0 RCX: 00007f87a298ebe9 [ 181.940888][T10069] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 181.940902][T10069] RBP: 00007f87a3888090 R08: 0000000000000000 R09: 0000000000000000 [ 181.940916][T10069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.940929][T10069] R13: 00007f87a2bb6038 R14: 00007f87a2bb5fa0 R15: 00007ffc83839b58 [ 181.940954][T10069] [ 182.241150][T10069] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 182.361997][T10083] netlink: 'syz.2.1245': attribute type 10 has an invalid length. [ 182.369914][T10083] macvlan1: entered allmulticast mode [ 182.408334][T10083] veth1_vlan: entered allmulticast mode [ 182.423727][T10083] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 182.931222][T10118] netlink: 'syz.2.1255': attribute type 9 has an invalid length. [ 183.012631][T10111] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 183.078130][T10126] netlink: 'syz.2.1258': attribute type 16 has an invalid length. [ 183.112313][T10126] netlink: 'syz.2.1258': attribute type 3 has an invalid length. [ 183.158593][T10127] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 183.728364][T10157] macvtap2: entered promiscuous mode [ 183.751962][T10157] macvtap2: entered allmulticast mode [ 183.774124][T10157] syz_tun: entered allmulticast mode [ 183.804122][T10157] syz_tun: entered promiscuous mode [ 183.827435][T10157] team0: Device macvtap2 failed to register rx_handler [ 183.838119][T10157] syz_tun: left allmulticast mode [ 183.850545][T10157] syz_tun: left promiscuous mode [ 183.863114][T10162] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 184.041627][T10173] tls_set_device_offload_rx: netdev not found [ 184.131353][T10178] ip6_vti0: entered allmulticast mode [ 184.148212][T10182] __nla_validate_parse: 14 callbacks suppressed [ 184.148279][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'. [ 184.358015][T10189] TC_ACT_REPEAT abuse ? [ 184.385965][T10189] TC_ACT_REPEAT abuse ? [ 184.400640][T10189] TC_ACT_REPEAT abuse ? [ 184.510940][T10189] TC_ACT_REPEAT abuse ? [ 184.516658][T10189] TC_ACT_REPEAT abuse ? [ 184.588615][T10200] netlink: 'syz.0.1277': attribute type 12 has an invalid length. [ 184.681681][T10207] netlink: 'syz.1.1279': attribute type 32 has an invalid length. [ 184.733648][T10207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1279'. [ 184.929622][T10217] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 184.969396][T10217] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1283'. [ 184.984458][T10220] netlink: 'syz.3.1285': attribute type 12 has an invalid length. [ 185.143463][T10231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.232023][T10236] netlink: 'syz.1.1289': attribute type 1 has an invalid length. [ 185.265289][T10237] netlink: 'syz.0.1291': attribute type 32 has an invalid length. [ 185.339271][T10236] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1289'. [ 185.577869][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1292'. [ 185.596949][T10258] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1294'. [ 185.845881][T10267] FAULT_INJECTION: forcing a failure. [ 185.845881][T10267] name failslab, interval 1, probability 0, space 0, times 0 [ 185.882936][T10267] CPU: 0 UID: 0 PID: 10267 Comm: syz.0.1295 Not tainted syzkaller #0 PREEMPT(full) [ 185.882964][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.882976][T10267] Call Trace: [ 185.882984][T10267] [ 185.882991][T10267] dump_stack_lvl+0x189/0x250 [ 185.883017][T10267] ? __pfx____ratelimit+0x10/0x10 [ 185.883043][T10267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.883064][T10267] ? __pfx__printk+0x10/0x10 [ 185.883090][T10267] ? fs_reclaim_acquire+0x7d/0x100 [ 185.883118][T10267] ? rcu_is_watching+0x15/0xb0 [ 185.883135][T10267] ? __pfx___might_resched+0x10/0x10 [ 185.883151][T10267] ? lock_acquire+0x5f/0x360 [ 185.883178][T10267] should_fail_ex+0x414/0x560 [ 185.883203][T10267] should_failslab+0xa8/0x100 [ 185.883229][T10267] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 185.883254][T10267] ? __alloc_skb+0x112/0x2d0 [ 185.883272][T10267] __alloc_skb+0x112/0x2d0 [ 185.883289][T10267] tipc_msg_build+0x13b/0xcf0 [ 185.883319][T10267] ? aa_label_sk_perm+0x4cd/0x630 [ 185.883345][T10267] ? __pfx_tipc_msg_build+0x10/0x10 [ 185.883399][T10267] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 185.883446][T10267] ? tipc_sk_filtering+0x13c/0x510 [ 185.883473][T10267] __tipc_sendstream+0x8ac/0x1290 [ 185.883521][T10267] ? __pfx___tipc_sendstream+0x10/0x10 [ 185.883549][T10267] ? tipc_sendstream+0x47/0x70 [ 185.883573][T10267] ? __pfx_woken_wake_function+0x10/0x10 [ 185.883600][T10267] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 185.883629][T10267] tipc_sendstream+0x55/0x70 [ 185.883653][T10267] ? __pfx_tipc_sendstream+0x10/0x10 [ 185.883677][T10267] __sock_sendmsg+0x219/0x270 [ 185.883704][T10267] ____sys_sendmsg+0x52d/0x830 [ 185.883725][T10267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.883748][T10267] ? import_iovec+0x74/0xa0 [ 185.883771][T10267] ___sys_sendmsg+0x21f/0x2a0 [ 185.883791][T10267] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.883812][T10267] ? kstrtouint+0x6e/0xe0 [ 185.883851][T10267] ? rcu_is_watching+0x15/0xb0 [ 185.883868][T10267] ? lock_release+0x4b/0x3e0 [ 185.883895][T10267] ? __might_fault+0xcc/0x130 [ 185.883921][T10267] __sys_sendmmsg+0x227/0x430 [ 185.883943][T10267] ? __pfx___sys_sendmmsg+0x10/0x10 [ 185.883961][T10267] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 185.884001][T10267] ? ksys_write+0x22a/0x250 [ 185.884026][T10267] ? __pfx_ksys_write+0x10/0x10 [ 185.884049][T10267] ? rcu_is_watching+0x15/0xb0 [ 185.884070][T10267] __x64_sys_sendmmsg+0xa0/0xc0 [ 185.884090][T10267] do_syscall_64+0xfa/0x3b0 [ 185.884107][T10267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.884125][T10267] ? clear_bhb_loop+0x60/0xb0 [ 185.884146][T10267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.884164][T10267] RIP: 0033:0x7f4181f8ebe9 [ 185.884181][T10267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.884197][T10267] RSP: 002b:00007f4182dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 185.884218][T10267] RAX: ffffffffffffffda RBX: 00007f41821b6090 RCX: 00007f4181f8ebe9 [ 185.884232][T10267] RDX: 0000000000000005 RSI: 0000200000005280 RDI: 0000000000000004 [ 185.884244][T10267] RBP: 00007f4182dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.884256][T10267] R10: 000000002004c890 R11: 0000000000000246 R12: 0000000000000002 [ 185.884268][T10267] R13: 00007f41821b6128 R14: 00007f41821b6090 R15: 00007ffc5401cd48 [ 185.884289][T10267] [ 187.369847][T10313] netlink: 'syz.2.1307': attribute type 16 has an invalid length. [ 187.398826][T10313] netlink: 'syz.2.1307': attribute type 3 has an invalid length. [ 187.433710][T10313] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1307'. [ 187.702658][T10328] FAULT_INJECTION: forcing a failure. [ 187.702658][T10328] name failslab, interval 1, probability 0, space 0, times 0 [ 187.721789][T10328] CPU: 0 UID: 0 PID: 10328 Comm: syz.0.1311 Not tainted syzkaller #0 PREEMPT(full) [ 187.721818][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.721836][T10328] Call Trace: [ 187.721843][T10328] [ 187.721852][T10328] dump_stack_lvl+0x189/0x250 [ 187.721883][T10328] ? __pfx____ratelimit+0x10/0x10 [ 187.721913][T10328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.721938][T10328] ? __pfx__printk+0x10/0x10 [ 187.721970][T10328] ? __pfx___might_resched+0x10/0x10 [ 187.721990][T10328] ? lock_acquire+0x5f/0x360 [ 187.722023][T10328] should_fail_ex+0x414/0x560 [ 187.722054][T10328] should_failslab+0xa8/0x100 [ 187.722086][T10328] __kmalloc_noprof+0xcb/0x4f0 [ 187.722114][T10328] ? ethnl_default_doit+0x19b/0xcd0 [ 187.722138][T10328] ethnl_default_doit+0x19b/0xcd0 [ 187.722159][T10328] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 187.722186][T10328] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 187.722216][T10328] genl_family_rcv_msg_doit+0x212/0x300 [ 187.722255][T10328] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.722301][T10328] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 187.722328][T10328] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 187.722358][T10328] genl_rcv_msg+0x60e/0x790 [ 187.722382][T10328] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.722404][T10328] ? __pfx_ethnl_default_doit+0x10/0x10 [ 187.722429][T10328] netlink_rcv_skb+0x205/0x470 [ 187.722458][T10328] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.722481][T10328] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.722514][T10328] ? lock_release+0x4b/0x3e0 [ 187.722543][T10328] ? down_read+0x1ad/0x2e0 [ 187.722562][T10328] genl_rcv+0x28/0x40 [ 187.722581][T10328] netlink_unicast+0x82f/0x9e0 [ 187.722611][T10328] ? __pfx_netlink_unicast+0x10/0x10 [ 187.722637][T10328] ? netlink_sendmsg+0x642/0xb30 [ 187.722653][T10328] ? skb_put+0x11b/0x210 [ 187.722672][T10328] netlink_sendmsg+0x805/0xb30 [ 187.722693][T10328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.722712][T10328] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.722730][T10328] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.722751][T10328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.722769][T10328] __sock_sendmsg+0x219/0x270 [ 187.722795][T10328] ____sys_sendmsg+0x505/0x830 [ 187.722817][T10328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.722841][T10328] ? import_iovec+0x74/0xa0 [ 187.722865][T10328] ___sys_sendmsg+0x21f/0x2a0 [ 187.722886][T10328] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.722922][T10328] ? __fget_files+0x2a/0x420 [ 187.722938][T10328] ? __fget_files+0x3a0/0x420 [ 187.722959][T10328] __x64_sys_sendmsg+0x19b/0x260 [ 187.722981][T10328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.723006][T10328] ? __pfx_ksys_write+0x10/0x10 [ 187.723031][T10328] ? rcu_is_watching+0x15/0xb0 [ 187.723052][T10328] ? rcu_is_watching+0x15/0xb0 [ 187.723071][T10328] do_syscall_64+0xfa/0x3b0 [ 187.723088][T10328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.723107][T10328] ? clear_bhb_loop+0x60/0xb0 [ 187.723129][T10328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.723148][T10328] RIP: 0033:0x7f4181f8ebe9 [ 187.723164][T10328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.723205][T10328] RSP: 002b:00007f4182de8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.723288][T10328] RAX: ffffffffffffffda RBX: 00007f41821b5fa0 RCX: 00007f4181f8ebe9 [ 187.723303][T10328] RDX: 000000002000c800 RSI: 0000200000000380 RDI: 0000000000000009 [ 187.723318][T10328] RBP: 00007f4182de8090 R08: 0000000000000000 R09: 0000000000000000 [ 187.723331][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.723343][T10328] R13: 00007f41821b6038 R14: 00007f41821b5fa0 R15: 00007ffc5401cd48 [ 187.723367][T10328] [ 188.416802][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1315'. [ 188.678002][T10354] netlink: 'syz.3.1319': attribute type 29 has an invalid length. [ 188.943255][T10370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1323'. [ 188.960034][T10370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1323'. [ 189.027326][T10371] tipc: Withdrawal distribution failure [ 189.713244][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 189.724700][T10393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1332'. [ 189.932487][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 189.970618][T10403] macvtap5: entered promiscuous mode [ 189.990681][T10403] vlan0: entered promiscuous mode [ 190.007898][T10409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1338'. [ 190.019545][T10409] netlink: 'syz.0.1338': attribute type 4 has an invalid length. [ 190.327392][T10430] FAULT_INJECTION: forcing a failure. [ 190.327392][T10430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.355256][T10430] CPU: 1 UID: 0 PID: 10430 Comm: syz.3.1344 Not tainted syzkaller #0 PREEMPT(full) [ 190.355287][T10430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.355300][T10430] Call Trace: [ 190.355308][T10430] [ 190.355318][T10430] dump_stack_lvl+0x189/0x250 [ 190.355348][T10430] ? __pfx____ratelimit+0x10/0x10 [ 190.355377][T10430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.355401][T10430] ? __pfx__printk+0x10/0x10 [ 190.355428][T10430] ? __might_fault+0xb0/0x130 [ 190.355460][T10430] ? rcu_is_watching+0x15/0xb0 [ 190.355483][T10430] should_fail_ex+0x414/0x560 [ 190.355511][T10430] _copy_from_iter+0x1db/0x16f0 [ 190.355533][T10430] ? rep_movs_alternative+0x4a/0x90 [ 190.355561][T10430] ? __pfx__copy_from_iter+0x10/0x10 [ 190.355579][T10430] ? sock_alloc_send_pskb+0x875/0x990 [ 190.355611][T10430] ? __pfx__copy_from_iter+0x10/0x10 [ 190.355632][T10430] ? page_copy_sane+0x16a/0x280 [ 190.355652][T10430] copy_page_from_iter+0xdd/0x170 [ 190.355675][T10430] skb_copy_datagram_from_iter+0x306/0x720 [ 190.355707][T10430] unix_stream_sendmsg+0x5d1/0xdf0 [ 190.355742][T10430] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 190.355771][T10430] ? aa_sock_msg_perm+0xda/0x1d0 [ 190.355789][T10430] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.355810][T10430] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 190.355834][T10430] __sock_sendmsg+0x219/0x270 [ 190.355862][T10430] ____sys_sendmsg+0x505/0x830 [ 190.355885][T10430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.355909][T10430] ? import_iovec+0x74/0xa0 [ 190.355934][T10430] ___sys_sendmsg+0x21f/0x2a0 [ 190.355956][T10430] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.355989][T10430] ? sb_end_write+0xe9/0x1c0 [ 190.356016][T10430] ? __pfx_vfs_write+0x10/0x10 [ 190.356047][T10430] __x64_sys_sendmsg+0x19b/0x260 [ 190.356070][T10430] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.356096][T10430] ? __pfx_ksys_write+0x10/0x10 [ 190.356119][T10430] ? rcu_is_watching+0x15/0xb0 [ 190.356140][T10430] ? rcu_is_watching+0x15/0xb0 [ 190.356159][T10430] do_syscall_64+0xfa/0x3b0 [ 190.356177][T10430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.356196][T10430] ? clear_bhb_loop+0x60/0xb0 [ 190.356224][T10430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.356244][T10430] RIP: 0033:0x7fd97238ebe9 [ 190.356262][T10430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.356280][T10430] RSP: 002b:00007fd9731ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.356303][T10430] RAX: ffffffffffffffda RBX: 00007fd9725b5fa0 RCX: 00007fd97238ebe9 [ 190.356318][T10430] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 190.356331][T10430] RBP: 00007fd9731ad090 R08: 0000000000000000 R09: 0000000000000000 [ 190.356343][T10430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.356356][T10430] R13: 00007fd9725b6038 R14: 00007fd9725b5fa0 R15: 00007ffcd9c028a8 [ 190.356380][T10430] [ 190.677472][T10433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1343'. [ 190.688330][T10433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1343'. [ 191.264469][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1346'. [ 191.469186][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 199.714628][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.791918][ T5868] Bluetooth: hci3: command 0x0406 tx timeout [ 201.792059][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 201.798570][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 203.552069][ T55] block nbd1: Possible stuck request ffff8880252de000: control (read@0,4096B). Runtime 30 seconds [ 205.459201][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.467273][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.475801][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.484759][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.493969][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.503576][ T5869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 205.512086][ T5869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 205.519578][ T5869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.528435][ T5869] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.537277][ T5869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.696777][T10496] chnl_net:caif_netlink_parms(): no params data found [ 205.743933][T10498] chnl_net:caif_netlink_parms(): no params data found [ 205.776561][T10496] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.783880][T10496] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.791054][T10496] bridge_slave_0: entered allmulticast mode [ 205.798471][T10496] bridge_slave_0: entered promiscuous mode [ 205.818786][T10496] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.826205][T10496] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.834293][T10496] bridge_slave_1: entered allmulticast mode [ 205.841108][T10496] bridge_slave_1: entered promiscuous mode [ 205.882431][T10496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.901195][T10496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.920283][T10498] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.928020][T10498] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.935517][T10498] bridge_slave_0: entered allmulticast mode [ 205.943856][T10498] bridge_slave_0: entered promiscuous mode [ 205.959754][T10498] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.967187][T10498] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.974756][T10498] bridge_slave_1: entered allmulticast mode [ 205.982470][T10498] bridge_slave_1: entered promiscuous mode [ 205.990185][T10496] team0: Port device team_slave_0 added [ 206.006712][T10496] team0: Port device team_slave_1 added [ 206.031161][T10498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.050321][T10498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.070428][T10496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.078122][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.104227][T10496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.125216][T10498] team0: Port device team_slave_0 added [ 206.131993][T10496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.138975][T10496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.165235][T10496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.182563][T10498] team0: Port device team_slave_1 added [ 206.206876][T10498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.214265][T10498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.240950][T10498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.253357][T10498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.260350][T10498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.287123][T10498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.386217][T10498] hsr_slave_0: entered promiscuous mode [ 206.407619][T10498] hsr_slave_1: entered promiscuous mode [ 206.424744][T10498] debugfs: 'hsr0' already exists in 'hsr' [ 206.430526][T10498] Cannot create hsr debugfs directory [ 206.477757][T10496] hsr_slave_0: entered promiscuous mode [ 206.493277][T10496] hsr_slave_1: entered promiscuous mode [ 206.499633][T10496] debugfs: 'hsr0' already exists in 'hsr' [ 206.521813][T10496] Cannot create hsr debugfs directory [ 206.661137][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 206.668909][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 206.680073][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 206.688089][ T5875] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 206.702500][ T5875] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 206.714270][ T5184] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 206.714752][ T5875] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 206.722949][ T5184] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 206.736402][ T5184] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 206.745837][ T5869] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 207.022912][T10516] chnl_net:caif_netlink_parms(): no params data found [ 207.087014][T10514] chnl_net:caif_netlink_parms(): no params data found [ 207.115337][T10516] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.122646][T10516] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.129842][T10516] bridge_slave_0: entered allmulticast mode [ 207.137396][T10516] bridge_slave_0: entered promiscuous mode [ 207.157758][T10516] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.165198][T10516] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.173075][T10516] bridge_slave_1: entered allmulticast mode [ 207.179840][T10516] bridge_slave_1: entered promiscuous mode [ 207.221921][T10516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.242882][T10516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.260866][T10514] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.268603][T10514] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.276807][T10514] bridge_slave_0: entered allmulticast mode [ 207.284590][T10514] bridge_slave_0: entered promiscuous mode [ 207.301345][T10514] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.308732][T10514] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.317120][T10514] bridge_slave_1: entered allmulticast mode [ 207.324907][T10514] bridge_slave_1: entered promiscuous mode [ 207.342739][T10516] team0: Port device team_slave_0 added [ 207.359229][T10516] team0: Port device team_slave_1 added [ 207.378090][T10514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.390035][T10514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.426539][T10516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.434430][T10516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.460753][T10516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.475358][T10516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.483162][T10516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.509353][T10516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.522939][T10514] team0: Port device team_slave_0 added [ 207.534950][T10514] team0: Port device team_slave_1 added [ 207.551633][ T5869] Bluetooth: hci6: command tx timeout [ 207.562035][ T5869] Bluetooth: hci5: command tx timeout [ 207.590704][T10516] hsr_slave_0: entered promiscuous mode [ 207.598354][T10516] hsr_slave_1: entered promiscuous mode [ 207.605037][T10516] debugfs: 'hsr0' already exists in 'hsr' [ 207.610833][T10516] Cannot create hsr debugfs directory [ 207.618130][T10514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.625595][T10514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.652179][T10514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.666251][T10514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.674208][T10514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.700541][T10514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.809050][T10514] hsr_slave_0: entered promiscuous mode [ 207.817865][T10514] hsr_slave_1: entered promiscuous mode [ 207.825182][T10514] debugfs: 'hsr0' already exists in 'hsr' [ 207.830942][T10514] Cannot create hsr debugfs directory [ 207.995476][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 208.003761][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 208.012583][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 208.021154][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 208.030019][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 208.167368][T10531] chnl_net:caif_netlink_parms(): no params data found [ 208.222730][T10531] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.229952][T10531] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.237525][T10531] bridge_slave_0: entered allmulticast mode [ 208.244657][T10531] bridge_slave_0: entered promiscuous mode [ 208.252854][T10531] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.260146][T10531] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.267966][T10531] bridge_slave_1: entered allmulticast mode [ 208.276662][T10531] bridge_slave_1: entered promiscuous mode [ 208.301680][T10531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.313569][T10531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.339781][T10531] team0: Port device team_slave_0 added [ 208.347929][T10531] team0: Port device team_slave_1 added [ 208.373993][T10531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.381093][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.407439][T10531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.419670][T10531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.427104][T10531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.454062][T10531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.489103][T10531] hsr_slave_0: entered promiscuous mode [ 208.495807][T10531] hsr_slave_1: entered promiscuous mode [ 208.502160][T10531] debugfs: 'hsr0' already exists in 'hsr' [ 208.507907][T10531] Cannot create hsr debugfs directory [ 208.751822][ T5869] Bluetooth: hci7: command tx timeout [ 208.841713][ T5869] Bluetooth: hci8: command tx timeout [ 209.631928][ T5869] Bluetooth: hci5: command tx timeout [ 209.632019][ T51] Bluetooth: hci6: command tx timeout [ 210.111729][ T51] Bluetooth: hci9: command tx timeout [ 210.831881][ T51] Bluetooth: hci7: command tx timeout [ 210.911998][ T51] Bluetooth: hci8: command tx timeout [ 211.711778][ T51] Bluetooth: hci6: command tx timeout [ 211.711834][ T5869] Bluetooth: hci5: command tx timeout [ 212.191781][ T5869] Bluetooth: hci9: command tx timeout [ 212.911852][ T5869] Bluetooth: hci7: command tx timeout [ 212.992109][ T5869] Bluetooth: hci8: command tx timeout [ 213.791703][ T5869] Bluetooth: hci5: command tx timeout [ 213.792926][ T51] Bluetooth: hci6: command tx timeout [ 214.271766][ T51] Bluetooth: hci9: command tx timeout [ 214.991722][ T51] Bluetooth: hci7: command tx timeout [ 215.074893][ T51] Bluetooth: hci8: command tx timeout [ 216.351680][ T51] Bluetooth: hci9: command tx timeout [ 233.632022][ T55] block nbd1: Possible stuck request ffff8880252de000: control (read@0,4096B). Runtime 60 seconds [ 235.640767][ T5233] udevd[5233]: worker [5870] /devices/virtual/block/nbd1 is taking a long time [ 261.153777][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.711888][ T55] block nbd1: Possible stuck request ffff8880252de000: control (read@0,4096B). Runtime 90 seconds [ 265.550480][ T5869] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 265.559356][ T5869] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 265.559908][ T5875] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 265.567509][ T5869] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 265.582665][ T5869] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 265.590782][ T5875] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 265.594883][ T5869] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 265.601120][ T5875] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 265.606763][ T5869] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 265.614197][ T5875] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 265.829409][T10546] chnl_net:caif_netlink_parms(): no params data found [ 265.881098][T10548] chnl_net:caif_netlink_parms(): no params data found [ 265.931719][T10546] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.939017][T10546] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.948040][T10546] bridge_slave_0: entered allmulticast mode [ 265.955438][T10546] bridge_slave_0: entered promiscuous mode [ 265.964361][T10546] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.971740][T10546] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.979013][T10546] bridge_slave_1: entered allmulticast mode [ 265.986271][T10546] bridge_slave_1: entered promiscuous mode [ 266.028326][T10546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.050736][T10546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.080757][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.091804][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.099094][T10548] bridge_slave_0: entered allmulticast mode [ 266.107419][T10548] bridge_slave_0: entered promiscuous mode [ 266.117485][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.124975][T10548] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.132769][T10548] bridge_slave_1: entered allmulticast mode [ 266.139686][T10548] bridge_slave_1: entered promiscuous mode [ 266.167854][T10546] team0: Port device team_slave_0 added [ 266.186729][T10548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.199094][T10546] team0: Port device team_slave_1 added [ 266.218476][T10548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.245630][T10546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.252857][T10546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.280815][T10546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.302971][T10546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.309955][T10546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.336910][T10546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.349659][T10548] team0: Port device team_slave_0 added [ 266.359166][T10548] team0: Port device team_slave_1 added [ 266.389165][T10548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.396456][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.423514][T10548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.447006][T10548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.454305][T10548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.480981][T10548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.511298][T10546] hsr_slave_0: entered promiscuous mode [ 266.518680][T10546] hsr_slave_1: entered promiscuous mode [ 266.525370][T10546] debugfs: 'hsr0' already exists in 'hsr' [ 266.531108][T10546] Cannot create hsr debugfs directory [ 266.596143][T10548] hsr_slave_0: entered promiscuous mode [ 266.603245][T10548] hsr_slave_1: entered promiscuous mode [ 266.609320][T10548] debugfs: 'hsr0' already exists in 'hsr' [ 266.615236][T10548] Cannot create hsr debugfs directory [ 267.099212][ T5184] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 267.108148][ T5184] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 267.116796][ T5184] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 267.127130][ T5184] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 267.135760][ T5184] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 267.156982][ T5184] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 267.165362][ T5184] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 267.173910][ T5184] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 267.190347][ T5184] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 267.202766][ T5184] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 267.364043][T10564] chnl_net:caif_netlink_parms(): no params data found [ 267.466640][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.474352][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.482067][T10564] bridge_slave_0: entered allmulticast mode [ 267.488929][T10564] bridge_slave_0: entered promiscuous mode [ 267.500087][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.515219][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.525954][T10564] bridge_slave_1: entered allmulticast mode [ 267.534138][T10564] bridge_slave_1: entered promiscuous mode [ 267.570969][T10564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.584487][T10564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.594857][T10566] chnl_net:caif_netlink_parms(): no params data found [ 267.631580][ T5875] Bluetooth: hci10: command tx timeout [ 267.642499][T10564] team0: Port device team_slave_0 added [ 267.658376][T10564] team0: Port device team_slave_1 added [ 267.696813][T10564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.704277][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.731321][ T5875] Bluetooth: hci11: command tx timeout [ 267.738153][T10564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.760672][T10564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.767831][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.794820][T10564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.828238][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.836075][T10566] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.844447][T10566] bridge_slave_0: entered allmulticast mode [ 267.852116][T10566] bridge_slave_0: entered promiscuous mode [ 267.891716][T10566] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.899875][T10566] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.909369][T10566] bridge_slave_1: entered allmulticast mode [ 267.917148][T10566] bridge_slave_1: entered promiscuous mode [ 267.941017][T10564] hsr_slave_0: entered promiscuous mode [ 267.948279][T10564] hsr_slave_1: entered promiscuous mode [ 267.955464][T10564] debugfs: 'hsr0' already exists in 'hsr' [ 267.961230][T10564] Cannot create hsr debugfs directory [ 267.993921][T10566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.023150][T10566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.100245][T10566] team0: Port device team_slave_0 added [ 268.115517][T10566] team0: Port device team_slave_1 added [ 268.129823][ T5184] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 268.138088][ T5184] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 268.147846][ T5184] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 268.157126][ T5184] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 268.168245][ T5184] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 268.177604][T10566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.186671][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.214968][T10566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.235245][T10566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.242416][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.269187][T10566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.326492][T10566] hsr_slave_0: entered promiscuous mode [ 268.336412][T10566] hsr_slave_1: entered promiscuous mode [ 268.343303][T10566] debugfs: 'hsr0' already exists in 'hsr' [ 268.349065][T10566] Cannot create hsr debugfs directory [ 268.573726][T10581] chnl_net:caif_netlink_parms(): no params data found [ 268.645098][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.652603][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.659927][T10581] bridge_slave_0: entered allmulticast mode [ 268.668290][T10581] bridge_slave_0: entered promiscuous mode [ 268.680383][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.691833][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.699139][T10581] bridge_slave_1: entered allmulticast mode [ 268.707013][T10581] bridge_slave_1: entered promiscuous mode [ 268.742683][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.757447][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.789459][T10581] team0: Port device team_slave_0 added [ 268.799535][T10581] team0: Port device team_slave_1 added [ 268.845070][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.852788][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.879859][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.892166][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.899152][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.926302][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.980171][T10581] hsr_slave_0: entered promiscuous mode [ 268.986728][T10581] hsr_slave_1: entered promiscuous mode [ 268.993742][T10581] debugfs: 'hsr0' already exists in 'hsr' [ 268.999521][T10581] Cannot create hsr debugfs directory [ 269.155008][ T5184] Bluetooth: hci12: command tx timeout [ 269.231697][ T5184] Bluetooth: hci13: command tx timeout [ 269.712011][ T5184] Bluetooth: hci10: command tx timeout [ 269.791852][ T5184] Bluetooth: hci11: command tx timeout [ 270.271761][ T5184] Bluetooth: hci14: command tx timeout [ 271.231698][ T5184] Bluetooth: hci12: command tx timeout [ 271.311711][ T5184] Bluetooth: hci13: command tx timeout [ 271.791777][ T5184] Bluetooth: hci10: command tx timeout [ 271.871858][ T5184] Bluetooth: hci11: command tx timeout [ 272.351598][ T5184] Bluetooth: hci14: command tx timeout [ 273.312242][ T5184] Bluetooth: hci12: command tx timeout [ 273.391648][ T5184] Bluetooth: hci13: command tx timeout [ 273.872148][ T5184] Bluetooth: hci10: command tx timeout [ 273.952160][ T5184] Bluetooth: hci11: command tx timeout [ 274.431688][ T5184] Bluetooth: hci14: command tx timeout [ 275.391978][ T5184] Bluetooth: hci12: command tx timeout [ 275.471913][ T5184] Bluetooth: hci13: command tx timeout [ 276.512637][ T5184] Bluetooth: hci14: command tx timeout [ 293.792108][ T55] block nbd1: Possible stuck request ffff8880252de000: control (read@0,4096B). Runtime 120 seconds [ 319.561804][ T5184] Bluetooth: hci4: command 0x0406 tx timeout [ 322.594552][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.872023][ T55] block nbd1: Possible stuck request ffff8880252de000: control (read@0,4096B). Runtime 150 seconds [ 325.630614][ T5875] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 325.643240][ T5875] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 325.650998][ T5875] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 325.660652][ T5875] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 325.669046][ T51] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 325.678400][ T5184] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 325.687716][ T5184] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 325.701873][ T5184] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 325.718349][ T5184] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 325.727331][ T5184] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 325.872768][T10595] chnl_net:caif_netlink_parms(): no params data found [ 325.975231][T10595] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.982768][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.990053][T10595] bridge_slave_0: entered allmulticast mode [ 325.997839][T10595] bridge_slave_0: entered promiscuous mode [ 326.009603][T10595] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.017740][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.030305][T10595] bridge_slave_1: entered allmulticast mode [ 326.047746][T10595] bridge_slave_1: entered promiscuous mode [ 326.092074][T10595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.105251][T10595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.115336][T10597] chnl_net:caif_netlink_parms(): no params data found [ 326.167727][T10595] team0: Port device team_slave_0 added [ 326.176730][T10595] team0: Port device team_slave_1 added [ 326.218043][T10595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.225461][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.252130][T10595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.285294][T10595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.292894][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.320462][T10595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.338603][T10597] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.346018][T10597] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.354293][T10597] bridge_slave_0: entered allmulticast mode [ 326.361281][T10597] bridge_slave_0: entered promiscuous mode [ 326.388718][T10597] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.397267][T10597] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.404904][T10597] bridge_slave_1: entered allmulticast mode [ 326.412522][T10597] bridge_slave_1: entered promiscuous mode [ 326.424234][T10595] hsr_slave_0: entered promiscuous mode [ 326.430748][T10595] hsr_slave_1: entered promiscuous mode [ 326.439029][T10595] debugfs: 'hsr0' already exists in 'hsr' [ 326.445257][T10595] Cannot create hsr debugfs directory [ 326.477319][T10597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.490132][T10597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.539039][T10597] team0: Port device team_slave_0 added [ 326.557435][T10597] team0: Port device team_slave_1 added [ 326.599633][T10597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.607452][T10597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.634512][T10597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.650244][T10597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.657870][T10597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.684223][T10597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.758621][T10597] hsr_slave_0: entered promiscuous mode [ 326.765473][T10597] hsr_slave_1: entered promiscuous mode [ 326.772438][T10597] debugfs: 'hsr0' already exists in 'hsr' [ 326.778213][T10597] Cannot create hsr debugfs directory [ 327.250497][ T5875] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 327.258687][ T5875] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 327.264645][ T5869] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 327.270133][ T5875] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 327.275029][ T5869] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 327.283233][ T5875] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 327.288443][ T5869] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 327.296468][ T5875] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 327.307700][ T5869] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 327.322425][ T5875] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 327.608166][T10613] chnl_net:caif_netlink_parms(): no params data found [ 327.661922][T10615] chnl_net:caif_netlink_parms(): no params data found [ 327.723484][ T5868] Bluetooth: hci15: command tx timeout [ 327.760111][T10613] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.768589][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.776279][T10613] bridge_slave_0: entered allmulticast mode [ 327.786165][T10613] bridge_slave_0: entered promiscuous mode [ 327.801839][ T5868] Bluetooth: hci16: command tx timeout [ 327.810102][T10613] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.818187][T10613] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.826210][T10613] bridge_slave_1: entered allmulticast mode [ 327.834046][T10613] bridge_slave_1: entered promiscuous mode [ 327.854988][T10615] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.869616][T10615] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.882358][T10615] bridge_slave_0: entered allmulticast mode [ 327.897434][T10615] bridge_slave_0: entered promiscuous mode [ 327.920278][T10615] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.930959][T10615] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.946268][T10615] bridge_slave_1: entered allmulticast mode [ 327.958070][T10615] bridge_slave_1: entered promiscuous mode [ 327.979398][T10613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.035613][T10613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.049569][T10615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.093662][T10615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.139443][ T5877] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 328.154881][ T5877] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 328.165899][T10613] team0: Port device team_slave_0 added [ 328.166972][ T5877] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 328.175930][T10615] team0: Port device team_slave_0 added [ 328.187151][ T5877] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 328.188467][T10613] team0: Port device team_slave_1 added [ 328.202220][ T5877] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 328.212299][T10615] team0: Port device team_slave_1 added [ 328.254814][T10613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.262345][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.289686][T10613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.312758][T10615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.319848][T10615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.346343][T10615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.358390][T10613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.367061][T10613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.393391][T10613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.410461][T10615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.417747][T10615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.444543][T10615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.505959][T10613] hsr_slave_0: entered promiscuous mode [ 328.513935][T10613] hsr_slave_1: entered promiscuous mode [ 328.520227][T10613] debugfs: 'hsr0' already exists in 'hsr' [ 328.527329][T10613] Cannot create hsr debugfs directory [ 328.551072][T10615] hsr_slave_0: entered promiscuous mode [ 328.558253][T10615] hsr_slave_1: entered promiscuous mode [ 328.565588][T10615] debugfs: 'hsr0' already exists in 'hsr' [ 328.571805][T10615] Cannot create hsr debugfs directory [ 328.867553][T10630] chnl_net:caif_netlink_parms(): no params data found [ 328.942308][T10630] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.949545][T10630] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.957296][T10630] bridge_slave_0: entered allmulticast mode [ 328.964963][T10630] bridge_slave_0: entered promiscuous mode [ 328.974545][T10630] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.981943][T10630] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.989222][T10630] bridge_slave_1: entered allmulticast mode [ 328.997381][T10630] bridge_slave_1: entered promiscuous mode [ 329.040014][T10630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.053025][T10630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.094796][T10630] team0: Port device team_slave_0 added [ 329.108080][T10630] team0: Port device team_slave_1 added [ 329.138027][T10630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.145229][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.176133][T10630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.200772][T10630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.208168][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.235279][T10630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.296039][T10630] hsr_slave_0: entered promiscuous mode [ 329.302951][T10630] hsr_slave_1: entered promiscuous mode [ 329.309082][T10630] debugfs: 'hsr0' already exists in 'hsr' [ 329.318076][T10630] Cannot create hsr debugfs directory [ 329.391824][ T5877] Bluetooth: hci17: command tx timeout [ 329.401688][ T5877] Bluetooth: hci18: command tx timeout [ 329.793738][ T5877] Bluetooth: hci5: command 0x0406 tx timeout [ 329.793814][ T5868] Bluetooth: hci6: command 0x0406 tx timeout [ 329.799834][ T5877] Bluetooth: hci7: command 0x0406 tx timeout [ 329.807267][ T5868] Bluetooth: hci8: command 0x0406 tx timeout [ 329.813165][ T51] Bluetooth: hci15: command tx timeout [ 329.872325][ T5875] Bluetooth: hci16: command tx timeout [ 330.272391][ T5875] Bluetooth: hci19: command tx timeout [ 331.471718][ T5869] Bluetooth: hci18: command tx timeout [ 331.472097][ T5875] Bluetooth: hci17: command tx timeout [ 331.871790][ T5875] Bluetooth: hci15: command tx timeout [ 331.951838][ T5875] Bluetooth: hci16: command tx timeout [ 332.351819][ T5875] Bluetooth: hci19: command tx timeout [ 333.551738][ T5184] Bluetooth: hci17: command tx timeout [ 333.557404][ T5869] Bluetooth: hci18: command tx timeout [ 333.951667][ T5869] Bluetooth: hci15: command tx timeout [ 334.031689][ T5869] Bluetooth: hci16: command tx timeout [ 334.432126][ T5869] Bluetooth: hci19: command tx timeout [ 334.911748][ T5869] Bluetooth: hci9: command 0x0406 tx timeout [ 335.392017][ T31] INFO: task syz.1.1334:10399 blocked for more than 143 seconds. [ 335.400198][ T31] Not tainted syzkaller #0 [ 335.405878][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.414718][ T31] task:syz.1.1334 state:D stack:26152 pid:10399 tgid:10398 ppid:5871 task_flags:0x480140 flags:0x00004004 [ 335.426832][ T31] Call Trace: [ 335.430148][ T31] [ 335.433640][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 335.438220][ T31] ? do_raw_spin_lock+0x121/0x290 [ 335.444043][ T31] ? __pfx___schedule+0x10/0x10 [ 335.449135][ T31] ? schedule+0x91/0x360 [ 335.453606][ T31] ? rcu_is_watching+0x15/0xb0 [ 335.458429][ T31] ? lock_release+0x4b/0x3e0 [ 335.463287][ T31] schedule+0x165/0x360 [ 335.467506][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 335.473139][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 335.479255][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 335.485536][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 335.492074][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 335.501482][ T31] nbd_set_size+0x47e/0x6a0 [ 335.506054][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 335.511137][ T31] ? nla_memcpy+0x5b/0xc0 [ 335.542822][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 335.547889][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 335.556460][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 335.562871][ T31] ? bpf_lsm_capable+0x9/0x20 [ 335.567615][ T31] ? security_capable+0x7e/0x2e0 [ 335.572747][ T31] ? radix_tree_lookup+0x240/0x290 [ 335.577911][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 335.583601][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 335.589397][ T31] ? __nla_parse+0x40/0x60 [ 335.594154][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 335.600543][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 335.606608][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 335.613409][ T31] ? stack_trace_save+0x9c/0xe0 [ 335.618335][ T31] genl_rcv_msg+0x60e/0x790 [ 335.623259][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.628335][ T31] ? do_raw_spin_lock+0x121/0x290 [ 335.633837][ T5875] Bluetooth: hci18: command tx timeout [ 335.639351][ T5875] Bluetooth: hci17: command tx timeout [ 335.641197][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 335.651057][ T31] ? __netlink_lookup+0xbd/0x810 [ 335.656435][ T31] ? rcu_is_watching+0x15/0xb0 [ 335.661927][ T31] netlink_rcv_skb+0x205/0x470 [ 335.666766][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.672173][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.677536][ T31] ? lock_release+0x4b/0x3e0 [ 335.682474][ T31] ? down_read+0x1ad/0x2e0 [ 335.686935][ T31] genl_rcv+0x28/0x40 [ 335.690965][ T31] netlink_unicast+0x82f/0x9e0 [ 335.695923][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 335.701252][ T31] ? netlink_sendmsg+0x642/0xb30 [ 335.706596][ T31] netlink_sendmsg+0x805/0xb30 [ 335.712121][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.717455][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 335.722793][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.728148][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.733645][ T31] __sock_sendmsg+0x219/0x270 [ 335.738374][ T31] ____sys_sendmsg+0x505/0x830 [ 335.743674][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.749007][ T31] ? __might_fault+0xb0/0x130 [ 335.753863][ T31] ? import_iovec+0x74/0xa0 [ 335.758404][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 335.763208][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.768439][ T31] ? futex_wake+0x4b2/0x560 [ 335.773163][ T31] ? __fget_files+0x2a/0x420 [ 335.777786][ T31] ? __fget_files+0x3a0/0x420 [ 335.782887][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 335.787873][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.793753][ T31] ? rcu_is_watching+0x15/0xb0 [ 335.798597][ T31] ? rcu_is_watching+0x15/0xb0 [ 335.803565][ T31] do_syscall_64+0xfa/0x3b0 [ 335.808107][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.814356][ T31] ? clear_bhb_loop+0x60/0xb0 [ 335.819079][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.825328][ T31] RIP: 0033:0x7fa99398ebe9 [ 335.829800][ T31] RSP: 002b:00007fa9947b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.838677][ T31] RAX: ffffffffffffffda RBX: 00007fa993bb5fa0 RCX: 00007fa99398ebe9 [ 335.846888][ T31] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 335.855288][ T31] RBP: 00007fa993a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 335.863444][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.871702][ T31] R13: 00007fa993bb6038 R14: 00007fa993bb5fa0 R15: 00007fffd9a43e58 [ 335.879750][ T31] [ 335.882989][ T31] INFO: task syz.4.1339:10413 blocked for more than 143 seconds. [ 335.890779][ T31] Not tainted syzkaller #0 [ 335.895882][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.904863][ T31] task:syz.4.1339 state:D stack:26024 pid:10413 tgid:10412 ppid:5860 task_flags:0x400140 flags:0x00004004 [ 335.921588][ T31] Call Trace: [ 335.925226][ T31] [ 335.928190][ T31] __schedule+0x1798/0x4cc0 [ 335.933096][ T31] ? __pfx___schedule+0x10/0x10 [ 335.938093][ T31] ? schedule+0x91/0x360 [ 335.942486][ T31] ? rcu_is_watching+0x15/0xb0 [ 335.947285][ T31] ? lock_release+0x4b/0x3e0 [ 335.952332][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 335.958282][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 335.964786][ T31] schedule+0x165/0x360 [ 335.969001][ T31] schedule_preempt_disabled+0x13/0x30 [ 335.974636][ T31] __mutex_lock+0x7e6/0x1350 [ 335.979302][ T31] ? __mutex_lock+0x5bb/0x1350 [ 335.984557][ T31] ? genl_rcv_msg+0x10d/0x790 [ 335.989508][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 335.995298][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 336.000465][ T31] ? radix_tree_lookup+0x240/0x290 [ 336.006023][ T31] genl_rcv_msg+0x10d/0x790 [ 336.010583][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.015743][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 336.020817][ T31] ? __asan_memcpy+0x40/0x70 [ 336.025784][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 336.031209][ T31] netlink_rcv_skb+0x205/0x470 [ 336.037239][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.042449][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.047799][ T31] ? lock_release+0x4b/0x3e0 [ 336.052503][ T31] ? down_read+0x1ad/0x2e0 [ 336.056949][ T31] genl_rcv+0x28/0x40 [ 336.060945][ T31] netlink_unicast+0x82f/0x9e0 [ 336.065904][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 336.071237][ T31] ? netlink_sendmsg+0x642/0xb30 [ 336.076395][ T31] ? skb_put+0x11b/0x210 [ 336.080676][ T31] netlink_sendmsg+0x805/0xb30 [ 336.085560][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.090882][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.097023][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.102707][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.108037][ T31] __sock_sendmsg+0x219/0x270 [ 336.114167][ T31] __sys_sendto+0x3bd/0x520 [ 336.118723][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 336.124463][ T31] ? count_memcg_event_mm+0x21/0x260 [ 336.129813][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 336.135231][ T31] __x64_sys_sendto+0xde/0x100 [ 336.140057][ T31] do_syscall_64+0xfa/0x3b0 [ 336.144817][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.150925][ T31] ? clear_bhb_loop+0x60/0xb0 [ 336.155926][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.161973][ T31] RIP: 0033:0x7f87a2990a7c [ 336.166436][ T31] RSP: 002b:00007f87a3886ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 336.175329][ T31] RAX: ffffffffffffffda RBX: 00007f87a3886fc0 RCX: 00007f87a2990a7c [ 336.183603][ T31] RDX: 0000000000000020 RSI: 00007f87a3887010 RDI: 000000000000000c [ 336.192290][ T31] RBP: 0000000000000000 R08: 00007f87a3886f14 R09: 000000000000000c [ 336.200336][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 336.208526][ T31] R13: 00007f87a3886f68 R14: 00007f87a3887010 R15: 0000000000000000 [ 336.217019][ T31] [ 336.220110][ T31] INFO: task syz.4.1339:10414 blocked for more than 144 seconds. [ 336.233815][ T31] Not tainted syzkaller #0 [ 336.238810][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.247670][ T31] task:syz.4.1339 state:D stack:27480 pid:10414 tgid:10412 ppid:5860 task_flags:0x400040 flags:0x00004004 [ 336.259782][ T31] Call Trace: [ 336.263458][ T31] [ 336.266429][ T31] __schedule+0x1798/0x4cc0 [ 336.270964][ T31] ? __pfx___schedule+0x10/0x10 [ 336.276621][ T31] ? schedule+0x91/0x360 [ 336.280924][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.285821][ T31] ? lock_release+0x4b/0x3e0 [ 336.290463][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 336.296553][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.303065][ T31] schedule+0x165/0x360 [ 336.307267][ T31] schedule_preempt_disabled+0x13/0x30 [ 336.312957][ T31] __mutex_lock+0x7e6/0x1350 [ 336.317605][ T31] ? __mutex_lock+0x5bb/0x1350 [ 336.322699][ T31] ? genl_rcv_msg+0x10d/0x790 [ 336.327437][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 336.332544][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 336.337876][ T31] ? radix_tree_lookup+0x240/0x290 [ 336.343211][ T31] genl_rcv_msg+0x10d/0x790 [ 336.347769][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.353248][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 336.358342][ T31] ? __asan_memcpy+0x40/0x70 [ 336.363064][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 336.368483][ T31] netlink_rcv_skb+0x205/0x470 [ 336.373464][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.378543][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.384075][ T31] ? lock_release+0x4b/0x3e0 [ 336.388725][ T31] ? down_read+0x1ad/0x2e0 [ 336.393440][ T31] genl_rcv+0x28/0x40 [ 336.397468][ T31] netlink_unicast+0x82f/0x9e0 [ 336.402357][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 336.407692][ T31] ? netlink_sendmsg+0x642/0xb30 [ 336.412723][ T31] ? skb_put+0x11b/0x210 [ 336.417002][ T31] netlink_sendmsg+0x805/0xb30 [ 336.422070][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.427396][ T31] ? futex_unqueue+0x22/0x240 [ 336.436331][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.441439][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.446782][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.452394][ T31] __sock_sendmsg+0x219/0x270 [ 336.457122][ T31] ____sys_sendmsg+0x505/0x830 [ 336.462306][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.467643][ T31] ? import_iovec+0x74/0xa0 [ 336.472510][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 336.477387][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.482762][ T31] ? futex_wait+0x285/0x360 [ 336.487514][ T31] ? __fget_files+0x2a/0x420 [ 336.492645][ T31] ? __fget_files+0x3a0/0x420 [ 336.497455][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 336.502728][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.508237][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.513457][ T5875] Bluetooth: hci19: command tx timeout [ 336.514221][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.524219][ T31] do_syscall_64+0xfa/0x3b0 [ 336.528777][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.535127][ T31] ? clear_bhb_loop+0x60/0xb0 [ 336.539865][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.545943][ T31] RIP: 0033:0x7f87a298ebe9 [ 336.550413][ T31] RSP: 002b:00007f87a3867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.559189][ T31] RAX: ffffffffffffffda RBX: 00007f87a2bb6090 RCX: 00007f87a298ebe9 [ 336.567706][ T31] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 000000000000000c [ 336.575966][ T31] RBP: 00007f87a2a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 336.584167][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.592571][ T31] R13: 00007f87a2bb6128 R14: 00007f87a2bb6090 R15: 00007ffc83839b58 [ 336.600615][ T31] [ 336.604092][ T31] INFO: task syz.3.1344:10430 blocked for more than 144 seconds. [ 336.612156][ T31] Not tainted syzkaller #0 [ 336.617135][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.626115][ T31] task:syz.3.1344 state:D stack:24072 pid:10430 tgid:10428 ppid:5876 task_flags:0x400140 flags:0x00004004 [ 336.638488][ T31] Call Trace: [ 336.642052][ T31] [ 336.645030][ T31] __schedule+0x1798/0x4cc0 [ 336.649606][ T31] ? ring_buffer_unlock_commit+0x476/0x5f0 [ 336.655620][ T31] ? __pfx___schedule+0x10/0x10 [ 336.660532][ T31] ? schedule+0x91/0x360 [ 336.665099][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.669911][ T31] ? lock_release+0x4b/0x3e0 [ 336.675089][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 336.681062][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 336.687840][ T31] schedule+0x165/0x360 [ 336.692171][ T31] schedule_preempt_disabled+0x13/0x30 [ 336.697664][ T31] __mutex_lock+0x7e6/0x1350 [ 336.702610][ T31] ? __mutex_lock+0x5bb/0x1350 [ 336.707436][ T31] ? genl_rcv_msg+0x10d/0x790 [ 336.712428][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 336.717554][ T31] ? stack_trace_save+0x9c/0xe0 [ 336.723156][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 336.728584][ T31] ? radix_tree_lookup+0x240/0x290 [ 336.733897][ T31] genl_rcv_msg+0x10d/0x790 [ 336.738764][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.744645][ T31] ? __kasan_slab_alloc+0x6c/0x80 [ 336.749750][ T31] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 336.756278][ T31] ? kmalloc_reserve+0xbd/0x290 [ 336.761173][ T31] ? __netlink_lookup+0xbd/0x810 [ 336.766467][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.771274][ T31] netlink_rcv_skb+0x205/0x470 [ 336.776242][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.781311][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.787229][ T31] ? lock_release+0x4b/0x3e0 [ 336.792037][ T31] ? down_read+0x1ad/0x2e0 [ 336.796510][ T31] genl_rcv+0x28/0x40 [ 336.800499][ T31] netlink_unicast+0x82f/0x9e0 [ 336.805723][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 336.811084][ T31] ? netlink_sendmsg+0x642/0xb30 [ 336.816246][ T31] ? skb_put+0x11b/0x210 [ 336.820555][ T31] netlink_sendmsg+0x805/0xb30 [ 336.825646][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.830982][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.836185][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.841690][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.847039][ T31] __sock_sendmsg+0x219/0x270 [ 336.852047][ T31] ____sys_sendmsg+0x505/0x830 [ 336.856858][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.862418][ T31] ? import_iovec+0x74/0xa0 [ 336.866981][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 336.872143][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.877393][ T31] ? futex_wake+0x4b2/0x560 [ 336.882236][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 336.887231][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.892968][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.897774][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.902804][ T31] do_syscall_64+0xfa/0x3b0 [ 336.907344][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.913704][ T31] ? clear_bhb_loop+0x60/0xb0 [ 336.918430][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.924451][ T31] RIP: 0033:0x7fd97238ebe9 [ 336.928900][ T31] RSP: 002b:00007fd9731ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.937667][ T31] RAX: ffffffffffffffda RBX: 00007fd9725b5fa0 RCX: 00007fd97238ebe9 [ 336.945802][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000e [ 336.953908][ T31] RBP: 00007fd972411e19 R08: 0000000000000000 R09: 0000000000000000 [ 336.962188][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.970198][ T31] R13: 00007fd9725b6038 R14: 00007fd9725b5fa0 R15: 00007ffcd9c028a8 [ 336.978288][ T31] [ 336.981457][ T31] INFO: task syz.2.1346:10438 blocked for more than 144 seconds. [ 336.989211][ T31] Not tainted syzkaller #0 [ 336.994620][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.003835][ T31] task:syz.2.1346 state:D stack:25608 pid:10438 tgid:10436 ppid:5864 task_flags:0x400140 flags:0x00004004 [ 337.017464][ T31] Call Trace: [ 337.020791][ T31] [ 337.024061][ T31] __schedule+0x1798/0x4cc0 [ 337.028624][ T31] ? stack_trace_save+0x9c/0xe0 [ 337.033809][ T31] ? __pfx___schedule+0x10/0x10 [ 337.038719][ T31] ? schedule+0x91/0x360 [ 337.043132][ T31] ? rcu_is_watching+0x15/0xb0 [ 337.047941][ T31] ? lock_release+0x4b/0x3e0 [ 337.052655][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 337.058567][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 337.065260][ T31] schedule+0x165/0x360 [ 337.069467][ T31] schedule_preempt_disabled+0x13/0x30 [ 337.075336][ T31] __mutex_lock+0x7e6/0x1350 [ 337.080024][ T31] ? __mutex_lock+0x5bb/0x1350 [ 337.084919][ T31] ? genl_rcv_msg+0x10d/0x790 [ 337.089641][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 337.094911][ T31] ? stack_trace_save+0x9c/0xe0 [ 337.099816][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 337.105563][ T31] ? radix_tree_lookup+0x240/0x290 [ 337.110720][ T31] genl_rcv_msg+0x10d/0x790 [ 337.115702][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.120795][ T31] ? __kasan_slab_alloc+0x6c/0x80 [ 337.126095][ T31] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 337.132573][ T31] ? kmalloc_reserve+0xbd/0x290 [ 337.137470][ T31] ? __netlink_lookup+0xbd/0x810 [ 337.142738][ T31] ? rcu_is_watching+0x15/0xb0 [ 337.147553][ T31] netlink_rcv_skb+0x205/0x470 [ 337.153006][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.158176][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.163698][ T31] ? lock_release+0x4b/0x3e0 [ 337.168355][ T31] ? down_read+0x1ad/0x2e0 [ 337.172906][ T31] genl_rcv+0x28/0x40 [ 337.176927][ T31] netlink_unicast+0x82f/0x9e0 [ 337.182115][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 337.187461][ T31] ? netlink_sendmsg+0x642/0xb30 [ 337.192741][ T31] ? skb_put+0x11b/0x210 [ 337.197115][ T31] netlink_sendmsg+0x805/0xb30 [ 337.202038][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.207359][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 337.212397][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.217722][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.223324][ T31] __sock_sendmsg+0x219/0x270 [ 337.228036][ T31] __sys_sendto+0x3bd/0x520 [ 337.232797][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 337.237864][ T31] ? count_memcg_event_mm+0x21/0x260 [ 337.243270][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 337.248645][ T31] __x64_sys_sendto+0xde/0x100 [ 337.253596][ T31] do_syscall_64+0xfa/0x3b0 [ 337.258154][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.264368][ T31] ? clear_bhb_loop+0x60/0xb0 [ 337.269095][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.275153][ T31] RIP: 0033:0x7fae14b90a7c [ 337.279652][ T31] RSP: 002b:00007fae159f8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 337.288255][ T31] RAX: ffffffffffffffda RBX: 00007fae159f8fc0 RCX: 00007fae14b90a7c [ 337.296367][ T31] RDX: 0000000000000024 RSI: 00007fae159f9010 RDI: 000000000000000b [ 337.304472][ T31] RBP: 0000000000000000 R08: 00007fae159f8f14 R09: 000000000000000c [ 337.312766][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 337.320776][ T31] R13: 00007fae159f8f68 R14: 00007fae159f9010 R15: 0000000000000000 [ 337.328898][ T31] [ 337.332310][ T31] INFO: task syz.2.1346:10441 blocked for more than 145 seconds. [ 337.340055][ T31] Not tainted syzkaller #0 [ 337.345235][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.354065][ T31] task:syz.2.1346 state:D stack:24480 pid:10441 tgid:10436 ppid:5864 task_flags:0x400140 flags:0x00004004 [ 337.366146][ T31] Call Trace: [ 337.369461][ T31] [ 337.372557][ T31] __schedule+0x1798/0x4cc0 [ 337.377127][ T31] ? stack_trace_save+0x9c/0xe0 [ 337.382128][ T31] ? __pfx___schedule+0x10/0x10 [ 337.387034][ T31] ? schedule+0x91/0x360 [ 337.391319][ T31] ? rcu_is_watching+0x15/0xb0 [ 337.396415][ T31] ? lock_release+0x4b/0x3e0 [ 337.401060][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 337.407130][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 337.413611][ T31] schedule+0x165/0x360 [ 337.417813][ T31] schedule_preempt_disabled+0x13/0x30 [ 337.423409][ T31] __mutex_lock+0x7e6/0x1350 [ 337.428050][ T31] ? __mutex_lock+0x5bb/0x1350 [ 337.432969][ T31] ? genl_rcv_msg+0x10d/0x790 [ 337.437695][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 337.443203][ T31] ? stack_trace_save+0x9c/0xe0 [ 337.448146][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 337.453665][ T31] ? radix_tree_lookup+0x240/0x290 [ 337.458836][ T31] genl_rcv_msg+0x10d/0x790 [ 337.463522][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.468616][ T31] ? __kasan_slab_alloc+0x6c/0x80 [ 337.476491][ T31] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 337.483223][ T31] ? kmalloc_reserve+0xbd/0x290 [ 337.488132][ T31] ? __netlink_lookup+0xbd/0x810 [ 337.493222][ T31] ? rcu_is_watching+0x15/0xb0 [ 337.498029][ T31] netlink_rcv_skb+0x205/0x470 [ 337.502954][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 337.508019][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.513476][ T31] ? lock_release+0x4b/0x3e0 [ 337.518122][ T31] ? down_read+0x1ad/0x2e0 [ 337.522705][ T31] genl_rcv+0x28/0x40 [ 337.526734][ T31] netlink_unicast+0x82f/0x9e0 [ 337.531677][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 337.537008][ T31] ? netlink_sendmsg+0x642/0xb30 [ 337.542112][ T31] ? skb_put+0x11b/0x210 [ 337.546436][ T31] netlink_sendmsg+0x805/0xb30 [ 337.551236][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.556979][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 337.562171][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.567496][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.572946][ T31] __sock_sendmsg+0x219/0x270 [ 337.577673][ T31] __sys_sendto+0x3bd/0x520 [ 337.582332][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 337.587392][ T31] ? count_memcg_event_mm+0x21/0x260 [ 337.592865][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 337.598205][ T31] __x64_sys_sendto+0xde/0x100 [ 337.603156][ T31] do_syscall_64+0xfa/0x3b0 [ 337.607763][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.614018][ T31] ? clear_bhb_loop+0x60/0xb0 [ 337.618730][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.624920][ T31] RIP: 0033:0x7fae14b90a7c [ 337.629373][ T31] RSP: 002b:00007fae159d7ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 337.638283][ T31] RAX: ffffffffffffffda RBX: 00007fae159d7fc0 RCX: 00007fae14b90a7c [ 337.646538][ T31] RDX: 0000000000000024 RSI: 00007fae159d8010 RDI: 000000000000000b [ 337.654742][ T31] RBP: 0000000000000000 R08: 00007fae159d7f14 R09: 000000000000000c [ 337.663234][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 337.671241][ T31] R13: 00007fae159d7f68 R14: 00007fae159d8010 R15: 0000000000000000 [ 337.679475][ T31] [ 337.682732][ T31] INFO: lockdep is turned off. [ 337.687531][ T31] NMI backtrace for cpu 1 [ 337.687547][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 337.687571][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.687582][ T31] Call Trace: [ 337.687589][ T31] [ 337.687596][ T31] dump_stack_lvl+0x189/0x250 [ 337.687622][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.687641][ T31] ? __pfx__printk+0x10/0x10 [ 337.687669][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 337.687691][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 337.687711][ T31] ? __pfx__printk+0x10/0x10 [ 337.687735][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 337.687763][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 337.687784][ T31] watchdog+0xf93/0xfe0 [ 337.687810][ T31] ? watchdog+0x1de/0xfe0 [ 337.687835][ T31] kthread+0x70e/0x8a0 [ 337.687874][ T31] ? __pfx_watchdog+0x10/0x10 [ 337.687895][ T31] ? __pfx_kthread+0x10/0x10 [ 337.687914][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.687935][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.687956][ T31] ? __pfx_kthread+0x10/0x10 [ 337.687975][ T31] ret_from_fork+0x3f9/0x770 [ 337.687992][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 337.688009][ T31] ? __switch_to_asm+0x39/0x70 [ 337.688029][ T31] ? __switch_to_asm+0x33/0x70 [ 337.688049][ T31] ? __pfx_kthread+0x10/0x10 [ 337.688067][ T31] ret_from_fork_asm+0x1a/0x30 [ 337.688094][ T31] [ 337.688100][ T31] Sending NMI from CPU 1 to CPUs 0: [ 337.835574][ C0] NMI backtrace for cpu 0 [ 337.835594][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 337.835616][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.835628][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 337.835662][ C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 56 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 337.835680][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 337.835697][ C0] RAX: 0d83c8fb15953100 RBX: ffffffff819683b8 RCX: 0d83c8fb15953100 [ 337.835713][ C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 337.835726][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 337.835740][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa38430 [ 337.835755][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 337.835768][ C0] FS: 0000000000000000(0000) GS:ffff888125c1a000(0000) knlGS:0000000000000000 [ 337.835783][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.835796][ C0] CR2: 000055d5e45e1000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 337.835814][ C0] Call Trace: [ 337.835834][ C0] [ 337.835841][ C0] default_idle+0x13/0x20 [ 337.835860][ C0] default_idle_call+0x74/0xb0 [ 337.835880][ C0] do_idle+0x1e8/0x510 [ 337.835902][ C0] ? __pfx_do_idle+0x10/0x10 [ 337.835928][ C0] cpu_startup_entry+0x44/0x60 [ 337.835946][ C0] rest_init+0x2de/0x300 [ 337.835968][ C0] start_kernel+0x3a9/0x410 [ 337.835993][ C0] x86_64_start_reservations+0x24/0x30 [ 337.836023][ C0] x86_64_start_kernel+0x143/0x1c0 [ 337.836052][ C0] common_startup_64+0x13e/0x147 [ 337.836085][ C0] [ 337.836645][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 338.017422][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 338.026549][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.036619][ T31] Call Trace: [ 338.039912][ T31] [ 338.042857][ T31] dump_stack_lvl+0x99/0x250 [ 338.047468][ T31] ? __asan_memcpy+0x40/0x70 [ 338.052072][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.057292][ T31] ? __pfx__printk+0x10/0x10 [ 338.061914][ T31] vpanic+0x281/0x750 [ 338.065915][ T31] ? __pfx_vpanic+0x10/0x10 [ 338.070431][ T31] ? rcu_is_watching+0x15/0xb0 [ 338.075210][ T31] ? preempt_schedule+0xae/0xc0 [ 338.080085][ T31] ? preempt_schedule_common+0x83/0xd0 [ 338.085571][ T31] panic+0xb9/0xc0 [ 338.089309][ T31] ? __pfx_panic+0x10/0x10 [ 338.093747][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 338.099159][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 338.105338][ T31] watchdog+0xfd2/0xfe0 [ 338.109518][ T31] ? watchdog+0x1de/0xfe0 [ 338.113876][ T31] kthread+0x70e/0x8a0 [ 338.117974][ T31] ? __pfx_watchdog+0x10/0x10 [ 338.122681][ T31] ? __pfx_kthread+0x10/0x10 [ 338.127307][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.132529][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.137750][ T31] ? __pfx_kthread+0x10/0x10 [ 338.142365][ T31] ret_from_fork+0x3f9/0x770 [ 338.146973][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 338.152101][ T31] ? __switch_to_asm+0x39/0x70 [ 338.156895][ T31] ? __switch_to_asm+0x33/0x70 [ 338.161689][ T31] ? __pfx_kthread+0x10/0x10 [ 338.166301][ T31] ret_from_fork_asm+0x1a/0x30 [ 338.171117][ T31] [ 338.174343][ T31] Kernel Offset: disabled [ 338.178686][ T31] Rebooting in 86400 seconds..