last executing test programs: 14m6.841141034s ago: executing program 0 (id=20331): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000002c0)={0x2, {{0x2, 0x4e23, @rand_addr=0x64010101}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000280)=0xd, 0x12) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) 14m6.531407177s ago: executing program 0 (id=20334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@struct={0x2, 0x8, 0x0, 0x4, 0x0, 0x8, [{0xb, 0x4, 0xffff}, {0x6}, {0xe, 0x0, 0xfffffffe}, {0xe, 0x4, 0xf}, {0xb, 0x3, 0x6}, {0x10, 0x0, 0x14}, {0x9, 0x2, 0x2}, {0xc, 0x0, 0x4}]}]}, {0x0, [0x5f, 0x61, 0x5f, 0x30]}}, &(0x7f0000000180)=""/206, 0x8a, 0xce, 0x0, 0x80, 0x10000}, 0x28) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000300)=0x1c) getsockopt$inet6_buf(r2, 0x29, 0x2e, &(0x7f0000000340)=""/6, &(0x7f0000000380)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) bind$alg(r3, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xac}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r1, 0x6}, 0x94) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000280)=0x5, 0x4) 14m6.42756713s ago: executing program 0 (id=20335): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000140009050000000000000000020100ff", @ANYRES32=r2, @ANYBLOB="080002006a"], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r5, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac"], 0x70}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 14m5.839641774s ago: executing program 0 (id=20336): socket$alg(0x26, 0x5, 0x0) close(0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xa, 0x7ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x1f0c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x86) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) preadv(r8, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x21, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r3, 0x29, 0x2, 0x80, 0xf314, 0x2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0x9, 0x8}}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETMDB={0x18, 0x56, 0x800, 0x70bd28, 0x25dfdbfb, {0x7, r9}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000890}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0) 14m3.779126626s ago: executing program 0 (id=20345): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000190001002dbd7000f8dbdf2502202000ff02ff02001a000008000100ac1414aa0c0009000800281004"], 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) connect$inet(r4, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000380)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="ed6c9f2af3ed9a782be9dc5c46cac454d54ae0aa6a06e919d1d6f4bb0fd54dd60aa408dd3dbda346ecdb60adaeadfb1cc6d3b804d90d0aedc571056451dfe0c8776a5a98120034906a40b70f3be97872e843c0fc05412fefbbafe2ed7611e74fd8876a3f6dc4ff36b09e8f712c31bbf053158e50ecfe92233dbc428b8c7782a1b99db36937bf9390b73a00e4bc952259e4a5f16fee4a21e2fd7f408465f4b4ff7c33727c44509b2d8d6237719d69e113474ce5d83a03c318d4202e39cd29bb2ec120edfdff1d0c8996af85889730829905521edd717ce3729035272d0461", @ANYBLOB="01000000000000e154003b00000008000300", @ANYRES32], 0x6f4}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x32008}, 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="03f12db59cc4cdb930010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x130}}, 0x8000) 14m3.662069987s ago: executing program 0 (id=20346): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 13m48.572847033s ago: executing program 32 (id=20346): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m32.356611498s ago: executing program 5 (id=24102): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = getpid() r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000007c0), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={r1, r2, 0x0, 0x8, &(0x7f0000000880)='nl80211\x00'}, 0x30) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x8000000000000001, 0x8, '\x00', 0x1, &(0x7f0000000100)=[0x0]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000540)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000780)=0x18) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r7) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x190, r9, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20005}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000218}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x845}, 0x20004014) read(r6, &(0x7f0000000000)=""/7, 0x7) socket$l2tp(0x2, 0x2, 0x73) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r10, 0x8010743f, &(0x7f0000000100)) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, r12, 0x1, 0x70bd29, 0x21dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000200)) 2m31.343799087s ago: executing program 5 (id=24107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) unshare(0x6a040000) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x20000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x24, r3, 0x1, 0x70bd27, 0x2000004, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020008207b8af8ff00000000bfa2000000000000070200632e1895ffb703000008000000b70400000200000085000000a600000095000000000000002c4f2f9f9dc80605a97d1dca2e1ecad5b90193db7bb561f018f61efa575d583d23f3e37a5dfd19e871b376fc8fb92d91bf49537f683361dab9faef232652d66d6e20fea00a5d765208820e6b87f2d9c0cfd36c11f8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x80000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 2m28.665083334s ago: executing program 5 (id=24123): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) 2m28.506573411s ago: executing program 5 (id=24125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000320009000000000000000000030000009a874eb7"], 0x14}}, 0x0) 2m28.357095053s ago: executing program 5 (id=24126): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x8000000000000001, 0x8, '\x00', 0x1, &(0x7f0000000100)=[0x0]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000014000100005ec8e2364d2bb42d"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x200000c0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000540)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000780)=0x18) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r6) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="90011000831a280feb44d14f06a38600feea07d30dade37af7afe9e9ea8b56ebf8181ac96e2f080f4cfa76a9ecde09bb6db5f59caedafb4ccd51c2bf4ea74665d83af096b4b825", @ANYRES16=r8, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000218}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x845}, 0x20004014) read(r5, &(0x7f0000000000)=""/7, 0x7) socket$l2tp(0x2, 0x2, 0x73) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r9) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, r10, 0x1, 0x70bd29, 0x21dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000200)) 2m27.483642661s ago: executing program 5 (id=24130): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0x6, 0x1, 0x1, 0xfffffffe}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m12.441143776s ago: executing program 33 (id=24130): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0x6, 0x1, 0x1, 0xfffffffe}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.154373457s ago: executing program 4 (id=24992): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x8000000000000001, 0x8, '\x00', 0x1, &(0x7f0000000100)=[0x0]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff160003"], 0x64}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f000000000008"], 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r9) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000940)=ANY=[@ANYBLOB="504be0bbdcf775d0b663200d923e73155d3436118a8063c1c891a014d797936dd21fc177131f7240cdc5a5555da560a4", @ANYRES16=r10, @ANYBLOB="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"], 0x190}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000218}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x845}, 0x20004014) read(r8, &(0x7f0000000000)=""/7, 0x7) socket$l2tp(0x2, 0x2, 0x73) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, r12, 0x1, 0x70bd29, 0x21dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000200)) 19.456004737s ago: executing program 6 (id=24994): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r0], 0x154}, 0x1, 0x0, 0x0, 0x40428d4}, 0x4000014) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x2, 0x6, 0x2}, {0x6, 0x81, 0x7, 0xd}]}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="06000000200400000100000000000000", @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="040000c001000000040000200302000042775066621545656f2157312bbb8a"], 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0xc010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r8, &(0x7f0000000340)={0x1d, r3, 0x0, {0x0, 0x1, 0x3}, 0x1}, 0x18) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xf, 0x10}, {0xffff, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a0080000002000800000000040008"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000000008010400000000000000000700000105000300210000000600024088840000040004800900010073797a31000000006426a833f4fc286c42d861ea58e48a5987ccbab2786708fdeaca65b001fa67077057c2e2b808b0e47a3c6ad76756f2b3efa19f044525d53b87e137f4a543e9c9a4361629c42e1131a69fc982ba67bcb0a026b3af7d1bf4e18b8b16f5ed46a644f3ee016c0592e69cafeaf2e8af7b0099bdee79dd5eb349ad0682a9ba436f3b70d9b507a56fd1899937ecab9e3def6be695b3f43b1a6fa1df132221271d4ebfc5bf84b853b1f85bf5eb253da111923c4ee184368537fa4fc556"], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x800) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 19.191406628s ago: executing program 6 (id=24995): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4008000) 19.117997718s ago: executing program 4 (id=24997): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x2, 0x3, 0x0, 0xff, "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", 0x2, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x2, 0xfffffffffffffff7, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x6, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40428d4}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f00000004c0)={0x6, 0x420, 0x1, {r4, r5/1000+10000}, {0x0, 0xea60}, {0x4, 0x0, 0x1, 0x1}, 0x1, @can={{0x4, 0x1}, 0x3, 0x2, 0x0, 0x0, "4277506662154565"}}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0xc010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xf, 0x10}, {0xffff, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010004000000000000000000000a30000000060a0b0400000000000000000200fffd040005800900010073797a31000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x58}}, 0xc000) 19.049338425s ago: executing program 3 (id=24998): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f7}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) (fail_nth: 9) 18.808135256s ago: executing program 6 (id=25001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000f9fffffffffffffff09d6dd5904dbf22000000004be15e5ccd9191b509b456e2ee19825d14f1061782ed726d1d9b5e1113136096c95eeb9351fc9a834010e923596bb990252606c6417bc26d5c55fad8e99793b86d1b4adc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x6e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 18.802994144s ago: executing program 3 (id=25002): r0 = socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) close(r5) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @null, @bpq0, 0x0, [@bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r8 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, 0x0) r9 = openat$ppp(0xffffffffffffff9c, 0x0, 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) close(0xffffffffffffffff) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) 18.30381571s ago: executing program 1 (id=25003): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a400000000009000200737d7a31000000000900010073797a30000000000800054000000025140011800a0001006c696d6974000000040001"], 0x98}, 0x1, 0x0, 0x0, 0x810}, 0xc4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @local, 0x4000101}, 0x1c) getsockname$packet(r2, 0x0, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full', 0x20, 0x1ff}, 0x3d) 18.189899027s ago: executing program 1 (id=25004): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r6, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x2c, r10, 0x5, 0x70bd2d, 0x0, {{}, {@void, @val={0xc, 0x99, {0x7f, 0xc}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x20c, r10, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x3, 0x3c}}}}, [@NL80211_ATTR_VENDOR_DATA={0x11, 0xc5, "e54c959aae734cde4261f0e2e4"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2a27c67c}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x40}, @NL80211_ATTR_VENDOR_DATA={0xf0, 0xc5, "7fc2c6bb6ba6eee08cb1aa79086781bc566ff425f13bd58f14fa50e59351dad5a0d3b6e3079b6b975b0409782361cdad1e1883384623a7d2544f8b0734918e5cff25a6f02e4deb981e4653943a86795844fe0163cf007b3cb99dfe7ad7ee11fb7b4e5ecca1eaca7743abc601be11c90595c0c449793e004d88a6b0597547ee3f5b2f56f4b71cbe689948b2e1a3ecc5c363e63ba48cb4b846f4c73294795ae45117731b34a87811c9e8f1f9a43c0051f89d94d03fe75f18721cf25984dba28672f6813b1dff768e128881ba12cf975a1f6cfec8c507b45d040114a10469b1ce8d0f3a5c7f03c476f52153a221"}, @NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "81ba28241b11f19241f5c0cb3c1516a81626a30fe4427d61bff84052c18e411648b29f652a0d6899d303f906d6dfbb0dacc017cc0b6ae749e11b10a3a90c3025c641de073d9e277d9d4cb529585d86382031818bf673d40cb77451"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7f}, @NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "e2b1df3f1bf98452d824bbeb06f6595639e392ff6944b855bb407da8ee05eae03904aee19544692a657484de979c991b6fdc5e01de459d313335cd7544f07d3fd3bb181f4696b125552287d0733b120d7f3bec16e1fc860cc58fa9"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x2000}, 0x8880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x102}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4092, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r11 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 18.114478745s ago: executing program 4 (id=25005): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r0], 0x154}, 0x1, 0x0, 0x0, 0x40428d4}, 0x4000014) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x2, 0x6, 0x2}, {0x6, 0x81, 0x7, 0xd}]}, 0x10) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="06000000200400000100000000000000", @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="040000c001000000040000200302000042775066621545656f2157312bbb8a"], 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0xc010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r8, &(0x7f0000000340)={0x1d, r3, 0x0, {0x0, 0x1, 0x3}, 0x1}, 0x18) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xf, 0x10}, {0xffff, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a0080000002000800000000040008"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000000008010400000000000000000700000105000300210000000600024088840000040004800900010073797a31000000006426a833f4fc286c42d861ea58e48a5987ccbab2786708fdeaca65b001fa67077057c2e2b808b0e47a3c6ad76756f2b3efa19f044525d53b87e137f4a543e9c9a4361629c42e1131a69fc982ba67bcb0a026b3af7d1bf4e18b8b16f5ed46a644f3ee016c0592e69cafeaf2e8af7b0099bdee79dd5eb349ad0682a9ba436f3b70d9b507a56fd1899937ecab9e3def6be695b3f43b1a6fa1df132221271d4ebfc5bf84b853b1f85bf5eb253da111923c4ee184368537fa4fc556"], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x800) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 17.901252619s ago: executing program 1 (id=25006): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x2b00, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a0001"], 0x11c}}, 0x4) 17.724290605s ago: executing program 1 (id=25007): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}]}, 0x10) 17.592769289s ago: executing program 4 (id=25008): r0 = socket$netlink(0x10, 0x3, 0xb) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x25dfdbfc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 17.516065024s ago: executing program 3 (id=25009): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x8}, &(0x7f0000000500)=0x90) shutdown(r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) 17.421059395s ago: executing program 1 (id=25010): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="08cb5eb439c9ce6e08380f5bc66be731f9188191e5fc38ef91d839775067f862d4cfbca41b84c6f91652a7967c03a9141f98db87e7cb4974", @ANYRESDEC=r0, @ANYBLOB="6461c678c1f7efa04cdbfb4b83a9e6083b8c4ed16e8ff31207940ef185c002a14114680c3e755debcbb048ee0fe86ac50b7cc2d645c8d73f60361e55809a3f669d7354bfffc25e67ef4c512e4c1ebe2581da3e354a98d42b828e11c4b8c8cb498776810f87870d0fb44f9007479f4404d0a5302b961e529bb2833fe995ce50a2402f15e3b2f3912e0e0896100bd5d6950c02a1b8ce54be844a51fa2df39d442dc21f75e60dc356f877835590935aa4491dacac10247ad107", @ANYBLOB="93d0d5c51f90890bea53adcf53f57b32c019485d50942e35fa8cce29590fa3f9585033558d1ced4905c1", @ANYRES16=r0, @ANYRESOCT=r0], 0x178}, 0x1, 0x0, 0x0, 0x24040010}, 0x20044000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000003d80)=""/4084, 0xff4}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x84, 0x0, 0x2, 0x270bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x101}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x84}, 0x1, 0x0, 0x0, 0x10000}, 0x8080) socket$kcm(0x29, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0xfffffffff0000000}, 0x18) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) 17.356833271s ago: executing program 4 (id=25011): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) close(0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x1f0c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x86) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) preadv(r9, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x21, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r4, 0x29, 0x2, 0x80, 0xf314, 0x2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0x9, 0x8}}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r1, 0x0, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0) 16.927619166s ago: executing program 2 (id=25014): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full', 0x20, 0x1ff}, 0x3d) 16.837286075s ago: executing program 6 (id=25015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x14, r1, 0x50dc85624ea6cf59, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 16.72685048s ago: executing program 4 (id=25016): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20040085) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000030000000c00060003000000000000000400078008000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x10) 16.677216012s ago: executing program 2 (id=25017): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x6000, &(0x7f0000000040)={&(0x7f0000000900)={0x28, 0x0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x17}}}}}, 0x28}}, 0x0) 16.654777784s ago: executing program 6 (id=25018): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt(r0, 0x1000f3f4, 0xfffffffe, &(0x7f0000000080)="0ba24c8508fb92eff11b480d3fba732293f9d571456f502945b135a35d5f597b08015c1a69d25130bfa27e3d3c0ad88a008e0e2cddbe12630f3d25b6890ecb8c62ef1e257bfa7d72ec4934a27406fc78e319f88a", 0x54) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="b6", 0x1}, {&(0x7f0000000580)="b1cdc0a92435041e6be063329729ef5e76ad3fe345f5049c645eea4edf3eac61ac6125c4382bea15999372651c0bedb101c6de3cefe71b3c94b24b07b8aafdf4bdcc2569b869280ee381d3e45f30dbd8e28014119a6036cb506f7a2b2a5039de729d400860c16bc46bebeacfb205403097943553bbef64d6a817d60ca21b7944848733b0e4e78d36219fe86bf2274f10f977fa07fbc307484bc1feaf02343682711f9e4f55c773e427969ba85891fcf67bd340694e5cb9d5c00f376b9c56c24a7515286a8f0955784b81819d216b26cb77c27d976c9faeba5c250cac", 0xdc}, {&(0x7f0000000880)="67a9692bdd01faed906c6411d8c3a7e0037340873e5a1f6e59dd24d02cac6a000e0000000000000000c5157b4b67317e2e9d65f6f94b47bb606a3b5972a27beec2880dae2aaf9fdf76039f47a0e9956f24bb4a2d94a5a46c4bcc8731b57e2dd876b270bfc262781bfefe470234d1640421289b95236b8111eafbaf7089438b0300a46e3098df7afc754445be4f47dfc5548d4a3f2c9f1608e91ee2050f3bc9ab46e0fddf55f35049c188aaf606ec39f8e96e680d1c0e65", 0xb7}, {&(0x7f0000000680)="3568ced1970359734f553b38b7e823cd3e4b260c303ab8f70591545b2a2b14963069f94c3ca955f4bb502b1aeb095ad4c1b37b6b3b62288dfdd4c0b492978a19052e6e96eda0c016236e84100e5f5575853b502832362059529b4c31113a6c6befe743f70b26074f05cb699444c998bd9ed5b1765520c1581b18941abd3d3bd35902afb1637275c1924c35613d7c627f9478b466be188e7ca7b352919595291d82e87bc3127bc04a8575397369098197bc477a5f71b6e53cf90a926505375904", 0xc0}, {&(0x7f00000002c0)="f6545097a63ebe15d5737ab18a96e1610c0e5ff3e2fa407deb36687fb2602605e834abaf439404961546ece396cd6a0f9c7b71ce566bd45e9da08989200a2f0abcbd5008f368565da7775d22c301128e94c536f8662eb4945d87595449ff995b777b3ddc888cee5e6605174fb237a4c88d335db0c1f5bd61f15432d379738371abd5f2f8debfe56c38590b2c9b51ceaab05b3910df0c546980044e17fcc89820142611a169dae227326b36e82f26a2d4eef23c37504b5310762e1174f3fc7281ed5ae9d83f630634bc00d434bb5ae958d77b94f3a2ca14aa54244479d04efa61071cb24ca08888acfdb15516fec5a0a9fcd208b6c7683a8a8f72fa9aee442f46bc4dff0c84a39b34d58230ee86c369997e3b6339faff3c8bcb2c803dffc19414db25c677139126fb38ddcab85e07518c032ca549ef67685687db08f09e1694c08789c85992f7953125ef8a940201ae314edd5b6016e91730586f021a9ecf74d2cfe184bf7444d368bed8bcfd8bab42362d926bb6b47cf20e5746a4c97ab73198461f4fa48375a146784795914b96e7c3b8c33f335a51b5affe5a90cd2f365b13f5373645f1c3aedc043e9bfa00718f7cc6585b7a5dcd34ad1a685b52cf2865b70b9c407695c831ad080238b160547cfdebcf9b5871d9682bd4effca32a98f50fa749dea570e9feef9cd88d15e97c436a95819d05878a66a4dcdb4629558d328372e50fa86ef3782584b5e7c11dab599b36d88ac06965d50ceea3534a66eafdf51c3a633daf516f13c97a8c64a486eac425a39f50a2fb791468523f8c20ac195acd5c0cbd67", 0x245}], 0x5, 0x0, 0x0, 0x20040890}, 0x2404c800) accept(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) 16.611399683s ago: executing program 1 (id=25019): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="08cb5eb439c9ce6e08380f5bc66be731f9188191e5fc38ef91d839775067f862d4cfbca41b84c6f91652a7967c03a9141f98db87e7cb4974", @ANYRESDEC=r0, @ANYBLOB="6461c678c1f7efa04cdbfb4b83a9e6083b8c4ed16e8ff31207940ef185c002a14114680c3e755debcbb048ee0fe86ac50b7cc2d645c8d73f60361e55809a3f669d7354bfffc25e67ef4c512e4c1ebe2581da3e354a98d42b828e11c4b8c8cb498776810f87870d0fb44f9007479f4404d0a5302b961e529bb2833fe995ce50a2402f15e3b2f3912e0e0896100bd5d6950c02a1b8ce54be844a51fa2df39d442dc21f75e60dc356f877835590935aa4491dacac10247ad107", @ANYBLOB="93d0d5c51f90890bea53adcf53f57b32c019485d50942e35fa8cce29590fa3f9585033558d1ced4905c1", @ANYRES16=r0, @ANYRESOCT=r0], 0x178}, 0x1, 0x0, 0x0, 0x24040010}, 0x20044000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000003d80)=""/4084, 0xff4}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x8080) socket$kcm(0x29, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0xfffffffff0000000}, 0x18) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) 16.569198998s ago: executing program 2 (id=25020): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, 0x0, 0x4040094) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r3, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x13e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfd"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 16.568974352s ago: executing program 3 (id=25021): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$netlink(0x10, 0x3, 0x12) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4048050) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), &(0x7f0000000100)=0x4) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x16, 0x65, 0x5, 0x12, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x32, 0x20, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010102}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_lifetime={0x4, 0x3, 0xfffffffa, 0x9, 0x7fffffff, 0x9}, @sadb_x_nat_t_type={0x1, 0x14, 0xd}, @sadb_address={0x3, 0x5, 0x32, 0xf5c3b2bdf2374c07, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_ident={0x2, 0x1, 0x0, 0x0, 0x7}]}, 0x90}}, 0x40) socket$kcm(0x29, 0x0, 0x0) 16.489219165s ago: executing program 6 (id=25022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001eb6700000027000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r6, &(0x7f0000000ac0)=[{{&(0x7f00000009c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea437d95cb3096af980c02d7c228cc0fcd139de0c5787c6a09f430de0c391e8d48f4601f42e50c3247201ff179e204923a8d4c6d57af9f48b8069be567e24c9045dd750e47e4acf8e33696473ec0690766ec8c6bd63758c22c1ad988a2b9eaf393e5bb0940e70740617b2435879d7c7263c81bcfee090f32f1336db0f6222bbc", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000002400)="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", 0xfef}], 0x3}}, {{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x11284862defe5469, @host}, 0x80, &(0x7f0000000600)=[{&(0x7f0000003880)="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", 0xff0}, {0x0}, {&(0x7f0000000a40)="d139fc0ed8f1969754830c5ebbbe697fe4695c654a7243e936a2c06c19790aec42d28b20cbb373f71295942c93facb549abb71ffaf5b2e5a9de4d41642efab621f3f1b99e4a8a1d4c4534bbbde4c26b50b94ab8a6e6cdfd07a50fdfdcd87b59b355cd29eb96613c1502369dd485d3a7f5ee1bf96ee1d", 0x76}], 0x3}}, {{&(0x7f0000000940)=@l2={0x1f, 0xf, @none, 0xfff4, 0x1}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690b4dbefd903", 0x9}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x3, 0x2, 0x10, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x40, 0x20, 0x5, 0x6}}) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=@RTM_DELMDB={0xd8, 0x55, 0x400, 0x70bd26, 0x25dfdbfe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x0, {@ip4=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x1, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x2, {@ip4=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00', 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x41a14176c8fdaaf2}}}]}, 0xd8}}, 0x4004) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000b80), &(0x7f0000000bc0)=0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e220800"], 0x5c}}, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) 16.441861893s ago: executing program 2 (id=25023): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x2, 0x3, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x2, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x2, 0xfffffffffffffff7, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x6, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40428d4}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x9, 'vlan1\x00', {0x6719}, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000300)={&(0x7f00000004c0)={0x6, 0x420, 0x1, {r4, r5/1000+10000}, {0x0, 0xea60}, {0x4, 0x0, 0x1, 0x1}, 0x1, @can={{0x4, 0x1}, 0x3, 0x2, 0x0, 0x0, "4277506662154565"}}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0xc010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xf, 0x10}, {0xffff, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x0, 0xff, 0x6, 0x6, 0x1}, 0x20) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 16.058490056s ago: executing program 3 (id=25024): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff07003506000002000000170600000ee50000bf250000000000002d350000000000006507000002000000070700004c0001fa0f75000000000000bf54000000000000070400000400f9ff3d1401000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c4e704000000000000a04d1ffc187fa1a2ba7ba0c0d507b92de00435fd233cc0f0d9b2c312b68856656ca9caa2ee4dc258d72e690098804de235cf020e35245c9f5526d35df627a64ac7efde50fd7f1d8bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6f902b261848d74096636ab6d8c63c8d62861cbc38d1e6bef45e672ac3d3d5243b85b3b15c7499ff39a3dadcbfbea9e050fb6940344dfbeebbf3e7e37d0a9a387518f926fba75479eacd4f51aeb28b6c56a75144ef6df55a275799897ca000000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) sendmsg$nl_xfrm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x4e24, 0x20, 0xfffd, 0x0, 0x0, 0x20, 0xa0, 0x32}, {@in=@multicast2, 0x0, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x12}, {0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x3503, 0xa, 0x4, 0xfd, 0x2c}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x4000) 15.677133366s ago: executing program 3 (id=25025): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYBLOB="08cb5eb439c9ce6e08380f5bc66be731f9188191e5fc38ef91d839775067f862d4cfbca41b84c6f91652a7967c03a9141f98db87e7cb4974", @ANYRESDEC, @ANYBLOB="6461c678c1f7efa04cdbfb4b83a9e6083b8c4ed16e8ff31207940ef185c002a14114680c3e755debcbb048ee0fe86ac50b7cc2d645c8d73f60361e55809a3f669d7354bfffc25e67ef4c512e4c1ebe2581da3e354a98d42b828e11c4b8c8cb498776810f87870d0fb44f9007479f4404d0a5302b961e529bb2833fe995ce50a2402f15e3b2f3912e0e0896100bd5d6950c02a1b8ce54be844a51fa2df39d442dc21f75e60dc356f877835590935aa4491dacac", @ANYBLOB="93d0d5c51f90890bea53adcf53f57b32c019485d50942e35fa8cce29590fa3f9585033558d", @ANYRES16, @ANYRESOCT], 0x178}, 0x1, 0x0, 0x0, 0x24040010}, 0x20044000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000003d80)=""/4084, 0xff4}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x4}}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) socket$kcm(0x29, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) 15.349511411s ago: executing program 2 (id=25026): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x205) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) getsockopt(r1, 0x3, 0x10000, &(0x7f0000000080)=""/250, &(0x7f0000000000)=0xfa) close(0x4) 15.248435912s ago: executing program 2 (id=25027): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.514574709s ago: executing program 34 (id=25019): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="08cb5eb439c9ce6e08380f5bc66be731f9188191e5fc38ef91d839775067f862d4cfbca41b84c6f91652a7967c03a9141f98db87e7cb4974", @ANYRESDEC=r0, @ANYBLOB="6461c678c1f7efa04cdbfb4b83a9e6083b8c4ed16e8ff31207940ef185c002a14114680c3e755debcbb048ee0fe86ac50b7cc2d645c8d73f60361e55809a3f669d7354bfffc25e67ef4c512e4c1ebe2581da3e354a98d42b828e11c4b8c8cb498776810f87870d0fb44f9007479f4404d0a5302b961e529bb2833fe995ce50a2402f15e3b2f3912e0e0896100bd5d6950c02a1b8ce54be844a51fa2df39d442dc21f75e60dc356f877835590935aa4491dacac10247ad107", @ANYBLOB="93d0d5c51f90890bea53adcf53f57b32c019485d50942e35fa8cce29590fa3f9585033558d1ced4905c1", @ANYRES16=r0, @ANYRESOCT=r0], 0x178}, 0x1, 0x0, 0x0, 0x24040010}, 0x20044000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000003d80)=""/4084, 0xff4}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x8080) socket$kcm(0x29, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0xfffffffff0000000}, 0x18) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) 1.481067388s ago: executing program 35 (id=25016): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20040085) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000030000000c00060003000000000000000400078008000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x10) 1.000560651s ago: executing program 36 (id=25022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001eb6700000027000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r6, &(0x7f0000000ac0)=[{{&(0x7f00000009c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000002400)="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", 0xfef}], 0x3}}, {{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x11284862defe5469, @host}, 0x80, &(0x7f0000000600)=[{&(0x7f0000003880)="f9292cd1d11865c51c5447b349fe89be02e268e8d2e0f66515e514820024a3561e1ed6f2082b9f73eeeb113674f44f5c388ca9853619ebecd21f9b712a14e24054cfb9b5362493ce63a4dd2ef12bf5c67567927fb4e3e7a188b22384e8f1317f72c717a3e893800c1f1774eb42de222824e12ff880cd974848f9468cd8d632e2e95a13f5022a5b9c66d741d4b1777460a8b6e9c360813ee83f35159e8dea7ef03359d7185d560b0ae10b109a8d3fd3be6ed5cadd69e5e32e3c1f94427ba74d7baa41c3f50a7163947f366c12db05ae969ab2a821c0d1032b5dd63f43f8055201a7f4b948f48133cbf5f6c6a913bd1bc0f2cce4516e400204a25b7a750af979c0fd8fe7ee8976833c50b859681ba6fa70241ce4523e4465b60ad9219d566e31d37c6d625450600c627833750e2da54dc25d5f6e91e6a3480a01d6d056497829c4203f0c46e9e2f042576221b0e370697585c09526b0bfca89a8f12d13adb4452f5bd8e40de944e1f13b558c73a93c43c53d2844ae7fac848b8bb21cf2a5693d373a9e2127138c36358a3f9a887ff2742a3d362cbd4892844372284841f0cc08b4efd2d4053b58cd5a198a483db1148311c4b9dd265b1636ba84678d3de2b5fcd0d9c15bbc1a8dacdef6baebde85760ead205c48e1cdaf1cd32755526c96c4763547e9432c90f1a0edef156714533133a58a36fb086837415db5afaff265ee857f01d9bf57aa7a68dca561573076475803c5143cce335bd36164107e62de9184d13e3143dbc979c05365b4bac6d6a2535d79d2cd32a3bf3ee8a3fe24e5b26eaadf2460ebad780ed6116fcccb127ae741bcd2038dda3e8f2a539e40290c9f7114639fb292673e1585e6deefa5761236734811c4c0b7ede0a9f7d650d88c984d9362e4131b4cda1f2073769ce991e6f4c675c4e3235741fe78095425b0c49d6233c8f9f7ec62e2dc60e7e85056396de5927d1c825288e922f9550d3c0f302fe294f6d8dc5cc6b9db2255d1f952cf1b04de21b109badb89b1d6f5d83d46c4b5b759f80833524a0c294b83ab682903e30a241fec30aca3adcedae02305b4f5fed22167ff614e585e73422369c54a3d3239acf454ccb7293d8ea8a4fc3aa4d2d7c3c203448809474096ef5297d1225a678c271f84e65303adcda51d29a5f8b3cb28a4fb52321bc2b3d78a33de69a837a2cd2f9dab09b259ed7b12796cea41d60bf3a83e4cb9f11751c1cb7b0cf8a845b29ae2397f8305d0aba4cc8fbfff8cfbe4430af0b673191117fa42212a4b5e0632e510f1c153a402f02329214947f232090fb8e6b5d02a0d393241cf6b76d6943506d7b9898f1d9c22ac6508d9156304eeb315ee56008f3bcccb1435ab99b0b96d73a8d11f1c8bdc733e66ad08eeebf739583c19bfd331cd68c0e7613573c5c5b729e1962e35f09adc906dbeabf3aa1ad0ecbf13f2c036e7fc7a29f36b6b43650a82e3e620dc87a96f942dc68af6032cf32e0986b6b088d2b6e96c9f5fe8192949e571e2608c6ad7f65c6a17a8ea3eb81edec26f08c712e3f54eba943290b94be5ffcd2e314d3a83f9f53440e38e5c0d26284c30766b615cd45558b8dac41ab81d64f76e528988247224222f8b8a5b87d6376b216bc35fce496cf732447ac5639d38a183c283a6bdd155e2e5204e301175ddc53452ac001c11c63599ed155a6d1a4acc8be942aa689c6485e00f958376064a69766b1bf75cb2a79343f87e8c753b61fb26b217b77c1b76c3eb858326480601d58ce43b6966fb93b2dd4af17fd1ebffce00fde22a72cbe0c93c86e6376228eaf2db8d1b97d3763d78550e022d1800626adb954449200af5d036307a9c72489e78bbc27da3418591eaffbfdcc61e31d24fba8f708c12848ddf45dca5accee1a2dd7915b2d7770141df1580d1ee21c342fdae9fb46bc0b1cf2edd9ae686b81d0767cc9080a598f63b189e052dcb8e46d21ca1fc2e949eea7cfa54f27f96f27cdf673bf75cd0c8bb6277ba01ade5c313fe57ef08bec60c9bef8920d73c2e918b4234f3b5dd4559945b89c14ec986d3dea47a703d0406ee972340a1832feb6561c3891945db59fc2967e091d8b8da3610e883e9fa71eca2017e375343857971b94551b19acb28cf765e98ed37e38a582e16f297df883d598a24b5fc253c2489e1a4e683d027f064a40db035b25d7a6d69ffa37b6babb7ba80dc45516b72061ccb1550c0dc258016ec1e2a7bcfe1330ae6f07098d84e5a1680eb3ff2eeaad300776deb0e8dc03df4d26bee14b8a26b63f8c3390cae064db3086eff8b092becbe0e8256ef6fd69c673bdbc39949dd4c903a01ed88a91829142d2402a294095abfbd5058d25185004b87571c593c0ca9e0d7edc2c7c76134c62426791fa43f6604a1d66d60b71aa1bb5b5684bcb19088139159716641f0613f4fc99b6c4fabd7acfb2bd5f0db9e61da44efdc1a669ee809c95831dca2ce00cc204b976b1c333fb16d7b0aeeac5a3f360ff8b07bcd08e817aa5ac914344088f9245943b93c67f4ff35f34b4443e0a54e20bfbea3127faa3fd4ae30d0c57b8f8cc92aedbfcb36d380b7d3760f9762086a6113203dd0f7e8417ec63c03d793a19c8daf0ab0fff629390bbc7c54d342b456aa32c989e46d7cbfff456ee8f1b83309d49ca875faf005934eea9ec72746dac4f080c40e8d3743ed21785eec34b9f7a65c0b11f414e550942fb3bdb0064c59aea61824c27e5b288c910c0ae843dd9784d8679df8ffe9da8a82b567d77a9ed93608043cf9f1926129479f850d1522db538b89341ea33749a61bf82601e6e788577b6767a19a1b3a1e7f18cdd21f703c4c573e44cf9afd9064e8319328397296bc2f9806981902f653b0c56b12ac7367db25981988b8fc9a735ade4e7ff27a9a1d55ae1a9282c33bd3a4af6488494ace3d72606141d2fee50b025dc775ab1f77b9f4a9bcc678a66ce3693abc7080840509e8996663c24968a187cf77d7cf006318fa269d4194894e5850fe535cdd109b3e7b5f2fefc609f75e64e6c83f10e11dd71784d15bd2745d6e93f1660973df015aa036d22f8094530e0272393a11b5cfe4c58786e1d547f036849f4b95fe6063da9ae60a126d525b9ff97c1b98a881d16af0c77c559b6a4dd24dbcc216dec852e1a5088f4624de506fac9d8ff5e4b18a162e4f237dfcefc883a70880cf190ffbb67c7d09fcabf5daf76ed7eb1f581fbbc4a4749881db43dd6852aaf95b8a6d38bbe2a9b7aad87f0698291d25232d4d2ec232a954ca1840102bcdcb458f6f53b9e9e6f11a6a3d596f37ff7aa04027ab24132d4e7bc7e0bb07af6433396943acec98048b15d8f9b757da5f732969cac0ba14029914346cab6112fc50e4ac1858f988723edfd9a98888844c9b43973c835fbcfd3903416f7048cc0d94b68ebba06ee70105449d91a6f514420901fd6c7b4a626dc174a22769d5d1d53f7510ceb3525d94cf3885d7ff81fbf200f41ed7b3b60e0d646fef80ea125be568650c51db8aa606993c7646a0fe9bbdec83ea5db88c436269161c7d68cb71e80a8ac4aedc57e721404337634c83f73664b9861c73bea2cea0408857d3816b0378bf2efcefa4942c416c976bb6ce601eba8274fa63a440bf1fa2a83d39a94d37af2b3a4608a1ba4c66c7f70261e62b24f3cc2b76f8ab34514e93b5857877ee4fcd4cbfb164f87c52721e16c4701ff0e0f85c72dbda681b300b242edbef0a089fcb85d6dc319bdfac1b21cc30061ebbf14bd0d626b3754e368dd0629ce45c2d34b1248de10bc0d11d5f7ad63f547c4b29d40962ae33596290bdcbbc43fd8a5e4ffe798282718533fbd42437ec900a5da14d17451131cc4d833110cc0f2657d1fa465dd22f73f1326e3c5336f978497641aea775ee6fb3a22bd8f40feba40f918d23f6f6ca5e132d7a359997b1d176cde421459b797ec01c6ea821197f5383089681fab7e7804d5988d9b3aedbb3727ae81f1168afce59955ca8970802b8891b1ce0d0613c4c4549494f65c7868ea955ebc6a410ebd01ecf096fe4c3e7cae58e34a5c3e53b72ae27b25a4a3eaa5f6fe6c63beca4df6c299cf0eaf3f959a1d9729bda53e6e014964bc5e8b5fcaee1883426c4eeb2240af3ce8801e63a0d4132eb8636db3f29e09d5c4051f70ebc0c1b5ca7d4f14b38061eee2099265b914604e17f633e4d0e9bcb5eeea696c4749bd7e9d2796744423c8587cc100990e24da307ad85f92f9d0ab93e8b630bb95597aba46c3ddd99558e2fef6b717dc3a74244560af73d62155d56b4a76f7585b5e1b9519a8f21627214c181efeed8c00087a34c0d5932144fcbdb54eca72ef918004f76098aa0d16a9e8f5abdf8c83498ed0e58e34e2c63433a75602e981fdda800544608a0ca2e1ac990a8b25f6ce32f5100915f758a52ec43b7400f4da748106bc21bf2ed2bdf58fa157cc8f3e3a2112bcb735e866ae994840155dd5d825eb02702f72c1e4e4e498455556b6791f235572fbfe351ff34bbc5c53f3450f9e99cf36c56de52625237d415eeaad3067c8734fb6b29f394a2b0308271603eafeaccb137e4d9dbd61a2877b7fc6912d571b47ea376b5574f4375de1b32a2eedd3a97000994527e5c20e21359f0cb5cc6a89eb2c5df5590cabea416604d4ee647bd18238d6e2b1459eb966fbfe672722bb983403f08501411a3d4f747bd551325c4510be44499249e44461b185e86fc733d2070d149bc665dcf455cd0fd97112ec2ace16350068ac31ad2f6dca03823a80b81b792e26afe96958c2df70ade4cf71db4a61fe4b3a51104d1ad6026e93166269c9473589deca41360a6539d567ca1be5684a6b49270ee19b8ee1a5dfe7465841739431ed8fd7f8a9b8fce9ea5d02f1780dfac1a868861eb05da94cfaf1914e0b48181a0fba1389dc4e6fcc849f511b0dcf61ac2a71598740fd9cc735b5438098ca523d2bf2dc1b72ebec37ce41e0e83533cb3c93ba40a744e69aca4348928ea7bc9ec8fcb2dbd85017f6f9941c36b82b5ba0e6cb347dc03c4c30480e67541d9041c050cd16962688761cdad8d08369f545b2a1182b75853df597e14ce5fa30812f41292ca93533c4e005aa4c192b6c8d5cb143d879affb25e754c3b6f15d4d604f0376d4743edd97828ab830faea95eec3a092d728c6109a94eaee6f9b60df7a457f32d3de6b960d0ac024ccd172a7e26eb0a7de33dbe0fb1ef0110961fb039ac65dc8902bfd332542d4e49f61d520d856c804bbea32b9a542b3781fe11b35f6980710c8f11da4e2ebc1ba31c5661244c769d748d27819197da63c4bb2c9822dca86a794811fe2df8112eaad0deb2e8318e9d4ff00d7b0b3c83142ee4761144db82fc971b3ad9c63914a9e1f52d72c5dee81fcbe22d7ff55a166e1a6c473ff2b7b026376048ea8c34463465bf955f0d8a3b00dee8a8838ae03e5e36c0627aeb1ef8d2df69d2fbce32fb8c2102ab993a091b88651027b33650a7f02600873a557a9aaa6ace5258a4c9bfc29b21b6d2ecfa915e6282a12f8348370f1ef63b672d9e2b435941832f3500f10b04f91f7b5e03889c8c51dc2aff7ce80a884940544aeff735c7e3400d036c82ec9822c5e15d1b0fb5e214c6daa62930cd866c9e28d4c5184eeb4a5538b8c74b3615cdf52f6806896424b1a115abfb8fe204d4827dfdb8c0cf3a61323ae237eb78b9405cebeea6825cfcea372bb61b136e2d1f3563ca2274ad764d6f98169a0a22b9ff138d9224889c821f7d26dea0cde358fa090e274660881b6d1aca44", 0xff0}, {0x0}, {&(0x7f0000000a40)="d139fc0ed8f1969754830c5ebbbe697fe4695c654a7243e936a2c06c19790aec42d28b20cbb373f71295942c93facb549abb71ffaf5b2e5a9de4d41642efab621f3f1b99e4a8a1d4c4534bbbde4c26b50b94ab8a6e6cdfd07a50fdfdcd87b59b355cd29eb96613c1502369dd485d3a7f5ee1bf96ee1d", 0x76}], 0x3}}, {{&(0x7f0000000940)=@l2={0x1f, 0xf, @none, 0xfff4, 0x1}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690b4dbefd903", 0x9}], 0x1}}], 0x3, 0x11) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x3, 0x2, 0x10, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x40, 0x20, 0x5, 0x6}}) sendmsg$nl_route(r0, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=@RTM_DELMDB={0xd8, 0x55, 0x400, 0x70bd26, 0x25dfdbfe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x0, {@ip4=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x1, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x2, {@ip4=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x0, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@rand_addr=' \x01\x00', 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x41a14176c8fdaaf2}}}]}, 0xd8}}, 0x4004) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000b80), &(0x7f0000000bc0)=0x6) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e220800"], 0x5c}}, 0x0) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet(0x2, 0x1, 0x0) 480.828699ms ago: executing program 37 (id=25025): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRES64, @ANYBLOB="08cb5eb439c9ce6e08380f5bc66be731f9188191e5fc38ef91d839775067f862d4cfbca41b84c6f91652a7967c03a9141f98db87e7cb4974", @ANYRESDEC, @ANYBLOB="6461c678c1f7efa04cdbfb4b83a9e6083b8c4ed16e8ff31207940ef185c002a14114680c3e755debcbb048ee0fe86ac50b7cc2d645c8d73f60361e55809a3f669d7354bfffc25e67ef4c512e4c1ebe2581da3e354a98d42b828e11c4b8c8cb498776810f87870d0fb44f9007479f4404d0a5302b961e529bb2833fe995ce50a2402f15e3b2f3912e0e0896100bd5d6950c02a1b8ce54be844a51fa2df39d442dc21f75e60dc356f877835590935aa4491dacac", @ANYBLOB="93d0d5c51f90890bea53adcf53f57b32c019485d50942e35fa8cce29590fa3f9585033558d", @ANYRES16, @ANYRESOCT], 0x178}, 0x1, 0x0, 0x0, 0x24040010}, 0x20044000) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000003d80)=""/4084, 0xff4}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x4}}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) socket$kcm(0x29, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) 0s ago: executing program 38 (id=25027): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): 47373][ T9021] ? __pfx_netlbl_calipso_list+0x10/0x10 [ 2238.047411][ T9021] netlink_rcv_skb+0x208/0x470 [ 2238.047430][ T9021] ? __lock_acquire+0xab9/0xd20 [ 2238.047457][ T9021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2238.047486][ T9021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2238.047530][ T9021] ? down_read+0x1ad/0x2e0 [ 2238.047556][ T9021] genl_rcv+0x28/0x40 [ 2238.047581][ T9021] netlink_unicast+0x82f/0x9e0 [ 2238.047610][ T9021] ? __pfx_netlink_unicast+0x10/0x10 [ 2238.047632][ T9021] ? netlink_sendmsg+0x642/0xb30 [ 2238.047652][ T9021] ? skb_put+0x11b/0x210 [ 2238.047679][ T9021] netlink_sendmsg+0x805/0xb30 [ 2238.047713][ T9021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2238.047739][ T9021] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2238.047771][ T9021] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2238.047790][ T9021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2238.047814][ T9021] __sock_sendmsg+0x21c/0x270 [ 2238.047848][ T9021] ____sys_sendmsg+0x505/0x830 [ 2238.047885][ T9021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2238.047921][ T9021] ? import_iovec+0x74/0xa0 [ 2238.047950][ T9021] ___sys_sendmsg+0x21f/0x2a0 [ 2238.047978][ T9021] ? __pfx____sys_sendmsg+0x10/0x10 [ 2238.048045][ T9021] ? __fget_files+0x2a/0x420 [ 2238.048072][ T9021] ? __fget_files+0x3a0/0x420 [ 2238.048111][ T9021] __x64_sys_sendmsg+0x19b/0x260 [ 2238.048140][ T9021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2238.048176][ T9021] ? __pfx_ksys_write+0x10/0x10 [ 2238.048198][ T9021] ? rcu_is_watching+0x15/0xb0 [ 2238.048222][ T9021] ? do_syscall_64+0xbe/0x3b0 [ 2238.048249][ T9021] do_syscall_64+0xfa/0x3b0 [ 2238.048269][ T9021] ? lockdep_hardirqs_on+0x9c/0x150 [ 2238.048290][ T9021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2238.048309][ T9021] ? clear_bhb_loop+0x60/0xb0 [ 2238.048334][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2238.048352][ T9021] RIP: 0033:0x7ff7b978eec9 [ 2238.048369][ T9021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2238.048387][ T9021] RSP: 002b:00007ff7b79f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2238.048407][ T9021] RAX: ffffffffffffffda RBX: 00007ff7b99e5fa0 RCX: 00007ff7b978eec9 [ 2238.048423][ T9021] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000004 [ 2238.048435][ T9021] RBP: 00007ff7b79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2238.048448][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2238.048460][ T9021] R13: 00007ff7b99e6038 R14: 00007ff7b99e5fa0 R15: 00007ffc121db138 [ 2238.048493][ T9021] [ 2238.466393][ T9022] 8021q: adding VLAN 0 to HW filter on device bond33 [ 2238.788541][ T9046] tipc: Enabled bearer , priority 18 [ 2238.929922][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24353'. [ 2238.978503][ T9055] vxcan1 speed is unknown, defaulting to 1000 [ 2239.097412][ T9056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24353'. [ 2239.136421][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24356'. [ 2239.172667][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24356'. [ 2239.210082][ T9063] netlink: 'syz.3.24356': attribute type 1 has an invalid length. [ 2239.235072][ T9063] netlink: 10 bytes leftover after parsing attributes in process `syz.3.24356'. [ 2239.365262][ T9055] wg1 speed is unknown, defaulting to 1000 [ 2239.367169][ T9054] vxcan1 speed is unknown, defaulting to 1000 [ 2239.928562][ T9068] vxcan1 speed is unknown, defaulting to 1000 [ 2240.273708][ T9068] wg1 speed is unknown, defaulting to 1000 [ 2240.338722][ T9054] wg1 speed is unknown, defaulting to 1000 [ 2240.462928][ T9092] netlink: 6 bytes leftover after parsing attributes in process `syz.6.24363'. [ 2240.514389][ T9092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2240.737682][ T9094] vxcan1 speed is unknown, defaulting to 1000 [ 2240.743602][ T9102] netlink: 16 bytes leftover after parsing attributes in process `syz.6.24368'. [ 2241.111459][ T9113] FAULT_INJECTION: forcing a failure. [ 2241.111459][ T9113] name failslab, interval 1, probability 0, space 0, times 0 [ 2241.119627][ T9107] vxcan1 speed is unknown, defaulting to 1000 [ 2241.132024][ T9113] CPU: 1 UID: 0 PID: 9113 Comm: syz.6.24373 Not tainted syzkaller #0 PREEMPT(full) [ 2241.132053][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2241.132065][ T9113] Call Trace: [ 2241.132074][ T9113] [ 2241.132083][ T9113] dump_stack_lvl+0x189/0x250 [ 2241.132111][ T9113] ? __pfx____ratelimit+0x10/0x10 [ 2241.132132][ T9113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2241.132154][ T9113] ? __pfx__printk+0x10/0x10 [ 2241.132183][ T9113] ? __lock_acquire+0xab9/0xd20 [ 2241.132221][ T9113] should_fail_ex+0x414/0x560 [ 2241.132254][ T9113] should_failslab+0xa8/0x100 [ 2241.132281][ T9113] kmem_cache_alloc_noprof+0x73/0x3c0 [ 2241.132304][ T9113] ? skb_clone+0x212/0x3a0 [ 2241.132332][ T9113] skb_clone+0x212/0x3a0 [ 2241.132360][ T9113] __netlink_deliver_tap+0x404/0x850 [ 2241.132397][ T9113] ? netlink_deliver_tap+0x2e/0x1b0 [ 2241.132421][ T9113] netlink_deliver_tap+0x19c/0x1b0 [ 2241.132446][ T9113] netlink_unicast+0x7fa/0x9e0 [ 2241.132484][ T9113] ? __pfx_netlink_unicast+0x10/0x10 [ 2241.132508][ T9113] ? netlink_sendmsg+0x642/0xb30 [ 2241.132536][ T9113] ? skb_put+0x11b/0x210 [ 2241.132564][ T9113] netlink_sendmsg+0x805/0xb30 [ 2241.132596][ T9113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2241.132623][ T9113] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2241.132656][ T9113] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2241.132675][ T9113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2241.132700][ T9113] __sock_sendmsg+0x21c/0x270 [ 2241.132734][ T9113] ____sys_sendmsg+0x505/0x830 [ 2241.132764][ T9113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2241.132800][ T9113] ? import_iovec+0x74/0xa0 [ 2241.132830][ T9113] ___sys_sendmsg+0x21f/0x2a0 [ 2241.132842][ T9094] wg1 speed is unknown, defaulting to 1000 [ 2241.132857][ T9113] ? __pfx____sys_sendmsg+0x10/0x10 [ 2241.132913][ T9113] ? __fget_files+0x2a/0x420 [ 2241.132939][ T9113] ? __fget_files+0x3a0/0x420 [ 2241.132979][ T9113] __x64_sys_sendmsg+0x19b/0x260 [ 2241.133008][ T9113] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2241.133043][ T9113] ? __pfx_ksys_write+0x10/0x10 [ 2241.133065][ T9113] ? rcu_is_watching+0x15/0xb0 [ 2241.133088][ T9113] ? do_syscall_64+0xbe/0x3b0 [ 2241.133116][ T9113] do_syscall_64+0xfa/0x3b0 [ 2241.133137][ T9113] ? lockdep_hardirqs_on+0x9c/0x150 [ 2241.133157][ T9113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2241.133176][ T9113] ? clear_bhb_loop+0x60/0xb0 [ 2241.133199][ T9113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2241.133218][ T9113] RIP: 0033:0x7ff7b978eec9 [ 2241.133236][ T9113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2241.133254][ T9113] RSP: 002b:00007ff7b79f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2241.133275][ T9113] RAX: ffffffffffffffda RBX: 00007ff7b99e5fa0 RCX: 00007ff7b978eec9 [ 2241.133290][ T9113] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 2241.133302][ T9113] RBP: 00007ff7b79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2241.133314][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2241.133326][ T9113] R13: 00007ff7b99e6038 R14: 00007ff7b99e5fa0 R15: 00007ffc121db138 [ 2241.133359][ T9113] [ 2241.133399][ T9113] netlink: 20 bytes leftover after parsing attributes in process `syz.6.24373'. [ 2241.720524][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.24375'. [ 2241.816440][ T9121] netlink: 20 bytes leftover after parsing attributes in process `syz.6.24375'. [ 2241.930648][ T9107] wg1 speed is unknown, defaulting to 1000 [ 2242.649812][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24379'. [ 2243.791693][ T9164] syzkaller1: entered promiscuous mode [ 2243.807494][ T9164] syzkaller1: entered allmulticast mode [ 2243.889667][ T9165] vxcan1 speed is unknown, defaulting to 1000 [ 2244.105406][T30339] IPVS: starting estimator thread 0... [ 2244.178995][ T9164] bond24: entered promiscuous mode [ 2244.193904][ T9164] 8021q: adding VLAN 0 to HW filter on device bond24 [ 2244.211823][ T9177] IPVS: using max 34 ests per chain, 81600 per kthread [ 2244.250971][ T9174] 8021q: adding VLAN 0 to HW filter on device bond24 [ 2244.259834][ T9174] bond24: (slave vcan1): The slave device specified does not support setting the MAC address [ 2244.273189][ T9174] bond24: (slave vcan1): Error -95 calling set_mac_address [ 2244.287028][ T9169] vxcan1 speed is unknown, defaulting to 1000 [ 2244.287337][ T9165] wg1 speed is unknown, defaulting to 1000 [ 2244.758249][ T9169] wg1 speed is unknown, defaulting to 1000 [ 2244.762228][ T9181] vxcan1 speed is unknown, defaulting to 1000 [ 2244.808058][ T9198] __nla_validate_parse: 5 callbacks suppressed [ 2244.808077][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24398'. [ 2244.831655][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24398'. [ 2244.904265][ T9201] netlink: 24 bytes leftover after parsing attributes in process `syz.6.24399'. [ 2244.936436][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24399'. [ 2244.962288][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24399'. [ 2245.143457][ T9201] ip6tnl1: entered promiscuous mode [ 2245.148724][ T9201] ip6tnl1: entered allmulticast mode [ 2245.197973][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24400'. [ 2245.213550][ T9181] wg1 speed is unknown, defaulting to 1000 [ 2245.217828][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24400'. [ 2245.275982][ T9211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24400'. [ 2245.319664][ T9211] nbd: must specify at least one socket [ 2245.487105][ T9220] netlink: 3 bytes leftover after parsing attributes in process `syz.6.24401'. [ 2245.611925][ T9220] batadv1: entered promiscuous mode [ 2245.620362][ T9220] batadv1: entered allmulticast mode [ 2245.940797][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.6.24402'. [ 2246.238912][ T9234] batadv0: entered promiscuous mode [ 2246.244860][ T9234] batadv0: entered allmulticast mode [ 2246.526421][ T9243] vxcan1 speed is unknown, defaulting to 1000 [ 2246.952878][ T9243] wg1 speed is unknown, defaulting to 1000 [ 2247.340672][ T9266] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2247.579237][ T30] audit: type=1800 audit(1759291535.567:20): pid=9274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.24415" name=CB dev="tmpfs" ino=24606 res=0 errno=0 [ 2248.076999][ T9290] vxcan1 speed is unknown, defaulting to 1000 [ 2248.450500][ T9290] wg1 speed is unknown, defaulting to 1000 [ 2248.599293][ T9301] vxcan1 speed is unknown, defaulting to 1000 [ 2248.952523][ T9315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2249.202625][ T9301] wg1 speed is unknown, defaulting to 1000 [ 2249.240083][ T9302] vxcan1 speed is unknown, defaulting to 1000 [ 2250.051346][ T9336] vxcan1 speed is unknown, defaulting to 1000 [ 2250.149110][ T9341] __nla_validate_parse: 8 callbacks suppressed [ 2250.149131][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24430'. [ 2250.175527][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24430'. [ 2250.185260][ T9341] netlink: 38 bytes leftover after parsing attributes in process `syz.6.24430'. [ 2250.195794][ T9341] nbd: socks must be embedded in a SOCK_ITEM attr [ 2250.298288][ T9337] vxcan1 speed is unknown, defaulting to 1000 [ 2250.414291][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24433'. [ 2250.482982][ T9354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24433'. [ 2250.594265][ T9355] netlink: 'syz.4.24434': attribute type 23 has an invalid length. [ 2250.725661][ T9302] wg1 speed is unknown, defaulting to 1000 [ 2250.727180][ T9352] vxcan1 speed is unknown, defaulting to 1000 [ 2250.746270][ T9337] wg1 speed is unknown, defaulting to 1000 [ 2250.793115][ T9336] wg1 speed is unknown, defaulting to 1000 [ 2250.806358][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24435'. [ 2250.981777][ T9359] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24435'. [ 2251.062519][ T9352] wg1 speed is unknown, defaulting to 1000 [ 2252.665362][ T9389] vxcan1 speed is unknown, defaulting to 1000 [ 2253.148678][ T9403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24449'. [ 2253.188210][ T9389] wg1 speed is unknown, defaulting to 1000 [ 2253.190870][ T9401] vxcan1 speed is unknown, defaulting to 1000 [ 2253.318171][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24449'. [ 2253.379536][ T9409] FAULT_INJECTION: forcing a failure. [ 2253.379536][ T9409] name failslab, interval 1, probability 0, space 0, times 0 [ 2253.423442][ T9409] CPU: 0 UID: 0 PID: 9409 Comm: syz.1.24452 Not tainted syzkaller #0 PREEMPT(full) [ 2253.423472][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2253.423484][ T9409] Call Trace: [ 2253.423492][ T9409] [ 2253.423502][ T9409] dump_stack_lvl+0x189/0x250 [ 2253.423539][ T9409] ? __pfx____ratelimit+0x10/0x10 [ 2253.423562][ T9409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2253.423584][ T9409] ? __pfx__printk+0x10/0x10 [ 2253.423613][ T9409] ? __pfx___might_resched+0x10/0x10 [ 2253.423643][ T9409] ? fs_reclaim_acquire+0x7d/0x100 [ 2253.423677][ T9409] should_fail_ex+0x414/0x560 [ 2253.423709][ T9409] should_failslab+0xa8/0x100 [ 2253.423737][ T9409] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2253.423762][ T9409] ? __alloc_skb+0x112/0x2d0 [ 2253.423789][ T9409] __alloc_skb+0x112/0x2d0 [ 2253.423815][ T9409] alloc_skb_with_frags+0xca/0x890 [ 2253.423856][ T9409] sock_alloc_send_pskb+0x857/0x990 [ 2253.423904][ T9409] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2253.423931][ T9409] ? lockdep_hardirqs_on+0x9c/0x150 [ 2253.423963][ T9409] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 2253.423989][ T9409] unix_dgram_sendmsg+0x461/0x1850 [ 2253.424013][ T9409] ? __lock_acquire+0xab9/0xd20 [ 2253.424064][ T9409] ? __lock_acquire+0xab9/0xd20 [ 2253.424090][ T9409] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2253.424111][ T9409] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 2253.424144][ T9409] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 2253.424167][ T9409] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 2253.424192][ T9409] __sock_sendmsg+0x21c/0x270 [ 2253.424226][ T9409] ____sys_sendmsg+0x52d/0x830 [ 2253.424257][ T9409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2253.424294][ T9409] ? import_iovec+0x74/0xa0 [ 2253.424320][ T9409] ___sys_sendmsg+0x21f/0x2a0 [ 2253.424350][ T9409] ? __pfx____sys_sendmsg+0x10/0x10 [ 2253.424425][ T9409] ? __might_fault+0xb0/0x130 [ 2253.424457][ T9409] __sys_sendmmsg+0x227/0x430 [ 2253.424489][ T9409] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2253.424511][ T9409] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2253.424570][ T9409] ? ksys_write+0x22a/0x250 [ 2253.424598][ T9409] ? __pfx_ksys_write+0x10/0x10 [ 2253.424620][ T9409] ? rcu_is_watching+0x15/0xb0 [ 2253.424647][ T9409] __x64_sys_sendmmsg+0xa0/0xc0 [ 2253.424676][ T9409] do_syscall_64+0xfa/0x3b0 [ 2253.424697][ T9409] ? lockdep_hardirqs_on+0x9c/0x150 [ 2253.424718][ T9409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2253.424739][ T9409] ? clear_bhb_loop+0x60/0xb0 [ 2253.424764][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2253.424783][ T9409] RIP: 0033:0x7f5da138eec9 [ 2253.424802][ T9409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2253.424821][ T9409] RSP: 002b:00007f5da22ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2253.424843][ T9409] RAX: ffffffffffffffda RBX: 00007f5da15e5fa0 RCX: 00007f5da138eec9 [ 2253.424858][ T9409] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 2253.424871][ T9409] RBP: 00007f5da22ff090 R08: 0000000000000000 R09: 0000000000000000 [ 2253.424884][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2253.424896][ T9409] R13: 00007f5da15e6038 R14: 00007f5da15e5fa0 R15: 00007ffe9dd4d218 [ 2253.424930][ T9409] [ 2253.554942][ T9401] wg1 speed is unknown, defaulting to 1000 [ 2253.653384][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24453'. [ 2253.774052][ T9412] netlink: 'syz.2.24453': attribute type 1 has an invalid length. [ 2254.344608][ T9442] 8021q: adding VLAN 0 to HW filter on device bond25 [ 2254.359494][ T9449] FAULT_INJECTION: forcing a failure. [ 2254.359494][ T9449] name failslab, interval 1, probability 0, space 0, times 0 [ 2254.373597][ T9449] CPU: 0 UID: 0 PID: 9449 Comm: syz.3.24465 Not tainted syzkaller #0 PREEMPT(full) [ 2254.373624][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2254.373636][ T9449] Call Trace: [ 2254.373644][ T9449] [ 2254.373653][ T9449] dump_stack_lvl+0x189/0x250 [ 2254.373680][ T9449] ? __pfx____ratelimit+0x10/0x10 [ 2254.373701][ T9449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2254.373719][ T9449] ? __pfx__printk+0x10/0x10 [ 2254.373747][ T9449] ? __pfx___might_resched+0x10/0x10 [ 2254.373769][ T9449] ? fs_reclaim_acquire+0x7d/0x100 [ 2254.373797][ T9449] should_fail_ex+0x414/0x560 [ 2254.373826][ T9449] should_failslab+0xa8/0x100 [ 2254.373855][ T9449] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 2254.373879][ T9449] ? __d_alloc+0x36/0x7a0 [ 2254.373905][ T9449] __d_alloc+0x36/0x7a0 [ 2254.373930][ T9449] d_alloc_pseudo+0x21/0xc0 [ 2254.373953][ T9449] alloc_file_pseudo+0xcc/0x210 [ 2254.373976][ T9449] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 2254.373994][ T9449] ? do_raw_spin_unlock+0x122/0x240 [ 2254.374020][ T9449] ? _raw_spin_unlock+0x28/0x50 [ 2254.374047][ T9449] sock_alloc_file+0xb8/0x2e0 [ 2254.374076][ T9449] ? __sys_socket+0x12c/0x1b0 [ 2254.374099][ T9449] __sys_socket+0x13d/0x1b0 [ 2254.374124][ T9449] __x64_sys_socket+0x7a/0x90 [ 2254.374147][ T9449] do_syscall_64+0xfa/0x3b0 [ 2254.374168][ T9449] ? lockdep_hardirqs_on+0x9c/0x150 [ 2254.374189][ T9449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2254.374209][ T9449] ? clear_bhb_loop+0x60/0xb0 [ 2254.374234][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2254.374254][ T9449] RIP: 0033:0x7f0607d8eec9 [ 2254.374273][ T9449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2254.374291][ T9449] RSP: 002b:00007f0608bb9fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2254.374312][ T9449] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f0607d8eec9 [ 2254.374327][ T9449] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2254.374340][ T9449] RBP: 00007f0608bba090 R08: 0000000000000000 R09: 0000000000000000 [ 2254.374353][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2254.374366][ T9449] R13: 00007f0607fe6038 R14: 00007f0607fe5fa0 R15: 00007ffc903b9068 [ 2254.374398][ T9449] [ 2254.670409][ T9447] 8021q: adding VLAN 0 to HW filter on device bond25 [ 2254.678767][ T9447] bond25: (slave sit6): The slave device specified does not support setting the MAC address [ 2254.704726][ T9447] bond25: (slave sit6): Error -95 calling set_mac_address [ 2254.777782][ T9449] batadv0: entered promiscuous mode [ 2254.792043][ T9449] batadv0: entered allmulticast mode [ 2254.838352][ T9446] vxcan1 speed is unknown, defaulting to 1000 [ 2255.033648][ T9463] netlink: 'syz.4.24467': attribute type 7 has an invalid length. [ 2255.392457][ T9468] __nla_validate_parse: 5 callbacks suppressed [ 2255.392478][ T9468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24469'. [ 2255.542048][ T9446] wg1 speed is unknown, defaulting to 1000 [ 2255.543810][ T9437] vxcan1 speed is unknown, defaulting to 1000 [ 2256.184445][ T9451] vxcan1 speed is unknown, defaulting to 1000 [ 2256.380325][ T9488] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1802723700) [ 2256.408312][ T9488] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 2256.449052][ T9451] wg1 speed is unknown, defaulting to 1000 [ 2256.461842][ T9437] wg1 speed is unknown, defaulting to 1000 [ 2256.496732][ T9474] vxcan1 speed is unknown, defaulting to 1000 [ 2257.032900][ T9474] wg1 speed is unknown, defaulting to 1000 [ 2258.017562][ T9504] vxcan1 speed is unknown, defaulting to 1000 [ 2258.039763][ T9508] netlink: 3 bytes leftover after parsing attributes in process `syz.6.24478'. [ 2258.102981][ T9508] batadv1: entered promiscuous mode [ 2258.139499][ T9508] batadv1: entered allmulticast mode [ 2258.204791][ T9516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24482'. [ 2258.251766][ T9519] netlink: 3 bytes leftover after parsing attributes in process `syz.4.24481'. [ 2258.298815][ T9519] batadv0: entered promiscuous mode [ 2258.313427][ T9519] batadv0: entered allmulticast mode [ 2258.764795][ T9504] wg1 speed is unknown, defaulting to 1000 [ 2258.795724][ T9509] vxcan1 speed is unknown, defaulting to 1000 [ 2258.892920][ T9544] sctp: [Deprecated]: syz.1.24488 (pid 9544) Use of int in maxseg socket option. [ 2258.892920][ T9544] Use struct sctp_assoc_value instead [ 2259.021795][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24488'. [ 2259.295510][ T9557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24491'. [ 2259.376909][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24493'. [ 2259.387392][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24493'. [ 2259.431627][ T9547] vxcan1 speed is unknown, defaulting to 1000 [ 2259.550688][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24494'. [ 2259.700191][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24494'. [ 2260.042116][ T9509] wg1 speed is unknown, defaulting to 1000 [ 2260.135153][ T9547] wg1 speed is unknown, defaulting to 1000 [ 2260.799012][ T9587] veth3: entered promiscuous mode [ 2260.821162][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24500'. [ 2260.886216][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24500'. [ 2260.897844][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24500'. [ 2260.909637][ T9590] netlink: 26 bytes leftover after parsing attributes in process `syz.4.24500'. [ 2260.920336][ T9590] nbd: socks must be embedded in a SOCK_ITEM attr [ 2261.398258][ T9608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24504'. [ 2261.775615][ T9623] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2262.005787][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24515'. [ 2262.190790][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24517'. [ 2262.210147][ T9647] vxcan1 speed is unknown, defaulting to 1000 [ 2262.784802][ T9647] wg1 speed is unknown, defaulting to 1000 [ 2263.018334][ T9657] syzkaller1: entered promiscuous mode [ 2263.041831][ T9657] syzkaller1: entered allmulticast mode [ 2263.196045][ T9670] FAULT_INJECTION: forcing a failure. [ 2263.196045][ T9670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2263.209860][ T9670] CPU: 1 UID: 0 PID: 9670 Comm: syz.2.24526 Not tainted syzkaller #0 PREEMPT(full) [ 2263.209888][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2263.209901][ T9670] Call Trace: [ 2263.209910][ T9670] [ 2263.209919][ T9670] dump_stack_lvl+0x189/0x250 [ 2263.209947][ T9670] ? __pfx____ratelimit+0x10/0x10 [ 2263.209970][ T9670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2263.209993][ T9670] ? __pfx__printk+0x10/0x10 [ 2263.210019][ T9670] ? __might_fault+0xb0/0x130 [ 2263.210057][ T9670] should_fail_ex+0x414/0x560 [ 2263.210091][ T9670] _copy_from_user+0x2d/0xb0 [ 2263.210126][ T9670] ___sys_sendmsg+0x158/0x2a0 [ 2263.210155][ T9670] ? __pfx____sys_sendmsg+0x10/0x10 [ 2263.210221][ T9670] ? __fget_files+0x2a/0x420 [ 2263.210249][ T9670] ? __fget_files+0x3a0/0x420 [ 2263.210289][ T9670] __x64_sys_sendmsg+0x19b/0x260 [ 2263.210319][ T9670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2263.210356][ T9670] ? __pfx_ksys_write+0x10/0x10 [ 2263.210379][ T9670] ? rcu_is_watching+0x15/0xb0 [ 2263.210401][ T9670] ? do_syscall_64+0xbe/0x3b0 [ 2263.210427][ T9670] do_syscall_64+0xfa/0x3b0 [ 2263.210449][ T9670] ? lockdep_hardirqs_on+0x9c/0x150 [ 2263.210470][ T9670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2263.210490][ T9670] ? clear_bhb_loop+0x60/0xb0 [ 2263.210516][ T9670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2263.210536][ T9670] RIP: 0033:0x7fece3b8eec9 [ 2263.210554][ T9670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2263.210572][ T9670] RSP: 002b:00007fece4a7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2263.210594][ T9670] RAX: ffffffffffffffda RBX: 00007fece3de5fa0 RCX: 00007fece3b8eec9 [ 2263.210610][ T9670] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 2263.210623][ T9670] RBP: 00007fece4a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 2263.210636][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2263.210649][ T9670] R13: 00007fece3de6038 R14: 00007fece3de5fa0 R15: 00007ffdcca9dbe8 [ 2263.210682][ T9670] [ 2263.225591][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24524'. [ 2263.423097][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24527'. [ 2263.458028][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24524'. [ 2263.671943][ T9688] netlink: 'syz.4.24529': attribute type 1 has an invalid length. [ 2263.945493][ T9695] vxcan1 speed is unknown, defaulting to 1000 [ 2264.114609][ T9703] netlink: 'syz.6.24533': attribute type 1 has an invalid length. [ 2264.423588][ T9695] wg1 speed is unknown, defaulting to 1000 [ 2264.967482][ T9738] siw: device registration error -23 [ 2265.006597][ T9738] vxcan1 speed is unknown, defaulting to 1000 [ 2265.266522][ T9737] vxcan1 speed is unknown, defaulting to 1000 [ 2265.266996][ T9738] wg1 speed is unknown, defaulting to 1000 [ 2265.891881][ T9761] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2265.953843][ T9741] vxcan1 speed is unknown, defaulting to 1000 [ 2265.968452][ T9765] __nla_validate_parse: 6 callbacks suppressed [ 2265.968473][ T9765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24551'. [ 2265.981977][ T9737] wg1 speed is unknown, defaulting to 1000 [ 2268.905122][ T9745] vxcan1 speed is unknown, defaulting to 1000 [ 2269.123785][ T9772] tipc: Started in network mode [ 2269.128864][ T9772] tipc: Node identity ac14142f, cluster identity 4711 [ 2269.137356][ T9772] tipc: Enabling of bearer rejected, failed to enable media [ 2269.248636][ T9745] wg1 speed is unknown, defaulting to 1000 [ 2269.291641][ T9741] wg1 speed is unknown, defaulting to 1000 [ 2269.318916][ T9777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24554'. [ 2269.577341][ T9780] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1802723700) [ 2269.601588][ T9780] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 2269.765904][ T9790] siw: device registration error -23 [ 2269.914091][ T9792] netlink: 'syz.4.24560': attribute type 1 has an invalid length. [ 2269.937873][ T9792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24560'. [ 2269.959582][ T9787] vxcan1 speed is unknown, defaulting to 1000 [ 2270.022731][ T9799] netlink: 3 bytes leftover after parsing attributes in process `syz.6.24561'. [ 2270.067483][ T9799] batadv1: entered promiscuous mode [ 2270.080960][ T9799] batadv1: entered allmulticast mode [ 2270.448098][ T9787] wg1 speed is unknown, defaulting to 1000 [ 2270.507527][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24563'. [ 2270.534920][ T9801] vxcan1 speed is unknown, defaulting to 1000 [ 2270.596820][ T9812] FAULT_INJECTION: forcing a failure. [ 2270.596820][ T9812] name failslab, interval 1, probability 0, space 0, times 0 [ 2270.621791][ T9812] CPU: 1 UID: 0 PID: 9812 Comm: syz.3.24564 Not tainted syzkaller #0 PREEMPT(full) [ 2270.621820][ T9812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2270.621834][ T9812] Call Trace: [ 2270.621843][ T9812] [ 2270.621852][ T9812] dump_stack_lvl+0x189/0x250 [ 2270.621881][ T9812] ? __pfx____ratelimit+0x10/0x10 [ 2270.621905][ T9812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2270.621928][ T9812] ? __pfx__printk+0x10/0x10 [ 2270.621967][ T9812] ? rcu_is_watching+0x15/0xb0 [ 2270.621991][ T9812] should_fail_ex+0x414/0x560 [ 2270.622029][ T9812] should_failslab+0xa8/0x100 [ 2270.622060][ T9812] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2270.622086][ T9812] ? __alloc_skb+0x112/0x2d0 [ 2270.622114][ T9812] __alloc_skb+0x112/0x2d0 [ 2270.622142][ T9812] hci_mgmt_cmd+0x1ca/0xef0 [ 2270.622171][ T9812] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2270.622216][ T9812] hci_sock_sendmsg+0x6ca/0xef0 [ 2270.622253][ T9812] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2270.622282][ T9812] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2270.622316][ T9812] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2270.622336][ T9812] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 2270.622366][ T9812] __sock_sendmsg+0x21c/0x270 [ 2270.622408][ T9812] sock_write_iter+0x258/0x330 [ 2270.622442][ T9812] ? __pfx_sock_write_iter+0x10/0x10 [ 2270.622484][ T9812] ? bpf_lsm_file_permission+0x9/0x20 [ 2270.622506][ T9812] ? security_file_permission+0x75/0x290 [ 2270.622542][ T9812] vfs_write+0x5c6/0xb30 [ 2270.622573][ T9812] ? __pfx_sock_write_iter+0x10/0x10 [ 2270.622603][ T9812] ? __pfx_vfs_write+0x10/0x10 [ 2270.622642][ T9812] ? __fget_files+0x2a/0x420 [ 2270.622678][ T9812] ksys_write+0x145/0x250 [ 2270.622707][ T9812] ? __pfx_ksys_write+0x10/0x10 [ 2270.622730][ T9812] ? rcu_is_watching+0x15/0xb0 [ 2270.622754][ T9812] ? do_syscall_64+0xbe/0x3b0 [ 2270.622783][ T9812] do_syscall_64+0xfa/0x3b0 [ 2270.622804][ T9812] ? lockdep_hardirqs_on+0x9c/0x150 [ 2270.622825][ T9812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2270.622845][ T9812] ? clear_bhb_loop+0x60/0xb0 [ 2270.622867][ T9812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2270.622885][ T9812] RIP: 0033:0x7f0607d8eec9 [ 2270.622904][ T9812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2270.622922][ T9812] RSP: 002b:00007f0608bba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2270.622944][ T9812] RAX: ffffffffffffffda RBX: 00007f0607fe5fa0 RCX: 00007f0607d8eec9 [ 2270.622960][ T9812] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000004 [ 2270.622973][ T9812] RBP: 00007f0608bba090 R08: 0000000000000000 R09: 0000000000000000 [ 2270.622987][ T9812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2270.622999][ T9812] R13: 00007f0607fe6038 R14: 00007f0607fe5fa0 R15: 00007ffc903b9068 [ 2270.623035][ T9812] [ 2271.163476][ T9801] wg1 speed is unknown, defaulting to 1000 [ 2271.223712][ T9807] vxcan1 speed is unknown, defaulting to 1000 [ 2271.606486][ T9824] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 2271.787456][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24570'. [ 2271.789901][ T9807] wg1 speed is unknown, defaulting to 1000 [ 2271.842917][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24570'. [ 2271.869740][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24570'. [ 2271.914490][ T9830] netlink: 26 bytes leftover after parsing attributes in process `syz.1.24570'. [ 2271.940192][ T9831] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1802723700) [ 2271.943914][ T9830] nbd: socks must be embedded in a SOCK_ITEM attr [ 2271.951466][ T9831] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 2272.414379][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24573'. [ 2272.483694][ T9840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24573'. [ 2272.635631][ T9835] vxcan1 speed is unknown, defaulting to 1000 [ 2272.760390][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24574'. [ 2272.799027][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24574'. [ 2272.821817][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24574'. [ 2272.844048][ T9847] netlink: 26 bytes leftover after parsing attributes in process `syz.3.24574'. [ 2272.873633][ T9847] nbd: socks must be embedded in a SOCK_ITEM attr [ 2272.978767][ T9854] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 2273.016933][ T9855] netlink: 'syz.2.24575': attribute type 16 has an invalid length. [ 2273.061576][ T9855] netlink: 'syz.2.24575': attribute type 17 has an invalid length. [ 2273.100410][ T9855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2273.118957][T25249] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2273.185463][ T9835] wg1 speed is unknown, defaulting to 1000 [ 2273.650236][ T9874] dvmrp8: entered allmulticast mode [ 2273.804071][ T9874] vxcan1 speed is unknown, defaulting to 1000 [ 2273.882060][T25249] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2274.420867][ T9874] wg1 speed is unknown, defaulting to 1000 [ 2274.450094][ T9884] siw: device registration error -23 [ 2274.485378][ T9879] vxcan1 speed is unknown, defaulting to 1000 [ 2274.776943][ T9879] wg1 speed is unknown, defaulting to 1000 [ 2274.796251][ T9903] vxcan1 speed is unknown, defaulting to 1000 [ 2275.004127][ T5887] Bluetooth: hci0: command tx timeout [ 2275.053034][ T9917] nbd: socks must be embedded in a SOCK_ITEM attr [ 2275.167313][ T9924] netlink: 'syz.4.24594': attribute type 1 has an invalid length. [ 2275.314041][ T9911] vxcan1 speed is unknown, defaulting to 1000 [ 2275.666325][ T9903] wg1 speed is unknown, defaulting to 1000 [ 2275.758627][ T9911] wg1 speed is unknown, defaulting to 1000 [ 2276.046430][ T9934] batadv0: entered promiscuous mode [ 2276.064404][ T9934] batadv0: entered allmulticast mode [ 2277.236348][ T9951] siw: device registration error -23 [ 2277.517657][ T9951] vxcan1 speed is unknown, defaulting to 1000 [ 2277.982164][ T9961] vxcan1 speed is unknown, defaulting to 1000 [ 2278.004342][ T9951] wg1 speed is unknown, defaulting to 1000 [ 2278.325283][ T9979] __nla_validate_parse: 10 callbacks suppressed [ 2278.325304][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.6.24608'. [ 2278.445034][ T9980] netlink: 20 bytes leftover after parsing attributes in process `syz.6.24608'. [ 2278.477918][ T9974] vxcan1 speed is unknown, defaulting to 1000 [ 2278.545782][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24609'. [ 2278.577694][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24609'. [ 2278.587273][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24609'. [ 2278.597686][ T9984] netlink: 26 bytes leftover after parsing attributes in process `syz.1.24609'. [ 2278.619865][ T9984] nbd: socks must be embedded in a SOCK_ITEM attr [ 2278.817253][ T9975] vxcan1 speed is unknown, defaulting to 1000 [ 2279.057896][ T9975] wg1 speed is unknown, defaulting to 1000 [ 2279.066892][ T9961] wg1 speed is unknown, defaulting to 1000 [ 2279.145683][ T9974] wg1 speed is unknown, defaulting to 1000 [ 2279.497503][ T9988] vxcan1 speed is unknown, defaulting to 1000 [ 2279.521539][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 2279.739646][ T9992] vxcan1 speed is unknown, defaulting to 1000 [ 2280.212840][ T9988] wg1 speed is unknown, defaulting to 1000 [ 2280.266784][ T9992] wg1 speed is unknown, defaulting to 1000 [ 2281.163941][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24619'. [ 2281.469345][T10033] FAULT_INJECTION: forcing a failure. [ 2281.469345][T10033] name failslab, interval 1, probability 0, space 0, times 0 [ 2281.501814][T10033] CPU: 1 UID: 0 PID: 10033 Comm: syz.2.24623 Not tainted syzkaller #0 PREEMPT(full) [ 2281.501867][T10033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2281.501893][T10033] Call Trace: [ 2281.501910][T10033] [ 2281.501929][T10033] dump_stack_lvl+0x189/0x250 [ 2281.501958][T10033] ? __pfx____ratelimit+0x10/0x10 [ 2281.501979][T10033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2281.502006][T10033] ? __pfx__printk+0x10/0x10 [ 2281.502038][T10033] ? __pfx___might_resched+0x10/0x10 [ 2281.502069][T10033] should_fail_ex+0x414/0x560 [ 2281.502101][T10033] should_failslab+0xa8/0x100 [ 2281.502130][T10033] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 2281.502156][T10033] ? __alloc_skb+0x112/0x2d0 [ 2281.502182][T10033] __alloc_skb+0x112/0x2d0 [ 2281.502210][T10033] netlink_sendmsg+0x5c6/0xb30 [ 2281.502245][T10033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2281.502271][T10033] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2281.502301][T10033] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2281.502319][T10033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2281.502343][T10033] __sock_sendmsg+0x21c/0x270 [ 2281.502376][T10033] ____sys_sendmsg+0x505/0x830 [ 2281.502408][T10033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2281.502444][T10033] ? import_iovec+0x74/0xa0 [ 2281.502473][T10033] ___sys_sendmsg+0x21f/0x2a0 [ 2281.502502][T10033] ? __pfx____sys_sendmsg+0x10/0x10 [ 2281.502576][T10033] ? __fget_files+0x2a/0x420 [ 2281.502603][T10033] ? __fget_files+0x3a0/0x420 [ 2281.502642][T10033] __x64_sys_sendmsg+0x19b/0x260 [ 2281.502669][T10033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2281.502706][T10033] ? __pfx_ksys_write+0x10/0x10 [ 2281.502727][T10033] ? rcu_is_watching+0x15/0xb0 [ 2281.502751][T10033] ? do_syscall_64+0xbe/0x3b0 [ 2281.502777][T10033] do_syscall_64+0xfa/0x3b0 [ 2281.502796][T10033] ? lockdep_hardirqs_on+0x9c/0x150 [ 2281.502815][T10033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.502832][T10033] ? clear_bhb_loop+0x60/0xb0 [ 2281.502854][T10033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.502871][T10033] RIP: 0033:0x7fece3b8eec9 [ 2281.502888][T10033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2281.502905][T10033] RSP: 002b:00007fece4a7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2281.502924][T10033] RAX: ffffffffffffffda RBX: 00007fece3de5fa0 RCX: 00007fece3b8eec9 [ 2281.502938][T10033] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000004 [ 2281.502951][T10033] RBP: 00007fece4a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 2281.502964][T10033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2281.502977][T10033] R13: 00007fece3de6038 R14: 00007fece3de5fa0 R15: 00007ffdcca9dbe8 [ 2281.503011][T10033] [ 2281.784820][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24624'. [ 2281.859863][T10036] netlink: 4148 bytes leftover after parsing attributes in process `syz.3.24624'. [ 2282.135163][T10046] vxcan1 speed is unknown, defaulting to 1000 [ 2282.137681][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24627'. [ 2282.229845][T10055] netlink: 'syz.6.24630': attribute type 1 has an invalid length. [ 2282.241660][T10056] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2282.393356][T10055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2282.477865][T10058] veth3: entered promiscuous mode [ 2282.493342][T10058] bond1: (slave veth3): Enslaving as an active interface with a down link [ 2282.551636][T10046] wg1 speed is unknown, defaulting to 1000 [ 2282.604678][T10066] vxcan1 speed is unknown, defaulting to 1000 [ 2282.868027][T10066] wg1 speed is unknown, defaulting to 1000 [ 2284.314051][T10108] siw: device registration error -23 [ 2284.389411][T10114] netlink: 3 bytes leftover after parsing attributes in process `syz.4.24644'. [ 2284.408571][T10108] vxcan1 speed is unknown, defaulting to 1000 [ 2284.439106][T10114] batadv0: entered promiscuous mode [ 2284.471827][T10114] batadv0: entered allmulticast mode [ 2284.668978][T10126] netlink: 'syz.1.24645': attribute type 10 has an invalid length. [ 2285.204201][T10108] wg1 speed is unknown, defaulting to 1000 [ 2285.279752][T10146] siw: device registration error -23 [ 2285.446162][T10146] vxcan1 speed is unknown, defaulting to 1000 [ 2285.517338][T10155] netlink: 3 bytes leftover after parsing attributes in process `syz.3.24652'. [ 2285.547977][T10155] batadv0: entered promiscuous mode [ 2285.561665][T10155] batadv0: entered allmulticast mode [ 2285.692988][T10146] wg1 speed is unknown, defaulting to 1000 [ 2285.797603][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24650'. [ 2286.371896][T10169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24657'. [ 2286.424701][T10172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24656'. [ 2286.537182][T10177] dvmrp8: entered allmulticast mode [ 2286.686553][T10182] syz_tun: entered allmulticast mode [ 2286.766953][T10177] netlink: 'syz.3.24658': attribute type 23 has an invalid length. [ 2286.793748][T10179] netlink: 'syz.6.24659': attribute type 23 has an invalid length. [ 2286.820592][T10191] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2286.823325][T10175] vxcan1 speed is unknown, defaulting to 1000 [ 2287.126874][T10175] wg1 speed is unknown, defaulting to 1000 [ 2287.196678][T10173] vxcan1 speed is unknown, defaulting to 1000 [ 2287.363454][T10170] dvmrp8: left allmulticast mode [ 2287.374291][T10198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24663'. [ 2287.394107][T10198] nbd: couldn't find a device at index 65546 [ 2287.427079][T10198] netlink: 220 bytes leftover after parsing attributes in process `syz.1.24663'. [ 2287.469337][T10171] syz_tun: left allmulticast mode [ 2287.797359][T10173] wg1 speed is unknown, defaulting to 1000 [ 2287.837658][T10201] vxcan1 speed is unknown, defaulting to 1000 [ 2288.080624][T10201] wg1 speed is unknown, defaulting to 1000 [ 2288.103042][T10204] siw: device registration error -23 [ 2288.499051][T10206] vxcan1 speed is unknown, defaulting to 1000 [ 2288.789240][T10232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24670'. [ 2288.823360][T10206] wg1 speed is unknown, defaulting to 1000 [ 2288.900357][T10210] vxcan1 speed is unknown, defaulting to 1000 [ 2288.968773][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24671'. [ 2289.073115][T10234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24671'. [ 2289.242438][T10210] wg1 speed is unknown, defaulting to 1000 [ 2289.766740][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24675'. [ 2289.960861][T10244] vxcan1 speed is unknown, defaulting to 1000 [ 2290.396132][T10244] wg1 speed is unknown, defaulting to 1000 [ 2290.545716][T10272] FAULT_INJECTION: forcing a failure. [ 2290.545716][T10272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2290.571856][T10272] CPU: 0 UID: 0 PID: 10272 Comm: syz.6.24680 Not tainted syzkaller #0 PREEMPT(full) [ 2290.571886][T10272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2290.571908][T10272] Call Trace: [ 2290.571916][T10272] [ 2290.571924][T10272] dump_stack_lvl+0x189/0x250 [ 2290.571954][T10272] ? __pfx____ratelimit+0x10/0x10 [ 2290.571976][T10272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2290.571999][T10272] ? __pfx__printk+0x10/0x10 [ 2290.572031][T10272] ? __might_fault+0xb0/0x130 [ 2290.572070][T10272] should_fail_ex+0x414/0x560 [ 2290.572103][T10272] _copy_from_user+0x2d/0xb0 [ 2290.572128][T10272] __sys_bpf+0x1ed/0x870 [ 2290.572156][T10272] ? __pfx___sys_bpf+0x10/0x10 [ 2290.572196][T10272] ? ksys_write+0x22a/0x250 [ 2290.572223][T10272] ? __pfx_ksys_write+0x10/0x10 [ 2290.572246][T10272] ? rcu_is_watching+0x15/0xb0 [ 2290.572274][T10272] __x64_sys_bpf+0x7c/0x90 [ 2290.572297][T10272] do_syscall_64+0xfa/0x3b0 [ 2290.572320][T10272] ? lockdep_hardirqs_on+0x9c/0x150 [ 2290.572341][T10272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.572361][T10272] ? clear_bhb_loop+0x60/0xb0 [ 2290.572386][T10272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2290.572406][T10272] RIP: 0033:0x7ff7b978eec9 [ 2290.572424][T10272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2290.572443][T10272] RSP: 002b:00007ff7b79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2290.572464][T10272] RAX: ffffffffffffffda RBX: 00007ff7b99e5fa0 RCX: 00007ff7b978eec9 [ 2290.572480][T10272] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 2290.572494][T10272] RBP: 00007ff7b79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2290.572507][T10272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2290.572520][T10272] R13: 00007ff7b99e6038 R14: 00007ff7b99e5fa0 R15: 00007ffc121db138 [ 2290.572554][T10272] [ 2290.601782][T10273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24681'. [ 2291.399482][T10292] IPVS: Scheduler module ip_vs_sip not found [ 2291.537596][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24691'. [ 2291.551913][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24691'. [ 2291.872029][T10319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24696'. [ 2291.882483][T10316] vxcan1 speed is unknown, defaulting to 1000 [ 2292.139834][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24699'. [ 2292.163810][T10328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24698'. [ 2292.196973][T10337] IPv6: Can't replace route, no match found [ 2292.242604][T10337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24699'. [ 2292.456890][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24703'. [ 2292.501272][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24703'. [ 2292.540892][T10348] nbd: socks must be embedded in a SOCK_ITEM attr [ 2292.628416][T10316] wg1 speed is unknown, defaulting to 1000 [ 2292.628442][T10326] vxcan1 speed is unknown, defaulting to 1000 [ 2293.223026][T10375] nbd: socks must be embedded in a SOCK_ITEM attr [ 2293.278117][T10326] wg1 speed is unknown, defaulting to 1000 [ 2293.286693][T10330] vxcan1 speed is unknown, defaulting to 1000 [ 2293.831856][T10391] netlink: 'syz.4.24716': attribute type 1 has an invalid length. [ 2293.970085][T10391] bond21: entered promiscuous mode [ 2293.976387][T10391] 8021q: adding VLAN 0 to HW filter on device bond21 [ 2293.988873][T10330] wg1 speed is unknown, defaulting to 1000 [ 2294.196056][T10407] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2294.860854][T10416] syzkaller1: entered promiscuous mode [ 2294.885345][T10416] syzkaller1: entered allmulticast mode [ 2295.478403][T10433] vxcan1 speed is unknown, defaulting to 1000 [ 2295.610528][T10448] __nla_validate_parse: 7 callbacks suppressed [ 2295.610551][T10448] netlink: 3 bytes leftover after parsing attributes in process `syz.4.24726'. [ 2295.686590][T10448] batadv0: entered promiscuous mode [ 2295.738020][T10448] batadv0: entered allmulticast mode [ 2295.779968][T10454] dvmrp0: entered allmulticast mode [ 2296.064606][T10450] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.162221][T10466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24731'. [ 2296.164411][T10433] wg1 speed is unknown, defaulting to 1000 [ 2296.273730][T10450] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.370355][T10472] siw: device registration error -23 [ 2296.400934][T10450] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.495158][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24735'. [ 2296.527499][T10450] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2297.000593][T10472] vxcan1 speed is unknown, defaulting to 1000 [ 2297.295265][ T49] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.342690][T10472] wg1 speed is unknown, defaulting to 1000 [ 2297.381672][ T13] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.432309][ T59] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.537400][ T49] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.689434][T10504] netlink: 36 bytes leftover after parsing attributes in process `syz.6.24743'. [ 2297.703519][T10504] netlink: 24 bytes leftover after parsing attributes in process `syz.6.24743'. [ 2298.315804][T10514] vxcan1 speed is unknown, defaulting to 1000 [ 2298.534682][T10514] wg1 speed is unknown, defaulting to 1000 [ 2298.683095][T10532] netlink: 36 bytes leftover after parsing attributes in process `syz.3.24754'. [ 2298.694178][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24754'. [ 2298.753505][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24756'. [ 2298.839099][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24756'. [ 2298.849353][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24756'. [ 2298.877263][T10541] nbd: socks must be embedded in a SOCK_ITEM attr [ 2298.996712][T10550] netlink: 'syz.3.24760': attribute type 1 has an invalid length. [ 2299.008991][T10551] siw: device registration error -23 [ 2299.034944][T10550] netlink: 'syz.3.24760': attribute type 1 has an invalid length. [ 2299.135201][T10551] vxcan1 speed is unknown, defaulting to 1000 [ 2299.320164][T10556] netlink: 'syz.1.24762': attribute type 1 has an invalid length. [ 2299.363035][T10551] wg1 speed is unknown, defaulting to 1000 [ 2299.394314][T10556] nbd: socks must be embedded in a SOCK_ITEM attr [ 2299.416557][T10556] block nbd7: shutting down sockets [ 2299.700471][T10571] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1802723700) [ 2299.761685][T10571] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 2299.859146][T10565] vxcan1 speed is unknown, defaulting to 1000 [ 2300.190545][T10565] wg1 speed is unknown, defaulting to 1000 [ 2300.610282][T10582] vxcan1 speed is unknown, defaulting to 1000 [ 2300.847939][T10582] wg1 speed is unknown, defaulting to 1000 [ 2304.220839][T10609] __nla_validate_parse: 5 callbacks suppressed [ 2304.220859][T10609] netlink: 3 bytes leftover after parsing attributes in process `syz.2.24773'. [ 2304.268089][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24774'. [ 2304.289180][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24774'. [ 2304.406247][T10609] batadv4: entered promiscuous mode [ 2304.412345][T10609] batadv4: entered allmulticast mode [ 2304.996504][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24775'. [ 2305.009240][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24775'. [ 2305.041978][T10616] netlink: 'syz.1.24775': attribute type 1 has an invalid length. [ 2305.059767][T10616] netlink: 10 bytes leftover after parsing attributes in process `syz.1.24775'. [ 2305.101688][T10616] nbd: socks must be embedded in a SOCK_ITEM attr [ 2305.108397][T10616] block nbd7: shutting down sockets [ 2305.136727][T10618] netlink: 3 bytes leftover after parsing attributes in process `syz.2.24777'. [ 2305.163839][T10618] batadv4: entered promiscuous mode [ 2305.174281][T10618] batadv4: entered allmulticast mode [ 2305.207736][T10622] tipc: Resetting bearer [ 2305.483596][T10641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24782'. [ 2305.493800][T10641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24782'. [ 2305.697525][T10649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24783'. [ 2305.737269][T10629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2305.869578][T10657] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2305.938951][T10658] nbd: socks must be embedded in a SOCK_ITEM attr [ 2306.000445][T10660] nbd: socks must be embedded in a SOCK_ITEM attr [ 2306.150952][T10671] vxcan1 speed is unknown, defaulting to 1000 [ 2306.769976][T10689] nbd: socks must be embedded in a SOCK_ITEM attr [ 2306.818497][T10671] wg1 speed is unknown, defaulting to 1000 [ 2306.818521][T10686] vxcan1 speed is unknown, defaulting to 1000 [ 2307.002566][T10615] Bluetooth: hci2: command 0x0405 tx timeout [ 2307.174046][T10686] wg1 speed is unknown, defaulting to 1000 [ 2307.335389][T10700] IPv6: Can't replace route, no match found [ 2307.672155][T10713] netlink: 'syz.3.24796': attribute type 1 has an invalid length. [ 2307.703137][T10713] nbd: socks must be embedded in a SOCK_ITEM attr [ 2307.709747][T10713] block nbd7: shutting down sockets [ 2308.326489][T10724] netlink: 'syz.2.24800': attribute type 12 has an invalid length. [ 2308.335440][T10724] netlink: 'syz.2.24800': attribute type 11 has an invalid length. [ 2308.513368][T10745] netem: incorrect ge model size [ 2308.528276][T10745] netem: change failed [ 2309.196590][T10759] nbd: socks must be embedded in a SOCK_ITEM attr [ 2309.356304][T10766] vxcan1 speed is unknown, defaulting to 1000 [ 2309.992388][T10779] FAULT_INJECTION: forcing a failure. [ 2309.992388][T10779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2310.050862][T10779] CPU: 0 UID: 0 PID: 10779 Comm: syz.2.24814 Not tainted syzkaller #0 PREEMPT(full) [ 2310.050893][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2310.050906][T10779] Call Trace: [ 2310.050915][T10779] [ 2310.050925][T10779] dump_stack_lvl+0x189/0x250 [ 2310.050954][T10779] ? __pfx____ratelimit+0x10/0x10 [ 2310.050977][T10779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2310.050999][T10779] ? __pfx__printk+0x10/0x10 [ 2310.051040][T10779] should_fail_ex+0x414/0x560 [ 2310.051075][T10779] _copy_to_user+0x31/0xb0 [ 2310.051102][T10779] simple_read_from_buffer+0xe1/0x170 [ 2310.051136][T10779] proc_fail_nth_read+0x1b3/0x220 [ 2310.051162][T10779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2310.051188][T10779] ? rw_verify_area+0x2a6/0x4d0 [ 2310.051211][T10779] ? __lock_acquire+0xab9/0xd20 [ 2310.051237][T10779] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2310.051260][T10779] vfs_read+0x1fd/0xa30 [ 2310.051284][T10779] ? fdget_pos+0x247/0x320 [ 2310.051318][T10779] ? __pfx___mutex_lock+0x10/0x10 [ 2310.051342][T10779] ? __pfx_vfs_read+0x10/0x10 [ 2310.051368][T10779] ? __fget_files+0x2a/0x420 [ 2310.051400][T10779] ? __fget_files+0x3a0/0x420 [ 2310.051427][T10779] ? __fget_files+0x2a/0x420 [ 2310.051466][T10779] ksys_read+0x145/0x250 [ 2310.051495][T10779] ? __fget_files+0x3a0/0x420 [ 2310.051525][T10779] ? __pfx_ksys_read+0x10/0x10 [ 2310.051557][T10779] ? do_syscall_64+0xbe/0x3b0 [ 2310.051585][T10779] do_syscall_64+0xfa/0x3b0 [ 2310.051607][T10779] ? lockdep_hardirqs_on+0x9c/0x150 [ 2310.051629][T10779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2310.051650][T10779] ? clear_bhb_loop+0x60/0xb0 [ 2310.051675][T10779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2310.051695][T10779] RIP: 0033:0x7fece3b8d8dc [ 2310.051714][T10779] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2310.051732][T10779] RSP: 002b:00007fece4a7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2310.051753][T10779] RAX: ffffffffffffffda RBX: 00007fece3de5fa0 RCX: 00007fece3b8d8dc [ 2310.051769][T10779] RDX: 000000000000000f RSI: 00007fece4a7f0a0 RDI: 0000000000000004 [ 2310.051782][T10779] RBP: 00007fece4a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 2310.051795][T10779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2310.051808][T10779] R13: 00007fece3de6038 R14: 00007fece3de5fa0 R15: 00007ffdcca9dbe8 [ 2310.051844][T10779] [ 2310.434902][T10787] __nla_validate_parse: 26 callbacks suppressed [ 2310.434924][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24817'. [ 2310.508257][T10787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24817'. [ 2310.572602][T10787] netlink: 'syz.2.24817': attribute type 1 has an invalid length. [ 2310.580467][T10787] netlink: 10 bytes leftover after parsing attributes in process `syz.2.24817'. [ 2310.591305][T10783] vxcan1 speed is unknown, defaulting to 1000 [ 2310.598595][T10766] wg1 speed is unknown, defaulting to 1000 [ 2310.673306][T10787] nbd: socks must be embedded in a SOCK_ITEM attr [ 2310.680980][T10787] block nbd7: shutting down sockets [ 2311.006403][T10783] wg1 speed is unknown, defaulting to 1000 [ 2311.014495][T10797] siw: device registration error -23 [ 2311.040332][T10800] vxcan1 speed is unknown, defaulting to 1000 [ 2311.109686][T10805] netlink: 3 bytes leftover after parsing attributes in process `syz.2.24821'. [ 2311.206920][T10805] batadv4: entered promiscuous mode [ 2311.221530][T10805] batadv4: entered allmulticast mode [ 2311.460693][T10800] wg1 speed is unknown, defaulting to 1000 [ 2311.625542][T10808] vxcan1 speed is unknown, defaulting to 1000 [ 2311.873327][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24824'. [ 2311.954387][T10821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24824'. [ 2312.008396][T10808] wg1 speed is unknown, defaulting to 1000 [ 2312.998680][T10818] Failed to register nexthop notifier [ 2313.036227][T10840] dvmrp8: entered allmulticast mode [ 2313.197381][T10840] vxcan1 speed is unknown, defaulting to 1000 [ 2313.223591][T10843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24830'. [ 2313.314330][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24832'. [ 2313.447599][T10848] bridge0: port 2(bridge_slave_1) entered disabled state [ 2313.648762][T10848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2313.664428][T10848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2313.766478][T10848] ip6tnl1: left promiscuous mode [ 2313.772676][T10848] ip6tnl1: left allmulticast mode [ 2313.786760][T10848] veth3: left promiscuous mode [ 2313.796622][T10840] wg1 speed is unknown, defaulting to 1000 [ 2313.844019][ T59] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.859516][ T59] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.952501][T10865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24836'. [ 2313.970615][ T59] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.981977][T10857] vxcan1 speed is unknown, defaulting to 1000 [ 2314.045857][ T59] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2314.056524][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24837'. [ 2314.066181][T10869] batadv_slave_1: entered promiscuous mode [ 2314.118711][T10873] batadv_slave_1 (unregistering): left promiscuous mode [ 2314.138882][T10869] netlink: 'syz.6.24837': attribute type 1 has an invalid length. [ 2314.147661][T10873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2314.156094][T10869] block nbd7: Unsupported socket: shutdown callout must be supported. [ 2314.422238][T10857] wg1 speed is unknown, defaulting to 1000 [ 2314.438528][T10885] siw: device registration error -23 [ 2314.553313][T10887] netlink: 'syz.2.24842': attribute type 3 has an invalid length. [ 2315.255699][T10896] nbd: socks must be embedded in a SOCK_ITEM attr [ 2315.590564][T10907] netlink: 'syz.4.24847': attribute type 23 has an invalid length. [ 2315.605523][T10909] vxcan1 speed is unknown, defaulting to 1000 [ 2315.617430][T10913] __nla_validate_parse: 11 callbacks suppressed [ 2315.617451][T10913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24849'. [ 2315.660746][T10913] IPv6: Can't replace route, no match found [ 2315.674139][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24849'. [ 2315.953166][T10909] wg1 speed is unknown, defaulting to 1000 [ 2316.107499][T10928] team0: Mode changed to "activebackup" [ 2316.403928][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24855'. [ 2316.413559][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24855'. [ 2316.478829][T10942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24855'. [ 2316.535739][T10949] netlink: 3 bytes leftover after parsing attributes in process `syz.6.24853'. [ 2316.587388][T10949] batadv1: entered promiscuous mode [ 2316.593302][T10949] batadv1: entered allmulticast mode [ 2316.629413][T10942] nbd: socks must be embedded in a SOCK_ITEM attr [ 2317.366676][T10977] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 2318.064253][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24871'. [ 2318.066626][T11002] netlink: 224 bytes leftover after parsing attributes in process `syz.6.24870'. [ 2318.081674][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24871'. [ 2318.108735][T11002] netlink: 16 bytes leftover after parsing attributes in process `syz.6.24870'. [ 2318.126621][T11002] tipc: Cannot configure node identity twice [ 2318.137446][T11002] tipc: Cannot configure node identity twice [ 2318.244845][T11003] nbd: socks must be embedded in a SOCK_ITEM attr [ 2318.559703][T11023] vxcan1 speed is unknown, defaulting to 1000 [ 2318.963008][T11023] wg1 speed is unknown, defaulting to 1000 [ 2319.050452][T11034] nbd: socks must be embedded in a SOCK_ITEM attr [ 2319.326028][T11045] IPv6: Can't replace route, no match found [ 2319.789069][T11047] tipc: Resetting bearer [ 2319.853458][T11061] FAULT_INJECTION: forcing a failure. [ 2319.853458][T11061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2319.867735][T11061] CPU: 1 UID: 0 PID: 11061 Comm: syz.4.24887 Not tainted syzkaller #0 PREEMPT(full) [ 2319.867760][T11061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2319.867773][T11061] Call Trace: [ 2319.867781][T11061] [ 2319.867790][T11061] dump_stack_lvl+0x189/0x250 [ 2319.867816][T11061] ? __pfx____ratelimit+0x10/0x10 [ 2319.867836][T11061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2319.867867][T11061] ? __pfx__printk+0x10/0x10 [ 2319.867904][T11061] should_fail_ex+0x414/0x560 [ 2319.867937][T11061] _copy_to_user+0x31/0xb0 [ 2319.867963][T11061] simple_read_from_buffer+0xe1/0x170 [ 2319.867994][T11061] proc_fail_nth_read+0x1b3/0x220 [ 2319.868019][T11061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2319.868043][T11061] ? rw_verify_area+0x2a6/0x4d0 [ 2319.868067][T11061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2319.868088][T11061] vfs_read+0x1fd/0xa30 [ 2319.868119][T11061] ? __pfx_vfs_read+0x10/0x10 [ 2319.868153][T11061] ? rawv6_setsockopt+0x329/0x5b0 [ 2319.868188][T11061] ksys_read+0x145/0x250 [ 2319.868215][T11061] ? __pfx_ksys_read+0x10/0x10 [ 2319.868245][T11061] ? do_syscall_64+0xbe/0x3b0 [ 2319.868273][T11061] do_syscall_64+0xfa/0x3b0 [ 2319.868295][T11061] ? lockdep_hardirqs_on+0x9c/0x150 [ 2319.868317][T11061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2319.868337][T11061] ? clear_bhb_loop+0x60/0xb0 [ 2319.868362][T11061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2319.868383][T11061] RIP: 0033:0x7febbd58d8dc [ 2319.868401][T11061] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2319.868420][T11061] RSP: 002b:00007febbe38e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2319.868442][T11061] RAX: ffffffffffffffda RBX: 00007febbd7e5fa0 RCX: 00007febbd58d8dc [ 2319.868458][T11061] RDX: 000000000000000f RSI: 00007febbe38e0a0 RDI: 0000000000000004 [ 2319.868471][T11061] RBP: 00007febbe38e090 R08: 0000000000000000 R09: 0000000000000000 [ 2319.868484][T11061] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 2319.868498][T11061] R13: 00007febbd7e6038 R14: 00007febbd7e5fa0 R15: 00007ffdd7f843b8 [ 2319.868532][T11061] [ 2320.372507][T11068] netlink: 'syz.4.24890': attribute type 1 has an invalid length. [ 2320.380614][T11070] vxcan1 speed is unknown, defaulting to 1000 [ 2320.380864][T11068] block nbd7: Unsupported socket: shutdown callout must be supported. [ 2320.716871][T11084] __nla_validate_parse: 13 callbacks suppressed [ 2320.716891][T11084] netlink: 3 bytes leftover after parsing attributes in process `syz.4.24892'. [ 2320.790102][T11084] batadv0: entered promiscuous mode [ 2320.796117][T11084] batadv0: entered allmulticast mode [ 2321.286209][T11065] vxcan1 speed is unknown, defaulting to 1000 [ 2321.628085][T11102] vlan2: entered promiscuous mode [ 2321.635011][T11102] bond0: entered promiscuous mode [ 2321.641591][T11065] wg1 speed is unknown, defaulting to 1000 [ 2321.652467][T11098] vxcan1 speed is unknown, defaulting to 1000 [ 2321.673393][T11107] netlink: 3 bytes leftover after parsing attributes in process `syz.4.24897'. [ 2321.685304][T11070] wg1 speed is unknown, defaulting to 1000 [ 2321.726434][T11107] batadv0: entered promiscuous mode [ 2321.745278][T11107] batadv0: entered allmulticast mode [ 2321.830467][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24898'. [ 2321.866677][T11110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24898'. [ 2321.961796][T11111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24898'. [ 2322.020399][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24898'. [ 2322.032124][T11098] wg1 speed is unknown, defaulting to 1000 [ 2322.654641][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24899'. [ 2322.780747][T11114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24899'. [ 2323.085346][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24902'. [ 2323.463789][T11138] vxcan1 speed is unknown, defaulting to 1000 [ 2323.848212][T11144] netlink: 11 bytes leftover after parsing attributes in process `syz.4.24907'. [ 2323.910173][T11138] wg1 speed is unknown, defaulting to 1000 [ 2324.047458][T11147] netlink: 'syz.3.24908': attribute type 1 has an invalid length. [ 2324.277018][T11163] netlink: 'syz.1.24914': attribute type 2 has an invalid length. [ 2324.296444][T11160] nbd: socks must be embedded in a SOCK_ITEM attr [ 2324.317621][T11163] netlink: 'syz.1.24914': attribute type 4 has an invalid length. [ 2324.328735][T11163] netlink: 'syz.1.24914': attribute type 8 has an invalid length. [ 2324.825678][T11178] nbd: socks must be embedded in a SOCK_ITEM attr [ 2324.859645][T11193] FAULT_INJECTION: forcing a failure. [ 2324.859645][T11193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2324.904795][T11193] CPU: 1 UID: 0 PID: 11193 Comm: syz.4.24921 Not tainted syzkaller #0 PREEMPT(full) [ 2324.904823][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2324.904835][T11193] Call Trace: [ 2324.904843][T11193] [ 2324.904852][T11193] dump_stack_lvl+0x189/0x250 [ 2324.904877][T11193] ? __pfx____ratelimit+0x10/0x10 [ 2324.904897][T11193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2324.904917][T11193] ? __pfx__printk+0x10/0x10 [ 2324.904942][T11193] ? __might_fault+0xb0/0x130 [ 2324.904975][T11193] should_fail_ex+0x414/0x560 [ 2324.905004][T11193] _copy_from_user+0x2d/0xb0 [ 2324.905026][T11193] kstrtouint_from_user+0xc4/0x170 [ 2324.905047][T11193] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2324.905087][T11193] proc_fail_nth_write+0x88/0x200 [ 2324.905106][T11193] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2324.905133][T11193] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2324.905152][T11193] vfs_write+0x27e/0xb30 [ 2324.905185][T11193] ? __pfx_vfs_write+0x10/0x10 [ 2324.905209][T11193] ? __fget_files+0x2a/0x420 [ 2324.905240][T11193] ? __fget_files+0x3a0/0x420 [ 2324.905265][T11193] ? __fget_files+0x2a/0x420 [ 2324.905299][T11193] ksys_write+0x145/0x250 [ 2324.905326][T11193] ? __pfx_ksys_write+0x10/0x10 [ 2324.905347][T11193] ? rcu_is_watching+0x15/0xb0 [ 2324.905370][T11193] ? do_syscall_64+0xbe/0x3b0 [ 2324.905399][T11193] do_syscall_64+0xfa/0x3b0 [ 2324.905418][T11193] ? lockdep_hardirqs_on+0x9c/0x150 [ 2324.905437][T11193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2324.905454][T11193] ? clear_bhb_loop+0x60/0xb0 [ 2324.905487][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2324.905507][T11193] RIP: 0033:0x7febbd58d97f [ 2324.905526][T11193] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2324.905542][T11193] RSP: 002b:00007febbe38e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2324.905564][T11193] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007febbd58d97f [ 2324.905579][T11193] RDX: 0000000000000001 RSI: 00007febbe38e0a0 RDI: 0000000000000004 [ 2324.905592][T11193] RBP: 00007febbe38e090 R08: 0000000000000000 R09: 0000000000000000 [ 2324.905604][T11193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2324.905616][T11193] R13: 00007febbd7e6038 R14: 00007febbd7e5fa0 R15: 00007ffdd7f843b8 [ 2324.905647][T11193] [ 2325.170712][T11192] vxcan1 speed is unknown, defaulting to 1000 [ 2325.336748][T11203] netlink: zone id is out of range [ 2325.386353][T11192] wg1 speed is unknown, defaulting to 1000 [ 2325.404865][T11203] netlink: get zone limit has 8 unknown bytes [ 2325.434699][T11198] vxcan1 speed is unknown, defaulting to 1000 [ 2326.072530][T11225] __nla_validate_parse: 16 callbacks suppressed [ 2326.072549][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24928'. [ 2326.225056][T11231] FAULT_INJECTION: forcing a failure. [ 2326.225056][T11231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2326.239644][T11231] CPU: 1 UID: 0 PID: 11231 Comm: syz.1.24930 Not tainted syzkaller #0 PREEMPT(full) [ 2326.239673][T11231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2326.239687][T11231] Call Trace: [ 2326.239695][T11231] [ 2326.239704][T11231] dump_stack_lvl+0x189/0x250 [ 2326.239732][T11231] ? __pfx____ratelimit+0x10/0x10 [ 2326.239756][T11231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2326.239779][T11231] ? __pfx__printk+0x10/0x10 [ 2326.239806][T11231] ? __might_fault+0xb0/0x130 [ 2326.239846][T11231] should_fail_ex+0x414/0x560 [ 2326.239881][T11231] _copy_from_user+0x2d/0xb0 [ 2326.239908][T11231] kstrtouint_from_user+0xc4/0x170 [ 2326.239937][T11231] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2326.239978][T11231] proc_fail_nth_write+0x88/0x200 [ 2326.240000][T11231] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2326.240029][T11231] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2326.240053][T11231] vfs_write+0x27e/0xb30 [ 2326.240090][T11231] ? __pfx_vfs_write+0x10/0x10 [ 2326.240117][T11231] ? __fget_files+0x2a/0x420 [ 2326.240151][T11231] ? __fget_files+0x3a0/0x420 [ 2326.240178][T11231] ? __fget_files+0x2a/0x420 [ 2326.240217][T11231] ksys_write+0x145/0x250 [ 2326.240246][T11231] ? __pfx_ksys_write+0x10/0x10 [ 2326.240268][T11231] ? rcu_is_watching+0x15/0xb0 [ 2326.240295][T11231] ? do_syscall_64+0xbe/0x3b0 [ 2326.240323][T11231] do_syscall_64+0xfa/0x3b0 [ 2326.240345][T11231] ? lockdep_hardirqs_on+0x9c/0x150 [ 2326.240366][T11231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2326.240386][T11231] ? clear_bhb_loop+0x60/0xb0 [ 2326.240410][T11231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2326.240430][T11231] RIP: 0033:0x7f5da138d97f [ 2326.240448][T11231] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2326.240467][T11231] RSP: 002b:00007f5da22ff030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2326.240489][T11231] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5da138d97f [ 2326.240504][T11231] RDX: 0000000000000001 RSI: 00007f5da22ff0a0 RDI: 0000000000000004 [ 2326.240517][T11231] RBP: 00007f5da22ff090 R08: 0000000000000000 R09: 0000000000000000 [ 2326.240530][T11231] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2326.240542][T11231] R13: 00007f5da15e6038 R14: 00007f5da15e5fa0 R15: 00007ffe9dd4d218 [ 2326.240578][T11231] [ 2326.513216][T11210] vxcan1 speed is unknown, defaulting to 1000 [ 2326.816697][T11198] wg1 speed is unknown, defaulting to 1000 [ 2326.867764][T11210] wg1 speed is unknown, defaulting to 1000 [ 2327.057923][T11250] netlink: 3 bytes leftover after parsing attributes in process `syz.6.24935'. [ 2327.130734][T11250] batadv1: entered promiscuous mode [ 2327.139453][T11250] batadv1: entered allmulticast mode [ 2327.280844][T11255] netlink: 'syz.4.24937': attribute type 23 has an invalid length. [ 2327.310915][T11252] vxcan1 speed is unknown, defaulting to 1000 [ 2327.982127][T11252] wg1 speed is unknown, defaulting to 1000 [ 2328.159008][T11271] netlink: 24 bytes leftover after parsing attributes in process `syz.6.24942'. [ 2328.322923][T11274] netlink: 60 bytes leftover after parsing attributes in process `syz.4.24943'. [ 2328.522665][T11278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24945'. [ 2328.547574][T11276] vxcan1 speed is unknown, defaulting to 1000 [ 2328.855092][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24949'. [ 2328.864736][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24949'. [ 2328.901659][T11297] netlink: 'syz.1.24949': attribute type 1 has an invalid length. [ 2328.934282][T11297] netlink: 10 bytes leftover after parsing attributes in process `syz.1.24949'. [ 2329.225356][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24952'. [ 2329.727240][T11276] wg1 speed is unknown, defaulting to 1000 [ 2329.732078][T11285] vxcan1 speed is unknown, defaulting to 1000 [ 2329.938774][T11330] netlink: 'syz.4.24953': attribute type 23 has an invalid length. [ 2330.360786][T11285] wg1 speed is unknown, defaulting to 1000 [ 2330.365896][T11289] vxcan1 speed is unknown, defaulting to 1000 [ 2330.708052][T11348] tipc: Enabling of bearer rejected, already enabled [ 2330.894515][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.6.24958'. [ 2330.985999][T11339] vxcan1 speed is unknown, defaulting to 1000 [ 2331.002955][T11289] wg1 speed is unknown, defaulting to 1000 [ 2331.455666][T11340] vxcan1 speed is unknown, defaulting to 1000 [ 2331.495151][T11365] __nla_validate_parse: 3 callbacks suppressed [ 2331.495169][T11365] netlink: 56 bytes leftover after parsing attributes in process `syz.1.24964'. [ 2331.688826][T11339] wg1 speed is unknown, defaulting to 1000 [ 2331.740819][T11360] vxcan1 speed is unknown, defaulting to 1000 [ 2331.866375][T11372] netlink: 'syz.1.24966': attribute type 23 has an invalid length. [ 2332.059600][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24967'. [ 2332.537448][T11340] wg1 speed is unknown, defaulting to 1000 [ 2332.552740][T11360] wg1 speed is unknown, defaulting to 1000 [ 2332.724918][T11380] netlink: 'syz.1.24968': attribute type 1 has an invalid length. [ 2332.909676][T11381] gretap5: entered allmulticast mode [ 2332.930129][T11381] bond26: (slave gretap5): making interface the new active one [ 2332.949046][T11381] bond26: (slave gretap5): Enslaving as an active interface with an up link [ 2333.262679][T11387] FAULT_INJECTION: forcing a failure. [ 2333.262679][T11387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2333.282435][T11387] CPU: 0 UID: 0 PID: 11387 Comm: syz.1.24970 Not tainted syzkaller #0 PREEMPT(full) [ 2333.282465][T11387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2333.282478][T11387] Call Trace: [ 2333.282487][T11387] [ 2333.282497][T11387] dump_stack_lvl+0x189/0x250 [ 2333.282525][T11387] ? __pfx____ratelimit+0x10/0x10 [ 2333.282561][T11387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2333.282584][T11387] ? __pfx__printk+0x10/0x10 [ 2333.282611][T11387] ? __might_fault+0xb0/0x130 [ 2333.282650][T11387] should_fail_ex+0x414/0x560 [ 2333.282684][T11387] _copy_from_user+0x2d/0xb0 [ 2333.282710][T11387] ___sys_sendmsg+0x158/0x2a0 [ 2333.282739][T11387] ? __pfx____sys_sendmsg+0x10/0x10 [ 2333.282815][T11387] ? __might_fault+0xb0/0x130 [ 2333.282845][T11387] __sys_sendmmsg+0x227/0x430 [ 2333.282885][T11387] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2333.282908][T11387] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 2333.282962][T11387] ? ksys_write+0x22a/0x250 [ 2333.282990][T11387] ? __pfx_ksys_write+0x10/0x10 [ 2333.283023][T11387] __x64_sys_sendmmsg+0xa0/0xc0 [ 2333.283052][T11387] do_syscall_64+0xfa/0x3b0 [ 2333.283074][T11387] ? lockdep_hardirqs_on+0x9c/0x150 [ 2333.283095][T11387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2333.283115][T11387] ? clear_bhb_loop+0x60/0xb0 [ 2333.283139][T11387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2333.283159][T11387] RIP: 0033:0x7f5da138eec9 [ 2333.283178][T11387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2333.283197][T11387] RSP: 002b:00007f5da22ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2333.283218][T11387] RAX: ffffffffffffffda RBX: 00007f5da15e5fa0 RCX: 00007f5da138eec9 [ 2333.283234][T11387] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 2333.283248][T11387] RBP: 00007f5da22ff090 R08: 0000000000000000 R09: 0000000000000000 [ 2333.283261][T11387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2333.283274][T11387] R13: 00007f5da15e6038 R14: 00007f5da15e5fa0 R15: 00007ffe9dd4d218 [ 2333.283314][T11387] [ 2333.990749][T11390] vxcan1 speed is unknown, defaulting to 1000 [ 2334.226478][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24974'. [ 2334.550828][T11411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24974'. [ 2334.575485][T11416] netlink: 'syz.4.24975': attribute type 4 has an invalid length. [ 2334.635619][T11417] netlink: 'syz.4.24975': attribute type 4 has an invalid length. [ 2334.878817][T11390] wg1 speed is unknown, defaulting to 1000 [ 2335.086731][T11423] bridge0: entered promiscuous mode [ 2335.119646][T11423] netlink: 'syz.1.24976': attribute type 62 has an invalid length. [ 2335.138142][T11427] netlink: 'syz.4.24977': attribute type 23 has an invalid length. [ 2335.145354][T11422] bridge0: left promiscuous mode [ 2335.521810][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24981'. [ 2335.541336][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24981'. [ 2335.561010][T11435] netlink: 'syz.2.24981': attribute type 1 has an invalid length. [ 2335.595061][T11435] netlink: 10 bytes leftover after parsing attributes in process `syz.2.24981'. [ 2335.769046][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24985'. [ 2335.919080][T11452] vxcan1 speed is unknown, defaulting to 1000 [ 2336.034100][T11456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24985'. [ 2336.428542][T11452] wg1 speed is unknown, defaulting to 1000 [ 2336.490806][T11445] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 2336.924693][T11464] vxcan1 speed is unknown, defaulting to 1000 [ 2337.124012][T11479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.24992'. [ 2337.133590][T11479] netlink: 'syz.4.24992': attribute type 1 has an invalid length. [ 2337.151717][T11479] netlink: 'syz.4.24992': attribute type 2 has an invalid length. [ 2337.174883][T11479] netlink: 'syz.4.24992': attribute type 3 has an invalid length. [ 2337.202729][T11464] wg1 speed is unknown, defaulting to 1000 [ 2337.248759][T11472] vxcan1 speed is unknown, defaulting to 1000 [ 2337.291287][T11479] netlink: 3 bytes leftover after parsing attributes in process `syz.4.24992'. [ 2337.314757][T11479] batadv0: entered promiscuous mode [ 2337.331781][T11479] batadv0: entered allmulticast mode [ 2337.786353][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.24994'. [ 2337.813698][T11487] IPv6: Can't replace route, no match found [ 2337.829534][T11472] wg1 speed is unknown, defaulting to 1000 [ 2337.839262][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz.6.24994'. [ 2338.167718][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24997'. [ 2338.285958][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24999'. [ 2338.322408][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24999'. [ 2338.382968][T11500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24999'. [ 2338.413753][T11493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24997'. [ 2338.518734][T11500] nbd: socks must be embedded in a SOCK_ITEM attr [ 2339.156476][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25005'. [ 2339.213243][T11535] IPv6: Can't replace route, no match found [ 2339.878710][T11550] vxcan1 speed is unknown, defaulting to 1000 [ 2339.884744][T11555] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1802723700) [ 2339.948465][T11555] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 2340.153748][T11559] delete_channel: no stack [ 2340.303019][T11550] wg1 speed is unknown, defaulting to 1000 [ 2340.622654][T11575] nbd0: detected capacity change from 127 to 63 [ 2340.634832][T11580] block nbd4: NBD_DISCONNECT [ 2340.646836][T11580] block nbd4: Send disconnect failed -22 [ 2340.662039][T11580] block nbd4: Disconnected due to user request. [ 2340.674405][T11580] block nbd4: shutting down sockets [ 2340.840868][T11587] vxcan1 speed is unknown, defaulting to 1000 [ 2341.332807][T11587] wg1 speed is unknown, defaulting to 1000 [ 2341.842135][T11615] vxcan1 speed is unknown, defaulting to 1000 [ 2342.052256][T11615] wg1 speed is unknown, defaulting to 1000 [ 2352.041404][T10615] Bluetooth: hci2: command 0x0405 tx timeout [ 2355.943757][T10615] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2355.953984][T10615] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2355.963816][T10615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2355.972898][T11631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2355.974875][T10615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2355.984605][T11631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2355.989353][T10615] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2355.996575][T11631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2356.015572][T11631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2356.025302][T11631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2356.046321][T11627] vxcan1 speed is unknown, defaulting to 1000 [ 2356.247134][T11629] vxcan1 speed is unknown, defaulting to 1000 [ 2356.254307][T11627] wg1 speed is unknown, defaulting to 1000 [ 2356.455416][T11631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2356.465753][T11631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2356.476070][T11631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2356.484468][T11631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2356.492838][T11631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2356.596449][T11635] vxcan1 speed is unknown, defaulting to 1000 [ 2356.607330][T11629] wg1 speed is unknown, defaulting to 1000 [ 2356.622619][T11627] chnl_net:caif_netlink_parms(): no params data found [ 2356.984337][T11631] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2356.995168][T11631] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2357.004528][T11627] bridge0: port 1(bridge_slave_0) entered blocking state [ 2357.013531][T11631] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2357.022837][T11627] bridge0: port 1(bridge_slave_0) entered disabled state [ 2357.025281][T11631] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2357.030162][T11627] bridge_slave_0: entered allmulticast mode [ 2357.040014][T11631] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2357.045838][T11627] bridge_slave_0: entered promiscuous mode [ 2357.060515][T11627] bridge0: port 2(bridge_slave_1) entered blocking state [ 2357.068877][T11627] bridge0: port 2(bridge_slave_1) entered disabled state [ 2357.077215][T11627] bridge_slave_1: entered allmulticast mode [ 2357.085514][T11627] bridge_slave_1: entered promiscuous mode [ 2357.105332][T11635] wg1 speed is unknown, defaulting to 1000 [ 2357.230184][T11627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2357.279946][T11644] vxcan1 speed is unknown, defaulting to 1000 [ 2357.290885][T11627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2357.392585][T11629] chnl_net:caif_netlink_parms(): no params data found [ 2357.413151][T11627] team0: Port device team_slave_0 added [ 2357.453650][T11627] team0: Port device team_slave_1 added [ 2357.583363][T11627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2357.590356][T11627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2357.622312][T11627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2357.639285][ T8651] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2357.656245][T10615] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2357.666668][T10615] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2357.667717][T11644] wg1 speed is unknown, defaulting to 1000 [ 2357.676817][T10615] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2357.689596][T10615] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2357.691756][T11627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2357.704502][T11627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2357.732418][T11627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2357.872589][T11629] bridge0: port 1(bridge_slave_0) entered blocking state [ 2357.879775][T11629] bridge0: port 1(bridge_slave_0) entered disabled state [ 2357.887966][T11629] bridge_slave_0: entered allmulticast mode [ 2357.895585][T11629] bridge_slave_0: entered promiscuous mode [ 2357.942033][T11629] bridge0: port 2(bridge_slave_1) entered blocking state [ 2357.949229][T11629] bridge0: port 2(bridge_slave_1) entered disabled state [ 2357.957025][T11629] bridge_slave_1: entered allmulticast mode [ 2357.974785][T11629] bridge_slave_1: entered promiscuous mode [ 2358.001446][T11627] hsr_slave_0: entered promiscuous mode [ 2358.007972][T11627] hsr_slave_1: entered promiscuous mode [ 2358.014678][T11627] debugfs: 'hsr0' already exists in 'hsr' [ 2358.020406][T11627] Cannot create hsr debugfs directory [ 2358.041335][T11631] Bluetooth: hci6: command tx timeout [ 2358.047072][T11651] vxcan1 speed is unknown, defaulting to 1000 [ 2358.069022][T11635] chnl_net:caif_netlink_parms(): no params data found [ 2358.102144][T11629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2358.117102][T11629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2358.122250][T11631] Bluetooth: hci7: command tx timeout [ 2358.280826][T11629] team0: Port device team_slave_0 added [ 2358.290902][T11629] team0: Port device team_slave_1 added [ 2358.341778][T11651] wg1 speed is unknown, defaulting to 1000 [ 2358.402568][T11629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2358.409536][T11629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2358.436017][T11629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2358.496312][T11629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2358.503590][T11629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2358.521730][T11631] Bluetooth: hci8: command tx timeout [ 2358.530553][T11629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2358.580485][T11635] bridge0: port 1(bridge_slave_0) entered blocking state [ 2358.588367][T11635] bridge0: port 1(bridge_slave_0) entered disabled state [ 2358.595962][T11635] bridge_slave_0: entered allmulticast mode [ 2358.603600][T11635] bridge_slave_0: entered promiscuous mode [ 2358.634527][T11644] chnl_net:caif_netlink_parms(): no params data found [ 2358.645603][T11635] bridge0: port 2(bridge_slave_1) entered blocking state [ 2358.653223][T11635] bridge0: port 2(bridge_slave_1) entered disabled state [ 2358.660663][T11635] bridge_slave_1: entered allmulticast mode [ 2358.668749][T11635] bridge_slave_1: entered promiscuous mode [ 2358.793381][T11635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2358.837240][T11635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2358.868112][T11629] hsr_slave_0: entered promiscuous mode [ 2358.875459][T11629] hsr_slave_1: entered promiscuous mode [ 2358.882468][T11629] debugfs: 'hsr0' already exists in 'hsr' [ 2358.888193][T11629] Cannot create hsr debugfs directory [ 2358.928762][T11635] team0: Port device team_slave_0 added [ 2358.938656][T11635] team0: Port device team_slave_1 added [ 2359.043110][T11635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2359.050090][T11635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2359.076859][T11635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2359.082378][T11631] Bluetooth: hci9: command tx timeout [ 2359.090672][T11635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2359.101939][T11635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2359.128754][T11635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2359.153694][T11644] bridge0: port 1(bridge_slave_0) entered blocking state [ 2359.160893][T11644] bridge0: port 1(bridge_slave_0) entered disabled state [ 2359.169211][T11644] bridge_slave_0: entered allmulticast mode [ 2359.176669][T11644] bridge_slave_0: entered promiscuous mode [ 2359.234505][T11644] bridge0: port 2(bridge_slave_1) entered blocking state [ 2359.242543][T11644] bridge0: port 2(bridge_slave_1) entered disabled state [ 2359.249858][T11644] bridge_slave_1: entered allmulticast mode [ 2359.257387][T11644] bridge_slave_1: entered promiscuous mode [ 2359.395544][T11644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2359.413936][T11635] hsr_slave_0: entered promiscuous mode [ 2359.420569][T11635] hsr_slave_1: entered promiscuous mode [ 2359.427207][T11635] debugfs: 'hsr0' already exists in 'hsr' [ 2359.433676][T11635] Cannot create hsr debugfs directory [ 2359.454854][T11644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2359.550599][T11644] team0: Port device team_slave_0 added [ 2359.558247][T11651] chnl_net:caif_netlink_parms(): no params data found [ 2359.590874][T11644] team0: Port device team_slave_1 added [ 2359.691938][T11644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2359.698935][T11644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2359.726475][T11631] Bluetooth: hci10: command tx timeout [ 2359.726819][T11644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2359.777143][T11644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2359.784880][T11644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2359.812677][T11644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2359.922080][T11651] bridge0: port 1(bridge_slave_0) entered blocking state [ 2359.929254][T11651] bridge0: port 1(bridge_slave_0) entered disabled state [ 2359.936954][T11651] bridge_slave_0: entered allmulticast mode [ 2359.944239][T11651] bridge_slave_0: entered promiscuous mode [ 2359.978411][T11651] bridge0: port 2(bridge_slave_1) entered blocking state [ 2359.986259][T11651] bridge0: port 2(bridge_slave_1) entered disabled state [ 2359.994005][T11651] bridge_slave_1: entered allmulticast mode [ 2360.001583][T11651] bridge_slave_1: entered promiscuous mode [ 2360.067972][T11644] hsr_slave_0: entered promiscuous mode [ 2360.074925][T11644] hsr_slave_1: entered promiscuous mode [ 2360.081217][T11644] debugfs: 'hsr0' already exists in 'hsr' [ 2360.086958][T11644] Cannot create hsr debugfs directory [ 2360.104705][T11651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2360.122295][T11631] Bluetooth: hci6: command tx timeout [ 2360.138506][T11651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2360.202528][T11631] Bluetooth: hci7: command tx timeout [ 2360.234628][T11651] team0: Port device team_slave_0 added [ 2360.263055][T11651] team0: Port device team_slave_1 added [ 2360.314996][T11651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2360.322907][T11651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2360.349446][T11651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2360.368302][T11651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2360.375749][T11651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2360.402456][T11651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2360.495168][T11651] hsr_slave_0: entered promiscuous mode [ 2360.502522][T11651] hsr_slave_1: entered promiscuous mode [ 2360.508695][T11651] debugfs: 'hsr0' already exists in 'hsr' [ 2360.514890][T11651] Cannot create hsr debugfs directory [ 2360.602204][T11631] Bluetooth: hci8: command tx timeout [ 2360.773099][T11651] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2360.783578][T11651] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2360.869478][T11651] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2360.880322][T11651] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2360.938132][T11651] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2360.948383][T11651] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2361.007241][T11651] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 2361.017622][T11651] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2361.161798][T11631] Bluetooth: hci9: command tx timeout [ 2361.803480][T11631] Bluetooth: hci10: command tx timeout [ 2362.201696][T11631] Bluetooth: hci6: command tx timeout [ 2362.281696][T11631] Bluetooth: hci7: command tx timeout [ 2362.681838][T11631] Bluetooth: hci8: command tx timeout [ 2363.241967][T11631] Bluetooth: hci9: command tx timeout [ 2363.881484][T11631] Bluetooth: hci10: command tx timeout [ 2364.282181][T11631] Bluetooth: hci6: command tx timeout [ 2364.361699][T11631] Bluetooth: hci7: command tx timeout [ 2364.761993][T11631] Bluetooth: hci8: command tx timeout [ 2365.321615][T11631] Bluetooth: hci9: command tx timeout [ 2365.961946][T11631] Bluetooth: hci10: command tx timeout [ 2416.000197][T10615] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2416.012533][T10615] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2416.021657][T10615] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2416.030414][ T5887] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2416.030701][T10615] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2416.042095][ T5887] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2416.049329][T10615] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2416.063816][T11631] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2416.081662][T10615] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2416.093090][T10615] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2416.107428][T11674] vxcan1 speed is unknown, defaulting to 1000 [ 2416.290697][T11676] vxcan1 speed is unknown, defaulting to 1000 [ 2416.299149][T11674] wg1 speed is unknown, defaulting to 1000 [ 2416.516487][ T8651] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2416.535461][ T8651] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2416.544846][ T8651] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2416.553362][ T8651] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2416.561771][ T8651] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2416.641806][T11676] wg1 speed is unknown, defaulting to 1000 [ 2416.733371][T11680] vxcan1 speed is unknown, defaulting to 1000 [ 2416.859748][T11674] chnl_net:caif_netlink_parms(): no params data found [ 2417.099556][ T8651] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2417.114341][ T8651] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2417.124674][ T8651] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2417.133293][ T8651] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2417.144004][ T8651] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2417.299628][T11680] wg1 speed is unknown, defaulting to 1000 [ 2417.416918][T11674] bridge0: port 1(bridge_slave_0) entered blocking state [ 2417.427733][T11674] bridge0: port 1(bridge_slave_0) entered disabled state [ 2417.435776][T11674] bridge_slave_0: entered allmulticast mode [ 2417.444465][T11674] bridge_slave_0: entered promiscuous mode [ 2417.466702][T11686] vxcan1 speed is unknown, defaulting to 1000 [ 2417.473667][T11676] chnl_net:caif_netlink_parms(): no params data found [ 2417.498143][T11674] bridge0: port 2(bridge_slave_1) entered blocking state [ 2417.522032][T11674] bridge0: port 2(bridge_slave_1) entered disabled state [ 2417.529508][T11674] bridge_slave_1: entered allmulticast mode [ 2417.553918][T11674] bridge_slave_1: entered promiscuous mode [ 2417.626310][T10615] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 2417.637317][T10615] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 2417.646713][T10615] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 2417.656311][T10615] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 2417.664710][T10615] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 2417.744730][T11674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2417.758910][T11674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2417.803052][T11686] wg1 speed is unknown, defaulting to 1000 [ 2417.855253][T11674] team0: Port device team_slave_0 added [ 2417.890234][T11694] vxcan1 speed is unknown, defaulting to 1000 [ 2417.918992][T11674] team0: Port device team_slave_1 added [ 2418.102582][T11674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2418.110230][T11674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2418.121641][ T8651] Bluetooth: hci12: command tx timeout [ 2418.138490][T10615] Bluetooth: hci11: command tx timeout [ 2418.151936][T11674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2418.170083][T11694] wg1 speed is unknown, defaulting to 1000 [ 2418.171914][T11674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2418.184068][T11674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2418.212214][T11674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2418.223754][T11676] bridge0: port 1(bridge_slave_0) entered blocking state [ 2418.233536][T11676] bridge0: port 1(bridge_slave_0) entered disabled state [ 2418.240867][T11676] bridge_slave_0: entered allmulticast mode [ 2418.248514][T11676] bridge_slave_0: entered promiscuous mode [ 2418.281446][T11676] bridge0: port 2(bridge_slave_1) entered blocking state [ 2418.288750][T11676] bridge0: port 2(bridge_slave_1) entered disabled state [ 2418.296766][T11676] bridge_slave_1: entered allmulticast mode [ 2418.304217][T11676] bridge_slave_1: entered promiscuous mode [ 2418.406695][T11676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2418.420517][T11676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2418.488199][T11674] hsr_slave_0: entered promiscuous mode [ 2418.495351][T11674] hsr_slave_1: entered promiscuous mode [ 2418.501786][T11674] debugfs: 'hsr0' already exists in 'hsr' [ 2418.507514][T11674] Cannot create hsr debugfs directory [ 2418.574892][T11676] team0: Port device team_slave_0 added [ 2418.587057][T11676] team0: Port device team_slave_1 added [ 2418.611295][T10615] Bluetooth: hci13: command tx timeout [ 2418.723474][T11676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2418.730447][T11676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2418.758345][T11676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2418.799710][T11676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2418.806955][T11676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2418.833412][T11676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2418.845933][T11680] chnl_net:caif_netlink_parms(): no params data found [ 2419.008390][T11676] hsr_slave_0: entered promiscuous mode [ 2419.015445][T11676] hsr_slave_1: entered promiscuous mode [ 2419.022456][T11676] debugfs: 'hsr0' already exists in 'hsr' [ 2419.028189][T11676] Cannot create hsr debugfs directory [ 2419.039260][T11686] chnl_net:caif_netlink_parms(): no params data found [ 2419.245302][T10615] Bluetooth: hci14: command tx timeout [ 2419.350861][T11694] chnl_net:caif_netlink_parms(): no params data found [ 2419.479625][T11680] bridge0: port 1(bridge_slave_0) entered blocking state [ 2419.489933][T11680] bridge0: port 1(bridge_slave_0) entered disabled state [ 2419.499021][T11680] bridge_slave_0: entered allmulticast mode [ 2419.507794][T11680] bridge_slave_0: entered promiscuous mode [ 2419.527331][T11680] bridge0: port 2(bridge_slave_1) entered blocking state [ 2419.536335][T11680] bridge0: port 2(bridge_slave_1) entered disabled state [ 2419.544373][T11680] bridge_slave_1: entered allmulticast mode [ 2419.553828][T11680] bridge_slave_1: entered promiscuous mode [ 2419.722674][T10615] Bluetooth: hci15: command tx timeout [ 2419.797701][T11680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2419.825345][T11680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2419.886460][T11686] bridge0: port 1(bridge_slave_0) entered blocking state [ 2419.902278][T11686] bridge0: port 1(bridge_slave_0) entered disabled state [ 2419.909755][T11686] bridge_slave_0: entered allmulticast mode [ 2419.919042][T11686] bridge_slave_0: entered promiscuous mode [ 2419.929035][T11686] bridge0: port 2(bridge_slave_1) entered blocking state [ 2419.937767][T11686] bridge0: port 2(bridge_slave_1) entered disabled state [ 2419.946456][T11686] bridge_slave_1: entered allmulticast mode [ 2419.957258][T11686] bridge_slave_1: entered promiscuous mode [ 2420.095602][T11680] team0: Port device team_slave_0 added [ 2420.113060][T11694] bridge0: port 1(bridge_slave_0) entered blocking state [ 2420.120230][T11694] bridge0: port 1(bridge_slave_0) entered disabled state [ 2420.128835][T11694] bridge_slave_0: entered allmulticast mode [ 2420.137526][T11694] bridge_slave_0: entered promiscuous mode [ 2420.147571][T11694] bridge0: port 2(bridge_slave_1) entered blocking state [ 2420.155689][T11694] bridge0: port 2(bridge_slave_1) entered disabled state [ 2420.163156][T11694] bridge_slave_1: entered allmulticast mode [ 2420.170383][T11694] bridge_slave_1: entered promiscuous mode [ 2420.187127][T11686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2420.199188][T11680] team0: Port device team_slave_1 added [ 2420.205985][T10615] Bluetooth: hci12: command tx timeout [ 2420.213145][ T8651] Bluetooth: hci11: command tx timeout [ 2420.260318][T11686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2420.297417][T11680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2420.305027][T11680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2420.331973][T11680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2420.359138][T11694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2420.386116][T11680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2420.393271][T11680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2420.419697][T11680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2420.450155][T11694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2420.478441][T11686] team0: Port device team_slave_0 added [ 2420.518816][T11686] team0: Port device team_slave_1 added [ 2420.554378][T11694] team0: Port device team_slave_0 added [ 2420.574122][T11694] team0: Port device team_slave_1 added [ 2420.659977][T11686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2420.667496][T11686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2420.694471][T11686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2420.694640][T10615] Bluetooth: hci13: command tx timeout [ 2420.717610][T11694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2420.725377][T11694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2420.752542][T11694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2420.766587][T11694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2420.773861][T11694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2420.800047][T11694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2420.817028][T11680] hsr_slave_0: entered promiscuous mode [ 2420.824197][T11680] hsr_slave_1: entered promiscuous mode [ 2420.830653][T11680] debugfs: 'hsr0' already exists in 'hsr' [ 2420.837428][T11680] Cannot create hsr debugfs directory [ 2420.846249][T11686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2420.853501][T11686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2420.879835][T11686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2421.013684][T11694] hsr_slave_0: entered promiscuous mode [ 2421.020652][T11694] hsr_slave_1: entered promiscuous mode [ 2421.027726][T11694] debugfs: 'hsr0' already exists in 'hsr' [ 2421.034675][T11694] Cannot create hsr debugfs directory [ 2421.060043][T11686] hsr_slave_0: entered promiscuous mode [ 2421.067011][T11686] hsr_slave_1: entered promiscuous mode [ 2421.073901][T11686] debugfs: 'hsr0' already exists in 'hsr' [ 2421.079657][T11686] Cannot create hsr debugfs directory [ 2421.321980][T10615] Bluetooth: hci14: command tx timeout [ 2421.802054][T10615] Bluetooth: hci15: command tx timeout [ 2422.282281][ T8651] Bluetooth: hci11: command tx timeout [ 2422.285544][T10615] Bluetooth: hci12: command tx timeout [ 2422.761900][T10615] Bluetooth: hci13: command tx timeout [ 2423.401629][T10615] Bluetooth: hci14: command tx timeout [ 2423.881475][T10615] Bluetooth: hci15: command tx timeout [ 2424.361589][ T8651] Bluetooth: hci11: command tx timeout [ 2424.362782][T10615] Bluetooth: hci12: command tx timeout [ 2424.841988][T10615] Bluetooth: hci13: command tx timeout [ 2425.481712][T10615] Bluetooth: hci14: command tx timeout [ 2425.961355][T10615] Bluetooth: hci15: command tx timeout [ 2476.116327][ T8651] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 2476.116349][ T5887] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 2476.118300][ T5887] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 2476.130501][ T8651] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 2476.135785][ T5887] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 2476.143753][ T8651] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 2476.150440][ T5887] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 2476.158514][ T8651] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 2476.171842][ T5887] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 2476.180147][ T8651] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 2476.227636][T11719] vxcan1 speed is unknown, defaulting to 1000 [ 2476.437251][T11719] wg1 speed is unknown, defaulting to 1000 [ 2476.437258][T11720] vxcan1 speed is unknown, defaulting to 1000 [ 2476.695533][T11631] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 2476.707850][T11631] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 2476.717857][T11631] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 2476.731872][T11631] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 2476.739145][T11719] chnl_net:caif_netlink_parms(): no params data found [ 2476.748710][T11631] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 2476.819343][T11720] wg1 speed is unknown, defaulting to 1000 [ 2477.077964][T11719] bridge0: port 1(bridge_slave_0) entered blocking state [ 2477.111296][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 2477.118783][T11719] bridge_slave_0: entered allmulticast mode [ 2477.128518][T11719] bridge_slave_0: entered promiscuous mode [ 2477.154024][T11726] vxcan1 speed is unknown, defaulting to 1000 [ 2477.154172][T11719] bridge0: port 2(bridge_slave_1) entered blocking state [ 2477.192401][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 2477.199833][T11719] bridge_slave_1: entered allmulticast mode [ 2477.224067][T11719] bridge_slave_1: entered promiscuous mode [ 2477.326525][ T8651] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 2477.342136][ T8651] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 2477.350893][ T8651] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 2477.364614][ T8651] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 2477.375089][ T8651] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 2477.406540][T11719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2477.466172][T11719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2477.606168][T11719] team0: Port device team_slave_0 added [ 2477.673294][T11719] team0: Port device team_slave_1 added [ 2477.679544][T11734] vxcan1 speed is unknown, defaulting to 1000 [ 2477.717676][T11726] wg1 speed is unknown, defaulting to 1000 [ 2477.823784][T11719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2477.830817][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2477.891446][T11719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2477.918232][T11720] chnl_net:caif_netlink_parms(): no params data found [ 2477.944244][T11719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2477.952357][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2478.021255][T11719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2478.141596][T11734] wg1 speed is unknown, defaulting to 1000 [ 2478.202296][T11740] Bluetooth: hci16: command tx timeout [ 2478.222661][T11719] hsr_slave_0: entered promiscuous mode [ 2478.229845][T11719] hsr_slave_1: entered promiscuous mode [ 2478.254278][T11719] debugfs: 'hsr0' already exists in 'hsr' [ 2478.260056][T11719] Cannot create hsr debugfs directory [ 2478.281683][T11740] Bluetooth: hci17: command tx timeout [ 2478.314194][T11739] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 2478.325306][T11739] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 2478.334641][T11739] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 2478.344941][T11739] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 2478.353039][T11739] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 2478.648958][T11741] vxcan1 speed is unknown, defaulting to 1000 [ 2478.684504][T11720] bridge0: port 1(bridge_slave_0) entered blocking state [ 2478.692416][T11720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2478.699880][T11720] bridge_slave_0: entered allmulticast mode [ 2478.708746][T11720] bridge_slave_0: entered promiscuous mode [ 2478.726207][T11720] bridge0: port 2(bridge_slave_1) entered blocking state [ 2478.734581][T11720] bridge0: port 2(bridge_slave_1) entered disabled state [ 2478.744833][T11720] bridge_slave_1: entered allmulticast mode [ 2478.755733][T11720] bridge_slave_1: entered promiscuous mode [ 2478.841712][T11739] Bluetooth: hci18: command tx timeout [ 2478.967586][T11720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2478.982811][T11720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2478.993262][T11741] wg1 speed is unknown, defaulting to 1000 [ 2479.139387][T11720] team0: Port device team_slave_0 added [ 2479.153259][T11726] chnl_net:caif_netlink_parms(): no params data found [ 2479.198792][T11720] team0: Port device team_slave_1 added [ 2479.313016][T11720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2479.319999][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2479.347432][T11720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2479.373418][T11720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2479.380401][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2479.407400][T11720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2479.408506][T11739] Bluetooth: hci19: command tx timeout [ 2479.454811][T11734] chnl_net:caif_netlink_parms(): no params data found [ 2479.552212][T11726] bridge0: port 1(bridge_slave_0) entered blocking state [ 2479.559400][T11726] bridge0: port 1(bridge_slave_0) entered disabled state [ 2479.567254][T11726] bridge_slave_0: entered allmulticast mode [ 2479.577638][T11726] bridge_slave_0: entered promiscuous mode [ 2479.598646][T11720] hsr_slave_0: entered promiscuous mode [ 2479.605653][T11720] hsr_slave_1: entered promiscuous mode [ 2479.612543][T11720] debugfs: 'hsr0' already exists in 'hsr' [ 2479.618276][T11720] Cannot create hsr debugfs directory [ 2479.656560][T11726] bridge0: port 2(bridge_slave_1) entered blocking state [ 2479.663791][T11726] bridge0: port 2(bridge_slave_1) entered disabled state [ 2479.671124][T11726] bridge_slave_1: entered allmulticast mode [ 2479.678390][T11726] bridge_slave_1: entered promiscuous mode [ 2479.750729][T11726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2479.803924][T11726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2479.918020][T11726] team0: Port device team_slave_0 added [ 2480.015320][T11726] team0: Port device team_slave_1 added [ 2480.039910][T11734] bridge0: port 1(bridge_slave_0) entered blocking state [ 2480.047158][T11740] Bluetooth: hci8: command 0x0406 tx timeout [ 2480.047228][T11740] Bluetooth: hci9: command 0x0406 tx timeout [ 2480.047262][T11740] Bluetooth: hci10: command 0x0406 tx timeout [ 2480.047320][T11740] Bluetooth: hci6: command 0x0406 tx timeout [ 2480.047440][T11739] Bluetooth: hci7: command 0x0406 tx timeout [ 2480.082785][T11734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2480.090248][T11734] bridge_slave_0: entered allmulticast mode [ 2480.104518][T11734] bridge_slave_0: entered promiscuous mode [ 2480.114447][T11734] bridge0: port 2(bridge_slave_1) entered blocking state [ 2480.125183][T11734] bridge0: port 2(bridge_slave_1) entered disabled state [ 2480.133629][T11734] bridge_slave_1: entered allmulticast mode [ 2480.140952][T11734] bridge_slave_1: entered promiscuous mode [ 2480.232122][T11726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2480.239100][T11726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2480.265784][T11726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2480.277783][T11741] chnl_net:caif_netlink_parms(): no params data found [ 2480.284734][ T8651] Bluetooth: hci16: command tx timeout [ 2480.300464][T11734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2480.325170][T11726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2480.332995][T11726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2480.359773][T11726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2480.361745][ T8651] Bluetooth: hci17: command tx timeout [ 2480.390195][T11734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2480.441728][ T8651] Bluetooth: hci20: command tx timeout [ 2480.542470][T11726] hsr_slave_0: entered promiscuous mode [ 2480.549160][T11726] hsr_slave_1: entered promiscuous mode [ 2480.555991][T11726] debugfs: 'hsr0' already exists in 'hsr' [ 2480.562095][T11726] Cannot create hsr debugfs directory [ 2480.577536][T11734] team0: Port device team_slave_0 added [ 2480.638573][T11734] team0: Port device team_slave_1 added [ 2480.744837][T11734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2480.751902][T11734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2480.779983][T11734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2480.793229][T11734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2480.800185][T11734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2480.827186][T11734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2480.882059][T11741] bridge0: port 1(bridge_slave_0) entered blocking state [ 2480.889330][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 2480.897155][T11741] bridge_slave_0: entered allmulticast mode [ 2480.906644][T11741] bridge_slave_0: entered promiscuous mode [ 2480.915462][T11741] bridge0: port 2(bridge_slave_1) entered blocking state [ 2480.923423][ T8651] Bluetooth: hci18: command tx timeout [ 2480.923529][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 2480.936567][T11741] bridge_slave_1: entered allmulticast mode [ 2480.944841][T11741] bridge_slave_1: entered promiscuous mode [ 2481.044802][T11741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2481.080328][T11734] hsr_slave_0: entered promiscuous mode [ 2481.087322][T11734] hsr_slave_1: entered promiscuous mode [ 2481.094533][T11734] debugfs: 'hsr0' already exists in 'hsr' [ 2481.100260][T11734] Cannot create hsr debugfs directory [ 2481.109083][T11741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2481.171259][T11741] team0: Port device team_slave_0 added [ 2481.212208][T11741] team0: Port device team_slave_1 added [ 2481.291634][T11741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2481.298876][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2481.325943][T11741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2481.352720][T11741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2481.359701][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2481.386281][T11741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2481.481985][ T8651] Bluetooth: hci19: command tx timeout [ 2481.489669][T11741] hsr_slave_0: entered promiscuous mode [ 2481.496879][T11741] hsr_slave_1: entered promiscuous mode [ 2481.504753][T11741] debugfs: 'hsr0' already exists in 'hsr' [ 2481.510474][T11741] Cannot create hsr debugfs directory [ 2482.361906][ T8651] Bluetooth: hci16: command tx timeout [ 2482.441903][ T8651] Bluetooth: hci17: command tx timeout [ 2482.522603][ T8651] Bluetooth: hci20: command tx timeout [ 2483.001416][ T8651] Bluetooth: hci18: command tx timeout [ 2483.562242][ T8651] Bluetooth: hci19: command tx timeout [ 2484.441407][ T8651] Bluetooth: hci16: command tx timeout [ 2484.521726][ T8651] Bluetooth: hci17: command tx timeout [ 2484.602789][ T8651] Bluetooth: hci20: command tx timeout [ 2485.081457][ T8651] Bluetooth: hci18: command tx timeout [ 2485.642171][ T8651] Bluetooth: hci19: command tx timeout [ 2485.642596][ T31] INFO: task syz.4.25016:11575 blocked for more than 143 seconds. [ 2485.655902][ T31] Not tainted syzkaller #0 [ 2485.660855][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2485.669986][ T31] task:syz.4.25016 state:D stack:23672 pid:11575 tgid:11567 ppid:5896 task_flags:0x400140 flags:0x00004004 [ 2485.682418][ T31] Call Trace: [ 2485.685783][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2485.688785][ T31] __schedule+0x1798/0x4cc0 [ 2485.693625][ T31] ? __lock_acquire+0xab9/0xd20 [ 2485.698514][ T31] ? __lock_acquire+0xab9/0xd20 [ 2485.703564][ T31] ? __pfx___schedule+0x10/0x10 [ 2485.708425][ T31] ? schedule+0x91/0x360 [ 2485.713653][ T31] schedule+0x165/0x360 [ 2485.717849][ T31] schedule_preempt_disabled+0x13/0x30 [ 2485.724326][ T31] __mutex_lock+0x7e6/0x1350 [ 2485.728966][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2485.734848][ T31] ? genl_rcv_msg+0x10d/0x790 [ 2485.739571][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2485.745208][ T31] ? stack_trace_save+0x9c/0xe0 [ 2485.750085][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 2485.756656][ T31] ? radix_tree_lookup+0x240/0x290 [ 2485.762398][ T31] genl_rcv_msg+0x10d/0x790 [ 2485.766940][ T31] ? __lock_acquire+0xab9/0xd20 [ 2485.772586][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2485.777675][ T31] netlink_rcv_skb+0x208/0x470 [ 2485.783214][ T31] ? __lock_acquire+0xab9/0xd20 [ 2485.788100][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2485.793729][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2485.799071][ T31] ? down_read+0x1ad/0x2e0 [ 2485.804867][ T31] genl_rcv+0x28/0x40 [ 2485.808882][ T31] netlink_unicast+0x82f/0x9e0 [ 2485.815215][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2485.820529][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2485.826437][ T31] ? skb_put+0x11b/0x210 [ 2485.830715][ T31] netlink_sendmsg+0x805/0xb30 [ 2485.836555][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2485.842439][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2485.847408][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2485.853323][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2485.858638][ T31] __sock_sendmsg+0x21c/0x270 [ 2485.864154][ T31] __sys_sendto+0x3bd/0x520 [ 2485.868698][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2485.901627][ T31] ? count_memcg_event_mm+0x21/0x260 [ 2485.906996][ T31] ? exc_page_fault+0x76/0xf0 [ 2485.940380][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 2485.946610][ T31] __x64_sys_sendto+0xde/0x100 [ 2485.951980][ T31] do_syscall_64+0xfa/0x3b0 [ 2485.957038][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2485.962731][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2485.968801][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2485.973923][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2485.979835][ T31] RIP: 0033:0x7febbd590d5c [ 2485.984534][ T31] RSP: 002b:00007febbe36bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2485.993574][ T31] RAX: ffffffffffffffda RBX: 00007febbe36bfc0 RCX: 00007febbd590d5c [ 2486.001710][ T31] RDX: 0000000000000024 RSI: 00007febbe36c010 RDI: 0000000000000004 [ 2486.009709][ T31] RBP: 0000000000000000 R08: 00007febbe36bf14 R09: 000000000000000c [ 2486.017866][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 2486.026265][ T31] R13: 00007febbe36bf68 R14: 00007febbe36c010 R15: 0000000000000000 [ 2486.034798][ T31] [ 2486.037847][ T31] INFO: task syz.4.25016:11580 blocked for more than 143 seconds. [ 2486.046183][ T31] Not tainted syzkaller #0 [ 2486.052528][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2486.061333][ T31] task:syz.4.25016 state:D stack:25352 pid:11580 tgid:11567 ppid:5896 task_flags:0x400140 flags:0x00004006 [ 2486.073551][ T31] Call Trace: [ 2486.076847][ T31] [ 2486.079808][ T31] __schedule+0x1798/0x4cc0 [ 2486.084664][ T31] ? validate_chain+0x897/0x2140 [ 2486.089698][ T31] ? __lock_acquire+0xab9/0xd20 [ 2486.095043][ T31] ? __pfx___schedule+0x10/0x10 [ 2486.099920][ T31] ? schedule+0x91/0x360 [ 2486.104515][ T31] schedule+0x165/0x360 [ 2486.108682][ T31] schedule_timeout+0x9a/0x270 [ 2486.113871][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2486.119258][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2486.124746][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2486.129978][ T31] ? wait_for_completion+0x267/0x5d0 [ 2486.135683][ T31] wait_for_completion+0x2bf/0x5d0 [ 2486.140823][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 2486.146913][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 2486.152895][ T31] ? check_flush_dependency+0x88/0x400 [ 2486.158379][ T31] __flush_workqueue+0x6f7/0x14b0 [ 2486.163456][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2486.169362][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2486.174994][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 2486.180475][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2486.186439][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 2486.192140][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 2486.197467][ T31] nbd_genl_disconnect+0x485/0x570 [ 2486.203352][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 2486.209000][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2486.215560][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 2486.221256][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2486.227365][ T31] ? stack_trace_save+0x9c/0xe0 [ 2486.232642][ T31] genl_rcv_msg+0x60e/0x790 [ 2486.237159][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2486.242260][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 2486.247892][ T31] netlink_rcv_skb+0x208/0x470 [ 2486.252682][ T31] ? __lock_acquire+0xab9/0xd20 [ 2486.257522][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2486.262863][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2486.268151][ T31] ? down_read+0x1ad/0x2e0 [ 2486.272612][ T31] genl_rcv+0x28/0x40 [ 2486.276675][ T31] netlink_unicast+0x82f/0x9e0 [ 2486.282041][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2486.287530][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2486.292779][ T31] ? skb_put+0x11b/0x210 [ 2486.297016][ T31] netlink_sendmsg+0x805/0xb30 [ 2486.301851][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2486.307133][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2486.312186][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2486.317479][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2486.323175][ T31] __sock_sendmsg+0x21c/0x270 [ 2486.327991][ T31] ____sys_sendmsg+0x505/0x830 [ 2486.332892][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2486.338203][ T31] ? import_iovec+0x74/0xa0 [ 2486.342785][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 2486.347478][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 2486.352980][ T31] ? __fget_files+0x2a/0x420 [ 2486.357563][ T31] ? __fget_files+0x3a0/0x420 [ 2486.363471][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 2486.368453][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2486.373995][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 2486.379309][ T31] ? do_syscall_64+0xbe/0x3b0 [ 2486.384353][ T31] do_syscall_64+0xfa/0x3b0 [ 2486.388940][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2486.394452][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2486.400535][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2486.405284][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2486.411739][ T31] RIP: 0033:0x7febbd58eec9 [ 2486.416247][ T31] RSP: 002b:00007febbe34c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2486.424875][ T31] RAX: ffffffffffffffda RBX: 00007febbd7e6180 RCX: 00007febbd58eec9 [ 2486.432990][ T31] RDX: 0000000000000010 RSI: 0000200000000540 RDI: 0000000000000006 [ 2486.440975][ T31] RBP: 00007febbd611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2486.449521][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2486.457557][ T31] R13: 00007febbd7e6218 R14: 00007febbd7e6180 R15: 00007ffdd7f843b8 [ 2486.465601][ T31] [ 2486.468624][ T31] INFO: task syz.4.25016:11604 blocked for more than 144 seconds. [ 2486.484557][ T31] Not tainted syzkaller #0 [ 2486.489539][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2486.498931][ T31] task:syz.4.25016 state:D stack:28616 pid:11604 tgid:11567 ppid:5896 task_flags:0x400140 flags:0x00004004 [ 2486.511910][ T31] Call Trace: [ 2486.515268][ T31] [ 2486.518206][ T31] __schedule+0x1798/0x4cc0 [ 2486.522850][ T31] ? __lock_acquire+0xab9/0xd20 [ 2486.527720][ T31] ? __lock_acquire+0xab9/0xd20 [ 2486.532772][ T31] ? __pfx___schedule+0x10/0x10 [ 2486.537664][ T31] ? schedule+0x91/0x360 [ 2486.542346][ T31] schedule+0x165/0x360 [ 2486.546535][ T31] schedule_preempt_disabled+0x13/0x30 [ 2486.552430][ T31] __mutex_lock+0x7e6/0x1350 [ 2486.557034][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2486.562096][ T31] ? genl_rcv_msg+0x10d/0x790 [ 2486.566775][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2486.572070][ T31] ? stack_trace_save+0x9c/0xe0 [ 2486.576935][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 2486.582759][ T31] ? radix_tree_lookup+0x240/0x290 [ 2486.588006][ T31] genl_rcv_msg+0x10d/0x790 [ 2486.592713][ T31] ? __lock_acquire+0xab9/0xd20 [ 2486.597582][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2486.603670][ T31] netlink_rcv_skb+0x208/0x470 [ 2486.608591][ T31] ? __lock_acquire+0xab9/0xd20 [ 2486.613862][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2486.618943][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2486.624870][ T31] ? down_read+0x1ad/0x2e0 [ 2486.629293][ T31] genl_rcv+0x28/0x40 [ 2486.633406][ T31] netlink_unicast+0x82f/0x9e0 [ 2486.638170][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2486.643503][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2486.648425][ T31] ? skb_put+0x11b/0x210 [ 2486.653308][ T31] netlink_sendmsg+0x805/0xb30 [ 2486.658088][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2486.663801][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2486.668764][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2486.674399][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2486.679705][ T31] __sock_sendmsg+0x21c/0x270 [ 2486.684937][ T31] __sys_sendto+0x3bd/0x520 [ 2486.689442][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2486.692633][ T5887] Bluetooth: hci20: command tx timeout [ 2486.695514][ T31] ? count_memcg_event_mm+0x21/0x260 [ 2486.705490][ T31] ? exc_page_fault+0x76/0xf0 [ 2486.710163][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 2486.715778][ T31] __x64_sys_sendto+0xde/0x100 [ 2486.720533][ T31] do_syscall_64+0xfa/0x3b0 [ 2486.725569][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2486.730773][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2486.737311][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2486.742564][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2486.748450][ T31] RIP: 0033:0x7febbd590d5c [ 2486.752974][ T31] RSP: 002b:00007febbabacec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2486.761804][ T31] RAX: ffffffffffffffda RBX: 00007febbabacfc0 RCX: 00007febbd590d5c [ 2486.769798][ T31] RDX: 0000000000000028 RSI: 00007febbabad010 RDI: 0000000000000005 [ 2486.778239][ T31] RBP: 0000000000000000 R08: 00007febbabacf14 R09: 000000000000000c [ 2486.786628][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 2486.795178][ T31] R13: 00007febbabacf68 R14: 00007febbabad010 R15: 0000000000000000 [ 2486.803812][ T31] [ 2486.806854][ T31] INFO: task syz.1.25019:11582 blocked for more than 144 seconds. [ 2486.816696][ T31] Not tainted syzkaller #0 [ 2486.822015][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2486.830685][ T31] task:syz.1.25019 state:D stack:27624 pid:11582 tgid:11581 ppid:5882 task_flags:0x400140 flags:0x00004004 [ 2486.843744][ T31] Call Trace: [ 2486.847063][ T31] [ 2486.849985][ T31] __schedule+0x1798/0x4cc0 [ 2486.854818][ T31] ? __lock_acquire+0xab9/0xd20 [ 2486.859690][ T31] ? __lock_acquire+0xab9/0xd20 [ 2486.864898][ T31] ? __pfx___schedule+0x10/0x10 [ 2486.869749][ T31] ? schedule+0x91/0x360 [ 2486.874278][ T31] schedule+0x165/0x360 [ 2486.878435][ T31] schedule_preempt_disabled+0x13/0x30 [ 2486.884010][ T31] __mutex_lock+0x7e6/0x1350 [ 2486.888592][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2486.893432][ T31] ? genl_rcv_msg+0x10d/0x790 [ 2486.898102][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2486.903451][ T31] ? stack_trace_save+0x9c/0xe0 [ 2486.908304][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 2486.914070][ T31] ? radix_tree_lookup+0x240/0x290 [ 2486.919214][ T31] genl_rcv_msg+0x10d/0x790 [ 2486.925793][ T31] ? __lock_acquire+0xab9/0xd20 [ 2486.930686][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2486.936954][ T31] netlink_rcv_skb+0x208/0x470 [ 2486.941816][ T31] ? __lock_acquire+0xab9/0xd20 [ 2486.946690][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2486.951894][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2486.957304][ T31] ? down_read+0x1ad/0x2e0 [ 2486.962147][ T31] genl_rcv+0x28/0x40 [ 2486.966143][ T31] netlink_unicast+0x82f/0x9e0 [ 2486.970890][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2486.976363][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2486.981656][ T31] ? skb_put+0x11b/0x210 [ 2486.985915][ T31] netlink_sendmsg+0x805/0xb30 [ 2486.990767][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2486.996464][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2487.001695][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2487.007024][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2487.012453][ T31] __sock_sendmsg+0x21c/0x270 [ 2487.017137][ T31] __sys_sendto+0x3bd/0x520 [ 2487.022261][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2487.027315][ T31] ? count_memcg_event_mm+0x21/0x260 [ 2487.032662][ T31] ? exc_page_fault+0x76/0xf0 [ 2487.037333][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 2487.042714][ T31] __x64_sys_sendto+0xde/0x100 [ 2487.047493][ T31] do_syscall_64+0xfa/0x3b0 [ 2487.052507][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2487.057728][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.063891][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2487.068602][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.074632][ T31] RIP: 0033:0x7f5da1390d5c [ 2487.079038][ T31] RSP: 002b:00007f5da22fdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2487.088022][ T31] RAX: ffffffffffffffda RBX: 00007f5da22fdfc0 RCX: 00007f5da1390d5c [ 2487.096150][ T31] RDX: 0000000000000020 RSI: 00007f5da22fe010 RDI: 0000000000000009 [ 2487.104248][ T31] RBP: 0000000000000000 R08: 00007f5da22fdf14 R09: 000000000000000c [ 2487.112527][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 2487.120489][ T31] R13: 00007f5da22fdf68 R14: 00007f5da22fe010 R15: 0000000000000000 [ 2487.128527][ T31] [ 2487.131613][ T31] INFO: task syz.6.25022:11594 blocked for more than 144 seconds. [ 2487.139413][ T31] Not tainted syzkaller #0 [ 2487.145039][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2487.153796][ T31] task:syz.6.25022 state:D stack:25864 pid:11594 tgid:11585 ppid:8649 task_flags:0x400140 flags:0x00004004 [ 2487.165788][ T31] Call Trace: [ 2487.169110][ T31] [ 2487.172559][ T31] __schedule+0x1798/0x4cc0 [ 2487.177094][ T31] ? __lock_acquire+0xab9/0xd20 [ 2487.182063][ T31] ? __lock_acquire+0xab9/0xd20 [ 2487.186913][ T31] ? __pfx___schedule+0x10/0x10 [ 2487.191822][ T31] ? schedule+0x91/0x360 [ 2487.196054][ T31] schedule+0x165/0x360 [ 2487.200190][ T31] schedule_preempt_disabled+0x13/0x30 [ 2487.205951][ T31] __mutex_lock+0x7e6/0x1350 [ 2487.210544][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2487.215448][ T31] ? genl_rcv_msg+0x10d/0x790 [ 2487.220149][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2487.225252][ T31] ? stack_trace_save+0x9c/0xe0 [ 2487.230092][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 2487.235778][ T31] ? radix_tree_lookup+0x240/0x290 [ 2487.240888][ T31] genl_rcv_msg+0x10d/0x790 [ 2487.245791][ T31] ? __lock_acquire+0xab9/0xd20 [ 2487.250725][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2487.255861][ T31] netlink_rcv_skb+0x208/0x470 [ 2487.260615][ T31] ? __lock_acquire+0xab9/0xd20 [ 2487.265788][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2487.270811][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2487.276174][ T31] ? down_read+0x1ad/0x2e0 [ 2487.280587][ T31] genl_rcv+0x28/0x40 [ 2487.284615][ T31] netlink_unicast+0x82f/0x9e0 [ 2487.289398][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2487.295048][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2487.299988][ T31] ? skb_put+0x11b/0x210 [ 2487.304457][ T31] netlink_sendmsg+0x805/0xb30 [ 2487.309268][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2487.314648][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2487.319605][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2487.325291][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2487.330572][ T31] __sock_sendmsg+0x21c/0x270 [ 2487.335386][ T31] __sys_sendto+0x3bd/0x520 [ 2487.340052][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2487.345238][ T31] ? count_memcg_event_mm+0x21/0x260 [ 2487.350530][ T31] ? exc_page_fault+0x76/0xf0 [ 2487.355784][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 2487.361221][ T31] __x64_sys_sendto+0xde/0x100 [ 2487.366010][ T31] do_syscall_64+0xfa/0x3b0 [ 2487.370527][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2487.375788][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.382160][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2487.386830][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.392767][ T31] RIP: 0033:0x7ff7b9790d5c [ 2487.397177][ T31] RSP: 002b:00007ff7b79d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2487.406209][ T31] RAX: ffffffffffffffda RBX: 00007ff7b79d3fc0 RCX: 00007ff7b9790d5c [ 2487.414679][ T31] RDX: 0000000000000020 RSI: 00007ff7b79d4010 RDI: 0000000000000007 [ 2487.423329][ T31] RBP: 0000000000000000 R08: 00007ff7b79d3f14 R09: 000000000000000c [ 2487.431661][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 2487.439906][ T31] R13: 00007ff7b79d3f68 R14: 00007ff7b79d4010 R15: 0000000000000000 [ 2487.448056][ T31] [ 2487.451703][ T31] INFO: task syz.6.25022:11598 blocked for more than 145 seconds. [ 2487.459536][ T31] Not tainted syzkaller #0 [ 2487.464550][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2487.473280][ T31] task:syz.6.25022 state:D stack:25832 pid:11598 tgid:11585 ppid:8649 task_flags:0x400140 flags:0x00004004 [ 2487.486178][ T31] Call Trace: [ 2487.489497][ T31] [ 2487.492504][ T31] __schedule+0x1798/0x4cc0 [ 2487.497029][ T31] ? __lock_acquire+0xab9/0xd20 [ 2487.501950][ T31] ? __lock_acquire+0xab9/0xd20 [ 2487.506799][ T31] ? __pfx___schedule+0x10/0x10 [ 2487.512063][ T31] ? schedule+0x91/0x360 [ 2487.516303][ T31] schedule+0x165/0x360 [ 2487.520444][ T31] schedule_preempt_disabled+0x13/0x30 [ 2487.525987][ T31] __mutex_lock+0x7e6/0x1350 [ 2487.530569][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2487.535424][ T31] ? genl_rcv_msg+0x10d/0x790 [ 2487.540126][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2487.545582][ T31] ? stack_trace_save+0x9c/0xe0 [ 2487.550428][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 2487.555851][ T31] ? radix_tree_lookup+0x240/0x290 [ 2487.560968][ T31] genl_rcv_msg+0x10d/0x790 [ 2487.565749][ T31] ? __lock_acquire+0xab9/0xd20 [ 2487.570634][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2487.575994][ T31] netlink_rcv_skb+0x208/0x470 [ 2487.580787][ T31] ? __lock_acquire+0xab9/0xd20 [ 2487.585705][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2487.590722][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2487.596091][ T31] ? down_read+0x1ad/0x2e0 [ 2487.600539][ T31] genl_rcv+0x28/0x40 [ 2487.604825][ T31] netlink_unicast+0x82f/0x9e0 [ 2487.609585][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2487.614942][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2487.619898][ T31] ? skb_put+0x11b/0x210 [ 2487.624200][ T31] netlink_sendmsg+0x805/0xb30 [ 2487.628960][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2487.634554][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2487.639491][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2487.645151][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2487.650656][ T31] __sock_sendmsg+0x21c/0x270 [ 2487.655530][ T31] __sys_sendto+0x3bd/0x520 [ 2487.660040][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2487.665475][ T31] ? fd_install+0x97/0x540 [ 2487.669894][ T31] ? fd_install+0x30d/0x540 [ 2487.674460][ T31] __x64_sys_sendto+0xde/0x100 [ 2487.679229][ T31] do_syscall_64+0xfa/0x3b0 [ 2487.683890][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2487.689090][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.695512][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2487.700197][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2487.706168][ T31] RIP: 0033:0x7ff7b9790d5c [ 2487.710586][ T31] RSP: 002b:00007ff7b79b2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2487.719041][ T31] RAX: ffffffffffffffda RBX: 00007ff7b79b2fc0 RCX: 00007ff7b9790d5c [ 2487.728517][ T31] RDX: 0000000000000024 RSI: 00007ff7b79b3010 RDI: 000000000000000f [ 2487.737290][ T31] RBP: 0000000000000000 R08: 00007ff7b79b2f14 R09: 000000000000000c [ 2487.745308][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000f [ 2487.753630][ T31] R13: 00007ff7b79b2f68 R14: 00007ff7b79b3010 R15: 0000000000000000 [ 2487.761836][ T31] [ 2487.764874][ T31] INFO: task syz.3.25025:11614 blocked for more than 145 seconds. [ 2487.773820][ T31] Not tainted syzkaller #0 [ 2487.778752][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2487.788002][ T31] task:syz.3.25025 state:D stack:28200 pid:11614 tgid:11613 ppid:5884 task_flags:0x400140 flags:0x00004004 [ 2487.800044][ T31] Call Trace: [ 2487.803631][ T31] [ 2487.806567][ T31] __schedule+0x1798/0x4cc0 [ 2487.811128][ T31] ? __lock_acquire+0xab9/0xd20 [ 2487.815998][ T31] ? __lock_acquire+0xab9/0xd20 [ 2487.820940][ T31] ? __pfx___schedule+0x10/0x10 [ 2487.826163][ T31] ? schedule+0x91/0x360 [ 2487.830398][ T31] schedule+0x165/0x360 [ 2487.834613][ T31] schedule_preempt_disabled+0x13/0x30 [ 2487.840059][ T31] __mutex_lock+0x7e6/0x1350 [ 2487.844721][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2487.849481][ T31] ? genl_rcv_msg+0x10d/0x790 [ 2487.854505][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2487.859533][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 2487.864743][ T31] ? radix_tree_lookup+0x240/0x290 [ 2487.869856][ T31] genl_rcv_msg+0x10d/0x790 [ 2487.874503][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2487.879523][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 2487.885327][ T31] ? __asan_memcpy+0x40/0x70 [ 2487.889924][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 2487.895672][ T31] netlink_rcv_skb+0x208/0x470 [ 2487.900440][ T31] ? __lock_acquire+0xab9/0xd20 [ 2487.905411][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2487.910461][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2487.916135][ T31] ? down_read+0x1ad/0x2e0 [ 2487.920552][ T31] genl_rcv+0x28/0x40 [ 2487.924682][ T31] netlink_unicast+0x82f/0x9e0 [ 2487.929554][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2487.934936][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2487.939887][ T31] ? skb_put+0x11b/0x210 [ 2487.944439][ T31] netlink_sendmsg+0x805/0xb30 [ 2487.949228][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2487.954591][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2487.959570][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2487.965062][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2487.970477][ T31] __sock_sendmsg+0x21c/0x270 [ 2487.975497][ T31] __sys_sendto+0x3bd/0x520 [ 2487.979998][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2487.985147][ T31] ? count_memcg_event_mm+0x21/0x260 [ 2487.990437][ T31] ? exc_page_fault+0x76/0xf0 [ 2487.995172][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 2488.000458][ T31] __x64_sys_sendto+0xde/0x100 [ 2488.005550][ T31] do_syscall_64+0xfa/0x3b0 [ 2488.010053][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2488.015311][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.021444][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2488.026164][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.032380][ T31] RIP: 0033:0x7f0607d90d5c [ 2488.036789][ T31] RSP: 002b:00007f0608bb8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2488.045550][ T31] RAX: ffffffffffffffda RBX: 00007f0608bb8fc0 RCX: 00007f0607d90d5c [ 2488.053572][ T31] RDX: 0000000000000020 RSI: 00007f0608bb9010 RDI: 0000000000000007 [ 2488.062066][ T31] RBP: 0000000000000000 R08: 00007f0608bb8f14 R09: 000000000000000c [ 2488.070052][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 2488.078077][ T31] R13: 00007f0608bb8f68 R14: 00007f0608bb9010 R15: 0000000000000000 [ 2488.086186][ T31] [ 2488.089262][ T31] INFO: task syz.2.25027:11620 blocked for more than 145 seconds. [ 2488.097577][ T31] Not tainted syzkaller #0 [ 2488.102586][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2488.111321][ T31] task:syz.2.25027 state:D stack:28616 pid:11620 tgid:11619 ppid:5893 task_flags:0x400040 flags:0x00004004 [ 2488.124122][ T31] Call Trace: [ 2488.127419][ T31] [ 2488.130341][ T31] __schedule+0x1798/0x4cc0 [ 2488.134907][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.139760][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.144663][ T31] ? __pfx___schedule+0x10/0x10 [ 2488.149510][ T31] ? schedule+0x91/0x360 [ 2488.154126][ T31] schedule+0x165/0x360 [ 2488.158292][ T31] schedule_preempt_disabled+0x13/0x30 [ 2488.163881][ T31] __mutex_lock+0x7e6/0x1350 [ 2488.168470][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2488.173319][ T31] ? genl_rcv_msg+0x10d/0x790 [ 2488.178021][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2488.183403][ T31] ? stack_trace_save+0x9c/0xe0 [ 2488.188270][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 2488.193777][ T31] ? radix_tree_lookup+0x240/0x290 [ 2488.198931][ T31] genl_rcv_msg+0x10d/0x790 [ 2488.204688][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.209588][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2488.214952][ T31] netlink_rcv_skb+0x208/0x470 [ 2488.219734][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.224665][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2488.229707][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2488.235069][ T31] ? down_read+0x1ad/0x2e0 [ 2488.239503][ T31] genl_rcv+0x28/0x40 [ 2488.243798][ T31] netlink_unicast+0x82f/0x9e0 [ 2488.248738][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2488.254068][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2488.258995][ T31] ? skb_put+0x11b/0x210 [ 2488.263305][ T31] netlink_sendmsg+0x805/0xb30 [ 2488.268076][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2488.273779][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2488.278752][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2488.284275][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2488.289560][ T31] __sock_sendmsg+0x21c/0x270 [ 2488.294398][ T31] __sys_sendto+0x3bd/0x520 [ 2488.299067][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2488.304456][ T31] ? count_memcg_event_mm+0x21/0x260 [ 2488.309751][ T31] ? exc_page_fault+0x76/0xf0 [ 2488.314628][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 2488.319959][ T31] __x64_sys_sendto+0xde/0x100 [ 2488.324864][ T31] do_syscall_64+0xfa/0x3b0 [ 2488.329374][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2488.334904][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.340970][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2488.345703][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.351650][ T31] RIP: 0033:0x7fece3b90d5c [ 2488.356083][ T31] RSP: 002b:00007fece4a7dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2488.365001][ T31] RAX: ffffffffffffffda RBX: 00007fece4a7dfc0 RCX: 00007fece3b90d5c [ 2488.373141][ T31] RDX: 0000000000000020 RSI: 00007fece4a7e010 RDI: 0000000000000004 [ 2488.381193][ T31] RBP: 0000000000000000 R08: 00007fece4a7df14 R09: 000000000000000c [ 2488.389272][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 2488.397683][ T31] R13: 00007fece4a7df68 R14: 00007fece4a7e010 R15: 0000000000000000 [ 2488.405752][ T31] [ 2488.408788][ T31] INFO: task syz.2.25027:11621 blocked for more than 146 seconds. [ 2488.416994][ T31] Not tainted syzkaller #0 [ 2488.422296][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2488.430997][ T31] task:syz.2.25027 state:D stack:27872 pid:11621 tgid:11619 ppid:5893 task_flags:0x400040 flags:0x00004004 [ 2488.443874][ T31] Call Trace: [ 2488.447245][ T31] [ 2488.450186][ T31] __schedule+0x1798/0x4cc0 [ 2488.455184][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.460057][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.465067][ T31] ? __pfx___schedule+0x10/0x10 [ 2488.469922][ T31] ? schedule+0x91/0x360 [ 2488.474247][ T31] schedule+0x165/0x360 [ 2488.478393][ T31] schedule_preempt_disabled+0x13/0x30 [ 2488.484189][ T31] __mutex_lock+0x7e6/0x1350 [ 2488.488787][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2488.493604][ T31] ? genl_rcv_msg+0x10d/0x790 [ 2488.498302][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2488.503461][ T31] ? stack_trace_save+0x9c/0xe0 [ 2488.508394][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 2488.514079][ T31] ? radix_tree_lookup+0x240/0x290 [ 2488.519191][ T31] genl_rcv_msg+0x10d/0x790 [ 2488.524088][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.529013][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2488.534255][ T31] netlink_rcv_skb+0x208/0x470 [ 2488.539028][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.544249][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2488.549276][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2488.554635][ T31] ? down_read+0x1ad/0x2e0 [ 2488.559051][ T31] genl_rcv+0x28/0x40 [ 2488.563239][ T31] netlink_unicast+0x82f/0x9e0 [ 2488.568022][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2488.573612][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2488.578563][ T31] ? skb_put+0x11b/0x210 [ 2488.582885][ T31] netlink_sendmsg+0x805/0xb30 [ 2488.587654][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2488.593056][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2488.598014][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2488.603889][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2488.609186][ T31] __sock_sendmsg+0x21c/0x270 [ 2488.613931][ T31] __sys_sendto+0x3bd/0x520 [ 2488.618429][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2488.623534][ T31] ? fd_install+0x97/0x540 [ 2488.627957][ T31] ? fd_install+0x30d/0x540 [ 2488.632793][ T31] __x64_sys_sendto+0xde/0x100 [ 2488.637579][ T31] do_syscall_64+0xfa/0x3b0 [ 2488.642239][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2488.647441][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.653579][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2488.658250][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.664450][ T31] RIP: 0033:0x7fece3b90d5c [ 2488.668866][ T31] RSP: 002b:00007fece4a5cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2488.677358][ T31] RAX: ffffffffffffffda RBX: 00007fece4a5cfc0 RCX: 00007fece3b90d5c [ 2488.685648][ T31] RDX: 0000000000000020 RSI: 00007fece4a5d010 RDI: 0000000000000006 [ 2488.693960][ T31] RBP: 0000000000000000 R08: 00007fece4a5cf14 R09: 000000000000000c [ 2488.702281][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 2488.710270][ T31] R13: 00007fece4a5cf68 R14: 00007fece4a5d010 R15: 0000000000000000 [ 2488.718535][ T31] [ 2488.721990][ T31] INFO: task syz.2.25027:11622 blocked for more than 146 seconds. [ 2488.729843][ T31] Not tainted syzkaller #0 [ 2488.734827][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2488.743632][ T31] task:syz.2.25027 state:D stack:28616 pid:11622 tgid:11619 ppid:5893 task_flags:0x400040 flags:0x00004004 [ 2488.755982][ T31] Call Trace: [ 2488.759300][ T31] [ 2488.763093][ T31] __schedule+0x1798/0x4cc0 [ 2488.767648][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.772559][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.777408][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.782564][ T31] ? __pfx___schedule+0x10/0x10 [ 2488.787423][ T31] ? schedule+0x91/0x360 [ 2488.791740][ T31] schedule+0x165/0x360 [ 2488.795913][ T31] schedule_preempt_disabled+0x13/0x30 [ 2488.801459][ T31] __mutex_lock+0x7e6/0x1350 [ 2488.806063][ T31] ? __mutex_lock+0x5bb/0x1350 [ 2488.810824][ T31] ? genl_rcv_msg+0x10d/0x790 [ 2488.815882][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2488.820922][ T31] ? stack_trace_save+0x9c/0xe0 [ 2488.825844][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 2488.831330][ T31] ? radix_tree_lookup+0x240/0x290 [ 2488.836465][ T31] genl_rcv_msg+0x10d/0x790 [ 2488.840974][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.847022][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2488.852691][ T31] netlink_rcv_skb+0x208/0x470 [ 2488.857505][ T31] ? __lock_acquire+0xab9/0xd20 [ 2488.862783][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2488.867843][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2488.873517][ T31] ? down_read+0x1ad/0x2e0 [ 2488.877941][ T31] genl_rcv+0x28/0x40 [ 2488.882599][ T31] netlink_unicast+0x82f/0x9e0 [ 2488.887409][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 2488.893102][ T31] ? netlink_sendmsg+0x642/0xb30 [ 2488.898048][ T31] ? skb_put+0x11b/0x210 [ 2488.902542][ T31] netlink_sendmsg+0x805/0xb30 [ 2488.907306][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2488.913158][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2488.918100][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2488.924034][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2488.929358][ T31] __sock_sendmsg+0x21c/0x270 [ 2488.934383][ T31] __sys_sendto+0x3bd/0x520 [ 2488.938942][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 2488.944375][ T31] ? fd_install+0x97/0x540 [ 2488.948798][ T31] ? fd_install+0x30d/0x540 [ 2488.953625][ T31] __x64_sys_sendto+0xde/0x100 [ 2488.958407][ T31] do_syscall_64+0xfa/0x3b0 [ 2488.963322][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2488.968529][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.974999][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2488.979693][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2488.986020][ T31] RIP: 0033:0x7fece3b90d5c [ 2488.990431][ T31] RSP: 002b:00007fece4a3bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2488.999212][ T31] RAX: ffffffffffffffda RBX: 00007fece4a3bfc0 RCX: 00007fece3b90d5c [ 2489.009035][ T31] RDX: 0000000000000020 RSI: 00007fece4a3c010 RDI: 0000000000000008 [ 2489.017410][ T31] RBP: 0000000000000000 R08: 00007fece4a3bf14 R09: 000000000000000c [ 2489.025783][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 2489.034116][ T31] R13: 00007fece4a3bf68 R14: 00007fece4a3c010 R15: 0000000000000000 [ 2489.042482][ T31] [ 2489.045493][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 2489.054879][ T31] [ 2489.054879][ T31] Showing all locks held in the system: [ 2489.063163][ T31] 1 lock held by khungtaskd/31: [ 2489.068033][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2489.078281][ T31] 2 locks held by getty/5620: [ 2489.083577][ T31] #0: ffff88814d6210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2489.093717][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2489.104193][ T31] 2 locks held by kworker/u9:0/720: [ 2489.109394][ T31] #0: ffff888143ba8148 ((wq_completion)nbd4-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2489.121025][ T31] #1: ffffc9000236fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2489.134162][ T31] 2 locks held by syz.5.24130/8235: [ 2489.139451][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.148114][ T31] #1: ffffffff8e418b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 2489.158661][ T31] 2 locks held by syz.4.25016/11575: [ 2489.164755][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.173648][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.183073][ T31] 3 locks held by syz.4.25016/11580: [ 2489.188385][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.196776][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.205859][ T31] #2: ffff888024f6c230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 2489.216385][ T31] 2 locks held by syz.4.25016/11604: [ 2489.222317][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.230552][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.239980][ T31] 2 locks held by syz.1.25019/11582: [ 2489.245639][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.254301][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.263608][ T31] 2 locks held by syz.6.25022/11594: [ 2489.268882][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.277482][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.286782][ T31] 2 locks held by syz.6.25022/11598: [ 2489.292392][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.300593][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.309876][ T31] 2 locks held by syz.3.25025/11614: [ 2489.315485][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.324563][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.333950][ T31] 2 locks held by syz.2.25027/11620: [ 2489.339262][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.347955][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.357398][ T31] 2 locks held by syz.2.25027/11621: [ 2489.363199][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.372117][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.381436][ T31] 2 locks held by syz.2.25027/11622: [ 2489.386734][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.395531][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.405410][ T31] 2 locks held by syz-executor/11627: [ 2489.412333][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.420558][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.429938][ T31] 2 locks held by syz-executor/11629: [ 2489.435847][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.444436][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.453892][ T31] 2 locks held by syz-executor/11635: [ 2489.459297][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.467785][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.477238][ T31] 2 locks held by syz-executor/11644: [ 2489.483336][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.491836][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.500864][ T31] 2 locks held by syz-executor/11651: [ 2489.506367][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.514929][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.524189][ T31] 2 locks held by syz-executor/11674: [ 2489.529546][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.538164][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.547398][ T31] 2 locks held by syz-executor/11676: [ 2489.553241][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.561854][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.570889][ T31] 2 locks held by syz-executor/11680: [ 2489.576697][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.585285][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.594634][ T31] 2 locks held by syz-executor/11686: [ 2489.600023][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.608402][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.617874][ T31] 2 locks held by syz-executor/11694: [ 2489.623615][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.631986][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.641156][ T31] 2 locks held by syz-executor/11719: [ 2489.646529][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.655151][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.664233][ T31] 2 locks held by syz-executor/11720: [ 2489.669589][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.677831][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.687146][ T31] 2 locks held by syz-executor/11726: [ 2489.692615][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.700812][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.709841][ T31] 2 locks held by syz-executor/11734: [ 2489.715524][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.723965][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.733141][ T31] 2 locks held by syz-executor/11741: [ 2489.738514][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 2489.747037][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 2489.756234][ T31] [ 2489.758576][ T31] ============================================= [ 2489.758576][ T31] [ 2489.767239][ T31] NMI backtrace for cpu 0 [ 2489.767253][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2489.767266][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2489.767273][ T31] Call Trace: [ 2489.767278][ T31] [ 2489.767284][ T31] dump_stack_lvl+0x189/0x250 [ 2489.767303][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2489.767315][ T31] ? __pfx__printk+0x10/0x10 [ 2489.767335][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2489.767354][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2489.767370][ T31] ? __pfx__printk+0x10/0x10 [ 2489.767386][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2489.767402][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2489.767419][ T31] watchdog+0xf93/0xfe0 [ 2489.767436][ T31] ? watchdog+0x1de/0xfe0 [ 2489.767452][ T31] kthread+0x70e/0x8a0 [ 2489.767466][ T31] ? __pfx_watchdog+0x10/0x10 [ 2489.767479][ T31] ? __pfx_kthread+0x10/0x10 [ 2489.767492][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2489.767503][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2489.767513][ T31] ? __pfx_kthread+0x10/0x10 [ 2489.767526][ T31] ret_from_fork+0x439/0x7d0 [ 2489.767537][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2489.767550][ T31] ? __switch_to_asm+0x39/0x70 [ 2489.767561][ T31] ? __switch_to_asm+0x33/0x70 [ 2489.767573][ T31] ? __pfx_kthread+0x10/0x10 [ 2489.767585][ T31] ret_from_fork_asm+0x1a/0x30 [ 2489.767606][ T31] [ 2489.767610][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2489.916235][ C1] NMI backtrace for cpu 1 [ 2489.916254][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2489.916274][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2489.916284][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2489.916309][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 69 14 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2489.916326][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 2489.916343][ C1] RAX: c2eafef85cbdb800 RBX: ffffffff81968528 RCX: c2eafef85cbdb800 [ 2489.916357][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b2238 RDI: ffffffff8be33f80 [ 2489.916370][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 2489.916383][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa30830 [ 2489.916397][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 2489.916409][ C1] FS: 0000000000000000(0000) GS:ffff888125d39000(0000) knlGS:0000000000000000 [ 2489.916423][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2489.916435][ C1] CR2: 00007f9979a57607 CR3: 000000000df36000 CR4: 00000000003526f0 [ 2489.916452][ C1] Call Trace: [ 2489.916460][ C1] [ 2489.916467][ C1] default_idle+0x13/0x20 [ 2489.916488][ C1] default_idle_call+0x74/0xb0 [ 2489.916510][ C1] do_idle+0x1e8/0x510 [ 2489.916539][ C1] ? __pfx_do_idle+0x10/0x10 [ 2489.916574][ C1] cpu_startup_entry+0x44/0x60 [ 2489.916598][ C1] start_secondary+0x101/0x110 [ 2489.916623][ C1] common_startup_64+0x13e/0x147 [ 2489.916653][ C1] [ 2489.917360][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2490.083821][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2490.092936][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2490.102989][ T31] Call Trace: [ 2490.106261][ T31] [ 2490.109195][ T31] dump_stack_lvl+0x99/0x250 [ 2490.113874][ T31] ? __asan_memcpy+0x40/0x70 [ 2490.118470][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2490.123663][ T31] ? __pfx__printk+0x10/0x10 [ 2490.128355][ T31] vpanic+0x281/0x750 [ 2490.132331][ T31] ? __pfx_vpanic+0x10/0x10 [ 2490.136825][ T31] ? preempt_schedule+0xae/0xc0 [ 2490.141676][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2490.147134][ T31] panic+0xb9/0xc0 [ 2490.150936][ T31] ? __pfx_panic+0x10/0x10 [ 2490.155348][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2490.160743][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2490.167180][ T31] watchdog+0xfd2/0xfe0 [ 2490.171441][ T31] ? watchdog+0x1de/0xfe0 [ 2490.175787][ T31] kthread+0x70e/0x8a0 [ 2490.179857][ T31] ? __pfx_watchdog+0x10/0x10 [ 2490.184535][ T31] ? __pfx_kthread+0x10/0x10 [ 2490.189127][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2490.194319][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2490.199509][ T31] ? __pfx_kthread+0x10/0x10 [ 2490.204099][ T31] ret_from_fork+0x439/0x7d0 [ 2490.208707][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2490.213816][ T31] ? __switch_to_asm+0x39/0x70 [ 2490.218575][ T31] ? __switch_to_asm+0x33/0x70 [ 2490.223329][ T31] ? __pfx_kthread+0x10/0x10 [ 2490.227940][ T31] ret_from_fork_asm+0x1a/0x30 [ 2490.232799][ T31] [ 2490.236339][ T31] Kernel Offset: disabled [ 2490.240662][ T31] Rebooting in 86400 seconds..