last executing test programs: 18.732669848s ago: executing program 0 (id=1029): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0xa1, &(0x7f00000004c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@x25={0x805, {0x0, 0x40, 0x23, "f8e183cd2a818f0970bcebb8fa86ca6d4b514a0d6364d35f686fd1ec75168e5e2810f486344a30fd4ec7f6bd164a28cce176ae9b8748da7c6ca6797725e5c02b2952a6d52629016d24c2e1e332ea0be9eed392c79c5e9d6d16630643181b16111bcd2bd5353e2bbd3071648e87353bddbb411045464afb63c01866b45360e8abea21a0fe0f94ac412745de12"}}}}, &(0x7f00000001c0)={0x0, 0x1, [0x98f, 0xb62, 0xac4, 0xbc5]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r2}, 0x18) r3 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001000000000000000000000000000000000014000000110001"], 0x80}}, 0x4000000) close(0x3) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) accept4$bt_l2cap(r3, 0x0, &(0x7f0000000580), 0x80000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=@newsa={0x190, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x5, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x703d2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "34000000c538c7cb7a0000000000400000040000"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e28, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}, @lifetime_val={0x24, 0x9, {0x3, 0x401, 0x5, 0xbdc}}]}, 0x190}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) 18.712661506s ago: executing program 2 (id=1030): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) unshare(0x60600) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8955, &(0x7f0000000080)={'batadv_slave_0\x00'}) 18.581685064s ago: executing program 3 (id=1032): close(0x3) (async) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) (async) r5 = epoll_create(0x5) epoll_pwait(r5, &(0x7f00000001c0)=[{}], 0x1, 0x1, 0x0, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0x4, 0x5, r7}, 0x10) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000300)="09000000e700140000007ef52f555f2a0c67127025c1d97bfbf788a83baa9900", 0x20, 0x24000801, &(0x7f0000000000)={0x11, 0x88a8, r10, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001800835e010000000000000002000000fd00fe030000000008000400", @ANYRES32=r13, @ANYBLOB="ecffadeeba00"/16], 0x2c}, 0x1, 0xffffff7f}, 0x84) 18.473070094s ago: executing program 2 (id=1033): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000000000000000000400", @ANYRES32=r2, @ANYBLOB="60bc010004a701003c00128009000100626f6e6400"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) 18.299112009s ago: executing program 3 (id=1035): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="689c115424f580edfc26bd9c5471ef29ebfeecfde615b944c8434645d1c6194c56828d2219bad9ae303211506edea44ce515176cb484ea83e0e30b0979881886df24b2461fd34c7160d3cc7727077b3d3575230c56f5a25bce86b894ae0a617c10a1d8d2d8320c0f33974fa48eced475c0a5add14d1f57ee50f4e4241dbe0af7e5444061a2f8cea4", 0x88}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x180}}, {{&(0x7f0000000500)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000580)="c5bff1869136f7a43bd5ca2d9ea78d31b18b2a127a2d27824c550417945219a6936ea77951ab3dfe5d5fba606a1279a12ce5da0bc98c5041d894799a9626e0933056b2c88370cad6fa9b131b9246cc39554379a7b9727b6c422ad2822f103bcc26dce8f8e28881937156bf7108a94b4c940fbf1e75ab3742b6c194c25d198a92c4bc5378e8032a10939f6c3c437a4a6d43327caea60ca6dc942126f2ec924c239d5377cd7d3529e928625fbd1410be346582206060efebf2b42dc4f88061c2367b928fb3788329f314cd8146f2a46851066e3a7ccfd92f6b03c059b3520e0818b4", 0xe1}, {&(0x7f0000000280)="710742c252c393049662809eb4d5", 0xe}, {&(0x7f0000000680)="aa75ad433dde26edbb", 0x9}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="9b0075d1a61bfd7e9f030217d1a4f75191c379ab4adb9cbe2a02c2907a9a5b4b325be9ccc683a695deaba50ad30b81f14587b1a10d4669f15cc987db474e12bd6398417947302fb3f3f28200f428fa1b872a2ac84614dabfb83b13ffbfaaac48bf6325c31a1a533732e70d4a3abec1932af33c", 0x73}, {&(0x7f0000001740)="923300512daf003d6619cfd93d75cb8109afc29562379c5d9b3ae5c6bb40547f8141b2fcfb75c990fd75fdf9782db7561066c508170000ce873a12a5c8d8bd2a9fd17f093e003167fb0a99b7e9a5fa463fcc00f2f7e99d4bc2cacf16672e4782cabc0d245023f9df9ad6610372bfda854fe8d94986af43f50f8144f7ab8b5fc69d4fd8ff9cd8a2629be8c7f78b710afede082189706ee4239e2ff172fdd96686702bafb9cc60ec77a60ada89d2ee8cb140eea0b401bc4ff9b4d86fd48081c28ecbaf2f35d89baaab", 0xc8}, {&(0x7f0000001840)="44cf536afb518977fa7b29adf89dc0c2fd44cc9ff027e5613e41110e0f1b4274a9e39617445a957c57f8c00604954cba97548b475bdcbdfdecff5380d45c19a9304bfcc8f697f06d5898841b1aefc4c325e5babc0128591abb49ac08dd3bb4efca36f7b382100435b2e8cf7aaabaf46e24ec6eed375093c4969f4abc8c4198c43e29f47c37562f969e8ac2b90c843564877beb609b7086", 0x97}, {&(0x7f0000001900)="b05fa68071e725d32065c8aed40056f7bc4ac923ee2aa0c8bc5b4bb7908772502062ffbd65168cbcc37f2cdc960d46025b981e690a0f01a7f357900936a4ed54ff36390b2efb11ef9819cf4dd3b99ae5b0f0ea3c6e3a61d9639f8bd073788ac671a6c432d4b5d8b34574d2d3835d9f5140321c", 0x73}, {&(0x7f0000001980)="eafd", 0x2}], 0x9, &(0x7f0000001a80)=[{0x48, 0x6, 0x1, "c138cfeae89c6ec7e9645613b60560ac05ed552d71b40384973ee7725b6150c8a8a4631a0eedf1ba68a2f7d25e01c6a1a05bd2594331e7f4"}], 0x48}}, {{&(0x7f0000001b00)=@generic={0x10, "9e2debecb51b4c9dbc3ed402f9c2df1a927c0c8d41c94048b2a77927f27a5794e70788416e837bd1e1d9097e1f6b8b00f538bc0e6a5680c44e8aff1f25540fa1fd466c694b321bcaaf100dfae06538a365279fe70961d1fbccc04d483f20e7a3ce80136bb17c999e7350eee93acf0bde6479ee1ffd5ba04c4734c3932802"}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000002480)="ec6f52631de0567a2da342688c5f44faf01f0045aec3266dfc63140f03e5aff2908418b820ab96a0a7c0c08970dead7fd002c543067fb218233330d5cb575e5017d4d1c3258b", 0x46}], 0x1, &(0x7f0000001bc0)=[{0x18, 0x29, 0x5, "db4563"}, {0xd0, 0x101, 0xfac, "9d71ad21b4e8ef73aabcfe3a0967b64576cb6063120b1222ab83f978f3a3cd04f6d88d5c080e537580d9a1262e210f245dabbf11367158c81e80b5c4428a5d103a35d7dce1dfb2a3a43999fa376c1039bf9c292526a9da9d20ef413ea27e2ee85ee670ae3d5595bb5fee351ee1d871ef9a4fa1d13d1d13d1175a8eaecb4def446d6cc3b0aac16623be203809b8ab0f73ad11ac202f6264fe6b6f7b2461ae6597c99cd7fdbe2e54ffd8ae194969a4eee4e879f45cba4894c365ee6576b7ed48af"}, {0x28, 0x117, 0x1, "b9ca466a073cae45d411bcb763ff751338e82fdc"}], 0x110}}], 0x3, 0x40) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x300, 0x70bd28, 0x25dfdc00, {0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x801) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'gretap0\x00', 0x200}) r3 = accept(r0, &(0x7f0000002080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000001dc0)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20000848}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001e80)={'wg0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001ec0)={0x0, @remote, @remote}, &(0x7f0000001f00)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000001b80)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6, 0x0, 0x0, 0x200000}]}, 0x10) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001fc0)={'ip6tnl0\x00', &(0x7f0000001f40)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x6, 0x9, 0x60, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @empty, 0x20, 0x10, 0xff, 0x42}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002000)=0x0, &(0x7f0000002040)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002100)={'syztnl1\x00', &(0x7f00000022c0)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x3, 0x5, 0x3c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x50, 0x1, 0x101, 0x2}}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r15, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r16, @ANYRESHEX], 0x48}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r16, {0x0, 0xffff}, {0xfff3, 0xa}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x52}, 0x20000090) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002240)={&(0x7f0000002500)={0xf8, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x20044800) r17 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r17, 0x29, 0xc8, &(0x7f0000000340), 0x4) 18.288343197s ago: executing program 1 (id=1036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0xc, 0x0, 0x2f, 0x0, @loopback, @rand_addr=0x64010101}}}}) 18.237226221s ago: executing program 4 (id=1037): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x0) unshare(0x22020600) unshare(0x2a020400) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r3, 0x0, 0x6}, 0x18) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x8000000) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 18.233601891s ago: executing program 0 (id=1038): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x1, 0x1, 0x7}]}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x30, 0x30, 0x0, 0x5f, 0x5f]}}, &(0x7f0000001a00)=""/16, 0x3a, 0x10, 0x1, 0x8}, 0x28) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x4000810) 18.233351177s ago: executing program 2 (id=1039): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x15001}}, 0x20}}, 0x0) 18.140084951s ago: executing program 2 (id=1040): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) socket$kcm(0x2, 0x5, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r0, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x1b59, 0x8}}}}}}}, 0x42) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25040100800c000300000000000000000014"], 0x114}], 0x1}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) gettid() sendmsg$nl_generic(r7, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000002c00)={0x14, 0x13, 0x4, 0x70bd27, 0x25dfdbfd, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008054}, 0x40800) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 18.081328023s ago: executing program 1 (id=1041): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="efbc7b96e2622a825f7bb9da7e11e4e9d634bef4d1e0595397b00b6f93254ad4886a1a3c616b652ffd0f0a44999cc0b186611b7f0fc398c33ebff06407b4550c0a2d2c3036ca4cfa96100142be2feee309137b9e78addedc9a3739ae9b687a81d662225c628ffb31ede8a03f37de0924cfbcb76c6730df8542b30b2af3c761a1b2df73a0865e233c16862cc64197bf41b6f16e7c8aeee976d70ab91669707c41ce0490", 0xa3}, {&(0x7f00000000c0)="2c70886f5b6660993997d41890c2cf2d47401584411564328970ddcf9a7029b0ada0cce9cca7ce7f7e37e15ac582adbd0fc0cfc05435f341949d53a742cea7fd16444d278e2ef50207cb9e6fc1e727059c359530f56e1608656cda104e57", 0x5e}, {&(0x7f0000000180)="810c4b2140a28e409620107d4be261e0eab63adcf4806dda9f4ce4bfce1d1d078c9d0a0aa6d039108a02c8824404d2815b482c49be32eeb3b2b7b2e64388b25c94dc4bd22cdb00b348d2d61e59daf75ee2097b2ef6e1cd318534263e29d2ce24ead0b04f810d51c99c688f148fd82c508ee866daef87ca0a04bf31", 0x7b}, {&(0x7f0000000200)="66ccef8748531fb5a58ffc27ae8bd32ea5b1c2d9027f613f58a92ce25751193d641d74b677fc4c3005d238db5af5c42647d1cf201321bd507bf367c907bf27501f9e142da7a1e82f669deae43962c86d07cbfecfaf760dc447b03f2454fa080c819c089ac0f3394d894b92566a189d69cd298a135b8f3b0610638083d12c297da299113723c2cf016043c4d55b18049dcf0ae292e484671b9894afde2569b3a4ee983dd4950235e9f15edf2ff78d43", 0xaf}, {&(0x7f00000002c0)="1d444a76944553ca04bc37b931c89d3981555e4e426cf7b773", 0x19}, {&(0x7f0000000300)="b844e33f3c643488a0363da3a2044e6d00bb057abd5ec356ac07c6b607b9f21b0f0a2c21bc9adb20e2a65826520783cc75fa3d5c4d9df2aa738c477b9065dab00d4747290aaf78ac5ad40ab2992953dec19e7b9f47d2da443d902d3cb33f5ef5c9c71c41b7abef2697b5ab87a89afeb757532178bfb7c152599c59a0c2248174275830a5e1c738d294af91074fca58d9e8269043e285fc76b7a58488663192d185f7f5f7741354d75ca9c9cb1a97e6f8a8fb963eb2fa6fc1efd440a838981494fc57c5e3ae96793827028bd020946fcb41b54b6fd6cb5f8b52e79acf750aa3a81770b3af67fd28cbf5777e8eb18771c6354101", 0xf3}], 0x6, &(0x7f0000000480)}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)="ceb24bcc654ad1639284217432b2c0654b8886752a2e76d4c4b3829950619cf030f73ab7d71ae16502ec79c0382d12b8bfc7a582f01bb7e3281b8ac8d1487c99a479e6b1dc623ffa33434c1e39bfa4db055681a4875a8753847048acb9b9fc5ea9c300d0260bc1b270da7e88c897ec061167fb7134e97f48f038ae8d8f84a3b0602592b1d924a65d5ff42205238d25202c291b58883a3f8d2ffe552c088ed7521ce5045db5104eb06bbd82ac0fe91569adec0fa007627c01a6758cab1eefcd665fc51c2c126bc7a7713f583be51bf5d9115637", 0xd3}, {&(0x7f0000000600)="a076b559f6383948804a3f86416d509a97daf3ca05acb4980dbb4927f061187fc311e51b9f0f2f036b8b9cc2d40e7e7cf9cea23ba0a89d83cf770af1741acec58e9638ed9c251201bda2f8300ded91c3c326b2e91d363d3efadac4c5f970a1c878c195fa7abcab7d4630fd093d39c743e6bb9f60d5bb916e81fdee03c8291dd31ab3cd503605621cfee13f3ade", 0x8d}], 0x2, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xea}}], 0x18}}, {{&(0x7f0000000740)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000780)="ed87dd178c0fd14f74052488cde0f04e53cf053d21a037c339a42f4d6ab730cfa5d6752c93ecd8b783dc17ca842d1e25f72a42ede24c02f0c9b34c732b2acc159d12a656b3e9249ca52ce4fe40688c1d201875c86c0b8accf2b37f9315c0d6a14929cc11f895f0400d33df5eca8c63cf3bfdf912d523fe0c869b8aa4aa9082ce9dff4d0be14bdea8cc14480ac6411d860b84c3e2be243166b6cf9cff62677e0d83", 0xa1}], 0x1, &(0x7f0000000880)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1f9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x44}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}], 0x78}}], 0x3, 0x4) write(r0, &(0x7f0000000140)="2600000026004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) 18.071810903s ago: executing program 0 (id=1042): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fe8800000000000000000000000000a063d04da5b219b701ac1414aa000000000000000000000000000107944e230005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r3, 0x1, 0x70bd25, 0x0, {{}, {0x0, 0x4108}, {0x14, 0x18, {0x732, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) unshare(0x2c020400) ioctl$sock_SIOCGIFCONF(r5, 0x8912, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 17.983005094s ago: executing program 1 (id=1043): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x1b4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000140)="404e8269db2bfd39d0df9eda352d1073bcd2aef6ccf89d0bde3c37e135354087093ddb9990700c33fd72ed12fef37764532d4662b4151b3d39f8b94d1c851c7635f40eaea8a126fb03d000011c8ff51ff2034a22482a412d6f7ef3579d710df850c4a8d1230dd75f0c3e01adbd4d7423fc7fccd81a14e0f27c173247707a3b8a5867aad17ed86e9fe8688aa1b726518f3c76231f3ca18b64bbe383b56ae9b11d2aee5022a27c5f22d6f6caef3bfaa6dabad21c0a5a5d", 0xb6}, {&(0x7f00000002c0)="a644436d07214f1640fa2ebf0cf31abf010854f9b04422775df039843c98b72f45eb1ae7", 0x24}], 0x2}}], 0x2, 0x480e0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 17.909142252s ago: executing program 3 (id=1044): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000030500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900070000000000000010"], 0x38}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x800e}]}}]}, 0x38}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) (async) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) (async) r11 = socket$alg(0x26, 0x5, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r13, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00", @ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r12, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, r1, 0x10, 0x70bd2d, 0x25dfdbfc}, 0xfffffffffffffd9c}, 0x1, 0x0, 0x0, 0x5}, 0x8010) (async) bind$alg(r11, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r14 = accept4(r11, 0x0, 0x0, 0x0) (async) r15 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r15, 0x114, 0x6, 0x0, 0x60) (async) sendmmsg$alg(r14, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x20000000}], 0x5, 0xc0) (async) recvmmsg(r14, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/53, 0x35}], 0x1}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) (async) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r10, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24044000) 17.908708202s ago: executing program 0 (id=1045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000308000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x1c, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @mcast1, 0x4, 0x1, 0x8, 0x6}}}}}}, 0x0) 17.856443777s ago: executing program 3 (id=1046): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f000000d540)={'wpan0\x00'}) recvmmsg(r1, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17.823737029s ago: executing program 0 (id=1047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000301af40bcdca0000000000000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000002c0)={0x9, &(0x7f0000000240)=[{0x8001, 0x8, 0x5e, 0xb}, {0x1, 0xf, 0x6, 0xed1}, {0x80, 0x6, 0x4c, 0x8}, {0x81, 0x10, 0x5, 0x200}, {0x2, 0x2, 0x2f, 0x9}, {0xfffd, 0xf, 0x5, 0x9}, {0x5, 0x8, 0x0, 0x800}, {0x3, 0x80, 0x1, 0x6}, {0x4f13, 0x5, 0xfa}]}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000080)=0x4, 0x4) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="0000000000000000db0000000001000018000000010000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x8001, 0x10}, &(0x7f0000000100)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000005300000057000e0048"], 0x80}}, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r10 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r10, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000580)="618755", 0x3}], 0x1}}], 0x1, 0xc004) sendmmsg$unix(r10, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x7ff, 0x913d, 0x0, 0x6, 0xf42, 0x7}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000810000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000892500"/18], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r12, 0x0, 0x0}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 17.757686334s ago: executing program 2 (id=1048): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x5, &(0x7f0000000040)=""/70, &(0x7f0000000100)=0x46) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 17.752621037s ago: executing program 3 (id=1049): r0 = socket(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0x2, 0x1ff}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) 17.701064295s ago: executing program 0 (id=1050): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) pselect6(0x40, &(0x7f0000000840)={0x1, 0x0, 0x7, 0x0, 0x10, 0xfffffffffffffffb, 0x2400000000000, 0x6}, &(0x7f00000008c0)={0x40008, 0x7, 0x7, 0xfffffffffffffff7, 0x6, 0x1b4d0873, 0x6, 0x2}, &(0x7f0000000900)={0x1, 0x9, 0x7fffffffffffffff, 0x1, 0x0, 0x2, 0x5, 0xfff}, &(0x7f0000000940)={0x77359400}, &(0x7f00000009c0)={&(0x7f0000000980)={[0x3ff]}, 0x8}) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="450000007f000c535a00000000010800b3effc372d18dee5a72574", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRESDEC=r0], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008080) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x64, r9, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x5b}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x4, 0x7}], "4627c99e10e91f7b"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x5, 0x1}, {0x4}, {0x3, 0x7}, {0x81, 0x6}, {0x2, 0x2}], "029ce5cf865fa196"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x7}, {0x9, 0x1}, {0x5, 0x2}], "e792a087375ae7d1"}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r11, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100272f5300fcdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x16, 0x4, 0x1, 0x21, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@multicast1, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xb, 0x29, [@broadcast, @local]}, @noop]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) 17.662720204s ago: executing program 2 (id=1051): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB], 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100001002bbd7000f4dbdf2500000000", @ANYRES32=r3, @ANYBLOB="130002003b9201001c00128009000100626f6e64000000000c00028008001a"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) unshare(0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r10, 0x5c5, 0x0, 0x81, 0x3, 0x5}, 0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000300)={r10, 0xffff}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000240)=0x10, 0x4) socket$packet(0x11, 0x2, 0x300) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r11, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1f, {[0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe3, 0x3]}}, 0x5c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r7, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 17.39877586s ago: executing program 3 (id=1052): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r1, 0x100, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x20008894}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x6}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) (async) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b000885000000710000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r7 = socket(0x10, 0x1, 0x3) sendmsg$kcm(r7, 0x0, 0x50) (async) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f", 0x1f) (async) listen(r6, 0xfffffffc) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPSET_CMD_LIST(r5, 0x0, 0x0) (async, rerun: 32) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0700000000000000000002000000140001800600e9ff0100000008000300ac1414aa"], 0x28}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 17.325162997s ago: executing program 4 (id=1053): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x17}}, {{0x6, 0x0, 0x5, 0x9, 0x0, 0x1, 0xa00}, {0x27}}, [], {{0x4, 0x1, 0x9, 0x3, 0x2}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x880, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc42, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0xd4af, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18004, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x10008000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0x3fc, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x1, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x9, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x6, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x54, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0xfffffe00, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x6000000, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x42, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x200009, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r6, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x20040800) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000001280)={'sit0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.211092482s ago: executing program 4 (id=1054): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) unshare(0x24040400) connect$bt_rfcomm(r0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}}, 0x4000000) 17.065275991s ago: executing program 1 (id=1055): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@setlink={0x28, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@setlink={0x28, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x28}}, 0x0) 16.965224717s ago: executing program 1 (id=1056): socket(0x1e, 0x4, 0x0) (async, rerun: 32) r0 = socket(0xa, 0x1, 0x0) (async, rerun: 32) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, 0x0, 0x0) (async) unshare(0x68040200) (async) socket(0x2a, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r4) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/373, @ANYRES16=r5, @ANYBLOB="567ab24062c988c38120bd997dab66a199d32c2909598360f96e948889643c4502be96f1cb395d698e2ce58e811cf20a"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r8, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) (async) close(0x3) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x6, 0x3, [0x9, 0x3, 0x3]}, 0xe) (async) bind$bt_hci(r7, 0x0, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x0) 16.472272108s ago: executing program 1 (id=1057): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000000001050500000000000000000a000005440002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000000600034000020000"], 0x58}}, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e29, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@getstats={0x1c, 0x5e, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [""]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 16.318475836s ago: executing program 4 (id=1058): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0xb, 0x0, 0x0, 0x8, 0xffffffffffffffff}]}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x20000000) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000900000000007a3d133b35a446"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x30, &(0x7f0000000100)=r3, 0x5042) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000003e58000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901001d0000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r10}, &(0x7f0000000400), &(0x7f0000000440)=r9}, 0x20) (async) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x20000000) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x27af, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r13, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @alu={0x7, 0x0, 0x0, 0xb, 0xb, 0x6, 0xfffffffffffffff0}, @generic={0xfc, 0xe, 0x0, 0x0, 0x5}, @alu={0x4, 0x1, 0xc, 0x1, 0x2, 0xfffffffffffffff4, 0x4}, @call={0x85, 0x0, 0x0, 0x65}]}, &(0x7f0000000100)='GPL\x00', 0xfffffeff, 0x40, &(0x7f0000000140)=""/64, 0x41000, 0x3c, '\x00', r1, @sk_skb=0x5, r2, 0x8, &(0x7f0000000240)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x8, 0x8e8, 0x10001}, 0x10, r6, 0xffffffffffffffff, 0x7, &(0x7f00000003c0)=[r8, 0x1, r10, r12, r13], &(0x7f0000000400)=[{0x2, 0x4, 0x4, 0x1}, {0x3, 0x5, 0x4, 0x7}, {0x0, 0x5, 0x0, 0x1}, {0x2, 0x4, 0xf, 0x1}, {0x0, 0x2, 0x1, 0x3}, {0x4, 0x1, 0x1, 0x3}, {0x1, 0x3, 0x0, 0x6}], 0x10, 0x70d}, 0x94) 16.245177972s ago: executing program 4 (id=1059): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x100, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x2000, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r9, 0x40004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x48}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x100000, {0x0, 0x0, 0x0, r9, {0x6}, {}, {0x8}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r3, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) 16.049603689s ago: executing program 4 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f000000d540)={'wpan0\x00'}) recvmmsg(r1, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2.050494896s ago: executing program 32 (id=1050): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) pselect6(0x40, &(0x7f0000000840)={0x1, 0x0, 0x7, 0x0, 0x10, 0xfffffffffffffffb, 0x2400000000000, 0x6}, &(0x7f00000008c0)={0x40008, 0x7, 0x7, 0xfffffffffffffff7, 0x6, 0x1b4d0873, 0x6, 0x2}, &(0x7f0000000900)={0x1, 0x9, 0x7fffffffffffffff, 0x1, 0x0, 0x2, 0x5, 0xfff}, &(0x7f0000000940)={0x77359400}, &(0x7f00000009c0)={&(0x7f0000000980)={[0x3ff]}, 0x8}) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="450000007f000c535a00000000010800b3effc372d18dee5a72574", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRESDEC=r0], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008080) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x64, r9, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x5b}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x4, 0x7}], "4627c99e10e91f7b"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x5, 0x1}, {0x4}, {0x3, 0x7}, {0x81, 0x6}, {0x2, 0x2}], "029ce5cf865fa196"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x7}, {0x9, 0x1}, {0x5, 0x2}], "e792a087375ae7d1"}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r11, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100272f5300fcdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x16, 0x4, 0x1, 0x21, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@multicast1, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xb, 0x29, [@broadcast, @local]}, @noop]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) 2.015343052s ago: executing program 33 (id=1051): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYBLOB], 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100001002bbd7000f4dbdf2500000000", @ANYRES32=r3, @ANYBLOB="130002003b9201001c00128009000100626f6e64000000000c00028008001a"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) unshare(0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r10, 0x5c5, 0x0, 0x81, 0x3, 0x5}, 0x14) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000300)={r10, 0xffff}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000240)=0x10, 0x4) socket$packet(0x11, 0x2, 0x300) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r11, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1f, {[0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe3, 0x3]}}, 0x5c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r7, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 1.972263341s ago: executing program 34 (id=1052): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r1, 0x100, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x20008894}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x6}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) (async) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b000885000000710000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r7 = socket(0x10, 0x1, 0x3) sendmsg$kcm(r7, 0x0, 0x50) (async) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f", 0x1f) (async) listen(r6, 0xfffffffc) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPSET_CMD_LIST(r5, 0x0, 0x0) (async, rerun: 32) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0700000000000000000002000000140001800600e9ff0100000008000300ac1414aa"], 0x28}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.033577688s ago: executing program 35 (id=1057): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000000001050500000000000000000a000005440002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000000600034000020000"], 0x58}}, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e29, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x62040200) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@getstats={0x1c, 0x5e, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [""]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 0s ago: executing program 36 (id=1060): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$inet6(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f000000d540)={'wpan0\x00'}) recvmmsg(r1, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) kernel console output (not intermixed with test programs): 01172][ T7250] tipc: Resetting bearer [ 114.642015][ T7232] tipc: Resetting bearer [ 114.715035][ T7232] tipc: Disabling bearer [ 114.760743][ T7252] validate_nla: 1 callbacks suppressed [ 114.760759][ T7252] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 114.924623][ T7267] netlink: 'syz.2.327': attribute type 1 has an invalid length. [ 115.189730][ T7281] netlink: 240 bytes leftover after parsing attributes in process `syz.0.329'. [ 115.779972][ T7307] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 115.812997][ T7307] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 116.800505][ T7319] workqueue: Failed to create a rescuer kthread for wq "nfc22_nci_tx_wq": -EINTR [ 116.828636][ T7392] tipc: Trying to set illegal importance in message [ 116.971193][ T7392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.346'. [ 117.295900][ T7411] netlink: 180 bytes leftover after parsing attributes in process `syz.3.351'. [ 117.406705][ T7414] netlink: 144 bytes leftover after parsing attributes in process `syz.2.350'. [ 117.424837][ T7407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.480064][ T7414] netlink: 'syz.2.350': attribute type 15 has an invalid length. [ 117.621032][ T7407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.846630][ T7407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.044764][ T7407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.133547][ T980] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0 [ 118.171017][ T980] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0 [ 118.207457][ T980] hid-generic 0005:15C2:5505.0001: reserved main item tag 0xe [ 118.278304][ T980] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 118.477374][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.555460][ T4215] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.578103][ T4215] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.661132][ T2992] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.810899][ T7446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.360'. [ 118.924008][ T7445] macvlan1: entered allmulticast mode [ 119.211917][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 119.231089][ C0] vcan0: j1939_session_tx_dat: 0xffff888033477c00: queue data error: -100 [ 119.241764][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 119.248402][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 119.254952][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 119.261379][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.269358][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.277211][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.285161][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.293028][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.300949][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.308822][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.316800][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.324658][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.332654][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.340469][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.348435][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.356284][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.364232][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.372050][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.380006][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.387862][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.395828][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.403680][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.411596][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.419516][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.427468][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.435338][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.443281][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.451093][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.459041][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.466890][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.474832][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.482677][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.490591][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.498451][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.506387][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.514248][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.522152][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.530009][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.538056][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.545937][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.553883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.561702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.569747][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.577597][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.585545][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.593379][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.601252][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.609093][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.617000][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.624865][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.632805][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.640615][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.648565][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.656410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.664352][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.672159][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.680081][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.687920][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.695850][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.703684][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.711542][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.719384][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.727319][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.735179][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.743091][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.750890][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.758825][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.766654][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.774597][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.782438][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.790347][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.798191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.806097][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.813930][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.821805][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.829639][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.837535][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.845387][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.853286][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.861076][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.868998][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.876839][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.884762][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.892609][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.900515][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.908378][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.916315][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.924163][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.932065][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.939914][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.947815][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.955674][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.963574][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.971364][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.979290][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 119.987123][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 119.995041][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.002881][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.010741][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.018571][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.026465][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.034310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.042180][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.050028][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.057968][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.065828][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.075625][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.083518][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.091433][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.099310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.107292][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.115739][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.123702][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.131521][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.140162][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.148039][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.155998][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.163851][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.171763][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.179627][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.187578][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.195463][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.203395][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.211218][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.219170][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.227014][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.234939][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.242779][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.250642][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.258473][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.266366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.274204][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.282112][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.289975][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.297866][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.305710][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.313637][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.321450][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.329360][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.337203][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.345188][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.353043][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.360981][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.368845][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.376732][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.384561][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.392493][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.400299][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.408215][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.416047][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.423957][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.431772][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.439712][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.447547][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.455456][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.463300][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.471170][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.478994][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.486956][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.494799][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.502756][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.510571][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.518495][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.526323][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.534246][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.542051][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.549970][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.557818][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.565802][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.573640][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.581589][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.589420][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.597367][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.605217][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.613120][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.620920][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.628873][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.636723][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.644677][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.652518][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.660410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.668264][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.676150][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.683982][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.691845][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.699672][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.707555][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.715392][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.723289][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.731077][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.738998][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.746830][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.754760][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.762607][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.770476][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.778311][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.786290][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.794153][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.802069][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.809906][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.817797][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.825636][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.833568][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.841375][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.849289][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.857124][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.865060][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.872895][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.880745][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.888585][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.896485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.904318][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.912194][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.920043][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.927976][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.935841][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.943781][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.951596][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.959551][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.967405][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.975355][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.983206][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.991115][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.998977][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.006935][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.015147][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.023103][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.030930][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.038879][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.046728][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.054677][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.062531][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.070449][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.078329][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.088842][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.096744][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.104691][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.112557][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.120467][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.128347][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.136296][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.144173][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.152092][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.159974][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.167915][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.175785][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.183729][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.191546][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.199497][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.207353][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.215300][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.223144][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.231044][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.238905][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.246849][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.254710][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.262635][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.270455][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.278402][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.286248][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.294191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.302005][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.309954][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.317801][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.325738][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.333582][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.341489][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.349362][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.357295][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.365163][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.373100][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.380925][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.388892][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.396748][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.404704][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.412575][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.420485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.428364][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.436305][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.444176][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.452089][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.459949][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.467883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.475746][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.483679][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.491493][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.499443][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.507295][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.515241][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.523101][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.531009][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.538869][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.546800][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.554657][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.562587][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.570390][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.578297][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.586127][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.594042][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.601847][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.609773][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.617603][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.625512][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.633340][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.641185][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.649033][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.656955][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.664809][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.672746][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.680554][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.688482][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.696310][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.704231][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.712040][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.912971][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.368'. [ 121.963348][ T7482] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.369'. [ 122.006128][ T7482] netlink: zone id is out of range [ 122.012820][ T7482] netlink: zone id is out of range [ 122.018072][ T7482] netlink: zone id is out of range [ 122.023603][ T7482] netlink: zone id is out of range [ 122.028831][ T7482] netlink: get zone limit has 8 unknown bytes [ 122.274588][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 122.312933][ T7496] netlink: 'syz.3.372': attribute type 20 has an invalid length. [ 122.341977][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.373'. [ 122.362738][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 122.437738][ T3540] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.453049][ T3540] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.483532][ T3540] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.509225][ T3540] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.764340][ T7511] netlink: 96 bytes leftover after parsing attributes in process `syz.0.376'. [ 122.794941][ T7511] netlink: 76 bytes leftover after parsing attributes in process `syz.0.376'. [ 122.914339][ T7513] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 122.929392][ T7516] macsec1: entered promiscuous mode [ 122.934979][ T7516] macsec1: entered allmulticast mode [ 122.958046][ T5234] udevd[5234]: worker [5878] terminated by signal 33 (Unknown signal 33) [ 123.181003][ T7529] netlink: 212400 bytes leftover after parsing attributes in process `syz.4.381'. [ 123.208197][ T7525] tipc: Enabled bearer , priority 0 [ 123.210830][ T7529] netlink: zone id is out of range [ 123.216467][ T7525] syzkaller0: entered promiscuous mode [ 123.225583][ T7529] netlink: zone id is out of range [ 123.225613][ T7529] netlink: zone id is out of range [ 123.225622][ T7529] netlink: zone id is out of range [ 123.225631][ T7529] netlink: get zone limit has 8 unknown bytes [ 123.251878][ T7525] syzkaller0: entered allmulticast mode [ 123.299384][ T7525] tipc: Resetting bearer [ 123.310637][ T7534] netlink: 'syz.3.382': attribute type 2 has an invalid length. [ 123.337398][ T7524] tipc: Resetting bearer [ 123.434474][ T7524] tipc: Disabling bearer [ 123.525435][ T7545] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 124.430314][ T7571] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 124.466868][ T7571] __nla_validate_parse: 3 callbacks suppressed [ 124.466887][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 124.635353][ T7578] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.395'. [ 124.814392][ T7584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.986173][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 125.208366][ T7608] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.447715][ T7624] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.408'. [ 125.605088][ T7634] netlink: 'syz.3.410': attribute type 1 has an invalid length. [ 125.675673][ T7636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.410'. [ 125.688453][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.410'. [ 125.697797][ T7636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.410'. [ 125.716637][ T7636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.410'. [ 125.830117][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 125.973465][ T7645] netlink: 84 bytes leftover after parsing attributes in process `syz.0.412'. [ 126.324021][ T7672] netlink: 212400 bytes leftover after parsing attributes in process `syz.0.419'. [ 126.497312][ T7678] block nbd0: shutting down sockets [ 126.940356][ T7704] netlink: 'syz.0.430': attribute type 17 has an invalid length. [ 127.051251][ T7710] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 127.118317][ T7710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.221789][ T7710] bond1: (slave gretap1): making interface the new active one [ 127.247611][ T7710] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 127.439214][ T7730] netlink: 'syz.0.436': attribute type 13 has an invalid length. [ 127.458966][ T7730] netlink: 'syz.0.436': attribute type 17 has an invalid length. [ 127.654637][ T7730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.676136][ T7730] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.700283][ T7730] net_ratelimit: 21 callbacks suppressed [ 127.700295][ T7730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.870688][ T7746] netlink: 'syz.4.440': attribute type 13 has an invalid length. [ 127.878855][ T7749] netlink: 'syz.4.440': attribute type 13 has an invalid length. [ 128.037043][ T7746] bridge0: port 3(syz_tun) entered disabled state [ 128.069066][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.070751][ T7761] netlink: 'syz.3.442': attribute type 13 has an invalid length. [ 128.076837][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.087037][ T7761] netlink: 'syz.3.442': attribute type 17 has an invalid length. [ 128.199795][ T7746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.221890][ T7746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.270171][ T7746] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 128.484112][ T7761] gretap0: refused to change device tx_queue_len [ 128.490942][ T7761] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 128.522835][ T7626] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.553610][ T7626] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.575141][ T7626] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.602562][ T7768] netlink: zone id is out of range [ 128.607718][ T7768] netlink: zone id is out of range [ 128.613952][ T7626] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.633718][ T7626] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.650677][ T7768] netlink: zone id is out of range [ 128.665933][ T7768] netlink: zone id is out of range [ 128.680576][ T7626] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.689762][ T7768] netlink: get zone limit has 8 unknown bytes [ 128.734201][ T7626] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.781730][ T7626] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.066788][ T5869] Bluetooth: hci4: link tx timeout [ 129.073955][ T5869] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.123397][ T7781] veth3: entered promiscuous mode [ 129.446122][ T7795] tipc: Started in network mode [ 129.466049][ T7795] tipc: Node identity 12219c4583e8, cluster identity 4711 [ 129.493142][ T7795] tipc: Enabled bearer , priority 0 [ 129.514968][ T7798] syzkaller0: entered promiscuous mode [ 129.544319][ T7798] syzkaller0: entered allmulticast mode [ 129.645699][ T7798] tipc: Resetting bearer [ 129.748533][ T7794] tipc: Resetting bearer [ 129.794904][ T7794] tipc: Disabling bearer [ 129.924572][ T7814] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 129.982775][ T7814] bond3: entered promiscuous mode [ 129.987946][ T7814] bond3: entered allmulticast mode [ 129.993843][ T7814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.027123][ T7819] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 130.417263][ T7838] macsec2: entered promiscuous mode [ 130.423342][ T7838] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 130.432164][ T7838] macsec2: entered allmulticast mode [ 130.442132][ T7838] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 130.814491][ T7858] bridge0: port 3(syz_tun) entered blocking state [ 130.821042][ T7858] bridge0: port 3(syz_tun) entered forwarding state [ 130.835689][ T7858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.846831][ T7858] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.856781][ T7858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.144854][ T5873] Bluetooth: hci4: command 0x0405 tx timeout [ 131.157649][ T7877] __nla_validate_parse: 6 callbacks suppressed [ 131.157667][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 131.263570][ T7883] netlink: 'syz.2.473': attribute type 4 has an invalid length. [ 131.534829][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 131.932222][ T7929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.487'. [ 131.965453][ T7929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.487'. [ 132.020667][ T7929] team0: entered promiscuous mode [ 132.047568][ T7929] bond0: entered promiscuous mode [ 132.059773][ T7929] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 132.073384][ T7929] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 132.084072][ T7929] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 132.098081][ T7929] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 132.746640][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.758524][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.776754][ T7972] team0: Device ipip0 is of different type [ 132.840027][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.500'. [ 132.868036][ T7976] syzkaller0: entered promiscuous mode [ 132.893180][ T7976] syzkaller0: entered allmulticast mode [ 132.915690][ T7973] tipc: Enabled bearer , priority 0 [ 132.978540][ T7982] macvlan1: entered allmulticast mode [ 132.988925][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.503'. [ 133.005833][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.503'. [ 133.024050][ T7972] tipc: Resetting bearer [ 133.047088][ T7984] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 133.053826][ T7984] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 133.097197][ T7972] tipc: Resetting bearer [ 133.133626][ T7972] tipc: Disabling bearer [ 133.229013][ T7996] netlink: 'syz.1.506': attribute type 1 has an invalid length. [ 133.496502][ T8011] syzkaller1: entered promiscuous mode [ 133.503629][ T8011] syzkaller1: entered allmulticast mode [ 133.551956][ T8014] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 133.560954][ T8014] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 134.398145][ T8024] netlink: 'syz.3.516': attribute type 7 has an invalid length. [ 134.406831][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.516'. [ 134.589152][ T8034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.519'. [ 134.630243][ T8026] syzkaller0: entered promiscuous mode [ 134.638289][ T8034] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 134.657044][ T8026] syzkaller0: entered allmulticast mode [ 136.084031][ T8053] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bond, syncid = 4, id = 0 [ 136.117189][ T8049] !: renamed from dummy0 (while UP) [ 136.280380][ T8058] tipc: Enabled bearer , priority 0 [ 136.288900][ T8058] syzkaller0: entered promiscuous mode [ 136.310629][ T8058] syzkaller0: entered allmulticast mode [ 136.351124][ T8058] netlink: 'syz.2.524': attribute type 13 has an invalid length. [ 136.375600][ T8058] tipc: Resetting bearer [ 136.389980][ T8055] tipc: Resetting bearer [ 136.415607][ T8055] tipc: Disabling bearer [ 136.627316][ T8082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.534'. [ 136.652605][ T8084] netlink: 'syz.0.532': attribute type 7 has an invalid length. [ 136.670931][ T8082] nbd: socks must be embedded in a SOCK_ITEM attr [ 136.683228][ T8084] netlink: 'syz.0.532': attribute type 8 has an invalid length. [ 136.716977][ T8084] netlink: 'syz.0.532': attribute type 13 has an invalid length. [ 136.734843][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 136.750015][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.532'. [ 137.039652][ T8094] trusted_key: syz.3.526 sent an empty control message without MSG_MORE. [ 137.236822][ T8103] netlink: 'syz.4.538': attribute type 3 has an invalid length. [ 137.251559][ T8103] macvlan1: left allmulticast mode [ 137.261630][ T8103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.538'. [ 137.275212][ T8103] erspan0: left promiscuous mode [ 137.290820][ T8103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.587671][ T8117] netlink: 'syz.0.542': attribute type 12 has an invalid length. [ 138.060521][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.087113][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.100307][ T8145] syzkaller1: entered promiscuous mode [ 138.106714][ T8145] syzkaller1: entered allmulticast mode [ 138.443915][ T8155] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 138.450594][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.553'. [ 138.641319][ T8166] netlink: 32 bytes leftover after parsing attributes in process `syz.1.556'. [ 138.650878][ T8166] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 138.814802][ T8175] rdma_op ffff888078e209f0 conn xmit_rdma 0000000000000000 [ 139.142893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.303112][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.566'. [ 139.312087][ T8193] tc_dump_action: action bad kind [ 139.406221][ T8198] netlink: 52 bytes leftover after parsing attributes in process `syz.0.566'. [ 139.457657][ T8198] vcan0: entered allmulticast mode [ 140.361096][ T8238] IPv6: sit1: Disabled Multicast RS [ 140.367914][ T8238] sit1: entered allmulticast mode [ 140.393418][ T8240] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 140.403712][ T8242] syzkaller1: entered promiscuous mode [ 140.409348][ T8242] syzkaller1: entered allmulticast mode [ 140.533516][ T8246] dvmrp8: entered allmulticast mode [ 140.543745][ T8246] dvmrp8: left allmulticast mode [ 140.596565][ T8252] netlink: 168 bytes leftover after parsing attributes in process `syz.2.579'. [ 140.667557][ T8257] batadv_slave_0: entered promiscuous mode [ 140.698961][ T8255] batadv_slave_0: left promiscuous mode [ 140.845677][ T8269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.586'. [ 141.343203][ T30] audit: type=1107 audit(1758963663.027:2): pid=8298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='œší÷‘(9æ ´Ú]KúA ˆñðS ›žž禩Pp\¥dw›ÀGmŸ?àNД½¿UcC°èó!"Ú†ÀäÜ¢¶ÂKã«1, priority 0 [ 143.264732][ T8399] syzkaller0: entered promiscuous mode [ 143.283744][ T8399] syzkaller0: entered allmulticast mode [ 143.385894][ T8397] tipc: Resetting bearer [ 143.414420][ T8396] tipc: Resetting bearer [ 143.430099][ T8396] tipc: Disabling bearer [ 144.030329][ T8425] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 144.050271][ T8422] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 144.050647][ T5972] IPVS: starting estimator thread 0... [ 144.062380][ T8425] netlink: 228 bytes leftover after parsing attributes in process `syz.2.622'. [ 144.163224][ T8428] IPVS: using max 28 ests per chain, 67200 per kthread [ 144.413111][ T8443] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 144.454346][ T8443] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 144.490355][ T8443] team0: Failed to send options change via netlink (err -105) [ 144.500013][ T8443] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 144.517517][ T8443] team0: Port device dummy0 removed [ 144.528560][ T8443] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 145.094407][ T8461] netlink: 'syz.0.632': attribute type 3 has an invalid length. [ 145.157753][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 145.189753][ T8465] dvmrp8: entered allmulticast mode [ 145.309208][ T8464] dvmrp8: left allmulticast mode [ 145.444175][ T8471] netlink: 'syz.3.635': attribute type 13 has an invalid length. [ 145.480493][ T8471] netlink: 'syz.3.635': attribute type 17 has an invalid length. [ 145.605627][ T8471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.639617][ T8471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.731071][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'. [ 146.124721][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 146.144368][ T8489] netlink: 312 bytes leftover after parsing attributes in process `syz.3.640'. [ 146.159654][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 146.363854][ T8495] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8) [ 146.836399][ T8526] __nla_validate_parse: 3 callbacks suppressed [ 146.836417][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'. [ 146.886579][ T8526] tipc: Enabling of bearer rejected, failed to enable media [ 146.989368][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 147.086031][ T8532] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.654'. [ 147.328301][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 147.347673][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.657'. [ 149.003270][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 149.684489][ T8616] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 149.803835][ T8626] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 150.088055][ T8639] lo: entered allmulticast mode [ 150.107632][ T8639] lo: left allmulticast mode [ 150.123713][ T8639] netlink: 'syz.0.680': attribute type 12 has an invalid length. [ 150.224680][ T8646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.679'. [ 150.242425][ T8639] nbd0: detected capacity change from 0 to 63 [ 150.247929][ T8645] netlink: 132 bytes leftover after parsing attributes in process `syz.0.680'. [ 150.418919][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.682'. [ 150.554041][ T8660] netlink: 40 bytes leftover after parsing attributes in process `syz.4.686'. [ 150.587830][ T8655] syzkaller0: entered promiscuous mode [ 150.594682][ T8655] syzkaller0: entered allmulticast mode [ 150.909371][ T8675] tipc: New replicast peer: 255.255.255.255 [ 150.917812][ T8675] tipc: Enabled bearer , priority 26 [ 151.593370][ T8705] tipc: Enabled bearer , priority 0 [ 151.667056][ T8706] syzkaller0: entered promiscuous mode [ 151.689926][ T8706] syzkaller0: entered allmulticast mode [ 151.829734][ T8712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.862217][ T8712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.047735][ T8712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.059500][ T8712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.173958][ T8706] tipc: Resetting bearer [ 152.215350][ T8706] tipc: Disabling bearer [ 152.226155][ T8715] __nla_validate_parse: 5 callbacks suppressed [ 152.226171][ T8715] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.699'. [ 152.593851][ T5931] tipc: Node number set to 1153091292 [ 152.930795][ T8738] netlink: 'syz.2.709': attribute type 1 has an invalid length. [ 153.015303][ T8742] netlink: 80 bytes leftover after parsing attributes in process `syz.0.707'. [ 153.166774][ T8747] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 153.183225][ T8747] bridge0: entered allmulticast mode [ 153.299203][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.714'. [ 153.319242][ T8760] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 153.433391][ T8765] netlink: 'syz.2.716': attribute type 10 has an invalid length. [ 153.522135][ T8760] bond3: (slave gretap3): making interface the new active one [ 153.578209][ T8760] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 153.665223][ T8778] syzkaller1: entered promiscuous mode [ 153.670827][ T8778] syzkaller1: entered allmulticast mode [ 153.847901][ T8792] tipc: Can't bind to reserved service type 1 [ 153.855585][ T8792] netlink: 'syz.0.727': attribute type 39 has an invalid length. [ 153.886774][ T8794] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 153.916941][ T8798] netlink: 44 bytes leftover after parsing attributes in process `syz.0.727'. [ 153.948627][ T8798] netlink: 43 bytes leftover after parsing attributes in process `syz.0.727'. [ 153.958981][ T8798] netlink: 'syz.0.727': attribute type 5 has an invalid length. [ 153.967078][ T8798] netlink: 43 bytes leftover after parsing attributes in process `syz.0.727'. [ 154.042173][ T8792] vlan2: entered allmulticast mode [ 154.564879][ T8821] netlink: 'syz.4.736': attribute type 2 has an invalid length. [ 154.584751][ T8823] netlink: 'syz.2.737': attribute type 16 has an invalid length. [ 154.600640][ T8821] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 154.609736][ T8823] netlink: 'syz.2.737': attribute type 17 has an invalid length. [ 154.628010][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 154.678094][ T8828] netlink: 100 bytes leftover after parsing attributes in process `syz.0.735'. [ 154.716197][ T8828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.735'. [ 155.029418][ T8823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.124041][ T8823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.183236][ T8827] tc_dump_action: action bad kind [ 155.207861][ T8838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.740'. [ 155.489057][ T8854] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 155.510517][ T8854] netlink: 'syz.1.743': attribute type 3 has an invalid length. [ 155.614991][ T8856] netlink: 'syz.4.744': attribute type 10 has an invalid length. [ 156.979762][ T8930] netlink: 'syz.0.763': attribute type 13 has an invalid length. [ 157.006991][ T8930] netlink: 'syz.0.763': attribute type 17 has an invalid length. [ 157.025366][ T8930] vcan0: left allmulticast mode [ 157.048308][ T8930] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.090691][ T8930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.264767][ T8943] __nla_validate_parse: 8 callbacks suppressed [ 157.264785][ T8943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.769'. [ 157.468763][ T8955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.773'. [ 157.770488][ T8965] netlink: 52 bytes leftover after parsing attributes in process `syz.2.776'. [ 157.815134][ T8931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.821320][ T8931] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 157.845827][ T8931] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.854641][ T8931] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 157.876658][ T8931] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.885246][ T8975] netlink: 64 bytes leftover after parsing attributes in process `syz.4.781'. [ 157.893770][ T8931] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 157.907789][ T8931] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.913926][ T8931] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 157.928446][ T8931] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 157.935406][ T8931] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 158.025198][ T8982] netlink: 'syz.1.780': attribute type 1 has an invalid length. [ 158.177649][ T8985] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 158.199438][ T8985] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 158.228820][ T8985] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 158.318015][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 158.367905][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.787'. [ 158.399153][ T9000] veth5: entered promiscuous mode [ 158.658885][ T9018] netlink: 'syz.2.793': attribute type 1 has an invalid length. [ 158.683038][ T9018] netlink: 224 bytes leftover after parsing attributes in process `syz.2.793'. [ 158.727350][ T9018] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 158.793284][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.796'. [ 158.869473][ T9034] netlink: 830 bytes leftover after parsing attributes in process `syz.3.798'. [ 159.102006][ T9048] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 159.163507][ T9048] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 159.192244][ T9048] netlink: 160 bytes leftover after parsing attributes in process `syz.1.800'. [ 159.203792][ T9048] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 159.563275][ T9068] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 159.619636][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 159.626476][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 159.633238][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 159.640645][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 159.647462][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 159.654216][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 159.660920][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 159.889096][ T9088] : entered promiscuous mode [ 159.914742][ T9087] bridge1: entered allmulticast mode [ 160.135173][ T9069] net_ratelimit: 2553 callbacks suppressed [ 160.135188][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 160.147722][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 160.154440][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 160.161122][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 160.167830][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 160.174557][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 160.181260][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 160.188004][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 160.194744][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 160.201461][ T9069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 160.447236][ T9089] bridge0: port 3(syz_tun) entered disabled state [ 161.958898][ T9168] validate_nla: 1 callbacks suppressed [ 161.958915][ T9168] netlink: 'syz.3.831': attribute type 4 has an invalid length. [ 162.186897][ T9173] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 162.210303][ T9173] team0: Device ipvlan2 is already an upper device of the team interface [ 162.420210][ T9184] __nla_validate_parse: 11 callbacks suppressed [ 162.420228][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 162.788027][ T9196] netlink: 'syz.0.841': attribute type 5 has an invalid length. [ 162.800013][ T9196] netlink: 28 bytes leftover after parsing attributes in process `syz.0.841'. [ 162.846760][ T9199] netlink: 168 bytes leftover after parsing attributes in process `syz.1.844'. [ 163.069980][ T9220] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.084454][ T9215] netlink: 44 bytes leftover after parsing attributes in process `syz.3.846'. [ 163.206262][ T9227] syz_tun: entered allmulticast mode [ 163.283159][ T9235] netlink: 'syz.0.850': attribute type 10 has an invalid length. [ 163.294682][ T9235] bridge0: port 3(macsec0) entered blocking state [ 163.301295][ T9235] bridge0: port 3(macsec0) entered disabled state [ 163.309443][ T9235] macsec0: entered allmulticast mode [ 163.314879][ T9235] veth1_macvtap: entered allmulticast mode [ 163.325878][ T9235] macsec0: entered promiscuous mode [ 163.332090][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'. [ 163.345062][ T9235] netlink: 48 bytes leftover after parsing attributes in process `syz.0.850'. [ 163.469702][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 163.479311][ T9247] 8021q: VLANs not supported on caif0 [ 164.014366][ T9225] syz_tun: left allmulticast mode [ 164.231909][ T9280] netlink: 60 bytes leftover after parsing attributes in process `syz.0.862'. [ 164.239681][ T9282] netlink: 'syz.4.864': attribute type 10 has an invalid length. [ 164.248858][ T9282] netlink: 40 bytes leftover after parsing attributes in process `syz.4.864'. [ 164.565333][ T9296] netlink: 'syz.0.867': attribute type 13 has an invalid length. [ 164.687705][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 165.139847][ T9329] netlink: 'syz.0.876': attribute type 5 has an invalid length. [ 165.197091][ T9333] pim6reg1: entered promiscuous mode [ 165.202759][ T9333] pim6reg1: entered allmulticast mode [ 165.219682][ T9335] netlink: 'syz.1.879': attribute type 27 has an invalid length. [ 165.599615][ T9335] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.607384][ T9335] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.362034][ T9335] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 166.454472][ T9335] ip6gre1: left allmulticast mode [ 166.504057][ T9335] bridge1: left allmulticast mode [ 166.580603][ T9365] netlink: 'syz.0.886': attribute type 4 has an invalid length. [ 166.632092][ T7626] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.697065][ T7626] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.741563][ T7626] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.784657][ T7626] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.802159][ T9371] pim6reg1: entered promiscuous mode [ 166.808424][ T9371] pim6reg1: entered allmulticast mode [ 166.861343][ T9380] hsr0: entered promiscuous mode [ 166.943046][ T9380] macsec1: entered allmulticast mode [ 166.949368][ T9380] hsr0: entered allmulticast mode [ 166.976796][ T9380] hsr_slave_0: entered allmulticast mode [ 166.995579][ T9380] hsr_slave_1: entered allmulticast mode [ 167.014648][ T9378] macvlan1: left allmulticast mode [ 167.019939][ T9378] netlink: 'syz.3.889': attribute type 2 has an invalid length. [ 167.163975][ T9387] net_ratelimit: 761 callbacks suppressed [ 167.163993][ T9387] openvswitch: netlink: Tunnel attr 214 out of range max 16 [ 167.356617][ T9397] Bluetooth: MGMT ver 1.23 [ 167.376499][ T9390] bridge2: entered promiscuous mode [ 167.381730][ T9390] bridge2: entered allmulticast mode [ 167.426973][ T9390] team0: Port device bridge2 added [ 167.429621][ T9406] __nla_validate_parse: 17 callbacks suppressed [ 167.429636][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'. [ 167.501090][ T9397] geneve2: entered promiscuous mode [ 167.548047][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 167.920290][ T9411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.932008][ T9412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.000721][ T9414] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.899'. [ 168.710990][ T9401] syz.3.897: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 168.731760][ T9401] CPU: 0 UID: 0 PID: 9401 Comm: syz.3.897 Not tainted syzkaller #0 PREEMPT(full) [ 168.731782][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.731792][ T9401] Call Trace: [ 168.731799][ T9401] [ 168.731806][ T9401] dump_stack_lvl+0x189/0x250 [ 168.731837][ T9401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.731855][ T9401] ? __pfx__printk+0x10/0x10 [ 168.731877][ T9401] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.731895][ T9401] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 168.731914][ T9401] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 168.731933][ T9401] warn_alloc+0x214/0x310 [ 168.731961][ T9401] ? __pfx_warn_alloc+0x10/0x10 [ 168.731992][ T9401] ? __get_vm_area_node+0x28f/0x300 [ 168.732013][ T9401] ? veth_dev_init+0x363/0x570 [ 168.732046][ T9401] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 168.732066][ T9401] ? veth_newlink+0x5d4/0xa60 [ 168.732109][ T9401] ? alloc_pages_mpol+0x3cd/0x4a0 [ 168.732132][ T9401] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.732152][ T9401] ? __kasan_kmalloc_large+0x1c/0xa0 [ 168.732176][ T9401] ? rcu_is_watching+0x15/0xb0 [ 168.732191][ T9401] ? veth_dev_init+0x363/0x570 [ 168.732213][ T9401] ? veth_dev_init+0x363/0x570 [ 168.732234][ T9401] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 168.732255][ T9401] ? veth_dev_init+0x363/0x570 [ 168.732290][ T9401] veth_dev_init+0x363/0x570 [ 168.732324][ T9401] register_netdevice+0x6bf/0x1ae0 [ 168.732363][ T9401] ? snprintf+0xda/0x120 [ 168.732391][ T9401] ? __pfx_register_netdevice+0x10/0x10 [ 168.732417][ T9401] ? __pfx_snprintf+0x10/0x10 [ 168.732443][ T9401] ? __asan_memset+0x22/0x50 [ 168.732464][ T9401] ? dev_addr_mod+0x2ce/0x3d0 [ 168.732496][ T9401] veth_newlink+0x5d4/0xa60 [ 168.732527][ T9401] ? __pfx_veth_newlink+0x10/0x10 [ 168.732557][ T9401] ? css_rstat_updated+0x23a/0x4f0 [ 168.732662][ T9401] ? validate_linkmsg+0x765/0x950 [ 168.732703][ T9401] ? __pfx_veth_newlink+0x10/0x10 [ 168.732733][ T9401] rtnl_newlink_create+0x310/0xb00 [ 168.732762][ T9401] ? __mutex_lock+0x5bb/0x1350 [ 168.732788][ T9401] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 168.732816][ T9401] ? __pfx___mutex_lock+0x10/0x10 [ 168.732844][ T9401] ? ns_capable+0x8a/0xf0 [ 168.732877][ T9401] rtnl_newlink+0x16e4/0x1c80 [ 168.732899][ T9401] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 168.732940][ T9401] ? __pfx_rtnl_newlink+0x10/0x10 [ 168.733050][ T9401] ? __dev_queue_xmit+0x1d79/0x3b50 [ 168.733083][ T9401] ? __lock_acquire+0xab9/0xd20 [ 168.733136][ T9401] ? __pfx_rtnl_newlink+0x10/0x10 [ 168.733152][ T9401] rtnetlink_rcv_msg+0x7cf/0xb70 [ 168.733172][ T9401] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 168.733188][ T9401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 168.733211][ T9401] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 168.733240][ T9401] netlink_rcv_skb+0x208/0x470 [ 168.733255][ T9401] ? rcu_is_watching+0x15/0xb0 [ 168.733270][ T9401] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 168.733289][ T9401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.733316][ T9401] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.733341][ T9401] netlink_unicast+0x82f/0x9e0 [ 168.733364][ T9401] ? __pfx_netlink_unicast+0x10/0x10 [ 168.733381][ T9401] ? netlink_sendmsg+0x642/0xb30 [ 168.733397][ T9401] ? skb_put+0x11b/0x210 [ 168.733418][ T9401] netlink_sendmsg+0x805/0xb30 [ 168.733443][ T9401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.733463][ T9401] ? trace_irq_disable+0x37/0x110 [ 168.733481][ T9401] ? aa_sock_msg_perm+0xf1/0x1d0 [ 168.733508][ T9401] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.733523][ T9401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.733542][ T9401] __sock_sendmsg+0x219/0x270 [ 168.733568][ T9401] ____sys_sendmsg+0x505/0x830 [ 168.733593][ T9401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.733621][ T9401] ? import_iovec+0x74/0xa0 [ 168.733644][ T9401] ___sys_sendmsg+0x21f/0x2a0 [ 168.733666][ T9401] ? __pfx____sys_sendmsg+0x10/0x10 [ 168.733718][ T9401] ? __fget_files+0x2a/0x420 [ 168.733740][ T9401] ? __fget_files+0x3a0/0x420 [ 168.733771][ T9401] __x64_sys_sendmsg+0x19b/0x260 [ 168.733794][ T9401] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 168.733830][ T9401] ? do_syscall_64+0xbe/0x3b0 [ 168.733850][ T9401] do_syscall_64+0xfa/0x3b0 [ 168.733864][ T9401] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.733887][ T9401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.733902][ T9401] ? clear_bhb_loop+0x60/0xb0 [ 168.733921][ T9401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.733936][ T9401] RIP: 0033:0x7f6dcaf8eec9 [ 168.733957][ T9401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.733971][ T9401] RSP: 002b:00007f6dcbf11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.733988][ T9401] RAX: ffffffffffffffda RBX: 00007f6dcb1e5fa0 RCX: 00007f6dcaf8eec9 [ 168.733999][ T9401] RDX: 8ae257a062cc3564 RSI: 0000200000000200 RDI: 0000000000000007 [ 168.734010][ T9401] RBP: 00007f6dcb011f91 R08: 0000000000000000 R09: 0000000000000000 [ 168.734020][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.734036][ T9401] R13: 00007f6dcb1e6038 R14: 00007f6dcb1e5fa0 R15: 00007ffdc6e551a8 [ 168.734063][ T9401] [ 169.228214][ T9401] Mem-Info: [ 169.231340][ T9401] active_anon:3866 inactive_anon:0 isolated_anon:0 [ 169.231340][ T9401] active_file:3142 inactive_file:39945 isolated_file:0 [ 169.231340][ T9401] unevictable:768 dirty:126 writeback:0 [ 169.231340][ T9401] slab_reclaimable:11787 slab_unreclaimable:146948 [ 169.231340][ T9401] mapped:30076 shmem:1357 pagetables:956 [ 169.231340][ T9401] sec_pagetables:0 bounce:0 [ 169.231340][ T9401] kernel_misc_reclaimable:0 [ 169.231340][ T9401] free:1271467 free_pcp:16237 free_cma:0 [ 169.277232][ T9401] Node 0 active_anon:15464kB inactive_anon:0kB active_file:12568kB inactive_file:159576kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120304kB dirty:504kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12240kB pagetables:3692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 169.309404][ T9401] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 169.339957][ T9401] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 169.369411][ T9401] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 169.375431][ T9401] Node 0 DMA32 free:1178076kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15420kB inactive_anon:0kB active_file:12568kB inactive_file:157752kB unevictable:1536kB writepending:504kB present:3129332kB managed:2559900kB mlocked:0kB bounce:0kB free_pcp:50836kB local_pcp:17852kB free_cma:0kB [ 169.408318][ T9401] lowmem_reserve[]: 0 0 1 1 1 [ 169.413311][ T9401] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 169.442841][ T9401] lowmem_reserve[]: 0 0 0 0 0 [ 169.447536][ T9401] Node 1 Normal free:3892416kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14180kB local_pcp:9088kB free_cma:0kB [ 169.479986][ T9401] lowmem_reserve[]: 0 0 0 0 0 [ 169.484961][ T9401] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.497782][ T9401] Node 0 DMA32: 653*4kB (M) 1387*8kB (UME) 661*16kB (UME) 862*32kB (UME) 391*64kB (UME) 115*128kB (UME) 48*256kB (UME) 58*512kB (UME) 54*1024kB (UM) 9*2048kB (UM) 237*4096kB (UM) = 1178076kB [ 169.516779][ T9401] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 169.528989][ T9401] Node 1 Normal: 150*4kB (UME) 35*8kB (UME) 31*16kB (UME) 97*32kB (UME) 29*64kB (UME) 8*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3892416kB [ 169.547341][ T9401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.557200][ T9401] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.566924][ T9401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.576742][ T9401] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.586451][ T9401] 44441 total pagecache pages [ 169.591111][ T9401] 0 pages in swap cache [ 169.595515][ T9401] Free swap = 124996kB [ 169.599648][ T9401] Total swap = 124996kB [ 169.604261][ T9401] 2097051 pages RAM [ 169.608066][ T9401] 0 pages HighMem/MovableOnly [ 169.612997][ T9401] 424986 pages reserved [ 169.617125][ T9401] 0 pages cma reserved [ 170.788682][ T9427] netlink: 'syz.4.903': attribute type 3 has an invalid length. [ 170.811317][ T9430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.905'. [ 170.822693][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 170.941802][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 170.967126][ T9427] netlink: 120 bytes leftover after parsing attributes in process `syz.4.903'. [ 170.991062][ T9427] netlink: 424 bytes leftover after parsing attributes in process `syz.4.903'. [ 171.063743][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 171.116494][ T9441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.906'. [ 171.156234][ T9427] bridge0: port 3(syz_tun) entered blocking state [ 171.162876][ T9427] bridge0: port 3(syz_tun) entered forwarding state [ 171.194142][ T9427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.208355][ T9427] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.224778][ T9427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.347362][ T9449] geneve2: entered promiscuous mode [ 171.745672][ T9472] netlink: 'syz.2.916': attribute type 1 has an invalid length. [ 171.875436][ T9472] bond4 (unregistering): Released all slaves [ 171.953036][ T9480] netlink: 'syz.0.915': attribute type 1 has an invalid length. [ 172.727807][ T9516] __nla_validate_parse: 1 callbacks suppressed [ 172.727827][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.925'. [ 172.770084][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.925'. [ 172.798625][ T9521] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.928'. [ 172.817376][ T9519] netlink: 'syz.4.927': attribute type 1 has an invalid length. [ 172.844780][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 172.857389][ T9521] FAULT_INJECTION: forcing a failure. [ 172.857389][ T9521] name failslab, interval 1, probability 0, space 0, times 0 [ 172.904547][ T9521] CPU: 0 UID: 0 PID: 9521 Comm: syz.2.928 Not tainted syzkaller #0 PREEMPT(full) [ 172.904574][ T9521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.904586][ T9521] Call Trace: [ 172.904594][ T9521] [ 172.904602][ T9521] dump_stack_lvl+0x189/0x250 [ 172.904630][ T9521] ? __pfx____ratelimit+0x10/0x10 [ 172.904661][ T9521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.904683][ T9521] ? __pfx__printk+0x10/0x10 [ 172.904716][ T9521] ? __pfx___might_resched+0x10/0x10 [ 172.904751][ T9521] should_fail_ex+0x414/0x560 [ 172.904784][ T9521] should_failslab+0xa8/0x100 [ 172.904820][ T9521] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 172.904846][ T9521] ? __alloc_skb+0x112/0x2d0 [ 172.904872][ T9521] __alloc_skb+0x112/0x2d0 [ 172.904899][ T9521] ovs_ct_limit_cmd_get+0x19f/0xf90 [ 172.904925][ T9521] ? __pfx___nla_validate_parse+0x10/0x10 [ 172.904964][ T9521] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 172.905000][ T9521] ? __nla_parse+0x40/0x60 [ 172.905023][ T9521] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 172.905061][ T9521] genl_family_rcv_msg_doit+0x215/0x300 [ 172.905097][ T9521] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 172.905151][ T9521] genl_rcv_msg+0x60e/0x790 [ 172.905186][ T9521] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.905212][ T9521] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 172.905240][ T9521] ? __asan_memcpy+0x40/0x70 [ 172.905260][ T9521] ? __pfx_ref_tracker_free+0x10/0x10 [ 172.905298][ T9521] netlink_rcv_skb+0x208/0x470 [ 172.905317][ T9521] ? __lock_acquire+0xab9/0xd20 [ 172.905344][ T9521] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.905373][ T9521] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.905417][ T9521] ? down_read+0x1ad/0x2e0 [ 172.905441][ T9521] genl_rcv+0x28/0x40 [ 172.905465][ T9521] netlink_unicast+0x82f/0x9e0 [ 172.905494][ T9521] ? __pfx_netlink_unicast+0x10/0x10 [ 172.905516][ T9521] ? netlink_sendmsg+0x642/0xb30 [ 172.905536][ T9521] ? skb_put+0x11b/0x210 [ 172.905562][ T9521] netlink_sendmsg+0x805/0xb30 [ 172.905595][ T9521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.905621][ T9521] ? aa_sock_msg_perm+0xf1/0x1d0 [ 172.905653][ T9521] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.905672][ T9521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.905696][ T9521] __sock_sendmsg+0x219/0x270 [ 172.905729][ T9521] ____sys_sendmsg+0x505/0x830 [ 172.905761][ T9521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.905797][ T9521] ? import_iovec+0x74/0xa0 [ 172.905830][ T9521] ___sys_sendmsg+0x21f/0x2a0 [ 172.905858][ T9521] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.905924][ T9521] ? __fget_files+0x2a/0x420 [ 172.905951][ T9521] ? __fget_files+0x3a0/0x420 [ 172.905991][ T9521] __x64_sys_sendmsg+0x19b/0x260 [ 172.906019][ T9521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.906055][ T9521] ? __pfx_ksys_write+0x10/0x10 [ 172.906077][ T9521] ? rcu_is_watching+0x15/0xb0 [ 172.906102][ T9521] ? do_syscall_64+0xbe/0x3b0 [ 172.906126][ T9521] do_syscall_64+0xfa/0x3b0 [ 172.906144][ T9521] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.906173][ T9521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.906192][ T9521] ? clear_bhb_loop+0x60/0xb0 [ 172.906217][ T9521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.906235][ T9521] RIP: 0033:0x7f2862b8eec9 [ 172.906253][ T9521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.906270][ T9521] RSP: 002b:00007f28639de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.906292][ T9521] RAX: ffffffffffffffda RBX: 00007f2862de5fa0 RCX: 00007f2862b8eec9 [ 172.906306][ T9521] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 172.906318][ T9521] RBP: 00007f28639de090 R08: 0000000000000000 R09: 0000000000000000 [ 172.906331][ T9521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.906342][ T9521] R13: 00007f2862de6038 R14: 00007f2862de5fa0 R15: 00007fff922fd6d8 [ 172.906375][ T9521] [ 173.386988][ T9523] bond1: (slave bridge1): making interface the new active one [ 173.400976][ T9523] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 174.535584][ T9566] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.939'. [ 175.013254][ T9593] netlink: 'syz.2.944': attribute type 11 has an invalid length. [ 175.067320][ T9595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'. [ 175.247461][ T9598] netlink: 'syz.4.947': attribute type 4 has an invalid length. [ 175.280204][ T9598] netlink: 'syz.4.947': attribute type 1 has an invalid length. [ 175.345112][ T9599] netlink: 108 bytes leftover after parsing attributes in process `syz.4.947'. [ 175.375856][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.739854][ T9611] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.951'. [ 176.065193][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 176.098271][ T9625] netlink: 'syz.4.955': attribute type 2 has an invalid length. [ 176.309857][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.956'. [ 176.339027][ T9634] netlink: 'syz.4.956': attribute type 32 has an invalid length. [ 176.721324][ T9653] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 176.755604][ T9661] netlink: 'syz.0.963': attribute type 1 has an invalid length. [ 176.816072][ T9653] bond4: entered promiscuous mode [ 176.822093][ T9653] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.881527][ T9661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.368941][ T9698] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 177.733029][ T9725] netlink: 'syz.0.978': attribute type 13 has an invalid length. [ 178.525292][ T9725] veth1_macvtap: left allmulticast mode [ 178.755390][ T9725] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 178.763948][ T9725] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 178.903396][ T4207] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 178.911877][ T4207] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 178.927943][ T4207] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 178.937676][ T4207] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 179.226417][ T9761] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 179.255285][ T9756] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.319634][ T9761] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.362838][ T9763] erspan0: entered allmulticast mode [ 179.419490][ T9763] bond3: (slave erspan0): making interface the new active one [ 179.455325][ T9763] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 179.617048][ T9781] syz_tun: entered allmulticast mode [ 179.653107][ T9778] syz_tun: left allmulticast mode [ 179.724058][ T9784] __nla_validate_parse: 6 callbacks suppressed [ 179.724086][ T9784] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1002'. [ 179.776935][ T9792] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1002'. [ 180.433158][ T9819] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1010'. [ 180.573656][ T9818] dvmrp8: entered allmulticast mode [ 180.600745][ T9823] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1011'. [ 181.017936][ T9841] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.1016'. [ 181.235593][ T9847] netlink: 'syz.4.1017': attribute type 5 has an invalid length. [ 182.390659][ T9877] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 182.444347][ T9877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1026'. [ 182.534230][ T9887] syz_tun: entered allmulticast mode [ 182.705144][ T9899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1033'. [ 182.714468][ T9899] netlink: 'syz.2.1033': attribute type 32 has an invalid length. [ 182.741424][ T9899] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 182.755718][ T9901] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1034'. [ 182.777134][ T9904] netlink: 'syz.2.1033': attribute type 1 has an invalid length. [ 182.782706][ T9901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1034'. [ 182.795557][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 182.822028][ T9899] erspan0: entered allmulticast mode [ 182.859358][ T9884] syz_tun: left allmulticast mode [ 182.951329][ T9911] gretap0: entered allmulticast mode [ 183.160568][ T9928] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 183.194206][ T9928] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 183.466254][ T9948] netlink: zone id is out of range [ 183.471942][ T9948] netlink: get zone limit has 8 unknown bytes [ 183.531255][ T9953] nbd: nbd0 already in use [ 183.541072][ T9953] block nbd0: NBD_DISCONNECT [ 183.546801][ T9953] block nbd0: Send disconnect failed -22 [ 183.554872][ T9953] block nbd0: Disconnected due to user request. [ 183.561130][ T9953] block nbd0: shutting down sockets [ 183.646421][ T9956] bond4: entered promiscuous mode [ 183.676845][ T9956] bond4: entered allmulticast mode [ 183.696077][ T9956] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.009656][ T9994] __nla_validate_parse: 7 callbacks suppressed [ 185.009675][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'. [ 185.032868][ T9994] bond2 (unregistering): Released all slaves [ 194.187737][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.194196][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.544647][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.554770][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.563678][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.571568][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.581080][ T5862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.663647][ T5862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 199.673846][ T5862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 199.683218][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 199.692939][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 199.701519][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 199.709011][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 199.717732][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 199.724948][ T5862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 199.726679][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 199.741109][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 200.055827][T10008] chnl_net:caif_netlink_parms(): no params data found [ 200.330698][T10008] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.338784][T10008] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.347907][T10008] bridge_slave_0: entered allmulticast mode [ 200.356655][T10008] bridge_slave_0: entered promiscuous mode [ 200.372122][T10008] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.380298][T10008] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.388559][T10008] bridge_slave_1: entered allmulticast mode [ 200.396900][T10008] bridge_slave_1: entered promiscuous mode [ 200.480906][T10008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.501971][T10008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.559244][ T5874] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 200.572766][ T5874] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 200.582673][ T5874] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 200.584067][T10008] team0: Port device team_slave_0 added [ 200.590851][ T5874] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 200.603297][ T5874] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 200.605059][T10008] team0: Port device team_slave_1 added [ 200.714603][T10008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.721814][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.748890][T10008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.778664][T10008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.787313][T10008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.814674][T10008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.839090][T10010] chnl_net:caif_netlink_parms(): no params data found [ 201.065454][T10008] hsr_slave_0: entered promiscuous mode [ 201.072150][T10008] hsr_slave_1: entered promiscuous mode [ 201.078838][T10008] debugfs: 'hsr0' already exists in 'hsr' [ 201.084751][T10008] Cannot create hsr debugfs directory [ 201.115636][T10010] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.123732][T10010] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.130913][T10010] bridge_slave_0: entered allmulticast mode [ 201.138353][T10010] bridge_slave_0: entered promiscuous mode [ 201.159646][T10012] chnl_net:caif_netlink_parms(): no params data found [ 201.185952][T10010] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.198017][T10010] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.205641][T10010] bridge_slave_1: entered allmulticast mode [ 201.214007][T10010] bridge_slave_1: entered promiscuous mode [ 201.319978][T10010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.393407][T10010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.503607][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 201.514385][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 201.516024][T10010] team0: Port device team_slave_0 added [ 201.530052][T10010] team0: Port device team_slave_1 added [ 201.533685][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 201.551220][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 201.564269][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 201.623239][ T5874] Bluetooth: hci5: command tx timeout [ 201.631946][T10010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.639785][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.666633][T10010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.682247][T10010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.689237][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.715923][T10010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.741204][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.749233][T10012] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.756717][T10012] bridge_slave_0: entered allmulticast mode [ 201.763968][T10012] bridge_slave_0: entered promiscuous mode [ 201.782966][ T5874] Bluetooth: hci7: command tx timeout [ 201.788993][ T5874] Bluetooth: hci6: command tx timeout [ 201.806432][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.813789][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.821075][T10012] bridge_slave_1: entered allmulticast mode [ 201.828226][T10012] bridge_slave_1: entered promiscuous mode [ 201.870149][T10010] hsr_slave_0: entered promiscuous mode [ 201.877596][T10010] hsr_slave_1: entered promiscuous mode [ 201.884172][T10010] debugfs: 'hsr0' already exists in 'hsr' [ 201.889920][T10010] Cannot create hsr debugfs directory [ 201.996250][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.026950][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.162757][T10022] chnl_net:caif_netlink_parms(): no params data found [ 202.197631][T10012] team0: Port device team_slave_0 added [ 202.207063][T10012] team0: Port device team_slave_1 added [ 202.299912][T10012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.307996][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.335448][T10012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.387890][T10012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.394958][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.421159][T10012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.557044][T10012] hsr_slave_0: entered promiscuous mode [ 202.564688][T10012] hsr_slave_1: entered promiscuous mode [ 202.570980][T10012] debugfs: 'hsr0' already exists in 'hsr' [ 202.576844][T10012] Cannot create hsr debugfs directory [ 202.583781][T10022] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.590958][T10022] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.598352][T10022] bridge_slave_0: entered allmulticast mode [ 202.605448][T10022] bridge_slave_0: entered promiscuous mode [ 202.625187][T10022] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.632686][T10022] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.639901][T10022] bridge_slave_1: entered allmulticast mode [ 202.647018][T10022] bridge_slave_1: entered promiscuous mode [ 202.662794][ T5874] Bluetooth: hci8: command tx timeout [ 202.704968][T10022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.739079][T10022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.806532][T10022] team0: Port device team_slave_0 added [ 202.851982][T10022] team0: Port device team_slave_1 added [ 202.936969][T10022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.944153][T10022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.970837][T10022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.989768][T10022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.996951][T10022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.023709][T10022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.035220][T10037] chnl_net:caif_netlink_parms(): no params data found [ 203.167737][T10022] hsr_slave_0: entered promiscuous mode [ 203.174125][T10022] hsr_slave_1: entered promiscuous mode [ 203.180124][T10022] debugfs: 'hsr0' already exists in 'hsr' [ 203.186329][T10022] Cannot create hsr debugfs directory [ 203.233937][T10037] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.241175][T10037] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.248810][T10037] bridge_slave_0: entered allmulticast mode [ 203.256193][T10037] bridge_slave_0: entered promiscuous mode [ 203.264022][T10037] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.271083][T10037] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.278589][T10037] bridge_slave_1: entered allmulticast mode [ 203.286174][T10037] bridge_slave_1: entered promiscuous mode [ 203.368880][T10037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.386523][T10037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.436644][T10037] team0: Port device team_slave_0 added [ 203.450452][T10037] team0: Port device team_slave_1 added [ 203.499793][T10037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.507387][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.534087][T10037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.547678][T10037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.554699][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.580875][T10037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.622494][ T5874] Bluetooth: hci9: command tx timeout [ 203.663670][T10037] hsr_slave_0: entered promiscuous mode [ 203.670127][T10037] hsr_slave_1: entered promiscuous mode [ 203.676489][T10037] debugfs: 'hsr0' already exists in 'hsr' [ 203.682209][T10037] Cannot create hsr debugfs directory [ 203.702406][ T5874] Bluetooth: hci5: command tx timeout [ 203.862462][ T51] Bluetooth: hci7: command tx timeout [ 203.863299][ T5874] Bluetooth: hci6: command tx timeout [ 204.742484][ T5874] Bluetooth: hci8: command tx timeout [ 205.702788][ T5874] Bluetooth: hci9: command tx timeout [ 205.792958][ T5874] Bluetooth: hci5: command tx timeout [ 205.942433][ T5874] Bluetooth: hci6: command tx timeout [ 205.953166][ T5874] Bluetooth: hci7: command tx timeout [ 206.833091][ T5874] Bluetooth: hci8: command tx timeout [ 207.782519][ T5874] Bluetooth: hci9: command tx timeout [ 207.862414][ T5874] Bluetooth: hci5: command tx timeout [ 208.022520][ T5874] Bluetooth: hci6: command tx timeout [ 208.023709][ T51] Bluetooth: hci7: command tx timeout [ 208.262848][ T7626] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 208.902552][ T51] Bluetooth: hci8: command tx timeout [ 209.543518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.872695][ T51] Bluetooth: hci9: command tx timeout [ 240.273057][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.626105][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.632912][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.491247][ T5874] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 259.492067][ T5873] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 259.500753][ T5874] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 259.509596][ T5873] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 259.515342][ T5874] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 259.523920][ T5873] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 259.531029][ T5874] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 259.537876][ T5873] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 259.544646][ T5874] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 259.557953][ T5873] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 259.987516][ T5862] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 259.997716][ T5862] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 260.006247][ T5862] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 260.015370][ T5862] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 260.024125][ T5862] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 260.169783][T10053] chnl_net:caif_netlink_parms(): no params data found [ 260.319251][T10053] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.327636][T10053] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.335316][T10053] bridge_slave_0: entered allmulticast mode [ 260.344434][T10053] bridge_slave_0: entered promiscuous mode [ 260.374964][T10053] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.382135][T10053] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.389986][T10053] bridge_slave_1: entered allmulticast mode [ 260.397518][T10053] bridge_slave_1: entered promiscuous mode [ 260.504804][T10053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.522098][T10053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.559879][T10052] chnl_net:caif_netlink_parms(): no params data found [ 260.599330][T10053] team0: Port device team_slave_0 added [ 260.608150][T10053] team0: Port device team_slave_1 added [ 260.674681][T10053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.681995][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.710774][T10053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.725588][T10053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.733088][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.762012][T10053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.841078][T10052] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.848803][T10052] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.857003][T10052] bridge_slave_0: entered allmulticast mode [ 260.865931][T10052] bridge_slave_0: entered promiscuous mode [ 260.905117][T10052] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.913515][T10052] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.920726][T10052] bridge_slave_1: entered allmulticast mode [ 260.929778][T10052] bridge_slave_1: entered promiscuous mode [ 261.008058][ T5862] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 261.018623][ T5862] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 261.026460][ T5862] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 261.044298][ T5862] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 261.054316][ T5862] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 261.069461][T10053] hsr_slave_0: entered promiscuous mode [ 261.076674][T10053] hsr_slave_1: entered promiscuous mode [ 261.083150][T10053] debugfs: 'hsr0' already exists in 'hsr' [ 261.088875][T10053] Cannot create hsr debugfs directory [ 261.098509][T10052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.149244][T10052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.177185][T10059] chnl_net:caif_netlink_parms(): no params data found [ 261.245271][T10052] team0: Port device team_slave_0 added [ 261.286152][T10052] team0: Port device team_slave_1 added [ 261.389466][T10052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.397705][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.424950][T10052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.438492][T10052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.446514][T10052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.473801][T10052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.579516][T10059] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.586806][T10059] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.594478][T10059] bridge_slave_0: entered allmulticast mode [ 261.601457][T10059] bridge_slave_0: entered promiscuous mode [ 261.623504][ T5862] Bluetooth: hci11: command tx timeout [ 261.629537][ T5873] Bluetooth: hci10: command tx timeout [ 261.655669][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.663223][T10059] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.670567][T10059] bridge_slave_1: entered allmulticast mode [ 261.678019][T10059] bridge_slave_1: entered promiscuous mode [ 261.713997][T10052] hsr_slave_0: entered promiscuous mode [ 261.720245][T10052] hsr_slave_1: entered promiscuous mode [ 261.726693][T10052] debugfs: 'hsr0' already exists in 'hsr' [ 261.733480][T10052] Cannot create hsr debugfs directory [ 261.764480][T10059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.777534][T10059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.869431][T10059] team0: Port device team_slave_0 added [ 261.896562][T10059] team0: Port device team_slave_1 added [ 261.966140][T10059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.973512][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.000780][T10059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.033888][T10059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.040829][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.066986][T10059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.103390][ T5873] Bluetooth: hci12: command tx timeout [ 262.190134][T10059] hsr_slave_0: entered promiscuous mode [ 262.198490][T10059] hsr_slave_1: entered promiscuous mode [ 262.205554][T10059] debugfs: 'hsr0' already exists in 'hsr' [ 262.211293][T10059] Cannot create hsr debugfs directory [ 262.515693][ T5862] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 262.530199][ T5862] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 262.538580][ T5862] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 262.551075][ T5862] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 262.554190][T10073] chnl_net:caif_netlink_parms(): no params data found [ 262.561802][ T5862] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 262.709140][T10073] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.717464][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.725288][T10073] bridge_slave_0: entered allmulticast mode [ 262.734297][T10073] bridge_slave_0: entered promiscuous mode [ 262.756264][T10073] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.773745][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.781006][T10073] bridge_slave_1: entered allmulticast mode [ 262.791429][T10073] bridge_slave_1: entered promiscuous mode [ 262.866706][T10073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.885162][T10073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.966639][T10073] team0: Port device team_slave_0 added [ 262.980503][T10073] team0: Port device team_slave_1 added [ 263.021317][T10073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.028866][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.056723][T10073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.085632][T10073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.093596][T10073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.120652][T10073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.143492][ T5873] Bluetooth: hci13: command tx timeout [ 263.200602][T10073] hsr_slave_0: entered promiscuous mode [ 263.207687][T10073] hsr_slave_1: entered promiscuous mode [ 263.214782][T10073] debugfs: 'hsr0' already exists in 'hsr' [ 263.220505][T10073] Cannot create hsr debugfs directory [ 263.447759][T10084] chnl_net:caif_netlink_parms(): no params data found [ 263.560614][T10084] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.567912][T10084] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.575607][T10084] bridge_slave_0: entered allmulticast mode [ 263.582797][T10084] bridge_slave_0: entered promiscuous mode [ 263.597603][T10084] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.605731][T10084] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.613712][T10084] bridge_slave_1: entered allmulticast mode [ 263.620687][T10084] bridge_slave_1: entered promiscuous mode [ 263.658464][T10084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.670258][T10084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.702515][ T5873] Bluetooth: hci10: command tx timeout [ 263.702522][ T5862] Bluetooth: hci11: command tx timeout [ 263.719049][T10084] team0: Port device team_slave_0 added [ 263.727002][T10084] team0: Port device team_slave_1 added [ 263.759910][T10084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.767676][T10084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.796351][T10084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.809908][T10084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.817968][T10084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.844170][T10084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.921857][T10084] hsr_slave_0: entered promiscuous mode [ 263.928328][T10084] hsr_slave_1: entered promiscuous mode [ 263.935416][T10084] debugfs: 'hsr0' already exists in 'hsr' [ 263.941133][T10084] Cannot create hsr debugfs directory [ 264.182744][ T5862] Bluetooth: hci12: command tx timeout [ 264.592946][ T5862] Bluetooth: hci14: command tx timeout [ 265.222722][ T5862] Bluetooth: hci13: command tx timeout [ 265.783012][ T5862] Bluetooth: hci10: command tx timeout [ 265.783552][ T5873] Bluetooth: hci11: command tx timeout [ 266.262505][ T5873] Bluetooth: hci12: command tx timeout [ 266.662766][ T5873] Bluetooth: hci14: command tx timeout [ 267.302701][ T5873] Bluetooth: hci13: command tx timeout [ 267.862688][ T5873] Bluetooth: hci10: command tx timeout [ 267.863547][ T5862] Bluetooth: hci11: command tx timeout [ 268.342558][ T5862] Bluetooth: hci12: command tx timeout [ 268.743296][ T5862] Bluetooth: hci14: command tx timeout [ 269.382923][ T5862] Bluetooth: hci13: command tx timeout [ 270.823101][ T5862] Bluetooth: hci14: command tx timeout [ 272.263254][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.262996][ T3540] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.065617][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.072006][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.561397][ T5873] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 319.570850][ T5873] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 319.571527][ T5874] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 319.579483][ T5873] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 319.587633][ T5874] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 319.595213][ T5873] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 319.601554][ T5874] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 319.608862][ T5873] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 319.616190][ T5874] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 319.630643][ T5874] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 319.980894][T10097] chnl_net:caif_netlink_parms(): no params data found [ 320.112539][T10097] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.119772][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.127533][T10097] bridge_slave_0: entered allmulticast mode [ 320.135407][T10097] bridge_slave_0: entered promiscuous mode [ 320.143779][T10097] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.150853][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.158593][T10097] bridge_slave_1: entered allmulticast mode [ 320.166080][T10097] bridge_slave_1: entered promiscuous mode [ 320.203522][T10097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.216249][T10097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.269597][T10097] team0: Port device team_slave_0 added [ 320.283495][T10097] team0: Port device team_slave_1 added [ 320.381292][T10097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.390243][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.418195][T10097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.439586][T10097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.447774][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.475268][T10097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.494830][T10099] chnl_net:caif_netlink_parms(): no params data found [ 320.621492][T10097] hsr_slave_0: entered promiscuous mode [ 320.629969][T10097] hsr_slave_1: entered promiscuous mode [ 320.638017][T10097] debugfs: 'hsr0' already exists in 'hsr' [ 320.644389][T10097] Cannot create hsr debugfs directory [ 320.645618][ T51] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 320.659069][ T51] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 320.667888][ T51] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 320.676025][ T51] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 320.684582][ T51] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 320.729875][T10099] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.738113][T10099] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.746041][T10099] bridge_slave_0: entered allmulticast mode [ 320.754263][T10099] bridge_slave_0: entered promiscuous mode [ 320.761783][T10099] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.769793][T10099] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.777639][T10099] bridge_slave_1: entered allmulticast mode [ 320.785187][T10099] bridge_slave_1: entered promiscuous mode [ 320.855892][T10099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.874267][T10099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.936903][T10099] team0: Port device team_slave_0 added [ 320.965086][T10099] team0: Port device team_slave_1 added [ 321.046847][T10099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.054903][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.083238][T10099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.114344][T10099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.121317][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.148564][T10099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.241250][T10099] hsr_slave_0: entered promiscuous mode [ 321.250599][T10099] hsr_slave_1: entered promiscuous mode [ 321.257095][T10099] debugfs: 'hsr0' already exists in 'hsr' [ 321.263900][T10099] Cannot create hsr debugfs directory [ 321.649401][T10113] chnl_net:caif_netlink_parms(): no params data found [ 321.679160][ T5874] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 321.690245][ T5874] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 321.699013][ T5874] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 321.707687][ T5873] Bluetooth: hci15: command tx timeout [ 321.716623][ T5873] Bluetooth: hci16: command tx timeout [ 321.725576][ T5874] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 321.733946][ T5874] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 321.804123][T10113] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.811368][T10113] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.818950][T10113] bridge_slave_0: entered allmulticast mode [ 321.826562][T10113] bridge_slave_0: entered promiscuous mode [ 321.844672][T10113] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.851869][T10113] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.860246][T10113] bridge_slave_1: entered allmulticast mode [ 321.867920][T10113] bridge_slave_1: entered promiscuous mode [ 321.917023][T10113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.930331][T10113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.005147][T10113] team0: Port device team_slave_0 added [ 322.014667][T10113] team0: Port device team_slave_1 added [ 322.081737][T10113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.097907][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.124993][T10113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.138705][T10113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.146609][T10113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.173369][T10113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.317506][T10113] hsr_slave_0: entered promiscuous mode [ 322.325148][T10113] hsr_slave_1: entered promiscuous mode [ 322.331957][T10113] debugfs: 'hsr0' already exists in 'hsr' [ 322.339279][T10113] Cannot create hsr debugfs directory [ 322.589920][ T5184] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 322.599725][ T5184] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 322.608660][ T5184] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 322.618376][ T5184] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 322.626984][ T5184] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 322.676383][T10120] chnl_net:caif_netlink_parms(): no params data found [ 322.743735][ T5184] Bluetooth: hci17: command tx timeout [ 322.787793][T10120] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.799919][T10120] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.807640][T10120] bridge_slave_0: entered allmulticast mode [ 322.815836][T10120] bridge_slave_0: entered promiscuous mode [ 322.837779][T10120] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.845710][T10120] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.853154][T10120] bridge_slave_1: entered allmulticast mode [ 322.861326][T10120] bridge_slave_1: entered promiscuous mode [ 322.925782][T10120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.944683][T10120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.989987][T10120] team0: Port device team_slave_0 added [ 323.010277][T10120] team0: Port device team_slave_1 added [ 323.089249][T10120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.096392][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.123397][T10120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.140073][T10120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.148077][T10120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.174772][T10120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.255237][T10120] hsr_slave_0: entered promiscuous mode [ 323.261785][T10120] hsr_slave_1: entered promiscuous mode [ 323.268012][T10120] debugfs: 'hsr0' already exists in 'hsr' [ 323.274046][T10120] Cannot create hsr debugfs directory [ 323.444200][T10128] chnl_net:caif_netlink_parms(): no params data found [ 323.566916][T10128] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.574324][T10128] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.581554][T10128] bridge_slave_0: entered allmulticast mode [ 323.589742][T10128] bridge_slave_0: entered promiscuous mode [ 323.599586][T10128] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.606758][T10128] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.614306][T10128] bridge_slave_1: entered allmulticast mode [ 323.622027][T10128] bridge_slave_1: entered promiscuous mode [ 323.659834][T10128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.671704][T10128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.713899][T10128] team0: Port device team_slave_0 added [ 323.722107][T10128] team0: Port device team_slave_1 added [ 323.754168][T10128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.761119][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.783328][ T5184] Bluetooth: hci18: command tx timeout [ 323.788051][ T5865] Bluetooth: hci16: command tx timeout [ 323.795059][ T5184] Bluetooth: hci15: command tx timeout [ 323.799454][T10128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.817406][T10128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.824809][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.851489][T10128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.927149][T10128] hsr_slave_0: entered promiscuous mode [ 323.933968][T10128] hsr_slave_1: entered promiscuous mode [ 323.940577][T10128] debugfs: 'hsr0' already exists in 'hsr' [ 323.947614][T10128] Cannot create hsr debugfs directory [ 324.267971][T10140] Bluetooth: hci8: command 0x0406 tx timeout [ 324.267995][ T5868] Bluetooth: hci6: command 0x0406 tx timeout [ 324.268259][ T5184] Bluetooth: hci9: command 0x0406 tx timeout [ 324.274826][ T5868] Bluetooth: hci5: command 0x0406 tx timeout [ 324.287293][ T5868] Bluetooth: hci7: command 0x0406 tx timeout [ 324.663592][ T5873] Bluetooth: hci19: command tx timeout [ 324.823031][ T5873] Bluetooth: hci17: command tx timeout [ 325.862526][ T5873] Bluetooth: hci15: command tx timeout [ 325.863439][ T51] Bluetooth: hci16: command tx timeout [ 325.868053][ T5873] Bluetooth: hci18: command tx timeout [ 326.742910][ T5873] Bluetooth: hci19: command tx timeout [ 326.902675][ T5873] Bluetooth: hci17: command tx timeout [ 327.942568][ T5873] Bluetooth: hci18: command tx timeout [ 327.943412][ T5874] Bluetooth: hci15: command tx timeout [ 327.951377][ T51] Bluetooth: hci16: command tx timeout [ 328.822595][ T51] Bluetooth: hci19: command tx timeout [ 328.982449][ T51] Bluetooth: hci17: command tx timeout [ 330.022764][ T51] Bluetooth: hci18: command tx timeout [ 330.902625][ T51] Bluetooth: hci19: command tx timeout [ 331.143824][ T31] INFO: task syz.0.1050:9953 blocked for more than 143 seconds. [ 331.151538][ T31] Not tainted syzkaller #0 [ 331.156929][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.165912][ T31] task:syz.0.1050 state:D stack:25288 pid:9953 tgid:9947 ppid:5857 task_flags:0x400140 flags:0x00004006 [ 331.177947][ T31] Call Trace: [ 331.181223][ T31] [ 331.184564][ T31] __schedule+0x1798/0x4cc0 [ 331.189067][ T31] ? validate_chain+0x897/0x2140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 331.194323][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.199296][ T31] ? __pfx___schedule+0x10/0x10 [ 331.205549][ T31] ? schedule+0x91/0x360 [ 331.209822][ T31] schedule+0x165/0x360 [ 331.214927][ T31] schedule_timeout+0x9a/0x270 [ 331.253068][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 331.281461][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.287558][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.293729][ T31] ? wait_for_completion+0x267/0x5d0 [ 331.299045][ T31] wait_for_completion+0x2bf/0x5d0 [ 331.305095][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 331.310731][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 331.317010][ T31] ? check_flush_dependency+0x88/0x400 [ 331.322820][ T31] __flush_workqueue+0x6f7/0x14b0 [ 331.327884][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 331.333904][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.339134][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 331.345094][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 331.351011][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 331.357026][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 331.363068][ T31] nbd_genl_disconnect+0x485/0x570 [ 331.368207][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 331.374240][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 331.380576][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 331.386688][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 331.392973][ T31] ? stack_trace_save+0x9c/0xe0 [ 331.397821][ T31] genl_rcv_msg+0x60e/0x790 [ 331.402409][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.407440][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 331.413125][ T31] netlink_rcv_skb+0x208/0x470 [ 331.417880][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.423093][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.428125][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.433440][ T31] ? down_read+0x1ad/0x2e0 [ 331.437838][ T31] genl_rcv+0x28/0x40 [ 331.441796][ T31] netlink_unicast+0x82f/0x9e0 [ 331.446583][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 331.451849][ T31] ? netlink_sendmsg+0x642/0xb30 [ 331.456931][ T31] ? skb_put+0x11b/0x210 [ 331.461165][ T31] netlink_sendmsg+0x805/0xb30 [ 331.466321][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.471618][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 331.476580][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.482023][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.487504][ T31] __sock_sendmsg+0x219/0x270 [ 331.492208][ T31] ____sys_sendmsg+0x505/0x830 [ 331.497326][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.502713][ T31] ? import_iovec+0x74/0xa0 [ 331.507235][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 331.511926][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.517294][ T31] ? __fget_files+0x2a/0x420 [ 331.521868][ T31] ? __fget_files+0x3a0/0x420 [ 331.526573][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 331.531501][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.536995][ T31] ? rcu_is_watching+0x15/0xb0 [ 331.541741][ T31] ? trace_sys_enter+0x25/0x100 [ 331.547147][ T31] do_syscall_64+0xfa/0x3b0 [ 331.551658][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.556928][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.563076][ T31] ? clear_bhb_loop+0x60/0xb0 [ 331.567757][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.573795][ T31] RIP: 0033:0x7fa1afd8eec9 [ 331.578196][ T31] RSP: 002b:00007fa1b0cc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.586638][ T31] RAX: ffffffffffffffda RBX: 00007fa1affe6090 RCX: 00007fa1afd8eec9 [ 331.594629][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 0000000000000007 [ 331.603000][ T31] RBP: 00007fa1afe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 331.610977][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.619061][ T31] R13: 00007fa1affe6128 R14: 00007fa1affe6090 R15: 00007fffe30fa6f8 [ 331.627195][ T31] [ 331.630241][ T31] INFO: task syz.2.1051:9958 blocked for more than 143 seconds. [ 331.639024][ T31] Not tainted syzkaller #0 [ 331.643990][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.652690][ T31] task:syz.2.1051 state:D stack:28360 pid:9958 tgid:9954 ppid:5875 task_flags:0x400040 flags:0x00004004 [ 331.664812][ T31] Call Trace: [ 331.668079][ T31] [ 331.670994][ T31] __schedule+0x1798/0x4cc0 [ 331.675516][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.680354][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.685217][ T31] ? __pfx___schedule+0x10/0x10 [ 331.690066][ T31] ? schedule+0x91/0x360 [ 331.694467][ T31] schedule+0x165/0x360 [ 331.698613][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.704346][ T31] __mutex_lock+0x7e6/0x1350 [ 331.708942][ T31] ? __mutex_lock+0x5bb/0x1350 [ 331.713787][ T31] ? genl_rcv_msg+0x10d/0x790 [ 331.718453][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.723637][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 331.728746][ T31] ? radix_tree_lookup+0x240/0x290 [ 331.733885][ T31] genl_rcv_msg+0x10d/0x790 [ 331.738377][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.743451][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 331.748491][ T31] ? __asan_memcpy+0x40/0x70 [ 331.753354][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 331.758752][ T31] netlink_rcv_skb+0x208/0x470 [ 331.763568][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.768430][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 331.773490][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.778775][ T31] ? down_read+0x1ad/0x2e0 [ 331.783768][ T31] genl_rcv+0x28/0x40 [ 331.787768][ T31] netlink_unicast+0x82f/0x9e0 [ 331.792592][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 331.797882][ T31] ? netlink_sendmsg+0x642/0xb30 [ 331.802845][ T31] ? skb_put+0x11b/0x210 [ 331.807115][ T31] netlink_sendmsg+0x805/0xb30 [ 331.811875][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.817321][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 331.822248][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 331.827542][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.832990][ T31] __sock_sendmsg+0x219/0x270 [ 331.837680][ T31] __sys_sendto+0x3bd/0x520 [ 331.842165][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 331.847338][ T31] ? __might_fault+0xb0/0x130 [ 331.851995][ T31] ? bpf_trace_run2+0x186/0x4b0 [ 331.856862][ T31] ? rcu_is_watching+0x15/0xb0 [ 331.861605][ T31] __x64_sys_sendto+0xde/0x100 [ 331.866625][ T31] do_syscall_64+0xfa/0x3b0 [ 331.871141][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.876691][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.882836][ T31] ? clear_bhb_loop+0x60/0xb0 [ 331.887523][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.893513][ T31] RIP: 0033:0x7f2862b90d5c [ 331.897929][ T31] RSP: 002b:00007f28639bbec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 331.906483][ T31] RAX: ffffffffffffffda RBX: 00007f28639bbfc0 RCX: 00007f2862b90d5c [ 331.914471][ T31] RDX: 0000000000000020 RSI: 00007f28639bc010 RDI: 000000000000000a [ 331.922477][ T31] RBP: 0000000000000000 R08: 00007f28639bbf14 R09: 000000000000000c [ 331.930445][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 331.938566][ T31] R13: 00007f28639bbf68 R14: 00007f28639bc010 R15: 0000000000000000 [ 331.946634][ T31] [ 331.949663][ T31] INFO: task syz.3.1052:9967 blocked for more than 144 seconds. [ 331.959086][ T31] Not tainted syzkaller #0 [ 331.964156][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.972834][ T31] task:syz.3.1052 state:D stack:26920 pid:9967 tgid:9964 ppid:5870 task_flags:0x400040 flags:0x00004004 [ 331.984748][ T31] Call Trace: [ 331.988011][ T31] [ 331.990922][ T31] __schedule+0x1798/0x4cc0 [ 331.995673][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.000514][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.005442][ T31] ? __pfx___schedule+0x10/0x10 [ 332.010310][ T31] ? schedule+0x91/0x360 [ 332.014586][ T31] schedule+0x165/0x360 [ 332.018734][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.024546][ T31] __mutex_lock+0x7e6/0x1350 [ 332.029152][ T31] ? __mutex_lock+0x5bb/0x1350 [ 332.033927][ T31] ? genl_rcv_msg+0x10d/0x790 [ 332.038592][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.043640][ T31] ? stack_trace_save+0x9c/0xe0 [ 332.048474][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 332.054055][ T31] ? radix_tree_lookup+0x240/0x290 [ 332.059156][ T31] genl_rcv_msg+0x10d/0x790 [ 332.063675][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.068510][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.073558][ T31] netlink_rcv_skb+0x208/0x470 [ 332.078304][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.083372][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.088384][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.093705][ T31] ? down_read+0x1ad/0x2e0 [ 332.098102][ T31] genl_rcv+0x28/0x40 [ 332.102064][ T31] netlink_unicast+0x82f/0x9e0 [ 332.106921][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 332.112203][ T31] ? netlink_sendmsg+0x642/0xb30 [ 332.117335][ T31] ? skb_put+0x11b/0x210 [ 332.121575][ T31] netlink_sendmsg+0x805/0xb30 [ 332.126436][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.131726][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.136682][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.141949][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.147364][ T31] __sock_sendmsg+0x219/0x270 [ 332.152030][ T31] __sys_sendto+0x3bd/0x520 [ 332.156551][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 332.161564][ T31] ? count_memcg_event_mm+0x21/0x260 [ 332.166930][ T31] ? exc_page_fault+0x76/0xf0 [ 332.171597][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 332.177039][ T31] __x64_sys_sendto+0xde/0x100 [ 332.181789][ T31] do_syscall_64+0xfa/0x3b0 [ 332.187574][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.192853][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.198919][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.203738][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.209609][ T31] RIP: 0033:0x7f6dcaf90d5c [ 332.214042][ T31] RSP: 002b:00007f6dcbf0fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 332.222474][ T31] RAX: ffffffffffffffda RBX: 00007f6dcbf0ffc0 RCX: 00007f6dcaf90d5c [ 332.230443][ T31] RDX: 0000000000000028 RSI: 00007f6dcbf10010 RDI: 0000000000000005 [ 332.238664][ T31] RBP: 0000000000000000 R08: 00007f6dcbf0ff14 R09: 000000000000000c [ 332.246844][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 332.254850][ T31] R13: 00007f6dcbf0ff68 R14: 00007f6dcbf10010 R15: 0000000000000000 [ 332.266536][ T31] [ 332.269596][ T31] INFO: task syz.1.1057:9987 blocked for more than 144 seconds. [ 332.277367][ T31] Not tainted syzkaller #0 [ 332.287954][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.296870][ T31] task:syz.1.1057 state:D stack:28608 pid:9987 tgid:9984 ppid:5863 task_flags:0x400040 flags:0x00004004 [ 332.308801][ T31] Call Trace: [ 332.312061][ T31] [ 332.315016][ T31] __schedule+0x1798/0x4cc0 [ 332.319515][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.324521][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.329359][ T31] ? __pfx___schedule+0x10/0x10 [ 332.334244][ T31] ? schedule+0x91/0x360 [ 332.338478][ T31] schedule+0x165/0x360 [ 332.342784][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.348251][ T31] __mutex_lock+0x7e6/0x1350 [ 332.353066][ T31] ? __mutex_lock+0x5bb/0x1350 [ 332.357816][ T31] ? genl_rcv_msg+0x10d/0x790 [ 332.362531][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.367559][ T31] ? stack_trace_save+0x9c/0xe0 [ 332.372456][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 332.377830][ T31] ? radix_tree_lookup+0x240/0x290 [ 332.383325][ T31] genl_rcv_msg+0x10d/0x790 [ 332.387828][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.392712][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.397768][ T31] netlink_rcv_skb+0x208/0x470 [ 332.402642][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.407520][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.412858][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.418172][ T31] ? down_read+0x1ad/0x2e0 [ 332.423684][ T31] genl_rcv+0x28/0x40 [ 332.427923][ T31] netlink_unicast+0x82f/0x9e0 [ 332.432768][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 332.438054][ T31] ? netlink_sendmsg+0x642/0xb30 [ 332.443251][ T31] ? skb_put+0x11b/0x210 [ 332.447499][ T31] netlink_sendmsg+0x805/0xb30 [ 332.452246][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.457559][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.462533][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.467817][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.473260][ T31] __sock_sendmsg+0x219/0x270 [ 332.477923][ T31] __sys_sendto+0x3bd/0x520 [ 332.482476][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 332.487507][ T31] ? count_memcg_event_mm+0x21/0x260 [ 332.492947][ T31] ? exc_page_fault+0x76/0xf0 [ 332.497636][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 332.503293][ T31] __x64_sys_sendto+0xde/0x100 [ 332.508066][ T31] do_syscall_64+0xfa/0x3b0 [ 332.512622][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.517838][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.523958][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.528652][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.534862][ T31] RIP: 0033:0x7f3674590d5c [ 332.539367][ T31] RSP: 002b:00007f36727d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 332.547807][ T31] RAX: ffffffffffffffda RBX: 00007f36727d3fc0 RCX: 00007f3674590d5c [ 332.555829][ T31] RDX: 0000000000000028 RSI: 00007f36727d4010 RDI: 0000000000000005 [ 332.563959][ T31] RBP: 0000000000000000 R08: 00007f36727d3f14 R09: 000000000000000c [ 332.571942][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 332.579939][ T31] R13: 00007f36727d3f68 R14: 00007f36727d4010 R15: 0000000000000000 [ 332.587979][ T31] [ 332.591010][ T31] INFO: task syz.1.1057:9997 blocked for more than 144 seconds. [ 332.598793][ T31] Not tainted syzkaller #0 [ 332.603810][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.612514][ T31] task:syz.1.1057 state:D stack:25928 pid:9997 tgid:9984 ppid:5863 task_flags:0x400140 flags:0x00004004 [ 332.624752][ T31] Call Trace: [ 332.628067][ T31] [ 332.630993][ T31] __schedule+0x1798/0x4cc0 [ 332.635566][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.640411][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.645299][ T31] ? __pfx___schedule+0x10/0x10 [ 332.650174][ T31] ? schedule+0x91/0x360 [ 332.654580][ T31] schedule+0x165/0x360 [ 332.658734][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.664245][ T31] __mutex_lock+0x7e6/0x1350 [ 332.668852][ T31] ? __mutex_lock+0x5bb/0x1350 [ 332.673684][ T31] ? genl_rcv_msg+0x10d/0x790 [ 332.678377][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.683547][ T31] ? stack_trace_save+0x9c/0xe0 [ 332.688379][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 332.693763][ T31] ? radix_tree_lookup+0x240/0x290 [ 332.698866][ T31] genl_rcv_msg+0x10d/0x790 [ 332.703562][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.708429][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.713688][ T31] netlink_rcv_skb+0x208/0x470 [ 332.718435][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.723297][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.728309][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.733619][ T31] ? down_read+0x1ad/0x2e0 [ 332.738021][ T31] genl_rcv+0x28/0x40 [ 332.741981][ T31] netlink_unicast+0x82f/0x9e0 [ 332.747049][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 332.752378][ T31] ? netlink_sendmsg+0x642/0xb30 [ 332.757316][ T31] ? skb_put+0x11b/0x210 [ 332.761539][ T31] netlink_sendmsg+0x805/0xb30 [ 332.766324][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.771605][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 332.776702][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.781991][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.787306][ T31] __sock_sendmsg+0x219/0x270 [ 332.791998][ T31] __sys_sendto+0x3bd/0x520 [ 332.796522][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 332.801545][ T31] ? fd_install+0x97/0x540 [ 332.806111][ T31] ? fd_install+0x30d/0x540 [ 332.810605][ T31] __x64_sys_sendto+0xde/0x100 [ 332.815400][ T31] do_syscall_64+0xfa/0x3b0 [ 332.819887][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.825316][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.831374][ T31] ? clear_bhb_loop+0x60/0xb0 [ 332.836189][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.842063][ T31] RIP: 0033:0x7f3674590d5c [ 332.846480][ T31] RSP: 002b:00007f36723b0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 332.854916][ T31] RAX: ffffffffffffffda RBX: 00007f36723b0fc0 RCX: 00007f3674590d5c [ 332.863024][ T31] RDX: 0000000000000020 RSI: 00007f36723b1010 RDI: 000000000000000d [ 332.870975][ T31] RBP: 0000000000000000 R08: 00007f36723b0f14 R09: 000000000000000c [ 332.878957][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000d [ 332.886940][ T31] R13: 00007f36723b0f68 R14: 00007f36723b1010 R15: 0000000000000000 [ 332.895079][ T31] [ 332.898098][ T31] INFO: task syz.4.1060:9999 blocked for more than 145 seconds. [ 332.906618][ T31] Not tainted syzkaller #0 [ 332.911548][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.920255][ T31] task:syz.4.1060 state:D stack:23624 pid:9999 tgid:9998 ppid:5859 task_flags:0x400040 flags:0x00004004 [ 332.932548][ T31] Call Trace: [ 332.935843][ T31] [ 332.938780][ T31] __schedule+0x1798/0x4cc0 [ 332.943340][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.948209][ T31] ? __lock_acquire+0xab9/0xd20 [ 332.953121][ T31] ? __pfx___schedule+0x10/0x10 [ 332.957966][ T31] ? schedule+0x91/0x360 [ 332.962190][ T31] schedule+0x165/0x360 [ 332.966493][ T31] schedule_preempt_disabled+0x13/0x30 [ 332.971941][ T31] __mutex_lock+0x7e6/0x1350 [ 332.976544][ T31] ? __mutex_lock+0x5bb/0x1350 [ 332.981293][ T31] ? genl_rcv_msg+0x10d/0x790 [ 332.986102][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 332.991125][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 332.996391][ T31] ? radix_tree_lookup+0x240/0x290 [ 333.001492][ T31] genl_rcv_msg+0x10d/0x790 [ 333.006017][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.011026][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 333.016063][ T31] ? __asan_memcpy+0x40/0x70 [ 333.020641][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 333.026185][ T31] netlink_rcv_skb+0x208/0x470 [ 333.030931][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.035807][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.040819][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.046195][ T31] ? down_read+0x1ad/0x2e0 [ 333.050596][ T31] genl_rcv+0x28/0x40 [ 333.054808][ T31] netlink_unicast+0x82f/0x9e0 [ 333.059564][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 333.065077][ T31] ? netlink_sendmsg+0x642/0xb30 [ 333.070089][ T31] ? skb_put+0x11b/0x210 [ 333.074369][ T31] netlink_sendmsg+0x805/0xb30 [ 333.079123][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.084555][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.089480][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.094792][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.100061][ T31] __sock_sendmsg+0x219/0x270 [ 333.104748][ T31] __sys_sendto+0x3bd/0x520 [ 333.109237][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 333.114401][ T31] ? count_memcg_event_mm+0x21/0x260 [ 333.119709][ T31] ? rcu_is_watching+0x15/0xb0 [ 333.124479][ T31] __x64_sys_sendto+0xde/0x100 [ 333.129238][ T31] do_syscall_64+0xfa/0x3b0 [ 333.133750][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.138933][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.145142][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.149803][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.155762][ T31] RIP: 0033:0x7f63f9390d5c [ 333.160159][ T31] RSP: 002b:00007f63fa176ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 333.168593][ T31] RAX: ffffffffffffffda RBX: 00007f63fa176fc0 RCX: 00007f63f9390d5c [ 333.176776][ T31] RDX: 0000000000000020 RSI: 00007f63fa177010 RDI: 0000000000000004 [ 333.184773][ T31] RBP: 0000000000000000 R08: 00007f63fa176f14 R09: 000000000000000c [ 333.192781][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 333.200744][ T31] R13: 00007f63fa176f68 R14: 00007f63fa177010 R15: 0000000000000000 [ 333.208905][ T31] [ 333.211927][ T31] INFO: task syz.4.1060:10000 blocked for more than 145 seconds. [ 333.219888][ T31] Not tainted syzkaller #0 [ 333.224943][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.233781][ T31] task:syz.4.1060 state:D stack:28360 pid:10000 tgid:9998 ppid:5859 task_flags:0x400040 flags:0x00004004 [ 333.245714][ T31] Call Trace: [ 333.248978][ T31] [ 333.251892][ T31] __schedule+0x1798/0x4cc0 [ 333.256427][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.261269][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.266319][ T31] ? __pfx___schedule+0x10/0x10 [ 333.271197][ T31] ? schedule+0x91/0x360 [ 333.275477][ T31] schedule+0x165/0x360 [ 333.279622][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.285091][ T31] __mutex_lock+0x7e6/0x1350 [ 333.289666][ T31] ? __mutex_lock+0x5bb/0x1350 [ 333.294584][ T31] ? genl_rcv_msg+0x10d/0x790 [ 333.299250][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.304282][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.309388][ T31] ? radix_tree_lookup+0x240/0x290 [ 333.314525][ T31] genl_rcv_msg+0x10d/0x790 [ 333.319016][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.324184][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 333.329196][ T31] ? __asan_memcpy+0x40/0x70 [ 333.333834][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 333.339220][ T31] netlink_rcv_skb+0x208/0x470 [ 333.344002][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.348846][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.354052][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.359333][ T31] ? down_read+0x1ad/0x2e0 [ 333.363776][ T31] genl_rcv+0x28/0x40 [ 333.367743][ T31] netlink_unicast+0x82f/0x9e0 [ 333.372671][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 333.377956][ T31] ? netlink_sendmsg+0x642/0xb30 [ 333.383242][ T31] ? skb_put+0x11b/0x210 [ 333.387496][ T31] netlink_sendmsg+0x805/0xb30 [ 333.392254][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.397562][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.402590][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.407875][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.413387][ T31] __sock_sendmsg+0x219/0x270 [ 333.418058][ T31] __sys_sendto+0x3bd/0x520 [ 333.422595][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 333.427628][ T31] ? count_memcg_event_mm+0x21/0x260 [ 333.432939][ T31] ? exc_page_fault+0x76/0xf0 [ 333.437604][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 333.443048][ T31] __x64_sys_sendto+0xde/0x100 [ 333.447801][ T31] do_syscall_64+0xfa/0x3b0 [ 333.452342][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.457552][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.463760][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.468456][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.474623][ T31] RIP: 0033:0x7f63f9390d5c [ 333.479022][ T31] RSP: 002b:00007f63fa155ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 333.487519][ T31] RAX: ffffffffffffffda RBX: 00007f63fa155fc0 RCX: 00007f63f9390d5c [ 333.495529][ T31] RDX: 0000000000000020 RSI: 00007f63fa156010 RDI: 0000000000000003 [ 333.503653][ T31] RBP: 0000000000000000 R08: 00007f63fa155f14 R09: 000000000000000c [ 333.511605][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 333.519587][ T31] R13: 00007f63fa155f68 R14: 00007f63fa156010 R15: 0000000000000000 [ 333.527580][ T31] [ 333.530591][ T31] INFO: task syz.4.1060:10002 blocked for more than 145 seconds. [ 333.538500][ T31] Not tainted syzkaller #0 [ 333.543597][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.552258][ T31] task:syz.4.1060 state:D stack:28360 pid:10002 tgid:9998 ppid:5859 task_flags:0x400040 flags:0x00004004 [ 333.564413][ T31] Call Trace: [ 333.567676][ T31] [ 333.570587][ T31] __schedule+0x1798/0x4cc0 [ 333.575108][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.579949][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.584871][ T31] ? __pfx___schedule+0x10/0x10 [ 333.589739][ T31] ? schedule+0x91/0x360 [ 333.594243][ T31] schedule+0x165/0x360 [ 333.598391][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.603863][ T31] __mutex_lock+0x7e6/0x1350 [ 333.608437][ T31] ? __mutex_lock+0x5bb/0x1350 [ 333.613213][ T31] ? genl_rcv_msg+0x10d/0x790 [ 333.617878][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.623247][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 333.628385][ T31] ? radix_tree_lookup+0x240/0x290 [ 333.633514][ T31] genl_rcv_msg+0x10d/0x790 [ 333.638007][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.643114][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 333.648141][ T31] ? __asan_memcpy+0x40/0x70 [ 333.653005][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 333.658389][ T31] netlink_rcv_skb+0x208/0x470 [ 333.663204][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.668089][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.673162][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.678441][ T31] ? down_read+0x1ad/0x2e0 [ 333.683169][ T31] genl_rcv+0x28/0x40 [ 333.687154][ T31] netlink_unicast+0x82f/0x9e0 [ 333.691903][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 333.697188][ T31] ? netlink_sendmsg+0x642/0xb30 [ 333.702107][ T31] ? skb_put+0x11b/0x210 [ 333.706719][ T31] netlink_sendmsg+0x805/0xb30 [ 333.711508][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.716974][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.721902][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.727206][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.732518][ T31] __sock_sendmsg+0x219/0x270 [ 333.737204][ T31] __sys_sendto+0x3bd/0x520 [ 333.741689][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 333.746875][ T31] ? fd_install+0x97/0x540 [ 333.751278][ T31] ? fd_install+0x30d/0x540 [ 333.755796][ T31] __x64_sys_sendto+0xde/0x100 [ 333.760548][ T31] do_syscall_64+0xfa/0x3b0 [ 333.765069][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.770253][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.776476][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.781137][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.787109][ T31] RIP: 0033:0x7f63f9390d5c [ 333.791508][ T31] RSP: 002b:00007f63f75f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 333.799926][ T31] RAX: ffffffffffffffda RBX: 00007f63f75f4fc0 RCX: 00007f63f9390d5c [ 333.808050][ T31] RDX: 0000000000000024 RSI: 00007f63f75f5010 RDI: 0000000000000009 [ 333.816103][ T31] RBP: 0000000000000000 R08: 00007f63f75f4f14 R09: 000000000000000c [ 333.824121][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 333.832090][ T31] R13: 00007f63f75f4f68 R14: 00007f63f75f5010 R15: 0000000000000000 [ 333.840214][ T31] [ 333.843331][ T31] [ 333.843331][ T31] Showing all locks held in the system: [ 333.851036][ T31] 1 lock held by khungtaskd/31: [ 333.856048][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 333.866270][ T31] 3 locks held by kworker/u8:3/49: [ 333.871378][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 333.881325][ T31] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 333.890229][ T31] #2: ffff8880b8725918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 333.899390][ T31] 2 locks held by getty/5619: [ 333.904102][ T31] #0: ffff88814de080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 333.914015][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 333.924341][ T31] 2 locks held by kworker/u9:5/5869: [ 333.929618][ T31] #0: ffff888024ffb148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 333.940895][ T31] #1: ffffc9000414fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 333.953095][ T31] 3 locks held by syz.0.1050/9953: [ 333.958231][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 333.967183][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 333.976598][ T31] #2: ffff8881433f0a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 333.987556][ T31] 2 locks held by syz.2.1051/9958: [ 333.993215][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.001398][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.010428][ T31] 2 locks held by syz.3.1052/9967: [ 334.015735][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.024214][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.033275][ T31] 2 locks held by syz.1.1057/9987: [ 334.038362][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.046724][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.055744][ T31] 2 locks held by syz.1.1057/9997: [ 334.060831][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.069025][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.078136][ T31] 2 locks held by syz.4.1060/9999: [ 334.083288][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.091481][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.100511][ T31] 2 locks held by syz.4.1060/10000: [ 334.106172][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.114427][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.123457][ T31] 2 locks held by syz.4.1060/10002: [ 334.128631][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.136973][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.146017][ T31] 2 locks held by syz-executor/10008: [ 334.151381][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.159683][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.168885][ T31] 2 locks held by syz-executor/10010: [ 334.174283][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.182514][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.191505][ T31] 2 locks held by syz-executor/10012: [ 334.197028][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.205240][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.214205][ T31] 2 locks held by syz-executor/10022: [ 334.219554][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.227883][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.236877][ T31] 2 locks held by syz-executor/10037: [ 334.242225][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.250426][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.259555][ T31] 2 locks held by syz-executor/10052: [ 334.265049][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.273321][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.282636][ T31] 2 locks held by syz-executor/10053: [ 334.288029][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.296235][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.305236][ T31] 2 locks held by syz-executor/10059: [ 334.310602][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.318942][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.327925][ T31] 2 locks held by syz-executor/10073: [ 334.333318][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.341479][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.350784][ T31] 2 locks held by syz-executor/10084: [ 334.356187][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.364395][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.373593][ T31] 2 locks held by syz-executor/10097: [ 334.378943][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.387143][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.396129][ T31] 2 locks held by syz-executor/10099: [ 334.401475][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.409793][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.418802][ T31] 2 locks held by syz-executor/10113: [ 334.424249][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.432741][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.441731][ T31] 2 locks held by syz-executor/10120: [ 334.447119][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.455310][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.464431][ T31] 2 locks held by syz-executor/10128: [ 334.469779][ T31] #0: ffffffff8f59ff50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 334.478010][ T31] #1: ffffffff8f59fd68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 334.487097][ T31] [ 334.489414][ T31] ============================================= [ 334.489414][ T31] [ 334.497980][ T31] NMI backtrace for cpu 0 [ 334.497991][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 334.498004][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 334.498010][ T31] Call Trace: [ 334.498015][ T31] [ 334.498021][ T31] dump_stack_lvl+0x189/0x250 [ 334.498037][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.498048][ T31] ? __pfx__printk+0x10/0x10 [ 334.498068][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 334.498084][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 334.498098][ T31] ? __pfx__printk+0x10/0x10 [ 334.498113][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 334.498130][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 334.498145][ T31] watchdog+0xf93/0xfe0 [ 334.498160][ T31] ? watchdog+0x1de/0xfe0 [ 334.498176][ T31] kthread+0x70e/0x8a0 [ 334.498190][ T31] ? __pfx_watchdog+0x10/0x10 [ 334.498202][ T31] ? __pfx_kthread+0x10/0x10 [ 334.498215][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.498229][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.498244][ T31] ? __pfx_kthread+0x10/0x10 [ 334.498255][ T31] ret_from_fork+0x439/0x7d0 [ 334.498266][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 334.498279][ T31] ? __switch_to_asm+0x39/0x70 [ 334.498290][ T31] ? __switch_to_asm+0x33/0x70 [ 334.498301][ T31] ? __pfx_kthread+0x10/0x10 [ 334.498313][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.498332][ T31] [ 334.498336][ T31] Sending NMI from CPU 0 to CPUs 1: [ 334.643459][ C1] NMI backtrace for cpu 1 [ 334.643475][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 334.643494][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 334.643505][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 334.643534][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 09 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 334.643549][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 334.643564][ C1] RAX: 6c105e9ee12f5500 RBX: ffffffff81968528 RCX: 6c105e9ee12f5500 [ 334.643577][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b09bc RDI: ffffffff8be33f80 [ 334.643589][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 334.643602][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa2f230 [ 334.643615][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 334.643630][ C1] FS: 0000000000000000(0000) GS:ffff888125d3c000(0000) knlGS:0000000000000000 [ 334.643644][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.643655][ C1] CR2: 00007f3f87cfc245 CR3: 000000000df36000 CR4: 00000000003526f0 [ 334.643669][ C1] Call Trace: [ 334.643676][ C1] [ 334.643682][ C1] default_idle+0x13/0x20 [ 334.643699][ C1] default_idle_call+0x74/0xb0 [ 334.643719][ C1] do_idle+0x1e8/0x510 [ 334.643742][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 334.643760][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.643786][ C1] ? __pfx_do_idle+0x10/0x10 [ 334.643814][ C1] ? do_idle+0x4ed/0x510 [ 334.643838][ C1] cpu_startup_entry+0x44/0x60 [ 334.643861][ C1] start_secondary+0x101/0x110 [ 334.643884][ C1] common_startup_64+0x13e/0x147 [ 334.643912][ C1] [ 334.644510][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 334.825622][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 334.834739][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 334.844782][ T31] Call Trace: [ 334.848053][ T31] [ 334.850974][ T31] dump_stack_lvl+0x99/0x250 [ 334.855558][ T31] ? __asan_memcpy+0x40/0x70 [ 334.860138][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.865329][ T31] ? __pfx__printk+0x10/0x10 [ 334.869931][ T31] vpanic+0x281/0x750 [ 334.873906][ T31] ? __pfx_vpanic+0x10/0x10 [ 334.878394][ T31] ? preempt_schedule+0xae/0xc0 [ 334.883240][ T31] ? preempt_schedule_common+0x83/0xd0 [ 334.888697][ T31] panic+0xb9/0xc0 [ 334.892409][ T31] ? __pfx_panic+0x10/0x10 [ 334.896823][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 334.902192][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 334.908346][ T31] watchdog+0xfd2/0xfe0 [ 334.912505][ T31] ? watchdog+0x1de/0xfe0 [ 334.916838][ T31] kthread+0x70e/0x8a0 [ 334.920903][ T31] ? __pfx_watchdog+0x10/0x10 [ 334.925573][ T31] ? __pfx_kthread+0x10/0x10 [ 334.930156][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.935351][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.940541][ T31] ? __pfx_kthread+0x10/0x10 [ 334.945119][ T31] ret_from_fork+0x439/0x7d0 [ 334.949700][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 334.954802][ T31] ? __switch_to_asm+0x39/0x70 [ 334.959556][ T31] ? __switch_to_asm+0x33/0x70 [ 334.964317][ T31] ? __pfx_kthread+0x10/0x10 [ 334.968904][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.973676][ T31] [ 334.976944][ T31] Kernel Offset: disabled [ 334.981250][ T31] Rebooting in 86400 seconds..