last executing test programs: 5m49.606382776s ago: executing program 3 (id=3348): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x9c, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x89, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f2"]}]}, 0x9c}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="351a0000100001"], 0x28}}, 0x20040881) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 5m48.822870914s ago: executing program 3 (id=3354): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0x3000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) write$cgroup_int(r0, &(0x7f0000000140)=0x401, 0x71) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05002bbd7000fcdbdf2573da792f08000300", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r11, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4810) 5m48.325755843s ago: executing program 3 (id=3359): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffb0b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000040b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, 0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14010000010b0101000070e75394680903080006"], 0x14}, 0x1, 0x0, 0x0, 0x20048881}, 0x4000) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x8, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x7ac, 0x8b, &(0x7f0000000600)=""/139, 0x40f00, 0x61, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x9, 0x4, 0x5}, 0x10, 0x0, r3, 0x0, 0x0, &(0x7f0000000a00), 0x10, 0x7fffffff}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblcr\x00', 0x20, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)=""/197, 0xc5}, {&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000700)=""/87, 0x57}, {&(0x7f0000000500)=""/224, 0xe0}, {0x0}], 0x7}, 0x7ffffffc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xea}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}], 0x7, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000002d00)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) 5m47.906538073s ago: executing program 3 (id=3363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280)={0x4, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e23, @empty}}}, 0x108) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff02000000000003000000000000000112006558"], 0xfdef) 5m46.329131469s ago: executing program 3 (id=3367): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd", @ANYRES32=r1, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c0005"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000041010102000000000000000000000000000001802c00038006000200badd6fb506000100060002004e240000060002004e000000000049a000"/74], 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xca7}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89b1, &(0x7f0000000040)={'tunl0\x00', 0xfffffffe}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x1) 5m45.417663375s ago: executing program 3 (id=3372): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x10, 0x1, 0x2}, {0x10, 0xf, 0x8}], 0x20}, 0x4054) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000feffffff0000000004000004850000d3960009344f8402b29087c960739f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r1, 0xf, 0x0, @void}, 0x10) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r2, &(0x7f0000000200)='THAWED\x00', 0x7) (async) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) (async) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x348, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x38}, @dev={0xfe, 0x80, '\x00', 0x2c}, [0xff000000, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff], 'ipvlan1\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x6}, 0x0, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0xc, [{0x400, 0x1, 0x4, 0x401}, {0x8, 0x7, 0x7}, {0x48, 0x0, 0x2a, 0x6}, {0x9, 0x7, 0x5, 0x3}, {0x6, 0xe, 0x8, 0x1}, {0x4, 0x1e, 0x3, 0x100}, {0x0, 0xfb, 0x8, 0xfffffffa}, {0x1, 0x3, 0x26, 0x8}, {0xa, 0xcc, 0x2, 0x80000000}, {0x5, 0x0, 0x9, 0x6}, {0xf0da, 0x1, 0x2, 0xc0}, {0x20, 0x3, 0x7, 0x4}, {0x9, 0x81, 0x65, 0xa}, {0x1, 0xb3, 0x1, 0xf56e}, {0x6, 0xe2, 0x3, 0xe55}, {0x3, 0x3, 0x2, 0x1}, {0xff, 0x35, 0xc, 0xffffffff}, {0x7, 0x2, 0x7, 0x4}, {0x2, 0xf1, 0x62, 0x9}, {0x1000, 0x3, 0x2, 0x4}, {0x0, 0x4, 0x7, 0xa}, {0xfff9, 0x27, 0xb1, 0x1}, {0x0, 0x0, 0x7}, {0x7c, 0x5, 0x0, 0x9}, {0x846a, 0x6, 0x8, 0x800}, {0x7, 0xff, 0xf8, 0xfff}, {0x7, 0x4, 0x1, 0x7}, {0xd6, 0x0, 0xb5, 0x3}, {0x7524, 0x9, 0x9, 0x6}, {0xfff, 0x2, 0x0, 0xf94}, {0xfff, 0x2, 0x7, 0x1}, {0xff, 0x81, 0xe, 0xfffffffb}, {0x1, 0x0, 0xff, 0x7}, {0x8, 0x0, 0x5, 0x81}, {0x38ca, 0x75, 0x3, 0x7}, {0x3, 0x3, 0x7, 0xf}, {0x6, 0x3, 0xa, 0x800}, {0x80, 0x9, 0x8, 0x4}, {0x490, 0xf4, 0x5, 0x9}, {0x0, 0x9, 0x9, 0x2}, {0x2, 0xff, 0xfe, 0x1}, {0x8, 0x25, 0x0, 0x40}, {0xb8, 0xff, 0x5, 0x7}, {0xffff, 0x6, 0x4, 0x9}, {0x5e, 0x3, 0xb, 0x8}, {0x1, 0x8, 0xe0}, {0x5, 0xb, 0x6, 0xfffffff7}, {0x3d, 0x10, 0x41, 0x400}, {0x1, 0x4, 0x6, 0xf857}, {0x0, 0x7f, 0xd, 0x2}, {0x672, 0x6, 0x98, 0x400}, {0x7, 0x6, 0x4, 0x9}, {0x40, 0x5, 0x9, 0x8}, {0x6, 0x0, 0x50, 0x6}, {0x0, 0xf, 0x4, 0x9}, {0x4855, 0x8c, 0xd6, 0x65f05a4e}, {0x1ff, 0x81, 0x2, 0x7}, {0x1, 0x7, 0xed, 0xf6a3}, {0xff, 0xb8, 0x7, 0x6}, {0xc07e, 0x7, 0x3, 0x8b4}, {0x1, 0x1, 0x7, 0x6}, {0x0, 0x7b, 0xd, 0x40}, {0x4, 0x4, 0x4, 0x58}, {0x2, 0x3, 0x7, 0x1}], {0x101}}}, @common=@hl={{0x28}, {0x1, 0xc7}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0x6, 'pptp\x00', {0x7}}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@connmark={{0x30}, {0xffff8001, 0x10000}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x9, 0xba, 0xfff, 'pptp\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r6) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe0, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x229a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xcb4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc4}, 0x4044081) 5m30.323088142s ago: executing program 32 (id=3372): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x10, 0x1, 0x2}, {0x10, 0xf, 0x8}], 0x20}, 0x4054) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000feffffff0000000004000004850000d3960009344f8402b29087c960739f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r1, 0xf, 0x0, @void}, 0x10) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r2, &(0x7f0000000200)='THAWED\x00', 0x7) (async) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) (async) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x580, 0x0, 0xffffffff, 0xffffffff, 0x348, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x38}, @dev={0xfe, 0x80, '\x00', 0x2c}, [0xff000000, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0x0, 0xffffff00, 0xff], 'ipvlan1\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x6}, 0x0, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0xc, [{0x400, 0x1, 0x4, 0x401}, {0x8, 0x7, 0x7}, {0x48, 0x0, 0x2a, 0x6}, {0x9, 0x7, 0x5, 0x3}, {0x6, 0xe, 0x8, 0x1}, {0x4, 0x1e, 0x3, 0x100}, {0x0, 0xfb, 0x8, 0xfffffffa}, {0x1, 0x3, 0x26, 0x8}, {0xa, 0xcc, 0x2, 0x80000000}, {0x5, 0x0, 0x9, 0x6}, {0xf0da, 0x1, 0x2, 0xc0}, {0x20, 0x3, 0x7, 0x4}, {0x9, 0x81, 0x65, 0xa}, {0x1, 0xb3, 0x1, 0xf56e}, {0x6, 0xe2, 0x3, 0xe55}, {0x3, 0x3, 0x2, 0x1}, {0xff, 0x35, 0xc, 0xffffffff}, {0x7, 0x2, 0x7, 0x4}, {0x2, 0xf1, 0x62, 0x9}, {0x1000, 0x3, 0x2, 0x4}, {0x0, 0x4, 0x7, 0xa}, {0xfff9, 0x27, 0xb1, 0x1}, {0x0, 0x0, 0x7}, {0x7c, 0x5, 0x0, 0x9}, {0x846a, 0x6, 0x8, 0x800}, {0x7, 0xff, 0xf8, 0xfff}, {0x7, 0x4, 0x1, 0x7}, {0xd6, 0x0, 0xb5, 0x3}, {0x7524, 0x9, 0x9, 0x6}, {0xfff, 0x2, 0x0, 0xf94}, {0xfff, 0x2, 0x7, 0x1}, {0xff, 0x81, 0xe, 0xfffffffb}, {0x1, 0x0, 0xff, 0x7}, {0x8, 0x0, 0x5, 0x81}, {0x38ca, 0x75, 0x3, 0x7}, {0x3, 0x3, 0x7, 0xf}, {0x6, 0x3, 0xa, 0x800}, {0x80, 0x9, 0x8, 0x4}, {0x490, 0xf4, 0x5, 0x9}, {0x0, 0x9, 0x9, 0x2}, {0x2, 0xff, 0xfe, 0x1}, {0x8, 0x25, 0x0, 0x40}, {0xb8, 0xff, 0x5, 0x7}, {0xffff, 0x6, 0x4, 0x9}, {0x5e, 0x3, 0xb, 0x8}, {0x1, 0x8, 0xe0}, {0x5, 0xb, 0x6, 0xfffffff7}, {0x3d, 0x10, 0x41, 0x400}, {0x1, 0x4, 0x6, 0xf857}, {0x0, 0x7f, 0xd, 0x2}, {0x672, 0x6, 0x98, 0x400}, {0x7, 0x6, 0x4, 0x9}, {0x40, 0x5, 0x9, 0x8}, {0x6, 0x0, 0x50, 0x6}, {0x0, 0xf, 0x4, 0x9}, {0x4855, 0x8c, 0xd6, 0x65f05a4e}, {0x1ff, 0x81, 0x2, 0x7}, {0x1, 0x7, 0xed, 0xf6a3}, {0xff, 0xb8, 0x7, 0x6}, {0xc07e, 0x7, 0x3, 0x8b4}, {0x1, 0x1, 0x7, 0x6}, {0x0, 0x7b, 0xd, 0x40}, {0x4, 0x4, 0x4, 0x58}, {0x2, 0x3, 0x7, 0x1}], {0x101}}}, @common=@hl={{0x28}, {0x1, 0xc7}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0x6, 'pptp\x00', {0x7}}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@connmark={{0x30}, {0xffff8001, 0x10000}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x9, 0xba, 0xfff, 'pptp\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r6) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe0, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x229a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xcb4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc4}, 0x4044081) 5m8.528726125s ago: executing program 5 (id=3665): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000000"], 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0xd3, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000884800000000000000000000000000000000487b00b5006500000911907800000000640101019404000007077d00000000004e214e2100959078420c0000000000006f1ca0d6d722c8ec45d6bcd0c8629eaa2fb6423a6a71a5fbc4fa8d2ed2d40df2a5d7b6cbdfd73beb55d891de94927ee47e780308cbff4fdcb97fd91cfa623ad5be97083a9fce3e760fa2899a9bccfbdd587761926701993942a59830dbb6b955c7f33ab69c81a0d97c6a4f654b87b6c3d211702575440c69bbdc30e2c5874a24786293c432"], 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x18, 0x5a, 0x1, 0x0, 0x2, {0x2}, [{0x4}]}, 0x18}}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f0000000180)) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) 5m8.389707857s ago: executing program 5 (id=3666): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 5m8.036878375s ago: executing program 5 (id=3670): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000021dfd636dcc26c30c39fc94f195f09e4ced60a98caedb044b8467d8f62100d4503a6bce8f9d69bad1c121c8039862483ae7601fcd855a73aca848a16308aa0e51b3fe422115e111407df5ca7daeb000000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) unshare(0x20000400) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x2) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x1d, 0x1, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000480)='kvm_test_age_hva\x00', r6}, 0x18) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="030000001801238c09d0ff0f1d0dbd30", 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="33000000fc77ffffffffffff", @ANYRES32=r6, @ANYBLOB, @ANYRES64=r3], 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, &(0x7f0000000100)="2fa20bdb5443df167bcadf985adfb7341cf1732e550a7556dc3f3e8b2adc7479ce4c2a16cc767bc540e789f61ec81431dd418d6f641f13d6a0c61640d52b6dc0cba789422b2e98", 0x47, 0x4000, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) writev(r11, &(0x7f0000000900)=[{&(0x7f0000000540)="78e89346", 0x4}], 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) mkdirat$cgroup(r10, &(0x7f00000004c0)='syz1\x00', 0x1ff) 5m7.730474695s ago: executing program 5 (id=3674): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd", @ANYRES32=r1, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c0005"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000041010102000000000000000000000000000001802c00038006000200badd6fb506000100060002004e240000060002004e000000000049a000"/74], 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd14", 0x6a}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89b1, &(0x7f0000000040)={'tunl0\x00', 0xfffffffe}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x1) 5m6.787372027s ago: executing program 5 (id=3687): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="8b040400000000002000128008000100736974001400028008000100", @ANYRES16=r1], 0x40}}, 0x8800) sendmmsg$inet(r0, &(0x7f0000002940)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast2}}}], 0x20}}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000003c0)=[{&(0x7f00000002c0)="22879d4a76", 0x5}, {&(0x7f0000000200)="ea1060", 0x3}], 0x2, 0x3) epoll_pwait(r6, &(0x7f0000000140), 0x0, 0x2, &(0x7f0000000200)={[0x5]}, 0xfffffffffffffe69) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x4e27, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x44fd4b3f}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 5m5.270120737s ago: executing program 5 (id=3705): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x5}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_queued\x00', 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz0\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000002c0)={0x10, 0x1, {0x9, @struct={0x4, 0x20b0}, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1000, 0x1, 0x0, @struct={0x401, 0x3}, 0x9, 0x9, [0x7ff, 0x2, 0x5b1, 0x0, 0xbd, 0xc]}, {0x10000, @struct={0xc, 0x4}, 0x0, 0x6, 0x8, 0x81, 0x1000, 0x5, 0x20, @struct={0x0, 0xfff}, 0x5103, 0x2, [0x0, 0x1, 0xffffffffffff8aaa, 0x80000001, 0x7, 0x5]}, {0xe10, @struct={0x8}, 0x0, 0x0, 0x2, 0x8001, 0x1000, 0x10001, 0x60, @usage=0x1, 0x4, 0x5b17, [0x9, 0xed, 0xffff, 0xd9, 0xa]}, {0x80000001, 0x6, 0x7}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000006c0)={r3, 0x7fffffffffffffff, 0x0, [0x5, 0x0, 0xffffffff, 0x6, 0x5], [0x4, 0x10001, 0x80, 0xfa4, 0x9, 0x5, 0xf, 0x401, 0x9, 0x8000, 0x3, 0x4, 0x7f800000000, 0x6, 0x8, 0x6, 0xb, 0xe5, 0x401, 0x7, 0x8000, 0x6, 0x1, 0x8f, 0x1000, 0x9, 0x8000, 0x5, 0x5c2, 0x4, 0x4, 0x6000000, 0xf, 0x0, 0x7fff, 0xe, 0x800, 0x9, 0xfffffffffffff1f5, 0x2, 0x101, 0x1, 0x6, 0x8, 0x3, 0x8, 0x5, 0x7, 0xdf46, 0xf6ba, 0x3, 0x9, 0x0, 0x3, 0x33, 0x7, 0x9, 0x1, 0x0, 0x1, 0x7, 0x5, 0x6, 0x2, 0x1, 0x2, 0x80, 0x10001, 0x40, 0xfffffffffffffffd, 0x10000, 0x3, 0x4e98000000, 0x0, 0x3, 0xfffffffffffffffc, 0xb, 0x0, 0x2, 0x4, 0x4, 0x1, 0x7, 0x0, 0x3, 0x870, 0x8, 0x1, 0x9c, 0xfffffffffffffffd, 0x8, 0x4, 0x1ff, 0x5, 0x2, 0x0, 0x0, 0xfff, 0x6, 0x5, 0x0, 0x100000001, 0x0, 0xf, 0x0, 0x10, 0x0, 0x3, 0x2, 0x3, 0x8, 0x3, 0x10001, 0x3, 0x3, 0x7, 0x2, 0x1ff, 0x54, 0x161, 0x9]}) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x1, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x30}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffffffffffff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x20000081) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), r2) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xec, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xe}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e80)={&(0x7f0000000e40)='ufshcd_clk_scaling\x00', r2, 0x0, 0x3c8d}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r2) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x70, r6, 0xf294f27598f07a24, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x41}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4800000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2dd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x300040}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xc8, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5d}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000001240)={0x0, 0x42, 0x7}) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) bind$inet(r2, &(0x7f0000001280)={0x2, 0x4e24, @broadcast}, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xc8, r6, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "960a6d79bfe4cb78f79d9ea79ed8de3d541dd7c89d5fb86000e6f6704fbe743b7b3d58f21b782c5bb238"}, @NL80211_ATTR_FRAME_MATCH={0x84, 0x5b, "11a2effdf06e683144f34434a39a8e92b61748899750edb663c42c69abc613e22e42f17ed201f873769f86f980710803fd31f68e36f86f3279e42a985b08863dd17188035bad43d1c499c535a83491bafbdf66262923e1efd1f6eb670866356a5dea69ec451fd029aad4299888b09bf5963d24a0b21e8ec26eeff6d51d93a64e"}]}, 0xc8}}, 0x80) openat$cgroup_procs(r1, &(0x7f0000001480)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001500)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001540)=0x0) r10 = gettid() ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001580)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001780)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001740)={&(0x7f00000015c0)={0x144, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r2}, 0x4) 5m4.881827258s ago: executing program 33 (id=3705): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x5}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_queued\x00', 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f0000000280)='syz0\x00', 0x1ff) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000002c0)={0x10, 0x1, {0x9, @struct={0x4, 0x20b0}, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1000, 0x1, 0x0, @struct={0x401, 0x3}, 0x9, 0x9, [0x7ff, 0x2, 0x5b1, 0x0, 0xbd, 0xc]}, {0x10000, @struct={0xc, 0x4}, 0x0, 0x6, 0x8, 0x81, 0x1000, 0x5, 0x20, @struct={0x0, 0xfff}, 0x5103, 0x2, [0x0, 0x1, 0xffffffffffff8aaa, 0x80000001, 0x7, 0x5]}, {0xe10, @struct={0x8}, 0x0, 0x0, 0x2, 0x8001, 0x1000, 0x10001, 0x60, @usage=0x1, 0x4, 0x5b17, [0x9, 0xed, 0xffff, 0xd9, 0xa]}, {0x80000001, 0x6, 0x7}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000006c0)={r3, 0x7fffffffffffffff, 0x0, [0x5, 0x0, 0xffffffff, 0x6, 0x5], [0x4, 0x10001, 0x80, 0xfa4, 0x9, 0x5, 0xf, 0x401, 0x9, 0x8000, 0x3, 0x4, 0x7f800000000, 0x6, 0x8, 0x6, 0xb, 0xe5, 0x401, 0x7, 0x8000, 0x6, 0x1, 0x8f, 0x1000, 0x9, 0x8000, 0x5, 0x5c2, 0x4, 0x4, 0x6000000, 0xf, 0x0, 0x7fff, 0xe, 0x800, 0x9, 0xfffffffffffff1f5, 0x2, 0x101, 0x1, 0x6, 0x8, 0x3, 0x8, 0x5, 0x7, 0xdf46, 0xf6ba, 0x3, 0x9, 0x0, 0x3, 0x33, 0x7, 0x9, 0x1, 0x0, 0x1, 0x7, 0x5, 0x6, 0x2, 0x1, 0x2, 0x80, 0x10001, 0x40, 0xfffffffffffffffd, 0x10000, 0x3, 0x4e98000000, 0x0, 0x3, 0xfffffffffffffffc, 0xb, 0x0, 0x2, 0x4, 0x4, 0x1, 0x7, 0x0, 0x3, 0x870, 0x8, 0x1, 0x9c, 0xfffffffffffffffd, 0x8, 0x4, 0x1ff, 0x5, 0x2, 0x0, 0x0, 0xfff, 0x6, 0x5, 0x0, 0x100000001, 0x0, 0xf, 0x0, 0x10, 0x0, 0x3, 0x2, 0x3, 0x8, 0x3, 0x10001, 0x3, 0x3, 0x7, 0x2, 0x1ff, 0x54, 0x161, 0x9]}) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x1, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x30}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffffffffffff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x20000081) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), r2) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xec, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xe}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e80)={&(0x7f0000000e40)='ufshcd_clk_scaling\x00', r2, 0x0, 0x3c8d}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r2) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x70, r6, 0xf294f27598f07a24, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x41}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4800000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2dd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001080), r2) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x300040}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xc8, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5d}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x8044) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000001240)={0x0, 0x42, 0x7}) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) bind$inet(r2, &(0x7f0000001280)={0x2, 0x4e24, @broadcast}, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)={0xc8, r6, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x2e, 0x5b, "960a6d79bfe4cb78f79d9ea79ed8de3d541dd7c89d5fb86000e6f6704fbe743b7b3d58f21b782c5bb238"}, @NL80211_ATTR_FRAME_MATCH={0x84, 0x5b, "11a2effdf06e683144f34434a39a8e92b61748899750edb663c42c69abc613e22e42f17ed201f873769f86f980710803fd31f68e36f86f3279e42a985b08863dd17188035bad43d1c499c535a83491bafbdf66262923e1efd1f6eb670866356a5dea69ec451fd029aad4299888b09bf5963d24a0b21e8ec26eeff6d51d93a64e"}]}, 0xc8}}, 0x80) openat$cgroup_procs(r1, &(0x7f0000001480)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001500)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001540)=0x0) r10 = gettid() ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001580)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000001780)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001740)={&(0x7f00000015c0)={0x144, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r2}, 0x4) 26.449174067s ago: executing program 1 (id=6025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05a300000000000000000d000000040003"], 0x1c}}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x0, 0x0}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0x8, 0xa8, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 26.26032552s ago: executing program 1 (id=6029): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xba, 0x1, 0x8}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff1f000000", @ANYRES32, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32, @ANYBLOB="08000c0000ff"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="00012bbd7000fddbdf250000000008000900020000000500060002000000080019007f00000105001400060000000500130001000000060002000000000006000200010000000800090002000000"], 0x54}, 0x1, 0x0, 0x0, 0x20040084}, 0x800) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2, 0x6, 0xb, 0x3, 0x5}, 0x4, 0x11}, [{0xfffffffc, 0xfffffff9, 0x1d47, 0x3, 0x2, 0xe}, {0x8, 0x3, 0x0, 0x7e2, 0x2, 0x3}, {0x9, 0x27c, 0x9fc, 0x7, 0x8, 0x4}, {0x6, 0x80, 0xc, 0x9, 0x3364, 0x8001}, {0x10001, 0x5, 0xf, 0xffffffff, 0x81, 0x13b}, {0x3, 0x14349d83, 0x1000, 0x0, 0x77, 0x800}, {0x7, 0xc, 0xff, 0xfffffffe, 0x1, 0x3}, {0xb17, 0x5, 0x5, 0xc2, 0x8, 0x7}, {0x5, 0xffffff62, 0x0, 0x3, 0xf5, 0x2}, {0x4538, 0x4, 0x9406, 0x1, 0x81, 0x197d}, {0xfffffff9, 0x25e0, 0x1, 0x5, 0xd, 0x8}, {0x4, 0x91, 0x10004, 0x200, 0x5}, {0x0, 0xfffff4e1, 0x7fffffff, 0x1, 0x1, 0xe2}, {0x9, 0x10001, 0x7fffffff, 0x4, 0x6, 0x4f}, {0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x9}, {0xffffc92f, 0x7fff, 0x6, 0x2, 0x5, 0x3}, {0x1, 0x6, 0x401, 0xffffa1fe, 0x0, 0x881}, {0x3, 0xf, 0x6b, 0x9bb5, 0x2, 0x8000}, {0xf, 0x3, 0x2, 0x6a41, 0x2, 0x1}, {0x100, 0x1, 0x7, 0x8001, 0x5, 0x8}, {0x7, 0x0, 0x7ff, 0x9, 0x634, 0x9}, {0x2, 0x186, 0x0, 0x9, 0x4, 0x5}, {0x10001, 0x19, 0x6, 0x800, 0x7, 0xfffffffe}, {0x39, 0x8, 0x0, 0x5, 0xc3f, 0x6d}, {0xfffffff7, 0xe3, 0x1, 0xffffffd2, 0x8, 0x944}, {0x0, 0x8000, 0x4, 0xffffffff, 0x0, 0x4}, {0x4, 0x4, 0xea82, 0xd16, 0xe687, 0xb}, {0xb9e, 0x800, 0x3eaa2532, 0x80000001, 0x2, 0x5}, {0x0, 0x4, 0x3, 0xa9, 0x2, 0x23f3}, {0x1f, 0x47, 0xfffffff7, 0x4, 0x6, 0x8}, {0x3, 0xb01, 0x26, 0x10000, 0x4b, 0x3}, {0x6, 0x9, 0xfffffffc, 0x4, 0x2, 0x1}, {0x668, 0x6, 0x10000, 0x10001, 0xd66e, 0x4}, {0x0, 0xf, 0x0, 0x1ff, 0xcb, 0xffff8001}, {0x4, 0x2, 0xb853, 0x9}, {0x9, 0x5, 0xa, 0x8000, 0x7, 0x1a}, {0x800, 0x4, 0x80, 0x0, 0x4, 0xa}, {0x1, 0x0, 0x400, 0x39, 0x40, 0xffff}, {0xe, 0xa8, 0x7fffffff, 0x6, 0x7, 0x6}, {0x10, 0x10, 0xfffffffc, 0x3, 0x0, 0x80}, {0xc, 0x8001, 0x6cbf, 0x2, 0x7fffffff, 0xfffffffc}, {0x5, 0x80000000, 0x8, 0x5, 0x10, 0x200}, {0x800, 0x60, 0x3, 0x8001, 0x81, 0x2}, {0x8, 0xe25, 0x8, 0xffff0001, 0x9, 0xa}, {0x3, 0x7, 0x7, 0x9, 0x4, 0x24}, {0xcd85, 0xb, 0x218a, 0x4, 0x5, 0x1}, {0x200, 0x2, 0x97e, 0x1, 0xa, 0xd814}, {0x1, 0x3ff, 0x2d2c, 0x2, 0x8, 0x11898e13}, {0x6, 0x2, 0x8000, 0x9, 0x6, 0x2}, {0x80f, 0x852, 0xc66, 0x7, 0x6, 0x3}, {0x2, 0x9, 0xfffffffa, 0x5, 0x4, 0x2}, {0x3, 0xb, 0x2, 0x9, 0x3dbc0000, 0x200}, {0xfffffffe, 0xc, 0x5b, 0x5, 0x5, 0x2}, {0x9, 0x5, 0x8, 0xffff, 0x7f3b, 0x80}, {0x3, 0x5, 0x8, 0xf96, 0xfe0, 0x9}, {0x10001, 0x4, 0xf, 0x1, 0x401, 0x8}, {0xfffffff5, 0x7ff, 0xffff, 0x8000, 0x7, 0x8}, {0x0, 0xffe00000, 0x9, 0x2, 0xd91, 0x7}, {0x5, 0x2, 0x7fffffff, 0x0, 0xfffffff8, 0xfff}, {0x400, 0x9, 0x6, 0x5, 0x9, 0x2}, {0xb6f, 0x9, 0x7fff, 0x48bc, 0x2, 0x7ff}, {0x0, 0x5, 0x2, 0x8, 0x85, 0x10}, {0xff, 0x5, 0x0, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x200, 0x9, 0x5, 0x3}, {0x9, 0x40, 0x18d, 0x7, 0x0, 0x3}, {0x5, 0x7ff80000, 0xffffffff, 0xd, 0x80000000, 0x3}, {0x80000001, 0x81, 0x7a82, 0x0, 0x3, 0x4}, {0x1000, 0x298edb52, 0xffa1, 0x6cd, 0xfffffff8, 0xeecf}, {0x5, 0x2, 0x6, 0x3ff, 0x8, 0x10}, {0x4, 0x9, 0x7, 0x1, 0x7, 0xfffffffd}, {0x80000001, 0xffffff80, 0x7ff, 0x9, 0x9, 0x6}, {0x3, 0x8, 0x7, 0xb2d, 0x8, 0x85}, {0xb3b, 0x9fee, 0xbe1, 0xb1a0, 0x9, 0x100}, {0x0, 0x5b, 0x6fc, 0x9, 0x7, 0x41}, {0x5, 0x7, 0x3, 0x3, 0x0, 0x10001}, {0x8, 0x84, 0x3, 0x80000001, 0x3}, {0x8, 0x8001, 0x7, 0x7f, 0x2, 0x8}, {0x4, 0x1ff, 0x6d3, 0x6, 0x6, 0xa000}, {0x10001, 0xbf4, 0x2, 0x8001, 0x7f}, {0x3800000, 0x6, 0x1ff, 0x10000, 0xffffff9e, 0x3}, {0x7, 0x0, 0x4, 0x1, 0x6, 0x7}, {0x8, 0x7, 0x5, 0x5, 0x10000, 0x1}, {0x6, 0x4, 0x90f3, 0x4, 0xa9, 0x3}, {0x7fffffff, 0x9, 0x6, 0x3, 0xd105, 0x4}, {0x5, 0x4, 0xa, 0x6, 0x5, 0x2}, {0x5, 0x7a96, 0xa54, 0x100, 0x0, 0xe}, {0x1, 0xfffffffe, 0x4, 0x6, 0x6}, {0x0, 0x2, 0x4, 0x2, 0x2, 0xe4}, {0xc000000, 0xfff, 0x6, 0x6, 0x894, 0x6}, {0x3, 0x3, 0x2, 0x1678, 0x5, 0x2}, {0x6, 0x80000001, 0xde1, 0xff, 0x7, 0x8}, {0x2, 0x0, 0x7fff, 0x80000003, 0x2, 0x86db}, {0xf7ef, 0x7, 0x200, 0x4, 0x8, 0xc6ab}, {0x2, 0x1, 0x2, 0x4, 0x6, 0x7}, {0x5e27, 0x8, 0xffffffff, 0x6, 0x1000, 0x8}, {0x2, 0x2, 0xff, 0x6, 0xf, 0x5}, {0x7, 0x8, 0x2e16, 0x3ff, 0x8, 0x401}, {0x6, 0x3, 0x5, 0xfffffff9, 0xbd83, 0x7}, {0x7e1, 0x9, 0x7ff, 0x100000, 0x8, 0x401}, {0x4, 0xb, 0x6, 0x8, 0x95, 0xf32}, {0x7, 0xfff, 0x3, 0xaeb3, 0x7, 0xffff}, {0xfff, 0x5f, 0x3ff, 0x8, 0x101, 0xffffd453}, {0x0, 0x9, 0x6, 0x400, 0x2, 0x7}, {0xbda0, 0x4, 0x8, 0x4, 0x557, 0x101}, {0x3, 0x1000, 0x5, 0x37, 0xbcc2, 0x345}, {0x100, 0x0, 0x7f, 0xffffff00, 0x1ff, 0x8}, {0x1, 0x4, 0xfff, 0x2, 0x2, 0x7}, {0x9, 0x9, 0x467, 0x4, 0x4, 0x2}, {0x8cd, 0x2, 0x2, 0x4c, 0xc, 0x8}, {0x2, 0x10000, 0x8, 0x0, 0x200, 0x2}, {0x7, 0x80000000, 0x101, 0x401, 0x1ff, 0x4}, {0x10, 0x8, 0x9, 0x6, 0x1, 0x3}, {0x2, 0x0, 0x9, 0x3, 0x3, 0x5}, {0xfd, 0x2, 0x6, 0x101, 0x1, 0x401}, {0x42, 0x1, 0x2, 0x4, 0x0, 0x1}, {0x6, 0x4, 0x9, 0x3, 0x2097, 0x7}, {0x10001, 0x9, 0x9, 0x2, 0x6539, 0xfffffff7}, {0x80, 0xb00, 0x86, 0x1, 0x10, 0x80000001}, {0x8, 0x9, 0xc, 0x8000, 0x3, 0x5}, {0x0, 0xfffffff7, 0x6, 0x6, 0x7fff, 0x3}, {0x4, 0x1800000, 0xfffffffd, 0x4, 0x1c000, 0x68}, {0x0, 0xfffffffb, 0x5, 0x806c, 0x4, 0x5}, {0x5, 0x7, 0x9, 0x8009, 0x2, 0x4}, {0x9, 0x1, 0xfff, 0x9, 0xc, 0xfffffffb}, {0x9, 0x7f3, 0x1000, 0x4, 0x5, 0x3}, {0x1, 0x401, 0xffffe7ad, 0xa, 0x894, 0x7}, {0x64d7e3ec, 0x2000009, 0x1ff, 0x5, 0x8001, 0x8}, {0x0, 0x78f3, 0x7fffffff, 0x78b, 0xffffffff, 0x3}], [{0x1, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x2}, {0x2}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x6}, {0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x1}, {0x5}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x7}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x3}, {0x1, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x1}, {0x1}, {0x5}, {}, {0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x3}, {0x4}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0xdc11eedf34026e23}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x3}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={r12, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000fe00100001040300"/20, @ANYRES32=0x0, @ANYBLOB="2825020000080000200012800c0001006d6163766c616e00100002800a000900aaaaaaaaaabb000008000500", @ANYRES32=r1, @ANYBLOB], 0x48}}, 0x800) 25.449235361s ago: executing program 1 (id=6034): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x2, 0x0, @local, 0x2}]}, &(0x7f00000002c0)=0x10) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d"], 0x110}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31000000001400000011006d"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x100, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, 0x4}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in=@empty, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x2c}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0xffffffffffffff0b}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r6, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 25.008900784s ago: executing program 1 (id=6039): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x200000000000011, 0x2, 0xd) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc1b}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}]}, &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x83c1d2ed2e1eb6fe, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0xa, 0xf, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000004c0)=[{0x4, 0x4, 0x7}, {0x0, 0x1, 0xc, 0x6}], 0x10, 0xfffffffd}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640), &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r3, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map=0x1, r3, 0x7, 0x34, 0x0, @void, @void, @void, @value=r5, r4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pB \x00'}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map=r6, r2, 0x7, 0x10, r0, @void, @value=r0, @void, @void, r4}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f0000000740)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x1400, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$packet(r1, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', r11, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xe, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b70300000000004a780000005600000095"], &(0x7f00000000c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0x40f00, 0x2}, 0x94) 24.679692264s ago: executing program 1 (id=6045): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x64, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8b}]}]}, 0x64}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0}}], 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x64, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8b}]}]}, 0x64}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0}}], 0x2, 0x0) (async) 24.208853636s ago: executing program 1 (id=6048): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000fff300000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.413090285s ago: executing program 2 (id=6073): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x3}, {0x6}]}) write$ppp(r0, &(0x7f0000000480)="334908f89d", 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="d9da6cc3dd4a422545d353a9000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$PPPIOCBRIDGECHAN(r0, 0x40047435, &(0x7f00000001c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r6, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x21}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x4040) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800010004000000000000008020000900040005"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 20.003631516s ago: executing program 2 (id=6078): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0040ebb54000"/15], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300000000000085000000330000009525c8365b134b96bf455c0459ced6b70c9250653031f5eee67bc66bb297df03d987000f109a48ede12da24ee17a5b0fc1"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004000000040000000900000400000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x2a) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000680)={0x5, {{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0x88) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000060a010400000000000000000a0000050900020073007a320000000034000480200001800d00010073796e70726f7879000000000c0002800800034000000008590001800800010064757000040002800900010073797a3100000000140000001100010000000000000000000e00000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x20000000, 0x0, 0x4, 0x2, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000400"], 0x1c}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b70400000000000085000000"], 0x0}, 0x94) read(r9, &(0x7f00000003c0)=""/114, 0x72) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 18.972696497s ago: executing program 2 (id=6086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x4000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) r2 = accept(r1, 0x0, &(0x7f00000000c0)) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000}, @NFULA_CFG_MODE={0xa}]}, 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000240)={'dvmrp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = accept4$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000002c0)=0x3, 0x8) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x21, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, {}, {}, [@map_fd={0x18, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x5c, 0x0, 0x6, 0x9, 0x1}, @ldst={0x2, 0x1, 0x2, 0x8, 0x8, 0x80, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x2, 0x3d, &(0x7f0000000c00)=""/61, 0x40f00, 0x60, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000c40)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000c80)={0x5, 0x0, 0x9, 0xfffffeff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000cc0)=[0x1, 0x1], &(0x7f0000000d00)=[{0x1, 0x5, 0x3, 0xc}, {0x2, 0x5, 0x0, 0x7}, {0x1, 0x2, 0xd, 0x8}, {0x4, 0x1, 0x2}, {0x3, 0x1, 0x10, 0x2}, {0x4, 0x3, 0x2, 0x7}, {0x0, 0x4, 0xc, 0x7}, {0x0, 0x4, 0xc, 0x5}, {0x1, 0x3, 0x4}], 0x10, 0x8000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)='%pB \x00'}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x12, 0x1a, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x2, 0x2, 0x4, 0x9, 0x2, 0xfffffffffffffff0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x7c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x8, 0x67, &(0x7f0000000600)=""/103, 0x40f00, 0x53, '\x00', 0x0, @fallback=0x24, r7, 0x8, &(0x7f00000006c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x1, 0x9}, 0x10, r9, r10, 0x5, &(0x7f0000001000)=[0xffffffffffffffff, r11, 0xffffffffffffffff, 0x1, r12], &(0x7f0000001040)=[{0x2, 0xfffffff9, 0xc, 0x5}, {0x54, 0x4, 0x5, 0x2}, {0x2, 0x3, 0x1, 0x5}, {0x1, 0x2, 0xe, 0xa}, {0x0, 0x3, 0xc, 0x7}], 0x10, 0x9}, 0x94) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000001180)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000011c0)={r11, r8, 0x25, 0x1, @void}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001200)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x44, 0x0, "9186799bfe8da67d53f96f349a58b041414a3c28793e35d92d8cdfee690271f38d633b2a6f413572d3b54ee0b8d1db93b671bc2414d7dfbce5d4596ae2c845a66149d81f83018c2c7eabe8cf6ff74a06"}, 0xd8) r14 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_SEND(r13, 0x40489426, &(0x7f0000001340)={{r14}, 0x6, &(0x7f0000001300)=[0x6, 0x8, 0x8, 0x80000001, 0x9, 0x4], 0x1, 0xa}) socketpair(0x10, 0x3, 0x5, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_add_memb(r16, 0x107, 0x1, &(0x7f0000001400)={r8, 0x1, 0x6}, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(r12, 0xca289435, &(0x7f0000001440)={0x3, 0x8b, @status={[0x9, 0x6, 0x4, 0x40, 0x6, 0x2]}, [0x6, 0xfffffffffffffeff, 0xd37, 0x2, 0x2, 0x1, 0x8, 0x8, 0x9, 0x7, 0xc01, 0x4, 0x5, 0x10001, 0x9, 0xffff, 0x2, 0xffffffffffffff94, 0xf5a, 0x7, 0x3, 0xa, 0x3, 0x5, 0xb481, 0x4, 0x8, 0x0, 0x80000001, 0x9, 0x52a, 0x9, 0x5, 0x3, 0x1, 0xc, 0x0, 0x2, 0x9, 0x3, 0x3, 0x0, 0x4, 0x9, 0x1000, 0x81, 0x2, 0x2, 0xfed7, 0x1, 0x3ff, 0x8000000000000001, 0x7ff, 0xbe0e, 0x3, 0x6, 0x4, 0x6, 0x10001, 0x8000000000000000, 0x5, 0x2, 0x7ff, 0x1000]}) ioctl(r5, 0x200, &(0x7f0000001e80)="4061f1630296a439c58d3f8c0dcd2c7a7789f8d3ba94b609dec3e37b43361ad77dbff567015d58db62ba9c5470333cbdb0fef79d5538680a3ad177585ffc9519d37976078b0e1f7c1d1eb7f2a5fe969f975f81f8b0101141a9d92d5222ce08e2c6905ce45b35ab63d85e93f06d25ebf4117c429289f8547ad0da34b6fe5b82196a8529389c2d3d541aafce2803232cf828368569c682f6aadf9e9baa9f86d07404f25a52e6bb9b1ab5ddab") socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r15, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xf}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x800) 18.557297335s ago: executing program 2 (id=6091): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in=@loopback, 0x4e24, 0x100, 0x4e24, 0x0, 0xa, 0x80, 0x0, 0x33}, {0x7, 0xffffffffc9de0286, 0x5, 0x9, 0x3, 0x80, 0x4, 0xffffffffffff8000}, {0x75, 0x4, 0x2, 0x1000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, {{@in6=@remote, 0x4d2, 0x2b}, 0xa, @in=@local, 0x3501, 0x2, 0x0, 0x6, 0x659fbcf4, 0xe, 0x5}}, 0xe8) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711253000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 18.366715385s ago: executing program 2 (id=6094): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/18]) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000004}, 0x10}, 0x94) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x26, 0x5, 0xffffffff) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000740)={0x14, 0x5e, 0x1, 0x70bd29}, 0x14}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c00028005000100000000000800074000"/148], 0x94}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0xd4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xff}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_SRC={0x48, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xd4}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x34}, 0x10) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x5, &(0x7f0000000540)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x80000003}, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r11}, 0x20) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) (async) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xfe}, {&(0x7f00000001c0)="5ce4b241", 0x4}], 0x2}, 0x8000) 18.146138883s ago: executing program 2 (id=6097): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc0100af190001000000000000000000fe80000000000000bb0a01012100000000000000000000000000000003000000000a00002008000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000000000000000000030b56c0000000000000000000000000000000000000000000000000100000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000044010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff0200000000000000000000000000010000000032000000020000002001000000000000000000000000000100000000000000000000000003000000000000002001000000000000000000000001000000000000000000000a000000ffffffff000000000000000000000000000000000100"], 0x1fc}}, 0x4000800) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xb2, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000a400000000000190780a014102ac1414aa0304907801000000420000000000000000110000ac1e010100000000a4bdcb5867a62151bc4861154144440fd3ac1e0001000001016401010100010000ffffffff00088000e00000010000000c640101000000000064010101000004000a01010200000000e000000100000006440400018212ecfddbe0c1eecdafbd4dfe9fa050258283177a0000000064010100ac141435ac1414aaacc33bda9f0000"], 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000400)=@generic={0x1, 0x8000000000000000, 0x9}) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)}, 0x8000}, {{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000280)}], 0x3, &(0x7f00000004c0)=""/243, 0xf3}, 0x8000}, {{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000900)=""/246, 0xf6}, {&(0x7f0000000a00)=""/165, 0xa5}, {&(0x7f0000000ac0)=""/88, 0x58}, {&(0x7f0000000b40)=""/110, 0x6e}, {&(0x7f0000000bc0)=""/75, 0x4b}, {&(0x7f0000000c40)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f0000001e80)=""/169, 0xa9}, 0x9a77}], 0x4, 0x10002, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xf, 0x1, {0x5}}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x5, 0xfef5) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0xfdffffff}, 0x1c) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40014) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 17.424222663s ago: executing program 4 (id=6102): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3ff, 0xffff, 0x2, 0x1f}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x10, 0x0, "b20fc19dcea1a2f64cd3368960179b0a3811acf296c264b1b3fb980632bb28e0fd5bdc0e3d3c15e77d4993e70a79f1256777954e7ec11252c1f5824eccf4ee5fd8450c8ad9ce5dc6f62732c5b8b06018"}, 0xd8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r8], 0x24}}, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @private0}, @in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000004c0)={r9, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x80}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = socket$unix(0x1, 0x2, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r12, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r11, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000380)=[{r11, 0x4}], 0x1, 0x0, 0x0, 0x0) readv(r10, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001000000000000000000000000000208000a00", @ANYRES32, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20081}, 0x0) 16.464615696s ago: executing program 6 (id=6109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0xffffffffffffffff, {0x0, 0x0, 0x3}, {0x2, 0xff}, 0x0, 0xfd}], 0x20) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000300)=0x2, 0x4) ioctl$SIOCAX25NOUID(r6, 0x89e3, &(0x7f0000000280)=0x1) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000061400082bbd7000fedbdf2508000100010000000800010000000000080001000100000008000100010000000c0001000200000008000100020000000800010002000000"], 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x40090) 16.453246446s ago: executing program 4 (id=6110): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000d0aac00000000000000000000000000090002"], 0x20}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x114}], 0x1, 0x0, 0x0, 0x800}, 0x4008811) 16.325247545s ago: executing program 4 (id=6111): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) close(0x3) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newlink={0x20, 0x10, 0x403, 0x300}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) 16.246722909s ago: executing program 6 (id=6112): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="840100001000010027bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="004100000800000014002b8008000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="170896009dec29162aa864329f55c80f627a3f2123b07c2a2a58686696db012379013d66ccd3b016ed82e96725c9c7f6fc2a892a44fb079a65bb5042a5f0a508bb1dada13e364050544803c30b12c5"], 0x184}}, 0x4008000) 16.241182651s ago: executing program 4 (id=6113): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r0, 0x1) 16.065214051s ago: executing program 4 (id=6114): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000e00000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80300001600010000000100fcffffff0a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080201d000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x3c8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010300000000000000000200000000000000000000000800060000000200"], 0x24}}, 0x0) socket$inet6(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x60) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x37, 0x9d, 0x62}, 0x2c) r5 = socket$inet6(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x5, 0x181a}, {@private=0xa010100, 0x4e20, 0x2, 0x80a, 0x80012d58, 0x9}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 16.052208159s ago: executing program 6 (id=6115): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000200)=0x80) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) (async) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000025c0)={'veth0_to_team\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000005c0)='cubic\x00', 0x6) sendmsg$inet(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x1a}, @remote}}}], 0x40}, 0x40800) (async) sendmsg$inet(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x1a}, @remote}}}], 0x40}, 0x40800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) (async) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x3, 0x10}, &(0x7f0000000640)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x3, 0x10}, &(0x7f0000000640)=0xc) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x54, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x10000}, {0xc, 0x90, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x20000801) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, &(0x7f0000000040)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@float={0x3, 0x0, 0x0, 0x10, 0x2}, @enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x4}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000980)=""/165, 0x3c, 0xa5, 0x1, 0x5}, 0x28) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r13, 0x0, 0x8008000000010, &(0x7f0000000140)="1700000002000100008c5e687a8a6a003c00020100ecff3f0001000300dc290001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb2e2f8144243c519f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c9000000000100000000000080c457681f009cee79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000a000000a1348fe947f1da062a00000000000000000000000000000000000000140000dcbfcbab01710627757fe7ea", 0xb9) 15.939899249s ago: executing program 0 (id=6116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c00010028bd7000fcdbf29f07000000", @ANYRES32=r2, @ANYBLOB="0200260b0a000200aaaaaaaaaa"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 15.811597125s ago: executing program 6 (id=6117): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2b, 0xffffffff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0xfd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044050}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000180)=@udp6=r1, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000900)="0082", &(0x7f0000000200)=@udp6=r1}, 0x20) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0xfff, 0xe, 0x5, 0x9b, 0xffffffff}, 0x14) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x4010, r3, 0x2000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f00000007c0)}, 0x20) (async) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a00000800000500"], 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000850) 15.788955456s ago: executing program 4 (id=6118): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=ANY=[@ANYBLOB="2c0000001200375f3fbd", @ANYBLOB="755a9bb1e9f2d3a1"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8884) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x235, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x4c}}, 0x20000000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24040000", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000020000000800620009000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x42080}, 0x50) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000021b000008000300", @ANYRES32=r4], 0x28}, 0x1, 0x6c00}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000001ac0)={0x0, 0x0, "889ad2", 0x5, 0x2}) 15.762642358s ago: executing program 0 (id=6119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x980) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x980) (async) 15.761907323s ago: executing program 6 (id=6120): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140), 0x4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x8, 0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r1}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000540)=0x9, 0x2) (async) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000540)=0x9, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r4, 0x0, 0x80000000000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 15.62291774s ago: executing program 0 (id=6121): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="850300000000ffffffffffff86dd6000000000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x40240c4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.354722716s ago: executing program 0 (id=6122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x10, 0x803, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000003900)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000008400000000000000c502020000001000"], 0x18, 0x4}], 0x1, 0x40010) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, 0x0, &(0x7f00000005c0)) socket$unix(0x1, 0x5, 0x0) (async) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x8, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) (async, rerun: 64) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) (async, rerun: 64) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000c9b8319ba2c700", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000180)={0x8, 0x5, 0xdcb4}, 0xc) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=@delqdisc={0x3c, 0x25, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x6, 0xb}, {0xffe0, 0xd}, {0x4, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x40}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0x81, 0x7a}}]}, 0x3c}}, 0x40) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r8}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) (async) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @remote}, &(0x7f00000000c0)=0xc) (async) socket$xdp(0x2c, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 15.350171832s ago: executing program 6 (id=6123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x70bd26, 0x0, {0xa, 0x0, 0x3, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x4}}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002b000b0000000000000000000600000008000300040009000c000180"], 0x28}}, 0x8000) 15.276896534s ago: executing program 0 (id=6124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0x2, 0x5a, 0x53, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x80, 0x9, 0x1}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', r2, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000002c0), &(0x7f0000000240)=r4}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.180901426s ago: executing program 0 (id=6125): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) bind$ax25(r0, &(0x7f0000000480)={{0x3, @default, 0x21}, [@null, @default, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) connect$ax25(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000050000000000000000000100000a280000000b0a010200000000000000000a0000080900010073797a300000000008000c40000000091400"], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000010700000000000000feffffff9500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='snd_soc_dapm_connected\x00', r7}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x30, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x80) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, 0x0}, 0xff03}], 0x2, 0x8000) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) 2.140000166s ago: executing program 34 (id=6097): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc0100af190001000000000000000000fe80000000000000bb0a01012100000000000000000000000000000003000000000a00002008000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000000000000000000030b56c0000000000000000000000000000000000000000000000000100000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000400000000400000000000000000001000000000044010500ac141439000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff000000000000000000000000007f000001000000000000000000000000000000003200000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000100000001030000000000000000000000000000ff0200000000000000000000000000010000000032000000020000002001000000000000000000000000000100000000000000000000000003000000000000002001000000000000000000000001000000000000000000000a000000ffffffff000000000000000000000000000000000100"], 0x1fc}}, 0x4000800) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xb2, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000a400000000000190780a014102ac1414aa0304907801000000420000000000000000110000ac1e010100000000a4bdcb5867a62151bc4861154144440fd3ac1e0001000001016401010100010000ffffffff00088000e00000010000000c640101000000000064010101000004000a01010200000000e000000100000006440400018212ecfddbe0c1eecdafbd4dfe9fa050258283177a0000000064010100ac141435ac1414aaacc33bda9f0000"], 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000400)=@generic={0x1, 0x8000000000000000, 0x9}) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)}, 0x8000}, {{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)=""/68, 0x44}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000280)}], 0x3, &(0x7f00000004c0)=""/243, 0xf3}, 0x8000}, {{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000880)=""/105, 0x69}, {&(0x7f0000000900)=""/246, 0xf6}, {&(0x7f0000000a00)=""/165, 0xa5}, {&(0x7f0000000ac0)=""/88, 0x58}, {&(0x7f0000000b40)=""/110, 0x6e}, {&(0x7f0000000bc0)=""/75, 0x4b}, {&(0x7f0000000c40)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f0000001e80)=""/169, 0xa9}, 0x9a77}], 0x4, 0x10002, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0xf, 0x1, {0x5}}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x5, 0xfef5) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0xfdffffff}, 0x1c) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40014) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 108.260656ms ago: executing program 35 (id=6125): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) bind$ax25(r0, &(0x7f0000000480)={{0x3, @default, 0x21}, [@null, @default, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) connect$ax25(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000050000000000000000000100000a280000000b0a010200000000000000000a0000080900010073797a300000000008000c40000000091400"], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000010700000000000000feffffff9500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='snd_soc_dapm_connected\x00', r7}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x30, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x80) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, 0x0}, 0xff03}], 0x2, 0x8000) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) 69.471618ms ago: executing program 36 (id=6123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x309, 0x70bd26, 0x0, {0xa, 0x0, 0x3, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x4}}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002b000b0000000000000000000600000008000300040009000c000180"], 0x28}}, 0x8000) 0s ago: executing program 37 (id=6118): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001700)=ANY=[@ANYBLOB="2c0000001200375f3fbd", @ANYBLOB="755a9bb1e9f2d3a1"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8884) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x235, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x4c}}, 0x20000000) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24040000", @ANYRES16=r2, @ANYBLOB="00002bbd700000000000020000000800620009000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x42080}, 0x50) (async) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000021b000008000300", @ANYRES32=r4], 0x28}, 0x1, 0x6c00}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000001ac0)={0x0, 0x0, "889ad2", 0x5, 0x2}) kernel console output (not intermixed with test programs): 40][T26653] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 810.099954][T26653] R13: 00007ff2757d6128 R14: 00007ff2757d6090 R15: 00007ffffc684698 [ 810.099991][T26653] [ 810.341214][T20741] bond1: (slave macvlan2): failed to get link speed/duplex [ 810.452320][T20739] bond1: (slave macvlan2): failed to get link speed/duplex [ 810.572859][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 810.690072][T20741] bond1: (slave macvlan2): failed to get link speed/duplex [ 810.823073][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 810.914304][T26674] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5519'. [ 810.939784][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 810.975597][T26675] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5519'. [ 811.056371][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 811.168953][T20741] bond1: (slave macvlan2): failed to get link speed/duplex [ 811.509764][T26696] tipc: Enabled bearer , priority 0 [ 811.538985][T26696] syzkaller0: entered promiscuous mode [ 811.544512][T26696] syzkaller0: entered allmulticast mode [ 811.611677][T26696] tipc: Resetting bearer [ 811.727558][T26696] tipc: Resetting bearer [ 811.821213][T26696] tipc: Disabling bearer [ 812.134920][T26715] FAULT_INJECTION: forcing a failure. [ 812.134920][T26715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.165663][T26715] CPU: 0 UID: 0 PID: 26715 Comm: syz.4.5530 Not tainted syzkaller #0 PREEMPT(full) [ 812.165697][T26715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 812.165711][T26715] Call Trace: [ 812.165721][T26715] [ 812.165732][T26715] dump_stack_lvl+0x189/0x250 [ 812.165764][T26715] ? __pfx____ratelimit+0x10/0x10 [ 812.165789][T26715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.165816][T26715] ? __pfx__printk+0x10/0x10 [ 812.165848][T26715] ? __might_fault+0xb0/0x130 [ 812.165901][T26715] should_fail_ex+0x414/0x560 [ 812.165943][T26715] _copy_from_user+0x2d/0xb0 [ 812.165975][T26715] ___sys_recvmsg+0x12e/0x510 [ 812.166016][T26715] ? __pfx____sys_recvmsg+0x10/0x10 [ 812.166085][T26715] ? __might_fault+0xb0/0x130 [ 812.166122][T26715] do_recvmmsg+0x307/0x770 [ 812.166164][T26715] ? __pfx_do_recvmmsg+0x10/0x10 [ 812.166210][T26715] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 812.166260][T26715] __x64_sys_recvmmsg+0x190/0x240 [ 812.166296][T26715] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 812.166324][T26715] ? rcu_is_watching+0x15/0xb0 [ 812.166353][T26715] ? do_syscall_64+0xbe/0x3b0 [ 812.166385][T26715] do_syscall_64+0xfa/0x3b0 [ 812.166409][T26715] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.166434][T26715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.166456][T26715] ? clear_bhb_loop+0x60/0xb0 [ 812.166483][T26715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.166504][T26715] RIP: 0033:0x7fae03b8eba9 [ 812.166524][T26715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.166544][T26715] RSP: 002b:00007fae0497d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 812.166567][T26715] RAX: ffffffffffffffda RBX: 00007fae03dd6090 RCX: 00007fae03b8eba9 [ 812.166583][T26715] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000006 [ 812.166598][T26715] RBP: 00007fae0497d090 R08: 0000000000000000 R09: 0000000000000000 [ 812.166612][T26715] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 812.166625][T26715] R13: 00007fae03dd6128 R14: 00007fae03dd6090 R15: 00007ffe82056138 [ 812.166662][T26715] [ 812.176294][T26717] syzkaller1: entered promiscuous mode [ 812.428819][T26717] syzkaller1: entered allmulticast mode [ 812.543269][T26724] netlink: 'syz.1.5535': attribute type 10 has an invalid length. [ 812.566854][T26729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5534'. [ 812.585472][T26729] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 812.591618][T26724] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5535'. [ 812.617487][T26722] vlan2: entered allmulticast mode [ 812.662406][T26724] team0: entered promiscuous mode [ 812.667558][T26724] team_slave_0: entered promiscuous mode [ 812.677497][T26724] team_slave_1: entered promiscuous mode [ 812.863578][T26734] netlink: 'syz.1.5536': attribute type 2 has an invalid length. [ 812.885189][T26734] þ: entered promiscuous mode [ 812.925599][T26740] syzkaller1: entered promiscuous mode [ 812.931716][T26740] syzkaller1: entered allmulticast mode [ 812.951380][T26734] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 813.003138][T26738] nbd3: detected capacity change from 0 to 549764202496 [ 813.013646][ T51] block nbd3: Receive control failed (result -32) [ 813.085847][T26736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5537'. [ 815.273395][T26793] .70·: left allmulticast mode [ 815.278258][T26793] hsr_slave_0: left allmulticast mode [ 815.294009][T26793] hsr_slave_1: left allmulticast mode [ 815.313110][T26793] mac80211_hwsim hwsim53 syzkaller0: left promiscuous mode [ 815.328589][T26793] mac80211_hwsim hwsim53 syzkaller0: left allmulticast mode [ 815.392031][T26793] bond1: left promiscuous mode [ 815.397096][T26793] bond1: left allmulticast mode [ 815.420669][T26793] bridge4: left promiscuous mode [ 815.425687][T26793] bridge4: left allmulticast mode [ 815.679507][ T8960] net_ratelimit: 19 callbacks suppressed [ 815.679532][ T8960] bond1: (slave macvlan2): failed to get link speed/duplex [ 815.898475][T26822] netlink: 'syz.2.5557': attribute type 13 has an invalid length. [ 815.906543][T26822] netlink: 'syz.2.5557': attribute type 17 has an invalid length. [ 815.932381][T26826] netlink: 'syz.4.5559': attribute type 3 has an invalid length. [ 815.940809][ T8960] bond1: (slave macvlan2): failed to get link speed/duplex [ 815.954797][T26826] netlink: 'syz.4.5559': attribute type 1 has an invalid length. [ 815.958602][T26822] gretap0: refused to change device tx_queue_len [ 816.035946][T26822] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 816.215693][T26833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5560'. [ 816.236055][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 816.430078][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 816.574060][T26844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5562'. [ 816.677310][T26843] dvmrp8: entered allmulticast mode [ 816.761659][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 816.891838][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 817.096708][T26860] FAULT_INJECTION: forcing a failure. [ 817.096708][T26860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.139179][T26860] CPU: 0 UID: 0 PID: 26860 Comm: syz.0.5566 Not tainted syzkaller #0 PREEMPT(full) [ 817.139212][T26860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 817.139226][T26860] Call Trace: [ 817.139236][T26860] [ 817.139246][T26860] dump_stack_lvl+0x189/0x250 [ 817.139279][T26860] ? __pfx____ratelimit+0x10/0x10 [ 817.139306][T26860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.139334][T26860] ? __pfx__printk+0x10/0x10 [ 817.139365][T26860] ? __might_fault+0xb0/0x130 [ 817.139411][T26860] should_fail_ex+0x414/0x560 [ 817.139453][T26860] _copy_from_user+0x2d/0xb0 [ 817.139483][T26860] ___sys_recvmsg+0x12e/0x510 [ 817.139522][T26860] ? __pfx____sys_recvmsg+0x10/0x10 [ 817.139588][T26860] ? __might_fault+0xb0/0x130 [ 817.139624][T26860] do_recvmmsg+0x307/0x770 [ 817.139668][T26860] ? __pfx_do_recvmmsg+0x10/0x10 [ 817.139715][T26860] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 817.139764][T26860] __x64_sys_recvmmsg+0x190/0x240 [ 817.139801][T26860] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 817.139830][T26860] ? rcu_is_watching+0x15/0xb0 [ 817.139860][T26860] ? do_syscall_64+0xbe/0x3b0 [ 817.139891][T26860] do_syscall_64+0xfa/0x3b0 [ 817.139916][T26860] ? lockdep_hardirqs_on+0x9c/0x150 [ 817.139939][T26860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.139961][T26860] ? clear_bhb_loop+0x60/0xb0 [ 817.139986][T26860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.140007][T26860] RIP: 0033:0x7f5424d8eba9 [ 817.140026][T26860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.140045][T26860] RSP: 002b:00007f5425c5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 817.140067][T26860] RAX: ffffffffffffffda RBX: 00007f5424fd6090 RCX: 00007f5424d8eba9 [ 817.140083][T26860] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000006 [ 817.140097][T26860] RBP: 00007f5425c5a090 R08: 0000000000000000 R09: 0000000000000000 [ 817.140111][T26860] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 817.140140][T26860] R13: 00007f5424fd6128 R14: 00007f5424fd6090 R15: 00007ffce720eee8 [ 817.140178][T26860] [ 817.399107][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 817.736440][T26874] netlink: 244 bytes leftover after parsing attributes in process `syz.6.5569'. [ 817.770520][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 817.900382][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 817.929047][T26884] erspan0: entered promiscuous mode [ 817.938538][T26884] macsec2: entered promiscuous mode [ 817.970418][T26886] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 818.003658][T26884] erspan0: left promiscuous mode [ 818.243969][T26898] netlink: 'syz.0.5577': attribute type 6 has an invalid length. [ 818.302371][T26898] netlink: 'syz.0.5577': attribute type 12 has an invalid length. [ 818.329047][T26898] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5577'. [ 818.577298][T26908] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5580'. [ 818.694408][T26912] netlink: 'syz.4.5582': attribute type 3 has an invalid length. [ 818.717545][T26912] netlink: 'syz.4.5582': attribute type 1 has an invalid length. [ 818.746044][T26912] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5582'. [ 818.788806][T26912] NCSI netlink: No device for ifindex 0 [ 818.821000][T26916] netlink: 'syz.0.5583': attribute type 10 has an invalid length. [ 818.851145][T26916] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5583'. [ 818.863414][T26917] netlink: 'syz.2.5584': attribute type 3 has an invalid length. [ 818.889773][T26916] team0: Port device geneve0 added [ 819.339803][T26944] netlink: 'syz.4.5590': attribute type 13 has an invalid length. [ 819.351712][T26944] netlink: 'syz.4.5590': attribute type 17 has an invalid length. [ 819.396513][T26946] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5592'. [ 819.491315][T26944] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.574593][T26941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.823869][T26959] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5595'. [ 820.012245][T26962] netlink: 'syz.2.5596': attribute type 1 has an invalid length. [ 820.024200][T26962] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5596'. [ 820.041602][ T51] Bluetooth: hci5: link tx timeout [ 820.050009][ T51] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 820.060604][ T51] Bluetooth: hci5: link tx timeout [ 820.065772][ T51] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 820.137811][T26964] tipc: Enabled bearer , priority 0 [ 820.150746][T26964] syzkaller0: entered promiscuous mode [ 820.156271][T26964] syzkaller0: entered allmulticast mode [ 820.244341][T26964] tipc: Resetting bearer [ 820.275623][T26963] tipc: Resetting bearer [ 820.342443][T26963] tipc: Disabling bearer [ 820.410723][T26976] netlink: 'syz.0.5601': attribute type 83 has an invalid length. [ 820.850010][ T8960] net_ratelimit: 19 callbacks suppressed [ 820.850036][ T8960] bond1: (slave macvlan2): failed to get link speed/duplex [ 821.069501][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 821.201910][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 821.371087][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 821.498952][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 821.642469][T27008] __nla_validate_parse: 2 callbacks suppressed [ 821.642493][T27008] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5612'. [ 821.669950][T20741] bond1: (slave macvlan2): failed to get link speed/duplex [ 822.139029][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 822.524019][T27027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 823.361792][T27049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5618'. [ 823.394601][T27049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5618'. [ 824.796451][T27046] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 824.898955][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.120222][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.261783][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.513586][T27084] syz_tun: entered promiscuous mode [ 825.562517][T27084] macsec1: entered allmulticast mode [ 825.586045][T27084] syz_tun: entered allmulticast mode [ 825.623870][T27084] syz_tun: left allmulticast mode [ 825.631908][T27084] syz_tun: left promiscuous mode [ 825.699020][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 825.900978][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 826.090241][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 826.261217][T27110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5634'. [ 826.296522][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 826.409596][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 826.547083][T27129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5638'. [ 826.713035][T27133] bond0: (slave 0!): Releasing backup interface [ 826.748021][T27138] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5640'. [ 826.760068][T27136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5639'. [ 826.767555][T27133] bridge_slave_0: left promiscuous mode [ 826.784030][T27133] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.807582][T27133] bridge_slave_1: left allmulticast mode [ 826.821633][T27133] bridge_slave_1: left promiscuous mode [ 826.829670][T27133] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.896259][T27133] bond0: (slave bond_slave_0): Releasing backup interface [ 826.915481][T27147] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5642'. [ 826.984334][T27133] bond0: (slave bond_slave_1): Releasing backup interface [ 827.035183][T27133] team0: Port device team_slave_0 removed [ 827.087813][T27133] team0: Port device team_slave_1 removed [ 827.125541][T27133] bond0: (slave batadv_slave_0): Releasing backup interface [ 827.143171][T27133] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 827.822068][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 827.898380][T27173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5648'. [ 827.910229][T27173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5648'. [ 827.995169][T27174] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5648'. [ 828.008828][T27173] validate_nla: 2 callbacks suppressed [ 828.008850][T27173] netlink: 'syz.0.5648': attribute type 4 has an invalid length. [ 828.228967][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 828.243843][T27182] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5650'. [ 828.478797][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 828.540620][T27189] syzkaller1: left promiscuous mode [ 828.578760][T27189] syzkaller1: left allmulticast mode [ 828.631016][T20741] bond1: (slave macvlan2): failed to get link speed/duplex [ 828.753102][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 829.264504][T27220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5662'. [ 829.284936][T27220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5662'. [ 830.139945][T27262] netlink: 'syz.1.5674': attribute type 1 has an invalid length. [ 830.201589][T27265] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5674'. [ 831.329213][ T3523] net_ratelimit: 9 callbacks suppressed [ 831.329236][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 831.560852][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 831.680780][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 831.723763][T27319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 831.785018][T27319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5689'. [ 831.799732][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 832.032161][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 832.189537][T20741] bond1: (slave macvlan2): failed to get link speed/duplex [ 832.274066][T27333] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5693'. [ 832.311344][T20741] bond1: (slave macvlan2): failed to get link speed/duplex [ 832.428792][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 832.448373][T27317] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 832.454106][T27340] FAULT_INJECTION: forcing a failure. [ 832.454106][T27340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.473577][T27340] CPU: 0 UID: 0 PID: 27340 Comm: syz.6.5696 Not tainted syzkaller #0 PREEMPT(full) [ 832.473609][T27340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 832.473624][T27340] Call Trace: [ 832.473634][T27340] [ 832.473644][T27340] dump_stack_lvl+0x189/0x250 [ 832.473678][T27340] ? __pfx____ratelimit+0x10/0x10 [ 832.473706][T27340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 832.473734][T27340] ? __pfx__printk+0x10/0x10 [ 832.473766][T27340] ? __might_fault+0xb0/0x130 [ 832.473811][T27340] should_fail_ex+0x414/0x560 [ 832.473851][T27340] _copy_from_user+0x2d/0xb0 [ 832.473882][T27340] ___sys_recvmsg+0x12e/0x510 [ 832.473930][T27340] ? __pfx____sys_recvmsg+0x10/0x10 [ 832.473998][T27340] ? __might_fault+0xb0/0x130 [ 832.474034][T27340] do_recvmmsg+0x307/0x770 [ 832.474077][T27340] ? __pfx_do_recvmmsg+0x10/0x10 [ 832.474123][T27340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 832.474173][T27340] __x64_sys_recvmmsg+0x190/0x240 [ 832.474209][T27340] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 832.474240][T27340] ? rcu_is_watching+0x15/0xb0 [ 832.474269][T27340] ? do_syscall_64+0xbe/0x3b0 [ 832.474301][T27340] do_syscall_64+0xfa/0x3b0 [ 832.474327][T27340] ? lockdep_hardirqs_on+0x9c/0x150 [ 832.474353][T27340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.474375][T27340] ? clear_bhb_loop+0x60/0xb0 [ 832.474403][T27340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.474426][T27340] RIP: 0033:0x7f191e18eba9 [ 832.474451][T27340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.474472][T27340] RSP: 002b:00007f191ef79038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 832.474496][T27340] RAX: ffffffffffffffda RBX: 00007f191e3d5fa0 RCX: 00007f191e18eba9 [ 832.474513][T27340] RDX: 0000000004000169 RSI: 0000200000005000 RDI: 0000000000000006 [ 832.474528][T27340] RBP: 00007f191ef79090 R08: 0000000000000000 R09: 0000000000000000 [ 832.474543][T27340] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000002 [ 832.474557][T27340] R13: 00007f191e3d6038 R14: 00007f191e3d5fa0 R15: 00007ffc8fa0d168 [ 832.474593][T27340] [ 832.692096][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 832.828409][T27351] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5699'. [ 832.846395][T27351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5699'. [ 833.427307][T27377] tipc: Enabled bearer , priority 0 [ 833.445697][T27377] syzkaller0: entered promiscuous mode [ 833.464934][T27377] syzkaller0: entered allmulticast mode [ 833.525564][T27377] tipc: Resetting bearer [ 833.545312][T27376] netlink: 'syz.6.5703': attribute type 1 has an invalid length. [ 833.582036][T27374] tipc: Resetting bearer [ 833.624163][T27374] tipc: Disabling bearer [ 833.888274][T27380] gretap1: entered allmulticast mode [ 833.921586][T27394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5708'. [ 833.950263][T27380] bond1: (slave gretap1): making interface the new active one [ 833.961421][T27397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5709'. [ 833.971412][T27380] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 834.081447][T27392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5707'. [ 834.250004][T27405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5710'. [ 834.808561][T27418] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 834.826819][ T5946] IPVS: starting estimator thread 0... [ 834.929728][T27419] IPVS: using max 24 ests per chain, 57600 per kthread [ 834.972405][T27424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5716'. [ 834.997529][T27424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5716'. [ 835.044794][T27430] netlink: 'syz.2.5716': attribute type 5 has an invalid length. [ 835.633603][T27451] netlink: 'syz.0.5721': attribute type 4 has an invalid length. [ 836.366698][ T37] net_ratelimit: 12 callbacks suppressed [ 836.366723][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 836.522097][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 836.631614][T27474] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 836.796717][T27479] netlink: 'syz.0.5724': attribute type 16 has an invalid length. [ 836.805484][T27479] netlink: 'syz.0.5724': attribute type 17 has an invalid length. [ 837.258477][T27479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 837.330555][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 837.449571][T20745] bond1: (slave macvlan2): failed to get link speed/duplex [ 837.569068][T27489] bond1: option mode: unable to set because the bond device has slaves [ 837.636598][T27493] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 837.706760][T27489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 837.774226][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 837.825420][T27497] __nla_validate_parse: 1 callbacks suppressed [ 837.825451][T27497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5734'. [ 838.063944][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 838.209696][T20745] bond1: (slave macvlan2): failed to get link speed/duplex [ 838.330201][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 838.705141][T27520] netlink: 'syz.1.5739': attribute type 16 has an invalid length. [ 838.713408][T27520] netlink: 'syz.1.5739': attribute type 17 has an invalid length. [ 838.991181][T27527] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5742'. [ 839.153413][T27527] netlink: 'syz.0.5742': attribute type 16 has an invalid length. [ 839.170196][T27527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5742'. [ 839.329051][T27530] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 839.598607][T27536] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5745'. [ 839.714423][T27540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5744'. [ 839.762040][T27540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5744'. [ 839.812734][T27545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5744'. [ 839.839461][T27545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5744'. [ 839.859216][T27545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5744'. [ 839.889629][T27545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5744'. [ 839.982331][T27549] tipc: Enabled bearer , priority 0 [ 840.009188][T27548] tipc: Enabling of bearer rejected, already enabled [ 840.037053][T27549] syzkaller0: entered promiscuous mode [ 840.082685][T27549] syzkaller0: entered allmulticast mode [ 840.154016][T27548] tipc: Resetting bearer [ 840.203891][T27546] tipc: Resetting bearer [ 840.260037][T27546] tipc: Disabling bearer [ 840.585892][T27556] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 841.408820][T20739] net_ratelimit: 24 callbacks suppressed [ 841.408843][T20739] bond1: (slave macvlan2): failed to get link speed/duplex [ 841.550486][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 841.644747][T27595] unsupported nlmsg_type 40 [ 841.678766][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 841.801074][T20739] bond1: (slave macvlan2): failed to get link speed/duplex [ 841.953131][T20745] bond1: (slave macvlan2): failed to get link speed/duplex [ 842.085137][T20739] bond1: (slave macvlan2): failed to get link speed/duplex [ 842.219937][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 842.317282][T27609] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 842.359892][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 842.559578][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 843.962252][T27645] __nla_validate_parse: 2 callbacks suppressed [ 843.962276][T27645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5774'. [ 844.108484][T27643] syzkaller0: entered promiscuous mode [ 844.118566][T27643] syzkaller0: entered allmulticast mode [ 844.364102][T27653] tipc: Enabling of bearer rejected, already enabled [ 844.462106][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5777'. [ 845.130118][T27681] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5786'. [ 845.471496][T27702] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.595282][T27702] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.649877][T27719] vlan3: entered promiscuous mode [ 845.655495][T27719] vlan3: entered allmulticast mode [ 845.675025][T27719] hsr_slave_1: entered allmulticast mode [ 845.689841][T27702] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.763218][T27702] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.775472][T27722] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5795'. [ 845.946160][T20745] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.988288][ T1320] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.031866][ T1320] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.055781][ T1320] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.519500][ T37] net_ratelimit: 31 callbacks suppressed [ 846.519528][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 846.523539][T27740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5801'. [ 846.562907][T27742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5802'. [ 846.698349][T27745] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5803'. [ 846.779102][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 846.898910][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 847.027728][T27750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5806'. [ 847.060189][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 847.128566][T27754] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5807'. [ 847.252810][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 847.291861][T27760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5809'. [ 847.408984][T20738] bond1: (slave macvlan2): failed to get link speed/duplex [ 847.560400][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 847.838822][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 847.989966][T20745] bond1: (slave macvlan2): failed to get link speed/duplex [ 848.102173][T20745] bond1: (slave macvlan2): failed to get link speed/duplex [ 848.240562][T27784] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 848.259498][T27784] bridge7: entered allmulticast mode [ 848.376932][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 848.388591][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 848.399931][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 848.413983][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 848.423028][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 848.516177][T17335] syz_tun (unregistering): left allmulticast mode [ 849.495553][T27826] netlink: 'syz.2.5823': attribute type 16 has an invalid length. [ 849.503884][T27826] netlink: 'syz.2.5823': attribute type 17 has an invalid length. [ 849.637365][T27793] chnl_net:caif_netlink_parms(): no params data found [ 849.739311][T27832] __nla_validate_parse: 1 callbacks suppressed [ 849.739331][T27832] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5826'. [ 849.777182][ T1320] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.853645][T20741] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.001761][T27842] FAULT_INJECTION: forcing a failure. [ 850.001761][T27842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.032846][T27842] CPU: 0 UID: 0 PID: 27842 Comm: syz.6.5828 Not tainted syzkaller #0 PREEMPT(full) [ 850.032880][T27842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 850.032895][T27842] Call Trace: [ 850.032915][T27842] [ 850.032926][T27842] dump_stack_lvl+0x189/0x250 [ 850.032959][T27842] ? __pfx____ratelimit+0x10/0x10 [ 850.032987][T27842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.033015][T27842] ? __pfx__printk+0x10/0x10 [ 850.033047][T27842] ? __might_fault+0xb0/0x130 [ 850.033093][T27842] should_fail_ex+0x414/0x560 [ 850.033133][T27842] _copy_from_iter+0x1de/0x1790 [ 850.033170][T27842] ? rcu_is_watching+0x15/0xb0 [ 850.033195][T27842] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 850.033229][T27842] ? __pfx__copy_from_iter+0x10/0x10 [ 850.033258][T27842] ? __build_skb_around+0x257/0x3e0 [ 850.033291][T27842] ? netlink_sendmsg+0x642/0xb30 [ 850.033317][T27842] ? skb_put+0x11b/0x210 [ 850.033350][T27842] netlink_sendmsg+0x6b2/0xb30 [ 850.033390][T27842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.033422][T27842] ? aa_sock_msg_perm+0xf1/0x1d0 [ 850.033449][T27842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 850.033474][T27842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.033510][T27842] __sock_sendmsg+0x219/0x270 [ 850.033537][T27842] ____sys_sendmsg+0x505/0x830 [ 850.033574][T27842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 850.033617][T27842] ? import_iovec+0x74/0xa0 [ 850.033651][T27842] ___sys_sendmsg+0x21f/0x2a0 [ 850.033686][T27842] ? __pfx____sys_sendmsg+0x10/0x10 [ 850.033760][T27842] ? __fget_files+0x2a/0x420 [ 850.033780][T27842] ? __fget_files+0x3a0/0x420 [ 850.033813][T27842] __x64_sys_sendmsg+0x19b/0x260 [ 850.033849][T27842] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 850.033892][T27842] ? __pfx_ksys_write+0x10/0x10 [ 850.033927][T27842] ? rcu_is_watching+0x15/0xb0 [ 850.033956][T27842] ? do_syscall_64+0xbe/0x3b0 [ 850.033988][T27842] do_syscall_64+0xfa/0x3b0 [ 850.034015][T27842] ? lockdep_hardirqs_on+0x9c/0x150 [ 850.034040][T27842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.034063][T27842] ? clear_bhb_loop+0x60/0xb0 [ 850.034091][T27842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.034113][T27842] RIP: 0033:0x7f191e18eba9 [ 850.034134][T27842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.034153][T27842] RSP: 002b:00007f191ef79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.034178][T27842] RAX: ffffffffffffffda RBX: 00007f191e3d5fa0 RCX: 00007f191e18eba9 [ 850.034195][T27842] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000003 [ 850.034209][T27842] RBP: 00007f191ef79090 R08: 0000000000000000 R09: 0000000000000000 [ 850.034224][T27842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.034238][T27842] R13: 00007f191e3d6038 R14: 00007f191e3d5fa0 R15: 00007ffc8fa0d168 [ 850.034274][T27842] [ 850.377083][T27793] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.430375][T27793] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.437694][T27793] bridge_slave_0: entered allmulticast mode [ 850.491028][T27793] bridge_slave_0: entered promiscuous mode [ 850.505477][T20741] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.542367][ T5873] Bluetooth: hci1: command tx timeout [ 850.550676][T20741] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.567815][ T37] veth3: left allmulticast mode [ 850.587034][ T37] veth3: left promiscuous mode [ 850.604245][ T37] bridge2: port 1(veth3) entered disabled state [ 850.921703][T27853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5831'. [ 850.932620][ T37] bond0 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 850.950853][ T37] bond0 (unregistering): (slave ip6gretap2): Releasing backup interface [ 850.983808][T27854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5831'. [ 851.550612][ T37] bond4 (unregistering): (slave geneve2): Releasing active interface [ 851.971546][ T37] bond0 (unregistering): Released all slaves [ 851.997976][ T37] bond1 (unregistering): Released all slaves [ 852.016310][ T37] bond2 (unregistering): Released all slaves [ 852.053008][ T37] bond3 (unregistering): Released all slaves [ 852.238433][ T37] bond4 (unregistering): Released all slaves [ 852.257150][ T37] bond5 (unregistering): Released all slaves [ 852.452650][ T37] bond6 (unregistering): Released all slaves [ 852.624351][ T5873] Bluetooth: hci1: command tx timeout [ 852.634230][ T37] bond7 (unregistering): Released all slaves [ 852.647929][T27793] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.655804][T27793] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.664047][T27793] bridge_slave_1: entered allmulticast mode [ 852.672136][T27793] bridge_slave_1: entered promiscuous mode [ 852.695358][T27873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5833'. [ 852.727414][T27853] bridge0: entered allmulticast mode [ 852.834105][T27872] netlink: 'syz.1.5833': attribute type 2 has an invalid length. [ 852.892967][T27793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.006724][ T37] k›*·: left promiscuous mode [ 853.042472][T27793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.165954][T27876] IPVS: Error joining to the multicast group [ 853.195011][T27879] lo: entered allmulticast mode [ 853.209743][ T37] tipc: Disabling bearer [ 853.226381][ T37] tipc: Left network mode [ 853.232135][ T8967] net_ratelimit: 6 callbacks suppressed [ 853.232157][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 853.279885][T27880] nbd5: detected capacity change from 0 to 127 [ 853.288301][ T5873] block nbd5: Receive control failed (result -32) [ 853.306623][T27881] dvmrp8: entered allmulticast mode [ 853.341412][T27793] team0: Port device team_slave_0 added [ 853.347730][T27872] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5833'. [ 853.382675][ T37] IPVS: stopping backup sync thread 23658 ... [ 853.403448][T27793] team0: Port device team_slave_1 added [ 853.479906][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 853.599749][T27793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.607602][T27793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.645095][T27793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.674182][T27879] netlink: 'syz.2.5835': attribute type 23 has an invalid length. [ 853.700580][T27793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.708179][T27793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.744936][T27793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.032355][T27877] lo: left allmulticast mode [ 854.038215][T27877] dvmrp8: left allmulticast mode [ 854.075220][T27900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5840'. [ 854.104061][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 854.193037][T27793] hsr_slave_0: entered promiscuous mode [ 854.200718][T27793] hsr_slave_1: entered promiscuous mode [ 854.207162][T27793] debugfs: 'hsr0' already exists in 'hsr' [ 854.213513][T27793] Cannot create hsr debugfs directory [ 854.288933][T27900] tipc: Enabling of bearer rejected, already enabled [ 854.334376][T27907] netlink: 'syz.0.5841': attribute type 16 has an invalid length. [ 854.342571][T27907] netlink: 'syz.0.5841': attribute type 17 has an invalid length. [ 854.351601][T27903] mac80211_hwsim hwsim53 syzkaller0: entered promiscuous mode [ 854.359805][T27903] mac80211_hwsim hwsim53 syzkaller0: entered allmulticast mode [ 854.371509][ T37] hsr_slave_0: left promiscuous mode [ 854.704110][ T5873] Bluetooth: hci1: command tx timeout [ 855.365401][T27907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 855.701624][T27918] netlink: 'syz.0.5844': attribute type 1 has an invalid length. [ 855.862241][T27922] bond5: (slave bridge8): making interface the new active one [ 855.871621][T27922] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 855.933767][T27793] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.942581][T27927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5845'. [ 856.058365][ T37] IPVS: stop unused estimator thread 0... [ 856.065375][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 856.128062][T27793] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.201787][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 856.265528][T27793] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.384037][T20745] bond1: (slave macvlan2): failed to get link speed/duplex [ 856.440615][T27793] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.604437][T27949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5853'. [ 856.619808][T20745] bond1: (slave macvlan2): failed to get link speed/duplex [ 856.779818][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 856.782700][ T5873] Bluetooth: hci1: command tx timeout [ 856.956699][T27793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 856.990022][T27959] tipc: Enabling of bearer rejected, already enabled [ 857.019119][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 857.102254][T27793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 857.144097][T27793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 857.202981][T27793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 857.531086][T27976] tipc: Enabling of bearer rejected, already enabled [ 857.728786][T27793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.752569][T27793] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.785162][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.792408][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.853976][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.861251][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.221824][T27992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5863'. [ 858.246908][T27992] bridge: RTM_NEWNEIGH with invalid state 0x2c [ 858.356733][T28001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5866'. [ 858.379133][ T1320] net_ratelimit: 4 callbacks suppressed [ 858.379155][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 858.445106][T28001] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-0o%": -EINTR [ 858.541292][T20741] bond1: (slave macvlan2): failed to get link speed/duplex [ 858.843223][T28025] netlink: 'syz.6.5869': attribute type 1 has an invalid length. [ 858.854844][T28025] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5869'. [ 858.887873][T28023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5871'. [ 859.513857][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 859.606263][T28035] dvmrp8: entered allmulticast mode [ 859.751378][T20739] bond1: (slave macvlan2): failed to get link speed/duplex [ 859.761605][T28043] netlink: 'syz.1.5876': attribute type 11 has an invalid length. [ 859.808323][T27793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.079775][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 860.305467][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 860.592906][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 860.794112][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 860.809896][T27793] veth0_vlan: entered promiscuous mode [ 860.866511][T27793] veth1_vlan: entered promiscuous mode [ 860.985277][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 861.122230][T28084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5884'. [ 861.146507][T27793] veth0_macvtap: entered promiscuous mode [ 861.182686][T27793] veth1_macvtap: entered promiscuous mode [ 861.230031][T20741] bond1: (slave macvlan2): failed to get link speed/duplex [ 861.266558][T27793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.286539][T27793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.319004][T20743] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.330464][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.355689][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.442269][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.645542][T20743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.679275][T20743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.730968][T28100] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5889'. [ 861.868143][T28107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5890'. [ 861.950689][T20741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.971505][T20741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.981406][T28145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5898'. [ 863.011962][T28145] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5898'. [ 863.256636][T28156] tipc: Started in network mode [ 863.273520][T28156] tipc: Node identity e20df955f001, cluster identity 4711 [ 863.292501][T28156] tipc: Enabled bearer , priority 0 [ 863.389504][ T3523] net_ratelimit: 12 callbacks suppressed [ 863.389526][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 863.414048][T28157] syzkaller0: entered promiscuous mode [ 863.431915][T28157] syzkaller0: entered allmulticast mode [ 863.532490][T28157] tipc: Resetting bearer [ 863.559575][T20743] bond1: (slave macvlan2): failed to get link speed/duplex [ 863.679690][T20743] bond1: (slave macvlan2): failed to get link speed/duplex [ 863.808965][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 863.919901][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 863.954665][T28170] tipc: Enabling of bearer rejected, failed to enable media [ 864.014426][T28155] tipc: Resetting bearer [ 864.053728][T28155] tipc: Disabling bearer [ 864.099146][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 864.125913][T28175] syzkaller1: entered promiscuous mode [ 864.146944][T28175] syzkaller1: entered allmulticast mode [ 864.205930][T28178] syzkaller1: entered promiscuous mode [ 864.214861][T28178] syzkaller1: entered allmulticast mode [ 864.240671][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 864.269609][T28182] syz_tun: entered allmulticast mode [ 864.276663][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5908'. [ 864.446407][T28182] syz_tun (unregistering): left allmulticast mode [ 864.498813][ T8967] bond1: (slave macvlan2): failed to get link speed/duplex [ 864.535986][T28203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5913'. [ 864.621018][T20739] bond1: (slave macvlan2): failed to get link speed/duplex [ 864.658599][T28203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5913'. [ 864.693777][T28208] syzkaller1: entered promiscuous mode [ 864.707662][T28208] syzkaller1: entered allmulticast mode [ 864.719757][T28208] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.5911'. [ 864.731553][T28208] tipc: Enabling of bearer rejected, already enabled [ 864.749581][T20739] bond1: (slave macvlan2): failed to get link speed/duplex [ 864.784318][T28211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.861582][T28215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5917'. [ 864.887064][T28211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.235400][T28261] __nla_validate_parse: 1 callbacks suppressed [ 866.235423][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5926'. [ 866.291744][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5926'. [ 866.335556][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5926'. [ 866.401764][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5926'. [ 866.473262][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5926'. [ 866.524383][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5926'. [ 866.547625][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5926'. [ 866.575462][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5926'. [ 866.592915][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5926'. [ 866.616341][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5926'. [ 867.946187][T28292] FAULT_INJECTION: forcing a failure. [ 867.946187][T28292] name failslab, interval 1, probability 0, space 0, times 0 [ 868.003658][T28292] CPU: 1 UID: 0 PID: 28292 Comm: syz.2.5931 Not tainted syzkaller #0 PREEMPT(full) [ 868.003692][T28292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 868.003707][T28292] Call Trace: [ 868.003718][T28292] [ 868.003728][T28292] dump_stack_lvl+0x189/0x250 [ 868.003762][T28292] ? __pfx____ratelimit+0x10/0x10 [ 868.003789][T28292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 868.003824][T28292] ? __pfx__printk+0x10/0x10 [ 868.003863][T28292] ? __pfx___might_resched+0x10/0x10 [ 868.003890][T28292] should_fail_ex+0x414/0x560 [ 868.003930][T28292] should_failslab+0xa8/0x100 [ 868.003965][T28292] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 868.003999][T28292] ? __get_vm_area_node+0x13f/0x300 [ 868.004035][T28292] __get_vm_area_node+0x13f/0x300 [ 868.004072][T28292] __vmalloc_node_range_noprof+0x301/0x12f0 [ 868.004107][T28292] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 868.004139][T28292] ? __lock_acquire+0xab9/0xd20 [ 868.004203][T28292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 868.004235][T28292] ? __might_fault+0xb0/0x130 [ 868.004269][T28292] ? _parse_integer_limit+0x1ae/0x1f0 [ 868.004299][T28292] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 868.004329][T28292] __vmalloc_noprof+0xb1/0xf0 [ 868.004362][T28292] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 868.004403][T28292] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 868.004442][T28292] bpf_prog_alloc+0x3c/0x1a0 [ 868.004477][T28292] bpf_prog_load+0x735/0x1930 [ 868.004523][T28292] ? __pfx_bpf_prog_load+0x10/0x10 [ 868.004579][T28292] ? bpf_lsm_bpf+0x9/0x20 [ 868.004605][T28292] ? security_bpf+0x7e/0x300 [ 868.004640][T28292] __sys_bpf+0x528/0x870 [ 868.004672][T28292] ? __pfx___sys_bpf+0x10/0x10 [ 868.004716][T28292] ? ksys_write+0x22a/0x250 [ 868.004749][T28292] ? __pfx_ksys_write+0x10/0x10 [ 868.004789][T28292] __x64_sys_bpf+0x7c/0x90 [ 868.004817][T28292] do_syscall_64+0xfa/0x3b0 [ 868.004845][T28292] ? lockdep_hardirqs_on+0x9c/0x150 [ 868.004870][T28292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.004893][T28292] ? clear_bhb_loop+0x60/0xb0 [ 868.004921][T28292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.004943][T28292] RIP: 0033:0x7ff27558eba9 [ 868.004963][T28292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.004983][T28292] RSP: 002b:00007ff2763b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 868.005013][T28292] RAX: ffffffffffffffda RBX: 00007ff2757d5fa0 RCX: 00007ff27558eba9 [ 868.005029][T28292] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 868.005044][T28292] RBP: 00007ff2763b2090 R08: 0000000000000000 R09: 0000000000000000 [ 868.005059][T28292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.005072][T28292] R13: 00007ff2757d6038 R14: 00007ff2757d5fa0 R15: 00007ffffc684698 [ 868.005108][T28292] [ 868.005120][T28292] syz.2.5931: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 868.104278][T28297] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 868.179189][T28292] ,cpuset=/,mems_allowed=0-1 [ 868.354090][T28292] CPU: 1 UID: 0 PID: 28292 Comm: syz.2.5931 Not tainted syzkaller #0 PREEMPT(full) [ 868.354119][T28292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 868.354132][T28292] Call Trace: [ 868.354141][T28292] [ 868.354151][T28292] dump_stack_lvl+0x189/0x250 [ 868.354180][T28292] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 868.354211][T28292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 868.354234][T28292] ? __pfx__printk+0x10/0x10 [ 868.354262][T28292] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 868.354285][T28292] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 868.354315][T28292] warn_alloc+0x214/0x310 [ 868.354352][T28292] ? __pfx_warn_alloc+0x10/0x10 [ 868.354391][T28292] ? __get_vm_area_node+0x13f/0x300 [ 868.354421][T28292] ? __get_vm_area_node+0x2b5/0x300 [ 868.354455][T28292] __vmalloc_node_range_noprof+0x326/0x12f0 [ 868.354483][T28292] ? __lock_acquire+0xab9/0xd20 [ 868.354539][T28292] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 868.354566][T28292] ? __might_fault+0xb0/0x130 [ 868.354594][T28292] ? _parse_integer_limit+0x1ae/0x1f0 [ 868.354622][T28292] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 868.354648][T28292] __vmalloc_noprof+0xb1/0xf0 [ 868.354676][T28292] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 868.354706][T28292] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 868.354739][T28292] bpf_prog_alloc+0x3c/0x1a0 [ 868.354768][T28292] bpf_prog_load+0x735/0x1930 [ 868.354807][T28292] ? __pfx_bpf_prog_load+0x10/0x10 [ 868.354857][T28292] ? bpf_lsm_bpf+0x9/0x20 [ 868.354881][T28292] ? security_bpf+0x7e/0x300 [ 868.354912][T28292] __sys_bpf+0x528/0x870 [ 868.354940][T28292] ? __pfx___sys_bpf+0x10/0x10 [ 868.354983][T28292] ? ksys_write+0x22a/0x250 [ 868.355015][T28292] ? __pfx_ksys_write+0x10/0x10 [ 868.355052][T28292] __x64_sys_bpf+0x7c/0x90 [ 868.355080][T28292] do_syscall_64+0xfa/0x3b0 [ 868.355107][T28292] ? lockdep_hardirqs_on+0x9c/0x150 [ 868.355131][T28292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.355158][T28292] ? clear_bhb_loop+0x60/0xb0 [ 868.355184][T28292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.355206][T28292] RIP: 0033:0x7ff27558eba9 [ 868.355226][T28292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.355245][T28292] RSP: 002b:00007ff2763b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 868.355267][T28292] RAX: ffffffffffffffda RBX: 00007ff2757d5fa0 RCX: 00007ff27558eba9 [ 868.355284][T28292] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 868.355299][T28292] RBP: 00007ff2763b2090 R08: 0000000000000000 R09: 0000000000000000 [ 868.355312][T28292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.355325][T28292] R13: 00007ff2757d6038 R14: 00007ff2757d5fa0 R15: 00007ffffc684698 [ 868.355367][T28292] [ 868.355397][T28292] Mem-Info: [ 868.445391][T20739] net_ratelimit: 17 callbacks suppressed [ 868.445417][T20739] bond1: (slave macvlan2): failed to get link speed/duplex [ 868.484401][T28292] active_anon:8608 inactive_anon:0 isolated_anon:0 [ 868.484401][T28292] active_file:3966 inactive_file:40187 isolated_file:0 [ 868.484401][T28292] unevictable:768 dirty:226 writeback:0 [ 868.484401][T28292] slab_reclaimable:13191 slab_unreclaimable:169934 [ 868.484401][T28292] mapped:37790 shmem:4308 pagetables:1109 [ 868.484401][T28292] sec_pagetables:0 bounce:0 [ 868.484401][T28292] kernel_misc_reclaimable:0 [ 868.484401][T28292] free:1219594 free_pcp:22189 free_cma:0 [ 868.563740][T28307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.600664][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 868.659118][T28292] Node 0 active_anon:34432kB inactive_anon:0kB active_file:15864kB inactive_file:160548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:151160kB dirty:900kB writeback:0kB shmem:15696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13944kB pagetables:4256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 868.734602][T28307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.772685][T28307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.787691][T28292] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 868.811670][T28307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.819523][T28292] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 868.876670][T28307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.909805][T28292] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 868.916735][T28292] Node 0 DMA32 free:977512kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34340kB inactive_anon:0kB active_file:15864kB inactive_file:158980kB unevictable:1536kB writepending:912kB present:3129332kB managed:2557384kB mlocked:0kB bounce:0kB free_pcp:71156kB local_pcp:25468kB free_cma:0kB [ 868.959396][T28307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.969370][T28307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.982905][T28292] lowmem_reserve[]: 0 0 1 1 1 [ 868.987698][T28292] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 868.994665][T28307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.053195][T28292] lowmem_reserve[]: 0 0 0 0 0 [ 869.073680][T28292] Node 1 Normal free:3891548kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13256kB local_pcp:6152kB free_cma:0kB [ 869.143741][T28292] lowmem_reserve[]: 0 0 0 0 0 [ 869.148891][T28292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 869.198370][T28292] Node 0 DMA32: 719*4kB (UME) 571*8kB (UME) 885*16kB (UME) 1416*32kB (UME) 193*64kB (UME) 31*128kB (UME) 15*256kB (UM) 5*512kB (UME) 39*1024kB (UME) 6*2048kB (ME) 204*4096kB (UM) = 977444kB [ 869.236980][T28292] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 869.254376][T28292] Node 1 Normal: 211*4kB (UM) 56*8kB (UME) 53*16kB (UME) 250*32kB (UME) 81*64kB (UME) 13*128kB (UME) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3891548kB [ 869.352920][T28292] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 869.369446][T28292] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 869.380602][T28292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 869.416716][T28292] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 869.431782][T28292] 45527 total pagecache pages [ 869.437238][T28292] 0 pages in swap cache [ 869.444226][T28292] Free swap = 124996kB [ 869.448434][T28292] Total swap = 124996kB [ 869.453036][T28292] 2097051 pages RAM [ 869.457408][T28292] 0 pages HighMem/MovableOnly [ 869.464187][T28292] 425679 pages reserved [ 869.468460][T28292] 0 pages cma reserved [ 869.710593][T28325] syzkaller0: entered promiscuous mode [ 869.716159][T28325] syzkaller0: entered allmulticast mode [ 872.555630][T28371] __nla_validate_parse: 61 callbacks suppressed [ 872.555655][T28371] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5956'. [ 872.589301][T28374] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5955'. [ 872.648586][T28378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5953'. [ 872.680676][T28378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5953'. [ 872.713790][T28378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5953'. [ 872.724812][T28378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5953'. [ 872.777871][T28378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5953'. [ 872.815108][T28378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5953'. [ 872.865161][T28378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5953'. [ 872.897029][T28378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5953'. [ 873.588801][T20739] net_ratelimit: 36 callbacks suppressed [ 873.588826][T20739] bond1: (slave macvlan2): failed to get link speed/duplex [ 873.751847][T20739] bond1: (slave macvlan2): failed to get link speed/duplex [ 873.938742][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 874.012185][T28417] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 874.028441][T28417] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 874.037319][T28417] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 874.051263][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 874.059231][T28417] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 874.074358][T28417] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 874.550603][T28444] netlink: 'syz.2.5977': attribute type 1 has an invalid length. [ 874.571275][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 874.634746][T28446] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 874.815554][ T37] bond1: (slave macvlan2): failed to get link speed/duplex [ 874.884451][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c26d800: rx timeout, send abort [ 874.894533][T28416] chnl_net:caif_netlink_parms(): no params data found [ 875.217911][T28416] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.235439][T28416] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.304532][T28416] bridge_slave_0: entered allmulticast mode [ 875.321454][T28416] bridge_slave_0: entered promiscuous mode [ 875.342658][T28416] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.359122][T28416] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.370741][T28416] bridge_slave_1: entered allmulticast mode [ 875.384587][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c26c000: rx timeout, send abort [ 875.391528][T28416] bridge_slave_1: entered promiscuous mode [ 875.393263][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c26d800: abort rx timeout. Force session deactivation [ 875.783140][T28416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.802204][T28489] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 875.860853][T28416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.892948][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c26c000: abort rx timeout. Force session deactivation [ 875.918808][T28489] openvswitch: netlink: Message has 252 unknown bytes. [ 875.949629][ T3523] bond1: (slave macvlan2): failed to get link speed/duplex [ 875.980508][T28486] netlink: 'syz.1.5986': attribute type 1 has an invalid length. [ 875.995763][T28486] netlink: 'syz.1.5986': attribute type 2 has an invalid length. [ 876.566789][ T5873] Bluetooth: hci6: command tx timeout [ 876.655317][ T1320] bond1: (slave macvlan2): failed to get link speed/duplex [ 876.693442][T28416] team0: Port device team_slave_0 added [ 876.734672][T28416] team0: Port device team_slave_1 added [ 876.946768][T28416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.968775][T28416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.038583][T28416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.123752][T28416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.135393][T28416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.184674][T28416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.390603][T28416] hsr_slave_0: entered promiscuous mode [ 877.398078][T28416] hsr_slave_1: entered promiscuous mode [ 877.413855][T28416] debugfs: 'hsr0' already exists in 'hsr' [ 877.426782][T28416] Cannot create hsr debugfs directory [ 877.923470][T28530] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 878.005978][T28416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.231890][T28416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.336729][T28416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.465174][T28416] bond0: (slave netdevsim0): Releasing backup interface [ 878.482481][T28416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.540606][ T3523] bond1: (slave macvlan2): link status definitely down, disabling slave [ 878.618952][ T5873] Bluetooth: hci6: command tx timeout [ 878.672087][T28416] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 878.683529][T28416] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 878.694720][T28416] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 878.706775][T28416] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 878.795638][T28416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.829642][T28416] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.845506][T20743] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.852715][T20743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.873717][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.880920][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.938389][T28416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 879.117016][T28416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.166078][T28416] veth0_vlan: entered promiscuous mode [ 879.180310][T28416] veth1_vlan: entered promiscuous mode [ 879.212174][T28416] veth0_macvtap: entered promiscuous mode [ 879.222889][T28416] veth1_macvtap: entered promiscuous mode [ 879.247097][T28416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.264728][T28416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.288115][T20739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.297488][T20739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.312224][ T1320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.370054][ T1320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.396821][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.410557][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.446939][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.455066][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.699060][ T5873] Bluetooth: hci6: command tx timeout [ 882.264731][T28561] syzkaller1: entered promiscuous mode [ 882.275942][T28561] syzkaller1: entered allmulticast mode [ 882.309048][T28566] netlink: 'syz.4.6006': attribute type 13 has an invalid length. [ 882.316930][T28566] netlink: 'syz.4.6006': attribute type 17 has an invalid length. [ 882.612004][T28566] net_ratelimit: 4 callbacks suppressed [ 882.612020][T28566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 882.687288][T28569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.785298][ T5873] Bluetooth: hci6: command tx timeout [ 883.106207][T28574] __nla_validate_parse: 15 callbacks suppressed [ 883.106230][T28574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6007'. [ 883.401068][T28574] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 883.779141][T28590] netlink: 'syz.0.6011': attribute type 1 has an invalid length. [ 883.786964][T28590] netlink: 'syz.0.6011': attribute type 1 has an invalid length. [ 883.812177][T28590] netlink: 216 bytes leftover after parsing attributes in process `syz.0.6011'. [ 883.998268][T28602] netlink: 'syz.2.6015': attribute type 8 has an invalid length. [ 884.329430][T28620] netlink: 'syz.2.6017': attribute type 1 has an invalid length. [ 884.378146][T28616] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6017'. [ 884.423408][T28623] xt_l2tp: missing protocol rule (udp|l2tpip) [ 884.658883][T28632] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5 [ 884.757373][T28638] netlink: 'syz.2.6023': attribute type 1 has an invalid length. [ 884.802043][T28638] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6023'. [ 885.013170][T28650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6026'. [ 885.052926][T28653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6027'. [ 885.058868][T28654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6027'. [ 885.131503][T28653] erspan0: entered promiscuous mode [ 885.137177][T28653] macvtap1: entered promiscuous mode [ 885.144327][T28653] macvtap1: entered allmulticast mode [ 885.161798][T28653] erspan0: entered allmulticast mode [ 885.755652][T28675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6032'. [ 885.786464][T28675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6032'. [ 885.814774][T28675] netlink: 'syz.2.6032': attribute type 4 has an invalid length. [ 885.861405][T28680] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6032'. [ 886.017831][T28682] netlink: 'syz.1.6034': attribute type 1 has an invalid length. [ 886.563020][T11364] IPVS: starting estimator thread 0... [ 886.668390][T28722] IPVS: using max 28 ests per chain, 67200 per kthread [ 886.719558][T28735] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 887.332689][T28759] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 887.372423][T28759] CPU: 0 UID: 0 PID: 28759 Comm: syz.4.6047 Not tainted syzkaller #0 PREEMPT(full) [ 887.372456][T28759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 887.372472][T28759] Call Trace: [ 887.372482][T28759] [ 887.372493][T28759] dump_stack_lvl+0x189/0x250 [ 887.372532][T28759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.372561][T28759] ? __pfx__printk+0x10/0x10 [ 887.372602][T28759] ? kernfs_path_from_node+0x2f/0x290 [ 887.372629][T28759] ? kernfs_path_from_node+0x250/0x290 [ 887.372654][T28759] ? kernfs_path_from_node+0x2f/0x290 [ 887.372686][T28759] sysfs_warn_dup+0x8e/0xa0 [ 887.372712][T28759] sysfs_do_create_link_sd+0xc0/0x110 [ 887.372742][T28759] device_add_class_symlinks+0x1cf/0x240 [ 887.372777][T28759] device_add+0x475/0xb50 [ 887.372812][T28759] wiphy_register+0x1c81/0x2aa0 [ 887.372863][T28759] ? __pfx_wiphy_register+0x10/0x10 [ 887.372891][T28759] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 887.372935][T28759] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 887.372977][T28759] ieee80211_register_hw+0x3442/0x40a0 [ 887.373031][T28759] ? ieee80211_register_hw+0x1461/0x40a0 [ 887.373078][T28759] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 887.373118][T28759] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 887.373153][T28759] ? __hrtimer_setup+0x187/0x210 [ 887.373176][T28759] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 887.373215][T28759] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 887.373290][T28759] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 887.373324][T28759] ? trace_kmalloc+0x1f/0xd0 [ 887.373353][T28759] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 887.373386][T28759] ? kstrndup+0xbf/0x160 [ 887.373422][T28759] hwsim_new_radio_nl+0xea4/0x1b10 [ 887.373468][T28759] ? __pfx___nla_validate_parse+0x10/0x10 [ 887.373513][T28759] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 887.373564][T28759] ? __nla_parse+0x40/0x60 [ 887.373593][T28759] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 887.373640][T28759] genl_family_rcv_msg_doit+0x212/0x300 [ 887.373686][T28759] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 887.373738][T28759] ? bpf_lsm_capable+0x9/0x20 [ 887.373782][T28759] ? security_capable+0x7e/0x2e0 [ 887.373827][T28759] genl_rcv_msg+0x60e/0x790 [ 887.373878][T28759] ? __pfx_genl_rcv_msg+0x10/0x10 [ 887.373910][T28759] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 887.373965][T28759] netlink_rcv_skb+0x208/0x470 [ 887.373991][T28759] ? __lock_acquire+0xab9/0xd20 [ 887.374027][T28759] ? __pfx_genl_rcv_msg+0x10/0x10 [ 887.374064][T28759] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 887.374117][T28759] ? down_read+0x1ad/0x2e0 [ 887.374151][T28759] genl_rcv+0x28/0x40 [ 887.374183][T28759] netlink_unicast+0x82c/0x9e0 [ 887.374229][T28759] ? __pfx_netlink_unicast+0x10/0x10 [ 887.374258][T28759] ? netlink_sendmsg+0x642/0xb30 [ 887.374284][T28759] ? skb_put+0x11b/0x210 [ 887.374318][T28759] netlink_sendmsg+0x805/0xb30 [ 887.374359][T28759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.374392][T28759] ? aa_sock_msg_perm+0xf1/0x1d0 [ 887.374419][T28759] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 887.374444][T28759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.374474][T28759] __sock_sendmsg+0x219/0x270 [ 887.374500][T28759] ____sys_sendmsg+0x505/0x830 [ 887.374539][T28759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 887.374580][T28759] ? import_iovec+0x74/0xa0 [ 887.374614][T28759] ___sys_sendmsg+0x21f/0x2a0 [ 887.374647][T28759] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.374721][T28759] ? __fget_files+0x2a/0x420 [ 887.374742][T28759] ? __fget_files+0x3a0/0x420 [ 887.374777][T28759] __x64_sys_sendmsg+0x19b/0x260 [ 887.374815][T28759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 887.374861][T28759] ? rcu_is_watching+0x15/0xb0 [ 887.374891][T28759] ? do_syscall_64+0xbe/0x3b0 [ 887.374924][T28759] do_syscall_64+0xfa/0x3b0 [ 887.374950][T28759] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.374976][T28759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.374999][T28759] ? clear_bhb_loop+0x60/0xb0 [ 887.375027][T28759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.375050][T28759] RIP: 0033:0x7f240318eba9 [ 887.375071][T28759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.375092][T28759] RSP: 002b:00007f2404041038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 887.375116][T28759] RAX: ffffffffffffffda RBX: 00007f24033d6180 RCX: 00007f240318eba9 [ 887.375133][T28759] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b [ 887.375148][T28759] RBP: 00007f2403211e19 R08: 0000000000000000 R09: 0000000000000000 [ 887.375161][T28759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.375174][T28759] R13: 00007f24033d6218 R14: 00007f24033d6180 R15: 00007ffe94a59df8 [ 887.375240][T28759] [ 888.239133][T28417] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 888.250510][T28417] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 888.261947][T28417] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 888.292621][T28417] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 888.332116][T28417] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 888.769393][T28794] __nla_validate_parse: 2 callbacks suppressed [ 888.769416][T28794] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6058'. [ 889.170057][T28812] netlink: 'syz.2.6062': attribute type 11 has an invalid length. [ 889.183745][T28812] netlink: 'syz.2.6062': attribute type 4 has an invalid length. [ 889.206931][T28812] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6062'. [ 889.415764][T28771] chnl_net:caif_netlink_parms(): no params data found [ 889.419176][T28812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6062'. [ 889.506359][T28812] netlink: 'syz.2.6062': attribute type 1 has an invalid length. [ 889.722636][T28771] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.746168][T28771] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.760912][T28771] bridge_slave_0: entered allmulticast mode [ 889.774076][T28771] bridge_slave_0: entered promiscuous mode [ 889.806022][T28771] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.826778][T28771] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.842010][T28771] bridge_slave_1: entered allmulticast mode [ 889.857907][T28771] bridge_slave_1: entered promiscuous mode [ 889.867454][T28823] batadv_slave_1: entered promiscuous mode [ 890.021933][T28771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.039714][T28827] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6064'. [ 890.049170][T28830] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 890.060855][T28771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.210717][T28832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6067'. [ 890.225724][T28822] batadv_slave_1: left promiscuous mode [ 890.228914][T28832] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6067'. [ 890.243210][T28771] team0: Port device team_slave_0 added [ 890.261061][T28771] team0: Port device team_slave_1 added [ 890.387162][T28771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.405992][T28771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.461369][T28417] Bluetooth: hci3: command tx timeout [ 890.482863][T28841] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6070'. [ 890.497961][T28771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.520342][T28771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.527345][T28771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.561673][T28771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.691192][T28848] vlan0: entered promiscuous mode [ 890.704856][T28848] bond0: entered promiscuous mode [ 890.711772][T28848] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 890.735671][T28848] vlan0: entered allmulticast mode [ 890.746944][T28848] bond0: entered allmulticast mode [ 890.758815][T28848] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 890.793306][T28771] hsr_slave_0: entered promiscuous mode [ 890.831502][T28771] hsr_slave_1: entered promiscuous mode [ 890.838088][T28771] debugfs: 'hsr0' already exists in 'hsr' [ 890.854399][T28771] Cannot create hsr debugfs directory [ 891.116471][T28859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6073'. [ 891.157843][T28865] tipc: Enabled bearer , priority 0 [ 891.165754][T28865] syzkaller0: entered promiscuous mode [ 891.172036][T28865] syzkaller0: entered allmulticast mode [ 891.329185][T28865] tipc: Resetting bearer [ 891.335271][T28865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.344174][T28865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.366280][T28871] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 891.399195][T28862] tipc: Resetting bearer [ 891.460670][T28862] tipc: Disabling bearer [ 891.501513][T28878] netlink: 13 bytes leftover after parsing attributes in process `syz.0.6079'. [ 891.519184][T28876] netlink: 'syz.2.6078': attribute type 16 has an invalid length. [ 891.529248][T28876] netlink: 'syz.2.6078': attribute type 17 has an invalid length. [ 891.557726][T28771] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.664047][T28876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 891.747662][T28771] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.768093][T28895] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.6081'. [ 891.892056][T28771] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.975835][T28771] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.541247][ T5873] Bluetooth: hci3: command tx timeout [ 892.564378][T28771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 892.592806][T28771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 892.600551][T28910] openvswitch: netlink: IPv4 tun info is not correct [ 892.650694][T28771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 892.708213][T28771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 892.832492][T28915] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 893.026210][T28933] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 893.111913][T28771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.174506][T28941] geneve2: entered promiscuous mode [ 893.197458][T28941] geneve2: entered allmulticast mode [ 893.233133][T28938] netlink: 'syz.0.6095': attribute type 1 has an invalid length. [ 893.308965][T28947] nbd: nbd2 already in use [ 893.315365][T28947] block nbd2: NBD_DISCONNECT [ 893.335005][T28947] block nbd2: Send disconnect failed -22 [ 893.345648][T28947] block nbd2: Disconnected due to user request. [ 893.368302][T28947] block nbd2: shutting down sockets [ 893.900146][T28771] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.923700][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.930955][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.936644][T28965] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 893.991959][T20745] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.008300][T20745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.028278][T28963] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 894.078945][ T5951] IPVS: starting estimator thread 0... [ 894.104667][T28971] __nla_validate_parse: 4 callbacks suppressed [ 894.104691][T28971] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6103'. [ 894.193414][T28972] IPVS: using max 24 ests per chain, 57600 per kthread [ 894.233731][T28971] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 894.448894][T28984] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 894.619229][ T5873] Bluetooth: hci3: command 0x040f tx timeout [ 894.821238][T28771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.919826][T29001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6109'. [ 894.932416][T28771] veth0_vlan: entered promiscuous mode [ 894.978208][T28771] veth1_vlan: entered promiscuous mode [ 895.024400][T28771] veth0_macvtap: entered promiscuous mode [ 895.038346][T28771] veth1_macvtap: entered promiscuous mode [ 895.103942][T28771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.132509][T28771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.156875][T29009] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6112'. [ 895.168070][ T1320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.186427][T29009] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 895.214735][ T1320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.229735][ T1320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.259110][ T1320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.355981][T29012] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6114'. [ 895.445584][T29016] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 895.454728][T29012] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 895.486128][T29021] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6117'. [ 895.991789][T29040] netlink: 'syz.0.6122': attribute type 3 has an invalid length. [ 896.001153][T29040] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6122'. [ 896.698990][ T5873] Bluetooth: hci3: command 0x040f tx timeout [ 898.780946][ T5873] Bluetooth: hci3: command 0x040f tx timeout [ 909.410619][T28417] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 909.421501][T28417] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 909.429949][T28417] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 909.438163][T28417] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 909.448537][T28417] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 909.651467][T29052] chnl_net:caif_netlink_parms(): no params data found [ 909.749793][T29052] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.757004][T29052] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.765290][T29052] bridge_slave_0: entered allmulticast mode [ 909.774161][T29052] bridge_slave_0: entered promiscuous mode [ 909.782333][T29052] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.790568][T29052] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.797846][T29052] bridge_slave_1: entered allmulticast mode [ 909.805624][T29052] bridge_slave_1: entered promiscuous mode [ 909.847283][T29052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.860791][T29052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.900109][T29052] team0: Port device team_slave_0 added [ 909.909910][T29052] team0: Port device team_slave_1 added [ 909.948041][T29052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.955290][T29052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.981962][T29052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.995005][T29052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.002398][T29052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.029433][T29052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.084285][T29052] hsr_slave_0: entered promiscuous mode [ 910.091509][T29052] hsr_slave_1: entered promiscuous mode [ 910.097815][T29052] debugfs: 'hsr0' already exists in 'hsr' [ 910.103753][T29052] Cannot create hsr debugfs directory [ 911.499205][ T5873] Bluetooth: hci2: command tx timeout [ 911.696399][T28417] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 911.717439][T28417] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 911.725911][T28417] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 911.749810][T28417] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 911.765146][T28417] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 911.816538][T28417] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 911.826848][T28417] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 911.836438][T28417] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 911.844988][T28417] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 911.853260][T28417] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 912.020230][T28417] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 912.034937][T28417] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 912.045390][T28417] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 912.056570][T28417] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 912.065895][T28417] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 912.300497][T29063] chnl_net:caif_netlink_parms(): no params data found [ 912.421956][T29065] chnl_net:caif_netlink_parms(): no params data found [ 912.523401][T29063] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.531028][T29063] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.538322][T29063] bridge_slave_0: entered allmulticast mode [ 912.546795][T29063] bridge_slave_0: entered promiscuous mode [ 912.582954][T29063] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.595366][T29063] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.607598][T29063] bridge_slave_1: entered allmulticast mode [ 912.620942][T29063] bridge_slave_1: entered promiscuous mode [ 912.692122][T29067] chnl_net:caif_netlink_parms(): no params data found [ 912.741435][T29063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.757158][T29065] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.769941][T29065] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.777446][T29065] bridge_slave_0: entered allmulticast mode [ 912.786960][T29065] bridge_slave_0: entered promiscuous mode [ 912.798807][T29065] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.805959][T29065] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.813472][T29065] bridge_slave_1: entered allmulticast mode [ 912.821826][T29065] bridge_slave_1: entered promiscuous mode [ 912.832506][T29063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.945594][T29065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.965565][T29063] team0: Port device team_slave_0 added [ 912.976016][T29065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.007774][T29063] team0: Port device team_slave_1 added [ 913.111078][T29063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.118077][T29063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.144589][T29063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.158923][T29063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.165900][T29063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.192630][T29063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.206929][T29065] team0: Port device team_slave_0 added [ 913.213525][T29067] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.228794][T29067] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.236094][T29067] bridge_slave_0: entered allmulticast mode [ 913.244243][T29067] bridge_slave_0: entered promiscuous mode [ 913.268324][T29065] team0: Port device team_slave_1 added [ 913.290746][T29067] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.297900][T29067] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.305754][T29067] bridge_slave_1: entered allmulticast mode [ 913.314762][T29067] bridge_slave_1: entered promiscuous mode [ 913.359320][T29065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.366312][T29065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.393456][T29065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.425947][T29067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.453738][T29065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.461933][T29065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.488527][T29065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.503323][T29067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.561379][T29063] hsr_slave_0: entered promiscuous mode [ 913.567949][T29063] hsr_slave_1: entered promiscuous mode [ 913.574840][T29063] debugfs: 'hsr0' already exists in 'hsr' [ 913.581720][ T5873] Bluetooth: hci2: command tx timeout [ 913.586774][T29063] Cannot create hsr debugfs directory [ 913.634063][T29067] team0: Port device team_slave_0 added [ 913.669051][T29067] team0: Port device team_slave_1 added [ 913.737432][T29065] hsr_slave_0: entered promiscuous mode [ 913.744547][T29065] hsr_slave_1: entered promiscuous mode [ 913.753091][T29065] debugfs: 'hsr0' already exists in 'hsr' [ 913.759098][T29065] Cannot create hsr debugfs directory [ 913.789524][T29067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.796508][T29067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.824735][T29067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.837446][ T5873] Bluetooth: hci7: command tx timeout [ 913.862831][T29067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.869985][T29067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.897260][T29067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.908954][ T5873] Bluetooth: hci8: command tx timeout [ 914.056573][T29067] hsr_slave_0: entered promiscuous mode [ 914.064363][T29067] hsr_slave_1: entered promiscuous mode [ 914.071085][T29067] debugfs: 'hsr0' already exists in 'hsr' [ 914.076899][T29067] Cannot create hsr debugfs directory [ 914.139490][ T5873] Bluetooth: hci9: command tx timeout [ 915.659300][ T5873] Bluetooth: hci2: command tx timeout [ 915.900564][ T5873] Bluetooth: hci7: command tx timeout [ 915.989276][ T5873] Bluetooth: hci8: command tx timeout [ 916.219143][ T5873] Bluetooth: hci9: command tx timeout [ 917.738844][ T5873] Bluetooth: hci2: command tx timeout [ 917.980482][ T5873] Bluetooth: hci7: command tx timeout [ 918.059814][ T5873] Bluetooth: hci8: command tx timeout [ 918.299038][ T5873] Bluetooth: hci9: command tx timeout [ 920.060003][ T5873] Bluetooth: hci7: command tx timeout [ 920.139075][ T5873] Bluetooth: hci8: command tx timeout [ 920.378999][ T5873] Bluetooth: hci9: command tx timeout [ 947.644460][T28417] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 947.656392][T28417] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 947.665471][T28417] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 947.675845][T28417] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 947.685092][T28417] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 947.897551][T29088] chnl_net:caif_netlink_parms(): no params data found [ 947.993115][T29088] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.000965][T29088] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.008256][T29088] bridge_slave_0: entered allmulticast mode [ 948.016607][T29088] bridge_slave_0: entered promiscuous mode [ 948.024933][T29088] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.032812][T29088] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.040421][T29088] bridge_slave_1: entered allmulticast mode [ 948.047880][T29088] bridge_slave_1: entered promiscuous mode [ 948.092687][T29088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.105973][T29088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 948.147941][T29088] team0: Port device team_slave_0 added [ 948.157317][T29088] team0: Port device team_slave_1 added [ 948.204872][T29088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.212209][T29088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.239536][T29088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.253476][T29088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.260784][T29088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.286960][T29088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.346544][T29088] hsr_slave_0: entered promiscuous mode [ 948.353380][T29088] hsr_slave_1: entered promiscuous mode [ 948.360694][T29088] debugfs: 'hsr0' already exists in 'hsr' [ 948.366469][T29088] Cannot create hsr debugfs directory [ 948.529896][T29088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.632324][T29088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.717896][T29088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.796595][T29088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.739314][ T5873] Bluetooth: hci10: command tx timeout [ 951.819632][ T5873] Bluetooth: hci10: command tx timeout [ 953.899584][ T5873] Bluetooth: hci10: command tx timeout [ 955.979543][ T5873] Bluetooth: hci10: command tx timeout [ 957.386683][T28734] bond2 (unregistering): (slave gretap1): Releasing active interface [ 957.994648][T28734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.005167][T28734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.015701][T28734] bond0 (unregistering): (slave bond1): Releasing backup interface [ 958.025374][T28734] bond0 (unregistering): Released all slaves [ 958.163196][T28734] bond1 (unregistering): Released all slaves [ 958.179536][T28734] bond2 (unregistering): Released all slaves [ 958.196088][T28734] bond3 (unregistering): Released all slaves [ 958.215954][T28734] bond4 (unregistering): Released all slaves [ 958.318416][T28734] þ: left promiscuous mode [ 958.411511][T28734] tipc: Left network mode [ 958.806471][T28734] hsr_slave_0: left promiscuous mode [ 958.812995][T28734] hsr_slave_1: left promiscuous mode [ 958.819205][T28734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.826998][T28734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.271348][T28734] batadv_slave_0 (unregistering): left allmulticast mode [ 959.320369][T28734] team_slave_1 (unregistering): left promiscuous mode [ 959.328185][T28734] team0 (unregistering): Port device team_slave_1 removed [ 959.383738][T28734] team_slave_0 (unregistering): left promiscuous mode [ 959.393100][T28734] team0 (unregistering): Port device team_slave_0 removed [ 959.973562][T28734] IPVS: stop unused estimator thread 0... [ 969.854633][T28417] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 969.865477][T28417] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 969.874095][T28417] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 969.884223][T28417] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 969.894013][T28417] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 970.102686][T29097] chnl_net:caif_netlink_parms(): no params data found [ 970.200553][T29097] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.207791][T29097] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.215435][T29097] bridge_slave_0: entered allmulticast mode [ 970.224158][T29097] bridge_slave_0: entered promiscuous mode [ 970.234420][T29097] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.241893][T29097] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.249418][T29097] bridge_slave_1: entered allmulticast mode [ 970.256791][T29097] bridge_slave_1: entered promiscuous mode [ 970.299296][T29097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.312752][T29097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.354251][T29097] team0: Port device team_slave_0 added [ 970.362770][T29097] team0: Port device team_slave_1 added [ 970.405397][T29097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.412720][T29097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.439936][T29097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.452993][T29097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.460435][T29097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.488479][T29097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.546860][T29097] hsr_slave_0: entered promiscuous mode [ 970.553893][T29097] hsr_slave_1: entered promiscuous mode [ 970.560920][T29097] debugfs: 'hsr0' already exists in 'hsr' [ 970.566682][T29097] Cannot create hsr debugfs directory [ 971.979158][ T51] Bluetooth: hci11: command tx timeout [ 972.639813][ T5873] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 972.658408][ T5873] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 972.667194][ T5873] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 972.679371][ T5873] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 972.689688][ T5873] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 972.769977][T29099] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 972.780435][T29099] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 972.789664][T29099] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 972.799970][T29099] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 972.809620][T29099] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 972.906197][ T5873] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 972.921204][ T5873] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 972.930065][ T5873] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 972.938356][ T5873] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 972.948004][ T5873] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 973.234903][T29109] chnl_net:caif_netlink_parms(): no params data found [ 973.315265][T29111] chnl_net:caif_netlink_parms(): no params data found [ 973.479723][T29109] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.486975][T29109] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.494693][T29109] bridge_slave_0: entered allmulticast mode [ 973.503570][T29109] bridge_slave_0: entered promiscuous mode [ 973.532867][T29109] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.541483][T29109] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.549159][T29109] bridge_slave_1: entered allmulticast mode [ 973.556591][T29109] bridge_slave_1: entered promiscuous mode [ 973.637562][T29111] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.645422][T29111] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.653341][T29111] bridge_slave_0: entered allmulticast mode [ 973.661639][T29111] bridge_slave_0: entered promiscuous mode [ 973.670944][T29111] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.678110][T29111] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.685649][T29111] bridge_slave_1: entered allmulticast mode [ 973.693884][T29111] bridge_slave_1: entered promiscuous mode [ 973.757708][T29109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.796266][T29109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.810227][T29111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.858260][T29111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.876670][T29113] chnl_net:caif_netlink_parms(): no params data found [ 973.934798][T29109] team0: Port device team_slave_0 added [ 973.971187][T29109] team0: Port device team_slave_1 added [ 973.979330][T29111] team0: Port device team_slave_0 added [ 974.023395][T29111] team0: Port device team_slave_1 added [ 974.059216][ T5873] Bluetooth: hci11: command tx timeout [ 974.072132][T29109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.079661][T29109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.106111][T29109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.145368][T29109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.152648][T29109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.179087][T29109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.199566][T29111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.206551][T29111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.233339][T29111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.246910][T29111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.254035][T29111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.280337][T29111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.425104][T29109] hsr_slave_0: entered promiscuous mode [ 974.431983][T29109] hsr_slave_1: entered promiscuous mode [ 974.438257][T29109] debugfs: 'hsr0' already exists in 'hsr' [ 974.444482][T29109] Cannot create hsr debugfs directory [ 974.468695][T29113] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.475942][T29113] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.483468][T29113] bridge_slave_0: entered allmulticast mode [ 974.491620][T29113] bridge_slave_0: entered promiscuous mode [ 974.501447][T29113] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.509305][T29113] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.516671][T29113] bridge_slave_1: entered allmulticast mode [ 974.524828][T29113] bridge_slave_1: entered promiscuous mode [ 974.539252][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 974.565026][T29111] hsr_slave_0: entered promiscuous mode [ 974.572989][T29111] hsr_slave_1: entered promiscuous mode [ 974.579667][T29111] debugfs: 'hsr0' already exists in 'hsr' [ 974.585422][T29111] Cannot create hsr debugfs directory [ 974.626811][T29113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.648106][T29113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.745556][T29113] team0: Port device team_slave_0 added [ 974.775591][T29113] team0: Port device team_slave_1 added [ 974.789039][ T51] Bluetooth: hci12: command tx timeout [ 974.868931][ T51] Bluetooth: hci13: command tx timeout [ 974.897403][T29113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.904869][T29113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.931315][T29113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.944551][T29113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.951704][T29113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.978277][T29113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.019130][ T51] Bluetooth: hci14: command tx timeout [ 975.155542][T29113] hsr_slave_0: entered promiscuous mode [ 975.162639][T29113] hsr_slave_1: entered promiscuous mode [ 975.169787][T29113] debugfs: 'hsr0' already exists in 'hsr' [ 975.175553][T29113] Cannot create hsr debugfs directory [ 976.149189][ T51] Bluetooth: hci11: command tx timeout [ 976.859315][ T51] Bluetooth: hci12: command tx timeout [ 976.939050][ T51] Bluetooth: hci13: command tx timeout [ 977.098936][ T51] Bluetooth: hci14: command tx timeout [ 978.228801][ T51] Bluetooth: hci11: command tx timeout [ 978.939363][ T51] Bluetooth: hci12: command tx timeout [ 979.019360][ T51] Bluetooth: hci13: command tx timeout [ 979.178849][ T51] Bluetooth: hci14: command tx timeout [ 981.019217][ T51] Bluetooth: hci12: command tx timeout [ 981.098951][ T51] Bluetooth: hci13: command tx timeout [ 981.258934][ T51] Bluetooth: hci14: command tx timeout [ 1005.263986][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 1008.477337][ T5873] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1008.498320][ T5873] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1008.510277][ T5873] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1008.518472][ T5873] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1008.526899][ T5873] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1008.835634][T29134] chnl_net:caif_netlink_parms(): no params data found [ 1008.944595][T29134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.952815][T29134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.960381][T29134] bridge_slave_0: entered allmulticast mode [ 1008.967774][T29134] bridge_slave_0: entered promiscuous mode [ 1008.976001][T29134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.984052][T29134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.991488][T29134] bridge_slave_1: entered allmulticast mode [ 1008.999505][T29134] bridge_slave_1: entered promiscuous mode [ 1009.041596][T29134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.055513][T29134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.102716][T29134] team0: Port device team_slave_0 added [ 1009.113466][T29134] team0: Port device team_slave_1 added [ 1009.152580][T29134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.159736][T29134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.186965][T29134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.200894][T29134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.207878][T29134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.234234][T29134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.304320][T29134] hsr_slave_0: entered promiscuous mode [ 1009.311720][T29134] hsr_slave_1: entered promiscuous mode [ 1009.318069][T29134] debugfs: 'hsr0' already exists in 'hsr' [ 1009.324759][T29134] Cannot create hsr debugfs directory [ 1010.618952][ T5873] Bluetooth: hci15: command tx timeout [ 1012.698757][ T5873] Bluetooth: hci15: command tx timeout [ 1014.779277][ T5873] Bluetooth: hci15: command tx timeout [ 1015.499295][ T5873] Bluetooth: hci3: command 0x040f tx timeout [ 1016.858943][ T51] Bluetooth: hci15: command tx timeout [ 1030.531673][ T5873] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1030.542975][ T5873] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1030.551882][ T5873] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1030.560661][ T5873] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1030.572582][ T5873] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1030.806433][T29143] chnl_net:caif_netlink_parms(): no params data found [ 1030.910215][T29143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.917473][T29143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.925159][T29143] bridge_slave_0: entered allmulticast mode [ 1030.933717][T29143] bridge_slave_0: entered promiscuous mode [ 1030.944385][T29143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.952676][T29143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.960523][T29143] bridge_slave_1: entered allmulticast mode [ 1030.968497][T29143] bridge_slave_1: entered promiscuous mode [ 1031.015529][T29143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.030225][T29143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.075960][T29143] team0: Port device team_slave_0 added [ 1031.086202][T29143] team0: Port device team_slave_1 added [ 1031.128952][T29143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.136018][T29143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.162903][T29143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.176066][T29143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.183312][T29143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.209658][T29143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.273999][T29143] hsr_slave_0: entered promiscuous mode [ 1031.280797][T29143] hsr_slave_1: entered promiscuous mode [ 1031.287134][T29143] debugfs: 'hsr0' already exists in 'hsr' [ 1031.292988][T29143] Cannot create hsr debugfs directory [ 1032.628709][ T51] Bluetooth: hci16: command tx timeout [ 1032.842776][ T5873] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1032.853422][ T5873] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1032.865733][T29099] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1032.870791][T28417] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1032.874407][T29099] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1032.890593][T29099] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1032.899602][T29099] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1032.900705][T28417] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1032.936530][T29099] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1032.949428][T29099] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1033.077566][ T5873] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1033.087984][ T5873] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1033.101803][ T5873] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1033.110387][ T5873] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1033.120561][ T5873] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1033.398234][T29154] chnl_net:caif_netlink_parms(): no params data found [ 1033.704489][T29155] chnl_net:caif_netlink_parms(): no params data found [ 1033.719866][T29154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.727169][T29154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.734725][T29154] bridge_slave_0: entered allmulticast mode [ 1033.744148][T29154] bridge_slave_0: entered promiscuous mode [ 1033.753955][T29154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.761956][T29154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.769572][T29154] bridge_slave_1: entered allmulticast mode [ 1033.777222][T29154] bridge_slave_1: entered promiscuous mode [ 1033.924271][T29154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.937881][T29154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.077144][T29154] team0: Port device team_slave_0 added [ 1034.104095][T29154] team0: Port device team_slave_1 added [ 1034.171512][T29155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.179869][T29155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.187269][T29155] bridge_slave_0: entered allmulticast mode [ 1034.195642][T29155] bridge_slave_0: entered promiscuous mode [ 1034.205360][T29155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.213460][T29155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.222046][T29155] bridge_slave_1: entered allmulticast mode [ 1034.230620][T29155] bridge_slave_1: entered promiscuous mode [ 1034.238035][T29159] chnl_net:caif_netlink_parms(): no params data found [ 1034.251185][T29154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.258194][T29154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.284532][T29154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.299087][T29154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.306077][T29154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.333187][T29154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.411212][T29155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.425428][T29155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.543877][T29155] team0: Port device team_slave_0 added [ 1034.568482][T29154] hsr_slave_0: entered promiscuous mode [ 1034.576482][T29154] hsr_slave_1: entered promiscuous mode [ 1034.583862][T29154] debugfs: 'hsr0' already exists in 'hsr' [ 1034.590039][T29154] Cannot create hsr debugfs directory [ 1034.599120][T29155] team0: Port device team_slave_1 added [ 1034.699107][T29173] Bluetooth: hci16: command tx timeout [ 1034.738133][T29155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.745433][T29155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.771474][T29155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.785119][T29155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.792272][T29155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.818823][T29155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.830262][T29159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.837433][T29159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.845463][T29159] bridge_slave_0: entered allmulticast mode [ 1034.854385][T29159] bridge_slave_0: entered promiscuous mode [ 1034.863975][T29159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.871338][T29159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.878925][T29159] bridge_slave_1: entered allmulticast mode [ 1034.887242][T29159] bridge_slave_1: entered promiscuous mode [ 1034.938836][T29173] Bluetooth: hci17: command tx timeout [ 1035.019006][T29173] Bluetooth: hci18: command tx timeout [ 1035.033504][T29155] hsr_slave_0: entered promiscuous mode [ 1035.042271][T29155] hsr_slave_1: entered promiscuous mode [ 1035.048856][T29155] debugfs: 'hsr0' already exists in 'hsr' [ 1035.054733][T29155] Cannot create hsr debugfs directory [ 1035.068025][T29159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.107646][T29159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.175218][T29159] team0: Port device team_slave_0 added [ 1035.181359][T29173] Bluetooth: hci19: command tx timeout [ 1035.224369][T29159] team0: Port device team_slave_1 added [ 1035.312744][T29159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.321083][T29159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.349230][T29159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.401756][T29159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.409347][T29159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1035.441147][T29159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.558357][T29159] hsr_slave_0: entered promiscuous mode [ 1035.566036][T29159] hsr_slave_1: entered promiscuous mode [ 1035.575278][T29159] debugfs: 'hsr0' already exists in 'hsr' [ 1035.583120][T29159] Cannot create hsr debugfs directory [ 1035.984473][T29173] Bluetooth: hci8: command 0x0406 tx timeout [ 1035.991728][T29172] Bluetooth: hci9: command 0x0406 tx timeout [ 1035.997913][T29173] Bluetooth: hci7: command 0x0406 tx timeout [ 1036.002655][T29158] Bluetooth: hci2: command 0x0406 tx timeout [ 1036.778997][ T5873] Bluetooth: hci16: command tx timeout [ 1037.018834][ T5873] Bluetooth: hci17: command tx timeout [ 1037.098824][ T5873] Bluetooth: hci18: command tx timeout [ 1037.258868][ T5873] Bluetooth: hci19: command tx timeout [ 1038.859362][ T5873] Bluetooth: hci16: command tx timeout [ 1039.098951][ T5873] Bluetooth: hci17: command tx timeout [ 1039.179040][ T5873] Bluetooth: hci18: command tx timeout [ 1039.338951][ T5873] Bluetooth: hci19: command tx timeout [ 1041.178931][ T5873] Bluetooth: hci17: command tx timeout [ 1041.259086][ T5873] Bluetooth: hci18: command tx timeout [ 1041.419039][ T5873] Bluetooth: hci19: command tx timeout [ 1047.339825][ T31] INFO: task syz-executor:28771 blocked for more than 143 seconds. [ 1047.347794][ T31] Not tainted syzkaller #0 [ 1047.353382][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1047.362529][ T31] task:syz-executor state:D stack:21160 pid:28771 tgid:28771 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1047.376276][ T31] Call Trace: [ 1047.379791][ T31] [ 1047.382761][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1047.387422][ T31] ? __lock_acquire+0xab9/0xd20 [ 1047.398665][ T31] ? __lock_acquire+0xab9/0xd20 [ 1047.403619][ T31] ? __pfx___schedule+0x10/0x10 [ 1047.408704][ T31] ? schedule+0x91/0x360 [ 1047.412996][ T31] schedule+0x165/0x360 [ 1047.417190][ T31] schedule_preempt_disabled+0x13/0x30 [ 1047.423189][ T31] __mutex_lock+0x7e6/0x1350 [ 1047.427840][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1047.433804][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1047.438807][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1047.443880][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 1047.449532][ T31] ? radix_tree_lookup+0x240/0x290 [ 1047.454690][ T31] genl_rcv_msg+0x10d/0x790 [ 1047.459487][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1047.464582][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 1047.469877][ T31] ? __asan_memcpy+0x40/0x70 [ 1047.474508][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1047.481907][ T31] netlink_rcv_skb+0x208/0x470 [ 1047.486769][ T31] ? __lock_acquire+0xab9/0xd20 [ 1047.499166][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1047.504275][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1047.510125][ T31] ? down_read+0x1ad/0x2e0 [ 1047.514601][ T31] genl_rcv+0x28/0x40 [ 1047.518859][ T31] netlink_unicast+0x82c/0x9e0 [ 1047.523754][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1047.529227][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1047.534206][ T31] ? skb_put+0x11b/0x210 [ 1047.558672][ T31] netlink_sendmsg+0x805/0xb30 [ 1047.563727][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1047.578950][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1047.583970][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1047.603003][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1047.608380][ T31] __sock_sendmsg+0x219/0x270 [ 1047.623186][ T31] __sys_sendto+0x3bd/0x520 [ 1047.627787][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1047.633356][ T31] ? fd_install+0x97/0x540 [ 1047.637829][ T31] ? fd_install+0x30d/0x540 [ 1047.642488][ T31] __x64_sys_sendto+0xde/0x100 [ 1047.647300][ T31] do_syscall_64+0xfa/0x3b0 [ 1047.652011][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.658118][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1047.664896][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1047.670223][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.676690][ T31] RIP: 0033:0x7fda82390a3c [ 1047.681317][ T31] RSP: 002b:00007ffd10988530 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1047.690288][ T31] RAX: ffffffffffffffda RBX: 00007fda83104620 RCX: 00007fda82390a3c [ 1047.698294][ T31] RDX: 0000000000000028 RSI: 00007fda83104670 RDI: 0000000000000003 [ 1047.707668][ T31] RBP: 0000000000000000 R08: 00007ffd10988584 R09: 000000000000000c [ 1047.715853][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1047.725036][ T31] R13: 00007ffd109885d8 R14: 00007fda83104670 R15: 0000000000000000 [ 1047.733233][ T31] [ 1047.736348][ T31] INFO: task syz.2.6097:28947 blocked for more than 143 seconds. [ 1047.744529][ T31] Not tainted syzkaller #0 [ 1047.749957][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1047.763945][ T31] task:syz.2.6097 state:D stack:25352 pid:28947 tgid:28945 ppid:18788 task_flags:0x400140 flags:0x00004006 [ 1047.776047][ T31] Call Trace: [ 1047.779904][ T31] [ 1047.782896][ T31] __schedule+0x1798/0x4cc0 [ 1047.787481][ T31] ? validate_chain+0x897/0x2140 [ 1047.792518][ T31] ? __lock_acquire+0xab9/0xd20 [ 1047.797408][ T31] ? __pfx___schedule+0x10/0x10 [ 1047.802361][ T31] ? schedule+0x91/0x360 [ 1047.806652][ T31] schedule+0x165/0x360 [ 1047.811345][ T31] schedule_timeout+0x9a/0x270 [ 1047.816168][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1047.822157][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1047.827401][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1047.833211][ T31] ? wait_for_completion+0x267/0x5d0 [ 1047.838586][ T31] wait_for_completion+0x2bf/0x5d0 [ 1047.843800][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1047.849963][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 1047.855816][ T31] ? check_flush_dependency+0x88/0x400 [ 1047.861529][ T31] __flush_workqueue+0x6f7/0x14b0 [ 1047.866702][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1047.872736][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1047.877982][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1047.883909][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1047.889960][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 1047.895471][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 1047.901079][ T31] nbd_genl_disconnect+0x485/0x570 [ 1047.906251][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 1047.912383][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1047.918827][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 1047.924449][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1047.930710][ T31] ? stack_trace_save+0x9c/0xe0 [ 1047.935616][ T31] genl_rcv_msg+0x60e/0x790 [ 1047.940980][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1047.946063][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 1047.951834][ T31] netlink_rcv_skb+0x208/0x470 [ 1047.956649][ T31] ? __lock_acquire+0xab9/0xd20 [ 1047.961587][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1047.966673][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1047.972519][ T31] ? down_read+0x1ad/0x2e0 [ 1047.977077][ T31] genl_rcv+0x28/0x40 [ 1047.981970][ T31] netlink_unicast+0x82c/0x9e0 [ 1047.986808][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1047.992233][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1047.997213][ T31] ? skb_put+0x11b/0x210 [ 1048.002021][ T31] netlink_sendmsg+0x805/0xb30 [ 1048.006857][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.012290][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1048.017270][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1048.022778][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.028131][ T31] __sock_sendmsg+0x219/0x270 [ 1048.033394][ T31] ____sys_sendmsg+0x505/0x830 [ 1048.038224][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1048.043752][ T31] ? import_iovec+0x74/0xa0 [ 1048.048302][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1048.053381][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1048.059815][ T31] ? __fget_files+0x2a/0x420 [ 1048.064472][ T31] ? __fget_files+0x3a0/0x420 [ 1048.069250][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1048.074248][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1048.079830][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1048.084571][ T31] do_syscall_64+0xfa/0x3b0 [ 1048.089870][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.095144][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.101604][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1048.106343][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.112345][ T31] RIP: 0033:0x7ff27558eba9 [ 1048.116822][ T31] RSP: 002b:00007ff276391038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1048.125747][ T31] RAX: ffffffffffffffda RBX: 00007ff2757d6090 RCX: 00007ff27558eba9 [ 1048.134164][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 000000000000000c [ 1048.148809][ T31] RBP: 00007ff275611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1048.156849][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1048.165680][ T31] R13: 00007ff2757d6128 R14: 00007ff2757d6090 R15: 00007ffffc684698 [ 1048.173850][ T31] [ 1048.176950][ T31] INFO: task syz.2.6097:28956 blocked for more than 144 seconds. [ 1048.185327][ T31] Not tainted syzkaller #0 [ 1048.190684][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1048.199492][ T31] task:syz.2.6097 state:D stack:28360 pid:28956 tgid:28945 ppid:18788 task_flags:0x400040 flags:0x00004004 [ 1048.211601][ T31] Call Trace: [ 1048.215006][ T31] [ 1048.217968][ T31] __schedule+0x1798/0x4cc0 [ 1048.223073][ T31] ? __lock_acquire+0xab9/0xd20 [ 1048.227997][ T31] ? __lock_acquire+0xab9/0xd20 [ 1048.232958][ T31] ? __pfx___schedule+0x10/0x10 [ 1048.237867][ T31] ? schedule+0x91/0x360 [ 1048.242515][ T31] schedule+0x165/0x360 [ 1048.246729][ T31] schedule_preempt_disabled+0x13/0x30 [ 1048.254071][ T31] __mutex_lock+0x7e6/0x1350 [ 1048.259014][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1048.263833][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1048.269091][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1048.274157][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 1048.279553][ T31] ? radix_tree_lookup+0x240/0x290 [ 1048.284713][ T31] genl_rcv_msg+0x10d/0x790 [ 1048.289397][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1048.294476][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 1048.299867][ T31] ? __asan_memcpy+0x40/0x70 [ 1048.304497][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1048.310036][ T31] netlink_rcv_skb+0x208/0x470 [ 1048.314845][ T31] ? __lock_acquire+0xab9/0xd20 [ 1048.319864][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1048.324943][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1048.330485][ T31] ? down_read+0x1ad/0x2e0 [ 1048.334957][ T31] genl_rcv+0x28/0x40 [ 1048.339089][ T31] netlink_unicast+0x82c/0x9e0 [ 1048.343917][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1048.350615][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1048.355608][ T31] ? skb_put+0x11b/0x210 [ 1048.361267][ T31] netlink_sendmsg+0x805/0xb30 [ 1048.366100][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.371980][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1048.376992][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1048.383411][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.388814][ T31] __sock_sendmsg+0x219/0x270 [ 1048.393536][ T31] __sys_sendto+0x3bd/0x520 [ 1048.398087][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1048.403356][ T31] ? fd_install+0x97/0x540 [ 1048.407824][ T31] ? fd_install+0x30d/0x540 [ 1048.412855][ T31] __x64_sys_sendto+0xde/0x100 [ 1048.417935][ T31] do_syscall_64+0xfa/0x3b0 [ 1048.422659][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.428001][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.434289][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1048.440812][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.446772][ T31] RIP: 0033:0x7ff275590a3c [ 1048.451338][ T31] RSP: 002b:00007ff27634dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1048.460997][ T31] RAX: ffffffffffffffda RBX: 00007ff27634dfc0 RCX: 00007ff275590a3c [ 1048.470663][ T31] RDX: 0000000000000020 RSI: 00007ff27634e010 RDI: 000000000000000e [ 1048.478919][ T31] RBP: 0000000000000000 R08: 00007ff27634df14 R09: 000000000000000c [ 1048.486932][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000e [ 1048.495705][ T31] R13: 00007ff27634df68 R14: 00007ff27634e010 R15: 0000000000000000 [ 1048.504083][ T31] [ 1048.507214][ T31] INFO: task syz.4.6118:29029 blocked for more than 144 seconds. [ 1048.515367][ T31] Not tainted syzkaller #0 [ 1048.520587][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1048.529802][ T31] task:syz.4.6118 state:D stack:28360 pid:29029 tgid:29023 ppid:27793 task_flags:0x400040 flags:0x00004004 [ 1048.542140][ T31] Call Trace: [ 1048.545460][ T31] [ 1048.548432][ T31] __schedule+0x1798/0x4cc0 [ 1048.553157][ T31] ? __lock_acquire+0xab9/0xd20 [ 1048.558066][ T31] ? __lock_acquire+0xab9/0xd20 [ 1048.563116][ T31] ? __pfx___schedule+0x10/0x10 [ 1048.568029][ T31] ? schedule+0x91/0x360 [ 1048.572519][ T31] schedule+0x165/0x360 [ 1048.576714][ T31] schedule_preempt_disabled+0x13/0x30 [ 1048.582578][ T31] __mutex_lock+0x7e6/0x1350 [ 1048.587222][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1048.592264][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1048.597001][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1048.602588][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 1048.607961][ T31] ? radix_tree_lookup+0x240/0x290 [ 1048.613243][ T31] genl_rcv_msg+0x10d/0x790 [ 1048.617806][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1048.623314][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 1048.628394][ T31] ? __asan_memcpy+0x40/0x70 [ 1048.633172][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1048.638750][ T31] netlink_rcv_skb+0x208/0x470 [ 1048.643577][ T31] ? __lock_acquire+0xab9/0xd20 [ 1048.648664][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1048.653740][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1048.659202][ T31] ? down_read+0x1ad/0x2e0 [ 1048.663671][ T31] genl_rcv+0x28/0x40 [ 1048.667697][ T31] netlink_unicast+0x82c/0x9e0 [ 1048.672621][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1048.677957][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1048.683023][ T31] ? skb_put+0x11b/0x210 [ 1048.687311][ T31] netlink_sendmsg+0x805/0xb30 [ 1048.692348][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.697693][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1048.703117][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1048.708470][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.713946][ T31] __sock_sendmsg+0x219/0x270 [ 1048.718964][ T31] __sys_sendto+0x3bd/0x520 [ 1048.723534][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1048.728750][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1048.734100][ T31] ? exc_page_fault+0x76/0xf0 [ 1048.738953][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 1048.744301][ T31] __x64_sys_sendto+0xde/0x100 [ 1048.749297][ T31] do_syscall_64+0xfa/0x3b0 [ 1048.753879][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.759205][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.765400][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1048.770186][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.776096][ T31] RIP: 0033:0x7f2403190a3c [ 1048.781037][ T31] RSP: 002b:00007f2404060ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1048.789666][ T31] RAX: ffffffffffffffda RBX: 00007f2404060fc0 RCX: 00007f2403190a3c [ 1048.797684][ T31] RDX: 0000000000000024 RSI: 00007f2404061010 RDI: 0000000000000004 [ 1048.805856][ T31] RBP: 0000000000000000 R08: 00007f2404060f14 R09: 000000000000000c [ 1048.814083][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1048.822197][ T31] R13: 00007f2404060f68 R14: 00007f2404061010 R15: 0000000000000000 [ 1048.830320][ T31] [ 1048.833486][ T31] INFO: task syz.4.6118:29034 blocked for more than 144 seconds. [ 1048.841348][ T31] Not tainted syzkaller #0 [ 1048.846334][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1048.855184][ T31] task:syz.4.6118 state:D stack:28360 pid:29034 tgid:29023 ppid:27793 task_flags:0x400040 flags:0x00004004 [ 1048.867594][ T31] Call Trace: [ 1048.871039][ T31] [ 1048.874022][ T31] __schedule+0x1798/0x4cc0 [ 1048.878659][ T31] ? __lock_acquire+0xab9/0xd20 [ 1048.883623][ T31] ? __lock_acquire+0xab9/0xd20 [ 1048.888635][ T31] ? __pfx___schedule+0x10/0x10 [ 1048.893556][ T31] ? schedule+0x91/0x360 [ 1048.897859][ T31] schedule+0x165/0x360 [ 1048.902126][ T31] schedule_preempt_disabled+0x13/0x30 [ 1048.907649][ T31] __mutex_lock+0x7e6/0x1350 [ 1048.912718][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1048.917548][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1048.922590][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1048.927659][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 1048.932939][ T31] ? radix_tree_lookup+0x240/0x290 [ 1048.938094][ T31] genl_rcv_msg+0x10d/0x790 [ 1048.943055][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1048.948145][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 1048.953376][ T31] ? __asan_memcpy+0x40/0x70 [ 1048.958027][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1048.963558][ T31] netlink_rcv_skb+0x208/0x470 [ 1048.968361][ T31] ? __lock_acquire+0xab9/0xd20 [ 1048.973320][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1048.978495][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1048.983921][ T31] ? down_read+0x1ad/0x2e0 [ 1048.988392][ T31] genl_rcv+0x28/0x40 [ 1048.992544][ T31] netlink_unicast+0x82c/0x9e0 [ 1048.997365][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1049.002786][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1049.007781][ T31] ? skb_put+0x11b/0x210 [ 1049.012194][ T31] netlink_sendmsg+0x805/0xb30 [ 1049.017055][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.025047][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1049.030250][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1049.035751][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.041170][ T31] __sock_sendmsg+0x219/0x270 [ 1049.045987][ T31] __sys_sendto+0x3bd/0x520 [ 1049.050619][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1049.055729][ T31] ? fd_install+0x97/0x540 [ 1049.060280][ T31] ? fd_install+0x30d/0x540 [ 1049.064847][ T31] __x64_sys_sendto+0xde/0x100 [ 1049.069779][ T31] do_syscall_64+0xfa/0x3b0 [ 1049.074502][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1049.079794][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.085910][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1049.090730][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.096666][ T31] RIP: 0033:0x7f2403190a3c [ 1049.101255][ T31] RSP: 002b:00007f240403fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1049.110047][ T31] RAX: ffffffffffffffda RBX: 00007f240403ffc0 RCX: 00007f2403190a3c [ 1049.118101][ T31] RDX: 0000000000000020 RSI: 00007f2404040010 RDI: 0000000000000006 [ 1049.126210][ T31] RBP: 0000000000000000 R08: 00007f240403ff14 R09: 000000000000000c [ 1049.134473][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 1049.142666][ T31] R13: 00007f240403ff68 R14: 00007f2404040010 R15: 0000000000000000 [ 1049.150808][ T31] [ 1049.153932][ T31] INFO: task syz.6.6123:29042 blocked for more than 145 seconds. [ 1049.161914][ T31] Not tainted syzkaller #0 [ 1049.166964][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1049.175812][ T31] task:syz.6.6123 state:D stack:25864 pid:29042 tgid:29039 ppid:20276 task_flags:0x400140 flags:0x00004004 [ 1049.188269][ T31] Call Trace: [ 1049.191751][ T31] [ 1049.194746][ T31] __schedule+0x1798/0x4cc0 [ 1049.199454][ T31] ? __lock_acquire+0xab9/0xd20 [ 1049.204560][ T31] ? __lock_acquire+0xab9/0xd20 [ 1049.209599][ T31] ? __pfx___schedule+0x10/0x10 [ 1049.214530][ T31] ? schedule+0x91/0x360 [ 1049.219036][ T31] schedule+0x165/0x360 [ 1049.223347][ T31] schedule_preempt_disabled+0x13/0x30 [ 1049.229020][ T31] __mutex_lock+0x7e6/0x1350 [ 1049.233670][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1049.238486][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1049.243492][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1049.248712][ T31] ? stack_trace_save+0x9c/0xe0 [ 1049.253613][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1049.259535][ T31] ? radix_tree_lookup+0x240/0x290 [ 1049.264705][ T31] genl_rcv_msg+0x10d/0x790 [ 1049.269358][ T31] ? __lock_acquire+0xab9/0xd20 [ 1049.274280][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1049.279534][ T31] netlink_rcv_skb+0x208/0x470 [ 1049.284351][ T31] ? __lock_acquire+0xab9/0xd20 [ 1049.289343][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1049.294411][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1049.299904][ T31] ? down_read+0x1ad/0x2e0 [ 1049.304365][ T31] genl_rcv+0x28/0x40 [ 1049.308365][ T31] netlink_unicast+0x82c/0x9e0 [ 1049.313256][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1049.318705][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1049.323689][ T31] ? skb_put+0x11b/0x210 [ 1049.327980][ T31] netlink_sendmsg+0x805/0xb30 [ 1049.332849][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.338153][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1049.343339][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1049.348866][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.354301][ T31] __sock_sendmsg+0x219/0x270 [ 1049.359279][ T31] ____sys_sendmsg+0x505/0x830 [ 1049.364112][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1049.369588][ T31] ? import_iovec+0x74/0xa0 [ 1049.374155][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1049.379011][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1049.384303][ T31] ? __fget_files+0x2a/0x420 [ 1049.389319][ T31] ? __fget_files+0x3a0/0x420 [ 1049.394057][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1049.399147][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1049.404653][ T31] ? rcu_is_watching+0x15/0xb0 [ 1049.409724][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1049.414456][ T31] do_syscall_64+0xfa/0x3b0 [ 1049.420607][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1049.425860][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.432030][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1049.436736][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.442729][ T31] RIP: 0033:0x7f191e18eba9 [ 1049.447176][ T31] RSP: 002b:00007f191ef79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1049.455746][ T31] RAX: ffffffffffffffda RBX: 00007f191e3d5fa0 RCX: 00007f191e18eba9 [ 1049.464008][ T31] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1049.472223][ T31] RBP: 00007f191e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1049.480349][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.488359][ T31] R13: 00007f191e3d6038 R14: 00007f191e3d5fa0 R15: 00007ffc8fa0d168 [ 1049.496541][ T31] [ 1049.500069][ T31] INFO: task syz.0.6125:29049 blocked for more than 145 seconds. [ 1049.507831][ T31] Not tainted syzkaller #0 [ 1049.512890][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1049.521678][ T31] task:syz.0.6125 state:D stack:24320 pid:29049 tgid:29048 ppid:28416 task_flags:0x400140 flags:0x00004004 [ 1049.533767][ T31] Call Trace: [ 1049.537074][ T31] [ 1049.540139][ T31] __schedule+0x1798/0x4cc0 [ 1049.544684][ T31] ? __switch_to+0xdae/0x1670 [ 1049.549465][ T31] ? __lock_acquire+0xab9/0xd20 [ 1049.554373][ T31] ? __lock_acquire+0xab9/0xd20 [ 1049.559363][ T31] ? __pfx___schedule+0x10/0x10 [ 1049.564294][ T31] ? schedule+0x91/0x360 [ 1049.568878][ T31] schedule+0x165/0x360 [ 1049.573073][ T31] schedule_preempt_disabled+0x13/0x30 [ 1049.578746][ T31] __mutex_lock+0x7e6/0x1350 [ 1049.583388][ T31] ? __mutex_lock+0x5bb/0x1350 [ 1049.588185][ T31] ? genl_rcv_msg+0x10d/0x790 [ 1049.593120][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1049.598228][ T31] ? stack_trace_save+0x9c/0xe0 [ 1049.603230][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1049.608819][ T31] ? radix_tree_lookup+0x240/0x290 [ 1049.613988][ T31] genl_rcv_msg+0x10d/0x790 [ 1049.618650][ T31] ? __lock_acquire+0xab9/0xd20 [ 1049.623740][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1049.628885][ T31] netlink_rcv_skb+0x208/0x470 [ 1049.633694][ T31] ? __lock_acquire+0xab9/0xd20 [ 1049.638642][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1049.643718][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1049.649143][ T31] ? down_read+0x1ad/0x2e0 [ 1049.653615][ T31] genl_rcv+0x28/0x40 [ 1049.657644][ T31] netlink_unicast+0x82c/0x9e0 [ 1049.662616][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1049.668004][ T31] ? netlink_sendmsg+0x642/0xb30 [ 1049.673065][ T31] ? skb_put+0x11b/0x210 [ 1049.677349][ T31] netlink_sendmsg+0x805/0xb30 [ 1049.682348][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.687690][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1049.692821][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1049.698494][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.703954][ T31] __sock_sendmsg+0x219/0x270 [ 1049.708767][ T31] ____sys_sendmsg+0x505/0x830 [ 1049.713717][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1049.719158][ T31] ? import_iovec+0x74/0xa0 [ 1049.723721][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 1049.728470][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1049.733830][ T31] ? __fget_files+0x2a/0x420 [ 1049.738452][ T31] ? __fget_files+0x3a0/0x420 [ 1049.743411][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 1049.748429][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1049.754014][ T31] ? rcu_is_watching+0x15/0xb0 [ 1049.758908][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1049.763639][ T31] do_syscall_64+0xfa/0x3b0 [ 1049.768277][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1049.773607][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.779786][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1049.784503][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.790612][ T31] RIP: 0033:0x7f9218d8eba9 [ 1049.795067][ T31] RSP: 002b:00007f9219c93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1049.803666][ T31] RAX: ffffffffffffffda RBX: 00007f9218fd5fa0 RCX: 00007f9218d8eba9 [ 1049.811793][ T31] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 000000000000000e [ 1049.820122][ T31] RBP: 00007f9218e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1049.828235][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.836354][ T31] R13: 00007f9218fd6038 R14: 00007f9218fd5fa0 R15: 00007ffc6bab4078 [ 1049.844475][ T31] [ 1049.847641][ T31] [ 1049.847641][ T31] Showing all locks held in the system: [ 1049.855533][ T31] 1 lock held by khungtaskd/31: [ 1049.860484][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1049.870545][ T31] 2 locks held by getty/5628: [ 1049.875252][ T31] #0: ffff88803336a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1049.885119][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1049.895438][ T31] 2 locks held by kworker/u9:2/5867: [ 1049.901130][ T31] #0: ffff88802515f948 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1049.912619][ T31] #1: ffffc900040afbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1049.924548][ T31] 2 locks held by syz-executor/28771: [ 1049.930024][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1049.938279][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1049.947424][ T31] 3 locks held by syz.2.6097/28947: [ 1049.952816][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1049.961135][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1049.970268][ T31] #2: ffff88802515ba30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 1049.980971][ T31] 2 locks held by syz.2.6097/28956: [ 1049.986204][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1049.994565][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.003705][ T31] 2 locks held by syz.4.6118/29029: [ 1050.009090][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.017347][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.026497][ T31] 2 locks held by syz.4.6118/29034: [ 1050.031806][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.040142][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.049454][ T31] 2 locks held by syz.6.6123/29042: [ 1050.054680][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.064047][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.075308][ T31] 2 locks held by syz.0.6125/29049: [ 1050.080754][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.089117][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.098247][ T31] 2 locks held by syz-executor/29052: [ 1050.104575][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.112892][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.122752][ T31] 2 locks held by syz-executor/29063: [ 1050.128158][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.137153][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.146572][ T31] 2 locks held by syz-executor/29065: [ 1050.152335][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.160685][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.169873][ T31] 2 locks held by syz-executor/29067: [ 1050.175291][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.183696][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.192826][ T31] 2 locks held by syz-executor/29088: [ 1050.198307][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.206653][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.215809][ T31] 2 locks held by syz-executor/29097: [ 1050.222876][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.231538][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.241131][ T31] 2 locks held by syz-executor/29109: [ 1050.246679][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.255070][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.264219][ T31] 2 locks held by syz-executor/29111: [ 1050.269720][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.277981][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.287111][ T31] 2 locks held by syz-executor/29113: [ 1050.292572][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.301034][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.310155][ T31] 2 locks held by syz-executor/29134: [ 1050.315567][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.323986][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.333081][ T31] 2 locks held by syz-executor/29143: [ 1050.338479][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.346902][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.356206][ T31] 2 locks held by syz-executor/29154: [ 1050.361692][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.370045][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.379280][ T31] 2 locks held by syz-executor/29155: [ 1050.384708][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.393115][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.402258][ T31] 2 locks held by syz-executor/29159: [ 1050.407854][ T31] #0: ffffffff8f59f9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1050.416183][ T31] #1: ffffffff8f59f7e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1050.425344][ T31] [ 1050.427781][ T31] ============================================= [ 1050.427781][ T31] [ 1050.436397][ T31] NMI backtrace for cpu 0 [ 1050.436421][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1050.436447][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1050.436462][ T31] Call Trace: [ 1050.436471][ T31] [ 1050.436482][ T31] dump_stack_lvl+0x189/0x250 [ 1050.436519][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1050.436546][ T31] ? __pfx__printk+0x10/0x10 [ 1050.436593][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1050.436631][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1050.436670][ T31] ? __pfx__printk+0x10/0x10 [ 1050.436706][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1050.436744][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1050.436783][ T31] watchdog+0xf93/0xfe0 [ 1050.436821][ T31] ? watchdog+0x1de/0xfe0 [ 1050.436859][ T31] kthread+0x70e/0x8a0 [ 1050.436891][ T31] ? __pfx_watchdog+0x10/0x10 [ 1050.436921][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.436951][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1050.436974][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1050.436998][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.437027][ T31] ret_from_fork+0x436/0x7d0 [ 1050.437054][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1050.437084][ T31] ? __switch_to_asm+0x39/0x70 [ 1050.437112][ T31] ? __switch_to_asm+0x33/0x70 [ 1050.437145][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.437175][ T31] ret_from_fork_asm+0x1a/0x30 [ 1050.437222][ T31] [ 1050.437231][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1050.584003][ C1] NMI backtrace for cpu 1 [ 1050.584022][ C1] CPU: 1 UID: 0 PID: 28736 Comm: kworker/u8:50 Not tainted syzkaller #0 PREEMPT(full) [ 1050.584044][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1050.584057][ C1] Workqueue: bat_events batadv_nc_worker [ 1050.584082][ C1] RIP: 0010:lock_acquire+0x34/0x360 [ 1050.584114][ C1] Code: 55 41 54 53 48 83 ec 60 4d 89 ce 45 89 c7 41 89 cc 89 54 24 04 89 f3 49 89 fd 48 8b ac 24 98 00 00 00 65 48 8b 05 bc 62 03 11 <48> 89 44 24 58 0f 1f 44 00 00 65 8b 05 bf 62 03 11 83 f8 08 0f 83 [ 1050.584132][ C1] RSP: 0018:ffffc9000379f980 EFLAGS: 00000282 [ 1050.584147][ C1] RAX: f737f66192b2da00 RBX: 0000000000000000 RCX: 0000000000000002 [ 1050.584161][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13a0e0 [ 1050.584174][ C1] RBP: ffffffff8b4875f2 R08: 0000000000000000 R09: 0000000000000000 [ 1050.584187][ C1] R10: dffffc0000000000 R11: ffffffff8b487520 R12: 0000000000000002 [ 1050.584201][ C1] R13: ffffffff8e13a0e0 R14: 0000000000000000 R15: 0000000000000000 [ 1050.584214][ C1] FS: 0000000000000000(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000 [ 1050.584231][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1050.584244][ C1] CR2: 00007f98ea107d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 1050.584262][ C1] Call Trace: [ 1050.584269][ C1] [ 1050.584284][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1050.584303][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1050.584321][ C1] batadv_nc_worker+0xef/0x610 [ 1050.584339][ C1] ? batadv_nc_worker+0xd2/0x610 [ 1050.584358][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1050.584379][ C1] process_scheduled_works+0xae1/0x17b0 [ 1050.584416][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1050.584445][ C1] worker_thread+0x8a0/0xda0 [ 1050.584480][ C1] kthread+0x70e/0x8a0 [ 1050.584506][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1050.584524][ C1] ? __pfx_kthread+0x10/0x10 [ 1050.584549][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1050.584569][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1050.584590][ C1] ? __pfx_kthread+0x10/0x10 [ 1050.584613][ C1] ret_from_fork+0x436/0x7d0 [ 1050.584642][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1050.584665][ C1] ? __switch_to_asm+0x39/0x70 [ 1050.584690][ C1] ? __switch_to_asm+0x33/0x70 [ 1050.584714][ C1] ? __pfx_kthread+0x10/0x10 [ 1050.584738][ C1] ret_from_fork_asm+0x1a/0x30 [ 1050.584773][ C1] [ 1050.585155][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1050.824174][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1050.833301][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1050.843375][ T31] Call Trace: [ 1050.846664][ T31] [ 1050.849607][ T31] dump_stack_lvl+0x99/0x250 [ 1050.854236][ T31] ? __asan_memcpy+0x40/0x70 [ 1050.858952][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1050.864177][ T31] ? __pfx__printk+0x10/0x10 [ 1050.868803][ T31] vpanic+0x281/0x750 [ 1050.872808][ T31] ? __pfx_vpanic+0x10/0x10 [ 1050.877330][ T31] ? preempt_schedule+0xae/0xc0 [ 1050.882199][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1050.887685][ T31] panic+0xb9/0xc0 [ 1050.891425][ T31] ? __pfx_panic+0x10/0x10 [ 1050.895864][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1050.901254][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1050.907467][ T31] watchdog+0xfd2/0xfe0 [ 1050.911737][ T31] ? watchdog+0x1de/0xfe0 [ 1050.916100][ T31] kthread+0x70e/0x8a0 [ 1050.920198][ T31] ? __pfx_watchdog+0x10/0x10 [ 1050.924931][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.929538][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1050.934749][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1050.940062][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.944701][ T31] ret_from_fork+0x436/0x7d0 [ 1050.949309][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1050.954459][ T31] ? __switch_to_asm+0x39/0x70 [ 1050.959350][ T31] ? __switch_to_asm+0x33/0x70 [ 1050.964134][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.968769][ T31] ret_from_fork_asm+0x1a/0x30 [ 1050.973570][ T31] [ 1050.976905][ T31] Kernel Offset: disabled [ 1050.981249][ T31] Rebooting in 86400 seconds..