last executing test programs: 24.557202162s ago: executing program 0 (id=1404): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040009", @ANYRES32=r1], 0x58}}, 0x4000) shutdown(r0, 0x0) close(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x777e}], 0x1, 0x40002041, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@mpls_getroute={0x28, 0x1a, 0x2, 0x70bd2b, 0x25dfdbfe, {0x1c, 0x14, 0x80, 0x7, 0x0, 0x3, 0xc8, 0xd}, [@RTA_MULTIPATH={0xc, 0x9, {0x6c5, 0x22, 0x2, r5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 24.192478936s ago: executing program 0 (id=1406): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x4798c000) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001440)={0x14, 0x2, {0x6f, @struct={0xff, 0x8}, 0x0, 0x7, 0x1000, 0x59aca62f, 0x6, 0xfffffffffffffffa, 0x408, @struct={0xb2, 0x7cdd}, 0x0, 0x3, [0x7, 0x100, 0xfd5, 0x5, 0x2, 0x200]}, {0x2, @struct={0x43, 0x8}, 0x0, 0x8000, 0x7, 0x9, 0x5e89, 0x8000000000000001, 0x62, @struct={0xbd7, 0x200}, 0xe, 0x10000, [0x7, 0x6a, 0x5, 0x4, 0x0, 0x8]}, {0x8, @struct={0xa26a, 0x80}, 0x0, 0x7, 0xfff, 0x1, 0x6, 0x6, 0x462, @usage=0x8, 0x0, 0x200, [0x8, 0x6, 0x5, 0x400, 0x2, 0x80]}, {0x7, 0x3e30, 0x7000000000000000}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000440)={{r1}, 0x0, 0x10, @inherit={0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000100000000000000040000000000000077800000000000102080000000000000ffffffffffffffff08000000000000000300000000000000a60e000000020000ff07000000000000"]}, @devid=r2}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x6, 0x40006) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e27, 0x0, @loopback, 0x5a1}, 0x1c, 0x0}}], 0x1, 0x4) recvmmsg(r5, &(0x7f0000000800), 0x62, 0x12141, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x29, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x7c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @remote}) write$tun(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa0208004500002040000000032f907800001fe1e0000001a00088be000c9078410900005d5260ec73b755"], 0x32) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000240)=0x5) 23.723289494s ago: executing program 0 (id=1410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='xen_mmu_set_pud\x00', r0, 0x0, 0x8000}, 0x18) unshare(0x62040200) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000040), &(0x7f0000000340)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r5, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000700)=""/242, 0xf2}, {&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/4126, 0x101e}, {&(0x7f00000003c0)=""/91, 0x5b}, {0x0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}], 0x9, 0x14022, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x8000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg$sock(r6, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000ec0)}}, {{0x0, 0x0, &(0x7f0000001080)}}], 0x3, 0x90) 23.374611181s ago: executing program 3 (id=1414): connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000400000000000000050000007201a20000003b3f95"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cb}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) unshare(0x24060400) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000340)=0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000c00)='sit0\x00', 0x10) bind$xdp(r2, &(0x7f0000000d40)={0x2c, 0x3, 0x0, 0x2f}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x34, 0x24, 0x1, 0x70bd2d, 0x25dfdbfe, {0x44}, [@nested={0x20, 0xe, 0x0, 0x1, [@nested={0x1c, 0x151, 0x0, 0x1, [@nested={0x4, 0x20e3}, @typed={0x13, 0xbc, 0x0, 0x0, @str='(\xc9\xfa/.\xf0]+\'{\xeb-::\x00'}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmmsg$inet6(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="b039ab33c95b", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c80)="e6bcd5f9089eb24827bb7775370cc52d8b02508ec9a0fa1e069ebae1736b96318549a12c90ad90ba23191056ad331f0b274a5db375849b0081ad2f75a6360b", 0x3f}], 0x1}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xc8, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005304010028bd7000fc9bdf2540ea43d77499c9a5a186f020"], 0x1c}}, 0x3000c051) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x38}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x40000}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x97}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 22.133625168s ago: executing program 3 (id=1419): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="350a00000000000061198800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x110}}, 0x0) 22.031139564s ago: executing program 3 (id=1421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x7}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES64=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x6, 0x6}, {0xfff3, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x4040000) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 21.804786855s ago: executing program 3 (id=1424): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x3, 0xfffffff7}, &(0x7f0000000380)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x62040200) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x8f02}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r4, 0x400, 0x452c}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000033c0)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000780)=ANY=[@ANYBLOB="7c719fe5", @ANYRES16=r8], 0xe0}}, 0x40090) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="796129bd7000000000007e0000000c0099006d910000150000006a941b5e1089278c0d1c9ab378b1"], 0x20}}, 0x4000054) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 21.594843353s ago: executing program 4 (id=1428): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0xf}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)={0x1c, r3, 0x5, 0x0, 0x20000, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x21, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xffffffff}}, 0xe8) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000c40)=0x8001, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e1842959a3d3b396f4f06f0d6a23c0e565f15f1eaaba63d2ad1456f70f880789dfeec9f83b24b5dc7035eb7773a95cdce71fcc04a66e62e9bc966f1ee05f2c237bbb7ca2756bbd184853281849e1708976e1cdf51ebec752ba199055f7bb4188e18483c6fb2370f8bbf2fbcde5d011a7bc4f84930f4d697cd9505488647278c7f7bc82e8e05dc3763f91ebca9203313af0161000268287ac1dc252c5b8bcfe8086aa83704a110c1aad5999b3134b1a82ece9dec299b63e1e187420d1401b1e339ce310e0751accaad7", @ANYRES16=r8, @ANYBLOB="010026bd700000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x5c, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ba}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200048c4}, 0x20018) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x2c, 0x0, 0x1, 0x1ff}, 0x28) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8001a400}, 0xc, &(0x7f0000000440)={&(0x7f0000000a40)={0x1ac, r10, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff65}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcea}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8040}, 0xc45) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000580)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000a00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000700)={0x2c0, r3, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x269, 0x2a, [@fast_bss_trans={0x37, 0x60, {0x6, 0x1, "49b9162246828809d8f226baf022129a", "b4b897859cb9e52cf21d8bffcca565406c0e3eac652222a963e16f62d395378b", "a4bdbd4df956abf1da033016635eca0b09be67382f3ffa0642be4c4a8e5ba182", [{0x1, 0xc, "2dd4075e1b9d284305d8cd0a"}]}}, @tim={0x5, 0xc0, {0xc1, 0xaa, 0xb5, "d7515ab79176e152f8b5bc00c1d8ddeb3c85924f1501a96affcad99f942238c8e596cb30d6772a4856f260884b7a487c04c51e2cd6e832922bc43a42c0cf6543ff3a7ae2c9c92e6fc9624ac6914c1bab87ba4ac0a24d439c407ba8a233c5e138d99c6fbf79ad4f98fb4e35ec7c55dbc332a15f57d7c08ac7a8065d7f9ebb3af12024d6eb2ef3403f7b9c423a4833b3778828da6081770dff9df59bae6a558c7d59f9fd79295f16fb6b1bef06b25a3314aa6c306fae2cbf3a92fb8f6a39"}}, @measure_req={0x26, 0x36, {0x15, 0xd, 0x8, "7a5f8a417f228a8428c8d07677866adfa677ea8ee46d5a0c69d487cb6f4c653b2a5a802dd9dfb358c9aa2e0789bd16cf12f330"}}, @perr={0x84, 0x48, {0x10, 0x4, [{{0x0, 0x1}, @device_b, 0x6, @value=@device_b, 0x31}, {{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0x39}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x9}, {{}, @device_a, 0xfff, @void, 0x3}]}}, @rann={0x7e, 0x15, {{}, 0x6, 0x4, @device_b, 0xd8, 0x3, 0x2}}, @fast_bss_trans={0x37, 0x94, {0x5, 0x4, "bf013c63f2cc9ceb50865fd55245e286", "4d17abc4a9a4d2685db4164ab745af8f63f38561523e3d0b4122ca6b828f12e2", "17f00c1e11bf0b6ad4405d179a82ebd9718466567cfa22e2d5e57bc0c94d6e9a", [{0x3, 0x5, "17f0dc703c"}, {0x2, 0x18, "8067fb133f4f0b9994758eb112bf4cd6e2c678d56e87e48e"}, {0x4, 0xc, "34ac467b64c9689e2203fd12"}, {0x4, 0x11, "6fd9c8cc75536ad5a8eea15dc1d03d9616"}]}}, @gcr_ga={0xbd, 0x6}, @ssid={0x0, 0x8, @random="fc9d2a8d6379bfdc"}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3d}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x62}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x63}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x2c0}}, 0x44000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x1c, 0x1}]}, {0x0, [0x0]}}, 0x0, 0x2b, 0x0, 0x1, 0x502}, 0x28) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250301f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621d029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973de99a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f075f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be0400e900"/276], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 21.532883802s ago: executing program 1 (id=1429): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYBLOB="08cb5eb439c9ce6e08380f5bc66be731f9188191e5fc38ef91d839775067f862d4cfbca41b84c6f91652a7967c03a9141f98db87e7cb4974", @ANYRESDEC=r0, @ANYBLOB="6461c678c1f7efa04cdbfb4b83a9e6083b8c4ed16e8ff31207940ef185c002a14114680c3e755debcbb048ee0fe86ac50b7cc2d645c8d73f60361e55809a3f669d7354bfffc25e67ef4c512e4c1ebe2581da3e354a98d42b828e11c4b8c8cb498776810f87870d0fb44f9007479f4404d0a5302b961e529bb2833fe995ce50a2402f15e3b2f3912e0e0896100bd5d6950c02a1b8ce54be844a51fa2df39d442dc21f75e60dc356f877835590935aa4491dacac10247ad107", @ANYBLOB="93d0d5c51f90890bea53adcf53f57b32c019485d50942e35fa8cce29590fa3f9585033558d1ced4905c1", @ANYRES16=r0, @ANYRESOCT=r0], 0x178}, 0x1, 0x0, 0x0, 0x24040010}, 0x20044000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000003d80)=""/4084, 0xff4}, {&(0x7f0000000580)=""/128, 0x80}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0xffffffffffffffbb, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0xfffffffffffffd84, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x84, 0x0, 0x2, 0x270bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg0\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x101}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x84}, 0x1, 0x0, 0x0, 0x10000}, 0x8080) socket$kcm(0x29, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r6, 0x0, 0xfffffffff0000000}, 0x18) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 21.220746047s ago: executing program 4 (id=1431): socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x19e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x168, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x9, "bd3e6d4706598080a8030037ffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x20, "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"}]}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000ffffe0000002ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000fcfffffffffffffffcffffffffffffff0000000000940000b0ac000000000000000000000000000059ce000000000600000000000000008000010000000000000a00100001000000000000000068df6c10b31416414f784cb7"], 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfc}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000005500)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x44854) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)=""/253}, {&(0x7f0000000840)=""/254}, {&(0x7f00000012c0)=""/4096}, {&(0x7f0000000400)=""/29}, {&(0x7f0000000940)=""/227}, {&(0x7f0000000b40)=""/219}]}, 0x3}], 0x4000000000000eb, 0x2001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x175b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x400, 0x7}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x22}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) ioctl(r10, 0x8b1a, &(0x7f0000000280)) 21.102444666s ago: executing program 2 (id=1432): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000020000007020000f8ffffffb703000008000000b704000000000000850000000a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 20.976754827s ago: executing program 2 (id=1433): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, 0x0, 0x30) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x6ee, 0x84, &(0x7f0000000640)=""/132, 0x41100, 0x40, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000700)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x2, 0xbe2a, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x5c, r8, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 20.85264929s ago: executing program 2 (id=1434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x20000400) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="f0", 0x1}], 0x1}}], 0x1, 0x24044c41) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x20, r1, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) 20.752516179s ago: executing program 4 (id=1435): unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$packet(0x11, 0x2, 0x300) socket(0x1d, 0x4, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/130}, {&(0x7f00000006c0)=""/212}, {&(0x7f00000007c0)=""/238}, {&(0x7f0000000480)=""/179}, {&(0x7f00000008c0)=""/187}]}, 0x1}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000980)=""/136}, {&(0x7f0000000300)=""/100}, {&(0x7f0000000a40)=""/4096}, {&(0x7f0000000040)=""/29}], 0x0, &(0x7f0000001a40)=""/52}, 0x610}], 0x3fffffffffffd82, 0x40012021, 0x0) 20.125369507s ago: executing program 4 (id=1436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="080036573b4d1e96", 0x8}], 0x1, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34, 0x12a}}], 0x18}, 0x24000044) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x4c, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x15, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x20, 0x0, 0x0, 0x41000, 0x10, '\x00', r3, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 20.118675909s ago: executing program 0 (id=1437): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000400000004ff00030000000040000000c252169b29d82294b1f95b3d0047b105ef4eb17735abf50cb375a08a58654317d3f6f249bf7d3372484f284da074f2ea41dcf493cf483b34ba4c9931b0a5960d731a917b9bde8429f10801e023fc1fa3a333f61c6414e6310a85206201b68d1f3ccf63b404e352862af254fc77865165e784b8f97eea8d23e9301a0f95d3d72930861caa546c2601047bc5edc9819b2be71863a116c5e84896e03c01ecd584913eefcbe957a102fda74ecb40a7cc5622a49ea83ee2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r1, 0x4690}, {r1, 0x8143}], 0x4c, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) unshare(0x6a040000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a82", 0x24}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a905", 0x3a}], 0x2}, 0x40000) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r4, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601f6ad5c360000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 20.000106386s ago: executing program 4 (id=1438): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf2520010000000000000000000000000000000000000001000000004e210002020000006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x40) 19.93255673s ago: executing program 4 (id=1439): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e25, @broadcast}}, 0x0, 0x20000000005, 0x4a}, 0xd8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x4, 0xcc3) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001e4bbe19908bf2cda78cc5e1eb4894ba923d589bb212b6386d3d07b9606518ec4eb8e4d0b32fb15867dd06c0e444b462eb89d5d7af79483af4f1922151528eb39ab855dd4f0ef98598b28940f6fec5ae6bc10a05f1254495c3143aa950d348b1881f175fac85bbfdfa9659293bb0c6b030aa297c3269d622a3196a9bb50a4b0953fd7130ac134fb32298aa0a5bfc4afdec3fb77d8913e1ba7fe4fbadb9c49c17733231c8e9b63524f4d1d389c2e4fe5e83df47906500"/201, @ANYRES16=r5, @ANYBLOB="010002000020fedbdf252500000008000300", @ANYRES32=r7, @ANYBLOB="050019010e000000050019010800000005001801110000000800a000f8ffffff0800350000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x101, 0x2, 0x0, 0x9, 0x3, 0x80}, &(0x7f0000000100)=0x20) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, 0x24) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000226bd7000fcdbdf2512000000050013000100000008000300", @ANYRES32=r12, @ANYBLOB="389bdd96f76bf609dcb859968a91f02257d402a21458a157104407255141f7ca334eeaa49c966a930e7ad1c9078dc11a5e6bcc41a2d003a52e386394dfae9404c059508368fb216b32d4f88aeab46ab51dcf5b73c5a51d04eed362c1c821a39eff3aa54e5e04979bdbd1da616674cc2b1646e35abc8c91475e2c31ffa2a8e16e66d31bb593817a61ca0d6f5a1ff5b3155618"], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20040085) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fdd3df25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x4, 0x0, 0x1}}, 0x2d) getsockopt(r13, 0x111, 0x6, 0x0, &(0x7f0000000080)) r14 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r14, &(0x7f0000000680)=[{{&(0x7f0000000300)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000580)="c3b9ba8a6a62c59d75d7fd7bf360dc9af0a521d11093446572f0b3d587c8e0e0451fe22a8bb02b71cd820f321487ea4821ea9655d96ce5119adadc9bb8080a211055bd1527c97c0db4db5eb7f120c256062796fa9586e307a0d1be946ec509ecd9e6bd54a4cc0ded7982dd2653940e0dfa6a628311fa6384e134f14bbeb67229479c62fec16de2dd14c23eb9ff1e7167dc2d1039c828402fc1346de4785a6b7c3380fa184dd7d419045e677cbba9d64d8bcc45c6dec64687796f42434023603d90", 0xc1}], 0x1, &(0x7f0000000440)=[{0x20, 0x6be62f6ffae71aca, 0x0, "aa45a36466f79993567eaba6f119af58"}], 0x20}}], 0x1, 0x800) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080025000000000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) 19.913335582s ago: executing program 2 (id=1440): close(0x3) (async) close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r2, 0x3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 19.736948119s ago: executing program 2 (id=1441): r0 = socket(0x1e, 0x1, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000080)={0x0, 0x9, 0x9, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'w\x00'}, 0x8) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0x4, 0x0, &(0x7f00000000c0)) sendmmsg$sock(r0, &(0x7f0000000200)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000180)=@in6={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, 0x80, 0x0}}], 0x2, 0x4048040) r4 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r4, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10023, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x2008, 0x77}, {@remote, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) bind$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x2, @local}}, 0x1e) 18.851652018s ago: executing program 2 (id=1442): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x300, 0x0, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a069b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gretap0\x00'}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x10012, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000000000000000000000000000000000000000000083de58"], 0x50) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0xc085) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/249, 0x5e, 0xf9, 0x3}, 0x28) 17.739964014s ago: executing program 0 (id=1443): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x6) 17.529992486s ago: executing program 0 (id=1444): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14048010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0, 0x57}], 0x2, &(0x7f00000008c0)}], 0x1, 0x40800) recvmsg$can_raw(r4, &(0x7f0000000480)={&(0x7f0000000300)=@nfc, 0x80, &(0x7f0000001940)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000380)=""/60, 0x3c}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000001780)=""/181, 0xb5}, {&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000001840)=""/230, 0xe6}], 0x8, &(0x7f00000019c0)=""/156, 0x9c}, 0x2) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x28, 0x5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00'}, 0x90) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 16.411323936s ago: executing program 1 (id=1445): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000900)}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)=""/94, 0x5e}, {&(0x7f0000001340)=""/212, 0xd4}], 0x2, &(0x7f0000001440)=""/65, 0x41}, 0x8000}], 0x1, 0x100, 0x0) 16.302332909s ago: executing program 1 (id=1446): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='pim6reg1\x00', 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x80}, 0xa) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x2, 0x9, 0xfffffffffffffffe}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x6, 0x7, 0x8}) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = accept4$inet(r3, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10, 0x80000) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000180)={0x0, 0x9}) r6 = socket$inet6(0xa, 0x4, 0x40) sendto$inet6(r6, &(0x7f00000001c0)="1f50", 0x2, 0x80, &(0x7f0000000200)={0xa, 0x4e23, 0xa3c, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd7}, 0x1c) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000240)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x24008800) sendmsg$NFT_BATCH(r2, &(0x7f0000000a40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}]}, @NFT_MSG_DELOBJ={0xc0, 0x14, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_USERDATA={0xaa, 0x8, "91aaaccd0d79853a3bd7775bc5d100ef0069f694b41afb21413c648430b4b62cd49a944a28d19ba030efd0e3d57f4dc1e650b365c88999824600a0efabb83b61aa27270101c1ba09b19a73a37db994135edeab80c866221e03eddb1a4dcca84ac40a138fc72fea4a9cbd13f1160125f95500cc4e3ca6d447b4d37c7759cfe1b7cc4515d010226143960caf641e5bb40224c4d91739139e6d6f6bf83a9c8ebb60375411108869"}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0xc, "74dbf9cc3823"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x234, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "07a0f9c5ef40c6cd12f01a5dc173f0b1a066596450ab270b77e82ab5eaace298aac0731f078f904730d00e44404f7da4371a551c7290134184adccf86df5a37b0b5a4b0123d597a3c1753dd50f401bbf0e1e63477460bdf0c1a40068400e3643a939966aaa9e3891b50dcded635c15bcecd5b40a461a65b744679235ce47678be719fa22f9b438582d73253842a5f388c5016bbedac21e24571988d795b00d6468220d78b4a416a5089679c5d22b988b5ea8ad4f1adff969c95c5190e9f442aea3a1c04237c869f08b20ad8dd6eaa8805199650b947cf14c6b65224895"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x7d, 0x6, "e8be0cab44ca4acf19bf250157cf44855b0fc6e3321006315d25ad45b2bfa211af7de287ab2969b3bca98b68710d73c8710434d00cb4ea679a62afe1b59d9cdb4275f13df1abfe67eb5f30260776ddc5baf85620b8468a48752277f9733e730cbdc7cb57071841eb72055ab0b9faa908b028be07b1e0c79a0e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x77, 0x6, "8de7e68fedb8b413780172006eb954eb96fcbf5fa348bc4490d96329d1175c6bd85025239bdf333f362241fb6c52019cff77789a620de4e3af7a270b3a58b68307e93510b93c90d6478bde9f7ffcb3dc8f5fd1da53673ecb5c1ec103252d4724fd1120695b118aa680293d06d40c3481873d96"}]}, @NFT_MSG_NEWRULE={0x150, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1c, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x100, 0x7, 0x1, 0x0, "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"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5dc}, 0x1, 0x0, 0x0, 0x40000c1}, 0x40) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r8, 0x89fb, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a80)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @broadcast, 0x19, 0x1d}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000b00)={"f99001c1747f15d9cda23ea9390a63e4", 0x0, 0x0, {0x9, 0x3ff}, {0x2, 0x42d}, 0xe68, [0xffff, 0x8, 0x2, 0x1, 0x2, 0x2c56, 0x5, 0x0, 0x5, 0x0, 0xffffffff, 0x4, 0x10, 0x7fff, 0x8001, 0x4]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000c00)={{r3}, r9, 0xc, @unused=[0x100000001, 0x8001, 0x0, 0xe101], @subvolid=0x6}) r10 = accept4$inet6(r2, &(0x7f0000001c00)={0xa, 0x0, 0x0, @remote}, &(0x7f0000001c40)=0x1c, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003000)={r2, 0xe0, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000002d40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002d80)=[0x0, 0x0], 0x0, 0x52, &(0x7f0000002dc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000002e40), &(0x7f0000002e80), 0x8, 0x21, 0x8, 0x8, &(0x7f0000002ec0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000030c0)={'ip6_vti0\x00', &(0x7f0000003040)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x81, 0x7, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x7809, 0x2, 0x6}}) sendmmsg$inet(r10, &(0x7f0000003300)=[{{&(0x7f0000001c80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000001cc0)="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", 0x1000}], 0x1, &(0x7f0000003100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @remote, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @private=0xa010100, @loopback}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@generic={0x7, 0x11, "868bd4725577aaa9ac52e559711456"}, @cipso={0x86, 0x9, 0x2, [{0x2, 0x3, 'R'}]}, @noop, @timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0x5, [{@private=0xa010100, 0x6}, {@rand_addr=0x64010100, 0x1}]}, @timestamp_prespec={0x44, 0x3c, 0xf9, 0x3, 0x7, [{@multicast1, 0x522}, {@empty, 0x2}, {@private=0xa010102, 0xffffffff}, {@rand_addr=0x64010100, 0x3}, {@multicast1, 0x8001}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x81}]}, @rr={0x7, 0xf, 0xfd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@ra={0x94, 0x4}, @cipso={0x86, 0x55, 0x2, [{0x1, 0x5, "0de7af"}, {0x0, 0xb, "9152d4e09b068c63b6"}, {0x7, 0xb, "caaed750a36fe97d2f"}, {0x0, 0x11, "6e6ff3ff578b99b79fecb467bdf58a"}, {0x6, 0x4, "056a"}, {0x6, 0x5, "5f4081"}, {0x6, 0x7, "d55c906623"}, {0x7, 0x4, "c67f"}, {0x0, 0xb, "21f2fb01650cafb1f4"}, {0x6, 0x4, "7e93"}]}, @end, @timestamp_addr={0x44, 0x24, 0xca, 0x1, 0x1, [{@multicast1, 0x8}, {@broadcast, 0x6}, {@broadcast, 0x9}, {@remote, 0x477}]}, @ssrr={0x89, 0x17, 0xb, [@loopback, @remote, @remote, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010102]}, @timestamp={0x44, 0xc, 0x83, 0x0, 0xa, [0x10000, 0x8]}, @timestamp={0x44, 0x8, 0x9f, 0x0, 0x4, [0x5]}, @timestamp_addr={0x44, 0x14, 0x7c, 0x1, 0x0, [{@broadcast, 0x4}, {@multicast2, 0x4}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x1d8}}], 0x1, 0x4040) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003340)=r12, 0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x46080) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f00000034c0)={0x40, 0x30, [0x0, 0x3, 0x1, 0x6], &(0x7f0000003480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000003500), &(0x7f0000003540)=0x4) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000840}, 0x10014) 16.214861134s ago: executing program 3 (id=1447): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_netdev_private(r0, 0x8923, &(0x7f0000000240)=':') (fail_nth: 5) 15.680769602s ago: executing program 1 (id=1448): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa300007fff00000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe000000008500000048000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800000000000000005cbb5a2600"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) 15.661287934s ago: executing program 3 (id=1449): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="8b000400000000004800128008000100736974003c0002800500090029000000060010000b00000008000c000000008006000d000900000006000f0003040000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r10, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r5], 0xec}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0xfd45}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0/file0/file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000b40)={0x2, 'vlan0\x00', {}, 0x6}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000380)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3", 0xda}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001340)=""/212, 0xd4}], 0x2}, 0x8000}], 0x1, 0x100, 0x0) 15.597169142s ago: executing program 1 (id=1450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf2520010000000000000000000000000000000000000001000000004e210002020000006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x40) 15.468684536s ago: executing program 1 (id=1451): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r4}, 0x10) r5 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0xfffc, @multicast2}}, 0x24) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000000) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002d40), 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000680)={0x1, 0x8, @status={[0xfffffffffffffffe, 0x0, 0x100000000, 0x8, 0x4, 0xfb4]}, [0x7, 0x417, 0x1cde, 0x81, 0x5, 0x40, 0x7, 0x100000001, 0xee, 0x2, 0xfffffffffffffff7, 0x7, 0x200, 0x1, 0xffff, 0xfffffffffffffffc, 0x9, 0x1, 0xd27, 0x6, 0x2, 0x480000000000000, 0xffbd, 0x1000, 0x7, 0xff, 0x4bd, 0x18000000, 0x8, 0x62, 0x8001, 0xb1b, 0x7, 0x9, 0x3, 0x0, 0x0, 0x5, 0x8, 0x2, 0x9, 0x0, 0xfffffffffffffff9, 0xb24c, 0x4, 0x800, 0x0, 0x2, 0xe, 0x3, 0x9, 0xffffffff, 0x1, 0x3, 0x6, 0x7fff, 0x6, 0x1, 0xfffffffffffffffd, 0xf, 0x100000001, 0x0, 0x6, 0x8]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="229186a4", @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf2506000000040001804000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e64300000000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c0001800800030000000000180001801400020069705f767469300000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 4.015969662s ago: executing program 32 (id=1439): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e25, @broadcast}}, 0x0, 0x20000000005, 0x4a}, 0xd8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x4, 0xcc3) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001e4bbe19908bf2cda78cc5e1eb4894ba923d589bb212b6386d3d07b9606518ec4eb8e4d0b32fb15867dd06c0e444b462eb89d5d7af79483af4f1922151528eb39ab855dd4f0ef98598b28940f6fec5ae6bc10a05f1254495c3143aa950d348b1881f175fac85bbfdfa9659293bb0c6b030aa297c3269d622a3196a9bb50a4b0953fd7130ac134fb32298aa0a5bfc4afdec3fb77d8913e1ba7fe4fbadb9c49c17733231c8e9b63524f4d1d389c2e4fe5e83df47906500"/201, @ANYRES16=r5, @ANYBLOB="010002000020fedbdf252500000008000300", @ANYRES32=r7, @ANYBLOB="050019010e000000050019010800000005001801110000000800a000f8ffffff0800350000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x101, 0x2, 0x0, 0x9, 0x3, 0x80}, &(0x7f0000000100)=0x20) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, 0x24) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r9, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000226bd7000fcdbdf2512000000050013000100000008000300", @ANYRES32=r12, @ANYBLOB="389bdd96f76bf609dcb859968a91f02257d402a21458a157104407255141f7ca334eeaa49c966a930e7ad1c9078dc11a5e6bcc41a2d003a52e386394dfae9404c059508368fb216b32d4f88aeab46ab51dcf5b73c5a51d04eed362c1c821a39eff3aa54e5e04979bdbd1da616674cc2b1646e35abc8c91475e2c31ffa2a8e16e66d31bb593817a61ca0d6f5a1ff5b3155618"], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20040085) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fdd3df25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x4, 0x0, 0x1}}, 0x2d) getsockopt(r13, 0x111, 0x6, 0x0, &(0x7f0000000080)) r14 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r14, &(0x7f0000000680)=[{{&(0x7f0000000300)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000580)="c3b9ba8a6a62c59d75d7fd7bf360dc9af0a521d11093446572f0b3d587c8e0e0451fe22a8bb02b71cd820f321487ea4821ea9655d96ce5119adadc9bb8080a211055bd1527c97c0db4db5eb7f120c256062796fa9586e307a0d1be946ec509ecd9e6bd54a4cc0ded7982dd2653940e0dfa6a628311fa6384e134f14bbeb67229479c62fec16de2dd14c23eb9ff1e7167dc2d1039c828402fc1346de4785a6b7c3380fa184dd7d419045e677cbba9d64d8bcc45c6dec64687796f42434023603d90", 0xc1}], 0x1, &(0x7f0000000440)=[{0x20, 0x6be62f6ffae71aca, 0x0, "aa45a36466f79993567eaba6f119af58"}], 0x20}}], 0x1, 0x800) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080025000000000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) 3.000174702s ago: executing program 33 (id=1442): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3b6, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x300, 0x0, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a069b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gretap0\x00'}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x10012, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000000000000000000000000000000000000000000083de58"], 0x50) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, 0x0, 0xc085) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/249, 0x5e, 0xf9, 0x3}, 0x28) 2.495062927s ago: executing program 34 (id=1444): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14048010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r2, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0, 0x57}], 0x2, &(0x7f00000008c0)}], 0x1, 0x40800) recvmsg$can_raw(r4, &(0x7f0000000480)={&(0x7f0000000300)=@nfc, 0x80, &(0x7f0000001940)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000380)=""/60, 0x3c}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000001780)=""/181, 0xb5}, {&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000001840)=""/230, 0xe6}], 0x8, &(0x7f00000019c0)=""/156, 0x9c}, 0x2) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x28, 0x5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00'}, 0x90) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 493.40227ms ago: executing program 35 (id=1449): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="8b000400000000004800128008000100736974003c0002800500090029000000060010000b00000008000c000000008006000d000900000006000f0003040000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r10, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r5], 0xec}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0xfd45}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0/file0/file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000b40)={0x2, 'vlan0\x00', {}, 0x6}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000380)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012ef", 0x58}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3", 0xda}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001340)=""/212, 0xd4}], 0x2}, 0x8000}], 0x1, 0x100, 0x0) 0s ago: executing program 36 (id=1451): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r4}, 0x10) r5 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0xfffc, @multicast2}}, 0x24) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000000) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002d40), 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000680)={0x1, 0x8, @status={[0xfffffffffffffffe, 0x0, 0x100000000, 0x8, 0x4, 0xfb4]}, [0x7, 0x417, 0x1cde, 0x81, 0x5, 0x40, 0x7, 0x100000001, 0xee, 0x2, 0xfffffffffffffff7, 0x7, 0x200, 0x1, 0xffff, 0xfffffffffffffffc, 0x9, 0x1, 0xd27, 0x6, 0x2, 0x480000000000000, 0xffbd, 0x1000, 0x7, 0xff, 0x4bd, 0x18000000, 0x8, 0x62, 0x8001, 0xb1b, 0x7, 0x9, 0x3, 0x0, 0x0, 0x5, 0x8, 0x2, 0x9, 0x0, 0xfffffffffffffff9, 0xb24c, 0x4, 0x800, 0x0, 0x2, 0xe, 0x3, 0x9, 0xffffffff, 0x1, 0x3, 0x6, 0x7fff, 0x6, 0x1, 0xfffffffffffffffd, 0xf, 0x100000001, 0x0, 0x6, 0x8]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="229186a4", @ANYRES16=r1, @ANYBLOB="000129bd7000fddbdf2506000000040001804000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e64300000000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c0001800800030000000000180001801400020069705f767469300000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) kernel console output (not intermixed with test programs): _64_after_hwframe+0x77/0x7f [ 153.710502][ T7838] RIP: 0033:0x7faed998eec9 [ 153.710520][ T7838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.710536][ T7838] RSP: 002b:00007faeda74c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 153.710558][ T7838] RAX: ffffffffffffffda RBX: 00007faed9be5fa0 RCX: 00007faed998eec9 [ 153.710572][ T7838] RDX: 0000000000000001 RSI: 0000200000002d80 RDI: 0000000000000003 [ 153.710584][ T7838] RBP: 00007faeda74c090 R08: 0000000000000000 R09: 0000000000000000 [ 153.710595][ T7838] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 153.710606][ T7838] R13: 00007faed9be6038 R14: 00007faed9be5fa0 R15: 00007ffd37ba4038 [ 153.710658][ T7838] [ 153.918983][ T7835] lowmem_reserve[]: 0 0 0 0 0 [ 153.992433][ T7835] Node 1 Normal free:3880504kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21744kB local_pcp:10576kB free_cma:0kB [ 154.061305][ T7835] lowmem_reserve[]: 0 0 0 0 0 [ 154.066916][ T7835] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.088994][ T7835] Node 0 DMA32: 769*4kB (UM) 331*8kB (UME) 145*16kB (UME) 630*32kB (UM) 158*64kB (UME) 79*128kB (UM) 50*256kB (UME) 19*512kB (UM) 14*1024kB (UM) 7*2048kB (UME) 261*4096kB (M) = 1168684kB [ 154.122824][ T7835] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 154.182825][ T7835] Node 1 Normal: 218*4kB (UME) 60*8kB (UME) 45*16kB (UME) 75*32kB (UME) 17*64kB (UME) 5*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 944*4096kB (M) = 3880504kB [ 154.238716][ T7835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.258490][ T7835] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.274400][ T7835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.285157][ T7844] tipc: Enabled bearer , priority 0 [ 154.306339][ T7844] tipc: Resetting bearer [ 154.316592][ T7835] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.329317][ T7841] tipc: Disabling bearer [ 154.346400][ T7835] 44751 total pagecache pages [ 154.351178][ T7835] 0 pages in swap cache [ 154.365519][ T7835] Free swap = 124996kB [ 154.369734][ T7835] Total swap = 124996kB [ 154.387036][ T7835] 2097051 pages RAM [ 154.391975][ T7835] 0 pages HighMem/MovableOnly [ 154.416449][ T7835] 424998 pages reserved [ 154.420660][ T7835] 0 pages cma reserved [ 154.534812][ T7851] IPv6: addrconf: prefix option has invalid lifetime [ 154.728858][ T7862] netlink: 'syz.1.448': attribute type 21 has an invalid length. [ 154.738216][ T7862] netlink: 128 bytes leftover after parsing attributes in process `syz.1.448'. [ 154.794036][ T7862] netlink: 'syz.1.448': attribute type 4 has an invalid length. [ 154.802074][ T7862] netlink: 3 bytes leftover after parsing attributes in process `syz.1.448'. [ 155.523197][ T7876] sch_tbf: burst 43029 is lower than device ip6gre0 mtu (65485) ! [ 164.352536][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 193.792512][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 194.435922][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.442606][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.434586][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 205.580422][ T7904] lo speed is unknown, defaulting to 1000 [ 205.671952][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 205.704879][ T7917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.460'. [ 206.036146][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 206.064883][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 206.282954][ T7932] macsec0: left promiscuous mode [ 206.291068][ T7932] macsec0: left allmulticast mode [ 206.310969][ T7929] lo speed is unknown, defaulting to 1000 [ 206.902070][ T7950] netlink: 'syz.2.471': attribute type 1 has an invalid length. [ 206.922406][ T7950] netlink: 208 bytes leftover after parsing attributes in process `syz.2.471'. [ 206.936128][ T7950] netlink: 'syz.2.471': attribute type 1 has an invalid length. [ 206.944701][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'. [ 207.745630][ T7965] netlink: 'syz.1.475': attribute type 21 has an invalid length. [ 207.841590][ T7965] netlink: 152 bytes leftover after parsing attributes in process `syz.1.475'. [ 208.474425][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 209.344279][ T8007] lo speed is unknown, defaulting to 1000 [ 209.366755][ T8012] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 209.467883][ T8012] bond3: entered promiscuous mode [ 209.474866][ T8012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.551954][ T8021] netlink: 'syz.4.490': attribute type 15 has an invalid length. [ 209.601583][ T8012] 8021q: adding VLAN 0 to HW filter on device bond4 [ 209.621874][ T8012] bond3: (slave bond4): making interface the new active one [ 209.647931][ T8012] bond4: entered promiscuous mode [ 209.668859][ T8012] bond3: (slave bond4): Enslaving as an active interface with an up link [ 210.358871][ T8035] netlink: 224 bytes leftover after parsing attributes in process `syz.0.492'. [ 210.536495][ T8042] Bluetooth: MGMT ver 1.23 [ 210.653619][ T8040] lo speed is unknown, defaulting to 1000 [ 210.674583][ T8044] netlink: 'syz.1.494': attribute type 9 has an invalid length. [ 211.875646][ T8031] Bluetooth: hci1: command 0x0406 tx timeout [ 211.875888][ T8030] Bluetooth: hci0: command 0x0406 tx timeout [ 211.883473][ T8031] Bluetooth: hci3: command 0x0406 tx timeout [ 211.888333][ T8030] Bluetooth: hci2: command 0x0406 tx timeout [ 211.920391][ T8054] lo speed is unknown, defaulting to 1000 [ 211.997607][ T8057] netlink: 'syz.2.497': attribute type 4 has an invalid length. [ 213.230722][ T8065] @0Ù: renamed from bond_slave_1 (while UP) [ 213.443659][ T8067] sctp: [Deprecated]: syz.3.502 (pid 8067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.443659][ T8067] Use struct sctp_sack_info instead [ 213.482793][ T8067] sctp: [Deprecated]: syz.3.502 (pid 8067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.482793][ T8067] Use struct sctp_sack_info instead [ 213.900822][ T8070] lo speed is unknown, defaulting to 1000 [ 214.013557][ T8069] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 214.251552][ T8076] __nla_validate_parse: 1 callbacks suppressed [ 214.251575][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 214.695224][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 214.938666][ T8073] lo speed is unknown, defaulting to 1000 [ 215.095003][ T8088] netlink: 96 bytes leftover after parsing attributes in process `syz.2.510'. [ 215.440323][ T8097] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.617387][ T5917] IPVS: starting estimator thread 0... [ 215.636291][ T8102] netlink: 228 bytes leftover after parsing attributes in process `syz.0.513'. [ 215.712301][ T8105] IPVS: using max 24 ests per chain, 57600 per kthread [ 215.880642][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 216.504828][ T8136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.523'. [ 217.135381][ T8153] tipc: Started in network mode [ 217.142736][ T8153] tipc: Node identity ac14140f, cluster identity 4711 [ 217.174284][ T8153] tipc: New replicast peer: 255.255.255.255 [ 217.186863][ T8153] tipc: Enabled bearer , priority 10 [ 217.724437][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.533'. [ 217.935434][ T8180] netlink: 'syz.2.534': attribute type 39 has an invalid length. [ 218.084478][ T8177] netlink: 32 bytes leftover after parsing attributes in process `syz.4.533'. [ 218.141705][ T8184] netlink: 844 bytes leftover after parsing attributes in process `syz.1.535'. [ 218.226465][ T8187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.535'. [ 218.302588][ T5947] tipc: Node number set to 2886997007 [ 218.779123][ T8208] netlink: 'syz.2.545': attribute type 4 has an invalid length. [ 218.812827][ T8209] netlink: 'syz.2.545': attribute type 4 has an invalid length. [ 218.839408][ T8202] veth1_macvtap: left promiscuous mode [ 219.308640][ T8222] trusted_key: syz.2.547 sent an empty control message without MSG_MORE. [ 219.506022][ T8239] __nla_validate_parse: 5 callbacks suppressed [ 219.506042][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 219.558717][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 219.971207][ T8256] netlink: 'syz.3.558': attribute type 276 has an invalid length. [ 220.157403][ T8261] Bluetooth: MGMT ver 1.23 [ 220.263537][ T8272] netlink: 'syz.3.564': attribute type 13 has an invalid length. [ 220.271814][ T8272] netlink: 'syz.3.564': attribute type 17 has an invalid length. [ 220.285499][ T8271] netlink: 'syz.0.563': attribute type 30 has an invalid length. [ 220.321840][ T8274] netlink: 44 bytes leftover after parsing attributes in process `syz.2.561'. [ 220.331318][ T8272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.341729][ T8274] netlink: 88 bytes leftover after parsing attributes in process `syz.2.561'. [ 220.388817][ T8277] xfrm0: entered promiscuous mode [ 220.394008][ T8277] xfrm0: entered allmulticast mode [ 220.463816][ T8279] 8021q: VLANs not supported on ip6tnl0 [ 220.469838][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.565'. [ 220.498807][ T8272] lo speed is unknown, defaulting to 1000 [ 220.959109][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 221.852525][ T8328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.577'. [ 221.983071][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 222.039536][ T8334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.583'. [ 222.201321][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 223.002441][ T8386] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 223.328261][ T8386] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.467610][ T8391] bond3: (slave geneve2): making interface the new active one [ 223.510817][ T8391] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 223.670539][ T8385] lo speed is unknown, defaulting to 1000 [ 224.669833][ T8421] team0: Port device dummy0 removed [ 224.694327][ T8430] __nla_validate_parse: 4 callbacks suppressed [ 224.694349][ T8430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.605'. [ 224.716521][ T8421] bridge_slave_0: left allmulticast mode [ 224.732588][ T8431] delete_channel: no stack [ 224.746855][ T8421] bridge_slave_0: left promiscuous mode [ 224.757121][ T8421] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.775021][ T8421] bridge_slave_1: left allmulticast mode [ 224.788609][ T8421] bridge_slave_1: left promiscuous mode [ 224.800646][ T8421] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.820535][ T8421] bond0: (slave bond_slave_0): Releasing backup interface [ 224.836902][ T8421] bond0: (slave c@0Ù): Releasing backup interface [ 224.867485][ T8421] team0: Port device team_slave_0 removed [ 224.894250][ T8421] team0: Port device team_slave_1 removed [ 224.921666][ T8421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.929807][ T8421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.941665][ T8421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.950448][ T8421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.968552][ T8421] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.055694][ T8440] netlink: 60 bytes leftover after parsing attributes in process `syz.2.609'. [ 225.207327][ T8438] lo speed is unknown, defaulting to 1000 [ 225.323958][ T8450] netlink: 248 bytes leftover after parsing attributes in process `syz.0.613'. [ 225.420077][ T8453] netlink: 'syz.3.614': attribute type 8 has an invalid length. [ 225.429875][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.613'. [ 225.998686][ T8465] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 226.029891][ T8467] lo speed is unknown, defaulting to 1000 [ 226.030517][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.619'. [ 226.056963][ T8465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.070925][ T8468] netlink: 16 bytes leftover after parsing attributes in process `syz.4.620'. [ 226.088188][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.620'. [ 226.105542][ T8465] bond0: (slave rose0): Enslaving as an active interface with an up link [ 226.454562][ T8479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.930983][ T8472] lo speed is unknown, defaulting to 1000 [ 229.375345][ T8556] netlink: 'syz.3.634': attribute type 4 has an invalid length. [ 229.412351][ T8556] netlink: 17 bytes leftover after parsing attributes in process `syz.3.634'. [ 230.994032][ T8588] lo speed is unknown, defaulting to 1000 [ 231.039629][ T8592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.106483][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 231.144351][ T8592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.527964][ T8597] lo speed is unknown, defaulting to 1000 [ 231.987199][ T8606] macsec0: entered promiscuous mode [ 231.992581][ T8606] macsec0: entered allmulticast mode [ 232.172378][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'. [ 232.265584][ T8616] syzkaller1: entered promiscuous mode [ 232.277722][ T8616] syzkaller1: entered allmulticast mode [ 232.390804][ T8618] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 232.406707][ T8618] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 232.423345][ T8618] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 232.438065][ T8603] lo speed is unknown, defaulting to 1000 [ 232.445928][ T8616] netlink: 60 bytes leftover after parsing attributes in process `syz.3.653'. [ 233.031433][ T8622] lo speed is unknown, defaulting to 1000 [ 235.346917][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.662'. [ 235.410888][ T8652] netlink: 'syz.2.662': attribute type 10 has an invalid length. [ 235.462297][ T8652] team0: Port device dummy0 added [ 236.034682][ T8669] syzkaller1: entered promiscuous mode [ 236.044829][ T8669] syzkaller1: entered allmulticast mode [ 236.173031][ T8669] lo speed is unknown, defaulting to 1000 [ 236.175208][ T8674] netlink: 60 bytes leftover after parsing attributes in process `syz.4.668'. [ 236.199660][ T8671] veth1_macvtap: entered promiscuous mode [ 236.607060][ T8675] lo speed is unknown, defaulting to 1000 [ 236.917797][ T8693] syzkaller1: entered promiscuous mode [ 236.934182][ T8693] syzkaller1: entered allmulticast mode [ 237.094924][ T8697] netlink: 60 bytes leftover after parsing attributes in process `syz.2.676'. [ 237.456115][ T8696] lo speed is unknown, defaulting to 1000 [ 237.693020][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 238.296096][ T8715] FAULT_INJECTION: forcing a failure. [ 238.296096][ T8715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.310952][ T8715] CPU: 1 UID: 0 PID: 8715 Comm: syz.1.682 Not tainted syzkaller #0 PREEMPT(full) [ 238.310981][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 238.310992][ T8715] Call Trace: [ 238.311000][ T8715] [ 238.311008][ T8715] dump_stack_lvl+0x189/0x250 [ 238.311037][ T8715] ? __pfx____ratelimit+0x10/0x10 [ 238.311060][ T8715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.311082][ T8715] ? __pfx__printk+0x10/0x10 [ 238.311108][ T8715] ? __might_fault+0xb0/0x130 [ 238.311148][ T8715] should_fail_ex+0x414/0x560 [ 238.311192][ T8715] _copy_from_iter+0x1de/0x1790 [ 238.311212][ T8715] ? __lock_acquire+0xab9/0xd20 [ 238.311242][ T8715] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 238.311283][ T8715] ? policy_nodemask+0x27c/0x720 [ 238.311308][ T8715] ? __pfx__copy_from_iter+0x10/0x10 [ 238.311339][ T8715] ? set_page_refcounted+0xa0/0x1e0 [ 238.311365][ T8715] ? page_copy_sane+0x4e/0x280 [ 238.311389][ T8715] copy_page_from_iter+0xdd/0x170 [ 238.311417][ T8715] tun_get_user+0x1d7b/0x3e90 [ 238.311450][ T8715] ? tun_get_user+0x6f6/0x3e90 [ 238.311483][ T8715] ? aa_file_perm+0x44d/0x1550 [ 238.311503][ T8715] ? __pfx_tun_get_user+0x10/0x10 [ 238.311524][ T8715] ? _parse_integer_limit+0x1ae/0x1f0 [ 238.311566][ T8715] ? __lock_acquire+0xab9/0xd20 [ 238.311600][ T8715] ? ref_tracker_alloc+0x318/0x460 [ 238.311626][ T8715] ? __lock_acquire+0xab9/0xd20 [ 238.311655][ T8715] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 238.311692][ T8715] ? tun_get+0x1c/0x2f0 [ 238.311727][ T8715] ? tun_get+0x1c/0x2f0 [ 238.311748][ T8715] ? tun_get+0x1c/0x2f0 [ 238.311776][ T8715] tun_chr_write_iter+0x113/0x200 [ 238.311800][ T8715] vfs_write+0x5c9/0xb30 [ 238.311831][ T8715] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 238.311854][ T8715] ? __pfx_vfs_write+0x10/0x10 [ 238.311892][ T8715] ? __fget_files+0x2a/0x420 [ 238.311931][ T8715] ksys_write+0x145/0x250 [ 238.311958][ T8715] ? __pfx_ksys_write+0x10/0x10 [ 238.311978][ T8715] ? rcu_is_watching+0x15/0xb0 [ 238.312003][ T8715] ? do_syscall_64+0xbe/0x3b0 [ 238.312031][ T8715] do_syscall_64+0xfa/0x3b0 [ 238.312052][ T8715] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.312072][ T8715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.312092][ T8715] ? clear_bhb_loop+0x60/0xb0 [ 238.312116][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.312136][ T8715] RIP: 0033:0x7faed998d97f [ 238.312159][ T8715] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 238.312175][ T8715] RSP: 002b:00007faeda74c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 238.312197][ T8715] RAX: ffffffffffffffda RBX: 00007faed9be5fa0 RCX: 00007faed998d97f [ 238.312212][ T8715] RDX: 0000000000000086 RSI: 00002000000010c0 RDI: 00000000000000c8 [ 238.312223][ T8715] RBP: 00007faeda74c090 R08: 0000000000000000 R09: 0000000000000000 [ 238.312235][ T8715] R10: 0000000000000086 R11: 0000000000000293 R12: 0000000000000001 [ 238.312246][ T8715] R13: 00007faed9be6038 R14: 00007faed9be5fa0 R15: 00007ffd37ba4038 [ 238.312278][ T8715] [ 238.817086][ T8717] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 239.586918][ T8735] netlink: 'syz.3.688': attribute type 39 has an invalid length. [ 240.085411][ T8749] netlink: 9 bytes leftover after parsing attributes in process `syz.1.690'. [ 240.119473][ T8749] ..0·: renamed from hsr0 (while UP) [ 240.194649][ T8749] ..0·: entered allmulticast mode [ 240.212760][ T8749] hsr_slave_0: entered allmulticast mode [ 240.221848][ T8749] hsr_slave_1: entered allmulticast mode [ 240.248508][ T8749] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 240.601950][ T8767] netlink: 36 bytes leftover after parsing attributes in process `syz.3.695'. [ 240.696733][ T8774] netlink: 'syz.3.695': attribute type 10 has an invalid length. [ 240.741361][ T8774] team0: Port device dummy0 added [ 240.772112][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 240.862007][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.698'. [ 240.956012][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 241.000178][ T8783] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.698'. [ 241.009950][ T8783] netlink: zone id is out of range [ 241.015209][ T8783] netlink: zone id is out of range [ 241.020634][ T8783] netlink: get zone limit has 8 unknown bytes [ 241.111963][ T8786] lo speed is unknown, defaulting to 1000 [ 241.165440][ T8790] macsec0: left promiscuous mode [ 241.198282][ T8790] macsec0: left allmulticast mode [ 241.499696][ T8797] netlink: 'syz.2.704': attribute type 1 has an invalid length. [ 241.915816][ T8794] lo speed is unknown, defaulting to 1000 [ 242.278355][ T8821] syzkaller1: entered promiscuous mode [ 242.287806][ T8821] syzkaller1: entered allmulticast mode [ 242.431161][ T8828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.709'. [ 242.513473][ T8823] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.609494][ T8823] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.690269][ T8823] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.773780][ T8823] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.807012][ T8825] lo speed is unknown, defaulting to 1000 [ 242.890079][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.078889][ T8838] veth1_macvtap: left promiscuous mode [ 243.105603][ T8838] macsec0: entered promiscuous mode [ 243.110886][ T8838] macsec0: entered allmulticast mode [ 243.182651][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.247303][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.262741][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.541396][ T8837] lo speed is unknown, defaulting to 1000 [ 245.468753][ T8871] netlink: 60 bytes leftover after parsing attributes in process `syz.4.720'. [ 245.512433][ T8867] netlink: 60 bytes leftover after parsing attributes in process `syz.4.720'. [ 245.521600][ T8867] netlink: 60 bytes leftover after parsing attributes in process `syz.4.720'. [ 246.275008][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.3.725'. [ 246.679029][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 246.800240][ T8893] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 246.838376][ T8897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.726'. [ 247.059179][ T8899] lo speed is unknown, defaulting to 1000 [ 247.091821][ T8900] veth1_macvtap: left promiscuous mode [ 247.190958][ T8900] macsec0: entered promiscuous mode [ 247.252400][ T8900] macsec0: entered allmulticast mode [ 247.312443][ T8903] veth1_macvtap: entered promiscuous mode [ 247.355426][ T8912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.733'. [ 247.384540][ T8903] veth1_macvtap: entered allmulticast mode [ 247.416540][ T8903] macsec0: left promiscuous mode [ 247.453268][ T8903] macsec0: left allmulticast mode [ 247.458372][ T8903] veth1_macvtap: left allmulticast mode [ 247.695030][ T8925] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 247.741101][ T8925] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 248.116510][ T8940] lo speed is unknown, defaulting to 1000 [ 248.116742][ T8945] veth1_macvtap: left promiscuous mode [ 248.143502][ T8945] macsec0: entered promiscuous mode [ 248.162079][ T8945] macsec0: entered allmulticast mode [ 248.224277][ T8950] veth1_macvtap: entered promiscuous mode [ 248.255141][ T8950] veth1_macvtap: entered allmulticast mode [ 248.277461][ T8950] macsec0: left promiscuous mode [ 248.283665][ T8950] macsec0: left allmulticast mode [ 248.290658][ T8950] veth1_macvtap: left allmulticast mode [ 248.788000][ T8965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.749'. [ 249.013362][ T8942] lo speed is unknown, defaulting to 1000 [ 249.091155][ T8970] netlink: 'syz.1.751': attribute type 3 has an invalid length. [ 249.110912][ T8970] netlink: 'syz.1.751': attribute type 3 has an invalid length. [ 249.267881][ T8974] bond_slave_0: entered promiscuous mode [ 249.273835][ T8974] bond_slave_1: entered promiscuous mode [ 249.282500][ T8974] vlan2: entered promiscuous mode [ 249.299999][ T8974] bond0: entered promiscuous mode [ 249.389161][ T8980] pim6reg: entered allmulticast mode [ 249.444546][ T8980] pim6reg: left allmulticast mode [ 249.480707][ T8982] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 249.779720][ T8989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.930947][ T8989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.023368][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 250.131164][ T8989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.375643][ T8989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.619513][ T9005] lo speed is unknown, defaulting to 1000 [ 251.010095][ T1156] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.019841][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 251.139609][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.300587][ T6454] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.462669][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.512884][ T9026] netlink: 'syz.4.764': attribute type 1 has an invalid length. [ 251.526574][ T9026] netlink: 228 bytes leftover after parsing attributes in process `syz.4.764'. [ 251.836937][ T9038] syzkaller1: entered promiscuous mode [ 251.852901][ T9038] syzkaller1: entered allmulticast mode [ 251.999089][ T9042] tipc: Enabling of bearer rejected, already enabled [ 252.021040][ T9044] netlink: 60 bytes leftover after parsing attributes in process `syz.1.766'. [ 252.041751][ T9042] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 252.049595][ T9042] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 252.238769][ T9041] lo speed is unknown, defaulting to 1000 [ 252.395863][ T9053] block nbd0: backend image doesn't match with [ 252.687896][ T9061] netlink: 'syz.4.769': attribute type 1 has an invalid length. [ 253.259432][ T9069] netlink: 'syz.4.770': attribute type 2 has an invalid length. [ 253.275456][ T9069] netlink: 'syz.4.770': attribute type 1 has an invalid length. [ 253.283690][ T9069] netlink: 224 bytes leftover after parsing attributes in process `syz.4.770'. [ 253.781999][ T9071] lo speed is unknown, defaulting to 1000 [ 253.814902][ T9072] macsec0: entered promiscuous mode [ 253.820170][ T9072] macsec0: entered allmulticast mode [ 253.874665][ T9077] macsec0: left promiscuous mode [ 253.911291][ T9077] macsec0: left allmulticast mode [ 254.093251][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 254.656293][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'. [ 254.853772][ T9100] netlink: 156 bytes leftover after parsing attributes in process `syz.2.781'. [ 254.888154][ T9100] netlink: 72 bytes leftover after parsing attributes in process `syz.2.781'. [ 255.090037][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 255.200117][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 255.215400][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.785'. [ 255.290272][ T9109] lo speed is unknown, defaulting to 1000 [ 255.587293][ T9124] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.613220][ T9124] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 255.763777][ T9124] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.781070][ T9124] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 255.878391][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 255.878729][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.893751][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.996416][ T9124] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.037335][ T9124] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 256.158013][ T9124] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.178489][ T9124] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 256.350369][ T9138] lo speed is unknown, defaulting to 1000 [ 256.473017][ T6469] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 256.481484][ T6469] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.509935][ T6469] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 256.520017][ T6469] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.564181][ T6469] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 256.580881][ T6469] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 256.607250][ T6469] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 256.630531][ T6469] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 258.582896][ T9155] geneve2: left promiscuous mode [ 258.587918][ T9155] geneve2: left allmulticast mode [ 258.800248][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 258.830901][ T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.870336][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 258.899056][ T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.954234][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 258.969343][ T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 258.984152][ T9171] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 258.995589][ T9171] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.247511][ T9180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.804'. [ 259.350880][ T9178] lo speed is unknown, defaulting to 1000 [ 259.708562][ T9186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.807'. [ 261.567601][ T9216] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 261.730754][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 261.741503][ T9216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.799822][ T9216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.408715][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.825'. [ 262.493441][ T9246] syzkaller1: entered promiscuous mode [ 262.499269][ T9246] syzkaller1: entered allmulticast mode [ 262.507370][ T9244] lo speed is unknown, defaulting to 1000 [ 262.621831][ T9246] netlink: 60 bytes leftover after parsing attributes in process `syz.3.828'. [ 262.761692][ T9250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.798595][ T6753] lo speed is unknown, defaulting to 1000 [ 262.810519][ T9250] netlink: 132 bytes leftover after parsing attributes in process `syz.1.829'. [ 263.017121][ T9256] tipc: Enabled bearer , priority 0 [ 263.027836][ T9256] syzkaller0: entered promiscuous mode [ 263.034136][ T9256] syzkaller0: entered allmulticast mode [ 263.078823][ T9248] lo speed is unknown, defaulting to 1000 [ 263.131769][ T9252] netlink: 'syz.4.831': attribute type 1 has an invalid length. [ 263.165532][ T9255] tipc: Resetting bearer [ 263.194646][ T9252] netlink: 224 bytes leftover after parsing attributes in process `syz.4.831'. [ 263.279381][ T9255] tipc: Disabling bearer [ 263.455128][ T9265] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.568650][ T9265] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.667154][ T9265] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.736097][ T9268] netlink: 52 bytes leftover after parsing attributes in process `syz.4.836'. [ 263.746151][ T9268] netlink: 'syz.4.836': attribute type 1 has an invalid length. [ 263.758165][ T9265] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.914489][ T6454] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.940771][ T6454] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.966478][ T6454] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.994338][ T1156] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.694609][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 265.885842][ T9304] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 266.063287][ T9315] lo speed is unknown, defaulting to 1000 [ 266.717149][ T9317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.852'. [ 266.802343][ T9317] openvswitch: netlink: Flow key attr not present in new flow. [ 268.255748][ T9325] macsec2: entered promiscuous mode [ 268.271488][ T9325] macsec2: entered allmulticast mode [ 268.736738][ T9329] lo speed is unknown, defaulting to 1000 [ 269.147763][ T9343] syzkaller1: entered promiscuous mode [ 269.174547][ T9343] syzkaller1: entered allmulticast mode [ 269.394860][ T9349] netlink: 60 bytes leftover after parsing attributes in process `syz.3.859'. [ 269.560162][ T9355] macsec0: entered promiscuous mode [ 269.567532][ T9355] macsec0: entered allmulticast mode [ 269.591089][ T9355] veth1_macvtap: entered allmulticast mode [ 269.597763][ T9355] macsec0: left promiscuous mode [ 269.603376][ T9355] macsec0: left allmulticast mode [ 269.608710][ T9355] veth1_macvtap: left allmulticast mode [ 269.617040][ T9356] veth1_macvtap: left promiscuous mode [ 269.628903][ T9356] macsec0: entered promiscuous mode [ 269.637739][ T9356] macsec0: entered allmulticast mode [ 269.655806][ T9357] veth1_macvtap: entered promiscuous mode [ 269.668358][ T9357] veth1_macvtap: entered allmulticast mode [ 269.678026][ T9357] macsec0: left promiscuous mode [ 269.684507][ T9357] macsec0: left allmulticast mode [ 269.689781][ T9357] veth1_macvtap: left allmulticast mode [ 269.811191][ T9346] lo speed is unknown, defaulting to 1000 [ 270.329879][ T9354] lo speed is unknown, defaulting to 1000 [ 270.658219][ T9377] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.815936][ T9377] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.938738][ T9377] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.976462][ T9351] lo speed is unknown, defaulting to 1000 [ 271.015716][ T9377] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.177119][ T1338] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.213053][ T1338] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.259419][ T1338] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.288748][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.040860][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 272.065786][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.876'. [ 272.118702][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.118846][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 272.138181][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.163342][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.876'. [ 272.173173][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.192854][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.356321][ T9410] lo speed is unknown, defaulting to 1000 [ 274.015265][ T9431] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.378228][ T9431] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.546876][ T9431] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.638079][ T9431] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.010426][ T1338] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.027355][ T1338] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.082439][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.186578][ T6469] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.205553][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.890'. [ 275.414942][ T9461] syzkaller1: entered promiscuous mode [ 275.421315][ T9461] syzkaller1: entered allmulticast mode [ 275.464691][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.894'. [ 275.572053][ T9468] netlink: 'syz.0.894': attribute type 10 has an invalid length. [ 275.583918][ T9466] lo speed is unknown, defaulting to 1000 [ 275.622824][ T9461] netlink: 60 bytes leftover after parsing attributes in process `syz.2.893'. [ 275.647752][ T9468] team0: Failed to send options change via netlink (err -105) [ 275.673794][ T9468] team0: Port device dummy0 added [ 276.358164][ T9482] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.899'. [ 276.528072][ T9487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.898'. [ 278.354815][ T9498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.406624][ T9508] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 278.433923][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 278.442846][ T9508] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 278.461870][ T9508] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 278.557512][ T9498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.576141][ T9499] lo speed is unknown, defaulting to 1000 [ 278.899216][ T9498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.032125][ T9498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.105415][ T9525] bridge0: port 1(erspan0) entered blocking state [ 279.126184][ T9525] bridge0: port 1(erspan0) entered disabled state [ 279.144362][ T9525] erspan0: entered allmulticast mode [ 279.153614][ T9525] erspan0: entered promiscuous mode [ 279.232537][ T9522] erspan0: left allmulticast mode [ 279.237771][ T9522] erspan0: left promiscuous mode [ 279.244101][ T9522] bridge0: port 1(erspan0) entered disabled state [ 279.311574][ T1338] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.370205][ T1156] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.423167][ T1156] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.495108][ T1156] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.573459][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 279.626643][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 279.976202][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 280.030949][ T9544] dvmrp8: entered allmulticast mode [ 280.166399][ T9546] lo speed is unknown, defaulting to 1000 [ 280.599005][ T9562] syzkaller1: entered promiscuous mode [ 280.606341][ T9562] syzkaller1: entered allmulticast mode [ 280.729649][ T9562] netlink: 60 bytes leftover after parsing attributes in process `syz.1.919'. [ 280.782331][ T9563] lo speed is unknown, defaulting to 1000 [ 281.691612][ T9579] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.771034][ T9579] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.916212][ T9579] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.318570][ T9579] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.373100][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 282.548581][ T6469] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.619855][ T6469] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.771278][ T6469] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.802501][ T6469] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.433601][ T9617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.935'. [ 283.570258][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 283.759118][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'. [ 283.918647][ T9631] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.159957][ T9637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.944'. [ 284.177571][ T9631] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.281161][ T9643] netlink: 'syz.3.944': attribute type 10 has an invalid length. [ 284.326370][ T9631] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.382790][ T30] audit: type=1107 audit(1759216699.491:2): pid=9646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 284.470452][ T9631] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.734535][ T1338] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.833124][ T1156] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.875705][ T1338] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.934385][ T1338] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.181953][ T9666] syzkaller1: entered promiscuous mode [ 285.190353][ T9666] syzkaller1: entered allmulticast mode [ 285.343725][ T9666] netlink: 60 bytes leftover after parsing attributes in process `syz.3.951'. [ 285.363023][ T9677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'. [ 285.384104][ T9670] lo speed is unknown, defaulting to 1000 [ 286.130161][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'. [ 286.394724][ T9699] lo speed is unknown, defaulting to 1000 [ 286.425058][ T9700] macsec0: entered promiscuous mode [ 286.430347][ T9700] macsec0: entered allmulticast mode [ 286.534940][ T9700] veth1_macvtap: entered allmulticast mode [ 286.557660][ T9700] macsec0: left promiscuous mode [ 286.599723][ T9700] macsec0: left allmulticast mode [ 286.631416][ T9700] veth1_macvtap: left allmulticast mode [ 286.703398][ T9703] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.894012][ T9703] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.974412][ T9703] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.097667][ T9703] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.656868][ T9732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.970'. [ 287.747465][ T9732] veth5: entered promiscuous mode [ 287.784085][ T6469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.802295][ T6469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.360886][ T9747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.977'. [ 288.540190][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 288.798439][ T1156] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.862072][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.890371][ T9760] veth1_macvtap: left promiscuous mode [ 288.896342][ T9760] macsec0: entered promiscuous mode [ 288.901588][ T9760] macsec0: entered allmulticast mode [ 288.976654][ T9760] veth1_macvtap: entered promiscuous mode [ 288.984888][ T9760] veth1_macvtap: entered allmulticast mode [ 288.991108][ T9760] macsec0: left promiscuous mode [ 289.032344][ T9760] macsec0: left allmulticast mode [ 289.037608][ T9760] veth1_macvtap: left allmulticast mode [ 289.058884][ T1338] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.100631][ T9761] lo speed is unknown, defaulting to 1000 [ 289.159167][ T6469] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.618730][ T9785] syzkaller1: entered promiscuous mode [ 289.638763][ T9785] syzkaller1: entered allmulticast mode [ 289.788960][ T9785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.991'. [ 289.827232][ T9789] lo speed is unknown, defaulting to 1000 [ 290.069162][ T9800] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.149470][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.998'. [ 290.181094][ T9800] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.281171][ T9800] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.360122][ T9800] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.601621][ T1338] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.665054][ T1338] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.849124][ T1338] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.862777][ T9815] lo speed is unknown, defaulting to 1000 [ 290.867394][ T9819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1003'. [ 290.952841][ T1338] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.888349][ T9834] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1009'. [ 291.974221][ T9836] netlink: 'syz.1.1009': attribute type 10 has an invalid length. [ 292.027047][ T9838] netlink: 'syz.1.1009': attribute type 10 has an invalid length. [ 292.230061][ T9838] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 292.264602][ T9838] team0: Port device dummy0 removed [ 292.324736][ T9838] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 292.874216][ T9849] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.112924][ T9849] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.209106][ T9849] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.239933][ T9856] syzkaller1: entered promiscuous mode [ 293.246723][ T9856] syzkaller1: entered allmulticast mode [ 293.290040][ T9849] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.540176][ T1338] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.556275][ T1338] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.645663][ T6469] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.759323][ T6469] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.795077][ T9870] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1020'. [ 293.834950][ T9870] netlink: 'syz.2.1020': attribute type 10 has an invalid length. [ 294.341673][ T9891] syzkaller1: entered promiscuous mode [ 294.348381][ T9891] syzkaller1: entered allmulticast mode [ 294.476980][ T9891] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1027'. [ 294.500888][ T9894] lo speed is unknown, defaulting to 1000 [ 294.678923][ T9909] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 295.304226][ T9907] lo speed is unknown, defaulting to 1000 [ 295.548662][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1039'. [ 295.639512][ T9927] atomic_op ffff888029185998 conn xmit_atomic 0000000000000000 [ 296.009284][ T9919] lo speed is unknown, defaulting to 1000 [ 296.415945][ T9945] veth0_to_bridge: entered promiscuous mode [ 296.597454][ T9952] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1045'. [ 296.619122][ T9944] veth0_to_bridge: left promiscuous mode [ 297.023818][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 297.180712][ T9963] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.195063][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 297.528649][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 297.539991][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 297.698737][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 297.725539][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 297.783031][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 298.324438][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1057'. [ 298.343621][ T9994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1056'. [ 300.296014][T10041] syzkaller1: entered promiscuous mode [ 300.305173][T10041] syzkaller1: entered allmulticast mode [ 300.534099][T10046] lo speed is unknown, defaulting to 1000 [ 300.925777][T10058] syzkaller1: entered promiscuous mode [ 300.931319][T10058] syzkaller1: entered allmulticast mode [ 301.000784][T10060] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 301.850623][T10100] __nla_validate_parse: 8 callbacks suppressed [ 301.850646][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 302.004913][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 302.014766][T10087] lo speed is unknown, defaulting to 1000 [ 302.014910][ T6469] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.063172][ T6469] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.079763][ T6469] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.105134][T10105] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1090'. [ 302.114401][ T6469] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.191677][T10110] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1092'. [ 302.233626][T10112] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1090'. [ 302.236784][T10110] syzkaller1: entered promiscuous mode [ 302.258603][T10110] syzkaller1: entered allmulticast mode [ 302.625138][T10116] lo speed is unknown, defaulting to 1000 [ 302.811526][T10121] netlink: 'syz.0.1094': attribute type 24 has an invalid length. [ 303.186431][T10125] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1096'. [ 303.238056][T10127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1096'. [ 303.255486][T10095] lo speed is unknown, defaulting to 1000 [ 303.267505][T10125] 0ªX¹¦À: renamed from caif0 [ 303.277915][T10125] 0ªX¹¦À: entered allmulticast mode [ 303.283930][T10125] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 303.301585][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1096'. [ 303.549536][T10130] syzkaller1: entered promiscuous mode [ 303.576522][T10130] syzkaller1: entered allmulticast mode [ 303.728555][T10132] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1097'. [ 303.878866][T10112] lo speed is unknown, defaulting to 1000 [ 304.331787][T10131] lo speed is unknown, defaulting to 1000 [ 305.046556][T10140] netlink: 'syz.1.1099': attribute type 14 has an invalid length. [ 305.726679][T10154] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 306.527436][T10173] macsec0: entered promiscuous mode [ 306.550604][T10173] macsec0: entered allmulticast mode [ 306.605113][T10174] veth1_macvtap: entered allmulticast mode [ 306.623897][T10174] macsec0: left promiscuous mode [ 306.629089][T10174] macsec0: left allmulticast mode [ 306.641338][T10174] veth1_macvtap: left allmulticast mode [ 306.880131][T10172] lo speed is unknown, defaulting to 1000 [ 307.784477][T10207] netlink: 'syz.3.1118': attribute type 303 has an invalid length. [ 307.838077][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 307.941658][T10211] delete_channel: no stack [ 308.939517][T10220] veth0: entered promiscuous mode [ 308.985776][T10219] lo speed is unknown, defaulting to 1000 [ 309.164541][T10220] netlink: 'syz.1.1123': attribute type 16 has an invalid length. [ 309.173504][T10220] netlink: 'syz.1.1123': attribute type 17 has an invalid length. [ 309.175086][T10231] syz_tun: entered allmulticast mode [ 309.263495][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.278006][T10220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.300108][T10233] syz_tun: left allmulticast mode [ 309.418074][T10237] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1126'. [ 309.535901][T10242] netlink: 'syz.4.1128': attribute type 2 has an invalid length. [ 309.549856][T10242] netlink: 136824 bytes leftover after parsing attributes in process `syz.4.1128'. [ 309.591709][T10242] nbd: must specify at least one socket [ 309.760243][T10220] veth0: left promiscuous mode [ 310.109972][T10260] netlink: 'syz.4.1133': attribute type 10 has an invalid length. [ 310.920831][T10278] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1138'. [ 310.969779][T10278] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1138'. [ 311.120787][T10281] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1139'. [ 311.153024][T10278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 311.280628][T10279] lo speed is unknown, defaulting to 1000 [ 311.538541][T10283] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1140'. [ 311.773052][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1143'. [ 311.838928][T10301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1146'. [ 312.228304][T10311] netlink: 'syz.0.1150': attribute type 10 has an invalid length. [ 312.555027][T10325] openvswitch: netlink: Message has 8 unknown bytes. [ 312.629289][T10325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.880660][T10339] __nla_validate_parse: 2 callbacks suppressed [ 312.880680][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1158'. [ 312.897823][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 313.020065][T10346] netlink: 'syz.1.1157': attribute type 15 has an invalid length. [ 313.109811][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 313.338295][T10358] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1163'. [ 313.381539][T10358] ksmbd: Unknown IPC event: 3, ignore. [ 313.398772][T10359] netlink: 'syz.0.1162': attribute type 10 has an invalid length. [ 313.948371][T10371] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.107349][T10381] syzkaller1: entered promiscuous mode [ 314.113561][T10381] syzkaller1: entered allmulticast mode [ 314.149364][T10371] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.230797][T10371] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.275599][T10378] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1169'. [ 314.323379][T10381] lo speed is unknown, defaulting to 1000 [ 314.350550][T10371] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.966642][ T1338] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.013198][ T6454] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.050014][ T6454] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.126581][ T6462] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.467369][T10407] lo speed is unknown, defaulting to 1000 [ 315.564705][T10415] netlink: 'syz.4.1179': attribute type 10 has an invalid length. [ 315.595329][T10417] raw_sendmsg: syz.3.1178 forgot to set AF_INET. Fix it! [ 315.889683][T10424] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1181'. [ 315.978145][T10428] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 315.986727][T10428] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 315.995294][T10428] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1182'. [ 317.119165][T10438] Bluetooth: MGMT ver 1.23 [ 317.317494][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.330880][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.923555][T10466] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 317.935564][T10470] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1195'. [ 317.983761][T10469] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1195'. [ 318.425362][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 318.563014][T10474] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 318.578953][T10474] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 318.719394][T10475] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 318.998604][T10483] tipc: Enabled bearer , priority 0 [ 319.015665][T10480] tipc: Resetting bearer [ 319.152787][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 319.152791][ T5866] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 319.227968][T10494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1201'. [ 319.597965][T10479] tipc: Disabling bearer [ 319.819163][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1206'. [ 319.831864][T10508] erspan0: entered promiscuous mode [ 319.862107][T10500] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.887192][T10507] syzkaller1: entered promiscuous mode [ 319.893519][T10507] syzkaller1: entered allmulticast mode [ 320.038519][T10518] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1205'. [ 320.057299][T10519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1209'. [ 320.110867][T10500] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.191861][T10515] lo speed is unknown, defaulting to 1000 [ 320.237557][T10500] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.433894][T10500] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.698470][ T6454] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.756095][ T6451] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.835966][ T6451] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.905035][ T6454] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.026153][T10511] lo speed is unknown, defaulting to 1000 [ 321.030188][T10532] netlink: 'syz.3.1214': attribute type 10 has an invalid length. [ 321.799766][T10539] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 322.556645][T10565] lo speed is unknown, defaulting to 1000 [ 323.469178][ T30] audit: type=1107 audit(1759216738.581:3): pid=10587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 323.471694][T10588] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1231'. [ 323.696078][T10591] team0: Port device dummy0 removed [ 323.739013][T10591] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 324.034712][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'. [ 324.055668][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'. [ 324.144028][T10608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1239'. [ 324.331577][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1240'. [ 324.387891][T10612] lo speed is unknown, defaulting to 1000 [ 325.539255][T10651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1251'. [ 325.861067][T10660] syzkaller1: entered promiscuous mode [ 325.892977][T10660] syzkaller1: entered allmulticast mode [ 325.938726][T10661] veth1_macvtap: left promiscuous mode [ 325.946485][T10661] macsec0: entered promiscuous mode [ 325.951741][T10661] macsec0: entered allmulticast mode [ 326.000253][T10658] lo speed is unknown, defaulting to 1000 [ 326.000392][T10661] veth1_macvtap: entered promiscuous mode [ 326.048628][T10660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1254'. [ 326.074304][T10661] veth1_macvtap: entered allmulticast mode [ 326.097039][T10661] macsec0: left promiscuous mode [ 326.124448][T10661] macsec0: left allmulticast mode [ 326.167756][T10661] veth1_macvtap: left allmulticast mode [ 326.316318][T10666] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 326.610089][T10662] lo speed is unknown, defaulting to 1000 [ 326.870154][T10680] macsec0: entered promiscuous mode [ 326.893603][T10680] macsec0: entered allmulticast mode [ 326.930573][T10683] veth1_macvtap: entered allmulticast mode [ 326.950733][T10685] FAULT_INJECTION: forcing a failure. [ 326.950733][T10685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.955612][T10683] macsec0: left promiscuous mode [ 326.964642][T10685] CPU: 0 UID: 0 PID: 10685 Comm: syz.4.1262 Not tainted syzkaller #0 PREEMPT(full) [ 326.964668][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.964679][T10685] Call Trace: [ 326.964688][T10685] [ 326.964696][T10685] dump_stack_lvl+0x189/0x250 [ 326.964724][T10685] ? __pfx____ratelimit+0x10/0x10 [ 326.964746][T10685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.964767][T10685] ? __pfx__printk+0x10/0x10 [ 326.964791][T10685] ? __might_fault+0xb0/0x130 [ 326.964828][T10685] should_fail_ex+0x414/0x560 [ 326.964859][T10685] _copy_from_iter+0x1de/0x1790 [ 326.964889][T10685] ? rcu_is_watching+0x15/0xb0 [ 326.964908][T10685] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 326.964934][T10685] ? __pfx__copy_from_iter+0x10/0x10 [ 326.964957][T10685] ? __build_skb_around+0x257/0x3e0 [ 326.964982][T10685] ? netlink_sendmsg+0x642/0xb30 [ 326.965003][T10685] ? skb_put+0x11b/0x210 [ 326.965028][T10685] netlink_sendmsg+0x6b2/0xb30 [ 326.965060][T10685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.965085][T10685] ? aa_sock_msg_perm+0xf1/0x1d0 [ 326.965116][T10685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.965134][T10685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.965156][T10685] __sock_sendmsg+0x21c/0x270 [ 326.965188][T10685] ____sys_sendmsg+0x505/0x830 [ 326.965218][T10685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.965252][T10685] ? import_iovec+0x74/0xa0 [ 326.965278][T10685] ___sys_sendmsg+0x21f/0x2a0 [ 326.965305][T10685] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.965366][T10685] ? __fget_files+0x2a/0x420 [ 326.965391][T10685] ? __fget_files+0x3a0/0x420 [ 326.965427][T10685] __x64_sys_sendmsg+0x19b/0x260 [ 326.965454][T10685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.965488][T10685] ? __pfx_ksys_write+0x10/0x10 [ 326.965508][T10685] ? rcu_is_watching+0x15/0xb0 [ 326.965530][T10685] ? do_syscall_64+0xbe/0x3b0 [ 326.965562][T10685] do_syscall_64+0xfa/0x3b0 [ 326.965582][T10685] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.965601][T10685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.965620][T10685] ? clear_bhb_loop+0x60/0xb0 [ 326.965642][T10685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.965660][T10685] RIP: 0033:0x7fcc6478eec9 [ 326.965678][T10685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.965694][T10685] RSP: 002b:00007fcc656bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.965715][T10685] RAX: ffffffffffffffda RBX: 00007fcc649e5fa0 RCX: 00007fcc6478eec9 [ 326.965729][T10685] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 326.965741][T10685] RBP: 00007fcc656bb090 R08: 0000000000000000 R09: 0000000000000000 [ 326.965752][T10685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.965764][T10685] R13: 00007fcc649e6038 R14: 00007fcc649e5fa0 R15: 00007ffe99fff4e8 [ 326.965794][T10685] [ 327.272897][T10683] macsec0: left allmulticast mode [ 327.278849][T10683] veth1_macvtap: left allmulticast mode [ 327.464308][T10694] lo speed is unknown, defaulting to 1000 [ 327.858116][T10677] lo speed is unknown, defaulting to 1000 [ 328.291398][T10700] netlink: 'syz.0.1266': attribute type 10 has an invalid length. [ 329.579850][T10720] FAULT_INJECTION: forcing a failure. [ 329.579850][T10720] name failslab, interval 1, probability 0, space 0, times 0 [ 329.629761][T10720] CPU: 1 UID: 0 PID: 10720 Comm: syz.3.1273 Not tainted syzkaller #0 PREEMPT(full) [ 329.629818][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 329.629831][T10720] Call Trace: [ 329.629839][T10720] [ 329.629848][T10720] dump_stack_lvl+0x189/0x250 [ 329.629877][T10720] ? __pfx____ratelimit+0x10/0x10 [ 329.629900][T10720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.629922][T10720] ? __pfx__printk+0x10/0x10 [ 329.629951][T10720] ? __lock_acquire+0xab9/0xd20 [ 329.629996][T10720] should_fail_ex+0x414/0x560 [ 329.630030][T10720] should_failslab+0xa8/0x100 [ 329.630059][T10720] kmem_cache_alloc_noprof+0x73/0x3c0 [ 329.630084][T10720] ? skb_clone+0x212/0x3a0 [ 329.630116][T10720] skb_clone+0x212/0x3a0 [ 329.630147][T10720] __netlink_deliver_tap+0x404/0x850 [ 329.630183][T10720] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.630208][T10720] netlink_deliver_tap+0x19c/0x1b0 [ 329.630233][T10720] netlink_unicast+0x7fa/0x9e0 [ 329.630264][T10720] ? __pfx_netlink_unicast+0x10/0x10 [ 329.630288][T10720] ? netlink_sendmsg+0x642/0xb30 [ 329.630308][T10720] ? skb_put+0x11b/0x210 [ 329.630336][T10720] netlink_sendmsg+0x805/0xb30 [ 329.630372][T10720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.630400][T10720] ? aa_sock_msg_perm+0xf1/0x1d0 [ 329.630433][T10720] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.630454][T10720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.630479][T10720] __sock_sendmsg+0x21c/0x270 [ 329.630515][T10720] ____sys_sendmsg+0x505/0x830 [ 329.630548][T10720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.630587][T10720] ? import_iovec+0x74/0xa0 [ 329.630616][T10720] ___sys_sendmsg+0x21f/0x2a0 [ 329.630645][T10720] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.630713][T10720] ? __fget_files+0x2a/0x420 [ 329.630740][T10720] ? __fget_files+0x3a0/0x420 [ 329.630788][T10720] __x64_sys_sendmsg+0x19b/0x260 [ 329.630816][T10720] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.630852][T10720] ? __pfx_ksys_write+0x10/0x10 [ 329.630875][T10720] ? rcu_is_watching+0x15/0xb0 [ 329.630901][T10720] ? do_syscall_64+0xbe/0x3b0 [ 329.630930][T10720] do_syscall_64+0xfa/0x3b0 [ 329.630950][T10720] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.630972][T10720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.630992][T10720] ? clear_bhb_loop+0x60/0xb0 [ 329.631017][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.631035][T10720] RIP: 0033:0x7efd59f8eec9 [ 329.631054][T10720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.631070][T10720] RSP: 002b:00007efd5ae01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.631093][T10720] RAX: ffffffffffffffda RBX: 00007efd5a1e5fa0 RCX: 00007efd59f8eec9 [ 329.631107][T10720] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 329.631120][T10720] RBP: 00007efd5ae01090 R08: 0000000000000000 R09: 0000000000000000 [ 329.631133][T10720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.631145][T10720] R13: 00007efd5a1e6038 R14: 00007efd5a1e5fa0 R15: 00007ffddf3bdaa8 [ 329.631179][T10720] [ 330.358030][T10733] netlink: 'syz.3.1277': attribute type 10 has an invalid length. [ 330.979573][T10753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'. [ 331.186982][T10753] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 331.219324][T10753] macvtap0: entered promiscuous mode [ 331.266855][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 331.280070][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1285'. [ 331.431885][T10760] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 331.629452][T10758] lo speed is unknown, defaulting to 1000 [ 332.211000][T10776] syzkaller1: entered promiscuous mode [ 332.217289][T10776] syzkaller1: entered allmulticast mode [ 332.349415][T10782] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1290'. [ 332.434139][T10784] netlink: 'syz.1.1292': attribute type 10 has an invalid length. [ 333.115985][T10780] lo speed is unknown, defaulting to 1000 [ 334.150162][T10786] lo speed is unknown, defaulting to 1000 [ 334.334652][T10827] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 335.017776][T10811] lo speed is unknown, defaulting to 1000 [ 335.031491][T10744] infiniband syz!: set down [ 335.083042][T10744] infiniband syz!: added team_slave_0 [ 335.101755][T10744] syz!: rxe_create_cq: returned err = -12 [ 335.123062][T10744] infiniband syz!: Couldn't create ib_mad CQ [ 335.129273][T10744] infiniband syz!: Couldn't open port 1 [ 335.276027][T10744] RDS/IB: syz!: added [ 336.450717][T10889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 336.463852][T10884] block nbd1: server does not support multiple connections per device. [ 336.473489][T10884] block nbd1: shutting down sockets [ 336.551472][T10889] atomic_op ffff88804464f198 conn xmit_atomic 0000000000000000 [ 336.798966][T10902] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1325'. [ 337.043806][T10909] vlan3: entered promiscuous mode [ 337.048997][T10909] bond0: entered promiscuous mode [ 337.056769][T10909] vlan3: entered allmulticast mode [ 337.061936][T10909] bond0: entered allmulticast mode [ 337.071044][T10908] netlink: 'syz.4.1329': attribute type 10 has an invalid length. [ 337.086724][T10911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1330'. [ 337.097946][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1328'. [ 337.109475][T10912] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 337.630211][T10925] netlink: 'syz.4.1334': attribute type 2 has an invalid length. [ 337.958931][T10929] bridge5: entered promiscuous mode [ 337.964806][T10929] bridge5: entered allmulticast mode [ 337.974813][T10929] team0: Port device bridge5 added [ 338.081063][T10933] netlink: 'syz.4.1337': attribute type 1 has an invalid length. [ 338.102826][T10933] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1337'. [ 338.468876][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 338.543915][T10945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1341'. [ 339.164973][T10966] veth1_macvtap: left promiscuous mode [ 339.170726][T10966] macsec0: entered promiscuous mode [ 339.176657][T10966] macsec0: entered allmulticast mode [ 339.189724][T10966] veth1_macvtap: entered promiscuous mode [ 339.196170][T10966] veth1_macvtap: entered allmulticast mode [ 339.203108][T10966] macsec0: left promiscuous mode [ 339.208321][T10966] macsec0: left allmulticast mode [ 339.232208][T10966] veth1_macvtap: left allmulticast mode [ 339.565692][T10978] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1352'. [ 339.856683][T10965] lo speed is unknown, defaulting to 1000 [ 340.411032][T10994] netlink: 'syz.4.1360': attribute type 10 has an invalid length. [ 340.517515][ T5865] page_pool_release_retry() stalled pool shutdown: id 33, 1 inflight 60 sec [ 340.674332][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'. [ 340.734260][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'. [ 341.073502][T11017] lo speed is unknown, defaulting to 1000 [ 341.495007][T11047] __nla_validate_parse: 1 callbacks suppressed [ 341.495030][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 341.975271][T11052] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1374'. [ 341.998317][T11052] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1374'. [ 342.240371][T11059] netlink: 'syz.1.1376': attribute type 13 has an invalid length. [ 342.258353][T11059] netlink: 'syz.1.1376': attribute type 17 has an invalid length. [ 342.518469][T11059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.858355][T11059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.927727][T11056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.226312][T11060] lo speed is unknown, defaulting to 1000 [ 343.502020][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1380'. [ 343.511926][T11069] netlink: 'syz.4.1380': attribute type 7 has an invalid length. [ 343.520251][T11069] netlink: 'syz.4.1380': attribute type 8 has an invalid length. [ 343.536763][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 344.607756][T11084] sctp: [Deprecated]: syz.4.1386 (pid 11084) Use of int in maxseg socket option. [ 344.607756][T11084] Use struct sctp_assoc_value instead [ 345.439522][T11086] lo speed is unknown, defaulting to 1000 [ 346.030373][T11096] netlink: 'syz.1.1389': attribute type 1 has an invalid length. [ 346.304241][T11096] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.449690][T11097] bond3: (slave ip6gretap2): making interface the new active one [ 346.461400][T11114] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1392'. [ 346.471904][T11114] netlink: zone id is out of range [ 346.474275][T11097] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 346.478496][T11114] netlink: zone id is out of range [ 346.491315][T11114] netlink: get zone limit has 8 unknown bytes [ 346.502867][T11102] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1391'. [ 346.897223][T11123] geneve0: entered promiscuous mode [ 346.933479][T11128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1395'. [ 347.074419][ T6727] page_pool_release_retry() stalled pool shutdown: id 36, 1 inflight 60 sec [ 347.853879][T11148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1399'. [ 347.891081][T11149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1400'. [ 348.740514][T11161] netlink: 'syz.0.1404': attribute type 1 has an invalid length. [ 349.601843][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1412'. [ 349.669751][T11184] netlink: 'syz.2.1413': attribute type 10 has an invalid length. [ 349.944643][T11186] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 349.972869][T11186] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 350.154102][T11182] bond4: (slave bridge10): Enslaving as an active interface with an up link [ 350.177970][T11180] lo speed is unknown, defaulting to 1000 [ 350.197495][T11199] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 351.183771][T11217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1421'. [ 351.263901][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1421'. [ 351.503405][T11224] lo speed is unknown, defaulting to 1000 [ 351.594339][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 351.681397][T11239] netlink: 'syz.4.1428': attribute type 1 has an invalid length. [ 351.707015][T11239] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1428'. [ 351.868548][T11249] netlink: 'syz.2.1430': attribute type 1 has an invalid length. [ 351.918679][T11249] netlink: 'syz.2.1430': attribute type 4 has an invalid length. [ 351.962904][T11249] netlink: 15586 bytes leftover after parsing attributes in process `syz.2.1430'. [ 352.004280][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1431'. [ 352.425282][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 352.467557][T11247] lo speed is unknown, defaulting to 1000 [ 353.329420][T11273] lo speed is unknown, defaulting to 1000 [ 353.374074][T11278] block nbd0: NBD_DISCONNECT [ 353.388287][T11278] block nbd0: Send disconnect failed -107 [ 353.401756][T11278] block nbd0: Disconnected due to user request. [ 353.408783][T11278] block nbd0: shutting down sockets [ 354.404019][T11288] bond0: (slave gretap0): Error: Device type is different from other slaves [ 356.040046][T11297] lo speed is unknown, defaulting to 1000 [ 357.025295][T11308] FAULT_INJECTION: forcing a failure. [ 357.025295][T11308] name failslab, interval 1, probability 0, space 0, times 0 [ 357.043891][T11308] CPU: 0 UID: 0 PID: 11308 Comm: syz.3.1447 Not tainted syzkaller #0 PREEMPT(full) [ 357.043922][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.043933][T11308] Call Trace: [ 357.043941][T11308] [ 357.043950][T11308] dump_stack_lvl+0x189/0x250 [ 357.043980][T11308] ? __pfx____ratelimit+0x10/0x10 [ 357.044002][T11308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.044025][T11308] ? __pfx__printk+0x10/0x10 [ 357.044055][T11308] ? __pfx___might_resched+0x10/0x10 [ 357.044084][T11308] ? fs_reclaim_acquire+0x7d/0x100 [ 357.044118][T11308] should_fail_ex+0x414/0x560 [ 357.044151][T11308] should_failslab+0xa8/0x100 [ 357.044182][T11308] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 357.044209][T11308] ? __request_module+0x2d1/0x5e0 [ 357.044244][T11308] kstrdup+0x42/0x100 [ 357.044266][T11308] __request_module+0x2d1/0x5e0 [ 357.044301][T11308] ? __pfx___request_module+0x10/0x10 [ 357.044348][T11308] ? security_capable+0x7e/0x2e0 [ 357.044390][T11308] ? dev_load+0x21/0x1f0 [ 357.044411][T11308] dev_load+0x190/0x1f0 [ 357.044433][T11308] dev_ioctl+0x59f/0x1150 [ 357.044460][T11308] sock_do_ioctl+0x22c/0x300 [ 357.044495][T11308] ? __pfx_sock_do_ioctl+0x10/0x10 [ 357.044522][T11308] ? __lock_acquire+0xab9/0xd20 [ 357.044570][T11308] sock_ioctl+0x576/0x790 [ 357.044601][T11308] ? __pfx_sock_ioctl+0x10/0x10 [ 357.044631][T11308] ? __fget_files+0x2a/0x420 [ 357.044658][T11308] ? __fget_files+0x3a0/0x420 [ 357.044684][T11308] ? __fget_files+0x2a/0x420 [ 357.044715][T11308] ? bpf_lsm_file_ioctl+0x9/0x20 [ 357.044740][T11308] ? __pfx_sock_ioctl+0x10/0x10 [ 357.044768][T11308] __se_sys_ioctl+0xfc/0x170 [ 357.044796][T11308] do_syscall_64+0xfa/0x3b0 [ 357.044817][T11308] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.044838][T11308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.044858][T11308] ? clear_bhb_loop+0x60/0xb0 [ 357.044883][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.044903][T11308] RIP: 0033:0x7efd59f8eec9 [ 357.044921][T11308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.044937][T11308] RSP: 002b:00007efd5ae01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.044958][T11308] RAX: ffffffffffffffda RBX: 00007efd5a1e5fa0 RCX: 00007efd59f8eec9 [ 357.044973][T11308] RDX: 0000200000000240 RSI: 0000000000008923 RDI: 0000000000000004 [ 357.044985][T11308] RBP: 00007efd5ae01090 R08: 0000000000000000 R09: 0000000000000000 [ 357.044997][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.045009][T11308] R13: 00007efd5a1e6038 R14: 00007efd5a1e5fa0 R15: 00007ffddf3bdaa8 [ 357.045042][T11308] [ 357.676464][T11320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1449'. [ 357.744649][T11324] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1449'. [ 357.774971][T11325] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 357.789781][T11325] bond0: (slave dummy0): Releasing backup interface [ 357.807445][T11325] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 357.817043][T11325] team0: Failed to send options change via netlink (err -105) [ 357.825084][T11325] team0: Port device dummy0 added [ 369.334420][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.342998][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.351224][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.360688][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.371899][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.406607][T11330] lo speed is unknown, defaulting to 1000 [ 369.929697][T11330] chnl_net:caif_netlink_parms(): no params data found [ 370.013198][T11330] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.021465][T11330] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.029296][T11330] bridge_slave_0: entered allmulticast mode [ 370.037351][T11330] bridge_slave_0: entered promiscuous mode [ 370.046482][T11330] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.053988][T11330] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.061189][T11330] bridge_slave_1: entered allmulticast mode [ 370.068688][T11330] bridge_slave_1: entered promiscuous mode [ 370.102969][T11330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.115565][T11330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.197440][T11330] team0: Port device team_slave_0 added [ 370.209043][T11330] team0: Port device team_slave_1 added [ 370.263188][T11330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.270199][T11330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.299425][T11330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.316139][T11330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.324017][T11330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.350725][T11330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.428703][T11330] hsr_slave_0: entered promiscuous mode [ 370.436769][T11330] hsr_slave_1: entered promiscuous mode [ 370.444198][T11330] debugfs: 'hsr0' already exists in 'hsr' [ 370.449966][T11330] Cannot create hsr debugfs directory [ 370.491134][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.501602][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.511327][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.522047][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.530077][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.629509][T11339] lo speed is unknown, defaulting to 1000 [ 371.071908][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 371.083720][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 371.093166][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 371.106269][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 371.115264][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 371.182018][T11342] lo speed is unknown, defaulting to 1000 [ 371.394859][ T5866] Bluetooth: hci5: command tx timeout [ 371.718545][T11339] chnl_net:caif_netlink_parms(): no params data found [ 371.860780][T11339] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.868714][T11339] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.877462][T11339] bridge_slave_0: entered allmulticast mode [ 371.886649][T11339] bridge_slave_0: entered promiscuous mode [ 371.896139][T11339] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.904214][T11339] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.912892][T11339] bridge_slave_1: entered allmulticast mode [ 371.923492][T11339] bridge_slave_1: entered promiscuous mode [ 371.977620][T11339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.993467][T11339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.044102][T11339] team0: Port device team_slave_0 added [ 372.058065][T11339] team0: Port device team_slave_1 added [ 372.113923][T11339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.120920][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.148893][T11339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.167106][T11339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.174202][T11339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.200586][T11339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.273709][T11339] hsr_slave_0: entered promiscuous mode [ 372.280157][T11339] hsr_slave_1: entered promiscuous mode [ 372.287312][T11339] debugfs: 'hsr0' already exists in 'hsr' [ 372.293917][T11339] Cannot create hsr debugfs directory [ 372.491655][T11342] chnl_net:caif_netlink_parms(): no params data found [ 372.593022][ T5866] Bluetooth: hci6: command tx timeout [ 372.651727][T11342] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.664113][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.671427][T11342] bridge_slave_0: entered allmulticast mode [ 372.681809][T11342] bridge_slave_0: entered promiscuous mode [ 372.693463][T11342] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.700866][T11342] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.709703][T11342] bridge_slave_1: entered allmulticast mode [ 372.719009][T11342] bridge_slave_1: entered promiscuous mode [ 372.777590][T11342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.793332][T11342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.854314][T11342] team0: Port device team_slave_0 added [ 372.865711][T11342] team0: Port device team_slave_1 added [ 372.918380][T11342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.926500][T11342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.955651][T11342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.970848][T11342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.978590][T11342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.007441][T11342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.043835][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 373.055609][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 373.066354][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 373.077160][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 373.087123][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 373.095750][T11342] hsr_slave_0: entered promiscuous mode [ 373.103879][T11342] hsr_slave_1: entered promiscuous mode [ 373.110569][T11342] debugfs: 'hsr0' already exists in 'hsr' [ 373.117084][T11342] Cannot create hsr debugfs directory [ 373.163639][ T51] Bluetooth: hci7: command tx timeout [ 373.241979][T11357] lo speed is unknown, defaulting to 1000 [ 373.484665][ T51] Bluetooth: hci5: command tx timeout [ 373.549418][ T5866] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 373.563740][ T5866] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 373.573888][ T5866] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 373.583425][ T5866] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 373.591295][ T5866] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 373.632979][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 373.691223][T11360] lo speed is unknown, defaulting to 1000 [ 374.523544][T11357] chnl_net:caif_netlink_parms(): no params data found [ 374.647612][T11357] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.655372][T11357] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.663876][T11357] bridge_slave_0: entered allmulticast mode [ 374.671067][T11357] bridge_slave_0: entered promiscuous mode [ 374.683379][ T51] Bluetooth: hci6: command tx timeout [ 374.686902][T11357] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.696690][T11357] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.704444][T11357] bridge_slave_1: entered allmulticast mode [ 374.711867][T11357] bridge_slave_1: entered promiscuous mode [ 374.765718][T11357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.780270][T11357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.853416][T11357] team0: Port device team_slave_0 added [ 374.869271][T11357] team0: Port device team_slave_1 added [ 374.924560][T11357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.931656][T11357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.958577][T11357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.978715][T11357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.986066][T11357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.014530][T11357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.026355][T11360] chnl_net:caif_netlink_parms(): no params data found [ 375.130324][T11357] hsr_slave_0: entered promiscuous mode [ 375.137808][T11357] hsr_slave_1: entered promiscuous mode [ 375.144225][T11357] debugfs: 'hsr0' already exists in 'hsr' [ 375.149968][T11357] Cannot create hsr debugfs directory [ 375.162552][ T51] Bluetooth: hci8: command tx timeout [ 375.213454][T11360] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.220648][T11360] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.228543][T11360] bridge_slave_0: entered allmulticast mode [ 375.236528][T11360] bridge_slave_0: entered promiscuous mode [ 375.244650][ T51] Bluetooth: hci7: command tx timeout [ 375.261768][T11360] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.269889][T11360] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.277626][T11360] bridge_slave_1: entered allmulticast mode [ 375.285350][T11360] bridge_slave_1: entered promiscuous mode [ 375.345046][T11360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.366046][T11360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.429813][T11360] team0: Port device team_slave_0 added [ 375.451321][T11360] team0: Port device team_slave_1 added [ 375.508129][T11360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.515695][T11360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.541837][T11360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.553540][ T51] Bluetooth: hci5: command tx timeout [ 375.556587][T11360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.566774][T11360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.593325][T11360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.633767][ T51] Bluetooth: hci9: command tx timeout [ 375.680936][T11360] hsr_slave_0: entered promiscuous mode [ 375.688327][T11360] hsr_slave_1: entered promiscuous mode [ 375.694967][T11360] debugfs: 'hsr0' already exists in 'hsr' [ 375.700704][T11360] Cannot create hsr debugfs directory [ 376.763369][ T51] Bluetooth: hci6: command tx timeout [ 377.232365][ T51] Bluetooth: hci8: command tx timeout [ 377.313172][ T51] Bluetooth: hci7: command tx timeout [ 377.632931][ T51] Bluetooth: hci5: command tx timeout [ 377.712960][ T51] Bluetooth: hci9: command tx timeout [ 378.757712][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.764483][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.833010][ T51] Bluetooth: hci6: command tx timeout [ 379.313125][ T51] Bluetooth: hci8: command tx timeout [ 379.393627][ T51] Bluetooth: hci7: command tx timeout [ 379.802300][ T51] Bluetooth: hci9: command tx timeout [ 381.393041][ T51] Bluetooth: hci8: command tx timeout [ 381.873011][ T51] Bluetooth: hci9: command tx timeout [ 429.487833][ T5866] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 429.496374][ T5866] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 429.504685][ T5866] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 429.515741][ T5866] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 429.524196][ T5866] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 429.557734][T11379] lo speed is unknown, defaulting to 1000 [ 430.081312][T11379] chnl_net:caif_netlink_parms(): no params data found [ 430.161289][T11379] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.169293][T11379] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.177722][T11379] bridge_slave_0: entered allmulticast mode [ 430.185279][T11379] bridge_slave_0: entered promiscuous mode [ 430.199567][T11379] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.207271][T11379] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.214916][T11379] bridge_slave_1: entered allmulticast mode [ 430.222292][T11379] bridge_slave_1: entered promiscuous mode [ 430.256520][T11379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.269232][T11379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.317445][T11379] team0: Port device team_slave_0 added [ 430.328743][T11379] team0: Port device team_slave_1 added [ 430.380257][T11379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.388144][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.419176][T11379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.437792][T11379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.445570][T11379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.472593][T11379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.558505][T11379] hsr_slave_0: entered promiscuous mode [ 430.568085][T11379] hsr_slave_1: entered promiscuous mode [ 430.575489][T11379] debugfs: 'hsr0' already exists in 'hsr' [ 430.581297][T11379] Cannot create hsr debugfs directory [ 430.658678][ T5866] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 430.668547][ T5866] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 430.678960][ T5866] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 430.689639][ T5866] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 430.701112][ T5866] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 430.795640][T11388] lo speed is unknown, defaulting to 1000 [ 431.527269][T11388] chnl_net:caif_netlink_parms(): no params data found [ 431.555769][ T51] Bluetooth: hci10: command tx timeout [ 431.664622][T11388] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.671908][T11388] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.679912][T11388] bridge_slave_0: entered allmulticast mode [ 431.689332][T11388] bridge_slave_0: entered promiscuous mode [ 431.700381][T11388] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.708192][T11388] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.716830][T11388] bridge_slave_1: entered allmulticast mode [ 431.720076][ T5866] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 431.726270][T11388] bridge_slave_1: entered promiscuous mode [ 431.735197][ T5866] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 431.747392][ T5866] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 431.758170][ T5866] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 431.767906][ T5866] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 431.785708][T11388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.800315][T11388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.845716][T11388] team0: Port device team_slave_0 added [ 431.856737][T11388] team0: Port device team_slave_1 added [ 431.901123][T11388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.908464][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.935883][T11388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.947121][T11397] lo speed is unknown, defaulting to 1000 [ 431.948918][T11388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.960424][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.986958][T11388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.068756][T11388] hsr_slave_0: entered promiscuous mode [ 432.076882][T11388] hsr_slave_1: entered promiscuous mode [ 432.084062][T11388] debugfs: 'hsr0' already exists in 'hsr' [ 432.089833][T11388] Cannot create hsr debugfs directory [ 432.752995][ T5866] Bluetooth: hci11: command tx timeout [ 432.795521][T11397] chnl_net:caif_netlink_parms(): no params data found [ 432.878834][T11397] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.886936][T11397] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.895765][T11397] bridge_slave_0: entered allmulticast mode [ 432.903403][T11397] bridge_slave_0: entered promiscuous mode [ 432.913099][T11397] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.920704][T11397] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.928461][T11397] bridge_slave_1: entered allmulticast mode [ 432.936218][T11397] bridge_slave_1: entered promiscuous mode [ 432.973904][T11397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.986427][T11397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.021342][T11397] team0: Port device team_slave_0 added [ 433.029961][T11397] team0: Port device team_slave_1 added [ 433.063287][T11397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.070268][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.097412][T11397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.110046][T11397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.117430][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.143755][T11397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.197202][T11397] hsr_slave_0: entered promiscuous mode [ 433.204075][T11397] hsr_slave_1: entered promiscuous mode [ 433.210278][T11397] debugfs: 'hsr0' already exists in 'hsr' [ 433.216355][T11397] Cannot create hsr debugfs directory [ 433.642775][ T5866] Bluetooth: hci10: command tx timeout [ 433.781732][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 433.791666][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 433.800675][ T5868] Bluetooth: hci12: command tx timeout [ 433.801880][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 433.817397][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 433.825766][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 433.886493][T11407] lo speed is unknown, defaulting to 1000 [ 433.904319][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 433.915466][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 433.924572][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 433.934156][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 433.943517][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 434.073190][T11409] lo speed is unknown, defaulting to 1000 [ 434.832745][ T51] Bluetooth: hci11: command tx timeout [ 434.879063][T11407] chnl_net:caif_netlink_parms(): no params data found [ 435.039186][T11407] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.046973][T11407] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.055009][T11407] bridge_slave_0: entered allmulticast mode [ 435.062540][T11407] bridge_slave_0: entered promiscuous mode [ 435.074223][T11407] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.081398][T11407] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.090429][T11407] bridge_slave_1: entered allmulticast mode [ 435.098011][T11407] bridge_slave_1: entered promiscuous mode [ 435.139821][T11407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.161002][T11407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.234379][T11407] team0: Port device team_slave_0 added [ 435.256734][T11407] team0: Port device team_slave_1 added [ 435.326643][T11407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.334992][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.361848][T11407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.374135][T11409] chnl_net:caif_netlink_parms(): no params data found [ 435.387461][T11407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.395275][T11407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.423265][T11407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.521389][T11407] hsr_slave_0: entered promiscuous mode [ 435.528509][T11407] hsr_slave_1: entered promiscuous mode [ 435.535181][T11407] debugfs: 'hsr0' already exists in 'hsr' [ 435.540936][T11407] Cannot create hsr debugfs directory [ 435.595635][T11409] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.603732][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.611027][T11409] bridge_slave_0: entered allmulticast mode [ 435.621263][T11409] bridge_slave_0: entered promiscuous mode [ 435.637678][T11409] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.645402][T11409] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.653205][T11409] bridge_slave_1: entered allmulticast mode [ 435.660545][T11409] bridge_slave_1: entered promiscuous mode [ 435.719673][T11409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.722687][ T51] Bluetooth: hci10: command tx timeout [ 435.744880][T11409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.800812][T11409] team0: Port device team_slave_0 added [ 435.818509][T11409] team0: Port device team_slave_1 added [ 435.872996][ T5866] Bluetooth: hci13: command tx timeout [ 435.875769][T11409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.879310][ T51] Bluetooth: hci12: command tx timeout [ 435.886274][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.917834][T11409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.938289][T11409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.945991][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.973527][T11409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.043252][ T51] Bluetooth: hci14: command tx timeout [ 436.058164][T11409] hsr_slave_0: entered promiscuous mode [ 436.066300][T11409] hsr_slave_1: entered promiscuous mode [ 436.073192][T11409] debugfs: 'hsr0' already exists in 'hsr' [ 436.078921][T11409] Cannot create hsr debugfs directory [ 436.912941][ T51] Bluetooth: hci11: command tx timeout [ 437.792942][ T51] Bluetooth: hci10: command tx timeout [ 437.952953][ T51] Bluetooth: hci12: command tx timeout [ 437.953016][ T5866] Bluetooth: hci13: command tx timeout [ 438.123012][ T5866] Bluetooth: hci14: command tx timeout [ 438.992972][ T5866] Bluetooth: hci11: command tx timeout [ 440.033068][ T5866] Bluetooth: hci13: command tx timeout [ 440.037085][ T51] Bluetooth: hci12: command tx timeout [ 440.196518][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.197036][ T51] Bluetooth: hci14: command tx timeout [ 440.203556][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.112837][ T51] Bluetooth: hci13: command tx timeout [ 442.272998][ T51] Bluetooth: hci14: command tx timeout [ 490.074158][ T5866] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 490.083504][ T5866] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 490.093995][ T5866] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 490.103678][ T5866] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 490.111668][ T5866] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 490.146658][T11428] lo speed is unknown, defaulting to 1000 [ 490.767267][ T5868] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 490.778148][ T5868] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 490.788249][ T5868] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 490.804389][ T5868] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 490.814832][ T5868] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 490.900192][T11431] lo speed is unknown, defaulting to 1000 [ 490.921656][T11428] chnl_net:caif_netlink_parms(): no params data found [ 491.074377][T11428] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.081683][T11428] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.091285][T11428] bridge_slave_0: entered allmulticast mode [ 491.101552][T11428] bridge_slave_0: entered promiscuous mode [ 491.113639][T11428] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.123382][T11428] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.130815][T11428] bridge_slave_1: entered allmulticast mode [ 491.140081][T11428] bridge_slave_1: entered promiscuous mode [ 491.190835][T11428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.205857][T11428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.279216][T11428] team0: Port device team_slave_0 added [ 491.290430][T11428] team0: Port device team_slave_1 added [ 491.347310][T11428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.355322][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.382825][T11428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.399910][T11428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.407944][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.435557][T11428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.517613][T11428] hsr_slave_0: entered promiscuous mode [ 491.526978][T11428] hsr_slave_1: entered promiscuous mode [ 491.533724][T11428] debugfs: 'hsr0' already exists in 'hsr' [ 491.539488][T11428] Cannot create hsr debugfs directory [ 491.973483][T11431] chnl_net:caif_netlink_parms(): no params data found [ 492.193088][ T8029] Bluetooth: hci15: command tx timeout [ 492.253795][T11431] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.261079][T11431] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.264217][ T5183] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 492.268996][T11431] bridge_slave_0: entered allmulticast mode [ 492.279694][ T5183] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 492.285036][T11431] bridge_slave_0: entered promiscuous mode [ 492.291870][ T5183] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 492.298898][T11431] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.304313][ T5183] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 492.310181][T11431] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.318550][ T5183] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 492.325730][T11431] bridge_slave_1: entered allmulticast mode [ 492.341750][T11431] bridge_slave_1: entered promiscuous mode [ 492.385543][T11431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.399082][T11431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.447629][T11431] team0: Port device team_slave_0 added [ 492.463397][T11431] team0: Port device team_slave_1 added [ 492.469597][T11446] lo speed is unknown, defaulting to 1000 [ 492.514780][T11431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.521784][T11431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.549577][T11431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.564482][T11431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.571484][T11431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.606295][T11431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.688992][T11431] hsr_slave_0: entered promiscuous mode [ 492.696603][T11431] hsr_slave_1: entered promiscuous mode [ 492.703724][T11431] debugfs: 'hsr0' already exists in 'hsr' [ 492.709489][T11431] Cannot create hsr debugfs directory [ 492.833127][ T5183] Bluetooth: hci16: command tx timeout [ 493.324877][T11446] chnl_net:caif_netlink_parms(): no params data found [ 493.472915][ T5183] Bluetooth: hci7: command 0x0406 tx timeout [ 493.479044][ T5183] Bluetooth: hci5: command 0x0406 tx timeout [ 493.486845][ T8029] Bluetooth: hci6: command 0x0406 tx timeout [ 493.510077][T11446] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.518049][T11446] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.526381][T11446] bridge_slave_0: entered allmulticast mode [ 493.535775][T11446] bridge_slave_0: entered promiscuous mode [ 493.546127][T11446] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.555316][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.563043][T11446] bridge_slave_1: entered allmulticast mode [ 493.571426][T11446] bridge_slave_1: entered promiscuous mode [ 493.635903][T11446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.660191][T11446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.726401][T11446] team0: Port device team_slave_0 added [ 493.736535][T11446] team0: Port device team_slave_1 added [ 493.767317][ T5866] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 493.780183][ T5866] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 493.792812][ T5866] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 493.801288][ T5866] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 493.810344][ T5866] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 493.811676][T11446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.826018][T11446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.853362][T11446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.867400][T11446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.875483][T11446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.903825][T11446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.013557][T11446] hsr_slave_0: entered promiscuous mode [ 494.021145][T11446] hsr_slave_1: entered promiscuous mode [ 494.030011][T11446] debugfs: 'hsr0' already exists in 'hsr' [ 494.037006][T11446] Cannot create hsr debugfs directory [ 494.077082][T11455] lo speed is unknown, defaulting to 1000 [ 494.275551][ T5866] Bluetooth: hci15: command tx timeout [ 494.276083][ T51] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 494.294270][ T51] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 494.303267][ T51] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 494.314459][ T51] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 494.323191][ T51] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 494.352804][ T5868] Bluetooth: hci17: command tx timeout [ 494.466808][T11458] lo speed is unknown, defaulting to 1000 [ 494.912907][ T5868] Bluetooth: hci16: command tx timeout [ 495.380055][T11455] chnl_net:caif_netlink_parms(): no params data found [ 495.529525][T11455] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.537385][T11455] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.545557][T11455] bridge_slave_0: entered allmulticast mode [ 495.553997][T11455] bridge_slave_0: entered promiscuous mode [ 495.568496][T11455] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.575886][T11455] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.583588][T11455] bridge_slave_1: entered allmulticast mode [ 495.590866][T11455] bridge_slave_1: entered promiscuous mode [ 495.633694][T11455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.651277][T11455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.732896][T11455] team0: Port device team_slave_0 added [ 495.755805][T11455] team0: Port device team_slave_1 added [ 495.822988][T11455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.830542][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.857314][T11455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.869377][T11458] chnl_net:caif_netlink_parms(): no params data found [ 495.872881][ T5868] Bluetooth: hci18: command tx timeout [ 495.884672][T11455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.891741][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.918224][T11455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.056348][T11455] hsr_slave_0: entered promiscuous mode [ 496.063224][T11455] hsr_slave_1: entered promiscuous mode [ 496.069477][T11455] debugfs: 'hsr0' already exists in 'hsr' [ 496.075832][T11455] Cannot create hsr debugfs directory [ 496.089135][T11458] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.096679][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.104464][T11458] bridge_slave_0: entered allmulticast mode [ 496.111805][T11458] bridge_slave_0: entered promiscuous mode [ 496.122304][T11458] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.129550][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.137968][T11458] bridge_slave_1: entered allmulticast mode [ 496.145870][T11458] bridge_slave_1: entered promiscuous mode [ 496.204812][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.230867][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.288580][T11458] team0: Port device team_slave_0 added [ 496.304304][T11458] team0: Port device team_slave_1 added [ 496.353232][ T5868] Bluetooth: hci15: command tx timeout [ 496.358824][ T5868] Bluetooth: hci19: command tx timeout [ 496.383662][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.390799][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.417066][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.433596][ T5868] Bluetooth: hci17: command tx timeout [ 496.451329][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.458571][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.485177][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.573968][T11458] hsr_slave_0: entered promiscuous mode [ 496.580671][T11458] hsr_slave_1: entered promiscuous mode [ 496.587723][T11458] debugfs: 'hsr0' already exists in 'hsr' [ 496.595956][T11458] Cannot create hsr debugfs directory [ 496.993069][ T5183] Bluetooth: hci16: command tx timeout [ 497.953100][ T5183] Bluetooth: hci18: command tx timeout [ 498.434034][ T5183] Bluetooth: hci19: command tx timeout [ 498.434049][ T5866] Bluetooth: hci15: command tx timeout [ 498.512993][ T5866] Bluetooth: hci17: command tx timeout [ 498.603058][ T5868] Bluetooth: hci8: command 0x0406 tx timeout [ 498.603820][ T51] Bluetooth: hci9: command 0x0406 tx timeout [ 499.072367][ T51] Bluetooth: hci16: command tx timeout [ 500.032315][ T51] Bluetooth: hci18: command tx timeout [ 500.512924][ T51] Bluetooth: hci19: command tx timeout [ 500.592947][ T51] Bluetooth: hci17: command tx timeout [ 501.645795][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.652927][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.122787][ T51] Bluetooth: hci18: command tx timeout [ 502.602801][ T51] Bluetooth: hci19: command tx timeout [ 511.233243][ T31] INFO: task syz.4.1439:11278 blocked for more than 143 seconds. [ 511.241072][ T31] Not tainted syzkaller #0 [ 511.246520][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.255664][ T31] task:syz.4.1439 state:D stack:25048 pid:11278 tgid:11276 ppid:5870 task_flags:0x400140 flags:0x00004006 [ 511.268111][ T31] Call Trace: [ 511.271419][ T31] [ 511.274795][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 511.279315][ T31] ? validate_chain+0x897/0x2140 [ 511.284555][ T31] ? __lock_acquire+0xab9/0xd20 [ 511.290067][ T31] ? __pfx___schedule+0x10/0x10 [ 511.295780][ T31] ? schedule+0x91/0x360 [ 511.300068][ T31] schedule+0x165/0x360 [ 511.304365][ T31] schedule_timeout+0x9a/0x270 [ 511.309164][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 511.321901][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.327915][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.333985][ T31] ? wait_for_completion+0x267/0x5d0 [ 511.339856][ T31] wait_for_completion+0x2bf/0x5d0 [ 511.345732][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 511.351408][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 511.357999][ T31] ? check_flush_dependency+0x88/0x400 [ 511.364355][ T31] __flush_workqueue+0x6f7/0x14b0 [ 511.369527][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 511.376042][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.381285][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 511.387340][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 511.395228][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 511.400746][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 511.406671][ T31] nbd_genl_disconnect+0x485/0x570 [ 511.411834][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 511.418072][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 511.425074][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 511.452433][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 511.458600][ T31] ? stack_trace_save+0x9c/0xe0 [ 511.492114][ T31] genl_rcv_msg+0x60e/0x790 [ 511.497572][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.510770][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 511.517094][ T31] netlink_rcv_skb+0x208/0x470 [ 511.521897][ T31] ? __lock_acquire+0xab9/0xd20 [ 511.527231][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.532941][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.538288][ T31] ? down_read+0x1ad/0x2e0 [ 511.543058][ T31] genl_rcv+0x28/0x40 [ 511.547048][ T31] netlink_unicast+0x82c/0x9e0 [ 511.551812][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 511.558088][ T31] ? netlink_sendmsg+0x642/0xb30 [ 511.563490][ T31] ? skb_put+0x11b/0x210 [ 511.567738][ T31] netlink_sendmsg+0x805/0xb30 [ 511.572875][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.578189][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 511.583443][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.588727][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.594416][ T31] __sock_sendmsg+0x21c/0x270 [ 511.599632][ T31] ____sys_sendmsg+0x505/0x830 [ 511.604769][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.610072][ T31] ? import_iovec+0x74/0xa0 [ 511.614923][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 511.619607][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.625152][ T31] ? __fget_files+0x2a/0x420 [ 511.629749][ T31] ? __fget_files+0x3a0/0x420 [ 511.634767][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 511.639733][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.645246][ T31] ? do_syscall_64+0xbe/0x3b0 [ 511.649925][ T31] do_syscall_64+0xfa/0x3b0 [ 511.654500][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.659730][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.666239][ T31] ? clear_bhb_loop+0x60/0xb0 [ 511.670931][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.677236][ T31] RIP: 0033:0x7fcc6478eec9 [ 511.681672][ T31] RSP: 002b:00007fcc656bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.690539][ T31] RAX: ffffffffffffffda RBX: 00007fcc649e5fa0 RCX: 00007fcc6478eec9 [ 511.699570][ T31] RDX: 0000000000000010 RSI: 0000200000000540 RDI: 000000000000000a [ 511.707961][ T31] RBP: 00007fcc64811f91 R08: 0000000000000000 R09: 0000000000000000 [ 511.716504][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.724904][ T31] R13: 00007fcc649e6038 R14: 00007fcc649e5fa0 R15: 00007ffe99fff4e8 [ 511.733231][ T31] [ 511.736281][ T31] INFO: task syz.2.1442:11288 blocked for more than 143 seconds. [ 511.744423][ T31] Not tainted syzkaller #0 [ 511.749357][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.758364][ T31] task:syz.2.1442 state:D stack:25864 pid:11288 tgid:11287 ppid:5872 task_flags:0x400140 flags:0x00004004 [ 511.770601][ T31] Call Trace: [ 511.774269][ T31] [ 511.777204][ T31] __schedule+0x1798/0x4cc0 [ 511.781714][ T31] ? __lock_acquire+0xab9/0xd20 [ 511.787019][ T31] ? __lock_acquire+0xab9/0xd20 [ 511.791896][ T31] ? __pfx___schedule+0x10/0x10 [ 511.797233][ T31] ? schedule+0x91/0x360 [ 511.801962][ T31] schedule+0x165/0x360 [ 511.806479][ T31] schedule_preempt_disabled+0x13/0x30 [ 511.811975][ T31] __mutex_lock+0x7e6/0x1350 [ 511.816908][ T31] ? __mutex_lock+0x5bb/0x1350 [ 511.821763][ T31] ? genl_rcv_msg+0x10d/0x790 [ 511.826752][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 511.831786][ T31] ? stack_trace_save+0x9c/0xe0 [ 511.836968][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 511.842647][ T31] ? radix_tree_lookup+0x240/0x290 [ 511.847789][ T31] genl_rcv_msg+0x10d/0x790 [ 511.852626][ T31] ? __lock_acquire+0xab9/0xd20 [ 511.857499][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.862913][ T31] netlink_rcv_skb+0x208/0x470 [ 511.867703][ T31] ? __lock_acquire+0xab9/0xd20 [ 511.874171][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.879333][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.884970][ T31] ? down_read+0x1ad/0x2e0 [ 511.889395][ T31] genl_rcv+0x28/0x40 [ 511.893846][ T31] netlink_unicast+0x82c/0x9e0 [ 511.898642][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 511.904812][ T31] ? netlink_sendmsg+0x642/0xb30 [ 511.909793][ T31] ? skb_put+0x11b/0x210 [ 511.914358][ T31] netlink_sendmsg+0x805/0xb30 [ 511.919132][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.924575][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 511.929523][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 511.934859][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.940158][ T31] __sock_sendmsg+0x21c/0x270 [ 511.944896][ T31] __sys_sendto+0x3bd/0x520 [ 511.949403][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 511.955879][ T31] ? fd_install+0x97/0x540 [ 511.960333][ T31] ? fd_install+0x30d/0x540 [ 511.965162][ T31] __x64_sys_sendto+0xde/0x100 [ 511.969945][ T31] do_syscall_64+0xfa/0x3b0 [ 511.974858][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.980061][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.986432][ T31] ? clear_bhb_loop+0x60/0xb0 [ 511.991347][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.997800][ T31] RIP: 0033:0x7f844df90d5c [ 512.002876][ T31] RSP: 002b:00007f844ed8aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 512.011888][ T31] RAX: ffffffffffffffda RBX: 00007f844ed8afc0 RCX: 00007f844df90d5c [ 512.020410][ T31] RDX: 0000000000000020 RSI: 00007f844ed8b010 RDI: 0000000000000009 [ 512.028798][ T31] RBP: 0000000000000000 R08: 00007f844ed8af14 R09: 000000000000000c [ 512.037257][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 512.045574][ T31] R13: 00007f844ed8af68 R14: 00007f844ed8b010 R15: 0000000000000000 [ 512.053912][ T31] [ 512.056952][ T31] INFO: task syz.2.1442:11289 blocked for more than 144 seconds. [ 512.065297][ T31] Not tainted syzkaller #0 [ 512.070277][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.079338][ T31] task:syz.2.1442 state:D stack:28616 pid:11289 tgid:11287 ppid:5872 task_flags:0x400040 flags:0x00004004 [ 512.091683][ T31] Call Trace: [ 512.095285][ T31] [ 512.098233][ T31] __schedule+0x1798/0x4cc0 [ 512.103092][ T31] ? __lock_acquire+0xab9/0xd20 [ 512.108462][ T31] ? __lock_acquire+0xab9/0xd20 [ 512.113949][ T31] ? __pfx___schedule+0x10/0x10 [ 512.118822][ T31] ? schedule+0x91/0x360 [ 512.123508][ T31] schedule+0x165/0x360 [ 512.127699][ T31] schedule_preempt_disabled+0x13/0x30 [ 512.133686][ T31] __mutex_lock+0x7e6/0x1350 [ 512.138305][ T31] ? __mutex_lock+0x5bb/0x1350 [ 512.143453][ T31] ? genl_rcv_msg+0x10d/0x790 [ 512.148225][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 512.153582][ T31] ? stack_trace_save+0x9c/0xe0 [ 512.158453][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 512.164400][ T31] ? radix_tree_lookup+0x240/0x290 [ 512.169543][ T31] genl_rcv_msg+0x10d/0x790 [ 512.174466][ T31] ? __lock_acquire+0xab9/0xd20 [ 512.179325][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.184701][ T31] netlink_rcv_skb+0x208/0x470 [ 512.189565][ T31] ? __lock_acquire+0xab9/0xd20 [ 512.195219][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.200280][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 512.205897][ T31] ? down_read+0x1ad/0x2e0 [ 512.210949][ T31] genl_rcv+0x28/0x40 [ 512.215267][ T31] netlink_unicast+0x82c/0x9e0 [ 512.220065][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 512.225600][ T31] ? netlink_sendmsg+0x642/0xb30 [ 512.230550][ T31] ? skb_put+0x11b/0x210 [ 512.234869][ T31] netlink_sendmsg+0x805/0xb30 [ 512.239672][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.245515][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 512.250471][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 512.256090][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.261384][ T31] __sock_sendmsg+0x21c/0x270 [ 512.266406][ T31] __sys_sendto+0x3bd/0x520 [ 512.270913][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 512.276349][ T31] ? fd_install+0x97/0x540 [ 512.280813][ T31] ? fd_install+0x30d/0x540 [ 512.285794][ T31] __x64_sys_sendto+0xde/0x100 [ 512.290569][ T31] do_syscall_64+0xfa/0x3b0 [ 512.295564][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.300879][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.307264][ T31] ? clear_bhb_loop+0x60/0xb0 [ 512.313296][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.319247][ T31] RIP: 0033:0x7f844df90d5c [ 512.324029][ T31] RSP: 002b:00007f844ed69e60 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 512.332949][ T31] RAX: ffffffffffffffda RBX: 00007f844ed69fa0 RCX: 00007f844df90d5c [ 512.341400][ T31] RDX: 0000000000000020 RSI: 00007f844ed69ff0 RDI: 000000000000000a [ 512.349781][ T31] RBP: 0000000000000000 R08: 00007f844ed69eb4 R09: 000000000000000c [ 512.361694][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 512.369998][ T31] R13: 00007f844ed69f08 R14: 00007f844ed69ff0 R15: 0000000000000000 [ 512.378397][ T31] [ 512.381444][ T31] INFO: task syz.0.1444:11299 blocked for more than 144 seconds. [ 512.392759][ T31] Not tainted syzkaller #0 [ 512.397849][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.407008][ T31] task:syz.0.1444 state:D stack:27880 pid:11299 tgid:11296 ppid:5859 task_flags:0x400040 flags:0x00004004 [ 512.419819][ T31] Call Trace: [ 512.423475][ T31] [ 512.426415][ T31] __schedule+0x1798/0x4cc0 [ 512.430921][ T31] ? __lock_acquire+0xab9/0xd20 [ 512.436332][ T31] ? __lock_acquire+0xab9/0xd20 [ 512.441219][ T31] ? __pfx___schedule+0x10/0x10 [ 512.446598][ T31] ? schedule+0x91/0x360 [ 512.450859][ T31] schedule+0x165/0x360 [ 512.455364][ T31] schedule_preempt_disabled+0x13/0x30 [ 512.460824][ T31] __mutex_lock+0x7e6/0x1350 [ 512.465851][ T31] ? __mutex_lock+0x5bb/0x1350 [ 512.470644][ T31] ? genl_rcv_msg+0x10d/0x790 [ 512.475636][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 512.480657][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 512.486396][ T31] ? radix_tree_lookup+0x240/0x290 [ 512.491551][ T31] genl_rcv_msg+0x10d/0x790 [ 512.496412][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.501442][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 512.506821][ T31] ? __asan_memcpy+0x40/0x70 [ 512.511447][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 512.520091][ T31] netlink_rcv_skb+0x208/0x470 [ 512.525335][ T31] ? __lock_acquire+0xab9/0xd20 [ 512.530234][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.535386][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 512.540742][ T31] ? down_read+0x1ad/0x2e0 [ 512.545689][ T31] genl_rcv+0x28/0x40 [ 512.549781][ T31] netlink_unicast+0x82c/0x9e0 [ 512.555044][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 512.560439][ T31] ? netlink_sendmsg+0x642/0xb30 [ 512.565754][ T31] ? skb_put+0x11b/0x210 [ 512.570039][ T31] netlink_sendmsg+0x805/0xb30 [ 512.575145][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.580446][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 512.585705][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 512.590999][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.596691][ T31] __sock_sendmsg+0x21c/0x270 [ 512.601388][ T31] __sys_sendto+0x3bd/0x520 [ 512.606242][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 512.611387][ T31] ? count_memcg_event_mm+0x21/0x260 [ 512.617029][ T31] ? exc_page_fault+0x76/0xf0 [ 512.622221][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 512.627804][ T31] __x64_sys_sendto+0xde/0x100 [ 512.632930][ T31] do_syscall_64+0xfa/0x3b0 [ 512.637436][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.642949][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.649021][ T31] ? clear_bhb_loop+0x60/0xb0 [ 512.654023][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.659922][ T31] RIP: 0033:0x7f1478990d5c [ 512.664766][ T31] RSP: 002b:00007f1476bd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 512.673939][ T31] RAX: ffffffffffffffda RBX: 00007f1476bd3fc0 RCX: 00007f1478990d5c [ 512.681943][ T31] RDX: 0000000000000020 RSI: 00007f1476bd4010 RDI: 0000000000000007 [ 512.690471][ T31] RBP: 0000000000000000 R08: 00007f1476bd3f14 R09: 000000000000000c [ 512.699020][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 512.707323][ T31] R13: 00007f1476bd3f68 R14: 00007f1476bd4010 R15: 0000000000000000 [ 512.715764][ T31] [ 512.718796][ T31] INFO: task syz.3.1449:11314 blocked for more than 144 seconds. [ 512.727377][ T31] Not tainted syzkaller #0 [ 512.732890][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.741558][ T31] task:syz.3.1449 state:D stack:26088 pid:11314 tgid:11313 ppid:5869 task_flags:0x400140 flags:0x00004004 [ 512.754087][ T31] Call Trace: [ 512.757387][ T31] [ 512.760328][ T31] __schedule+0x1798/0x4cc0 [ 512.765169][ T31] ? __lock_acquire+0xab9/0xd20 [ 512.770026][ T31] ? __lock_acquire+0xab9/0xd20 [ 512.775195][ T31] ? __pfx___schedule+0x10/0x10 [ 512.780064][ T31] ? schedule+0x91/0x360 [ 512.784689][ T31] schedule+0x165/0x360 [ 512.788848][ T31] schedule_preempt_disabled+0x13/0x30 [ 512.794639][ T31] __mutex_lock+0x7e6/0x1350 [ 512.799237][ T31] ? __mutex_lock+0x5bb/0x1350 [ 512.804536][ T31] ? genl_rcv_msg+0x10d/0x790 [ 512.809225][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 512.814620][ T31] ? stack_trace_save+0x9c/0xe0 [ 512.819473][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 512.825496][ T31] ? radix_tree_lookup+0x240/0x290 [ 512.830755][ T31] genl_rcv_msg+0x10d/0x790 [ 512.835600][ T31] ? __lock_acquire+0xab9/0xd20 [ 512.840506][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.845571][ T31] netlink_rcv_skb+0x208/0x470 [ 512.850503][ T31] ? __lock_acquire+0xab9/0xd20 [ 512.855790][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 512.860822][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 512.866427][ T31] ? down_read+0x1ad/0x2e0 [ 512.870855][ T31] genl_rcv+0x28/0x40 [ 512.875150][ T31] netlink_unicast+0x82c/0x9e0 [ 512.879939][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 512.885578][ T31] ? netlink_sendmsg+0x642/0xb30 [ 512.890542][ T31] ? skb_put+0x11b/0x210 [ 512.895224][ T31] netlink_sendmsg+0x805/0xb30 [ 512.900006][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.905617][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 512.910571][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 512.916568][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.921902][ T31] __sock_sendmsg+0x21c/0x270 [ 512.927833][ T31] __sys_sendto+0x3bd/0x520 [ 512.932837][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 512.938022][ T31] ? count_memcg_event_mm+0x21/0x260 [ 512.943629][ T31] ? exc_page_fault+0x76/0xf0 [ 512.948325][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 512.953938][ T31] __x64_sys_sendto+0xde/0x100 [ 512.958797][ T31] do_syscall_64+0xfa/0x3b0 [ 512.963616][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.968829][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.975224][ T31] ? clear_bhb_loop+0x60/0xb0 [ 512.979925][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.986158][ T31] RIP: 0033:0x7efd59f90d5c [ 512.990578][ T31] RSP: 002b:00007efd5adffec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 512.999390][ T31] RAX: ffffffffffffffda RBX: 00007efd5adfffc0 RCX: 00007efd59f90d5c [ 513.007835][ T31] RDX: 000000000000001c RSI: 00007efd5ae00010 RDI: 0000000000000008 [ 513.016214][ T31] RBP: 0000000000000000 R08: 00007efd5adfff14 R09: 000000000000000c [ 513.024535][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 513.033718][ T31] R13: 00007efd5adfff68 R14: 00007efd5ae00010 R15: 0000000000000000 [ 513.041942][ T31] [ 513.045425][ T31] INFO: task syz.3.1449:11320 blocked for more than 145 seconds. [ 513.053618][ T31] Not tainted syzkaller #0 [ 513.058553][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.067549][ T31] task:syz.3.1449 state:D stack:24776 pid:11320 tgid:11313 ppid:5869 task_flags:0x400140 flags:0x00004004 [ 513.080024][ T31] Call Trace: [ 513.083755][ T31] [ 513.086715][ T31] __schedule+0x1798/0x4cc0 [ 513.091319][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.096645][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.101518][ T31] ? __pfx___schedule+0x10/0x10 [ 513.106711][ T31] ? schedule+0x91/0x360 [ 513.110962][ T31] schedule+0x165/0x360 [ 513.115354][ T31] schedule_preempt_disabled+0x13/0x30 [ 513.120822][ T31] __mutex_lock+0x7e6/0x1350 [ 513.125465][ T31] ? __mutex_lock+0x5bb/0x1350 [ 513.130233][ T31] ? genl_rcv_msg+0x10d/0x790 [ 513.135454][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 513.140739][ T31] ? stack_trace_save+0x9c/0xe0 [ 513.146113][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 513.151494][ T31] ? radix_tree_lookup+0x240/0x290 [ 513.156982][ T31] genl_rcv_msg+0x10d/0x790 [ 513.161495][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.166700][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.171749][ T31] netlink_rcv_skb+0x208/0x470 [ 513.176828][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.181680][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.187038][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.192892][ T31] ? down_read+0x1ad/0x2e0 [ 513.197333][ T31] genl_rcv+0x28/0x40 [ 513.201318][ T31] netlink_unicast+0x82c/0x9e0 [ 513.206429][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 513.211715][ T31] ? netlink_sendmsg+0x642/0xb30 [ 513.216960][ T31] ? skb_put+0x11b/0x210 [ 513.221208][ T31] netlink_sendmsg+0x805/0xb30 [ 513.226469][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.231842][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 513.237640][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.243290][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.248580][ T31] __sock_sendmsg+0x21c/0x270 [ 513.253669][ T31] __sys_sendto+0x3bd/0x520 [ 513.258173][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 513.263611][ T31] ? count_memcg_event_mm+0x21/0x260 [ 513.268910][ T31] ? exc_page_fault+0x76/0xf0 [ 513.274189][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 513.279594][ T31] __x64_sys_sendto+0xde/0x100 [ 513.284689][ T31] do_syscall_64+0xfa/0x3b0 [ 513.289208][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.294724][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.300789][ T31] ? clear_bhb_loop+0x60/0xb0 [ 513.305870][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.311774][ T31] RIP: 0033:0x7efd59f90d5c [ 513.316600][ T31] RSP: 002b:00007efd5addeec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 513.325349][ T31] RAX: ffffffffffffffda RBX: 00007efd5addefc0 RCX: 00007efd59f90d5c [ 513.333717][ T31] RDX: 0000000000000028 RSI: 00007efd5addf010 RDI: 0000000000000008 [ 513.342274][ T31] RBP: 0000000000000000 R08: 00007efd5addef14 R09: 000000000000000c [ 513.350272][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 513.358593][ T31] R13: 00007efd5addef68 R14: 00007efd5addf010 R15: 0000000000000000 [ 513.366910][ T31] [ 513.369948][ T31] INFO: task syz.1.1451:11323 blocked for more than 145 seconds. [ 513.378157][ T31] Not tainted syzkaller #0 [ 513.383565][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.397998][ T31] task:syz.1.1451 state:D stack:28360 pid:11323 tgid:11321 ppid:5861 task_flags:0x400040 flags:0x00004004 [ 513.410466][ T31] Call Trace: [ 513.414094][ T31] [ 513.417044][ T31] __schedule+0x1798/0x4cc0 [ 513.421553][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.426980][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.431846][ T31] ? __pfx___schedule+0x10/0x10 [ 513.437015][ T31] ? schedule+0x91/0x360 [ 513.441759][ T31] schedule+0x165/0x360 [ 513.446351][ T31] schedule_preempt_disabled+0x13/0x30 [ 513.451865][ T31] __mutex_lock+0x7e6/0x1350 [ 513.456966][ T31] ? __mutex_lock+0x5bb/0x1350 [ 513.461770][ T31] ? genl_rcv_msg+0x10d/0x790 [ 513.466958][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 513.472006][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 513.478041][ T31] ? radix_tree_lookup+0x240/0x290 [ 513.483567][ T31] genl_rcv_msg+0x10d/0x790 [ 513.488130][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.493502][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 513.498616][ T31] ? __asan_memcpy+0x40/0x70 [ 513.503621][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 513.509053][ T31] netlink_rcv_skb+0x208/0x470 [ 513.514266][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.519162][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.524514][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.529829][ T31] ? down_read+0x1ad/0x2e0 [ 513.534707][ T31] genl_rcv+0x28/0x40 [ 513.538721][ T31] netlink_unicast+0x82c/0x9e0 [ 513.544342][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 513.549663][ T31] ? netlink_sendmsg+0x642/0xb30 [ 513.555226][ T31] ? skb_put+0x11b/0x210 [ 513.559588][ T31] netlink_sendmsg+0x805/0xb30 [ 513.564686][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.569974][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 513.575208][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.580514][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.585848][ T31] __sock_sendmsg+0x21c/0x270 [ 513.590618][ T31] __sys_sendto+0x3bd/0x520 [ 513.595223][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 513.600260][ T31] ? count_memcg_event_mm+0x21/0x260 [ 513.605996][ T31] ? exc_page_fault+0x76/0xf0 [ 513.610684][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 513.616336][ T31] __x64_sys_sendto+0xde/0x100 [ 513.621107][ T31] do_syscall_64+0xfa/0x3b0 [ 513.625956][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.631160][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.637991][ T31] ? clear_bhb_loop+0x60/0xb0 [ 513.644238][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.650161][ T31] RIP: 0033:0x7faed9990d5c [ 513.654979][ T31] RSP: 002b:00007faeda74aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 513.663806][ T31] RAX: ffffffffffffffda RBX: 00007faeda74afc0 RCX: 00007faed9990d5c [ 513.671861][ T31] RDX: 0000000000000020 RSI: 00007faeda74b010 RDI: 0000000000000003 [ 513.680166][ T31] RBP: 0000000000000000 R08: 00007faeda74af14 R09: 000000000000000c [ 513.688476][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 513.696934][ T31] R13: 00007faeda74af68 R14: 00007faeda74b010 R15: 0000000000000000 [ 513.705869][ T31] [ 513.708997][ T31] INFO: task syz.1.1451:11325 blocked for more than 145 seconds. [ 513.717838][ T31] Not tainted syzkaller #0 [ 513.723115][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.731865][ T31] task:syz.1.1451 state:D stack:21480 pid:11325 tgid:11321 ppid:5861 task_flags:0x400140 flags:0x00004004 [ 513.744154][ T31] Call Trace: [ 513.747911][ T31] [ 513.750883][ T31] __schedule+0x1798/0x4cc0 [ 513.756014][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.760938][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.766323][ T31] ? __pfx___schedule+0x10/0x10 [ 513.771216][ T31] ? schedule+0x91/0x360 [ 513.775887][ T31] schedule+0x165/0x360 [ 513.780079][ T31] schedule_preempt_disabled+0x13/0x30 [ 513.785978][ T31] __mutex_lock+0x7e6/0x1350 [ 513.790620][ T31] ? __mutex_lock+0x5bb/0x1350 [ 513.796035][ T31] ? genl_rcv_msg+0x10d/0x790 [ 513.800750][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 513.806172][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 513.811334][ T31] ? radix_tree_lookup+0x240/0x290 [ 513.816872][ T31] genl_rcv_msg+0x10d/0x790 [ 513.821512][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.827321][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 513.832829][ T31] ? __asan_memcpy+0x40/0x70 [ 513.837453][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 513.843257][ T31] netlink_rcv_skb+0x208/0x470 [ 513.848986][ T31] ? __lock_acquire+0xab9/0xd20 [ 513.854216][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.859258][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.865087][ T31] ? down_read+0x1ad/0x2e0 [ 513.869538][ T31] genl_rcv+0x28/0x40 [ 513.874168][ T31] netlink_unicast+0x82c/0x9e0 [ 513.878956][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 513.884748][ T31] ? netlink_sendmsg+0x642/0xb30 [ 513.889709][ T31] ? skb_put+0x11b/0x210 [ 513.894535][ T31] netlink_sendmsg+0x805/0xb30 [ 513.899358][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.905273][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 513.910286][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.916223][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.921549][ T31] __sock_sendmsg+0x21c/0x270 [ 513.926998][ T31] ____sys_sendmsg+0x505/0x830 [ 513.931767][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.937522][ T31] ? import_iovec+0x74/0xa0 [ 513.942676][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 513.947545][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.954222][ T31] ? __fget_files+0x2a/0x420 [ 513.958856][ T31] ? __fget_files+0x3a0/0x420 [ 513.963897][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 513.968862][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.974680][ T31] ? rcu_is_watching+0x15/0xb0 [ 513.979461][ T31] ? do_syscall_64+0xbe/0x3b0 [ 513.984520][ T31] do_syscall_64+0xfa/0x3b0 [ 513.989049][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.994632][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.001047][ T31] ? clear_bhb_loop+0x60/0xb0 [ 514.006051][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.011947][ T31] RIP: 0033:0x7faed998eec9 [ 514.016748][ T31] RSP: 002b:00007faed7bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.025431][ T31] RAX: ffffffffffffffda RBX: 00007faed9be6090 RCX: 00007faed998eec9 [ 514.033882][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 514.042104][ T31] RBP: 00007faed9a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 514.050171][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.059241][ T31] R13: 00007faed9be6128 R14: 00007faed9be6090 R15: 00007ffd37ba4038 [ 514.067691][ T31] [ 514.070756][ T31] [ 514.070756][ T31] Showing all locks held in the system: [ 514.078946][ T31] 1 lock held by khungtaskd/31: [ 514.084174][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 514.094513][ T31] 2 locks held by getty/5623: [ 514.099183][ T31] #0: ffff88814d5fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 514.109402][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 514.119971][ T31] 2 locks held by kworker/u9:2/5863: [ 514.125620][ T31] #0: ffff888024db3148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 514.137175][ T31] #1: ffffc9000412fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 514.149361][ T31] 3 locks held by syz.4.1439/11278: [ 514.155780][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.164511][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.173911][ T31] #2: ffff888143ff8a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 514.184610][ T31] 2 locks held by syz.2.1442/11288: [ 514.189837][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.198813][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.208202][ T31] 2 locks held by syz.2.1442/11289: [ 514.214097][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.222783][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.231852][ T31] 2 locks held by syz.0.1444/11299: [ 514.237363][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.245862][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.255256][ T31] 2 locks held by syz.3.1449/11314: [ 514.260954][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.269608][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.279072][ T31] 2 locks held by syz.3.1449/11320: [ 514.284705][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.293329][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.302995][ T31] 2 locks held by syz.1.1451/11323: [ 514.308233][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.316821][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.325996][ T31] 2 locks held by syz.1.1451/11325: [ 514.331273][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.339688][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.348750][ T31] 2 locks held by syz-executor/11330: [ 514.354789][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.364205][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.373601][ T31] 2 locks held by syz-executor/11339: [ 514.379169][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.387697][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.397063][ T31] 2 locks held by syz-executor/11342: [ 514.402849][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.411034][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.420321][ T31] 2 locks held by syz-executor/11357: [ 514.426124][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.438277][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.447803][ T31] 2 locks held by syz-executor/11360: [ 514.453555][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.461766][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.471617][ T31] 2 locks held by syz-executor/11379: [ 514.477395][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.486128][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.495599][ T31] 2 locks held by syz-executor/11388: [ 514.500972][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.509655][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.519510][ T31] 2 locks held by syz-executor/11397: [ 514.525401][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.533909][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.543185][ T31] 2 locks held by syz-executor/11407: [ 514.548549][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.557037][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.566932][ T31] 2 locks held by syz-executor/11409: [ 514.572952][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.581191][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.590528][ T31] 2 locks held by syz-executor/11428: [ 514.596810][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.605397][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.614762][ T31] 2 locks held by syz-executor/11431: [ 514.620145][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.628478][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.637527][ T31] 2 locks held by syz-executor/11446: [ 514.642967][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.651148][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.660444][ T31] 2 locks held by syz-executor/11455: [ 514.666149][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.676040][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.685748][ T31] 2 locks held by syz-executor/11458: [ 514.691137][ T31] #0: ffffffff8f5a08d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 514.699783][ T31] #1: ffffffff8f5a06e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 514.709235][ T31] [ 514.711587][ T31] ============================================= [ 514.711587][ T31] [ 514.720296][ T31] NMI backtrace for cpu 0 [ 514.720309][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 514.720323][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.720330][ T31] Call Trace: [ 514.720335][ T31] [ 514.720341][ T31] dump_stack_lvl+0x189/0x250 [ 514.720361][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.720375][ T31] ? __pfx__printk+0x10/0x10 [ 514.720397][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 514.720417][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 514.720436][ T31] ? __pfx__printk+0x10/0x10 [ 514.720453][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 514.720473][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 514.720493][ T31] watchdog+0xf93/0xfe0 [ 514.720512][ T31] ? watchdog+0x1de/0xfe0 [ 514.720530][ T31] kthread+0x70e/0x8a0 [ 514.720546][ T31] ? __pfx_watchdog+0x10/0x10 [ 514.720561][ T31] ? __pfx_kthread+0x10/0x10 [ 514.720575][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.720588][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.720599][ T31] ? __pfx_kthread+0x10/0x10 [ 514.720613][ T31] ret_from_fork+0x439/0x7d0 [ 514.720626][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 514.720640][ T31] ? __switch_to_asm+0x39/0x70 [ 514.720653][ T31] ? __switch_to_asm+0x33/0x70 [ 514.720666][ T31] ? __pfx_kthread+0x10/0x10 [ 514.720680][ T31] ret_from_fork_asm+0x1a/0x30 [ 514.720703][ T31] [ 514.720708][ T31] Sending NMI from CPU 0 to CPUs 1: [ 514.873192][ C1] NMI backtrace for cpu 1 [ 514.873213][ C1] CPU: 1 UID: 0 PID: 6443 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 514.873231][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.873241][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 514.873267][ C1] RIP: 0010:lock_release+0x70/0x3e0 [ 514.873289][ C1] Code: e8 45 f1 08 00 84 c0 75 0d f6 05 b0 7e ef 0d 01 0f 84 ad 02 00 00 83 3d 6d c7 05 0e 00 0f 84 44 02 00 00 65 8b 05 30 40 01 11 <85> c0 0f 85 35 02 00 00 65 4c 8b 3c 25 08 70 9e 92 41 83 bf ec 0a [ 514.873303][ C1] RSP: 0018:ffffc9001993e670 EFLAGS: 00000202 [ 514.873317][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: c7a9a907229cd800 [ 514.873327][ C1] RDX: ffffffff902d88ae RSI: ffffffff8be33f60 RDI: ffffffff8be33f20 [ 514.873339][ C1] RBP: dffffc0000000000 R08: 0000000000000015 R09: ffffffff8172c195 [ 514.873349][ C1] R10: ffffc9001993e7f8 R11: ffffffff81ac3c30 R12: 1ffff92003327cf5 [ 514.873360][ C1] R13: ffffffff8172c195 R14: ffffffff8e13a0e0 R15: ffffffff8172c195 [ 514.873392][ C1] FS: 0000000000000000(0000) GS:ffff888125d39000(0000) knlGS:0000000000000000 [ 514.873405][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 514.873416][ C1] CR2: 00005601c5d95650 CR3: 000000000df36000 CR4: 00000000003526f0 [ 514.873445][ C1] Call Trace: [ 514.873451][ C1] [ 514.873462][ C1] ? unwind_next_frame+0xa5/0x2390 [ 514.873479][ C1] unwind_next_frame+0x19a9/0x2390 [ 514.873497][ C1] ? unwind_next_frame+0xa5/0x2390 [ 514.873512][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 514.873544][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 514.873562][ C1] arch_stack_walk+0x11c/0x150 [ 514.873581][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 514.873602][ C1] stack_trace_save+0x9c/0xe0 [ 514.873618][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 514.873638][ C1] kasan_save_track+0x3e/0x80 [ 514.873655][ C1] ? kasan_save_track+0x3e/0x80 [ 514.873671][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 514.873687][ C1] ? __kmalloc_noprof+0x27a/0x4f0 [ 514.873704][ C1] ? ieee802_11_parse_elems_full+0x152/0x2ab0 [ 514.873724][ C1] ? ieee80211_inform_bss+0x10c/0x10a0 [ 514.873739][ C1] ? cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 514.873755][ C1] ? cfg80211_inform_bss_data+0x203/0x3b40 [ 514.873769][ C1] ? cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 514.873783][ C1] ? ieee80211_bss_info_update+0x749/0x9e0 [ 514.873797][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xa4e/0x2af0 [ 514.873813][ C1] ? ieee80211_iface_work+0x85f/0x12d0 [ 514.873829][ C1] ? cfg80211_wiphy_work+0x2b8/0x470 [ 514.873846][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 514.873866][ C1] ? worker_thread+0x8a0/0xda0 [ 514.873879][ C1] ? kthread+0x70e/0x8a0 [ 514.873894][ C1] ? ret_from_fork+0x439/0x7d0 [ 514.873906][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 514.873940][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 514.873963][ C1] __kasan_kmalloc+0x93/0xb0 [ 514.873981][ C1] __kmalloc_noprof+0x27a/0x4f0 [ 514.873999][ C1] ? ieee802_11_parse_elems_full+0x152/0x2ab0 [ 514.874020][ C1] ieee802_11_parse_elems_full+0x152/0x2ab0 [ 514.874042][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 514.874057][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.874075][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 514.874089][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 514.874108][ C1] ? kvfree_call_rcu+0x374/0x410 [ 514.874128][ C1] ? cfg80211_update_known_bss+0x9bd/0x1590 [ 514.874148][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 514.874167][ C1] ? cmp_bss+0x8b3/0xe80 [ 514.874185][ C1] ieee80211_inform_bss+0x10c/0x10a0 [ 514.874202][ C1] ? __cfg80211_bss_update+0x101a/0x2120 [ 514.874219][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 514.874234][ C1] ? do_raw_spin_lock+0x121/0x290 [ 514.874254][ C1] ? trace_kmalloc+0x1f/0xd0 [ 514.874272][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 514.874288][ C1] cfg80211_inform_single_bss_data+0xd05/0x1ac0 [ 514.874310][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 514.874337][ C1] ? _ieee802_11_parse_elems_full+0x44aa/0x4550 [ 514.874356][ C1] ? arch_stack_walk+0x11c/0x150 [ 514.874381][ C1] ? cfg80211_inform_bss_data+0x1f0/0x3b40 [ 514.874399][ C1] cfg80211_inform_bss_data+0x203/0x3b40 [ 514.874415][ C1] ? stack_trace_save+0x9c/0xe0 [ 514.874442][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 514.874475][ C1] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 514.874505][ C1] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 514.874524][ C1] ? ieee80211_bss_info_update+0x2df/0x9e0 [ 514.874542][ C1] ieee80211_bss_info_update+0x749/0x9e0 [ 514.874561][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 514.874576][ C1] ? sta_info_get+0x4f/0x2a0 [ 514.874598][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xfab/0x2af0 [ 514.874617][ C1] ieee80211_ibss_rx_queued_mgmt+0xa4e/0x2af0 [ 514.874632][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.874656][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xfab/0x2af0 [ 514.874672][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 514.874688][ C1] ? __lock_acquire+0xab9/0xd20 [ 514.874711][ C1] ? __lock_acquire+0xab9/0xd20 [ 514.874741][ C1] ? kcov_remote_start+0x18e/0x7f0 [ 514.874765][ C1] ieee80211_iface_work+0x85f/0x12d0 [ 514.874787][ C1] cfg80211_wiphy_work+0x2b8/0x470 [ 514.874806][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 514.874828][ C1] process_scheduled_works+0xae1/0x17b0 [ 514.874863][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.874891][ C1] worker_thread+0x8a0/0xda0 [ 514.874917][ C1] kthread+0x70e/0x8a0 [ 514.874935][ C1] ? __pfx_worker_thread+0x10/0x10 [ 514.874950][ C1] ? __pfx_kthread+0x10/0x10 [ 514.874968][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.874982][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.874997][ C1] ? __pfx_kthread+0x10/0x10 [ 514.875015][ C1] ret_from_fork+0x439/0x7d0 [ 514.875030][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 514.875047][ C1] ? __switch_to_asm+0x39/0x70 [ 514.875064][ C1] ? __switch_to_asm+0x33/0x70 [ 514.875080][ C1] ? __pfx_kthread+0x10/0x10 [ 514.875097][ C1] ret_from_fork_asm+0x1a/0x30 [ 514.875123][ C1] [ 514.875655][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 515.479712][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 515.488827][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 515.498886][ T31] Call Trace: [ 515.502177][ T31] [ 515.505121][ T31] dump_stack_lvl+0x99/0x250 [ 515.509733][ T31] ? __asan_memcpy+0x40/0x70 [ 515.514413][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.519615][ T31] ? __pfx__printk+0x10/0x10 [ 515.524229][ T31] vpanic+0x281/0x750 [ 515.528220][ T31] ? __pfx_vpanic+0x10/0x10 [ 515.532813][ T31] ? preempt_schedule+0xae/0xc0 [ 515.537666][ T31] ? preempt_schedule_common+0x83/0xd0 [ 515.543164][ T31] panic+0xb9/0xc0 [ 515.546888][ T31] ? __pfx_panic+0x10/0x10 [ 515.551315][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 515.556729][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 515.562894][ T31] watchdog+0xfd2/0xfe0 [ 515.567067][ T31] ? watchdog+0x1de/0xfe0 [ 515.571406][ T31] kthread+0x70e/0x8a0 [ 515.575482][ T31] ? __pfx_watchdog+0x10/0x10 [ 515.580166][ T31] ? __pfx_kthread+0x10/0x10 [ 515.584763][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.589967][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.595169][ T31] ? __pfx_kthread+0x10/0x10 [ 515.599767][ T31] ret_from_fork+0x439/0x7d0 [ 515.604362][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 515.609480][ T31] ? __switch_to_asm+0x39/0x70 [ 515.614251][ T31] ? __switch_to_asm+0x33/0x70 [ 515.619019][ T31] ? __pfx_kthread+0x10/0x10 [ 515.623620][ T31] ret_from_fork_asm+0x1a/0x30 [ 515.628410][ T31] [ 515.631711][ T31] Kernel Offset: disabled [ 515.636066][ T31] Rebooting in 86400 seconds..