last executing test programs: 25.469463571s ago: executing program 0 (id=2577): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2194037642dfcca0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.60317586s ago: executing program 3 (id=2586): socket(0x10, 0x3, 0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000180)=ANY=[@ANYBLOB="448cfca74586e1995eb0dcfb33b135f59170dd0008", @ANYRES16=r1, @ANYBLOB="070600000000000000002d00000005002b0001000000060006000100000008002f00050000000c0005000201aaaaaaaaaaaa0a0001007770616e30000000"], 0x44}}, 0x20048840) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000240)={'mangle\x00', 0x0, [0x4, 0x38a4, 0x5cc6, 0x2, 0x6]}, &(0x7f0000000300)=0x54) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)='i', 0x1}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000700)="e2ad", 0x2, 0x40000, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="b82c", 0xffa0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="0256", 0x2}], 0x1}}], 0x2, 0x4000080) close(0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) 23.924098407s ago: executing program 0 (id=2593): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000001400)=0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008c00)=@delchain={0x1c, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020114}, 0x40000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r6, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000080", @ANYRES16=r8, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c000500000000000000000008000200", @ANYRES32=r10, @ANYBLOB], 0x38}, 0x4, 0x700000000000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r14, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) sendmsg$inet(r11, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001080)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x15, 0x0, 0x7, [0x5]}, @timestamp_addr={0x44, 0xc, 0x98, 0x1, 0x0, [{@empty, 0x6}]}, @lsrr={0x83, 0xf, 0x12, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @ssrr={0x89, 0x7, 0xe9, [@broadcast]}]}}}], 0x40}, 0x0) recvmsg$unix(r12, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r15 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r15, 0x0, 0x484, &(0x7f0000000200)=""/35, &(0x7f0000000100)=0x23) 21.471736762s ago: executing program 1 (id=2594): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x8c, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfe}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x2b, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x5c, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}]}], {0x14}}, 0x84}}, 0x24040884) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x4004050) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r8, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a80000000000002ebffffff08001e0001000000080004"], 0x2c}}, 0x0) 21.470542763s ago: executing program 2 (id=2595): mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) r3 = socket$inet_sctp(0x2, 0x1, 0x84) close(r3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010800000000000001000500000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000012000300686173683a6e65742c706f7274000000050005000a"], 0x58}, 0x1, 0x0, 0x0, 0x40280d5}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x20000080) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x1412, 0x1, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002", 0x18) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000280)={{0x2, 0x4e21, @multicast2}, {0x0, @local}, 0x40, {0x2, 0x4e22, @local}, 'tunl0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r10, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x60}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="020a0b030500000025bd7000fcdbdf2503001700db0000000a00"], 0x28}}, 0x20008004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 21.419440211s ago: executing program 3 (id=2597): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="500091fbe6fe9ab8000002060300008000000000000000000000050005000a00000005000100070000c9fd0004000000000900e7306f637a310000000016000300686173683a6e65742c706f72592c6e65742000005fb936ad35c4ff7decb531a509ac2127b262d338b64b5bd28107eae3e9f29d5e99016236d0b26ad84c9043ff60748bf22c0306b0ac85f4dd9301268d75ab8182ad4a076063fad93715725d562f29fcfacc8baada7362d4c3164a83e8dbe67931f1ab875c82063c6cce0016135af88b32a9b00c7a20d32dcab378d9299aba64"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2b, 0x80801, 0x1) shutdown(r3, 0x7ffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9ad1", 0x2}], 0x1}}], 0x2, 0x4000840) shutdown(r7, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0xffffffffffffff6e, 0x30, 0xb, 0x70bd27, 0x25df5bfc, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x2000, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) socket$nl_crypto(0x10, 0x3, 0x15) 21.172018038s ago: executing program 2 (id=2598): socket(0x2c, 0x5, 0x7) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x4008845) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000400087012cbd7000fadbdf25037c00000400c280240001802000108014000c000000000000010000000000000000000108000b8004000000", @ANYRESOCT=r3], 0x40}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) socket(0x31, 0x4, 0xff) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffffffffffead) 21.151876588s ago: executing program 1 (id=2599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000000000000850000007b00000018010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000002ffffffb702000008000000b703000007030000850000001700000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x27, &(0x7f00000000c0)="c1188e19b95d02ff4284860186dd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x27) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)='\t', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xa}}], 0x1, 0x4044805) sendmmsg$inet(r1, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f00000006c0)="3118944f0cb6f5fb3d9f8e69cdadb4df2f504369308c98d390766f45921b80c820b1fd7262cc3b56161fe78a55f37aee3d4449745edd72a0a9c090089e2fe9459f29e19c019a2e4e141219f7b418fea8eda14377d4b886ce240bb9e37138663886c1b21b139718449675f4a936", 0x6d}, {&(0x7f0000002040)="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", 0xbd5}], 0x2}}], 0x1, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001dc0), 0x0, 0x2002, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x14219, 0x4) 21.090217137s ago: executing program 0 (id=2601): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000080)=@hopopts={0x3a}, 0x8) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c0da80a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 20.948882375s ago: executing program 3 (id=2602): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000300), 0x4) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1}, 0x32c1}, {{0x0, 0x0, 0x0}, 0x80000001}], 0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)="da", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1daf", 0x2}], 0x1}}], 0x2, 0x4040081) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x8, 0x70bd29, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 20.946055971s ago: executing program 1 (id=2603): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="02"], 0x10}, 0x1b}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x84, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:fonts_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x84}, 0x1, 0x0, 0x0, 0xc000}, 0x4040004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x3973f000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r5, 0x100000000) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, 0x0, &(0x7f00000002c0)) r7 = openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) ioctl$XFS_IOC_FSBULKSTAT(r8, 0xc0205865, &(0x7f0000000900)={&(0x7f0000000400)=0x17dc, 0x5, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], &(0x7f00000008c0)}) openat$cgroup_int(r7, &(0x7f0000000380)='memory.swap.high\x00', 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0270000000000000240012800b000100627269646765000014000280050025000000000005002600010000001da4d8d01d569125f6e7c1e4377fd694d6f94d9bb54167bf36525ebbae745b252ae434ba31234e89c89931a206454a4409d8796d8d8e1e2d501b2207f30c91e74539670122ef7f3cbb1b34d12b2c8a18c3a1a6b312db5e49b5626f99d6ace8b9095fc15ddee4412156fd25817812d27cd5ac7e15003728fa2c94770bb74248fe4a876511b4120b3f56b95b96928b7bb4769842613efa375861e46f4bffad7e18b06eeeb36eee614c5be493b3452c1ad4fcbf685a6d1a31a3d5425196047a27"], 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x410) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r10, &(0x7f0000000940)={0x1, @set_reserved_lt_addr={{0xc74, 0x1}, {0x6}}}, 0x5) 20.835946007s ago: executing program 0 (id=2604): syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e960272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f0000000100)="051a0000", 0x4}, {&(0x7f00000001c0)="73ec500447db", 0x6}], 0x3) write$cgroup_int(r0, &(0x7f0000000200)=0x80000000a, 0xffffffb4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000900)=ANY=[@ANYRESOCT=r1], &(0x7f0000000500)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x80000001}, @mss={0x2, 0x8}, @mss={0x2, 0x8000}, @window={0x3, 0xe978, 0x46}, @sack_perm, @mss={0x2, 0x401}], 0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[], 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x40, 0x342, @mcast2, 0x1000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f00000004c0)=@ccm_128={{0x304}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "0100009800"}, 0x28) r6 = socket(0x1e, 0x5, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x2}}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ec0)="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", 0x2dd}], 0x1}, 0x24004000) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1b, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRESDEC=r3, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x2b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r8, 0xfffff000, 0xe, 0x0, &(0x7f0000000100)="5c250ed6087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0xde, 0x0, &(0x7f0000000540)="b9ff0300600d698cff9e14f007000000000000007d2b3593c8a4884de7f9c764553385a2ac082111e0dff540b32dcac9844ffeb92ab41153596df7f19200815f8b4999b08f375a29e420aa40fcf3ff1fe1976138c6cffcf72dc67914feddf17d00a363225f91f1c79842f45f24f199bc1ca4b6a75557e8fc7c9d58095baabb33b89360ace9cd6781ddb9007eca0bd1d5e7d5187d3745b10e208cafc768eeb5d5b64ece1d082f5506eb02953fe1e2767a91f55ae127e041d7d3375952e02510119963e589e850a140d519c0323f3b9c3c0062cd5a87cabfb26433494ea588", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x50) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8051}, 0x8800) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 20.835048737s ago: executing program 2 (id=2605): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @multicast1}}, 0x0, 0x0, 0x401d, 0x0, "a576021707ddd99cc0c8edac719d315e8fb32c1d1a3174515cdb1cafba50ce7b1252146c091455dbdfb1cd4b24fceb984b1e83615058f0b5435e6a1f1b25686f682add00"}, 0xd8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x5c, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0x4, 0xa}, {0x5, 0xffe0}}, [{0x8, 0xb, 0xf18}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000010140)=ANY=[@ANYBLOB="4401000010000100000000000000000000000000000000000000ffff7f000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000006c000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="50af"], 0x144}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newnexthop={0x44, 0x68, 0x400, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x5, 0x0, 0x2}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x40}}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000891}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x2f, 0x20, 0x70bd2d, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4024046}, 0x4000000) socket(0x10, 0x803, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000b0000000236c5b301b2fb0c7400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001708001504008680080006"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 20.619888219s ago: executing program 1 (id=2606): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100d0ff00000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 20.460881636s ago: executing program 2 (id=2608): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0xa0}}, 0x48011) pipe(0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000003b00)) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd09000000df252300000005002000010000000c0005000201aaaaaaaa9caa0904000000687932000000000500200000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r8, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e24, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES8=r7], 0x30}, 0x4004000) close(r6) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c884}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd8, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crontab_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x8054}, 0x200488c4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000850) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r11, &(0x7f00000002c0)="0503", 0x2, 0x4, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x31, r4, 0x3bcf5000) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) 20.332618958s ago: executing program 1 (id=2609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)={@val={0x800e}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x2a, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x16, 0x0, @opaque="38f1fb3b3bcd2265f1e800573a4c"}}}}}}, 0x3c) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xffffffffffffff79, 0x10, 0xffffff1f, 0xffffffff, 0x1, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x30, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1d, 0x100, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x0, r6, 0x20, 0x16, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) r7 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000003c40)=0x8, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) 19.894214451s ago: executing program 3 (id=2610): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, &(0x7f0000000000)={0xe656, 0x2, 0x7, 0x2, 0x1}) r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000140)={0x0, 0x10, [0x7f, 0x9, 0x4, 0x3], &(0x7f0000000100)=[0x0, 0x0]}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000180)=0xf28, 0x4) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x3e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x63, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x5, 0x5, 0xc, 0x6}, {0x3, 0x5, 0x4, 0x5}, {0x5, 0x4, 0xa, 0x2}], 0x10, 0x6}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)={r2, r3}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000700)={0x10, 0x0, 0x25dfdbfc, 0x800}, 0xc) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000840)={0x2, 0x6876, 0xe0, &(0x7f0000000740)=""/224}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000880)={0x236, {{0xa, 0x4e21, 0x4, @mcast1, 0x2}}, {{0xa, 0x4e23, 0x71, @loopback, 0xf8}}}, 0x108) r6 = socket(0x7, 0x5, 0x7) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="1e65418791001665265a7cf8bbdc", 0xe) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r6, 0x312d000) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000a00)={0x2, 0x80000000, 0x6, 0x7, 0x5, 0x0, [{0x3, 0x3, 0x7, '\x00', 0xb0b}, {0x7f, 0x3, 0x5, '\x00', 0x808}, {0x0, 0x1000, 0x8000000000000000, '\x00', 0x1}, {0xfffffffffffffff8, 0xc1c, 0xb7, '\x00', 0x200}, {0xffffffff, 0x9, 0x9, '\x00', 0x2000}]}) accept4$packet(r2, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b80)=0x14, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r6) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x20, r7, 0x84, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x24000850) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000d00)) r8 = accept(r2, &(0x7f0000000d40)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000dc0)=0x80) sendmsg$nl_xfrm(r8, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)=@getspdinfo={0x14, 0x25, 0x20, 0x70bd29, 0x25dfdbfc, 0x401, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4c800) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000f00)) unshare(0x4000100) 19.740871939s ago: executing program 3 (id=2612): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x24040080) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(morus640)\x00'}, 0x58) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000200)=0x2, 0x4) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x4c, "120735e7a16034e804fe0d8a0ffbc68220e546081c563c03a9a2973935ef080259ba724a43cabdf67db353ca97845179decf6bec520b31c1d4ca956ce6dd55b87827e22b25f3b4ba24c4f212"}, &(0x7f00000002c0)=0x54) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r4, 0x4}, &(0x7f0000000340)=0x8) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x4, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = socket$inet(0x2, 0x80000, 0x63) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0x6}}, 0x1000, 0x3}, &(0x7f0000000580)=0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000005c0)={r7, 0xd, 0x0, 0x7fff, 0xffffffff, 0x800}, &(0x7f0000000600)=0x14) (async) socket$kcm(0x29, 0x7, 0x0) r8 = accept(r1, &(0x7f0000000640)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f00000006c0)=0x80) getsockname$packet(r8, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000780)={r4}, &(0x7f00000007c0)=0x8) (async) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000008c0)={'veth0_to_batadv\x00', &(0x7f0000000880)=@ethtool_sset_info={0x37, 0x9, 0x4, [0x3, 0x101]}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1d0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x1d0}}, 0x20000) (async, rerun: 64) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000bc0)={0x1f, 0x1, 0x3}, 0x6) (rerun: 64) getsockname$packet(r10, &(0x7f0000000c00), &(0x7f0000000c40)=0x14) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000c80)="8a43421216d20fbc72e468615a7ba537a494306733967a9bf1b7bc266773f7ed99cc0f6bb16f90d02eed3fa77bf1cfdc35c72e4a2ada573a379f0479747b982b2b2053cbf58c9c01aa0c964e21b79231bd31a1f5194d6a5a0b52b17340bc3823c07ce3507abad27bac5d577687d16ba03e50253f66ef1526d917c67a5661921a3f1d8e44aff53b6fb3a6a121eff0371a028e0b4c5ead8cad335933e6008825238bdfbe81745bcb00155adfb93dfec66f62f3fbdae5ecda9a4ca5e864d195d98735d4531f44bf88200ec6c01638a0bb3b346b37865585e04a817fb4b41ae663bd9740", 0xe2) (async) bind$alg(r10, &(0x7f0000000d80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f0000000e00)={r9, 0x1, 0x6, @broadcast}, 0x10) (async) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r11, &(0x7f00000015c0)=[{{&(0x7f0000000e40)=@sco={0x1f, @none}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000ec0)="7ad32511c6a46c9dbc3735974399ae77f489663a9afa073b2e12f53d4768b39d9fe568f290c198f68fe97eaeb4ced35b7657aced2f6549182d1f8def1f804d357948b356a5438dc003b3b0c113e730b46094e5736b87513a0d54d22eefc3b0da31882748ae860a76be5f804da57983dc27c84eea913c01e65b823edfbc14df95b31d795db6843279099b2b98e2528a56737dccddd7444f53cfee42148b343f85", 0xa0}], 0x1, &(0x7f0000000fc0)=[{0x60, 0x117, 0x8, "444945d288fef89e4719fc3e2c4bd409082f2d4c0822febea991a356f86c373f62b552a5f7e62b0c4116b4b8d7d8883bcb96e85c183f33a4c6a07e5e9ae2d1b6b4bab4711b70006dd0bf7b49a28c"}, {0x88, 0x109, 0x1, "7d28ac2a0d943ea05be4aff1970e0879a0787bdca079d5f437a2e2a1d5b242cbe73f03409d2b14117a3410c4f4b472a3233ad2fb9480c38b453fdeb80769d59dedad5d86c186991b3eec366e1ac99d30278c121f6231a3b85fa19f3b61643b6386023b9ffc0847fee87935029cc347b13597122b75"}, {0x68, 0x10c, 0x40, "b4cd37b3caf454ae42e58da4f42ea804a05b199c99dc101c1d342c62448ea066dd4702eaea66c2783512a0d524499cd9d8823c6162134d9048224a895024ca53383855bd950ce2f6ac9b6f35128e9dc4b22287"}, {0x108, 0x108, 0x6, "9da3596bf1c57b7acba9bc2b3ca13cf7029e286dc36a47c7396f6b2bcf0cbd021b96739d67513fdef508b99619bff1d6a10be38b20e227477eb7524cac75e4d268505e2ffd8f549be6e2dd9c7fc52486303e79da047b8fff75f26820b591713caf6607fa3a9512124834bf363aed5ec1a962fce01bade807dad65b6b779198f779e765bce49dcee227935d5c3d411e15c0df44ad9df18596ab46d5ea3c9bdea5ec97d8795ce8339bbb37fca6afaba6a6aeff8d83692ecb993d5fdcff7df2e276221d6cb47a8ca2c4e28b972693f38ce3913419e9ba6ecb38d4f7fe7a1c6e22140306b0b86d365adac0cad1c3c12be5b4e8071d"}, {0x38, 0x3a, 0x60000000, "1ad20438f6ea2b38d7479a5e71248b64407ba8af3a0a4d03c9a15a73559e7a234e733275f39794"}, {0xe0, 0xe208895ba87f199f, 0x200, "b2001da4e4d6db33c6d82f73a9ae7a931f57b6ca8360bdebf6124df3436c4b2115e3b844c5b757e34a6d3f416d29bdb763a21700e4843d03de9ddd3d9c4a44a4a8561e4503a9563d38d6b3683b622337f117bd908add8d192753b795d894a5fb763619ad92d6db05008078141aaa41a3cff3dcd03d9d151c73d8e9f864677231f4b8491fa1b684d42dce3bbdc508dfa346e30acd07faa29b40867f2e81732b656a9df4c2a461a6d2495b2b05b7596b769318a42ce1a8761b6b39346b9a6d302d1ea3569beb94d9b979b6b618d2"}], 0x370}}, {{&(0x7f0000001340)=@l2={0x1f, 0x5, @any, 0x5}, 0x80, &(0x7f0000001540)=[{&(0x7f00000013c0)="90c63c55f47cc6c1b5b22bca1ec2ab9a25710f7cffb4fb497ae717fd26f56fd755aae161a390745fb1d5df4ec00507bdb2b0c6cc88ce360d420247722db6a6c83516b00ed6a7d0ad4091e6c6b713db5f330f6f748320eca937430c512a7bceeadf3a53f069d2ea5be05932bde10bf995fc3a0b63ed56f8c789094646ae58d33e050f412fd9c59d3889fe29f3d4f9068bb59475b47885c6a4ff4458231ba84b82dc45300635d2044a26a8cb6f6d6b8aca5b67d676ba0e1a2cfd672704bfbef4cc12a7de560d13d21e76a769d8e84a086bd7ea37be03", 0xd5}, {&(0x7f00000014c0)="40c6979e1913859d3ad8287d61570618da583145a98a07d6f25622918068245c5cc6d2e8bf2519e1dbb326bb21a4feb61b81a98be034bbc09a7251d37b887052a547e744b3d93176d2f9680df61b221d5d7deec7b5942bc9b11675b32465bc5a1499ddfc2c4fb0da472594ed1288399484691c197665ac90f46d", 0x7a}], 0x2, &(0x7f0000001580)}}], 0x2, 0x800) 19.6408866s ago: executing program 0 (id=2613): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 19.451305954s ago: executing program 0 (id=2614): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) 19.370562595s ago: executing program 3 (id=2615): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x320, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x320, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) syz_genetlink_get_family_id$nbd(&(0x7f0000001580), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001800), 0xffffffffffffffff) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000540)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000540)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0x6, 0xd}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0x6, 0xd}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000), 0x4) 19.108268525s ago: executing program 4 (id=2617): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x20, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x28000000) 19.023639877s ago: executing program 1 (id=2618): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x26}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792df", 0x4ef, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_int(r9, 0x1, 0x2b, 0x0, &(0x7f0000000ac0)) 16.832453633s ago: executing program 4 (id=2619): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) 16.740633492s ago: executing program 4 (id=2620): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) recvmmsg(r6, &(0x7f0000001540), 0x2, 0x40012120, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x6, 0x6, 0x0, 0x0, 0x6, 0xbe, &(0x7f00000002c0)=""/190}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) pwritev(r7, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x20}, {0xffffffffffffffff, 0x28c, 0x1, 0x0, 0x2, 0x0, 0x2, 0x5}, {0x7, 0x4}, 0x1000, 0x6e6bbf, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x3, 0xb6, 0x0, 0x8000000, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.026077355s ago: executing program 2 (id=2621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000440000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6, 0x2}, 0x20) 15.97065846s ago: executing program 2 (id=2622): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x6) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) syz_emit_ethernet(0x8e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606dd31800580600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001a1d81c45165e3d55eca5329e5fb78955f933c1c3204d80570c31a8042b020000005a412e8fe4ead33169b276f87216a9a6e5b2185004199c37e670c27333f6fe1ec996151e57bb54729eb637be8b2197", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000c90780000fe0cf9894870669d7821c47113126171cffc515318c1c852cc0ce8dbc955050e0000000100000000fffffffa13129829e5b8831b669841f72541c6efc9102206c6592e7d"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r4], 0x64}, 0x1, 0x0, 0x0, 0xa73cf450a6c5d281}, 0x44000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x74}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r9, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x9212, @mcast2, 0x7}}, 0x24) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd70395cdbdf987000000008000300", @ANYRES32=r11], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r12 = socket(0x2, 0x1, 0x6) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r12, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r12, 0x0, 0x0, 0x2022, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@private0}, &(0x7f0000000180)=0x14) 15.684164493s ago: executing program 4 (id=2623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3ff, r0, 0x4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r0}, 0x38) (async, rerun: 64) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x26, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x6}, @exit, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @func, @ldst={0x1, 0x2, 0x6, 0x3, 0x0, 0xffffffffffffffe0, 0xffffffffffffffff}, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0xbda, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[r0, r0, r0, r0], &(0x7f0000000400)=[{0x1, 0x3, 0x10, 0x1}, {0x0, 0x2, 0xa}, {0x2, 0x1, 0x5, 0x4}, {0x0, 0x1, 0x7, 0x2}, {0x4, 0x1, 0xd, 0x9}, {0x1, 0x2, 0x9, 0x4}, {0x0, 0x5, 0x7, 0x6}], 0x10, 0x4}, 0x94) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wg0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r1, r2, 0x25, 0x2d, @val=@netfilter={0x1, 0x1, 0xae0e}}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 15.647378244s ago: executing program 4 (id=2624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x4000) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x1, &(0x7f00000003c0)=""/208, 0xd0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x379080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYRES64=r4, @ANYRESDEC=r0], &(0x7f0000000180)='syzkaller\x00', 0xaee6, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xae}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4004800, &(0x7f0000000080)={0x11, 0x10, 0x0, 0x1, 0x7f, 0x6, @local}, 0x14) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000600)=@deltclass={0x8b0, 0x29, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xe}, {0xfff2, 0x2}, {0xfff2, 0x10}}, [@c_cbq={{0x8}, {0x86c, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0x7}, 0x10001, 0x8}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x12, 0x2, 0x8, 0x1, 0xa, 0x3, 0x5ad, 0x7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x5, 0x0, 0x0, 0x80, 0x401, 0x6, 0x4048e45a, 0x18000000, 0xfffffff1, 0x400, 0x79f9, 0x10000, 0x2, 0xfffffc6b, 0xbea, 0x8963, 0x1, 0x400, 0x9, 0x0, 0x10001, 0x6, 0xb, 0x79800000, 0xfffffff8, 0x3, 0xfd7, 0x2, 0xb4, 0x4, 0xff, 0xde, 0x7, 0x6a, 0x9, 0x7, 0x5, 0x2, 0x777, 0x6, 0x9, 0x3, 0x5, 0x8001, 0x5, 0x10001, 0x4, 0x3, 0x2, 0x8000, 0x1, 0x3, 0x9, 0x3, 0x0, 0x6, 0x7, 0x0, 0x7, 0x6, 0x5, 0x800, 0x81, 0xffffffff, 0x14000000, 0x3, 0x2, 0x40, 0x1, 0x200, 0x7, 0x2, 0x9, 0x4, 0x4, 0x4cf4899f, 0xffffffff, 0xa95, 0xffff, 0x1, 0x800, 0x80000000, 0x101, 0x469e, 0x2, 0x9, 0x4, 0x8, 0x50d, 0x4, 0x4, 0x10, 0xf, 0x3ff, 0x9, 0x7fffffff, 0x107, 0x6, 0x1, 0x101, 0x3, 0x1000, 0x4, 0xccb, 0x5, 0x9, 0xe, 0x7fff, 0x43e, 0x8, 0x2, 0x80000000, 0x2, 0x20000000, 0x8, 0x7, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x8, 0x7, 0x8, 0x7, 0x2, 0x2, 0x0, 0x0, 0x3, 0x80000000, 0x4, 0x8, 0x1d, 0x100, 0x1, 0x9, 0x8, 0x92cd, 0x9, 0x9, 0x1, 0x4, 0xa, 0x1, 0xfff, 0xc1, 0x100, 0xda5, 0x9, 0xfffffffd, 0x76b, 0x8, 0x2, 0x8, 0xc, 0x5, 0x8, 0x4, 0xffff, 0x10001, 0x56c, 0x0, 0x0, 0xc000000, 0x3, 0x7, 0x80000000, 0x400, 0x1030e26a, 0x2, 0x6, 0x1000, 0x91, 0x0, 0x4, 0x6, 0x1a, 0x7, 0xfffffffb, 0xfffffff7, 0xfffffffd, 0x1, 0x1, 0xdc5b, 0x7, 0xfffffffd, 0x4, 0xfffffff9, 0x9, 0x2, 0x7, 0x1, 0x8, 0xa, 0x401, 0x7f, 0xffffffff, 0xb7fe, 0xb5, 0x28, 0x1, 0x9, 0x4, 0x8, 0xcf1, 0x3, 0x6, 0x1159, 0x6, 0x10, 0xd, 0x3, 0x8, 0x3, 0x4, 0x0, 0x3, 0xffffffff, 0x9, 0xa, 0x5, 0xe, 0x7, 0x7, 0x2, 0x401, 0xfff, 0x1, 0x7f, 0x3, 0x10000, 0x401, 0x483, 0x0, 0x2, 0xed, 0x0, 0x8, 0x9, 0x9, 0x8, 0x7f, 0xffffffff, 0xbc98, 0x9, 0x2, 0x1, 0x6, 0xa28, 0x3, 0x1, 0x0, 0x1, 0x1ff, 0x3]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x0, 0x1, 0x8, 0x10, 0xfae, 0x9, 0x411}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xfffffff7, 0x0, 0x5, 0x3ff, 0x10, 0x0, 0xac1, 0x7, 0x1ff, 0x40, 0x2, 0xe2e, 0xfffffff7, 0x3ff, 0x3, 0x2, 0xd, 0xffff, 0x40, 0x2c, 0x5, 0x1, 0xf5f, 0x7fffffff, 0x3, 0xd, 0x3, 0x8, 0x8, 0x0, 0x10, 0xff0, 0x4, 0x9, 0xfff, 0x67, 0x5, 0x0, 0x1, 0x1, 0x7, 0x92, 0xb, 0x94a, 0xfffffef3, 0x8ff, 0x6, 0x6, 0x8, 0x4, 0x0, 0xe52, 0x200, 0xffff, 0x4, 0x9e8, 0x7, 0xc, 0x2, 0x8, 0x7f, 0x6, 0x2, 0xa3c, 0x2, 0xa, 0x0, 0xfffffffe, 0x80000000, 0x4, 0x9, 0x4, 0x77, 0x8000, 0x5, 0x11, 0xdc3, 0x8001, 0xfc, 0x8, 0x0, 0x5, 0x7665, 0xff, 0x7, 0x7, 0x6, 0x81, 0x1d, 0x25, 0x8, 0x1000, 0x6, 0x10001, 0x1, 0x8, 0xfffffff4, 0x7, 0x7ff, 0xd, 0x9, 0x3, 0x101, 0x8, 0x80000001, 0x7fffffff, 0x2, 0x8001, 0x3, 0x2ff1, 0x5, 0x401, 0x2, 0x40, 0x1, 0xffff, 0x6, 0x4, 0x4, 0x2, 0x3ff, 0x1000, 0x6, 0x1, 0x5, 0x5290, 0xff, 0xd3, 0xfffff801, 0x2, 0x6, 0x9, 0x1ff, 0x4, 0x1ff, 0xd, 0xff, 0x2, 0x1, 0x9, 0x2, 0x3, 0x3, 0x8, 0x9, 0x8, 0xfffffe00, 0x8, 0x1, 0x9, 0x3b3c, 0xe14e, 0x9, 0x1, 0xd9, 0x8, 0x5, 0x3, 0xfffffffb, 0x1800000, 0xfffffffa, 0x9, 0x0, 0xc, 0x7, 0x9, 0x6, 0xc3ee, 0x6, 0x2, 0x3, 0x9, 0xc3a, 0x2, 0x4, 0x7, 0xdeb8, 0x2, 0x0, 0x180, 0x4, 0x0, 0x7, 0x3, 0xfffffffb, 0x7, 0x6, 0x2, 0xb73, 0x2, 0x5, 0x6, 0x2, 0x2, 0x8001, 0x7fff, 0xa8, 0x9, 0x2, 0x4, 0xf, 0x8001, 0x9, 0xfffffff8, 0x4, 0x6, 0x0, 0x8, 0x4, 0x1, 0xb, 0x2, 0x8, 0x5, 0x2, 0xdf73, 0x10, 0xe3, 0xff, 0x3, 0x5, 0xb2, 0x9, 0x5, 0x7, 0x2, 0x400, 0x8, 0x1, 0x3ff, 0x14d, 0x5, 0xb70, 0x8, 0x1000, 0x8000, 0x1, 0x80000000, 0xffffffff, 0xd121, 0xfffffc71, 0x800, 0x1000, 0x0, 0x2, 0x5, 0x8000, 0x5, 0x3, 0x6a, 0x9, 0x101, 0x7, 0x401, 0x7, 0x1]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xd, 0x2, 0x6, 0xff, 0x15, 0x100}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xff, 0x0, 0x1, 0x3, 0x6}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x9}}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x4000}, 0x810) listen(r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r7, 0x0, 0x40000) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40840) 15.492479573s ago: executing program 4 (id=2625): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r7) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r8, @ANYRES64=r3, @ANYRESHEX=r5], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45010) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="100028bd7000fbdbdf250300000014000200fe880000000000000000000000000101140002000000000000000000000000000000000005000100000000001400060067726530000000000000000000000000080005007f000001080005007f00000105000100000000002700070073797374656d5f753a6f626a6563745f723a6d7472725f6465766963655f743a73300000"], 0x98}, 0x1, 0x0, 0x0, 0x4040080}, 0x1) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r6) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r10, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='NLBL_UNLBL\x00', 0x24000, &(0x7f0000000040)={@align, {0x81, 0x51d6, 0x4, 0xffffffffffff7c7f}}, 0x4, 0x0, &(0x7f00000000c0)=0x1}, {[0x3, 0x2, 0xffffffff, 0x6]}, 0x2, 0x17, &(0x7f0000000100)=""/23}) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x14, r9, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) 4.01850008s ago: executing program 32 (id=2614): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) 3.989486357s ago: executing program 33 (id=2615): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x320, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001040)=@filter={'filter\x00', 0x42, 0x4, 0x3b8, 0xffffffff, 0x238, 0x320, 0x98, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x6c}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x2, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x80000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8000, 0x3ff, 0x89f0, 0xfeb9, 0x3f, 0x7f, 0x3}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) syz_genetlink_get_family_id$nbd(&(0x7f0000001580), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001800), 0xffffffffffffffff) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000540)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000540)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0x6, 0xd}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x13, 0x6, 0xd}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000), 0x4) 3.003289481s ago: executing program 34 (id=2618): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x26}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792df", 0x4ef, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_int(r9, 0x1, 0x2b, 0x0, &(0x7f0000000ac0)) 504.911849ms ago: executing program 35 (id=2622): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x6) listen(r2, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) syz_emit_ethernet(0x8e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606dd31800580600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001a1d81c45165e3d55eca5329e5fb78955f933c1c3204d80570c31a8042b020000005a412e8fe4ead33169b276f87216a9a6e5b2185004199c37e670c27333f6fe1ec996151e57bb54729eb637be8b2197", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000c90780000fe0cf9894870669d7821c47113126171cffc515318c1c852cc0ce8dbc955050e0000000100000000fffffffa13129829e5b8831b669841f72541c6efc9102206c6592e7d"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r4], 0x64}, 0x1, 0x0, 0x0, 0xa73cf450a6c5d281}, 0x44000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x74}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r9, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x9212, @mcast2, 0x7}}, 0x24) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd70395cdbdf987000000008000300", @ANYRES32=r11], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r12 = socket(0x2, 0x1, 0x6) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r12, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) recvfrom$l2tp6(r12, 0x0, 0x0, 0x2022, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@private0}, &(0x7f0000000180)=0x14) 0s ago: executing program 36 (id=2625): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r7) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r8, @ANYRES64=r3, @ANYRESHEX=r5], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45010) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="100028bd7000fbdbdf250300000014000200fe880000000000000000000000000101140002000000000000000000000000000000000005000100000000001400060067726530000000000000000000000000080005007f000001080005007f00000105000100000000002700070073797374656d5f753a6f626a6563745f723a6d7472725f6465766963655f743a73300000"], 0x98}, 0x1, 0x0, 0x0, 0x4040080}, 0x1) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r6) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r10, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000000)='NLBL_UNLBL\x00', 0x24000, &(0x7f0000000040)={@align, {0x81, 0x51d6, 0x4, 0xffffffffffff7c7f}}, 0x4, 0x0, &(0x7f00000000c0)=0x1}, {[0x3, 0x2, 0xffffffff, 0x6]}, 0x2, 0x17, &(0x7f0000000100)=""/23}) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x14, r9, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): terface the new active one [ 297.983064][T12287] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 298.146700][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 298.177109][T12309] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1614'. [ 298.683265][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 298.721097][T12326] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 299.691346][T12358] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 299.721877][T12358] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1627'. [ 299.747801][T12358] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1627'. [ 299.770362][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1627'. [ 299.800661][T12358] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 299.853123][T12358] netlink: 'syz.2.1627': attribute type 8 has an invalid length. [ 299.905848][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1627'. [ 300.565291][T12374] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 301.658197][T10968] tipc: Resetting bearer [ 302.187839][T12426] __nla_validate_parse: 5 callbacks suppressed [ 302.187883][T12426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1639'. [ 302.337540][ T6023] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.361421][ T6023] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.400527][ T6023] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.423931][ T6023] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.771466][T12439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1644'. [ 303.110174][T12448] dummy0: left allmulticast mode [ 303.116453][T12450] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1647'. [ 303.138226][T12448] dummy0: left promiscuous mode [ 303.155044][T12448] bridge0: port 3(dummy0) entered disabled state [ 303.208878][T12448] bridge_slave_0: left allmulticast mode [ 303.227187][T12448] bridge_slave_0: left promiscuous mode [ 303.255842][T12448] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.317014][T12448] bridge_slave_1: left allmulticast mode [ 303.361540][T12448] bridge_slave_1: left promiscuous mode [ 303.394516][T12448] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.464311][T12448] bond0: (slave bond_slave_0): Releasing backup interface [ 303.507817][T12448] bond0: (slave bond_slave_1): Releasing backup interface [ 304.283732][T12448] team0: Port device team_slave_1 removed [ 304.293451][T12448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.313409][T12448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.351125][T12448] team0: Port device veth1_to_hsr removed [ 304.365819][T12448] bond0: (slave geneve1): Releasing backup interface [ 304.424650][T12448] bond2: (slave veth5): Releasing active interface [ 304.445102][T12455] tipc: Enabled bearer , priority 0 [ 304.992693][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1654'. [ 305.307922][T12487] FAULT_INJECTION: forcing a failure. [ 305.307922][T12487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.411767][T12487] CPU: 0 UID: 0 PID: 12487 Comm: syz.3.1656 Not tainted syzkaller #0 PREEMPT(full) [ 305.411815][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.411835][T12487] Call Trace: [ 305.411845][T12487] [ 305.411854][T12487] dump_stack_lvl+0xe8/0x150 [ 305.411886][T12487] should_fail_ex+0x40c/0x560 [ 305.411928][T12487] _copy_from_user+0x2d/0xb0 [ 305.411955][T12487] ___sys_recvmsg+0x173/0x590 [ 305.411988][T12487] ? __pfx____sys_recvmsg+0x10/0x10 [ 305.412017][T12487] ? __fget_files+0x2a/0x420 [ 305.412078][T12487] do_recvmmsg+0x329/0x810 [ 305.412113][T12487] ? __pfx_do_recvmmsg+0x10/0x10 [ 305.412151][T12487] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 305.412196][T12487] __x64_sys_recvmmsg+0x198/0x250 [ 305.412225][T12487] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 305.412261][T12487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.412286][T12487] do_syscall_64+0x174/0x580 [ 305.412308][T12487] ? trace_irq_disable+0x3b/0x140 [ 305.412342][T12487] ? clear_bhb_loop+0x40/0x90 [ 305.412370][T12487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.412391][T12487] RIP: 0033:0x7f9e0619ce59 [ 305.412413][T12487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.412432][T12487] RSP: 002b:00007f9e06f7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 305.412456][T12487] RAX: ffffffffffffffda RBX: 00007f9e06415fa0 RCX: 00007f9e0619ce59 [ 305.412472][T12487] RDX: 0000000000000002 RSI: 0000200000000d80 RDI: 0000000000000003 [ 305.412487][T12487] RBP: 00007f9e06f7f090 R08: 0000000000000000 R09: 0000000000000000 [ 305.412501][T12487] R10: 0000000000002042 R11: 0000000000000246 R12: 0000000000000001 [ 305.412513][T12487] R13: 00007f9e06416038 R14: 00007f9e06415fa0 R15: 00007fff44a719b8 [ 305.412548][T12487] [ 305.798863][ T5746] tipc: Node number set to 2912615346 [ 306.828090][T12519] tipc: Enabling of bearer rejected, failed to enable media [ 307.627492][T12536] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.972586][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1667'. [ 308.119647][T12549] vlan3: entered promiscuous mode [ 308.130488][T12550] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1667'. [ 308.383799][T12557] veth1: Caught tx_queue_len zero misconfig [ 308.390071][T12561] netlink: 'syz.4.1669': attribute type 2 has an invalid length. [ 308.390144][T12561] netlink: 'syz.4.1669': attribute type 1 has an invalid length. [ 308.390160][T12561] netlink: 'syz.4.1669': attribute type 2 has an invalid length. [ 308.390176][T12561] netlink: 'syz.4.1669': attribute type 1 has an invalid length. [ 308.390191][T12561] netlink: 'syz.4.1669': attribute type 2 has an invalid length. [ 308.835715][T12566] netlink: 'syz.3.1670': attribute type 1 has an invalid length. [ 308.915235][ T5650] Bluetooth: hci4: command 0x0405 tx timeout [ 309.143901][T12566] bond4: entered promiscuous mode [ 309.150030][T12566] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.305966][T12574] syzkaller0: entered promiscuous mode [ 309.311766][T12574] syzkaller0: entered allmulticast mode [ 309.334471][T12564] vlan4: entered allmulticast mode [ 309.339944][T12564] bond4: entered allmulticast mode [ 309.431001][T12569] bond4: (slave bridge1): making interface the new active one [ 309.443813][T12569] bridge1: entered promiscuous mode [ 309.449412][T12569] bridge1: entered allmulticast mode [ 309.459778][T12569] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 313.075005][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1680'. [ 313.297767][T12622] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1681'. [ 313.437121][T12617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.847515][T12617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.991607][T12627] netlink: 'syz.2.1677': attribute type 4 has an invalid length. [ 314.126208][T12627] netlink: 5352 bytes leftover after parsing attributes in process `syz.2.1677'. [ 314.232487][T12617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.600931][T12617] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.057074][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.479115][ T973] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.640985][ T973] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.839885][ T973] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.804833][T12692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1702'. [ 318.285987][T12732] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1716'. [ 318.373953][T12740] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1715'. [ 318.960115][T12761] netlink: 'syz.2.1720': attribute type 21 has an invalid length. [ 319.026384][T12761] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1720'. [ 319.057475][T12762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1720'. [ 319.390801][T12767] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1722'. [ 319.644276][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1725'. [ 319.833832][T12783] ipt_REJECT: ECHOREPLY no longer supported. [ 319.940603][T12788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1726'. [ 320.599597][T12802] lo: Caught tx_queue_len zero misconfig [ 321.845038][T12842] netlink: 'syz.4.1744': attribute type 3 has an invalid length. [ 321.888065][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 321.911980][T12842] netlink: 'syz.4.1744': attribute type 1 has an invalid length. [ 321.975103][T12842] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1744'. [ 321.996832][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 322.485104][T12858] bond3: Unable to set down delay as MII monitoring is disabled [ 322.518371][T12858] bond3 (unregistering): Released all slaves [ 322.982825][T12880] netlink: 'syz.4.1756': attribute type 1 has an invalid length. [ 323.642453][T12902] netlink: 'syz.4.1759': attribute type 2 has an invalid length. [ 323.650794][T12898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.671054][T12898] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.692095][T12898] tipc: Resetting bearer [ 323.700067][T12905] __nla_validate_parse: 3 callbacks suppressed [ 323.700092][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'. [ 323.723128][T12898] tipc: Resetting bearer [ 323.739327][T12898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.987443][T12898] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 324.116426][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 324.154566][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 324.365902][T12915] syzkaller1: entered promiscuous mode [ 324.408354][T12915] syzkaller1: entered allmulticast mode [ 324.436964][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'. [ 324.508504][T12923] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 324.545678][T12922] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 324.575310][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1767'. [ 324.686270][T12934] netlink: 'syz.1.1766': attribute type 13 has an invalid length. [ 324.833594][ T5010] block nbd3: Possible stuck request ffff888026f986c0: control (read@0,1024B). Runtime 150 seconds [ 324.846423][ T5010] block nbd3: Possible stuck request ffff888026f98880: control (read@1024,1024B). Runtime 150 seconds [ 324.860325][ T5010] block nbd3: Possible stuck request ffff888026f98a40: control (read@2048,1024B). Runtime 150 seconds [ 324.873572][ T5010] block nbd3: Possible stuck request ffff888026f98c00: control (read@3072,1024B). Runtime 150 seconds [ 324.873941][T12929] openvswitch: netlink: IP tunnel dst address not specified [ 325.135673][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'. [ 325.160119][T12933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1766'. [ 325.172842][T12947] netlink: 'syz.3.1770': attribute type 13 has an invalid length. [ 325.210838][T12948] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1771'. [ 325.436782][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a97a800: rx timeout, send abort [ 325.949978][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a97a800: abort rx timeout. Force session deactivation [ 326.039671][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 326.316463][T12970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.512346][ T5650] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.370155][T12986] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 327.408176][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1783'. [ 327.422250][T12986] dummy0: left promiscuous mode [ 327.488119][T12993] FAULT_INJECTION: forcing a failure. [ 327.488119][T12993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.510747][T12991] team0: No ports can be present during mode change [ 327.519834][T12993] CPU: 0 UID: 0 PID: 12993 Comm: syz.4.1784 Not tainted syzkaller #0 PREEMPT(full) [ 327.519866][T12993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.519880][T12993] Call Trace: [ 327.519888][T12993] [ 327.519897][T12993] dump_stack_lvl+0xe8/0x150 [ 327.519929][T12993] should_fail_ex+0x40c/0x560 [ 327.519972][T12993] _copy_from_iter+0x1d3/0x1660 [ 327.520000][T12993] ? rcu_is_watching+0x15/0xb0 [ 327.520032][T12993] ? __pfx__copy_from_iter+0x10/0x10 [ 327.520053][T12993] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 327.520095][T12993] ? netlink_sendmsg+0x650/0xb40 [ 327.520129][T12993] ? skb_put+0x112/0x210 [ 327.520154][T12993] netlink_sendmsg+0x6c0/0xb40 [ 327.520190][T12993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.520220][T12993] ? aa_sock_msg_perm+0xf1/0x1b0 [ 327.520255][T12993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 327.520285][T12993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.520324][T12993] ____sys_sendmsg+0x9b9/0xa20 [ 327.520348][T12993] ? __might_fault+0xaf/0x130 [ 327.520385][T12993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.520429][T12993] ? import_iovec+0x73/0xa0 [ 327.520460][T12993] ___sys_sendmsg+0x2a5/0x360 [ 327.520482][T12993] ? __lock_acquire+0x683/0x2cd0 [ 327.520511][T12993] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.520578][T12993] ? __fget_files+0x2a/0x420 [ 327.520605][T12993] ? __fget_files+0x3a2/0x420 [ 327.520645][T12993] __x64_sys_sendmsg+0x1bd/0x2a0 [ 327.520674][T12993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.520710][T12993] ? __pfx_ksys_write+0x10/0x10 [ 327.520753][T12993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.520778][T12993] do_syscall_64+0x174/0x580 [ 327.520801][T12993] ? trace_irq_disable+0x3b/0x140 [ 327.520835][T12993] ? clear_bhb_loop+0x40/0x90 [ 327.520864][T12993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.520886][T12993] RIP: 0033:0x7f3cf6b9ce59 [ 327.520907][T12993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.520927][T12993] RSP: 002b:00007f3cf7a1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.520951][T12993] RAX: ffffffffffffffda RBX: 00007f3cf6e15fa0 RCX: 00007f3cf6b9ce59 [ 327.520968][T12993] RDX: 0000000020000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 327.520983][T12993] RBP: 00007f3cf7a1d090 R08: 0000000000000000 R09: 0000000000000000 [ 327.520997][T12993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.521010][T12993] R13: 00007f3cf6e16038 R14: 00007f3cf6e15fa0 R15: 00007ffeef32aed8 [ 327.521047][T12993] [ 328.224737][T13003] syzkaller0: entered promiscuous mode [ 328.241302][T13003] syzkaller0: entered allmulticast mode [ 328.310506][T13005] tipc: Started in network mode [ 328.349458][T13005] tipc: Node identity be710af9c293, cluster identity 4711 [ 328.375805][T13005] tipc: Enabled bearer , priority 0 [ 328.529496][T13005] tipc: Resetting bearer [ 328.594393][ T5650] Bluetooth: hci0: command 0x0c1a tx timeout [ 328.691178][T13005] tipc: Disabling bearer [ 328.846330][T13023] vlan5: entered allmulticast mode [ 328.910359][T13023] bridge_slave_0: entered allmulticast mode [ 328.935259][T13023] bridge0: port 1(vlan5) entered blocking state [ 328.964086][T13023] bridge0: port 1(vlan5) entered disabled state [ 328.997738][T13023] vlan5: entered promiscuous mode [ 329.011933][T13023] bridge_slave_0: entered promiscuous mode [ 329.108005][T13001] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 329.154683][T13033] __nla_validate_parse: 2 callbacks suppressed [ 329.154745][T13033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1793'. [ 329.415459][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1795'. [ 330.037147][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1797'. [ 330.201855][ T29] audit: type=1107 audit(1781287530.816:2): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 330.604031][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 331.350928][T13094] netlink: 'syz.1.1806': attribute type 4 has an invalid length. [ 331.388295][T13094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1806'. [ 331.406535][T13079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1803'. [ 331.531492][T13094] IPVS: Unknown mcast interface: [ 332.101704][T13105] netlink: 'syz.0.1808': attribute type 2 has an invalid length. [ 332.301272][T13110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1810'. [ 332.675412][T13121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1813'. [ 332.750291][T13116] IPVS: Scheduler module ip_vs_ not found [ 333.014933][T13124] tipc: Started in network mode [ 333.039083][T13127] xt_TCPMSS: Only works on TCP SYN packets [ 333.051681][T13124] tipc: Node identity 0eef83bc3437, cluster identity 4711 [ 333.110241][T13124] tipc: Enabled bearer , priority 0 [ 333.147982][T13128] syzkaller0: entered promiscuous mode [ 333.182576][T13128] syzkaller0: entered allmulticast mode [ 333.226718][T13124] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 333.303955][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1815'. [ 333.370027][T13134] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1815'. [ 333.463179][T13132] tipc: Resetting bearer [ 333.513967][T13133] netlink: 'syz.4.1816': attribute type 3 has an invalid length. [ 333.552607][T13123] tipc: Resetting bearer [ 333.659918][T13135] block nbd4: NBD_DISCONNECT [ 333.678092][T13123] tipc: Disabling bearer [ 334.642054][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1820'. [ 334.747239][T13160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1820'. [ 334.805013][T13155] macvtap0: entered promiscuous mode [ 334.838336][T13155] macvtap0: entered allmulticast mode [ 334.865896][T13155] veth1_vlan: entered allmulticast mode [ 335.012941][T13160] macvtap1: entered promiscuous mode [ 335.055604][T13160] macvtap1: entered allmulticast mode [ 335.149524][T13164] syz_tun: entered allmulticast mode [ 335.170195][T13154] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 335.209785][T13167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1824'. [ 335.260785][T13173] netlink: 'syz.3.1825': attribute type 1 has an invalid length. [ 335.284665][T13173] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1825'. [ 335.439939][T13164] syz_tun: left allmulticast mode [ 336.621519][T13207] team0: entered allmulticast mode [ 336.644060][T13207] team_slave_0: entered allmulticast mode [ 336.672895][T13207] team_slave_1: entered allmulticast mode [ 336.687615][ T7023] IPVS: starting estimator thread 0... [ 336.793439][T13209] IPVS: using max 25 ests per chain, 60000 per kthread [ 336.937823][T13214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1837'. [ 337.229401][T13217] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1838'. [ 337.296733][T13217] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1838'. [ 337.366330][T13217] syz_tun: left promiscuous mode [ 337.479984][T13227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1841'. [ 337.530684][T13217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.607847][T13217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.860238][T13217] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 337.894041][T13220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1839'. [ 338.269112][T13240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.305641][T13239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1845'. [ 338.361354][T13239] erspan0: entered promiscuous mode [ 338.383434][T13239] erspan0: left promiscuous mode [ 338.605691][T13249] vlan3: entered promiscuous mode [ 338.636902][T13249] bridge0: entered promiscuous mode [ 338.709311][T13252] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 339.654364][T13284] __nla_validate_parse: 2 callbacks suppressed [ 339.654420][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1859'. [ 339.681922][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 339.756957][T13286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1860'. [ 340.044108][T13289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.125012][T13289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.379164][T13299] netlink: 840 bytes leftover after parsing attributes in process `syz.2.1862'. [ 340.434077][T13303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1862'. [ 340.517723][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 340.851744][T13303] ip6tnl2: entered allmulticast mode [ 341.925549][T13336] syzkaller0: entered promiscuous mode [ 341.936765][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1875'. [ 341.957565][T13336] syzkaller0: entered allmulticast mode [ 342.080440][T13347] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1875'. [ 342.297232][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1873'. [ 342.751563][T13345] bond3 (unregistering): Released all slaves [ 343.703560][T13387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1886'. [ 343.731509][T13387] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 343.998657][T13392] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 344.130950][T13398] hsr0: entered promiscuous mode [ 344.642113][T13400] syzkaller0: entered promiscuous mode [ 344.670558][T13400] syzkaller0: entered allmulticast mode [ 344.757281][T13397] hsr0: left promiscuous mode [ 345.591614][T13431] __nla_validate_parse: 1 callbacks suppressed [ 345.591638][T13431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1896'. [ 345.911741][T13438] FAULT_INJECTION: forcing a failure. [ 345.911741][T13438] name failslab, interval 1, probability 0, space 0, times 0 [ 345.933296][T13438] CPU: 1 UID: 0 PID: 13438 Comm: syz.0.1897 Not tainted syzkaller #0 PREEMPT(full) [ 345.933340][T13438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.933355][T13438] Call Trace: [ 345.933365][T13438] [ 345.933382][T13438] dump_stack_lvl+0xe8/0x150 [ 345.933430][T13438] should_fail_ex+0x40c/0x560 [ 345.933474][T13438] ? __d_alloc+0x37/0x6e0 [ 345.933507][T13438] should_failslab+0xa8/0x100 [ 345.933540][T13438] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 345.933576][T13438] ? __d_lookup+0x66/0x790 [ 345.933619][T13438] __d_alloc+0x37/0x6e0 [ 345.933660][T13438] d_alloc+0x4b/0x190 [ 345.933691][T13438] ? lookup_one_qstr_excl+0xc4/0x360 [ 345.933729][T13438] lookup_one_qstr_excl+0xd8/0x360 [ 345.933764][T13438] ? lookup_noperm_common+0x245/0x430 [ 345.933799][T13438] start_dirop+0x5c/0x90 [ 345.933835][T13438] simple_start_creating+0xcc/0x110 [ 345.933870][T13438] ? __pfx_simple_start_creating+0x10/0x10 [ 345.933905][T13438] ? do_raw_spin_unlock+0xf5/0x210 [ 345.933940][T13438] ? mntput+0x65/0xc0 [ 345.933971][T13438] debugfs_start_creating+0xdb/0x1a0 [ 345.934016][T13438] __debugfs_create_file+0x6f/0x400 [ 345.934050][T13438] debugfs_create_file_full+0x3f/0x60 [ 345.934084][T13438] ref_tracker_dir_debugfs+0x197/0x360 [ 345.934113][T13438] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 345.934177][T13438] ? __kvmalloc_node_noprof+0x53d/0x890 [ 345.934214][T13438] ? alloc_netdev_mqs+0xa9/0x1220 [ 345.934250][T13438] ? __raw_spin_lock_init+0x45/0x100 [ 345.934289][T13438] alloc_netdev_mqs+0x275/0x1220 [ 345.934318][T13438] ? __pfx_snprintf+0x10/0x10 [ 345.934357][T13438] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 345.934394][T13438] rtnl_create_link+0x321/0xd70 [ 345.934439][T13438] rtnl_newlink_create+0x25f/0xb00 [ 345.934475][T13438] ? __mutex_lock+0x5c5/0x1590 [ 345.934510][T13438] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 345.934543][T13438] ? __pfx___mutex_lock+0x10/0x10 [ 345.934594][T13438] ? ns_capable+0x89/0xe0 [ 345.934625][T13438] rtnl_newlink+0x167f/0x1bd0 [ 345.934677][T13438] ? __pfx_rtnl_newlink+0x10/0x10 [ 345.934712][T13438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.934787][T13438] ? kasan_quarantine_put+0xbb/0x1f0 [ 345.934821][T13438] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.934852][T13438] ? nlmon_xmit+0xb0/0x100 [ 345.934875][T13438] ? kmem_cache_free+0x182/0x650 [ 345.934930][T13438] ? __lock_acquire+0x683/0x2cd0 [ 345.934962][T13438] ? __dev_queue_xmit+0x29b/0x37f0 [ 345.935001][T13438] ? __local_bh_enable_ip+0xd0/0x130 [ 345.935027][T13438] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.935052][T13438] ? __dev_queue_xmit+0x29b/0x37f0 [ 345.935077][T13438] ? __local_bh_enable_ip+0xd0/0x130 [ 345.935100][T13438] ? __dev_queue_xmit+0x29b/0x37f0 [ 345.935138][T13438] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 345.935197][T13438] ? __pfx_rtnl_newlink+0x10/0x10 [ 345.935233][T13438] rtnetlink_rcv_msg+0x802/0xc00 [ 345.935278][T13438] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 345.935316][T13438] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 345.935359][T13438] ? ref_tracker_free+0x689/0x830 [ 345.935389][T13438] ? __pfx_ref_tracker_free+0x10/0x10 [ 345.935430][T13438] netlink_rcv_skb+0x226/0x4a0 [ 345.935460][T13438] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 345.935520][T13438] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.935588][T13438] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.935645][T13438] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.935679][T13438] netlink_unicast+0x7bb/0x940 [ 345.935731][T13438] netlink_sendmsg+0x813/0xb40 [ 345.935771][T13438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.935803][T13438] ? aa_sock_msg_perm+0xf1/0x1b0 [ 345.935840][T13438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 345.935870][T13438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.935899][T13438] ____sys_sendmsg+0x9b9/0xa20 [ 345.935951][T13438] ? __might_fault+0xaf/0x130 [ 345.935997][T13438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.936051][T13438] ? import_iovec+0x73/0xa0 [ 345.936089][T13438] ___sys_sendmsg+0x2a5/0x360 [ 345.936114][T13438] ? __lock_acquire+0x683/0x2cd0 [ 345.936145][T13438] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.936217][T13438] ? __fget_files+0x2a/0x420 [ 345.936246][T13438] ? __fget_files+0x3a2/0x420 [ 345.936288][T13438] __x64_sys_sendmsg+0x1bd/0x2a0 [ 345.936318][T13438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.936364][T13438] ? __pfx_ksys_write+0x10/0x10 [ 345.936410][T13438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.936435][T13438] do_syscall_64+0x174/0x580 [ 345.936459][T13438] ? trace_irq_disable+0x3b/0x140 [ 345.936495][T13438] ? clear_bhb_loop+0x40/0x90 [ 345.936524][T13438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.936548][T13438] RIP: 0033:0x7f89ced9ce59 [ 345.936570][T13438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.936590][T13438] RSP: 002b:00007f89cfb89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.936616][T13438] RAX: ffffffffffffffda RBX: 00007f89cf015fa0 RCX: 00007f89ced9ce59 [ 345.936633][T13438] RDX: 0000000020000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 345.936648][T13438] RBP: 00007f89cfb89090 R08: 0000000000000000 R09: 0000000000000000 [ 345.936663][T13438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.936683][T13438] R13: 00007f89cf016038 R14: 00007f89cf015fa0 R15: 00007ffe73d40a08 [ 345.936723][T13438] [ 346.934427][T13454] SET target dimension over the limit! [ 346.944178][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1903'. [ 347.051066][T13463] syzkaller0: entered promiscuous mode [ 347.059067][T13463] syzkaller0: entered allmulticast mode [ 347.240565][T13472] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1908'. [ 347.344508][T13472] tipc: Enabled bearer , priority 0 [ 347.376611][T13472] syzkaller0: entered promiscuous mode [ 347.382169][T13472] syzkaller0: entered allmulticast mode [ 347.391264][T13472] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 347.458650][T13471] tipc: Resetting bearer [ 347.488753][T13471] tipc: Disabling bearer [ 347.835704][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 347.848701][T13482] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 347.865024][T13482] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 348.070525][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1913'. [ 348.361975][T13498] syzkaller0: entered promiscuous mode [ 348.367658][T13498] syzkaller0: entered allmulticast mode [ 348.406804][T13502] ip6erspan0: entered allmulticast mode [ 349.835101][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'. [ 353.214553][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1934'. [ 353.340090][T13585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1937'. [ 353.375904][T13585] smc: adding net device hsr0 with user defined pnetid SYZ2 [ 353.427399][T13589] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1940'. [ 353.456829][T13585] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 353.723076][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 353.778204][T13608] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 353.786759][T13608] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1945'. [ 354.230364][T13623] tipc: Resetting bearer [ 354.291879][T13623] bond4: (slave bridge1): Releasing backup interface [ 354.298658][T13623] bridge1: left promiscuous mode [ 354.304262][T13623] bridge1: left allmulticast mode [ 354.315343][T13623] vlan5: left promiscuous mode [ 354.320210][T13623] bridge_slave_0: left promiscuous mode [ 354.326255][T13623] bridge0: port 1(vlan5) entered disabled state [ 354.465653][T13634] sctp: [Deprecated]: syz.2.1952 (pid 13634) Use of int in max_burst socket option deprecated. [ 354.465653][T13634] Use struct sctp_assoc_value instead [ 354.504496][T13633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1951'. [ 354.528350][T13633] team0: Mode changed to "activebackup" [ 354.565054][T13634] sctp: [Deprecated]: syz.2.1952 (pid 13634) Use of int in maxseg socket option. [ 354.565054][T13634] Use struct sctp_assoc_value instead [ 354.617162][T13634] syzkaller0: entered promiscuous mode [ 354.622723][T13634] syzkaller0: entered allmulticast mode [ 354.642626][T13637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1953'. [ 354.652474][T13637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1953'. [ 354.661478][T13637] netlink: 58 bytes leftover after parsing attributes in process `syz.4.1953'. [ 354.909279][T13651] syzkaller0: entered promiscuous mode [ 354.916549][T13651] syzkaller0: entered allmulticast mode [ 354.926321][T13650] tipc: Enabled bearer , priority 0 [ 354.934888][ T5010] block nbd3: Possible stuck request ffff888026f986c0: control (read@0,1024B). Runtime 180 seconds [ 354.935221][ T5010] block nbd3: Possible stuck request ffff888026f98880: control (read@1024,1024B). Runtime 180 seconds [ 354.935255][ T5010] block nbd3: Possible stuck request ffff888026f98a40: control (read@2048,1024B). Runtime 180 seconds [ 354.935287][ T5010] block nbd3: Possible stuck request ffff888026f98c00: control (read@3072,1024B). Runtime 180 seconds [ 355.066781][T13652] tipc: Resetting bearer [ 355.069129][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1956'. [ 355.207105][T13652] tipc: Resetting bearer [ 355.239727][T13652] tipc: Disabling bearer [ 355.653369][T13678] netlink: 'syz.1.1964': attribute type 58 has an invalid length. [ 357.135519][T13736] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 357.307311][T13746] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 357.390666][T13746] bond9 (unregistering): Released all slaves [ 357.542116][T13747] tipc: Resetting bearer [ 357.550055][T13747] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 358.133768][T13778] netlink: 'syz.2.1987': attribute type 10 has an invalid length. [ 358.220164][T13788] netlink: 'syz.3.1991': attribute type 10 has an invalid length. [ 358.325701][T13788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.334802][T13788] team0: Port device bond0 added [ 358.638018][T13805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.992299][T13814] __nla_validate_parse: 10 callbacks suppressed [ 358.992319][T13814] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1997'. [ 359.234936][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 359.291641][T13821] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 359.397839][T13821] 8021q: adding VLAN 0 to HW filter on device bond8 [ 359.422476][T13824] bond8: (slave gretap2): making interface the new active one [ 359.431630][T13824] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 359.625198][T13837] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 359.779809][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 359.789317][T13841] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 359.965845][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 360.034580][T13851] x_tables: duplicate underflow at hook 3 [ 360.127567][T13855] bridge_slave_1: left allmulticast mode [ 360.169600][T13855] bridge_slave_1: left promiscuous mode [ 360.205039][T13855] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.298735][T13855] bridge_slave_0: left allmulticast mode [ 360.330714][T13855] bridge_slave_0: left promiscuous mode [ 360.336625][T13855] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.901969][T13882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2016'. [ 361.011862][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 361.059225][T13888] smc: net device wlan0 applied user defined pnetid SYZ0 [ 361.077426][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2017'. [ 361.093461][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 361.102477][T13890] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 361.124604][T13888] netlink: 'syz.2.2018': attribute type 23 has an invalid length. [ 361.350678][T13895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2021'. [ 361.413920][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2021'. [ 361.664042][T13908] bridge0: Caught tx_queue_len zero misconfig [ 362.076075][T13924] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 363.071713][T13954] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 363.479005][T13960] lo: Caught tx_queue_len zero misconfig [ 363.623742][T13963] syzkaller0: entered promiscuous mode [ 363.629290][T13963] syzkaller0: entered allmulticast mode [ 363.792365][T13970] tap0: tun_chr_ioctl cmd 1074025677 [ 363.797909][T13970] tap0: linktype set to 774 [ 364.071490][T13985] 8021q: VLANs not supported on lo [ 364.431150][T13997] __nla_validate_parse: 8 callbacks suppressed [ 364.431171][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2053'. [ 364.520745][T13994] bond3: entered allmulticast mode [ 364.526454][T13994] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.681738][T13997] bond9: option broadcast_neighbor: invalid value (30) [ 364.693035][T13997] bond9 (unregistering): Released all slaves [ 364.776825][T14001] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2054'. [ 364.787045][T14004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2056'. [ 365.240115][T14024] netlink: 'syz.0.2062': attribute type 1 has an invalid length. [ 365.268409][T14024] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.2062'. [ 365.380773][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 365.532825][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 368.193263][T14059] netlink: 'syz.0.2068': attribute type 7 has an invalid length. [ 368.266131][T14061] block nbd2: server does not support multiple connections per device. [ 368.283541][T14061] block nbd2: shutting down sockets [ 368.339921][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2073'. [ 368.355830][T14075] openvswitch: netlink: VXLAN extension 12288 out of range max 1 [ 368.527518][T14082] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2074'. [ 368.555614][T14085] netlink: 'syz.1.2078': attribute type 1 has an invalid length. [ 368.608460][T14085] netlink: 760 bytes leftover after parsing attributes in process `syz.1.2078'. [ 368.672479][T14081] tipc: Enabling of bearer rejected, failed to enable media [ 368.736132][T14096] vlan0: entered promiscuous mode [ 368.775347][T14096] vlan0: entered allmulticast mode [ 368.814732][T14096] ve: entered allmulticast mode [ 368.827985][T14081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2075'. [ 369.298490][T14111] dvmrp8: entered allmulticast mode [ 369.565732][T14132] __nla_validate_parse: 2 callbacks suppressed [ 369.565755][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2090'. [ 369.597569][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2090'. [ 369.707502][T14132] netlink: 264 bytes leftover after parsing attributes in process `syz.2.2090'. [ 369.997653][T14145] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 370.008687][T14145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.018843][T14145] IPv6: NLM_F_CREATE should be set when creating new route [ 370.028048][T14145] IPv6: NLM_F_CREATE should be set when creating new route [ 370.037603][T14145] IPv6: NLM_F_CREATE should be set when creating new route [ 370.050458][T14145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.920976][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2101'. [ 371.147992][T14190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2104'. [ 371.668066][T14210] FAULT_INJECTION: forcing a failure. [ 371.668066][T14210] name failslab, interval 1, probability 0, space 0, times 0 [ 371.680995][T14210] CPU: 0 UID: 0 PID: 14210 Comm: syz.2.2110 Not tainted syzkaller #0 PREEMPT(full) [ 371.681024][T14210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.681038][T14210] Call Trace: [ 371.681047][T14210] [ 371.681056][T14210] dump_stack_lvl+0xe8/0x150 [ 371.681089][T14210] should_fail_ex+0x40c/0x560 [ 371.681131][T14210] should_failslab+0xa8/0x100 [ 371.681156][T14210] __kmalloc_noprof+0xe8/0x750 [ 371.681185][T14210] ? __pfx___mutex_trylock_common+0x10/0x10 [ 371.681216][T14210] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 371.681266][T14210] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 371.681308][T14210] genl_family_rcv_msg_doit+0xda/0x340 [ 371.681348][T14210] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 371.681393][T14210] ? apparmor_capable+0x126/0x170 [ 371.681422][T14210] ? bpf_lsm_capable+0x9/0x20 [ 371.681443][T14210] ? security_capable+0x7e/0x2c0 [ 371.681482][T14210] genl_rcv_msg+0x614/0x7a0 [ 371.681520][T14210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.681550][T14210] ? __pfx_macsec_add_rxsa+0x10/0x10 [ 371.681597][T14210] ? __pfx_ref_tracker_free+0x10/0x10 [ 371.681633][T14210] netlink_rcv_skb+0x226/0x4a0 [ 371.681660][T14210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.681692][T14210] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.681736][T14210] ? down_read+0x270/0x2e0 [ 371.681760][T14210] ? genl_rcv+0xd/0x40 [ 371.681792][T14210] genl_rcv+0x28/0x40 [ 371.681819][T14210] netlink_unicast+0x7bb/0x940 [ 371.681868][T14210] netlink_sendmsg+0x813/0xb40 [ 371.681904][T14210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.681933][T14210] ? aa_sock_msg_perm+0xf1/0x1b0 [ 371.681967][T14210] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.681995][T14210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.682022][T14210] ____sys_sendmsg+0x9b9/0xa20 [ 371.682046][T14210] ? __might_fault+0xaf/0x130 [ 371.682082][T14210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.682118][T14210] ? import_iovec+0x73/0xa0 [ 371.682152][T14210] ___sys_sendmsg+0x2a5/0x360 [ 371.682175][T14210] ? __lock_acquire+0x683/0x2cd0 [ 371.682203][T14210] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.682276][T14210] ? __fget_files+0x2a/0x420 [ 371.682302][T14210] ? __fget_files+0x3a2/0x420 [ 371.682341][T14210] __x64_sys_sendmsg+0x1bd/0x2a0 [ 371.682369][T14210] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.682404][T14210] ? __pfx_ksys_write+0x10/0x10 [ 371.682448][T14210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.682472][T14210] do_syscall_64+0x174/0x580 [ 371.682495][T14210] ? trace_irq_disable+0x3b/0x140 [ 371.682528][T14210] ? clear_bhb_loop+0x40/0x90 [ 371.682556][T14210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.682578][T14210] RIP: 0033:0x7ff4fe79ce59 [ 371.682598][T14210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.682617][T14210] RSP: 002b:00007ff4ff570028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.682640][T14210] RAX: ffffffffffffffda RBX: 00007ff4fea15fa0 RCX: 00007ff4fe79ce59 [ 371.682656][T14210] RDX: 000000000000c000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 371.682670][T14210] RBP: 00007ff4ff570090 R08: 0000000000000000 R09: 0000000000000000 [ 371.682684][T14210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.682697][T14210] R13: 00007ff4fea16038 R14: 00007ff4fea15fa0 R15: 00007ffc8656fd38 [ 371.682734][T14210] [ 372.557329][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'. [ 372.855244][T14240] netlink: 'syz.2.2117': attribute type 1 has an invalid length. [ 372.863127][T14240] netlink: 760 bytes leftover after parsing attributes in process `syz.2.2117'. [ 372.908925][T14235] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2116'. [ 372.947472][T14235] ip6tnl0: Caught tx_queue_len zero misconfig [ 373.189306][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2120'. [ 373.198452][T14252] openvswitch: netlink: Message has 2 unknown bytes. [ 373.316189][T14256] netlink: 'syz.2.2121': attribute type 1 has an invalid length. [ 373.324010][T14256] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.2121'. [ 373.476676][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 375.324446][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 375.429827][T14275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2128'. [ 375.440660][T14275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2128'. [ 375.468701][T14275] netlink: zone id is out of range [ 375.479047][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 375.494501][T14275] netlink: zone id is out of range [ 375.504025][T14275] netlink: zone id is out of range [ 375.518270][T14275] netlink: zone id is out of range [ 375.563433][T14275] netlink: zone id is out of range [ 375.568795][T14275] netlink: zone id is out of range [ 375.574638][T14275] netlink: zone id is out of range [ 375.580163][T14275] netlink: zone id is out of range [ 375.585901][T14275] netlink: zone id is out of range [ 375.591197][T14275] netlink: zone id is out of range [ 375.768838][T14291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2131'. [ 375.942181][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2130'. [ 376.277917][T14305] tipc: Started in network mode [ 376.327870][T14305] tipc: Node identity 12a74e9c7569, cluster identity 4711 [ 376.335207][T14305] tipc: Enabled bearer , priority 0 [ 376.366584][T14310] syz_tun: entered allmulticast mode [ 376.374420][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 376.399637][T14305] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2134'. [ 376.445135][T14308] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2134'. [ 376.455343][T14305] netlink: 'syz.1.2134': attribute type 32 has an invalid length. [ 376.475799][T14318] netlink: 'syz.1.2134': attribute type 32 has an invalid length. [ 376.662991][T14304] tipc: Disabling bearer [ 376.779237][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2141'. [ 377.048777][T14309] syz_tun: left allmulticast mode [ 377.061579][T14336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2143'. [ 378.056980][T14373] tc_dump_action: action bad kind [ 379.301456][T14434] hsr0: entered promiscuous mode [ 379.310036][T14428] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 379.317138][T14428] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 379.538901][T14446] xt_l2tp: missing protocol rule (udp|l2tpip) [ 379.737014][T14455] netlink: 'syz.1.2177': attribute type 1 has an invalid length. [ 379.737014][T14454] netlink: 'syz.1.2177': attribute type 1 has an invalid length. [ 379.819303][T14454] bond3: entered promiscuous mode [ 379.824428][T14454] bond3: entered allmulticast mode [ 379.831663][T14454] 8021q: adding VLAN 0 to HW filter on device bond3 [ 379.882386][T14464] tipc: Enabling of bearer rejected, failed to enable media [ 379.903077][T14459] syz.1.2177 (14459) used obsolete PPPIOCDETACH ioctl [ 379.916875][T14462] tipc: Enabling of bearer rejected, failed to enable media [ 380.133572][T14472] netlink: 'syz.2.2182': attribute type 1 has an invalid length. [ 380.740509][T14489] syz_tun: entered allmulticast mode [ 381.087335][T14499] __nla_validate_parse: 9 callbacks suppressed [ 381.087358][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2190'. [ 381.123751][T14482] syz_tun: left allmulticast mode [ 381.187173][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2190'. [ 381.247330][T14502] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2191'. [ 381.269966][T14499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2190'. [ 381.304451][T14502] bond0 (unregistering): Released all slaves [ 381.319233][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 381.354657][T14499] netlink: 'syz.1.2190': attribute type 21 has an invalid length. [ 381.369745][T14499] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2190'. [ 381.389126][T14499] netlink: 'syz.1.2190': attribute type 5 has an invalid length. [ 381.403651][T14499] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2190'. [ 381.460853][T14499] net_ratelimit: 391 callbacks suppressed [ 381.460874][T14499] openvswitch: netlink: Multiple metadata blocks provided [ 384.560732][T14519] netlink: 'syz.1.2196': attribute type 58 has an invalid length. [ 384.570344][T14522] wg1: Caught tx_queue_len zero misconfig [ 384.653754][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'. [ 384.662692][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2200'. [ 384.712503][T14533] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 384.769758][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'. [ 384.780070][ T6009] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.798310][ T6018] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.844580][ T6018] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.879538][ T6018] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.044283][ T5010] block nbd3: Possible stuck request ffff888026f986c0: control (read@0,1024B). Runtime 210 seconds [ 385.053102][T14553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.055331][ T5010] block nbd3: Possible stuck request ffff888026f98880: control (read@1024,1024B). Runtime 210 seconds [ 385.082747][ T5010] block nbd3: Possible stuck request ffff888026f98a40: control (read@2048,1024B). Runtime 210 seconds [ 385.094224][ T5010] block nbd3: Possible stuck request ffff888026f98c00: control (read@3072,1024B). Runtime 210 seconds [ 386.006084][T14581] FAULT_INJECTION: forcing a failure. [ 386.006084][T14581] name failslab, interval 1, probability 0, space 0, times 0 [ 386.018912][T14581] CPU: 0 UID: 0 PID: 14581 Comm: syz.0.2212 Not tainted syzkaller #0 PREEMPT(full) [ 386.018942][T14581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 386.018955][T14581] Call Trace: [ 386.018964][T14581] [ 386.018972][T14581] dump_stack_lvl+0xe8/0x150 [ 386.018999][T14581] should_fail_ex+0x40c/0x560 [ 386.019033][T14581] should_failslab+0xa8/0x100 [ 386.019050][T14581] ? skb_clone+0x212/0x3a0 [ 386.019070][T14581] kmem_cache_alloc_noprof+0x87/0x650 [ 386.019103][T14581] skb_clone+0x212/0x3a0 [ 386.019126][T14581] bpf_clone_redirect+0x170/0x4b0 [ 386.019159][T14581] ? bpf_test_run+0x1d1/0x830 [ 386.019179][T14581] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 386.019199][T14581] ? __kernel_text_address+0xd/0x30 [ 386.019225][T14581] ? unwind_get_return_address+0x4d/0x90 [ 386.019248][T14581] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 386.019275][T14581] ? arch_stack_walk+0xfb/0x150 [ 386.019302][T14581] ? ktime_get+0x45/0x220 [ 386.019334][T14581] ? ktime_get+0x45/0x220 [ 386.019362][T14581] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 386.019390][T14581] ? lockdep_hardirqs_on+0x7a/0x110 [ 386.019408][T14581] ? ktime_get+0x45/0x220 [ 386.019432][T14581] ? seqcount_lockdep_reader_access+0xea/0x100 [ 386.019460][T14581] ? ktime_get+0x1f5/0x220 [ 386.019488][T14581] ? bpf_test_run+0x1d1/0x830 [ 386.019506][T14581] ? kvm_sched_clock_read+0x11/0x20 [ 386.019524][T14581] bpf_test_run+0x5c9/0x830 [ 386.019561][T14581] ? __pfx_bpf_test_run+0x10/0x10 [ 386.019589][T14581] ? trace_kmem_cache_alloc+0x29/0xe0 [ 386.019614][T14581] ? __kasan_krealloc+0xec/0x110 [ 386.019649][T14581] ? skb_dst_set+0x72/0x140 [ 386.019669][T14581] bpf_prog_test_run_skb+0xe35/0x2230 [ 386.019706][T14581] ? __fget_files+0x3a2/0x420 [ 386.019727][T14581] ? __fget_files+0x2a/0x420 [ 386.019759][T14581] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 386.019779][T14581] bpf_prog_test_run+0x2c5/0x340 [ 386.019800][T14581] __sys_bpf+0x643/0x950 [ 386.019829][T14581] ? __pfx___sys_bpf+0x10/0x10 [ 386.019869][T14581] ? ksys_write+0x242/0x270 [ 386.019898][T14581] ? __pfx_ksys_write+0x10/0x10 [ 386.019927][T14581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.019947][T14581] __x64_sys_bpf+0x7c/0x90 [ 386.019972][T14581] do_syscall_64+0x174/0x580 [ 386.019990][T14581] ? trace_irq_disable+0x3b/0x140 [ 386.020017][T14581] ? clear_bhb_loop+0x40/0x90 [ 386.020039][T14581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.020056][T14581] RIP: 0033:0x7f89ced9ce59 [ 386.020072][T14581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.020088][T14581] RSP: 002b:00007f89cfb89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 386.020106][T14581] RAX: ffffffffffffffda RBX: 00007f89cf015fa0 RCX: 00007f89ced9ce59 [ 386.020120][T14581] RDX: 000000000000003d RSI: 0000200000000080 RDI: 000000000000000a [ 386.020153][T14581] RBP: 00007f89cfb89090 R08: 0000000000000000 R09: 0000000000000000 [ 386.020166][T14581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.020176][T14581] R13: 00007f89cf016038 R14: 00007f89cf015fa0 R15: 00007ffe73d40a08 [ 386.020204][T14581] [ 386.482356][T14590] __nla_validate_parse: 4 callbacks suppressed [ 386.482376][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2216'. [ 386.806092][T14604] FAULT_INJECTION: forcing a failure. [ 386.806092][T14604] name failslab, interval 1, probability 0, space 0, times 0 [ 386.858924][T14604] CPU: 0 UID: 0 PID: 14604 Comm: syz.4.2218 Not tainted syzkaller #0 PREEMPT(full) [ 386.858954][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 386.858968][T14604] Call Trace: [ 386.858976][T14604] [ 386.858985][T14604] dump_stack_lvl+0xe8/0x150 [ 386.859016][T14604] should_fail_ex+0x40c/0x560 [ 386.859057][T14604] should_failslab+0xa8/0x100 [ 386.859080][T14604] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 386.859112][T14604] ? __alloc_skb+0x189/0x7a0 [ 386.859145][T14604] ? __alloc_skb+0x1d7/0x7a0 [ 386.859175][T14604] ? __local_bh_enable_ip+0xd0/0x130 [ 386.859213][T14604] __alloc_skb+0x1d7/0x7a0 [ 386.859251][T14604] netlink_sendmsg+0x5d4/0xb40 [ 386.859288][T14604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.859317][T14604] ? aa_sock_msg_perm+0xf1/0x1b0 [ 386.859352][T14604] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.859381][T14604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.859407][T14604] ____sys_sendmsg+0x9b9/0xa20 [ 386.859431][T14604] ? __might_fault+0xaf/0x130 [ 386.859467][T14604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.859501][T14604] ? import_iovec+0x73/0xa0 [ 386.859532][T14604] ___sys_sendmsg+0x2a5/0x360 [ 386.859554][T14604] ? __lock_acquire+0x683/0x2cd0 [ 386.859583][T14604] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.859646][T14604] ? __fget_files+0x2a/0x420 [ 386.859673][T14604] ? __fget_files+0x3a2/0x420 [ 386.859712][T14604] __x64_sys_sendmsg+0x1bd/0x2a0 [ 386.859739][T14604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.859774][T14604] ? __pfx_ksys_write+0x10/0x10 [ 386.859815][T14604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.859840][T14604] do_syscall_64+0x174/0x580 [ 386.859862][T14604] ? trace_irq_disable+0x3b/0x140 [ 386.859895][T14604] ? clear_bhb_loop+0x40/0x90 [ 386.859923][T14604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.859944][T14604] RIP: 0033:0x7f3cf6b9ce59 [ 386.859964][T14604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.859983][T14604] RSP: 002b:00007f3cf7a1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.860006][T14604] RAX: ffffffffffffffda RBX: 00007f3cf6e15fa0 RCX: 00007f3cf6b9ce59 [ 386.860023][T14604] RDX: 0000000020000050 RSI: 0000200000000000 RDI: 0000000000000003 [ 386.860037][T14604] RBP: 00007f3cf7a1d090 R08: 0000000000000000 R09: 0000000000000000 [ 386.860081][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.860094][T14604] R13: 00007f3cf6e16038 R14: 00007f3cf6e15fa0 R15: 00007ffeef32aed8 [ 386.860131][T14604] [ 387.013486][T14606] vlan6: entered promiscuous mode [ 387.186369][T14610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 387.262737][T14610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2223'. [ 387.461209][T14624] netlink: 'syz.4.2225': attribute type 30 has an invalid length. [ 388.551830][T14654] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2231'. [ 389.054127][T14669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2239'. [ 389.114122][T14671] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2238'. [ 389.213471][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'. [ 389.222412][T14674] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2240'. [ 389.262825][T14676] netlink: 'syz.0.2241': attribute type 1 has an invalid length. [ 389.298572][T14676] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.2241'. [ 389.614488][T14690] tipc: Enabling of bearer rejected, failed to enable media [ 390.602303][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2249'. [ 392.947309][T14720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2253'. [ 392.998364][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2256'. [ 393.350647][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 393.509317][T14747] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20014 [ 393.524716][T14751] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2261'. [ 393.614261][T14737] xt_CT: No such helper "syz0" [ 394.205227][T14771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2263'. [ 394.402321][T14774] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2266'. [ 394.910614][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2270'. [ 395.184837][T14793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2271'. [ 395.354003][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2269'. [ 395.490197][T14804] tipc: Resetting bearer [ 395.523625][T14808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2273'. [ 395.617800][T14804] veth0_vlan: left promiscuous mode [ 395.652347][T14804] veth0_vlan: entered promiscuous mode [ 395.748783][T14804] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 397.574091][T14887] netlink: 'syz.3.2286': attribute type 1 has an invalid length. [ 397.710293][T14888] netlink: 'syz.3.2286': attribute type 3 has an invalid length. [ 397.794464][T14890] 8021q: adding VLAN 0 to HW filter on device bond14 [ 397.803432][T14890] bond13: (slave bond14): making interface the new active one [ 397.811545][T14890] bond13: (slave bond14): Enslaving as an active interface with an up link [ 398.632965][T14812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.872872][T14898] __nla_validate_parse: 5 callbacks suppressed [ 398.872891][T14898] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2289'. [ 398.909397][T14897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'. [ 398.983020][T14897] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2289'. [ 399.120700][T14901] syzkaller0: entered promiscuous mode [ 399.130805][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2294'. [ 399.145986][T14901] syzkaller0: entered allmulticast mode [ 399.194665][T14901] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 399.207288][T14906] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2291'. [ 399.374380][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2296'. [ 399.383323][T14921] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 399.586011][T14924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2298'. [ 399.595042][T14924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2298'. [ 399.793494][T14934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2299'. [ 399.990643][T14937] netlink: 'syz.2.2300': attribute type 2 has an invalid length. [ 400.002445][T14937] netlink: 'syz.2.2300': attribute type 2 has an invalid length. [ 400.017807][T14940] netlink: 'syz.2.2300': attribute type 2 has an invalid length. [ 400.032744][T14940] netlink: 'syz.2.2300': attribute type 2 has an invalid length. [ 400.054405][T14943] netlink: 'syz.0.2302': attribute type 2 has an invalid length. [ 400.119148][T14943] tipc: Resetting bearer [ 400.154681][T14943] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 400.205944][T14939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2301'. [ 400.430935][T14958] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 400.577827][T14967] netlink: 'syz.3.2309': attribute type 1 has an invalid length. [ 400.765286][T14973] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 400.832081][T14976] IPVS: set_ctl: invalid protocol: 103 100.1.1.2:0 [ 401.173736][T14993] syzkaller1: entered promiscuous mode [ 401.194079][T14993] syzkaller1: entered allmulticast mode [ 401.410884][T14998] netlink: 'syz.2.2320': attribute type 1 has an invalid length. [ 402.530720][T15017] syzkaller0: entered promiscuous mode [ 402.579445][T15017] syzkaller0: entered allmulticast mode [ 402.597943][T15044] validate_nla: 1 callbacks suppressed [ 402.597961][T15044] netlink: 'syz.2.2332': attribute type 1 has an invalid length. [ 402.619029][T15045] FAULT_INJECTION: forcing a failure. [ 402.619029][T15045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.674403][T15047] team_slave_1: Caught tx_queue_len zero misconfig [ 402.685376][T15045] CPU: 1 UID: 0 PID: 15045 Comm: syz.0.2334 Not tainted syzkaller #0 PREEMPT(full) [ 402.685406][T15045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 402.685420][T15045] Call Trace: [ 402.685429][T15045] [ 402.685438][T15045] dump_stack_lvl+0xe8/0x150 [ 402.685468][T15045] should_fail_ex+0x40c/0x560 [ 402.685509][T15045] _copy_to_user+0x31/0xb0 [ 402.685538][T15045] simple_read_from_buffer+0xe1/0x170 [ 402.685580][T15045] proc_fail_nth_read+0x1bb/0x230 [ 402.685613][T15045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 402.685646][T15045] ? rw_verify_area+0x24a/0x4c0 [ 402.685680][T15045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 402.685708][T15045] vfs_read+0x213/0xa80 [ 402.685745][T15045] ? __pfx___mutex_lock+0x10/0x10 [ 402.685771][T15045] ? __pfx_vfs_read+0x10/0x10 [ 402.685803][T15045] ? __fget_files+0x2a/0x420 [ 402.685836][T15045] ? __fget_files+0x3a2/0x420 [ 402.685862][T15045] ? __fget_files+0x2a/0x420 [ 402.685899][T15045] ksys_read+0x150/0x270 [ 402.685933][T15045] ? __pfx_ksys_read+0x10/0x10 [ 402.685974][T15045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.685999][T15045] do_syscall_64+0x174/0x580 [ 402.686021][T15045] ? trace_irq_disable+0x3b/0x140 [ 402.686055][T15045] ? clear_bhb_loop+0x40/0x90 [ 402.686082][T15045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.686103][T15045] RIP: 0033:0x7f89ced5d68e [ 402.686124][T15045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 402.686143][T15045] RSP: 002b:00007f89cfb88fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 402.686166][T15045] RAX: ffffffffffffffda RBX: 00007f89cfb896c0 RCX: 00007f89ced5d68e [ 402.686182][T15045] RDX: 000000000000000f RSI: 00007f89cfb890a0 RDI: 0000000000000004 [ 402.686195][T15045] RBP: 00007f89cfb89090 R08: 0000000000000000 R09: 0000000000000000 [ 402.686209][T15045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.686221][T15045] R13: 00007f89cf016038 R14: 00007f89cf015fa0 R15: 00007ffe73d40a08 [ 402.686257][T15045] [ 402.699712][T15044] netlink: 'syz.2.2332': attribute type 4 has an invalid length. [ 402.914353][T15043] netlink: 'syz.2.2332': attribute type 4 has an invalid length. [ 403.289853][T15062] netlink: 'syz.1.2338': attribute type 6 has an invalid length. [ 405.358456][T15073] netlink: 'syz.0.2339': attribute type 1 has an invalid length. [ 405.366228][T15073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.425265][T15074] __nla_validate_parse: 6 callbacks suppressed [ 405.425294][T15074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2340'. [ 405.720698][T15089] netlink: 'syz.3.2344': attribute type 10 has an invalid length. [ 406.303003][T15064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.560486][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2353'. [ 406.609808][T15111] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 407.183688][T15146] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2362'. [ 407.356895][T15157] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2364'. [ 407.369501][T15142] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2360'. [ 407.397935][T15157] netlink: 'syz.2.2364': attribute type 1 has an invalid length. [ 407.406026][T15157] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2364'. [ 407.579556][T15164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2365'. [ 408.182004][T15190] netlink: 'syz.3.2371': attribute type 16 has an invalid length. [ 408.389373][T15200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.409276][T15200] netlink: 'syz.2.2376': attribute type 10 has an invalid length. [ 408.641694][T15205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2378'. [ 408.700657][T15206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2377'. [ 408.731163][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 408.897663][T15205] netlink: 'syz.0.2378': attribute type 10 has an invalid length. [ 408.906068][T15205] netlink: 'syz.0.2378': attribute type 10 has an invalid length. [ 408.946344][T15220] IPVS: set_ctl: invalid protocol: 2 172.30.0.5:21 [ 409.356887][T15239] vlan4: entered promiscuous mode [ 409.362041][T15239] bridge0: entered promiscuous mode [ 409.367281][T15239] vlan3: entered promiscuous mode [ 409.372340][T15239] geneve0: entered promiscuous mode [ 412.260888][T15235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.485711][T15280] tipc: Resetting bearer [ 412.516332][T15281] __nla_validate_parse: 4 callbacks suppressed [ 412.516352][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2396'. [ 412.672550][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2396'. [ 412.709323][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2396'. [ 412.760939][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2396'. [ 412.816478][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2396'. [ 412.826643][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2396'. [ 412.835847][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2396'. [ 412.847503][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2396'. [ 412.857301][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2396'. [ 412.927591][T15281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2396'. [ 413.205413][T15314] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 413.391381][T15327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.554290][T15335] netlink: 'syz.0.2413': attribute type 1 has an invalid length. [ 413.698947][T15336] netlink: 'syz.2.2412': attribute type 4 has an invalid length. [ 414.095016][T15357] xt_ecn: cannot match TCP bits for non-tcp packets [ 415.072684][ T5010] block nbd3: Possible stuck request ffff888026f986c0: control (read@0,1024B). Runtime 240 seconds [ 415.083658][ T5010] block nbd3: Possible stuck request ffff888026f98880: control (read@1024,1024B). Runtime 240 seconds [ 415.123012][ T5010] block nbd3: Possible stuck request ffff888026f98a40: control (read@2048,1024B). Runtime 240 seconds [ 415.134316][ T5010] block nbd3: Possible stuck request ffff888026f98c00: control (read@3072,1024B). Runtime 240 seconds [ 416.954967][T15371] tunl0: Caught tx_queue_len zero misconfig [ 416.996357][T15373] hsr_slave_0: left promiscuous mode [ 417.002636][T15373] hsr_slave_1: left promiscuous mode [ 417.360968][T15383] netlink: 'syz.2.2428': attribute type 1 has an invalid length. [ 417.441965][T15383] bond0: entered promiscuous mode [ 417.447509][T15383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.571811][T15383] bond0: (slave bridge9): making interface the new active one [ 417.579360][T15383] bridge9: entered promiscuous mode [ 417.587688][T15383] bond0: (slave bridge9): Enslaving as an active interface with an up link [ 417.676466][T15389] __nla_validate_parse: 58 callbacks suppressed [ 417.676485][T15389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2430'. [ 417.906816][T15405] vlan4: entered promiscuous mode [ 418.406654][T15428] netlink: 'syz.2.2442': attribute type 1 has an invalid length. [ 418.496254][T15428] bond9: entered promiscuous mode [ 418.501779][T15428] 8021q: adding VLAN 0 to HW filter on device bond9 [ 418.717991][T15442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2446'. [ 418.728520][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2446'. [ 418.734124][T15443] ip6_vti0: entered promiscuous mode [ 418.742845][T15443] ip6_vti0: entered allmulticast mode [ 418.847293][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2449'. [ 419.013942][T15452] netlink: 'syz.0.2450': attribute type 1 has an invalid length. [ 419.060039][T15452] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 419.189583][T15460] netlink: 'syz.2.2451': attribute type 1 has an invalid length. [ 419.297647][ T7936] hid (null): unknown global tag 0xb4 [ 419.303864][ T7936] hid (null): unknown global tag 0xd [ 419.339606][ T7936] hid-generic 0005:05C2:0040.0002: unexpected long global item [ 419.348009][ T7936] hid-generic 0005:05C2:0040.0002: probe with driver hid-generic failed with error -22 [ 419.365097][T15471] xt_hashlimit: size too large, truncated to 1048576 [ 419.459346][T15460] 8021q: adding VLAN 0 to HW filter on device bond10 [ 419.468329][T15474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2454'. [ 419.545421][T15474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2454'. [ 419.634627][T15470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2451'. [ 419.690583][T15460] bond10 (unregistering): Released all slaves [ 419.824407][T15474] x_tables: duplicate underflow at hook 3 [ 419.830814][T15473] syzkaller1: entered promiscuous mode [ 419.836334][T15473] syzkaller1: entered allmulticast mode [ 420.221175][T15492] C: renamed from veth1_to_team (while UP) [ 420.253801][T15492] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2459'. [ 420.432051][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2462'. [ 420.442809][T15509] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 420.724191][T15515] netlink: 840 bytes leftover after parsing attributes in process `syz.1.2465'. [ 421.181640][T15537] netlink: 'syz.1.2472': attribute type 1 has an invalid length. [ 421.943930][T15572] netlink: 'syz.2.2483': attribute type 1 has an invalid length. [ 422.036650][T15574] netlink: 'syz.2.2484': attribute type 3 has an invalid length. [ 422.705756][T15603] __nla_validate_parse: 9 callbacks suppressed [ 422.705777][T15603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2494'. [ 422.722970][T15603] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 422.808403][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2496'. [ 422.817749][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2496'. [ 422.868920][T15605] netlink: 'syz.4.2496': attribute type 1 has an invalid length. [ 422.901679][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 422.910609][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2496'. [ 422.964706][T15605] netlink: 'syz.4.2496': attribute type 4 has an invalid length. [ 423.011687][T15614] netlink: 'syz.1.2495': attribute type 10 has an invalid length. [ 423.050402][T15614] veth1_to_hsr: entered promiscuous mode [ 423.056399][T15614] veth1_to_hsr: entered allmulticast mode [ 423.063230][T15614] team0: Port device veth1_to_hsr added [ 423.676773][T15640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2502'. [ 423.705784][T15638] netlink: 'syz.2.2503': attribute type 32 has an invalid length. [ 423.741042][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2503'. [ 423.844425][T15638] bond10: option coupled_control: invalid value (6) [ 423.930760][T15638] bond10 (unregistering): Released all slaves [ 424.409632][T15663] bond0: (slave ip6tnl0): refused to change device type [ 424.433334][T15663] ip6erspan1: entered allmulticast mode [ 424.490672][T15668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2511'. [ 424.578238][T15673] openvswitch: netlink: IPv4 tun info is not correct [ 424.687359][T15673] No such timeout policy "syz0" [ 424.813141][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2516'. [ 425.204334][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2519'. [ 425.562879][T15712] syzkaller1: entered promiscuous mode [ 425.568881][T15712] syzkaller1: entered allmulticast mode [ 426.381790][T15744] bond0: Caught tx_queue_len zero misconfig [ 426.784457][T15762] netlink: 'syz.4.2533': attribute type 30 has an invalid length. [ 426.999005][T15767] openvswitch: netlink: Flow key attr not present in new flow. [ 428.905332][T15745] geneve3: entered promiscuous mode [ 428.928078][T15769] __nla_validate_parse: 6 callbacks suppressed [ 428.928099][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 429.099754][T15775] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 429.291438][T15787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2537'. [ 429.393407][T15794] netlink: 'syz.4.2542': attribute type 1 has an invalid length. [ 429.404078][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2543'. [ 429.430673][T15793] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 429.462091][T15794] bond10: entered promiscuous mode [ 429.467722][T15794] 8021q: adding VLAN 0 to HW filter on device bond10 [ 429.495788][T15785] netlink: 'syz.1.2540': attribute type 29 has an invalid length. [ 429.615398][T15794] macvtap1: entered allmulticast mode [ 429.623401][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2544'. [ 429.667505][T15796] macvtap2: entered allmulticast mode [ 429.827288][T15794] bond10: (slave bridge7): making interface the new active one [ 429.845239][T15794] bridge7: entered promiscuous mode [ 429.857344][T15794] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 429.937987][T15809] tipc: Enabled bearer , priority 0 [ 429.968643][T15809] syzkaller0: entered promiscuous mode [ 429.986731][T15809] syzkaller0: entered allmulticast mode [ 430.008063][T15816] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2551'. [ 430.115787][T15809] tipc: Resetting bearer [ 430.234173][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2557'. [ 430.249013][T15808] tipc: Resetting bearer [ 430.271456][T15830] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 430.345592][T15808] tipc: Disabling bearer [ 430.396603][T15832] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2556'. [ 430.565230][T15846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2559'. [ 430.614131][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2559'. [ 430.786489][T15852] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2563'. [ 431.073184][T15865] openvswitch: netlink: Missing key (keys=40, expected=100) [ 431.334535][T15873] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 431.527264][T15880] syzkaller0: entered promiscuous mode [ 431.550861][T15880] syzkaller0: entered allmulticast mode [ 431.628188][T15880] tipc: Enabled bearer , priority 0 [ 431.691987][T15880] tipc: Resetting bearer [ 431.951163][T15879] tipc: Resetting bearer [ 432.026530][T15879] tipc: Disabling bearer [ 432.648307][T15915] erspan0: entered promiscuous mode [ 433.627194][T15963] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.637286][T15963] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.706710][T15963] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.714102][T15963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.721667][T15963] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.728874][T15963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.753852][T15963] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.761171][T15963] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.510376][T15977] IPVS: length: 35 != 24 [ 436.024928][T15932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.241386][T15983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.255448][T15981] __nla_validate_parse: 17 callbacks suppressed [ 436.255468][T15981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2595'. [ 436.351211][T15985] openvswitch: netlink: Flow key attr not present in new flow. [ 436.599033][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2598'. [ 436.642196][T15996] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 436.951868][T16017] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2605'. [ 437.209283][T16027] FAULT_INJECTION: forcing a failure. [ 437.209283][T16027] name failslab, interval 1, probability 0, space 0, times 0 [ 437.222107][T16027] CPU: 0 UID: 0 PID: 16027 Comm: syz.4.2607 Not tainted syzkaller #0 PREEMPT(full) [ 437.222136][T16027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.222153][T16027] Call Trace: [ 437.222168][T16027] [ 437.222178][T16027] dump_stack_lvl+0xe8/0x150 [ 437.222209][T16027] should_fail_ex+0x40c/0x560 [ 437.222251][T16027] should_failslab+0xa8/0x100 [ 437.222272][T16027] ? skb_clone+0x212/0x3a0 [ 437.222296][T16027] kmem_cache_alloc_noprof+0x87/0x650 [ 437.222336][T16027] skb_clone+0x212/0x3a0 [ 437.222364][T16027] bpf_clone_redirect+0x170/0x4b0 [ 437.222405][T16027] ? bpf_test_run+0x1d1/0x830 [ 437.222429][T16027] bpf_prog_3e1cbbed0c4acd81+0x5f/0x68 [ 437.222455][T16027] ? __kernel_text_address+0xd/0x30 [ 437.222498][T16027] ? __pfx___schedule+0x10/0x10 [ 437.222529][T16027] ? ktime_get+0x45/0x220 [ 437.222576][T16027] ? preempt_schedule_thunk+0x16/0x30 [ 437.222610][T16027] ? preempt_schedule_common+0x82/0xd0 [ 437.222630][T16027] ? bpf_test_run+0x1d1/0x830 [ 437.222669][T16027] ? bpf_test_run+0x1d1/0x830 [ 437.222708][T16027] ? kvm_sched_clock_read+0x11/0x20 [ 437.222729][T16027] bpf_test_run+0x5c9/0x830 [ 437.222773][T16027] ? __pfx_bpf_test_run+0x10/0x10 [ 437.222805][T16027] ? trace_kmem_cache_alloc+0x29/0xe0 [ 437.222833][T16027] ? __kasan_krealloc+0xec/0x110 [ 437.222871][T16027] ? skb_dst_set+0x72/0x140 [ 437.222895][T16027] bpf_prog_test_run_skb+0xe35/0x2230 [ 437.222938][T16027] ? __fget_files+0x3a2/0x420 [ 437.222961][T16027] ? __fget_files+0x2a/0x420 [ 437.222990][T16027] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 437.223013][T16027] bpf_prog_test_run+0x2c5/0x340 [ 437.223036][T16027] __sys_bpf+0x643/0x950 [ 437.223069][T16027] ? __pfx___sys_bpf+0x10/0x10 [ 437.223114][T16027] ? ksys_write+0x242/0x270 [ 437.223146][T16027] ? __pfx_ksys_write+0x10/0x10 [ 437.223179][T16027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.223201][T16027] __x64_sys_bpf+0x7c/0x90 [ 437.223229][T16027] do_syscall_64+0x174/0x580 [ 437.223249][T16027] ? trace_irq_disable+0x3b/0x140 [ 437.223278][T16027] ? clear_bhb_loop+0x40/0x90 [ 437.223303][T16027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.223323][T16027] RIP: 0033:0x7f3cf6b9ce59 [ 437.223341][T16027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.223357][T16027] RSP: 002b:00007f3cf79fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 437.223378][T16027] RAX: ffffffffffffffda RBX: 00007f3cf6e16090 RCX: 00007f3cf6b9ce59 [ 437.223393][T16027] RDX: 000000000000003d RSI: 0000200000000080 RDI: 000000000000000a [ 437.223405][T16027] RBP: 00007f3cf79fc090 R08: 0000000000000000 R09: 0000000000000000 [ 437.223417][T16027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.223428][T16027] R13: 00007f3cf6e16128 R14: 00007f3cf6e16090 R15: 00007ffeef32aed8 [ 437.223461][T16027] [ 437.677453][T16030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2608'. [ 437.824720][T16032] netlink: 'syz.1.2609': attribute type 1 has an invalid length. [ 437.986816][T16032] 8021q: adding VLAN 0 to HW filter on device bond4 [ 438.027452][T16033] macvlan2: entered promiscuous mode [ 438.032821][T16033] macvlan2: entered allmulticast mode [ 438.101787][T16033] bond4: entered promiscuous mode [ 438.111331][T16033] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 438.159142][T16033] bond4: left promiscuous mode [ 438.345923][T16053] syzkaller0: entered promiscuous mode [ 438.351492][T16053] syzkaller0: entered allmulticast mode [ 440.741816][T16075] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 445.155870][ T5010] block nbd3: Possible stuck request ffff888026f986c0: control (read@0,1024B). Runtime 270 seconds [ 445.175247][ T5010] block nbd3: Possible stuck request ffff888026f98880: control (read@1024,1024B). Runtime 270 seconds [ 445.186317][ T5010] block nbd3: Possible stuck request ffff888026f98a40: control (read@2048,1024B). Runtime 270 seconds [ 445.197598][ T5010] block nbd3: Possible stuck request ffff888026f98c00: control (read@3072,1024B). Runtime 270 seconds [ 446.022776][ T4995] udevd[4995]: worker [5656] /devices/virtual/block/nbd3 timeout; kill it [ 446.033438][ T4995] udevd[4995]: seq 21194 '/devices/virtual/block/nbd3' killed [ 453.740514][ T5650] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 453.751007][ T5650] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 453.769565][ T5648] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 453.787345][ T5648] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 453.792990][ T5650] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 453.802971][ T5648] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 453.811132][ T5648] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 453.819285][ T5648] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 453.826019][ T5650] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 453.834098][ T5650] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.737597][ T5648] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 454.749734][T16139] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.757433][T16139] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.764737][T16139] bridge_slave_0: entered allmulticast mode [ 454.779141][T16139] bridge_slave_0: entered promiscuous mode [ 454.779428][ T5648] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 454.794233][ T5648] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 454.802297][ T5648] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 454.816022][ T5648] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 454.849387][T16139] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.857040][T16139] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.864328][T16139] bridge_slave_1: entered allmulticast mode [ 454.888530][T16139] bridge_slave_1: entered promiscuous mode [ 454.940146][T16137] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.947399][T16137] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.956575][T16137] bridge_slave_0: entered allmulticast mode [ 454.964608][T16137] bridge_slave_0: entered promiscuous mode [ 454.974756][T16139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.000578][T16139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.010146][T16137] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.017919][T16137] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.025300][T16137] bridge_slave_1: entered allmulticast mode [ 455.033245][T16137] bridge_slave_1: entered promiscuous mode [ 455.103827][T16139] team0: Port device team_slave_0 added [ 455.114223][T16137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.127227][T16139] team0: Port device team_slave_1 added [ 455.135374][T16137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.209029][T16137] team0: Port device team_slave_0 added [ 455.215938][T16139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.223887][T16139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.251621][T16139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.265414][T16137] team0: Port device team_slave_1 added [ 455.287573][T16139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.294641][T16139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.321934][T16139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.392245][T16137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.399500][T16137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.425907][T16137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.451078][T16139] hsr_slave_0: entered promiscuous mode [ 455.473479][T16139] hsr_slave_1: entered promiscuous mode [ 455.481213][T16137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.489299][T16137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.518244][T16137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.705755][T16137] hsr_slave_0: entered promiscuous mode [ 455.712539][T16137] hsr_slave_1: entered promiscuous mode [ 455.718922][T16137] debugfs: 'hsr0' already exists in 'hsr' [ 455.724684][T16137] Cannot create hsr debugfs directory [ 455.892656][ T5648] Bluetooth: hci5: command tx timeout [ 455.905908][ T5648] Bluetooth: hci6: command tx timeout [ 456.271055][T16169] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.278408][T16169] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.285719][T16169] bridge_slave_0: entered allmulticast mode [ 456.293875][T16169] bridge_slave_0: entered promiscuous mode [ 456.302187][T16169] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.309401][T16169] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.316942][T16169] bridge_slave_1: entered allmulticast mode [ 456.324289][T16169] bridge_slave_1: entered promiscuous mode [ 456.360297][T16169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.373177][T16169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.406123][T16169] team0: Port device team_slave_0 added [ 456.414558][T16169] team0: Port device team_slave_1 added [ 456.441816][T16169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.448825][T16169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.475250][T16169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.488469][T16169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.495625][T16169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.521582][T16169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.567031][T16169] hsr_slave_0: entered promiscuous mode [ 456.573668][T16169] hsr_slave_1: entered promiscuous mode [ 456.579834][T16169] debugfs: 'hsr0' already exists in 'hsr' [ 456.585912][T16169] Cannot create hsr debugfs directory [ 456.872379][ T5648] Bluetooth: hci7: command tx timeout [ 457.235454][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 457.245768][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 457.259821][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 457.270037][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 457.279515][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 457.761296][ T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 457.773845][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 457.781689][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 457.795717][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 457.803603][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 457.937639][T16190] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.945046][T16190] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.952905][T16190] bridge_slave_0: entered allmulticast mode [ 457.960870][T16190] bridge_slave_0: entered promiscuous mode [ 457.968162][ T50] Bluetooth: hci6: command tx timeout [ 457.973655][ T5648] Bluetooth: hci5: command tx timeout [ 457.987866][T16190] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.995863][T16190] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.003745][T16190] bridge_slave_1: entered allmulticast mode [ 458.011760][T16190] bridge_slave_1: entered promiscuous mode [ 458.055684][T16190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.069013][T16190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.113476][T16190] team0: Port device team_slave_0 added [ 458.122563][T16190] team0: Port device team_slave_1 added [ 458.180805][T16190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.187898][T16190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.213869][T16190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.226697][T16190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.233691][T16190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.287176][T16190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.369965][T16190] hsr_slave_0: entered promiscuous mode [ 458.377474][T16190] hsr_slave_1: entered promiscuous mode [ 458.384273][T16190] debugfs: 'hsr0' already exists in 'hsr' [ 458.390062][T16190] Cannot create hsr debugfs directory [ 458.744149][T16204] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.751436][T16204] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.758691][T16204] bridge_slave_0: entered allmulticast mode [ 458.766058][T16204] bridge_slave_0: entered promiscuous mode [ 458.774114][T16204] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.781228][T16204] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.788420][T16204] bridge_slave_1: entered allmulticast mode [ 458.795819][T16204] bridge_slave_1: entered promiscuous mode [ 458.825197][T16204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.838677][T16204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.878169][T16204] team0: Port device team_slave_0 added [ 458.886181][T16204] team0: Port device team_slave_1 added [ 458.913741][T16204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.920807][T16204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.946775][T16204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.960405][T16204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.967920][T16204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.979260][ T5648] Bluetooth: hci7: command tx timeout [ 458.995155][T16204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.045738][T16204] hsr_slave_0: entered promiscuous mode [ 459.052459][T16204] hsr_slave_1: entered promiscuous mode [ 459.058676][T16204] debugfs: 'hsr0' already exists in 'hsr' [ 459.064488][T16204] Cannot create hsr debugfs directory [ 459.362467][ T5648] Bluetooth: hci8: command tx timeout [ 459.874786][ T5648] Bluetooth: hci9: command tx timeout [ 460.032341][ T50] Bluetooth: hci6: command tx timeout [ 460.032341][ T5648] Bluetooth: hci5: command tx timeout [ 460.992263][ T5648] Bluetooth: hci7: command tx timeout [ 461.392643][ T5648] Bluetooth: hci8: command tx timeout [ 461.952699][ T5648] Bluetooth: hci9: command tx timeout [ 462.112336][ T50] Bluetooth: hci6: command tx timeout [ 462.117843][ T5648] Bluetooth: hci5: command tx timeout [ 463.074060][ T5648] Bluetooth: hci7: command tx timeout [ 463.472314][ T5648] Bluetooth: hci8: command tx timeout [ 464.117008][ T5648] Bluetooth: hci9: command tx timeout [ 465.562688][ T5648] Bluetooth: hci8: command tx timeout [ 466.212380][ T5648] Bluetooth: hci9: command tx timeout [ 475.234793][ T5010] block nbd3: Possible stuck request ffff888026f986c0: control (read@0,1024B). Runtime 300 seconds [ 475.245751][ T5010] block nbd3: Possible stuck request ffff888026f98880: control (read@1024,1024B). Runtime 300 seconds [ 475.256860][ T5010] block nbd3: Possible stuck request ffff888026f98a40: control (read@2048,1024B). Runtime 300 seconds [ 475.267912][ T5010] block nbd3: Possible stuck request ffff888026f98c00: control (read@3072,1024B). Runtime 300 seconds [ 505.322701][ T5010] block nbd3: Possible stuck request ffff888026f986c0: control (read@0,1024B). Runtime 330 seconds [ 505.334829][ T5010] block nbd3: Possible stuck request ffff888026f98880: control (read@1024,1024B). Runtime 330 seconds [ 505.345940][ T5010] block nbd3: Possible stuck request ffff888026f98a40: control (read@2048,1024B). Runtime 330 seconds [ 505.356958][ T5010] block nbd3: Possible stuck request ffff888026f98c00: control (read@3072,1024B). Runtime 330 seconds [ 513.844067][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 513.861787][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 513.875847][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 513.885283][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 513.893201][ T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 513.934925][ T5648] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 513.948647][ T5648] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 513.957934][ T5648] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 513.967692][ T5648] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 513.975634][ T5648] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 514.739532][T16235] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.746840][T16235] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.754056][T16235] bridge_slave_0: entered allmulticast mode [ 514.761351][T16235] bridge_slave_0: entered promiscuous mode [ 514.800988][T16235] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.808204][T16235] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.817022][T16235] bridge_slave_1: entered allmulticast mode [ 514.824633][T16235] bridge_slave_1: entered promiscuous mode [ 514.875506][T16235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.901644][T16235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.910936][T16237] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.918592][T16237] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.925997][T16237] bridge_slave_0: entered allmulticast mode [ 514.933808][T16237] bridge_slave_0: entered promiscuous mode [ 514.951065][T16237] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.958267][T16237] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.965833][T16237] bridge_slave_1: entered allmulticast mode [ 514.973350][T16237] bridge_slave_1: entered promiscuous mode [ 515.019102][T16235] team0: Port device team_slave_0 added [ 515.027931][T16237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.039435][T16235] team0: Port device team_slave_1 added [ 515.047671][T16237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.100976][T16235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.108145][T16235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.143510][T16235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.157061][T16237] team0: Port device team_slave_0 added [ 515.163714][T16235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.170721][T16235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.196826][T16235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.210189][T16237] team0: Port device team_slave_1 added [ 515.264058][T16237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.271057][T16237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.297620][T16237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.350444][T16235] hsr_slave_0: entered promiscuous mode [ 515.357395][T16235] hsr_slave_1: entered promiscuous mode [ 515.364249][T16235] debugfs: 'hsr0' already exists in 'hsr' [ 515.370021][T16235] Cannot create hsr debugfs directory [ 515.376711][T16237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.385210][T16237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.412431][T16237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.484303][ T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 515.498984][ T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 515.507226][ T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 515.515723][ T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 515.523660][T16237] hsr_slave_0: entered promiscuous mode [ 515.523978][ T50] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 515.532994][T16237] hsr_slave_1: entered promiscuous mode [ 515.542851][T16237] debugfs: 'hsr0' already exists in 'hsr' [ 515.548891][T16237] Cannot create hsr debugfs directory [ 515.952242][ T50] Bluetooth: hci10: command tx timeout [ 516.032207][ T50] Bluetooth: hci11: command tx timeout [ 516.218245][T16270] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.225870][T16270] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.233531][T16270] bridge_slave_0: entered allmulticast mode [ 516.241707][T16270] bridge_slave_0: entered promiscuous mode [ 516.251428][T16270] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.261062][T16270] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.270424][T16270] bridge_slave_1: entered allmulticast mode [ 516.278294][T16270] bridge_slave_1: entered promiscuous mode [ 516.308600][T16270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.320802][T16270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.359606][T16270] team0: Port device team_slave_0 added [ 516.368572][T16270] team0: Port device team_slave_1 added [ 516.405198][T16270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.412740][T16270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.438897][T16270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.451349][T16270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.458406][T16270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.484455][T16270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.535127][T16270] hsr_slave_0: entered promiscuous mode [ 516.541639][T16270] hsr_slave_1: entered promiscuous mode [ 516.548214][T16270] debugfs: 'hsr0' already exists in 'hsr' [ 516.554051][T16270] Cannot create hsr debugfs directory [ 517.594762][ T5648] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 517.605103][ T5648] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 517.614680][ T5648] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 517.625638][ T5648] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 517.635117][ T5648] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 517.672715][ T50] Bluetooth: hci12: command tx timeout [ 518.125468][ T50] Bluetooth: hci10: command tx timeout [ 518.126755][ T5648] Bluetooth: hci11: command tx timeout [ 518.170656][T16288] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.177848][T16288] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.185076][T16288] bridge_slave_0: entered allmulticast mode [ 518.192558][T16288] bridge_slave_0: entered promiscuous mode [ 518.200541][T16288] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.207706][T16288] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.214918][T16288] bridge_slave_1: entered allmulticast mode [ 518.222298][T16288] bridge_slave_1: entered promiscuous mode [ 518.269308][T16288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.281975][T16288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.326207][T16288] team0: Port device team_slave_0 added [ 518.335911][T16288] team0: Port device team_slave_1 added [ 518.390831][T16288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.398035][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.424044][T16288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.437757][T16288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.444794][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.471089][T16288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.564727][T16288] hsr_slave_0: entered promiscuous mode [ 518.572039][T16288] hsr_slave_1: entered promiscuous mode [ 518.579875][T16288] debugfs: 'hsr0' already exists in 'hsr' [ 518.604522][T16288] Cannot create hsr debugfs directory [ 518.655953][ T5648] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 518.666179][ T5648] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 518.674078][ T5648] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 518.685523][ T5648] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 518.693703][ T5648] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 519.272053][T16306] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.279384][T16306] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.286741][T16306] bridge_slave_0: entered allmulticast mode [ 519.299124][T16306] bridge_slave_0: entered promiscuous mode [ 519.307258][T16306] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.314412][T16306] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.321700][T16306] bridge_slave_1: entered allmulticast mode [ 519.329299][T16306] bridge_slave_1: entered promiscuous mode [ 519.370571][T16306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.384662][T16306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.414910][T16306] team0: Port device team_slave_0 added [ 519.423673][T16306] team0: Port device team_slave_1 added [ 519.451344][T16306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.458354][T16306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.484744][T16306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.498282][T16306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.505351][T16306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.531320][T16306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.586796][T16306] hsr_slave_0: entered promiscuous mode [ 519.593403][T16306] hsr_slave_1: entered promiscuous mode [ 519.599845][T16306] debugfs: 'hsr0' already exists in 'hsr' [ 519.605957][T16306] Cannot create hsr debugfs directory [ 519.673202][ T50] Bluetooth: hci13: command tx timeout [ 519.722598][ T50] Bluetooth: hci12: command tx timeout [ 520.270050][ T5648] Bluetooth: hci11: command tx timeout [ 520.276883][ T50] Bluetooth: hci10: command tx timeout [ 520.753090][ T5648] Bluetooth: hci14: command tx timeout [ 521.722521][ T5648] Bluetooth: hci13: command tx timeout [ 521.832369][ T5648] Bluetooth: hci12: command tx timeout [ 522.314301][ T5648] Bluetooth: hci11: command tx timeout [ 522.315827][ T50] Bluetooth: hci10: command tx timeout [ 522.851467][ T5648] Bluetooth: hci14: command tx timeout [ 523.818931][ T5648] Bluetooth: hci13: command tx timeout [ 523.926562][ T5648] Bluetooth: hci12: command tx timeout [ 524.912651][ T5648] Bluetooth: hci14: command tx timeout [ 525.872348][ T5648] Bluetooth: hci13: command tx timeout [ 527.054884][ T5648] Bluetooth: hci14: command tx timeout [ 535.397252][ T5010] block nbd3: Possible stuck request ffff888026f986c0: control (read@0,1024B). Runtime 360 seconds [ 535.408210][ T5010] block nbd3: Possible stuck request ffff888026f98880: control (read@1024,1024B). Runtime 360 seconds [ 535.419310][ T5010] block nbd3: Possible stuck request ffff888026f98a40: control (read@2048,1024B). Runtime 360 seconds [ 535.430407][ T5010] block nbd3: Possible stuck request ffff888026f98c00: control (read@3072,1024B). Runtime 360 seconds [ 565.475142][ T5010] block nbd3: Possible stuck request ffff888026f986c0: control (read@0,1024B). Runtime 390 seconds [ 565.486052][ T5010] block nbd3: Possible stuck request ffff888026f98880: control (read@1024,1024B). Runtime 390 seconds [ 565.499172][ T5010] block nbd3: Possible stuck request ffff888026f98a40: control (read@2048,1024B). Runtime 390 seconds [ 565.510304][ T5010] block nbd3: Possible stuck request ffff888026f98c00: control (read@3072,1024B). Runtime 390 seconds [ 573.932354][ T50] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 573.946053][ T50] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 573.955028][ T50] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 573.963743][ T50] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 573.971943][ T50] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 574.059255][ T50] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 574.070274][ T50] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 574.078191][ T50] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 574.088191][ T50] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 574.095915][ T50] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 574.781880][T16333] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.789505][T16333] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.796921][T16333] bridge_slave_0: entered allmulticast mode [ 574.804398][T16333] bridge_slave_0: entered promiscuous mode [ 574.845767][T16333] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.853049][T16333] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.860388][T16333] bridge_slave_1: entered allmulticast mode [ 574.868609][T16333] bridge_slave_1: entered promiscuous mode [ 574.915332][T16333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.944201][T16333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.977598][T16336] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.984931][T16336] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.992215][T16336] bridge_slave_0: entered allmulticast mode [ 574.999848][T16336] bridge_slave_0: entered promiscuous mode [ 575.018532][T16336] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.025933][T16336] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.033224][T16336] bridge_slave_1: entered allmulticast mode [ 575.051515][T16336] bridge_slave_1: entered promiscuous mode [ 575.061027][T16333] team0: Port device team_slave_0 added [ 575.083731][T16333] team0: Port device team_slave_1 added [ 575.114358][T16336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.136620][T16336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.146543][T16333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.163737][T16333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.189677][T16333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.212082][T16333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.219122][T16333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.245833][T16333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.286920][T16336] team0: Port device team_slave_0 added [ 575.296023][T16336] team0: Port device team_slave_1 added [ 575.346952][T16336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.354102][T16336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.390032][T16336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.406861][T16333] hsr_slave_0: entered promiscuous mode [ 575.413678][T16333] hsr_slave_1: entered promiscuous mode [ 575.419935][T16333] debugfs: 'hsr0' already exists in 'hsr' [ 575.426045][T16333] Cannot create hsr debugfs directory [ 575.432490][T16336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.439463][T16336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.465386][T16336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.551706][T16336] hsr_slave_0: entered promiscuous mode [ 575.558457][T16336] hsr_slave_1: entered promiscuous mode [ 575.564997][T16336] debugfs: 'hsr0' already exists in 'hsr' [ 575.570740][T16336] Cannot create hsr debugfs directory [ 576.047397][ T50] Bluetooth: hci15: command tx timeout [ 576.178807][ T5648] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 576.192567][ T5648] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 576.203809][ T5648] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 576.213644][ T5648] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 576.224330][ T5648] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 576.267300][ T50] Bluetooth: hci16: command tx timeout [ 576.830650][T16368] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.837883][T16368] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.845190][T16368] bridge_slave_0: entered allmulticast mode [ 576.852895][T16368] bridge_slave_0: entered promiscuous mode [ 576.868579][T16368] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.875893][T16368] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.883201][T16368] bridge_slave_1: entered allmulticast mode [ 576.890608][T16368] bridge_slave_1: entered promiscuous mode [ 576.930010][T16368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.944251][T16368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.985834][T16368] team0: Port device team_slave_0 added [ 576.997320][T16368] team0: Port device team_slave_1 added [ 577.038077][T16368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.045831][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.071857][T16368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.097860][T16368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.105099][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.131012][T16368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.199940][T16368] hsr_slave_0: entered promiscuous mode [ 577.206718][T16368] hsr_slave_1: entered promiscuous mode [ 577.213014][T16368] debugfs: 'hsr0' already exists in 'hsr' [ 577.218750][T16368] Cannot create hsr debugfs directory [ 578.122217][ T50] Bluetooth: hci15: command tx timeout [ 578.280316][ T5650] Bluetooth: hci17: command tx timeout [ 578.352257][T16387] Bluetooth: hci16: command tx timeout [ 578.454179][T16386] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 578.465166][T16386] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 578.473446][T16386] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 578.481539][T16386] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 578.490113][T16386] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 579.038898][T16389] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.055356][T16389] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.062851][T16389] bridge_slave_0: entered allmulticast mode [ 579.070841][T16389] bridge_slave_0: entered promiscuous mode [ 579.080279][T16389] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.088450][T16389] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.095795][T16389] bridge_slave_1: entered allmulticast mode [ 579.103561][T16389] bridge_slave_1: entered promiscuous mode [ 579.132566][T16389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.144923][T16389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.181395][T16389] team0: Port device team_slave_0 added [ 579.189613][T16389] team0: Port device team_slave_1 added [ 579.217374][T16389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.224572][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.250721][T16389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.263336][T16389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.270286][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.296576][T16389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.342601][T16389] hsr_slave_0: entered promiscuous mode [ 579.350043][T16389] hsr_slave_1: entered promiscuous mode [ 579.356471][T16389] debugfs: 'hsr0' already exists in 'hsr' [ 579.362364][T16389] Cannot create hsr debugfs directory [ 579.585608][T16387] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 579.598304][T16387] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 579.610467][T16387] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 579.620625][T16387] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 579.637405][T16387] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 580.192217][T16387] Bluetooth: hci15: command tx timeout [ 580.207372][T16408] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.214577][T16408] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.222005][T16408] bridge_slave_0: entered allmulticast mode [ 580.229949][T16408] bridge_slave_0: entered promiscuous mode [ 580.237975][T16408] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.245178][T16408] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.252465][T16408] bridge_slave_1: entered allmulticast mode [ 580.259868][T16408] bridge_slave_1: entered promiscuous mode [ 580.304585][T16408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.316661][T16408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.346828][T16408] team0: Port device team_slave_0 added [ 580.352553][T16387] Bluetooth: hci6: command 0x0406 tx timeout [ 580.359162][T16387] Bluetooth: hci7: command 0x0406 tx timeout [ 580.365710][T16387] Bluetooth: hci17: command tx timeout [ 580.371224][T16387] Bluetooth: hci8: command 0x0406 tx timeout [ 580.377271][T16386] Bluetooth: hci5: command 0x0406 tx timeout [ 580.389450][T16408] team0: Port device team_slave_1 added [ 580.405052][T16387] Bluetooth: hci9: command 0x0406 tx timeout [ 580.432440][T16385] Bluetooth: hci16: command tx timeout [ 580.452803][T16408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.459865][T16408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.494597][T16408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.507972][T16408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.516338][T16408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.550776][T16408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.592903][ T50] Bluetooth: hci18: command tx timeout [ 580.614500][T16408] hsr_slave_0: entered promiscuous mode [ 580.620977][T16408] hsr_slave_1: entered promiscuous mode [ 580.628368][T16408] debugfs: 'hsr0' already exists in 'hsr' [ 580.634200][T16408] Cannot create hsr debugfs directory [ 581.719612][ T50] Bluetooth: hci19: command tx timeout [ 582.361403][ T50] Bluetooth: hci15: command tx timeout [ 582.432263][ T50] Bluetooth: hci17: command tx timeout [ 582.522228][ T50] Bluetooth: hci16: command tx timeout [ 582.682591][ T50] Bluetooth: hci18: command tx timeout [ 583.792472][ T50] Bluetooth: hci19: command tx timeout [ 584.512302][ T50] Bluetooth: hci17: command tx timeout [ 584.753723][ T50] Bluetooth: hci18: command tx timeout [ 585.872888][ T50] Bluetooth: hci19: command tx timeout [ 586.845230][ T50] Bluetooth: hci18: command tx timeout [ 587.952833][ T50] Bluetooth: hci19: command tx timeout [ 589.153230][ T30] INFO: task syz.0.2614:16059 blocked for more than 143 seconds. [ 589.162117][ T30] Not tainted syzkaller #0 [ 589.167098][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 589.175794][ T30] task:syz.0.2614 state:D stack:26736 pid:16059 tgid:16058 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 589.188165][ T30] Call Trace: [ 589.191506][ T30] [ 589.194656][ T30] __schedule+0x1840/0x57a0 [ 589.199210][ T30] ? __lock_acquire+0x683/0x2cd0 [ 589.204318][ T30] ? __pfx___schedule+0x10/0x10 [ 589.209373][ T30] ? schedule+0x90/0x360 [ 589.213783][ T30] schedule+0x164/0x360 [ 589.218001][ T30] schedule_preempt_disabled+0x13/0x30 [ 589.224311][ T30] __mutex_lock+0x7c5/0x1590 [ 589.228972][ T30] ? __mutex_lock+0x5c5/0x1590 [ 589.235461][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 589.240219][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 589.245594][ T30] ? __dev_queue_xmit+0x29b/0x37f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 589.250782][ T30] ? radix_tree_lookup+0x240/0x290 [ 589.256087][ T30] genl_rcv_msg+0x10b/0x7a0 [ 589.260670][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.280400][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 589.305857][ T30] netlink_rcv_skb+0x226/0x4a0 [ 589.324298][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.343581][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.349332][ T30] ? down_read+0x270/0x2e0 [ 589.354125][ T30] ? genl_rcv+0xd/0x40 [ 589.358267][ T30] genl_rcv+0x28/0x40 [ 589.362416][ T30] netlink_unicast+0x7bb/0x940 [ 589.367294][ T30] netlink_sendmsg+0x813/0xb40 [ 589.372855][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.378240][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 589.385310][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 589.390682][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.399587][ T30] __sys_sendto+0x672/0x710 [ 589.405177][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 589.410578][ T30] ? errseq_sample+0x40/0x70 [ 589.415528][ T30] ? fd_install+0x94/0x3d0 [ 589.420076][ T30] ? fd_install+0x306/0x3d0 [ 589.424869][ T30] __x64_sys_sendto+0xde/0x100 [ 589.429691][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.435913][ T30] do_syscall_64+0x174/0x580 [ 589.440564][ T30] ? trace_irq_disable+0x3b/0x140 [ 589.446149][ T30] ? clear_bhb_loop+0x40/0x90 [ 589.450903][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.457006][ T30] RIP: 0033:0x7f89ced5d68e [ 589.461482][ T30] RSP: 002b:00007f89cfb87e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 589.470231][ T30] RAX: ffffffffffffffda RBX: 00007f89cfb896c0 RCX: 00007f89ced5d68e [ 589.478312][ T30] RDX: 0000000000000020 RSI: 00007f89cfb88000 RDI: 0000000000000009 [ 589.486494][ T30] RBP: 0000000000000000 R08: 00007f89cfb87f04 R09: 000000000000000c [ 589.494690][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 589.502956][ T30] R13: 00007f89cfb87f58 R14: 00007f89cfb88000 R15: 0000000000000000 [ 589.511124][ T30] [ 589.514538][ T30] INFO: task syz.3.2615:16065 blocked for more than 143 seconds. [ 589.522394][ T30] Not tainted syzkaller #0 [ 589.527356][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 589.536506][ T30] task:syz.3.2615 state:D stack:26376 pid:16065 tgid:16064 ppid:5643 task_flags:0x480140 flags:0x00080002 [ 589.548764][ T30] Call Trace: [ 589.552242][ T30] [ 589.555216][ T30] __schedule+0x1840/0x57a0 [ 589.559787][ T30] ? __pfx___schedule+0x10/0x10 [ 589.564792][ T30] ? schedule+0x90/0x360 [ 589.569110][ T30] schedule+0x164/0x360 [ 589.573519][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 589.579130][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 589.585497][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 589.591897][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 589.598149][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 589.604512][ T30] nbd_set_size+0x454/0x680 [ 589.609059][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 589.614217][ T30] ? nla_memcpy+0x5b/0xc0 [ 589.618588][ T30] nbd_genl_reconfigure+0x7e9/0x1e80 [ 589.624335][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 589.630100][ T30] ? rcu_is_watching+0x15/0xb0 [ 589.635100][ T30] ? trace_kmalloc+0x2a/0xf0 [ 589.639832][ T30] ? __nla_parse+0x40/0x60 [ 589.644401][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 589.650773][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 589.657240][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 589.663030][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 589.670172][ T30] ? __lock_acquire+0x683/0x2cd0 [ 589.675342][ T30] genl_rcv_msg+0x614/0x7a0 [ 589.679898][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.685204][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 589.690984][ T30] netlink_rcv_skb+0x226/0x4a0 [ 589.695850][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.700905][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.706429][ T30] ? down_read+0x270/0x2e0 [ 589.710886][ T30] ? genl_rcv+0xd/0x40 [ 589.715218][ T30] genl_rcv+0x28/0x40 [ 589.719233][ T30] netlink_unicast+0x7bb/0x940 [ 589.724143][ T30] netlink_sendmsg+0x813/0xb40 [ 589.728946][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.734415][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 589.739413][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 589.744909][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.750259][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 589.755159][ T30] ? __might_fault+0xaf/0x130 [ 589.759874][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.765354][ T30] ? import_iovec+0x73/0xa0 [ 589.769928][ T30] ___sys_sendmsg+0x2a5/0x360 [ 589.774844][ T30] ? __lock_acquire+0x683/0x2cd0 [ 589.779819][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.785245][ T30] ? futex_wait+0x2a2/0x390 [ 589.789835][ T30] ? __fget_files+0x2a/0x420 [ 589.795091][ T30] ? __fget_files+0x3a2/0x420 [ 589.799848][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 589.804937][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.810460][ T30] ? rcu_is_watching+0x15/0xb0 [ 589.815411][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.821529][ T30] do_syscall_64+0x174/0x580 [ 589.826442][ T30] ? trace_irq_disable+0x3b/0x140 [ 589.831531][ T30] ? clear_bhb_loop+0x40/0x90 [ 589.836356][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.842433][ T30] RIP: 0033:0x7f9e0619ce59 [ 589.846873][ T30] RSP: 002b:00007f9e06f7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.855407][ T30] RAX: ffffffffffffffda RBX: 00007f9e06415fa0 RCX: 00007f9e0619ce59 [ 589.863562][ T30] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000007 [ 589.871589][ T30] RBP: 00007f9e06232d6f R08: 0000000000000000 R09: 0000000000000000 [ 589.880505][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.888600][ T30] R13: 00007f9e06416038 R14: 00007f9e06415fa0 R15: 00007fff44a719b8 [ 589.896677][ T30] [ 589.899737][ T30] INFO: task syz.3.2615:16066 blocked for more than 144 seconds. [ 589.907763][ T30] Not tainted syzkaller #0 [ 589.912845][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 589.921573][ T30] task:syz.3.2615 state:D stack:26688 pid:16066 tgid:16064 ppid:5643 task_flags:0x400140 flags:0x00080002 [ 589.933652][ T30] Call Trace: [ 589.936941][ T30] [ 589.939900][ T30] __schedule+0x1840/0x57a0 [ 589.944608][ T30] ? __lock_acquire+0x683/0x2cd0 [ 589.949613][ T30] ? netlink_sendskb+0x68/0x140 [ 589.955006][ T30] ? netlink_rcv_skb+0x2a4/0x4a0 [ 589.960036][ T30] ? genl_rcv+0x28/0x40 [ 589.964349][ T30] ? __pfx___schedule+0x10/0x10 [ 589.969251][ T30] ? schedule+0x90/0x360 [ 589.973621][ T30] schedule+0x164/0x360 [ 589.977804][ T30] schedule_preempt_disabled+0x13/0x30 [ 589.983423][ T30] __mutex_lock+0x7c5/0x1590 [ 589.988082][ T30] ? __mutex_lock+0x5c5/0x1590 [ 589.993007][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 589.997728][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 590.002918][ T30] ? __lock_acquire+0x683/0x2cd0 [ 590.008071][ T30] ? radix_tree_lookup+0x240/0x290 [ 590.013540][ T30] genl_rcv_msg+0x10b/0x7a0 [ 590.018158][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.023416][ T30] netlink_rcv_skb+0x226/0x4a0 [ 590.028260][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.033493][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 590.038901][ T30] ? down_read+0x270/0x2e0 [ 590.043469][ T30] ? genl_rcv+0xd/0x40 [ 590.047585][ T30] genl_rcv+0x28/0x40 [ 590.051609][ T30] netlink_unicast+0x7bb/0x940 [ 590.056519][ T30] netlink_sendmsg+0x813/0xb40 [ 590.061356][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.066884][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 590.071903][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.077295][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.082713][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 590.087532][ T30] ? __might_fault+0xaf/0x130 [ 590.092315][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.097654][ T30] ? import_iovec+0x73/0xa0 [ 590.102623][ T30] ___sys_sendmsg+0x2a5/0x360 [ 590.107377][ T30] ? __lock_acquire+0x683/0x2cd0 [ 590.112550][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.117810][ T30] ? futex_wake+0x4d7/0x5b0 [ 590.122670][ T30] ? __fget_files+0x2a/0x420 [ 590.127314][ T30] ? __fget_files+0x3a2/0x420 [ 590.132005][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 590.137073][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 590.142664][ T30] ? rcu_is_watching+0x15/0xb0 [ 590.147476][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.153649][ T30] do_syscall_64+0x174/0x580 [ 590.158275][ T30] ? trace_irq_disable+0x3b/0x140 [ 590.163415][ T30] ? clear_bhb_loop+0x40/0x90 [ 590.168130][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.174207][ T30] RIP: 0033:0x7f9e0619ce59 [ 590.178672][ T30] RSP: 002b:00007f9e043f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.187203][ T30] RAX: ffffffffffffffda RBX: 00007f9e06416090 RCX: 00007f9e0619ce59 [ 590.195395][ T30] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000007 [ 590.203845][ T30] RBP: 00007f9e06232d6f R08: 0000000000000000 R09: 0000000000000000 [ 590.211846][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.220162][ T30] R13: 00007f9e06416128 R14: 00007f9e06416090 R15: 00007fff44a719b8 [ 590.228330][ T30] [ 590.231412][ T30] INFO: task syz.3.2615:16069 blocked for more than 144 seconds. [ 590.242464][ T30] Not tainted syzkaller #0 [ 590.247445][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 590.256265][ T30] task:syz.3.2615 state:D stack:27936 pid:16069 tgid:16064 ppid:5643 task_flags:0x400040 flags:0x00080002 [ 590.268318][ T30] Call Trace: [ 590.271631][ T30] [ 590.274974][ T30] __schedule+0x1840/0x57a0 [ 590.279560][ T30] ? __lock_acquire+0x683/0x2cd0 [ 590.284680][ T30] ? __pfx___schedule+0x10/0x10 [ 590.289600][ T30] ? schedule+0x90/0x360 [ 590.293978][ T30] schedule+0x164/0x360 [ 590.298186][ T30] schedule_preempt_disabled+0x13/0x30 [ 590.303764][ T30] __mutex_lock+0x7c5/0x1590 [ 590.308409][ T30] ? __mutex_lock+0x5c5/0x1590 [ 590.313293][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 590.318016][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 590.323145][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 590.328305][ T30] ? radix_tree_lookup+0x240/0x290 [ 590.333579][ T30] genl_rcv_msg+0x10b/0x7a0 [ 590.338150][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.343438][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 590.348852][ T30] netlink_rcv_skb+0x226/0x4a0 [ 590.354104][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.359207][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 590.364618][ T30] ? down_read+0x270/0x2e0 [ 590.369068][ T30] ? genl_rcv+0xd/0x40 [ 590.373258][ T30] genl_rcv+0x28/0x40 [ 590.377278][ T30] netlink_unicast+0x7bb/0x940 [ 590.382180][ T30] netlink_sendmsg+0x813/0xb40 [ 590.386991][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.392554][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 590.397583][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.403007][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.408322][ T30] __sys_sendto+0x672/0x710 [ 590.412973][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 590.418038][ T30] ? errseq_sample+0x40/0x70 [ 590.422829][ T30] ? fd_install+0x94/0x3d0 [ 590.427313][ T30] ? fd_install+0x306/0x3d0 [ 590.431859][ T30] __x64_sys_sendto+0xde/0x100 [ 590.437122][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.443282][ T30] do_syscall_64+0x174/0x580 [ 590.447906][ T30] ? trace_irq_disable+0x3b/0x140 [ 590.453225][ T30] ? clear_bhb_loop+0x40/0x90 [ 590.457962][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.463976][ T30] RIP: 0033:0x7f9e0615d68e [ 590.468422][ T30] RSP: 002b:00007f9e043d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 590.476916][ T30] RAX: ffffffffffffffda RBX: 00007f9e043d56c0 RCX: 00007f9e0615d68e [ 590.485051][ T30] RDX: 0000000000000024 RSI: 00007f9e043d4000 RDI: 0000000000000009 [ 590.493168][ T30] RBP: 0000000000000000 R08: 00007f9e043d3f04 R09: 000000000000000c [ 590.501189][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 590.509418][ T30] R13: 00007f9e043d3f58 R14: 00007f9e043d4000 R15: 0000000000000000 [ 590.517557][ T30] [ 590.520631][ T30] INFO: task syz.1.2618:16077 blocked for more than 144 seconds. [ 590.528529][ T30] Not tainted syzkaller #0 [ 590.533559][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 590.542327][ T30] task:syz.1.2618 state:D stack:25832 pid:16077 tgid:16076 ppid:5630 task_flags:0x400140 flags:0x00080002 [ 590.554387][ T30] Call Trace: [ 590.557686][ T30] [ 590.560656][ T30] __schedule+0x1840/0x57a0 [ 590.565455][ T30] ? __lock_acquire+0x683/0x2cd0 [ 590.570499][ T30] ? __pfx___schedule+0x10/0x10 [ 590.575520][ T30] ? schedule+0x90/0x360 [ 590.579801][ T30] schedule+0x164/0x360 [ 590.584083][ T30] schedule_preempt_disabled+0x13/0x30 [ 590.589579][ T30] __mutex_lock+0x7c5/0x1590 [ 590.594361][ T30] ? __mutex_lock+0x5c5/0x1590 [ 590.599173][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 590.603976][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 590.609045][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 590.614394][ T30] ? radix_tree_lookup+0x240/0x290 [ 590.619582][ T30] genl_rcv_msg+0x10b/0x7a0 [ 590.624216][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.629277][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 590.634787][ T30] netlink_rcv_skb+0x226/0x4a0 [ 590.639609][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.644771][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 590.650111][ T30] ? down_read+0x270/0x2e0 [ 590.654673][ T30] ? genl_rcv+0xd/0x40 [ 590.658809][ T30] genl_rcv+0x28/0x40 [ 590.662927][ T30] netlink_unicast+0x7bb/0x940 [ 590.667745][ T30] netlink_sendmsg+0x813/0xb40 [ 590.672915][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.678262][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 590.683322][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.688651][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.694090][ T30] __sys_sendto+0x672/0x710 [ 590.698674][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 590.703835][ T30] ? exc_page_fault+0x6a/0xc0 [ 590.708553][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 590.713937][ T30] __x64_sys_sendto+0xde/0x100 [ 590.718735][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.724988][ T30] do_syscall_64+0x174/0x580 [ 590.729637][ T30] ? trace_irq_disable+0x3b/0x140 [ 590.734778][ T30] ? clear_bhb_loop+0x40/0x90 [ 590.739500][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.745498][ T30] RIP: 0033:0x7efee375d68e [ 590.749945][ T30] RSP: 002b:00007efee4712e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 590.758602][ T30] RAX: ffffffffffffffda RBX: 00007efee47146c0 RCX: 00007efee375d68e [ 590.766676][ T30] RDX: 0000000000000020 RSI: 00007efee4713000 RDI: 0000000000000007 [ 590.774743][ T30] RBP: 0000000000000000 R08: 00007efee4712f04 R09: 000000000000000c [ 590.783019][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 590.791058][ T30] R13: 00007efee4712f58 R14: 00007efee4713000 R15: 0000000000000000 [ 590.799175][ T30] [ 590.802291][ T30] INFO: task syz.2.2622:16122 blocked for more than 145 seconds. [ 590.810024][ T30] Not tainted syzkaller #0 [ 590.815188][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 590.824005][ T30] task:syz.2.2622 state:D stack:24832 pid:16122 tgid:16120 ppid:5631 task_flags:0x400140 flags:0x00080002 [ 590.836132][ T30] Call Trace: [ 590.839505][ T30] [ 590.842523][ T30] __schedule+0x1840/0x57a0 [ 590.847064][ T30] ? __lock_acquire+0x683/0x2cd0 [ 590.852127][ T30] ? __pfx___schedule+0x10/0x10 [ 590.857034][ T30] ? schedule+0x90/0x360 [ 590.861311][ T30] schedule+0x164/0x360 [ 590.865592][ T30] schedule_preempt_disabled+0x13/0x30 [ 590.871101][ T30] __mutex_lock+0x7c5/0x1590 [ 590.875804][ T30] ? __mutex_lock+0x5c5/0x1590 [ 590.880609][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 590.885410][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 590.890471][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 590.895868][ T30] ? radix_tree_lookup+0x240/0x290 [ 590.901069][ T30] genl_rcv_msg+0x10b/0x7a0 [ 590.905701][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.910765][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 590.916919][ T30] netlink_rcv_skb+0x226/0x4a0 [ 590.921737][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 590.926928][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 590.932386][ T30] ? down_read+0x270/0x2e0 [ 590.936839][ T30] ? genl_rcv+0xd/0x40 [ 590.940924][ T30] genl_rcv+0x28/0x40 [ 590.945126][ T30] netlink_unicast+0x7bb/0x940 [ 590.949978][ T30] netlink_sendmsg+0x813/0xb40 [ 590.954876][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.960208][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 590.965295][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.970632][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.976046][ T30] __sys_sendto+0x672/0x710 [ 590.980605][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 590.985758][ T30] ? exc_page_fault+0x6a/0xc0 [ 590.990490][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 590.996068][ T30] __x64_sys_sendto+0xde/0x100 [ 591.000941][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.007372][ T30] do_syscall_64+0x174/0x580 [ 591.011996][ T30] ? trace_irq_disable+0x3b/0x140 [ 591.017237][ T30] ? clear_bhb_loop+0x40/0x90 [ 591.021953][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.027973][ T30] RIP: 0033:0x7ff4fe75d68e [ 591.032479][ T30] RSP: 002b:00007ff4fc9f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 591.040905][ T30] RAX: ffffffffffffffda RBX: 00007ff4fc9f66c0 RCX: 00007ff4fe75d68e [ 591.049002][ T30] RDX: 0000000000000020 RSI: 00007ff4fc9f5000 RDI: 000000000000000b [ 591.057141][ T30] RBP: 0000000000000000 R08: 00007ff4fc9f4f04 R09: 000000000000000c [ 591.065240][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 591.073529][ T30] R13: 00007ff4fc9f4f58 R14: 00007ff4fc9f5000 R15: 0000000000000000 [ 591.081586][ T30] [ 591.084772][ T30] INFO: task syz.4.2625:16132 blocked for more than 145 seconds. [ 591.092620][ T30] Not tainted syzkaller #0 [ 591.097581][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.106340][ T30] task:syz.4.2625 state:D stack:26784 pid:16132 tgid:16131 ppid:5632 task_flags:0x400140 flags:0x00080002 [ 591.118612][ T30] Call Trace: [ 591.121958][ T30] [ 591.124984][ T30] __schedule+0x1840/0x57a0 [ 591.129533][ T30] ? __lock_acquire+0x683/0x2cd0 [ 591.134619][ T30] ? __pfx___schedule+0x10/0x10 [ 591.139553][ T30] ? schedule+0x90/0x360 [ 591.144190][ T30] schedule+0x164/0x360 [ 591.148421][ T30] schedule_preempt_disabled+0x13/0x30 [ 591.154117][ T30] __mutex_lock+0x7c5/0x1590 [ 591.158747][ T30] ? __mutex_lock+0x5c5/0x1590 [ 591.163732][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 591.168496][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 591.173660][ T30] ? __lock_acquire+0x683/0x2cd0 [ 591.178643][ T30] ? radix_tree_lookup+0x240/0x290 [ 591.183927][ T30] genl_rcv_msg+0x10b/0x7a0 [ 591.188510][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 591.193675][ T30] netlink_rcv_skb+0x226/0x4a0 [ 591.198470][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 591.203614][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 591.208939][ T30] ? down_read+0x270/0x2e0 [ 591.213478][ T30] ? genl_rcv+0xd/0x40 [ 591.217610][ T30] genl_rcv+0x28/0x40 [ 591.221609][ T30] netlink_unicast+0x7bb/0x940 [ 591.226722][ T30] netlink_sendmsg+0x813/0xb40 [ 591.231566][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.236995][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 591.241978][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.247403][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.252839][ T30] __sys_sendto+0x672/0x710 [ 591.257409][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 591.262589][ T30] ? do_futex+0x333/0x420 [ 591.267000][ T30] ? __pfx___se_sys_futex+0x10/0x10 [ 591.272423][ T30] __x64_sys_sendto+0xde/0x100 [ 591.277280][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.283498][ T30] do_syscall_64+0x174/0x580 [ 591.288133][ T30] ? trace_irq_disable+0x3b/0x140 [ 591.293273][ T30] ? clear_bhb_loop+0x40/0x90 [ 591.297964][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.303973][ T30] RIP: 0033:0x7f3cf6b5d68e [ 591.308424][ T30] RSP: 002b:00007f3cf7a1be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 591.317064][ T30] RAX: ffffffffffffffda RBX: 00007f3cf7a1d6c0 RCX: 00007f3cf6b5d68e [ 591.325159][ T30] RDX: 0000000000000024 RSI: 00007f3cf7a1c000 RDI: 0000000000000009 [ 591.333410][ T30] RBP: 0000000000000000 R08: 00007f3cf7a1bf04 R09: 000000000000000c [ 591.341425][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 591.350337][ T30] R13: 00007f3cf7a1bf58 R14: 00007f3cf7a1c000 R15: 0000000000000000 [ 591.358453][ T30] [ 591.361509][ T30] INFO: task syz.4.2625:16133 blocked for more than 145 seconds. [ 591.369355][ T30] Not tainted syzkaller #0 [ 591.374387][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.383256][ T30] task:syz.4.2625 state:D stack:27200 pid:16133 tgid:16131 ppid:5632 task_flags:0x400140 flags:0x00080002 [ 591.395494][ T30] Call Trace: [ 591.398843][ T30] [ 591.401837][ T30] __schedule+0x1840/0x57a0 [ 591.406520][ T30] ? __lock_acquire+0x683/0x2cd0 [ 591.411483][ T30] ? __pfx___schedule+0x10/0x10 [ 591.416506][ T30] ? schedule+0x90/0x360 [ 591.420775][ T30] schedule+0x164/0x360 [ 591.425014][ T30] schedule_preempt_disabled+0x13/0x30 [ 591.430501][ T30] __mutex_lock+0x7c5/0x1590 [ 591.435207][ T30] ? __mutex_lock+0x5c5/0x1590 [ 591.440004][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 591.444985][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 591.450152][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 591.455421][ T30] ? radix_tree_lookup+0x240/0x290 [ 591.460577][ T30] genl_rcv_msg+0x10b/0x7a0 [ 591.465222][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 591.470287][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 591.475780][ T30] netlink_rcv_skb+0x226/0x4a0 [ 591.480582][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 591.485689][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 591.491033][ T30] ? down_read+0x270/0x2e0 [ 591.495618][ T30] ? genl_rcv+0xd/0x40 [ 591.499834][ T30] genl_rcv+0x28/0x40 [ 591.503920][ T30] netlink_unicast+0x7bb/0x940 [ 591.508750][ T30] netlink_sendmsg+0x813/0xb40 [ 591.513636][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.518963][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 591.524028][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.529351][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.534769][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 591.539575][ T30] ? __might_fault+0xaf/0x130 [ 591.544370][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.549700][ T30] ? import_iovec+0x73/0xa0 [ 591.554535][ T30] ___sys_sendmsg+0x2a5/0x360 [ 591.559257][ T30] ? __lock_acquire+0x683/0x2cd0 [ 591.564298][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.569530][ T30] ? futex_wait+0x2a2/0x390 [ 591.574200][ T30] ? __fget_files+0x2a/0x420 [ 591.578827][ T30] ? __fget_files+0x3a2/0x420 [ 591.583648][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 591.588619][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 591.594216][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.600333][ T30] do_syscall_64+0x174/0x580 [ 591.605142][ T30] ? trace_irq_disable+0x3b/0x140 [ 591.610230][ T30] ? clear_bhb_loop+0x40/0x90 [ 591.615036][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.620972][ T30] RIP: 0033:0x7f3cf6b9ce59 [ 591.625482][ T30] RSP: 002b:00007f3cf79fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.634008][ T30] RAX: ffffffffffffffda RBX: 00007f3cf6e16090 RCX: 00007f3cf6b9ce59 [ 591.642005][ T30] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000d [ 591.650053][ T30] RBP: 00007f3cf6c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 591.658153][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.666439][ T30] R13: 00007f3cf6e16128 R14: 00007f3cf6e16090 R15: 00007ffeef32aed8 [ 591.674545][ T30] [ 591.677625][ T30] INFO: task syz.4.2625:16134 blocked for more than 145 seconds. [ 591.685466][ T30] Not tainted syzkaller #0 [ 591.690414][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 591.699218][ T30] task:syz.4.2625 state:D stack:27936 pid:16134 tgid:16131 ppid:5632 task_flags:0x400040 flags:0x00080002 [ 591.711257][ T30] Call Trace: [ 591.714838][ T30] [ 591.717846][ T30] __schedule+0x1840/0x57a0 [ 591.722485][ T30] ? __lock_acquire+0x683/0x2cd0 [ 591.727475][ T30] ? __pfx___schedule+0x10/0x10 [ 591.732474][ T30] ? schedule+0x90/0x360 [ 591.736747][ T30] schedule+0x164/0x360 [ 591.740914][ T30] schedule_preempt_disabled+0x13/0x30 [ 591.746487][ T30] __mutex_lock+0x7c5/0x1590 [ 591.751126][ T30] ? __mutex_lock+0x5c5/0x1590 [ 591.756007][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 591.760727][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 591.765874][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 591.771024][ T30] ? radix_tree_lookup+0x240/0x290 [ 591.776455][ T30] genl_rcv_msg+0x10b/0x7a0 [ 591.781031][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 591.786181][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 591.791606][ T30] netlink_rcv_skb+0x226/0x4a0 [ 591.796533][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 591.801612][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 591.807021][ T30] ? down_read+0x270/0x2e0 [ 591.811466][ T30] ? genl_rcv+0xd/0x40 [ 591.815663][ T30] genl_rcv+0x28/0x40 [ 591.819687][ T30] netlink_unicast+0x7bb/0x940 [ 591.824739][ T30] netlink_sendmsg+0x813/0xb40 [ 591.829570][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.834980][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 591.839957][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.845376][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.850697][ T30] __sys_sendto+0x672/0x710 [ 591.855355][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 591.860421][ T30] ? errseq_sample+0x40/0x70 [ 591.865120][ T30] ? fd_install+0x94/0x3d0 [ 591.869572][ T30] ? fd_install+0x306/0x3d0 [ 591.874396][ T30] __x64_sys_sendto+0xde/0x100 [ 591.879210][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.885562][ T30] do_syscall_64+0x174/0x580 [ 591.890209][ T30] ? trace_irq_disable+0x3b/0x140 [ 591.895327][ T30] ? clear_bhb_loop+0x40/0x90 [ 591.900043][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.906042][ T30] RIP: 0033:0x7f3cf6b5d68e [ 591.910485][ T30] RSP: 002b:00007f3cf79d9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 591.919010][ T30] RAX: ffffffffffffffda RBX: 00007f3cf79db6c0 RCX: 00007f3cf6b5d68e [ 591.927086][ T30] RDX: 0000000000000024 RSI: 00007f3cf79da000 RDI: 000000000000000e [ 591.935284][ T30] RBP: 0000000000000000 R08: 00007f3cf79d9f04 R09: 000000000000000c [ 591.943371][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 591.951374][ T30] R13: 00007f3cf79d9f58 R14: 00007f3cf79da000 R15: 0000000000000000 [ 591.960068][ T30] [ 591.963296][ T30] [ 591.963296][ T30] Showing all locks held in the system: [ 591.971040][ T30] 1 lock held by khungtaskd/30: [ 591.975991][ T30] #0: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 591.986052][ T30] 2 locks held by getty/5387: [ 591.990764][ T30] #0: ffff8880367910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 592.000844][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1380 [ 592.011234][ T30] 1 lock held by udevd/5656: [ 592.015943][ T30] #0: ffff888026e79350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 592.025329][ T30] 2 locks held by syz.0.2614/16059: [ 592.030541][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.038985][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.048142][ T30] 6 locks held by syz.3.2615/16065: [ 592.053484][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.061737][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.070830][ T30] #2: ffff888026f15a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 592.081347][ T30] #3: ffff888026716d08 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 592.090880][ T30] #4: ffff8880267166d0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 592.103236][ T30] #5: ffff888026716708 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 592.115729][ T30] 2 locks held by syz.3.2615/16066: [ 592.120968][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.129269][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.138352][ T30] 2 locks held by syz.3.2615/16069: [ 592.143652][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.151911][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.161159][ T30] 2 locks held by syz.1.2618/16077: [ 592.166413][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.174806][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.183885][ T30] 2 locks held by syz.2.2622/16122: [ 592.189106][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.197594][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.206687][ T30] 2 locks held by syz.4.2625/16132: [ 592.211900][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.220369][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.229469][ T30] 2 locks held by syz.4.2625/16133: [ 592.234773][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.243070][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.252164][ T30] 2 locks held by syz.4.2625/16134: [ 592.257381][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.265772][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.275220][ T30] 2 locks held by syz-executor/16137: [ 592.280628][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.288954][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.298106][ T30] 2 locks held by syz-executor/16139: [ 592.303647][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.311890][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.321053][ T30] 2 locks held by syz-executor/16169: [ 592.326675][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.335042][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.344221][ T30] 2 locks held by syz-executor/16190: [ 592.349614][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.358153][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.367295][ T30] 2 locks held by syz-executor/16204: [ 592.372868][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.381115][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.390209][ T30] 2 locks held by syz-executor/16235: [ 592.395657][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.403975][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.413154][ T30] 2 locks held by syz-executor/16237: [ 592.418543][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.426867][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.436266][ T30] 2 locks held by syz-executor/16270: [ 592.441694][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.450043][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.459138][ T30] 2 locks held by syz-executor/16288: [ 592.464611][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.472952][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.481969][ T30] 2 locks held by syz-executor/16306: [ 592.487535][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.495845][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.504952][ T30] 2 locks held by syz-executor/16333: [ 592.510362][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.518687][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.527770][ T30] 2 locks held by syz-executor/16336: [ 592.533240][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.541477][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.550804][ T30] 2 locks held by syz-executor/16368: [ 592.556283][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.564643][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.573782][ T30] 2 locks held by syz-executor/16389: [ 592.579177][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.587500][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.596680][ T30] 2 locks held by syz-executor/16408: [ 592.602132][ T30] #0: ffffffff8fe31868 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 592.610328][ T30] #1: ffffffff8fe316a0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 592.619438][ T30] [ 592.621784][ T30] ============================================= [ 592.621784][ T30] [ 592.630321][ T30] NMI backtrace for cpu 0 [ 592.630337][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 592.630357][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.630369][ T30] Call Trace: [ 592.630376][ T30] [ 592.630384][ T30] dump_stack_lvl+0xe8/0x150 [ 592.630410][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 592.630438][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 592.630474][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 592.630504][ T30] sys_info+0x135/0x170 [ 592.630528][ T30] watchdog+0xfd7/0x1030 [ 592.630564][ T30] ? watchdog+0x1c7/0x1030 [ 592.630600][ T30] kthread+0x389/0x470 [ 592.630626][ T30] ? __pfx_watchdog+0x10/0x10 [ 592.630652][ T30] ? __pfx_kthread+0x10/0x10 [ 592.630679][ T30] ret_from_fork+0x514/0xb70 [ 592.630703][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 592.630724][ T30] ? __switch_to+0xc89/0x1420 [ 592.630763][ T30] ? __pfx_kthread+0x10/0x10 [ 592.630790][ T30] ret_from_fork_asm+0x1a/0x30 [ 592.630829][ T30] [ 592.630837][ T30] Sending NMI from CPU 0 to CPUs 1: [ 592.741042][ C1] NMI backtrace for cpu 1 [ 592.741059][ C1] CPU: 1 UID: 0 PID: 10973 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 592.741080][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.741092][ C1] Workqueue: events_unbound toggle_allocation_gate [ 592.741124][ C1] RIP: 0010:lockdep_hardirqs_off+0x8d/0xd0 [ 592.741147][ C1] Code: 9e 38 0b 00 00 41 8b 86 28 0b 00 00 ff c0 41 89 86 28 0b 00 00 41 89 86 44 0b 00 00 eb 17 48 c7 c7 38 3e 01 8e e8 13 1c 00 00 <65> 8b 05 bc 0e 93 07 85 c0 74 8d 5b 41 5e c3 cc cc cc cc cc 90 e8 [ 592.741162][ C1] RSP: 0018:ffffc9001bb57758 EFLAGS: 00000002 [ 592.741177][ C1] RAX: 0000000000000001 RBX: ffffffff816af601 RCX: 0000000080000001 [ 592.741189][ C1] RDX: 0000000000000000 RSI: ffffffff8e013e38 RDI: ffffffff8c288620 [ 592.741201][ C1] RBP: ffffc9001bb57890 R08: 0000000000000003 R09: 0000000000000004 [ 592.741212][ C1] R10: dffffc0000000000 R11: fffff5200376aed0 R12: ffffffff8224f26a [ 592.741226][ C1] R13: fffffffffffffeff R14: 0000000000000000 R15: ffffea00000893c0 [ 592.741238][ C1] FS: 0000000000000000(0000) GS:ffff8881253a0000(0000) knlGS:0000000000000000 [ 592.741258][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.741270][ C1] CR2: 00005587095b5ee8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 592.741286][ C1] Call Trace: [ 592.741293][ C1] [ 592.741299][ C1] ? __text_poke+0x311/0x9b0 [ 592.741325][ C1] trace_hardirqs_off+0x12/0x40 [ 592.741351][ C1] __text_poke+0x311/0x9b0 [ 592.741378][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 592.741401][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 592.741431][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3a/0x190 [ 592.741457][ C1] ? __pfx___text_poke+0x10/0x10 [ 592.741486][ C1] smp_text_poke_batch_finish+0xd0e/0x1110 [ 592.741519][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 592.741548][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 592.741578][ C1] ? __jump_label_update+0x347/0x370 [ 592.741602][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 592.741630][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 592.741652][ C1] static_key_disable+0x1a/0x20 [ 592.741670][ C1] toggle_allocation_gate+0x1fe/0x290 [ 592.741698][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 592.741726][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 592.741758][ C1] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 592.741777][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 592.741794][ C1] process_scheduled_works+0xa8e/0x14e0 [ 592.741829][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 592.741850][ C1] ? assign_work+0x3cf/0x5d0 [ 592.741870][ C1] worker_thread+0xa47/0xfb0 [ 592.741897][ C1] ? __kthread_parkme+0x71/0x1f0 [ 592.741923][ C1] kthread+0x389/0x470 [ 592.741945][ C1] ? __pfx_worker_thread+0x10/0x10 [ 592.741962][ C1] ? __pfx_kthread+0x10/0x10 [ 592.741986][ C1] ret_from_fork+0x514/0xb70 [ 592.742006][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 592.742024][ C1] ? __switch_to+0xc89/0x1420 [ 592.742054][ C1] ? __pfx_kthread+0x10/0x10 [ 592.742079][ C1] ret_from_fork_asm+0x1a/0x30 [ 592.742114][ C1] [ 593.049215][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 593.056070][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 593.065177][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 593.075239][ T30] Call Trace: [ 593.078540][ T30] [ 593.081498][ T30] vpanic+0x56c/0xa60 [ 593.085519][ T30] ? __pfx___schedule+0x10/0x10 [ 593.090414][ T30] ? __pfx_vpanic+0x10/0x10 [ 593.094948][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 593.101154][ T30] panic+0xc5/0xd0 [ 593.104909][ T30] ? __pfx_panic+0x10/0x10 [ 593.109371][ T30] ? preempt_schedule_common+0x82/0xd0 [ 593.114869][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 593.120277][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 593.126444][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 593.132609][ T30] watchdog+0x1030/0x1030 [ 593.136949][ T30] ? watchdog+0x1c7/0x1030 [ 593.141377][ T30] kthread+0x389/0x470 [ 593.145454][ T30] ? __pfx_watchdog+0x10/0x10 [ 593.150138][ T30] ? __pfx_kthread+0x10/0x10 [ 593.154736][ T30] ret_from_fork+0x514/0xb70 [ 593.159343][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 593.164456][ T30] ? __switch_to+0xc89/0x1420 [ 593.169145][ T30] ? __pfx_kthread+0x10/0x10 [ 593.173740][ T30] ret_from_fork_asm+0x1a/0x30 [ 593.178518][ T30] [ 593.182200][ T30] Kernel Offset: disabled [ 593.186538][ T30] Rebooting in 86400 seconds..