last executing test programs: 24.235882299s ago: executing program 2 (id=2934): socketpair(0x29, 0xa, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) bind$rds(r0, &(0x7f0000000440)={0xa, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="673ae99ed6e9e6efe4a53b40ba80afb92c9cce0b6626b2e09c8df9f84389396123a7f569dad3d21ad1389be573981388f1ff6a00d533fc04068de6293acfe44705e3f2bfbe064006c1e1faed8e43ecef7216ab8fcb56edc720ee6aeab7ce1713ddbed1227f52db9f933a52ab58d10438cf5249c9459aa1f9f2b61dcde66003fde84eea989b7d83e41c4cdd443800a24404b8c54b86062fe42700bfff", 0x9c}, {&(0x7f00000001c0)="3d4f8d6accea974e9c", 0x9}, {&(0x7f0000000480)="c97d1374b5800ac32214ca349355a746d4e64edbb29e3ae2d5fc491ec2e99d7ba6e7806ae151fa39972d9757a6a5cc8169672ada34307ef3e14f19fbea0a4f5b73ebc2efa05b3284", 0x48}, {&(0x7f0000000280)="92aec778e16a75e42b5473196c3982e442c38ee96b992e3de093aa43cf9732f6bfab8b7b36257c1b7b0ba5a5a029fa76efbb27e76d436e70c63b4a253ccb3693694e118c7aae6eafb0c64f9f72474f8c643cddd9bba936e9b5dbc9817471de75808aee959f77adbc1af9a295b8d2338e62122ac2a8e7d45524f2a32181abfb27f0909a9c226a0fcfda68a4d046d1279b94c1945816becff9af00bcf30db9dd1587c75faa4bcbb8bde05e694f68184d89364d8dba00a5dc883dbd601bd537a4354d3d2de239a54eb14a67319f99f7f09e83d0e7d23ce12a4752d3688ae348b655c265d4c2cd2b4f72993073d5909b833710e087b95ae6cdc298", 0xf9}, {&(0x7f0000000380)="eb5618fc1ff0b97d70a79773828d84e560f401228f", 0x15}], 0x5) socketpair(0x29, 0xa, 0x7, &(0x7f0000000040)) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) close(r4) (async) bind$rds(r0, &(0x7f0000000440)={0xa, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) (async) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="673ae99ed6e9e6efe4a53b40ba80afb92c9cce0b6626b2e09c8df9f84389396123a7f569dad3d21ad1389be573981388f1ff6a00d533fc04068de6293acfe44705e3f2bfbe064006c1e1faed8e43ecef7216ab8fcb56edc720ee6aeab7ce1713ddbed1227f52db9f933a52ab58d10438cf5249c9459aa1f9f2b61dcde66003fde84eea989b7d83e41c4cdd443800a24404b8c54b86062fe42700bfff", 0x9c}, {&(0x7f00000001c0)="3d4f8d6accea974e9c", 0x9}, {&(0x7f0000000480)="c97d1374b5800ac32214ca349355a746d4e64edbb29e3ae2d5fc491ec2e99d7ba6e7806ae151fa39972d9757a6a5cc8169672ada34307ef3e14f19fbea0a4f5b73ebc2efa05b3284", 0x48}, {&(0x7f0000000280)="92aec778e16a75e42b5473196c3982e442c38ee96b992e3de093aa43cf9732f6bfab8b7b36257c1b7b0ba5a5a029fa76efbb27e76d436e70c63b4a253ccb3693694e118c7aae6eafb0c64f9f72474f8c643cddd9bba936e9b5dbc9817471de75808aee959f77adbc1af9a295b8d2338e62122ac2a8e7d45524f2a32181abfb27f0909a9c226a0fcfda68a4d046d1279b94c1945816becff9af00bcf30db9dd1587c75faa4bcbb8bde05e694f68184d89364d8dba00a5dc883dbd601bd537a4354d3d2de239a54eb14a67319f99f7f09e83d0e7d23ce12a4752d3688ae348b655c265d4c2cd2b4f72993073d5909b833710e087b95ae6cdc298", 0xf9}, {&(0x7f0000000380)="eb5618fc1ff0b97d70a79773828d84e560f401228f", 0x15}], 0x5) (async) 24.140987694s ago: executing program 2 (id=2935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000", 0x3}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r1, 0x4010744d, &(0x7f0000000080)=0xc) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x94, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0xd, 0x7, 0x1, 0x0, "9055aa41cc74a66620"}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r2, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r2, &(0x7f0000000240), &(0x7f0000000340)=""/186}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x300, 0x0, 0x0, 0x89, 0x0, @rand_addr, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}}}}, 0x36) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000200), &(0x7f0000000140)=r7}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0xffff, 0x9, 0x1, 0x0, r0, 0x1, '\x00', r6, r9, 0x4, 0x3, 0x3}, 0x50) 21.959343651s ago: executing program 2 (id=2939): socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) sendmmsg$inet6(r2, &(0x7f0000005300)=[{{&(0x7f0000000880)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, 0xffffff02}, 0x1c, 0x0, 0x0, &(0x7f0000000d40)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x21}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x30}}], 0x1, 0x4041) (async) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7235695bb3b189da6fbe39ef0927d52000000008060401000000040000001c7197888986edb10139bf421dfb583553db5e7874b390e5c64f770cd13082cf207e20919dcb44f963dcfd4a0ccbdff0c4ef5ec0e776a8eb7ac3d5bff383f8cf652dc4e3070584f6003037fa1a39f26418f541ffa98866cbfa20e0fa5f6e8ffd3fbe1808ea18fb85aebd45cf4d8727b64363b654d0cd412a606a56fd152d80355b628651c8b19ded20c3d8bc1257943542acced866b2d5ed7abea155f930237240dff5a60c7e2180e7860fcd"], 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x1) (async) socket(0x1d, 0x80802, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f0000000080)=0x7, 0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000700000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 21.626051355s ago: executing program 2 (id=2941): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x80}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000440)={0x24, @short={0x2, 0x1}}, 0x14) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000140)='[,#*,&)\x00', 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r5, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21.388017312s ago: executing program 3 (id=2943): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000031400022cbd7000ffdbdf250900020073797a30000000000800410073697700140033006d6163736563300000f9ffffffffffffff00020073797a3000000000080041007278650014003300697036746e6c300000000000000000000900020073797a32000000000800410072786500140033006970766c616e300000000000000000000900020073797a30000000000800410072"], 0xb0}, 0x1, 0x0, 0x0, 0x45}, 0x950) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd0000ffff070000000000060004"], 0x1c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0xb8}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000300)={0x1d, @broadcast, 0x4e21, 0x3, 'wlc\x00', 0x0, 0x10000004, 0x403}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3800002, 0x13, 0xffffffffffffffff, 0x852ac000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r4, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000380)='syzkaller\x00', 0xfffffffc, 0xea, &(0x7f0000000fc0)=""/234}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}}}, &(0x7f0000000280)=0x84) socket$alg(0x26, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000003c0)={{0x3b, @empty, 0x4e22, 0x3, 'rr\x00', 0x10, 0x4, 0x53}, {@private=0xa010101, 0x4e21, 0x4, 0x6, 0xf7, 0x3}}, 0x44) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x43, &(0x7f0000000100)=0xffffffff, 0x4) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="0002020100000000ff02000084efc1c9c492d06801b898ac1fc8cc9b16d4dc68949eb86b050000002a60d9621ab69e05ae5a00"/62], 0x18) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000010701020000000000000000050000f196398f82adda24986d643e9f2b6323f59329fbe3cccf3b3fbea0664bc64ad450babf7b9cca0b76dc7e5e6699d7b2bdd87eb00d176c6514ab5cf3ce39b28957a344ce6dd6188db8fef00f2e5117c654dbe2ad94d70954"], 0x14}, 0x1, 0x0, 0x0, 0x40400d0}, 0xc0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) 21.198233495s ago: executing program 2 (id=2944): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/180, 0xb4}, {&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x5}, 0x140) 21.030414343s ago: executing program 2 (id=2947): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000018010000756c6c250000000000202020c31af8ffa10000005e200000000000000701000000feffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000240)="d7e6a6679ca1791cb5b4663e5fff151ae06f551c36dd83d76e84ecaa1116fc5005a383832c0deebd32675678045bcd1c875b3370e2a22da91255055e05a7f82f2a6722a0f34b01c75b7906838157cb23077958f3e2db997c8fddb2aa566ff13a91258445a9a45a017b3ff368564030ba17cba355d7b139e942f29ba7fb11097657c9f8f705ddd31623eb70e3c3727ebd1e37e273605b2472818c9142c9a9bff716da61a01295e47775e47ec11f548f232bb9e0c4526abebe006fbed0e0872bae3bbdceaa401b52a72a2eae3d0010", &(0x7f0000000340)=""/12}, 0x20) 21.014548912s ago: executing program 1 (id=2948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xa96) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000100001070000000000e1ff000a0000910c0002006e6c383032313100"], 0x20}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 20.656020406s ago: executing program 1 (id=2952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x174, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0xbc, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x58, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xc}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x22}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x19c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r3, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0x9c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x68, r7, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x29}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x58, r7, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$sock_SIOCGIFCONF(r9, 0x8912, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trmw'], 0xa) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x67, 0xb, 0x8001}, {0x6, 0x11, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004081}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1200}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 20.353846739s ago: executing program 0 (id=2954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30, 0xa18}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x3}]}}}]}, 0x44}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xffec}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x48, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24044890}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30, 0xa18}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x3}]}}}]}, 0x44}}, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x20008001) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xffec}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}}, 0x4000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x48, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24044890}, 0x1) (async) 20.313574978s ago: executing program 3 (id=2956): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000000000070002000000000000000000ea8b597ba70a54e7950000000000f6ef856580cf520e254be84b603a88513fdc287fc8da301af6671c8c99a071dba30ce90300239655bc3a955d8022595aa77b5541dda2d5a7cb57d51a78cfa2b957984f5b4bd4911cc355ca8a241464323b5af709d3565a8f868ea2a3f1d4b88f77aa5aec7836673b2176b76f57831b8a08a4e52303d43a4ae5ed55faf9a4620981e56e1d885694bdcb5abecc3da485e55281dce84706c053874005351e0748f1169d2e00599894495c549a41719649d7c3f6f48be225da5c3804"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x4, 0xa8, 0xe, @empty, @local, 0xb030, 0x8, 0x80000001, 0x2}}) write(r0, &(0x7f00000004c0)="0702000018c89c556586f8dae78ce2f8f1a39876a3b85f415cdfab79e6da1eb64c31289602a654fac02c1c41543425275d5058e1d7604f5374076189837e08065250a18f1f84a0f81327207a8deb4e51f6039e0000", 0x55) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="2400000076000907020000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d800500030004000000d081e25ebd63c11354c561bee1974b954f20f652d1e359f73c52c3fd57e5adc989412f2a9823633b7860ceea410eec0dd8ed822c5dcd41cb4bdbec06523eb40d8efca242acbcf18e94a040cdd8483456654c9ac35351e6944ec1a40e028a0850e9a6be633f88d22e9cda6b0e4a238471c1c06c7c13ef045e6be22b12a03a8dd90730cbeb3092297d17bff5f7a1ce6c63cb07603d82c2c2c5da59a20c8fd65f0611b9a14818166b20c071f6c4f6a6161e4e533740fce44c4961ef2ea51fc2111dc45e67f120813017c4bd5daa73981d99b5244ffac675de7b7291d1a04dbd42643c6ef5bac1d69dfe8c0db727e95ec0289c6d570e9e750a3644c66e3ecf046b62cc6989fc45b6408e6d01666a00"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000c80)={r2, &(0x7f0000000040)='^\x00', 0x101400, &(0x7f0000000140)={@align=0xf, {0x2, 0x6, 0x1, 0x200}}, 0x1, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000c40)=0x6}) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, r3, 0x180000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) syz_emit_ethernet(0xf87, &(0x7f0000003400)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, 0x0, 0x2d, 0x10, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@remote, @empty, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYRES16=r6], 0x18}, 0x1, 0x0, 0x0, 0x4004050}, 0x4044190) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x10, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000480), 0x0, 0xfffffffffffffffe, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0x1}, {&(0x7f0000002300)=""/4096, 0x1018}, &(0x7f00000033c0)=[{&(0x7f0000003300)=""/147, 0x93}], 0x1, 0x20, 0x80}}], 0xa0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071107d00000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 20.230154888s ago: executing program 1 (id=2957): r0 = socket$inet_sctp(0x2, 0xd0c38e9105a02621, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, [0xfffffffffffffffe, 0x9, 0x200, 0xe, 0xbf8, 0x411e5674, 0x7, 0x0, 0x4fce, 0x3, 0x7, 0x2, 0xffff, 0x1, 0x1000]}, &(0x7f00000004c0)=0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000540)={r1, 0x0, 0x4, [0x7, 0x4, 0x9, 0x80a6]}, &(0x7f0000000580)=0x10) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={r2, 0xd7a9, 0x4}, 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmmsg$inet6(r5, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="ab1081fedbdd8a18de78052b45360dc56a9f36eed9803f68849ee538cff9e24f54f40271eabe55b74bd4aaf6166f70d1a70104eee3fcc83abdd3949da8e7851f5fbfc7d9f04183fef9ced78301cf3ad39ed17558ef0f049e2d4d9da2ed63d6ae91cf24b8a462fba226ddaf2d39dd6608ab50967841b08e5640900f24c4caa8379b9bea8d32b3bd", 0x87}], 0x1}}], 0x1, 0x4000000) (async, rerun: 32) r6 = socket(0x2a, 0x2, 0x0) (rerun: 32) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r11, 0x311, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000e0}, 0x40000000) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010029bd7000000300000000050008000300", @ANYRES32=r14, @ANYBLOB="0c00990041000000600000000800a00000000000080026000c17000008009f0001000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) (async) r16 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r16, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x7d, &(0x7f0000000180)=""/125, 0x41000, 0x4}, 0x94) (async, rerun: 32) syz_emit_ethernet(0x6a, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500005c0000000000019078ac1e0001ac1414aa05009078e00000e04000002a00000005000400000a41017aac1414aa8610000000000004b29a0006ff8f5896441177bf39dad417b1bc90c50000017b5b9145b827aeb91f02000000"], 0x0) (rerun: 32) 20.082560832s ago: executing program 0 (id=2958): r0 = socket$nl_generic(0x10, 0x3, 0x10) read(r0, &(0x7f00000001c0)=""/201, 0xc9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001900000095"], &(0x7f0000001b80)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r2) socket(0x2b, 0x80801, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r6, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001600010325bd7000fcffffff2000000008000380"], 0x1c}, 0x1, 0x0, 0x0, 0x440d3}, 0x0) 19.926402928s ago: executing program 3 (id=2960): r0 = socket(0x2, 0x800, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc={0x1f, @none, 0x9}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)="c91a1896076d51ce0ab7e8b6e9311572cb1196617103a1fe7c27d2b57121664e", 0x20}, {&(0x7f00000000c0)="360261a9348c687bf8b40ed24897ef0f8abadb633337ee0361e9b8d368b31934b05302294161ddab6805da66e8b41a2875788153bc88006d1bb69923bce9663cb14e427a59811b4b855802e5ca65d738bf0360050792eae886e111c9fdb9e2d6312dce52af723c538ebf122f8cdb72426b2fb2d89afe01cf8cf1d44d48be4fd349cc0b895b7543dc4349306f6ae31cd64dcbfd38b4eb7f56188dca6d0da2951ea36f4ff651fc5139acd6b737fda17ae1f298f372091eed75981813945f6768135c170ab1ec1a72af99f8add836a664510c2f577c", 0xd4}, {&(0x7f00000001c0)="b39cfe6e40bd1cc99ebab77bcfdd49c15b67c5b85d6c0af4990532b6afc434bd45b89bbb6bb06e34088f87c5b7319c4693bc8a2aca70b2fca445bf04ac0429de28c27985a30a99f89f5c6cf0686250209131454377b6e700d088e1b1b7616de34dd20208a57b231c9691f9faca0b3334f5fe29c0863e1cd3813419b6916cb693fa08c525e034", 0x86}], 0x3, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x159}}], 0x60}, 0x4000800) 19.682004665s ago: executing program 4 (id=2961): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x8000, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}}}, 0x88) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "1802cd223370bbdd788d4a7c18c34471", "0b9c0b571c1d8c1ac6e5b6dcc2335b93", "270191606e3dc8e6d8c81d9c6f1c902d", "27063c5d6801cfab93c1be3a7164fcc5"}}}, 0x4a) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x15, 0x0, 0x5, 0x25dfdbfe, {0x26, 0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000400)='ns/pid\x00') r5 = socket$kcm(0x29, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22, 0xf85, @private0, 0x5}, 0x1c) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000480)={0xffffffffffffffff, 0x3, "fd7320", 0x1}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f00000004c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r7, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa4, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x38}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xe7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}}]}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7e230070}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1e}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa4}}, 0x8004) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000800)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000840)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000880)={r10, 0xf3}, &(0x7f00000008c0)=0x8) syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000940)={'ip6erspan0\x00', 0x5}) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24000880) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r11, 0x200, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000004, 0x100010, r1, 0xa89da000) 19.504758815s ago: executing program 0 (id=2962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000200)=0x7fff, 0x4) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24040000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) recvmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb31}], 0x1, 0x40002102, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x600}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x27, 0xe, 0x0, &(0x7f0000000140)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x10}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0xf, 0xd, 0x8, 0xb, 0x6, 0x4, 0x14, 0xd, 0xf, 0x1, 0x2, 0xf, 0xf, 0x2, 0x4, 0xf], 0x1, [0x8, 0x5, 0x2, 0xc25, 0x6, 0x7, 0x7, 0x8, 0xffff, 0x81, 0x5, 0x6, 0x5, 0x1, 0x4000, 0x1], [0x7, 0x3, 0x0, 0x4f0, 0x800, 0xffff, 0xffff, 0x23, 0xab, 0x4, 0x9, 0x40, 0x101, 0xff, 0x81, 0x5]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 19.504018255s ago: executing program 3 (id=2963): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r2, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={r3, r4/1000+60000}, 0x10) accept4(r2, 0x0, 0x0, 0x80800) shutdown(r2, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) pread64(r1, &(0x7f0000000700)=""/3, 0x3, 0x5c88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000009169bd0990e000000000000000000000061122000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) 19.435385414s ago: executing program 1 (id=2964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xa96) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000100001070000000000e1ff000a0000910c0002006e6c383032313100"], 0x20}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 19.224567048s ago: executing program 4 (id=2965): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000180)=0x20800001, 0x4) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (rerun: 32) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000005c0), 0x0, 0x40c0001) (async) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)}, 0x3e}], 0x1, 0x102, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) (async) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x4000088) recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) sendmsg$tipc(r5, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x60020840) (async, rerun: 64) sendto$packet(r1, 0x0, 0x0, 0x14000001, &(0x7f0000000140)={0x11, 0x16, r4, 0x1, 0xff, 0x6, @random="89ca67f6fe00"}, 0x14) (rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) unshare(0x20000000) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xb, 0x4, 0x1) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000880)) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) (async, rerun: 64) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRES32=r9], 0x1c}}, 0x840) (rerun: 64) 19.106480816s ago: executing program 1 (id=2966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000100)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1c}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3, r2}, 0xc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r4, 0x1, 0x101, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="05000000030000000100000000000000065c5359e4595fafe22f2820850ced2c136cf7b565bd", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000020000000000000000000000eb090b08ece8dca0"], 0x48}, 0x300}, 0x0) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000200)=0x10) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 18.993745053s ago: executing program 4 (id=2967): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0xe7, 0x0, &(0x7f00000003c0)="520485323097a674ff27e31ac0d1092eb7517334c60846261fdadd86e57b4a4f0752ece75dfa1e4f0ca31aa5b98c37eac53fb598280eef60894be40a8508ebb191d1c718117627fd43e0b1b57fb31820c5fd1cbb748674fa24ed070000000000000071fee452df6e5ccf0b800c6200f21cdc7c02534db88c441470bf32f4bda661ddeedf3d13911a6c7b01b7f188fda36f2f054158509ccf35ac7195e3eb2cdd0c244f2cfbbc083eef19f593a35cc8fa7c51ed487b261644568ee1af586f9490f31baa2f9d0fb5ade0f652a00d931c68a95ec1793dd2a6a7680a5ba250e5b4caffa0720f9d378f", 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x11, 0xa, 0x300) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0xe7, 0x0, &(0x7f00000003c0)="520485323097a674ff27e31ac0d1092eb7517334c60846261fdadd86e57b4a4f0752ece75dfa1e4f0ca31aa5b98c37eac53fb598280eef60894be40a8508ebb191d1c718117627fd43e0b1b57fb31820c5fd1cbb748674fa24ed070000000000000071fee452df6e5ccf0b800c6200f21cdc7c02534db88c441470bf32f4bda661ddeedf3d13911a6c7b01b7f188fda36f2f054158509ccf35ac7195e3eb2cdd0c244f2cfbbc083eef19f593a35cc8fa7c51ed487b261644568ee1af586f9490f31baa2f9d0fb5ade0f652a00d931c68a95ec1793dd2a6a7680a5ba250e5b4caffa0720f9d378f", 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 18.962476935s ago: executing program 4 (id=2968): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create(0x7) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x1008}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x40080) 18.923306671s ago: executing program 0 (id=2969): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c060000) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) unshare(0x24020400) 18.721454402s ago: executing program 4 (id=2970): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, 0x0, 0x4000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x298, r7, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x4d}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x200, 0x84, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10000}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3dab88fc}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_LC={0x8}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x10}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xa}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}]}]}, {0xe0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x81}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x994}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9b}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x80000000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xf}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x19}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6bb}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2000000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7fff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xae}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x4}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x8e1b}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x10000}, {0x8}, {0x8, 0x0, 0x200}, {0x8}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0xfff}, {0x8, 0x0, 0xae96}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x23}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x298}, 0x1, 0x0, 0x0, 0x40000}, 0x40015) ioctl$sock_netdev_private(r4, 0x89fe, &(0x7f0000000000)) r10 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r10, 0x541b, &(0x7f0000001680)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000003f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000bf910000000000005607fdff010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.374629485s ago: executing program 0 (id=2971): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00000c00028008001580"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) close(0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="0e10840dc342", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf0, 0x6, 0x1}}}}}}, 0x0) 16.374085651s ago: executing program 1 (id=2972): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x96}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x82}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000841}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/4100, 0x1004}], 0x1}}], 0x47, 0x40012282, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffeb9) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r9, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@multicast1}}) 16.21188594s ago: executing program 4 (id=2973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r6, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000003740)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000440)="dbe2e4c699dbf769c564e7e74ddf40798ebb66f4ed8db735c4cf8d2370a71bcf7530062dc3a67223962d1ab217949c6c5af539365fc2a2b109241e5e432a3dedb2c8ffacaedb5699d8c168c466340f3bcba21a9a8c2deaf675c4f51da6ad9457eade7a5d1b4bbc95543ac787a62200c1ec5864a03bccd50e9af33262fd2b51402a6017aa30130064712e76b488c66c407880dd6ab725abd6223a280e7ff6968714288ac6a700db06faa9d30d2d9c9f6a4ea046c26519eefd793d9751d8c8259f9a7639312a8beb2bed6194941c46c0c5c2a9478c01cef9da747abbf0a400ec13cf3ffe8fa28fdc925a27fc63b7e66cc2", 0xf0}, {&(0x7f0000000c00)="c4394fd8b613000ba2d18cb91e3b3d43ae3b34739c8591797316d92ccb9e1e9de82557b886cc4a4764fde187df538464d05e2d6deea31ae1f44e854e9661deaee9cb1f14b85b86886f25ff42f25133136a5f16f8f80a8a602713536f764bb80af5c76186f6e256961ff42337e687fce0f4bbe1d809da3c985b2163d7be774c052d314c989149b83b4d2996783a637ae17db8e42b37483cb843404f45d501b182ada8f70084d2fef14f103066bae71effcaa0c6f03a45258e1d2ae84235b8dc997719fc24178a2da0aa45023fd010013a2a3b6e8c6b09e88d618abd7c4eba38f3bb9d931568389d66703fc3da9ac0158a1f03ae5d719513dca06aca17d5b618df3e9675ab402d9f9ff94fea87bb140c3cf7019f088fe085c305eb6bd7d7759ef8f0302427c6835d8964dbad9146d60f5fd19ed392301cde6dfbe24bd814f9351216de695544db092eab9da54cacbc8c7065d39f57e5c7919212a1ac0bbc8b6e8425bd5d624171557d3007c8434b582f7fa3d1beca4c5bca3de4fe349dc5a2edf0ce8172169cd9675f09033d324def7d79c9d4a3702ebe636a52e2c502d3309db141405b96345c669afc6e7e3cf79e005d3189fe90d8453ac25783206b325d02b88cf88abc65fe3a4235cabe3f2d143339b4c3d591795251b447cd45c32c2875a176f7107c275f3b4a8b8cdbfda6afd1e324cf9ef88796af52ef36ac03521b9e804145ae8580acbd215b9600522bfe40df873f727ca6ea01adcd95ef54d55c5bcea110ef9d82cc77d79bcd110a724daed0237b1c4f152817f1a5ab9b7354ef1d9c60a098ad06aad8cf12fbce5fa753f7c5b4a5bafcaf6bd76ce5910a68f153c550a9b5ac556be5d234649f5acb46f9ce1cc05a31f9e7d2ebc8930a3494e16af517a5fb8a459796a32e3ac68614f14a06bd4ffbef60bab6ba5cad8e51d4932b9e6745e8e85ccbb547d3905224b85407430710573853a0bfbc8ead4fdef588b0a9f624920ff5732edb5ab67bbb06f22e3ef6736dd09497a197956498a27db6791a616a015c67db318d9fdddd457f27a60af3595a2248c563177f8bdad1b1ff57317f8c1bcf22ca8687fe631f9d67ea701b68200835e8caa53ada4c44d9360b0797b8f883638906d38aacf2cfd5bf65d6968509109d5ba66a5ad96258495fc5aa416a6db6918488b38f88316885363469793d9f0ffe0a4319877839dd12a415c032365b2a51fb294f0ad1bccf19c57cfd8fbc5248bd3c35f1a8d720cf763140e5f2bf4de481f87c455b4fa4419c7a6af1c9c7b6788dba6175049e10869e9b0d265d1c9cb950333bc3e566fa53dafe90209c033ae43fcd235d475a743c5ee143c38c69c56dba79c5f53ced957693294db7304dc7e35d5c513e6cc059eb1881a8e01f0c78e5846c6eff00a098a2caef6c34f3e3350e718b253f9ce081a3df19b0c4584c33b5f057a42bfe13ed0a17c94fffb562088baca8670549de82838bcfc4ed29a760abc59ae705e86fa50b83064a3e414c7cce15dddb5887d179389301e8da780c7d1a8dc5bae2b5e5653d56f00e968e65390baf181b37057ebfdd6cd852d2eabb824e947fb6003be30f3a303ea2569fb975cda7f8e52bfdd767ab24ee22d8cb31cd41e53f08adc844a531dae87fefb5153a6a339721943601fa3fb5f06a888e2a684f2693653a451799dfe546ee04ec12c257b5009e1330cbf804bbcb51557145b8e739abb2f591acf9ce08a4db12df4cc3f767a24cb0bed0f8ca0b759343cfd5485229f4f2f46ca686e0ff09cbaf9e6e0867463e23285bad2eea765e1b0a9b38cb1d6a3c406d122c33a65c3421f3cc69a46b08901661baac63cbff9f7af9f6d9f5188020d7435fff5a3d8a7dfe03e49c1531405c3c7f9b4d0747883a80649fac4dd835f00e69f865aebfb8baa8f2cdd266a0635229d16240c037ee554840161a81082e799ea236699d5c4557486d3b0bc3b7365f24f1db8727e9703b463a0f983dd957aecb70d7efa73c6b89c5b85dd5426a9c8caa62862a9def919f93c05922cccbefbb4ab01c676a8076e95ae3c62e39675969adecb37ef4ac83fb06213a483d1452df50a9e4ed9a11ca38c9e012c38e76236f9c5bcdb17b6f004989cdd12d3145f0e4e7a8006211944575665d0b864dd50c8b6af7937d2c257b0c3028cc3a28599a8102088f560109e8077eb70ed61c0beb8d9988c7866991879ff7ae5c91d75ee5cd86524f5022f6f54d57aa46bebd5374d25e4303b9eb72be335e1d0f5c829a9dae5c3c1f34efd236f56f7347d4bbbe645b30ab497a098ed9687e003f018757f7077e27e5504ad7013e55fda31ea52eb1967fe781b9ec282c094471159cb688521e640d608092aaefba7987868b6752b63307534251283a3d54643dc5dbefcf30576f5f48ec68f3dfa0362126922e7be40af3502edc45d658c8bc449f487ccee6106ae9cfc3b825ea2652a6dbb015e40c380a4d814b99bf00ec109512df0574b52c1d659f72e356587f383ee20b9764dc11781ea9fba2c785affef58773d5746971c5af0e2c5d126b6a111d3b8e91dd5a399533d3875abcd5395df0fcc6be55b69e832b34c155723562b2d7fa1f893e01317e4423471a2d6b8990277f8e10e64867c7cbe98a99ea7c8ae2fc8c18c4c8d8c1d7b8ea4e1e663051000bab13f225fba4c942d77d2065c2fa5b4a6ae36c8fe80d6938d3491b4a777b384cd69836264e88d9dfe7dbf776a62a0d280e2acdf7e58e9dff5b68c71be56f1f1834d4649d43c59cffb9f010e0f4e546310f2b7b53225928d19f0824574928e04c3ca89b5df582ac2ab9cc388a2da135f74f6200b32d0b014571f6ac29603060613f18896d93d8a9e23d28870549c5a56e6a544aa2005f8fa4903c6174f6ec409261afd7862027c19585137b18b0df93c423c1db2fde175d782e03d9e10e728b4b6578a2e4bcaae379216e9925f59e1a6fb48b3ce1c553f950ddb03055bbbf3083042b657922e8da7ea735dc5fa3d2e69badcd641d71b25e5a4816af15f7adb3ae36b4715f4adbca660eeb57076daf090ee2c71eddb3952d91c9400ea805b9a9b8dc4142525d6e60b888f63f1197ce267e0a94ecabf8adcbdd98d24eb5a905481c8591c46ba541cbbd344a3afd1055e367ecef93c8f97470e679c27fe94973e686329683725ba1800e21eae025969f25836be1d64cf3746a2ee3a6f5649472134b9406eb52d1921962c503a19ce4d9b8e7eda66b40a09a2beb336563c559ad036a495a247af970bfd790f83041152d0e6624902abb911477f071cbead4e16c24330d9f8fc14048002c3be728c307601966fc7b5daf1dc6f864c5ba2e991205332d4fb9fff20ee2b899c3c00789d4f4fd138f9c90418a9b07837949fc610fa2c76e0f8342cd8e36616d87a6281a7f08caee3dc892cc98df0f9ded69a82c41caa005d4a01dd47c36c062521eb2440bb791a4d865804384dcb38300a324ab9a27f5a60d1a7a3412bf78b56732bdcb408c01d43549599d2c7cf9b60b52b06b4f10608e7ade158e6dc2b647639a2842e4a5be50699f266b80c4da54573d3457a1ceebfc1ca20824d4cc53510ada1d9c8fa19a227561fdd1e16f9274cb8c1f870b03f2ecbb5144af053c9ae5dc444658aba0df1296c4ad47d322425fe0b5507a69f57a4a0ec0ed1f3e3e3e31bdaa561876176473960e52bdcc428d7123e81088f468c2587f86e8f087c6a9358d4dbf775eb7739e819a5bff529d8648d62535fd7514865fc26722b1694c308d97f562ac40a267eb2feab320e5ecaf90706087378d0b542f67dfad4e767b59300c868e9dcb5c3a54901182e32876879e1282736e043b3b95d03ddfa32c5e5a5ab9dc02c87e81c3a3747138ece6711ac1cb1647b478f33a3889a7a8a479f6e308a2635a1d1b581f425698bcc8249b53808872422dfc8e5d9b92abf284dae17d634b974ecc25c74df590084d00d2a0aaeb245890c6a1d7be20b33acda312ac2dc6be068a30dcef6bdedc4e1a3d23752314a85b2e8fcc912612a9193708e85430644ac0dae6198f79e52ce50ce094a86c22d7b20fea8a8a62f97a81602450e5a45375c484f462ad4fafffebc6888bb2b1dc9bf11218256121bdf8a61555701174174107664b2b837babefed23b3c5e03da25882ca431964d5748abfacf368e519eb7799248e97a67150aac48eca156fe01eea3a20a1a3fe89890d8f0490c5e00f4a5f190c4863024ecb31607f6a3e33e2d4a3b53d126a46f0d326b63fc62248dea267f431c6bc42e277001b7341848894d1714a909be8bb5ef4e3746d38ffe5fda59e3bb74ee48d32360112ef77608d657d066f43e9f31b6e5a100b3d5fc04b56111ee123d052a2acf3690cd8fa1f0c6238196f71da413d7de5bdf1dd88ffdabd87aed09e12348ae28fb2d085b7cdc3a988a17e187cb5058b9587340ae1ade7fa76fcf54e9e8c25acd75b78524194e25970df954b90f8549a0a01449accc526988e20e149bdb80574b781a6eee977b27055cc9181d040a5ce8a6bdc0c61f10412fa4caf9a415a7ed86b82dd7d7935f6573cd3872219f65afff1d692b51690bea56e6baab27f58169c0b24698f562d4c29e66f9517815de96111325412e8b66fc07aca06627eb4d13120bdd9d724b3d2d84f03ee2bbfd110724957ad69e9bdddb8a15800e85bf8220fef05655795ae86830f2812aabb8920220273e0b61bd5bbe81e590938c16bb7bee2cb48f723d1db0c212865969bc48dda359a12b151f10214059c738d8d33607fd47e7ab90123535a46f9f1fe9aa19226753ba4555f994a26f420f04a3e4302fb1c9ed534dc8257d31fcf8dbbf0764a455f12281b65eec1a918766ac5277f633376591c81be41e83a40ea4e71154fdf171ed1b9afd63da816bb16a7789b60b98afa6f78bda0095e26eaad5b9a25cbbc7852ede301cd5fda49cd01577c84c64609fedc9d1b40c9429b405f7ec3d8e17ad495b139beff68a2636bedd6e04205d89551fe5508d7c9f41119fc95497be28a46bcdf6acd400acdbd50e9277dc36543611c0ee6777f599efca3db78a18b5981ac1d7f09f51d76bed1e229345b0dbdd8eb5463f34bf44fb8908bd3961ba2075b8ae5990a0f1a6caf7d74165a2c52dea705db510d5335da85d386502c0f754891546249ecb2b9e620f8f981b13fe327d3c827882a1bb6edfec72c6463da3e59b25c0b27db35f527d869f101f25e0e92233eaf6cea223a7251fac287e8450664fd49f16736a48198ff70e9118861a6a0326ecaef56717c99e730b8392e232ea0ec4f122e79596a8804d422dffcfa264a7794d3ca402595afb84a29624ce774d960500b437769e16661d1bb22a83c7cdd5531563c9f2235b2d9f72ffc6fa720e7d363002d0ab6fadbdcee5ec897d6a3fabbf6c9995ce30336620a91d80b41741d643537afc3fc083dfe0c684e8ef7faa2f68cd0860e602269a0a4417740b6b8f61fe91ea875db016410325b913514cf74387b48be702fc3ec45ff80634119fe6350f05c89bbf7101292262b873887079858805ac7a082613f6930210c2b6cc9034ad53c083e46f171d51d20359c2445f6189428541fff06d034f99156978e229c6d58d9c11d3c133d8756963615757866e4d1c86b2037c7d4f34569da0f220239c6a7aa6e44b60ac7c0db50a8846c67309c08ede76356dcc25b23a4b09bec707190d6a7fbe6a5145658d1c194277467d80dd6a927c435abcaa1a2bb0a94be8c5bf574030feb7660dec8940dd7750a08da72cdd279ebabc05801c69bb962bca160720ee4ad9a", 0x1000}], 0x2, 0x0, 0x0, 0x20000020}, {0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001c40)="03c54bd83e6be61166d874768b3e09440ec8c4cd0b92185783bc918b70e773b14ca5f576292ff0dbb1f75abaf55bb28cb03990aa96e8a8e0057e42c46dfe42013a50ae0e3602a328c4e08944750064bcbef91f114c595567382aa1ee9e3830533395a90261f0b7503f2ba080fd2d3364396cb54ea810ec83ea6dc9a149aae714521699100da6c2468abd09bb471ab51dd91ee8cdecc71b1af249d602ee30d48afba3088eec40b382c3c6198da830c91c587eb42b4c24960eaa7f93b03f42921e201865501b59a9d92dd964", 0xcb}, {&(0x7f0000001d40)="e0cc45cdaa3a8ab3436c3a5ebecabf6359806810470e80ce3cfaa3abf42984fc4cd35533c52d24a697b4890719f445d924d230d9fb29a99158d0c969690b", 0x3e}, {&(0x7f0000001d80)="3eac6a261c946114238d442ea5ccc8de2c7ac1a1bbfd0701c0786a8ff48c9ef22aab2881e4d4f2c6c77facb251848eb89590e79b9b3b6ef3ea5522e377fc1dc23f09774fbb7784919b2266d71515fb0fc4df2799c453c49a0c202f4a8a0c47ae0c5597a5dc5df326cc20b3641cc9bc9e622726b2b5cf0b5205814dbebafdd265df2564a9c03c94df49", 0x89}], 0x3, 0x0, 0x0, 0x20000010}, {0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001e80)="88e3f694ac3ff66e1b7c6d7826af21ddd8c7b9deadb6fc4fc82229b2aebda3bc253146ecec890060ce325d9fbce7526e1e5194be36ea695e18931ac1f0a465c2666f742566742ea80f8a30d0235f2953a861d447fd176b5fa3af188fe8d1d4418324fa98ef9c41bfcae68732ccea3db8cd37a2773fb55a6bbee9770cc8d79ff5d3afe939a2a8dbb4558c588a35c9d47d0cc853dd5dc705899deb042a487f8e548369df1fc1353129e2d76e67cba724c284f20f4a4789d1e9c60455508d275e96f77396dd62541e401d8da3f4a4576b1c1dc8b1bbba7280f9fab14b0ecf0b4eced8c47b6e59777b484e9cb8d0489d77ec5784c3", 0xf3}, {&(0x7f0000001f80)="40d39f30d473e0c3e0bda32ad7678b8a7acc79309e2bd57244612cb284e532e46f49a1b0266fd91667721c04683adbdbe9618935d8785bbea927a692fbe835967115b2e5cb6ead63a998f9dc5b4f05519f8638367ce7aeb7bf7fb5b04676139649b8a3b293bfbd6313ac166f7a62f02de188b8216343dc0d68e3ec03b8abd7322e60dfe24cd74e269316e6a69bc4757d9527b18c94b1977c1b0c2f326eb3f806025b1c65d3670a0405ce21b8bd7d615913d8dfd1b0324eee17", 0xb9}, {&(0x7f0000002040)="82d4659a5a0459bcd297105cfff58cee5b1b7dee120f96302b71e4ee3c81243ba13ca92b324abbdf2f5ff1ac592c958857a5485964aaa423322fe3c1d2164d8476ccf3e72f11d93538540cb69162417a683a0e497b7fdd177f8fea65547be00a01ed7c87993eaba1c9637e990c50815bfd0ff27a927b9e395602cdcc3d3392cf68840397794b89afe78d", 0x8a}, {&(0x7f0000002100)="afa8f450b5e508fc503b178f8cab4243", 0x10}, {&(0x7f0000002140)="f2e665150cd70552bf94d6a7aa4762ab44f2b509056435102bb96e", 0x1b}, {&(0x7f0000002180)="73d04d2718ec7da9abe2d3110080ca8d1432efa534d893fd923d8209bfa094b1687b64d1afdedcadbbcb4d8455fc3f817ca457d52826af12e64c36f7c73457ae2ff500ba95cdb9b688f761990423309b67d8227270a65925ebe0ee9f814d15cc2c2e659bd0d859d1f90d3df44984e40f310d7544e585df87d714696428c62965f5e865b56c4ee20296a94d7baf7116557f2ca43802241112e9479d03fb3179155451c4afc4e032418432670db749fb4cef77e764419bc7b7cc4f966dbbeab52a193217b78172738d2cea47260e1c9a16f70e3ec2fb7fe0c7e8417f2f2bbf5367336b067c6f26db9c810f8a6f", 0xec}], 0x6, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000002340)="07a47d94061a08d6fae79077d62553a7155b8004d0d6515df0dc0a2903014e06df845a2fcfa9a7711f0f1a253ca6ed45e25eac2f6c69398d8ec3ca6a234f6515e437b3fb3b147bf431c21a6a6c71df53c57a0bf45bdbe06d1da957f0e8765671d8eb3b3da66c071c9e2084faa59e06390837b83dc51564fc73c8f3da1965ff0a5d8dbed47065", 0x86}, {&(0x7f0000002400)="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", 0x1000}], 0x2, &(0x7f0000003440)=[@iv={0x98, 0x117, 0x2, 0x83, "78d1cbc94abda82c10b84c537d18b55219b5fe4ac01da295681a54f052fc46892c717c1015f4ed3e25990f36929eef3c7baf6cacfec0dd0f69119ba9aefbe72a863c27221dc6fd33c5182df186f039d17623b108aa9ab0e511df66e1cd2d3d21b4ffe9c5982d803e348b25c8e2e3afa24ef11fc4258beea3753556d814f16a802b6d11"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x2f1d7ec3}, @op={0x18}, @iv={0x88, 0x117, 0x2, 0x6f, "fa2f49b654d06da37d7fd8129e25873684e30f7d6f0c9144227dc86e1016f06570c598e1a2e4a6b362bca03ecff1ae28c1de856d0667ad1f6fa59003312b1eae4111f7a2ec5704f469a2c33be54834b8a6a0202fed16d7a6c12f5b4a36c551b70eefecc5b0f440bb2be2d3897c6d83"}, @assoc={0x18, 0x117, 0x4, 0xb}, @iv={0x100, 0x117, 0x2, 0xe7, "43c8fdf4a98ad83e10a24565be92c870eea39b8a208964a28132f7faf6026f2bd13432120688e036b92df828da1c14bb56f83212e183881fc76d93cadd7e4d5d2c187b9d4c3bbb241f522cc794fb0daadcb3c52434ac91122a7b42e0445518c618a8c409cdbc14bc6e16d4b6ad48495be5056dd83bd3a510481d80c3fc48bc1193e5b3200978747c652e572a0fb55847b088a27fdecc157b54d21a3ba40469e33e83a370065751bf574f318ab9a4d1e98085ce87d329d9693c78a06624c8fecff42909558d0d75b03443d08003d26cbfdddb939953e6d251b0383b55e342c66fc81d1fe12d9a57"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}], 0x2c8, 0x20000004}], 0x4, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44496e2f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d25ef6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}]}]}]}, 0x4c}}, 0x0) 16.153962727s ago: executing program 3 (id=2974): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) listen(r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000001c0)={0x1f, @none}, 0x8) listen(r1, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000000000000000aacc0000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000006000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa000000000000002d000000000600000004"], 0xfc}}, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ifreq(r3, 0x8932, &(0x7f0000000100)={'dummy0\x00', @ifru_data=0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000000)='D', 0x1, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f00000000c0)=0x4, 0x4) r8 = socket(0x2a, 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r9, 0x84, 0x19, &(0x7f0000000000)="0000004d5b1bc2b5", 0x8) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 15.951827941s ago: executing program 3 (id=2975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xa96) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000100001070000000000e1ff000a0000910c0002006e6c383032313100"], 0x20}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 15.29486327s ago: executing program 0 (id=2976): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r4, &(0x7f0000000600)="ea441beea0351a93b78be5612872a28bcea0c27a5feb3d806cb1310abad534ca4496fc2c6730cfbaa1f8514ae065f4d73ba84ab380d7844cc64fe78671a6ded9ab57c2a56f32dfdec741e5864add5aecbe66d9ff33e3f67f94b5e94fbf129cc308ffe011e8f76537a4305feebc", &(0x7f0000000680)=@tcp, 0x4}, 0x20) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@ctrl_frame=@bar={{}, {0x2}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x5}, {0x5, 0x5}}}, 0x14) 1.043739909s ago: executing program 32 (id=2972): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x96}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x82}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000841}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/4100, 0x1004}], 0x1}}], 0x47, 0x40012282, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)={0x20, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffeb9) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r9, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@multicast1}}) 998.01025ms ago: executing program 33 (id=2973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r6, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000003740)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000440)="dbe2e4c699dbf769c564e7e74ddf40798ebb66f4ed8db735c4cf8d2370a71bcf7530062dc3a67223962d1ab217949c6c5af539365fc2a2b109241e5e432a3dedb2c8ffacaedb5699d8c168c466340f3bcba21a9a8c2deaf675c4f51da6ad9457eade7a5d1b4bbc95543ac787a62200c1ec5864a03bccd50e9af33262fd2b51402a6017aa30130064712e76b488c66c407880dd6ab725abd6223a280e7ff6968714288ac6a700db06faa9d30d2d9c9f6a4ea046c26519eefd793d9751d8c8259f9a7639312a8beb2bed6194941c46c0c5c2a9478c01cef9da747abbf0a400ec13cf3ffe8fa28fdc925a27fc63b7e66cc2", 0xf0}, {&(0x7f0000000c00)="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", 0x1000}], 0x2, 0x0, 0x0, 0x20000020}, {0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001c40)="03c54bd83e6be61166d874768b3e09440ec8c4cd0b92185783bc918b70e773b14ca5f576292ff0dbb1f75abaf55bb28cb03990aa96e8a8e0057e42c46dfe42013a50ae0e3602a328c4e08944750064bcbef91f114c595567382aa1ee9e3830533395a90261f0b7503f2ba080fd2d3364396cb54ea810ec83ea6dc9a149aae714521699100da6c2468abd09bb471ab51dd91ee8cdecc71b1af249d602ee30d48afba3088eec40b382c3c6198da830c91c587eb42b4c24960eaa7f93b03f42921e201865501b59a9d92dd964", 0xcb}, {&(0x7f0000001d40)="e0cc45cdaa3a8ab3436c3a5ebecabf6359806810470e80ce3cfaa3abf42984fc4cd35533c52d24a697b4890719f445d924d230d9fb29a99158d0c969690b", 0x3e}, {&(0x7f0000001d80)="3eac6a261c946114238d442ea5ccc8de2c7ac1a1bbfd0701c0786a8ff48c9ef22aab2881e4d4f2c6c77facb251848eb89590e79b9b3b6ef3ea5522e377fc1dc23f09774fbb7784919b2266d71515fb0fc4df2799c453c49a0c202f4a8a0c47ae0c5597a5dc5df326cc20b3641cc9bc9e622726b2b5cf0b5205814dbebafdd265df2564a9c03c94df49", 0x89}], 0x3, 0x0, 0x0, 0x20000010}, {0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000001e80)="88e3f694ac3ff66e1b7c6d7826af21ddd8c7b9deadb6fc4fc82229b2aebda3bc253146ecec890060ce325d9fbce7526e1e5194be36ea695e18931ac1f0a465c2666f742566742ea80f8a30d0235f2953a861d447fd176b5fa3af188fe8d1d4418324fa98ef9c41bfcae68732ccea3db8cd37a2773fb55a6bbee9770cc8d79ff5d3afe939a2a8dbb4558c588a35c9d47d0cc853dd5dc705899deb042a487f8e548369df1fc1353129e2d76e67cba724c284f20f4a4789d1e9c60455508d275e96f77396dd62541e401d8da3f4a4576b1c1dc8b1bbba7280f9fab14b0ecf0b4eced8c47b6e59777b484e9cb8d0489d77ec5784c3", 0xf3}, {&(0x7f0000001f80)="40d39f30d473e0c3e0bda32ad7678b8a7acc79309e2bd57244612cb284e532e46f49a1b0266fd91667721c04683adbdbe9618935d8785bbea927a692fbe835967115b2e5cb6ead63a998f9dc5b4f05519f8638367ce7aeb7bf7fb5b04676139649b8a3b293bfbd6313ac166f7a62f02de188b8216343dc0d68e3ec03b8abd7322e60dfe24cd74e269316e6a69bc4757d9527b18c94b1977c1b0c2f326eb3f806025b1c65d3670a0405ce21b8bd7d615913d8dfd1b0324eee17", 0xb9}, {&(0x7f0000002040)="82d4659a5a0459bcd297105cfff58cee5b1b7dee120f96302b71e4ee3c81243ba13ca92b324abbdf2f5ff1ac592c958857a5485964aaa423322fe3c1d2164d8476ccf3e72f11d93538540cb69162417a683a0e497b7fdd177f8fea65547be00a01ed7c87993eaba1c9637e990c50815bfd0ff27a927b9e395602cdcc3d3392cf68840397794b89afe78d", 0x8a}, {&(0x7f0000002100)="afa8f450b5e508fc503b178f8cab4243", 0x10}, {&(0x7f0000002140)="f2e665150cd70552bf94d6a7aa4762ab44f2b509056435102bb96e", 0x1b}, {&(0x7f0000002180)="73d04d2718ec7da9abe2d3110080ca8d1432efa534d893fd923d8209bfa094b1687b64d1afdedcadbbcb4d8455fc3f817ca457d52826af12e64c36f7c73457ae2ff500ba95cdb9b688f761990423309b67d8227270a65925ebe0ee9f814d15cc2c2e659bd0d859d1f90d3df44984e40f310d7544e585df87d714696428c62965f5e865b56c4ee20296a94d7baf7116557f2ca43802241112e9479d03fb3179155451c4afc4e032418432670db749fb4cef77e764419bc7b7cc4f966dbbeab52a193217b78172738d2cea47260e1c9a16f70e3ec2fb7fe0c7e8417f2f2bbf5367336b067c6f26db9c810f8a6f", 0xec}], 0x6, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000002340)="07a47d94061a08d6fae79077d62553a7155b8004d0d6515df0dc0a2903014e06df845a2fcfa9a7711f0f1a253ca6ed45e25eac2f6c69398d8ec3ca6a234f6515e437b3fb3b147bf431c21a6a6c71df53c57a0bf45bdbe06d1da957f0e8765671d8eb3b3da66c071c9e2084faa59e06390837b83dc51564fc73c8f3da1965ff0a5d8dbed47065", 0x86}, {&(0x7f0000002400)="a0c16d4ae8e1fbedab7c74692d944b1db265c70e8027c2d446dc9c69c7b4f4e0010009d25c286acebbdfad60fb260603b06c429ed6f0c872afa44cfcf3ca208890b3918f74e68397fbae881914164ab371d75f11e61d18b05f192be7e032e89b6eda31aa2b90b9fd20968ce6bc2195e19ba615c5eba6b8b3009f75d5a307dff120acff040a1e8d28d108fc2d126b8a32f7f682f169a0f2e06c5d4ed10e0ae42d59600ec17c4dd7b6c612a196e0584f656fc5002d38f7295c72ea5872b05c20a980a930802f266b67a3cb89a3e65bdea076b4d07471d61464f0337ad39cc7543d6ad16fdc66200154acfd3bbd71fa1b4f8ec5b8d2389b99778a4077dd5ac7cc77d89aa3b9f613bad6ab1213d0afe60cb89975e994fafac84824a244a8c0dbc4401d6cfb95c737afba35dfe0bf9a621ccd037471af2c81134abc5b61fb75c75334684b3d1af7a7e9d6afa4edd0e002fc2efdd499166efbbd970060d74e43790b33192644adf3e8b3c2fedac99cfd36b1143fa7dd56bb3d79019b2491bd5fd175e7a64b6af5f82c2bea1b0d56bed1f0f757d885ed9accc2eaddbe3fc3e6e33d84bc49af78f565f7cddc28926c6a6c2401f26b1b5c8da144351935f63d60ea478cbb6cec352708d47839e7e239e471967bdf2cfe1a0f62b62e10e537d1a4acbc55c531ed8bf5c818eb6fe5f5045025f9b8304893d4712b6cff86aedbcce564e2192b6ab4015fc07d7ef724baade017e8558f4243bdf21e0bf7f18aa74d284ca418ced203e15b734dbf425418fd1f882df86e980d5571eb390f9af572864dc7b6013c51fd190fb666894b03f921765f713b1c284264a21a0205779484145261f4449cef6b1f81f86ae9681474c905e28e97be99e035c4d4b6bdfa9e9a449051f216b3154879397e250b35e048848ce365d42654e8e941e5c19fda8e680a4989f178870b6a1561805059e58b4759d8fc2ef0f594a9c05e137ea82df6537a4d9c54bf70cd9dc6881d5b4256afc2dcfa817f29286281b120cec18878d85db7ddec51879c8b2b03252ef0df0019e165e41036ef4cbcb4def595baf958cd33c6125b09271191565451be0222c5985071ac3db44789f06ae13a56e9daf0e17d2c5d3d3791d63972c4ed198a739abd144b34832b458e82a378533287b2af75cfec9ae7dc6b633f08eabb91ed8dbb973130f747e2058f020ad051ab4fde148c7ad77b3d2ce913b6cbfb5bb6d5d9b089a855c4396dacdd12d9ff1a7bc0b30d0a581c89e1a6cfb52b9475fcfb8371f2d97f5adef36ebf1a2787f8a6bb9270c8904144f954369a3d719103e1e8cf974f7f7c39ea4c861f765ca480845d3de85a4663959c510861091cd857b447c640a607bff078834e69fe17aaf381c5965cdd7a407f3cccf767d073cc77a94df9aba4862f1c88cde3a8602179c5d0e818cd9d3fddc8482295f338fb34aa44ec639722ea399d32365cfb932dede3f695f41b58bcd6b05bf4ca70b3752592ea0ece22c1d31b619ef4b916bdd4548126a4489a59d28fb9f7f1d9f1777b0d98406c1ef797a57a2011949f0db4f61479152890733c96641695d9610d7043036991cf294602ce3a5bee6393bc2b5774be1a66adc66358d7d0a169523c7fe1f43573683b0208260877a5b7d91568c2800561360b1e666560cc2195f4aa10184096ae0c45de73c2b2b8a46b8f53c380d6341de4ee472bd393cf9ade90220fe17c2679ef47a6fcce0f68782be9c6fbea519d2b6a04c0df404c50426a9a017e4791e372a7d1cb3d25fecd63a2a11dbbb85d0e5c6becd43a0c9079a67a466bb3ca36db462042fe59e499b5c476138b87e2bb92bdc295908d7665863a87f6cdc930f3750151d74aca1b98d032db1ef2d235274660ab9747fb1f8af84ef07c55a2e9d77ab0178348b43b3774c92ee026ad2b5a032efb6576c5ca6c8c7b1abbb19e0a4b6538184b560b8c0711544a21ebfedb253dc07ba91a2880fb989926f569f59d1b62d8a5da488478a30b54cdaee1be22594767fb1aeb78d712a25f82223d5470ad3b974ec4c6b597965714039b83ac1be89242feeb596aee992df5d054a3098e7c31eaf2be9ed0d4285809078b6e34e8e096a239a255b054eb98491ffb9ef190604e99afdbf79a5e9b2b43b02ab429063f389f0518995c7e6af8219a3cde8f4cbc3ff62c023c53b7457bc62c99bcc8584bba3983089c44bc7a3606cdd81ca7603970da83023c974d67dd0a88f0f5e57324743b97aeb4c50b9ad59c2a42ee669facd19359573cce2b3b13c63298dd761bafa762c8e4218891037f965e211922e1d69eef91928861fe689ec3d8164ede8cee42fb2d33a313e13d63051ebad561246d0f4c8e9e6bed43e2998c523cb33e4a1f4206203f341a13319afd2dbe255dccbb9ab485f2b190f2f82336ff8fd73469eac36428c1015d1aad2b3175110bc7b0847a626b45ed28a54a8891898d80fb7e4d969897b922f6a8a4cac15c430b4f291d53fedd3cab7bb9cc904f233463617196c185a4cd425cfa2abcc0375b3bcc6a9cee44e4e38c5c0e360e63b1ed005e6680d924e4732e0fe686e05a564ea89d447ec5a98029056b5425f261f093d307f8fe64dade44e17ce49da947a48a6f3c7757971c0d63ebdac3d8fd773d48fda7c4ad093c802d92495fa4e18e0c9d4ca8acf6f5c8a5c73e052146c8f6a9e9a9fbde74936185211ffec685a225b9a6df7fd102ef93d277febeacb2703e24118c0a886acdbbe4d6998b783b308909a7df9c15c4cf598a69f36f5287fac8dd536b51b8cfe9951afbb77cfc7e733ef1b02ee17fcf23dbaf7fcd8d652b027653610fe6eced45f50c866d6d233de3ae86f3831d16e1253b73e03e9a9ab4f9976f3d022ea970854f18c9b4828e5b2b13726089d40fad2d10496b83daf3523ec05bbb0856b5fcdeec2f3e4e7bf63c2cdfb855f78eda986bcce2834402383f8fe8e5c483917edb21ff4cd5da5956ec6e115c8e856368479714b6d6df40180fe15a7158b3757baff69c35a7c06a44bcfa98b41cd84a6304a3353fbc80498eda6a0d27c865a5f3672f78d1410cfb80584d95cfc69009344e4f1763c1b96d65a3902a16af8b52a4463e8742873d0959814f9a8012772bb65afd271320a4c4c68c026222e61dfa4bbd27983eabf28572d21e59eaf6764d2757bf7a28a25db6e49b424c55408ebad0c1ca500f5392aecbc831203028c23453fc3ad3937874b050bdca35eb3931cd3d58e8457ba7fa51cc34b12656959bcfe943240a41ca59a77bb2922aa24a95f3bfd21155d14bc99e881f84b4d16683b9db2f5f4a311d67f4c57eceb66c395076db71300286057aeca70300eb2bf114acafd2d9fe3bf7519425e73c9146c0f0f7f92acc3ce2f933d96ad4cf19b6ac251d126af4db80c103cfa0531fac85b47a3ecb3d2888a96dcc67d06f34c15cd066a924b810b0a2d6ac602072b93d29a2ce890899282e5c453e9d0b0fea34b585eb02aa3b634beb2d6101e257f98ce37eb93bd9c0967d55a6690469a81a0e006f8ecaf14086cc607cb114cb3ac8c84293f154c2bab8449c47a1233c86c1fcf235c05fbcbf559dc80d123e613b065531bd334b9e21b81eaa2d03ecec8046d3dccad647920cb272af6f164dd9c6fd8e7ac2e6539ed2d93f06f9465626eef084dad12c15c2e2aec1d49ed92eca8a95d715e14c6fa720256bd19f8b8b31a82c54a9ef56675701ada4e3c4a014a1a09b70292e1fbd1d3421f2c7f07adfef51faaff2cf94ffa5273a16a866d4262ca9942ad4bf03db1af057241acf3cf90bcd33d8017c4355d636090b0cee6f04a760571a86e062e58545b75d857d2f034d8e8416cbae0636d0a0addf043b8556adec6a5c8d68fa67b1a0d898f2ab98a6bddcefada9bbc81d3f7df6d539d6f0f8ded4b642d76514823121b9570d6c77316c18cf978ed39d26a211d21c0655b507c6ccb1d7ab7d8865a6fa47982405176bbfb0d68768a9e9eaa59c48cc3e4ff2c978eee369baf9c52105b9a4f01ea1f4891ff81fe785f0100daa5e4d01e163b02af2683a46c5688bfcd68d33bd14674da4f7fbabc500d8169f6ce1f4b9e4454fdb48fbdd188edabd93c03f46294bdd166c4952c6f105c4fd0801423f63bd2197f591827b9df987c353d1b67d0b6171045c45b05e66915878de0a7a3b894181c30278d9839f1152f21fc70739901086db1607a74c830b9a8d12b75e44f354d61155ea8a20cbd7bca500609cdc90d93714f02b7c052109b3860cd1a67b5959f67a38fadc88746224fa935a6805a043053dc067129613123e0f383b42d15c2dbacd97a42655f83a5d5da5bfcb3f2e6244f3c016b101665c968032a1094632c58606f9c3b83db90522e5c2aa3c199e72a8535c7193fde3d849c4b6618b85046cd0b5c0c3e8c0627a7745d2c863a3e9498286ecb1b3652d7b85c848bc2c2bfbca26a5aedffe51dd823323b4c124009ee6e7323b5c8fcfbae264214fa072b2f598622bf03247e141b3eb189cdbda81465c0378bee48206566e259c85367f7751aa3aa0cee7da877448ddc81ffe30e50d28cd0cf4aaa42e2c8f68b94a2074ac1c55b09b7cb6a31775b12a58ab46d9510ce4cfb601a6e53a129b6bbb4a289bb385f6ad5d409ac0a7dae00c8ea1fd28ca952896ef85062db58af1a579d0c96373128eb20ae420be2d1cf37523947ef39f56da5dbd1b26293c21a741932d456dab4369e89aa0ad810e8ecf57fe32d279a138dd5e2dc3d6b266e674cd3f253fa011537462a0313028d5d548edccf5d71be39371e40221d8937f4e35189de7e49a7fa93ffe894db9628b10aa03eb6e4303c44f01e291655fb685ba866b1dc8500af13feed8b1aa2a3ff88ab4a78627084562d0978dec4ae8522e6632c3f9c2fb28db63a90d2e6a271fc8cbbffa227313693d8cb8f7de97ca92a0874c5e7d3401f2e9c95277a955f088bcbd074cfc7a89679df8fa6b1ce5cf7d941c3aaf3259ed863c0e2d7cc548832282349a5ebf8c01a5a614f7fb0aa2f0f926383259ea991b39b10b17eb98675f89ccc7dce4c441d802f4849869c9128c6d4138b78187daf3c2e6f42debb3a8a547f413dd4c42f4ca22fd847b7dd8c51db2a217415564cfd84ed2fb2e579727a05f27c80a6f61998d45405559b1230844c63be81358250738a877104e3e7ca6482e8cbaac92bd5db324c8e1ee32bfa0ffbbc9e8a72b358c7789358ad608db541e9c6f8adc6b2dc7056aa863e74135233d2722d1d4785ee8b28d49cfa04c4db032a8b5a9dd7796c1269e1224e530fadf1e8c4c43518843dea03e6508b25ea6be951c7022bb70133f590191d0b184b305e4c0429f22299b9cec3c5c365a255b4f2cb0bf4808524b0d336fcc9912a63aa9ca8979f15a36e3f50c79f6514e97caf17d786d6f16fb79e9c90146d9d923e0430c8db65c2f962ee5b5851e493534e680b5a3e2f3620f2cceb344cecac4e4ed5a8de05a8f7f98976a907da7f431d8be7385c58d8324d0f661f8a2e4fb911edd9d5556ea196e84402bfd0157cf08649644c672e32e5d36eca4fad8ff516e0c5aa2d0844f33fc3fc003ca5e6831c989d36c210d4a983fa55d080619c212e803ccb2078482e4581c916c6817be1cc68873654b13fc6bbea06e35039521bbb3a26e2644b2f7eac27b5f7a5ca54851236f7eb342a99cf7473cf687e1658e67ea43c305741bd6f68ed83964494a407fa8622fde45dc4bf747a850a3e14f0df4c4476f43a25b16f10b011547360fd276a6401061c9935438ec7caaf75f4905af482d2f94841d00bace942f7b", 0x1000}], 0x2, &(0x7f0000003440)=[@iv={0x98, 0x117, 0x2, 0x83, "78d1cbc94abda82c10b84c537d18b55219b5fe4ac01da295681a54f052fc46892c717c1015f4ed3e25990f36929eef3c7baf6cacfec0dd0f69119ba9aefbe72a863c27221dc6fd33c5182df186f039d17623b108aa9ab0e511df66e1cd2d3d21b4ffe9c5982d803e348b25c8e2e3afa24ef11fc4258beea3753556d814f16a802b6d11"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x2f1d7ec3}, @op={0x18}, @iv={0x88, 0x117, 0x2, 0x6f, "fa2f49b654d06da37d7fd8129e25873684e30f7d6f0c9144227dc86e1016f06570c598e1a2e4a6b362bca03ecff1ae28c1de856d0667ad1f6fa59003312b1eae4111f7a2ec5704f469a2c33be54834b8a6a0202fed16d7a6c12f5b4a36c551b70eefecc5b0f440bb2be2d3897c6d83"}, @assoc={0x18, 0x117, 0x4, 0xb}, @iv={0x100, 0x117, 0x2, 0xe7, "43c8fdf4a98ad83e10a24565be92c870eea39b8a208964a28132f7faf6026f2bd13432120688e036b92df828da1c14bb56f83212e183881fc76d93cadd7e4d5d2c187b9d4c3bbb241f522cc794fb0daadcb3c52434ac91122a7b42e0445518c618a8c409cdbc14bc6e16d4b6ad48495be5056dd83bd3a510481d80c3fc48bc1193e5b3200978747c652e572a0fb55847b088a27fdecc157b54d21a3ba40469e33e83a370065751bf574f318ab9a4d1e98085ce87d329d9693c78a06624c8fecff42909558d0d75b03443d08003d26cbfdddb939953e6d251b0383b55e342c66fc81d1fe12d9a57"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}], 0x2c8, 0x20000004}], 0x4, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x4c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44496e2f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d25ef6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}]}]}]}, 0x4c}}, 0x0) 520.569167ms ago: executing program 34 (id=2975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xa96) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000100001070000000000e1ff000a0000910c0002006e6c383032313100"], 0x20}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, 0x0, &(0x7f0000000040)) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 0s ago: executing program 35 (id=2976): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r4, &(0x7f0000000600)="ea441beea0351a93b78be5612872a28bcea0c27a5feb3d806cb1310abad534ca4496fc2c6730cfbaa1f8514ae065f4d73ba84ab380d7844cc64fe78671a6ded9ab57c2a56f32dfdec741e5864add5aecbe66d9ff33e3f67f94b5e94fbf129cc308ffe011e8f76537a4305feebc", &(0x7f0000000680)=@tcp, 0x4}, 0x20) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@ctrl_frame=@bar={{}, {0x2}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x5}, {0x5, 0x5}}}, 0x14) kernel console output (not intermixed with test programs): 0 [ 345.183132][T14164] ? __pfx_ksys_write+0x10/0x10 [ 345.183171][T14164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.183194][T14164] do_syscall_64+0x174/0x580 [ 345.183214][T14164] ? trace_irq_disable+0x3b/0x140 [ 345.183245][T14164] ? clear_bhb_loop+0x40/0x90 [ 345.183271][T14164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.183292][T14164] RIP: 0033:0x7f08c2d9ce59 [ 345.183312][T14164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.183330][T14164] RSP: 002b:00007f08c3c1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.183352][T14164] RAX: ffffffffffffffda RBX: 00007f08c3016180 RCX: 00007f08c2d9ce59 [ 345.183367][T14164] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000005 [ 345.183380][T14164] RBP: 00007f08c3c1b090 R08: 0000000000000000 R09: 0000000000000000 [ 345.183392][T14164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.183404][T14164] R13: 00007f08c3016218 R14: 00007f08c3016180 R15: 00007ffe8769a1e8 [ 345.183437][T14164] [ 345.870128][T14177] __nla_validate_parse: 4 callbacks suppressed [ 345.870149][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2122'. [ 345.888860][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2122'. [ 345.984519][T14179] syz.2.2124: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 346.006227][T14179] CPU: 0 UID: 0 PID: 14179 Comm: syz.2.2124 Not tainted syzkaller #0 PREEMPT(full) [ 346.006257][T14179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.006269][T14179] Call Trace: [ 346.006278][T14179] [ 346.006287][T14179] dump_stack_lvl+0xe8/0x150 [ 346.006319][T14179] warn_alloc+0x249/0x340 [ 346.006351][T14179] ? stack_trace_save+0xa9/0x100 [ 346.006387][T14179] ? __pfx_warn_alloc+0x10/0x10 [ 346.006425][T14179] ? kasan_save_track+0x4f/0x80 [ 346.006451][T14179] ? kasan_save_track+0x3e/0x80 [ 346.006476][T14179] ? __kasan_kmalloc+0x93/0xb0 [ 346.006502][T14179] ? __kmalloc_cache_noprof+0x31c/0x660 [ 346.006531][T14179] ? xskq_create+0x56/0x170 [ 346.006560][T14179] ? xsk_setsockopt+0x54c/0x990 [ 346.006584][T14179] ? do_sock_setsockopt+0x17c/0x1b0 [ 346.006603][T14179] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 346.006623][T14179] ? do_syscall_64+0x174/0x580 [ 346.006647][T14179] __vmalloc_node_range_noprof+0x132/0x1750 [ 346.006708][T14179] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 346.006745][T14179] ? __kasan_kmalloc+0x93/0xb0 [ 346.006784][T14179] vmalloc_user_noprof+0xad/0xe0 [ 346.006814][T14179] ? xskq_create+0xbf/0x170 [ 346.006847][T14179] xskq_create+0xbf/0x170 [ 346.006881][T14179] xsk_init_queue+0x8a/0xe0 [ 346.006915][T14179] xsk_setsockopt+0x54c/0x990 [ 346.006948][T14179] ? __pfx_xsk_setsockopt+0x10/0x10 [ 346.006979][T14179] ? __pfx_aa_sk_perm+0x10/0x10 [ 346.007012][T14179] ? aa_sock_opt_perm+0xff/0x1a0 [ 346.007048][T14179] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 346.007077][T14179] ? __pfx_xsk_setsockopt+0x10/0x10 [ 346.007109][T14179] do_sock_setsockopt+0x17c/0x1b0 [ 346.007140][T14179] __x64_sys_setsockopt+0x13d/0x1b0 [ 346.007167][T14179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.007200][T14179] do_syscall_64+0x174/0x580 [ 346.007222][T14179] ? trace_irq_disable+0x3b/0x140 [ 346.007254][T14179] ? clear_bhb_loop+0x40/0x90 [ 346.007282][T14179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.007303][T14179] RIP: 0033:0x7f08c2d9ce59 [ 346.007324][T14179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.007343][T14179] RSP: 002b:00007f08c3c5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 346.007366][T14179] RAX: ffffffffffffffda RBX: 00007f08c3015fa0 RCX: 00007f08c2d9ce59 [ 346.007382][T14179] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 346.007395][T14179] RBP: 00007f08c2e32d6f R08: 0000000000000004 R09: 0000000000000000 [ 346.007408][T14179] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.007422][T14179] R13: 00007f08c3016038 R14: 00007f08c3015fa0 R15: 00007ffe8769a1e8 [ 346.007459][T14179] [ 346.007468][T14179] Mem-Info: [ 346.309943][T14179] active_anon:5910 inactive_anon:0 isolated_anon:0 [ 346.309943][T14179] active_file:3469 inactive_file:40057 isolated_file:0 [ 346.309943][T14179] unevictable:768 dirty:189 writeback:0 [ 346.309943][T14179] slab_reclaimable:11172 slab_unreclaimable:930964 [ 346.309943][T14179] mapped:30648 shmem:1283 pagetables:1252 [ 346.309943][T14179] sec_pagetables:0 bounce:0 [ 346.309943][T14179] kernel_misc_reclaimable:0 [ 346.309943][T14179] free:485057 free_pcp:14936 free_cma:0 [ 346.401544][T14179] Node 0 active_anon:23740kB inactive_anon:0kB active_file:13876kB inactive_file:160028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122692kB dirty:756kB writeback:0kB shmem:3596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14624kB pagetables:4892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 346.472972][T14179] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 346.533340][T14179] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.616261][T14179] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 346.646771][T14179] Node 0 DMA32 free:217084kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23340kB inactive_anon:0kB active_file:13876kB inactive_file:160028kB unevictable:1536kB writepending:756kB zspages:0kB present:3129332kB managed:2552544kB mlocked:0kB bounce:0kB free_pcp:60332kB local_pcp:33564kB free_cma:0kB [ 346.742299][T14179] lowmem_reserve[]: 0 0 0 0 0 [ 346.761520][T14207] block nbd0: not configured, cannot reconfigure [ 346.762089][T14179] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.806537][T14179] lowmem_reserve[]: 0 0 0 0 0 [ 346.822501][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2129'. [ 346.861400][T14179] Node 1 Normal free:1711832kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.935300][T14179] lowmem_reserve[]: 0 0 0 0 0 [ 346.948977][T14179] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 346.980069][T14179] Node 0 DMA32: 3778*4kB (UME) 3411*8kB (UM) 1447*16kB (UME) 190*32kB (UME) 49*64kB (UME) 29*128kB (ME) 7*256kB (ME) 50*512kB (UME) 51*1024kB (UM) 29*2048kB (UME) 0*4096kB = 217488kB [ 347.010927][T14179] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 347.023490][T14179] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 7*16kB (UM) 3*32kB (UM) 5*64kB (UM) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 416*4096kB (M) = 1711832kB [ 347.078914][T14179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.094523][T14179] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 347.114769][T14179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.126956][T14179] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 347.147258][T14179] 44808 total pagecache pages [ 347.164336][T14179] 0 pages in swap cache [ 347.174838][T14179] Free swap = 124996kB [ 347.188637][T14179] Total swap = 124996kB [ 347.193151][T14179] 2097051 pages RAM [ 347.197019][T14179] 0 pages HighMem/MovableOnly [ 347.201932][T14179] 427132 pages reserved [ 347.206147][T14179] 0 pages cma reserved [ 347.351931][T14215] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 347.359347][T14215] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 347.366929][T14215] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 347.499317][T14227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2135'. [ 347.816322][T14239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2139'. [ 347.836615][T14239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2139'. [ 348.191019][T14258] netlink: del zone limit has 4 unknown bytes [ 348.199239][T14258] FAULT_INJECTION: forcing a failure. [ 348.199239][T14258] name failslab, interval 1, probability 0, space 0, times 0 [ 348.214648][T14258] CPU: 1 UID: 0 PID: 14258 Comm: syz.3.2143 Not tainted syzkaller #0 PREEMPT(full) [ 348.214678][T14258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.214690][T14258] Call Trace: [ 348.214698][T14258] [ 348.214707][T14258] dump_stack_lvl+0xe8/0x150 [ 348.214739][T14258] should_fail_ex+0x412/0x560 [ 348.214766][T14258] should_failslab+0xa8/0x100 [ 348.214786][T14258] ? skb_clone+0x212/0x3a0 [ 348.214810][T14258] kmem_cache_alloc_noprof+0x87/0x650 [ 348.214847][T14258] skb_clone+0x212/0x3a0 [ 348.214873][T14258] __netlink_deliver_tap+0x404/0x850 [ 348.214911][T14258] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.214936][T14258] netlink_deliver_tap+0x19c/0x1b0 [ 348.214959][T14258] netlink_sendskb+0x68/0x140 [ 348.214982][T14258] ovs_ct_limit_cmd_del+0x60e/0x770 [ 348.215021][T14258] genl_family_rcv_msg_doit+0x22a/0x330 [ 348.215056][T14258] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 348.215098][T14258] ? bpf_lsm_capable+0x9/0x20 [ 348.215118][T14258] ? security_capable+0x7e/0x2c0 [ 348.215157][T14258] genl_rcv_msg+0x61c/0x7a0 [ 348.215192][T14258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.215220][T14258] ? __pfx_ovs_ct_limit_cmd_del+0x10/0x10 [ 348.215245][T14258] ? __pfx_ref_tracker_free+0x10/0x10 [ 348.215280][T14258] netlink_rcv_skb+0x232/0x4b0 [ 348.215305][T14258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.215335][T14258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.215374][T14258] ? down_read+0x270/0x2e0 [ 348.215396][T14258] ? genl_rcv+0xd/0x40 [ 348.215425][T14258] genl_rcv+0x28/0x40 [ 348.215448][T14258] netlink_unicast+0x75c/0x8e0 [ 348.215489][T14258] netlink_sendmsg+0x813/0xb40 [ 348.215523][T14258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.215551][T14258] ? aa_sock_msg_perm+0xf1/0x1b0 [ 348.215581][T14258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.215609][T14258] ____sys_sendmsg+0x972/0x9f0 [ 348.215632][T14258] ? __might_fault+0xaf/0x130 [ 348.215663][T14258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.215696][T14258] ? import_iovec+0x73/0xa0 [ 348.215723][T14258] ___sys_sendmsg+0x2a5/0x360 [ 348.215744][T14258] ? __lock_acquire+0x6b5/0x2cf0 [ 348.215769][T14258] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.215833][T14258] ? __fget_files+0x2a/0x420 [ 348.215857][T14258] ? __fget_files+0x3a0/0x420 [ 348.215894][T14258] __x64_sys_sendmsg+0x1bd/0x2a0 [ 348.215920][T14258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.215952][T14258] ? __pfx_ksys_write+0x10/0x10 [ 348.215989][T14258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.216012][T14258] do_syscall_64+0x174/0x580 [ 348.216033][T14258] ? trace_irq_disable+0x3b/0x140 [ 348.216063][T14258] ? clear_bhb_loop+0x40/0x90 [ 348.216088][T14258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.216109][T14258] RIP: 0033:0x7f3bde19ce59 [ 348.216128][T14258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.216145][T14258] RSP: 002b:00007f3bdf0b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.216167][T14258] RAX: ffffffffffffffda RBX: 00007f3bde415fa0 RCX: 00007f3bde19ce59 [ 348.216182][T14258] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 348.216195][T14258] RBP: 00007f3bdf0b8090 R08: 0000000000000000 R09: 0000000000000000 [ 348.216207][T14258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.216218][T14258] R13: 00007f3bde416038 R14: 00007f3bde415fa0 R15: 00007fff0da35b38 [ 348.216253][T14258] [ 348.788910][T14263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2145'. [ 348.966527][T14271] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2148'. [ 349.410725][T14296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2152'. [ 349.441374][T14298] netlink: 'syz.1.2153': attribute type 1 has an invalid length. [ 349.516310][T14298] bond9: entered promiscuous mode [ 349.522776][T14298] 8021q: adding VLAN 0 to HW filter on device bond9 [ 349.632222][T14296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.930501][T14308] bridge0: port 1(ipvlan2) entered blocking state [ 349.937356][T14308] bridge0: port 1(ipvlan2) entered disabled state [ 349.951821][T14308] ipvlan2: entered allmulticast mode [ 349.960415][T14308] ipvlan2: left allmulticast mode [ 350.234088][T14333] openvswitch: netlink: IP tunnel dst address not specified [ 350.427429][T14340] xt_CT: No such helper "snmp" [ 350.682974][T14352] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2168'. [ 350.843455][T14354] syzkaller1: entered promiscuous mode [ 350.857478][T14354] syzkaller1: entered allmulticast mode [ 351.403907][T14383] xt_hashlimit: size too large, truncated to 1048576 [ 351.433660][T14394] netlink: 'syz.2.2177': attribute type 1 has an invalid length. [ 351.460353][T14394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2177'. [ 351.578764][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2178'. [ 351.626863][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 351.641678][T14401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2178'. [ 351.668152][T14401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2178'. [ 351.687763][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'. [ 351.742732][T14401] netlink: 63 bytes leftover after parsing attributes in process `syz.0.2178'. [ 351.787458][T14406] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2180'. [ 351.800915][T14406] unsupported nlmsg_type 40 [ 351.969328][T14410] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2182'. [ 352.069345][T14412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2183'. [ 352.115587][T14417] syz_tun: entered allmulticast mode [ 352.387551][T14439] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 352.642414][T14453] batadv0: entered promiscuous mode [ 352.667390][T14453] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 352.795353][T14457] pim6reg1: entered promiscuous mode [ 352.804404][T14457] pim6reg1: entered allmulticast mode [ 352.829583][T14465] netlink: 'syz.2.2198': attribute type 2 has an invalid length. [ 352.838677][T14465] netlink: 'syz.2.2198': attribute type 8 has an invalid length. [ 352.952729][T14465] netlink: 'syz.2.2198': attribute type 2 has an invalid length. [ 352.971589][T14465] netlink: 'syz.2.2198': attribute type 8 has an invalid length. [ 353.454110][ T30] audit: type=1800 audit(1781131047.218:11): pid=14493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2205" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2256 res=0 errno=0 [ 353.765743][ T7664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.788075][ T7664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.947217][T14511] sctp: [Deprecated]: syz.4.2211 (pid 14511) Use of int in max_burst socket option. [ 353.947217][T14511] Use struct sctp_assoc_value instead [ 353.997594][T14507] block nbd3: not configured, cannot reconfigure [ 354.595200][T14528] pimreg: entered allmulticast mode [ 354.930857][T14533] nbd2: detected capacity change from 0 to 63 [ 354.986896][T14536] block nbd2: NBD_DISCONNECT [ 355.027665][T14536] block nbd2: Disconnected due to user request. [ 355.038575][T14549] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 355.050131][T14536] block nbd2: shutting down sockets [ 355.056885][ T7577] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.097863][ T7577] Buffer I/O error on dev nbd2, logical block 1, async page read [ 355.151650][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.161076][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 355.174642][ T5007] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 355.185419][ T5007] Buffer I/O error on dev nbd2, logical block 2, async page read [ 355.197456][ T5007] Buffer I/O error on dev nbd2, logical block 3, async page read [ 355.208097][ T7577] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.218010][ T7577] Buffer I/O error on dev nbd2, logical block 0, async page read [ 355.226632][ T7577] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.237004][ T7577] Buffer I/O error on dev nbd2, logical block 1, async page read [ 355.245467][ T7577] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.255066][ T7577] Buffer I/O error on dev nbd2, logical block 2, async page read [ 355.263941][ T7577] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.273690][ T7577] Buffer I/O error on dev nbd2, logical block 3, async page read [ 355.282351][ T7577] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.292256][ T7577] Buffer I/O error on dev nbd2, logical block 0, async page read [ 355.301050][ T7577] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.319865][ T7577] Buffer I/O error on dev nbd2, logical block 1, async page read [ 355.334382][ T7577] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.376747][ T7577] ldm_validate_partition_table(): Disk read failed. [ 355.412075][ T7577] Dev nbd2: unable to read RDB block 0 [ 355.451987][ T7577] nbd2: unable to read partition table [ 355.529588][T14558] netlink: 'syz.2.2222': attribute type 1 has an invalid length. [ 355.539498][ T7577] ldm_validate_partition_table(): Disk read failed. [ 355.577047][ T7577] Dev nbd2: unable to read RDB block 0 [ 355.602534][T14558] 8021q: adding VLAN 0 to HW filter on device bond7 [ 355.620092][ T7577] nbd2: unable to read partition table [ 355.623792][T14563] netlink: 'syz.1.2223': attribute type 11 has an invalid length. [ 355.636180][T14562] netlink: 'syz.1.2223': attribute type 11 has an invalid length. [ 356.055165][T14585] netlink: 'syz.1.2228': attribute type 2 has an invalid length. [ 356.169510][T14588] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 356.190070][T14589] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 356.211647][T14589] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 356.231143][T14588] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 356.416996][T14597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.583754][T14615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.661483][T14616] __nla_validate_parse: 13 callbacks suppressed [ 356.661499][T14616] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2236'. [ 356.722342][T14615] bridge0: port 1(syz_tun) entered blocking state [ 356.734090][T14615] bridge0: port 1(syz_tun) entered disabled state [ 356.752136][T14615] syz_tun: entered allmulticast mode [ 356.764211][T14615] syz_tun: entered promiscuous mode [ 356.777632][T14614] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2236'. [ 357.486339][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 357.544530][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2242'. [ 357.957996][ T7662] wlan1: Trigger new scan to find an IBSS to join [ 358.281194][T14675] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2246'. [ 358.508877][T14684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2250'. [ 358.830115][T14688] can: request_module (can-proto-0) failed. [ 359.097510][T14696] sctp: [Deprecated]: syz.3.2253 (pid 14696) Use of int in max_burst socket option. [ 359.097510][T14696] Use struct sctp_assoc_value instead [ 359.190271][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2255'. [ 359.303969][T14709] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2256'. [ 359.376478][T14709] syzkaller0: entered promiscuous mode [ 359.390558][T14709] syzkaller0: entered allmulticast mode [ 359.740023][T14723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2260'. [ 359.807209][T14727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'. [ 360.034911][T14737] netlink: del zone limit has 4 unknown bytes [ 360.806963][T14762] batadv0: entered promiscuous mode [ 360.833497][T14762] batadv0: left promiscuous mode [ 361.116033][T14779] netlink: del zone limit has 4 unknown bytes [ 361.363116][T14783] bond10: Unable to set down delay as MII monitoring is disabled [ 361.413077][T14783] bond10 (unregistering): Released all slaves [ 361.537915][T14788] batman_adv: batadv0: Interface deactivated: gretap1 [ 361.586487][T14788] batman_adv: batadv0: Removing interface: gretap1 [ 362.061380][T14818] __nla_validate_parse: 7 callbacks suppressed [ 362.061400][T14818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2285'. [ 362.430351][T14848] netlink: 'syz.1.2292': attribute type 4 has an invalid length. [ 362.496252][T14850] netlink: 'syz.1.2292': attribute type 4 has an invalid length. [ 362.529259][T14831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2290'. [ 362.583798][ T5773] hsr0: entered promiscuous mode [ 362.703479][T14862] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2296'. [ 362.896792][T14873] IPVS: length: 43 != 24 [ 362.909291][T14862] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 362.990531][ T3293] wlan1: Trigger new scan to find an IBSS to join [ 363.101437][T14862] bond13 (unregistering): Released all slaves [ 363.281724][T14868] bond13: option lacp_rate: invalid value (128) [ 363.369021][T14868] bond13 (unregistering): Released all slaves [ 363.439590][T14882] batadv_slave_1: entered promiscuous mode [ 363.548459][T14884] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 363.567963][T14887] batadv_slave_1: left promiscuous mode [ 363.878848][T14910] xt_bpf: check failed: parse error [ 363.895406][T14910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2305'. [ 363.903968][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.934185][T14913] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2306'. [ 363.981778][T14914] gretap0: left promiscuous mode [ 363.990101][T14920] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2306'. [ 364.006631][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2303'. [ 364.082255][T14914] bond0: left promiscuous mode [ 364.087371][T14914] bond_slave_0: left promiscuous mode [ 364.097056][T14914] bond_slave_1: left promiscuous mode [ 364.119174][T14914] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.136133][T14914] dummy0: left promiscuous mode [ 364.151176][T14914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.204460][T14914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.212909][T14914] veth1_to_batadv: left allmulticast mode [ 364.223196][T14914] batadv_slave_1: left promiscuous mode [ 364.241044][T14914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.265565][T14914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 364.284453][T14914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.299911][T14914] veth1_vlan: left promiscuous mode [ 364.308917][T14914] veth1_vlan: entered promiscuous mode [ 364.319343][T14914] veth1_macvtap: left promiscuous mode [ 364.326083][T14914] veth0_macvtap: left promiscuous mode [ 364.332947][T14914] veth0_macvtap: entered promiscuous mode [ 364.340101][T14914] veth1_macvtap: entered promiscuous mode [ 364.354964][T14914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.365291][T14914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.373618][T14914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.382422][T14914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.391092][T14914] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 364.397839][T14914] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 364.406605][T14914] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 364.424714][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.432128][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.459610][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.466870][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.518446][T14929] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2309'. [ 364.569754][ T7660] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.608795][ T7660] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.625470][ T7660] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.696318][ T7660] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.941687][T14947] tipc: Failed to remove unknown binding: 66,1,1/134418688:3618853822/3618853824 [ 365.032409][T14949] ip6gre2: entered promiscuous mode [ 365.071003][T14949] ip6gre2: entered allmulticast mode [ 365.140415][T14954] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.161093][T14954] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.174765][T14954] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 57100 - 0 [ 365.239407][ T7662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.255271][ T7662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.286334][T14963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2319'. [ 365.308889][T14954] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.323133][T14954] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.338170][T14954] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 57100 - 0 [ 365.418673][T14954] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.430124][T14954] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.454049][T14954] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 57100 - 0 [ 365.591952][T14954] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.612305][T14954] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.638864][T14954] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 57100 - 0 [ 365.698485][T14982] netlink: 'syz.2.2325': attribute type 1 has an invalid length. [ 365.707199][T14982] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2325'. [ 365.720704][ T7660] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 365.737376][ T7660] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 365.750055][ T5773] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 366.012036][ T3377] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.043634][ T3377] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 57100 - 0 [ 366.063228][ T3377] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 366.217849][T15003] 8021q: adding VLAN 0 to HW filter on device bond10 [ 366.248723][ T7664] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.257930][ T7664] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 57100 - 0 [ 366.266471][ T7664] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 366.313159][T15008] bond10: (slave veth1): Enslaving as an active interface with an up link [ 366.322379][ T5773] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 366.349445][T15013] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 366.386726][T15013] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 366.436627][ T3377] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.449801][ T3377] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 57100 - 0 [ 366.458379][ T3377] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 366.512494][ T8128] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 366.560015][ T3377] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.579094][ T3377] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 57100 - 0 [ 366.608262][ T3377] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 366.751006][T15026] netlink: 'syz.0.2336': attribute type 11 has an invalid length. [ 367.164412][T15048] IPVS: Unknown mcast interface: xfrm0 [ 367.333287][T15056] tipc: Invalid UDP bearer configuration [ 367.333344][T15056] tipc: Enabling of bearer rejected, failed to enable media [ 368.042133][T15085] netlink: 'syz.2.2354': attribute type 21 has an invalid length. [ 368.134804][T15085] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.183361][T15085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.192590][T15085] IPv6: NLM_F_CREATE should be set when creating new route [ 368.199946][T15085] IPv6: NLM_F_CREATE should be set when creating new route [ 368.207203][T15085] IPv6: NLM_F_CREATE should be set when creating new route [ 368.209982][T15089] veth1_vlan: entered allmulticast mode [ 368.282185][T15091] veth1_to_bond: Caught tx_queue_len zero misconfig [ 368.332893][T15095] __nla_validate_parse: 11 callbacks suppressed [ 368.332913][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2357'. [ 368.375617][T15095] netlink: 'syz.2.2357': attribute type 5 has an invalid length. [ 368.387635][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2357'. [ 368.392389][T15091] vlan3: entered allmulticast mode [ 368.425055][T15091] veth0_to_bond: entered allmulticast mode [ 368.613126][T15103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2358'. [ 368.652940][T15097] tipc: Resetting bearer [ 369.547605][T15137] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2366'. [ 369.580019][T15137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.711267][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.777612][T15144] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2368'. [ 370.444237][T15173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 370.583829][T15176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.776100][T15179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2376'. [ 371.582985][T15203] tipc: Enabled bearer , priority 0 [ 371.621011][T15205] syzkaller0: entered promiscuous mode [ 371.647510][T15205] syzkaller0: entered allmulticast mode [ 371.677243][T15203] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 371.987212][T15207] syzkaller0: entered promiscuous mode [ 372.034119][T15207] syzkaller0: entered allmulticast mode [ 372.059928][T15203] tipc: Resetting bearer [ 372.194643][T15203] tipc: Disabling bearer [ 372.584358][T15248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2388'. [ 372.993500][T15255] netlink: 'syz.4.2390': attribute type 1 has an invalid length. [ 373.362151][T15260] netlink: 'syz.3.2391': attribute type 30 has an invalid length. [ 374.570969][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2394'. [ 374.784573][T15275] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2394'. [ 374.794141][T15275] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2394'. [ 375.663300][T15255] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 375.764336][T15283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.195252][T15310] syz_tun: left allmulticast mode [ 376.782101][T15342] netlink: 'syz.2.2408': attribute type 1 has an invalid length. [ 377.114434][T15361] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2413'. [ 377.276586][T15368] netlink: 'syz.2.2413': attribute type 1 has an invalid length. [ 377.389912][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 377.439171][T15368] bond8: entered promiscuous mode [ 377.452041][T15368] 8021q: adding VLAN 0 to HW filter on device bond8 [ 377.525222][T15375] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2415'. [ 377.733008][T15385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2421'. [ 377.772628][T15386] xt_CONNSECMARK: invalid mode: 254 [ 380.628329][T15379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.895903][T15448] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 380.963965][T15442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.995239][T15451] ip6tnl5: entered allmulticast mode [ 381.048660][T15464] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2436'. [ 381.545809][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2439'. [ 381.548851][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2440'. [ 381.648755][T15476] ip6tnl2: entered allmulticast mode [ 381.676629][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2440'. [ 381.694011][T15478] pim6reg1: entered promiscuous mode [ 381.705834][T15478] pim6reg1: entered allmulticast mode [ 381.890557][T15484] tipc: Enabled bearer , priority 0 [ 382.031677][T15484] syzkaller0: entered promiscuous mode [ 382.043767][T15491] netlink: 'syz.3.2445': attribute type 1 has an invalid length. [ 382.053309][T15484] syzkaller0: entered allmulticast mode [ 382.070786][T15484] tipc: Resetting bearer [ 382.131307][T15496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2447'. [ 382.234457][T15491] 8021q: adding VLAN 0 to HW filter on device bond13 [ 382.240682][T15501] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2449'. [ 382.257816][T15498] bond13: entered promiscuous mode [ 382.271301][T15498] bond13: entered allmulticast mode [ 382.388141][ T42] tipc: Resetting bearer [ 382.414244][T15488] macvlan3: entered promiscuous mode [ 382.429999][T15488] macvlan3: entered allmulticast mode [ 382.442043][T15488] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 382.461496][T15510] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 382.575114][T15481] tipc: Resetting bearer [ 382.802758][T15524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.861373][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 382.872297][T15528] x_tables: duplicate underflow at hook 2 [ 382.894250][T15528] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2457'. [ 382.954788][T15530] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2457'. [ 383.152423][T15532] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2458'. [ 385.697502][T15481] tipc: Disabling bearer [ 385.716884][T15530] bridge0: port 1(syz_tun) entered blocking state [ 385.723880][T15530] bridge0: port 1(syz_tun) entered forwarding state [ 385.797666][T15530] bridge0: port 1(syz_tun) entered disabled state [ 385.965340][T15550] netlink: 'syz.3.2462': attribute type 2 has an invalid length. [ 386.063072][T15560] xt_hashlimit: size too large, truncated to 1048576 [ 387.044948][T15592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.773891][T15538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.453311][T15626] netlink: 'syz.1.2482': attribute type 4 has an invalid length. [ 389.478249][T15601] : renamed from bond0 (while UP) [ 389.484280][T15626] netlink: 'syz.1.2482': attribute type 4 has an invalid length. [ 389.541510][T15632] netlink: 'syz.1.2482': attribute type 4 has an invalid length. [ 390.077955][T15643] IPv4: Oversized IP packet from 127.202.26.0 [ 390.188580][T15648] bond11 (unregistering): Released all slaves [ 390.456118][T15662] __nla_validate_parse: 2 callbacks suppressed [ 390.456139][T15662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2492'. [ 390.596255][T15668] syzkaller0: entered promiscuous mode [ 390.606067][T15668] syzkaller0: entered allmulticast mode [ 390.734101][T15676] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2495'. [ 390.750476][T15679] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2495'. [ 390.867770][T15681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'. [ 390.905979][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2495'. [ 391.891125][T15729] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2511'. [ 391.949518][T15728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.110048][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 392.174676][T15739] netlink: 'syz.4.2513': attribute type 12 has an invalid length. [ 392.186802][T15741] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 392.224253][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2514'. [ 392.597945][T15762] xt_HMARK: spi-set and port-set can't be combined [ 392.604533][T15749] tipc: Started in network mode [ 392.604566][T15749] tipc: Node identity 8ac66ed3d8ff, cluster identity 4711 [ 392.604733][T15749] tipc: Enabled bearer , priority 0 [ 392.607528][T15749] syzkaller0: entered promiscuous mode [ 392.681055][T15749] syzkaller0: entered allmulticast mode [ 392.735716][T15756] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 392.737402][T15769] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2522'. [ 392.944612][T15756] tipc: Resetting bearer [ 393.241350][T15746] tipc: Resetting bearer [ 393.342588][T15746] tipc: Disabling bearer [ 393.574904][T15787] netlink: 'syz.1.2527': attribute type 21 has an invalid length. [ 393.716724][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2529'. [ 393.748322][T15795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2529'. [ 394.625586][T15837] netlink: 'syz.4.2539': attribute type 1 has an invalid length. [ 394.784676][T15841] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 394.823260][T15837] 8021q: adding VLAN 0 to HW filter on device bond11 [ 394.870625][T15840] bond11: (slave veth7): Enslaving as a backup interface with a down link [ 394.948843][T15837] netlink: 'syz.4.2539': attribute type 10 has an invalid length. [ 395.511943][T15877] __nla_validate_parse: 5 callbacks suppressed [ 395.511966][T15877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2547'. [ 395.514524][T15879] netlink: 'syz.4.2550': attribute type 9 has an invalid length. [ 395.572368][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2550'. [ 395.714978][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2553'. [ 395.724589][T15888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2553'. [ 395.762139][ T3293] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.781497][ T3293] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.795869][T15890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.829486][T15890] netlink: 'syz.2.2554': attribute type 21 has an invalid length. [ 395.947845][ T3293] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.977361][ T3293] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.027811][ T3293] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.066764][ T3293] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.107882][ T3293] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.154809][ T3293] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.272184][T15911] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2558'. [ 396.612649][T15930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2564'. [ 396.618215][T15929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2563'. [ 396.644434][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2564'. [ 396.647644][T15929] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2563'. [ 396.682731][T15930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2564'. [ 396.785245][T15936] netlink: 'syz.2.2565': attribute type 1 has an invalid length. [ 396.868950][T15933] netlink: 'syz.2.2565': attribute type 10 has an invalid length. [ 396.928614][T15933] netlink: 'syz.2.2565': attribute type 10 has an invalid length. [ 397.011694][T15944] netlink: 'syz.4.2567': attribute type 1 has an invalid length. [ 397.182506][T15944] bond12: entered promiscuous mode [ 397.218940][T15944] 8021q: adding VLAN 0 to HW filter on device bond12 [ 397.331174][T15957] bond12: (slave bridge0): making interface the new active one [ 397.359819][T15957] bridge0: entered promiscuous mode [ 397.368421][T15957] bond12: (slave bridge0): Enslaving as an active interface with an up link [ 398.404613][T16009] netlink: 'syz.2.2586': attribute type 2 has an invalid length. [ 398.541880][T16013] sock: sock_timestamping_bind_phc: sock not bind to device [ 399.106938][T16035] netlink: 'syz.4.2596': attribute type 4 has an invalid length. [ 399.167227][T16035] .`: renamed from bond0 [ 399.222700][T16040] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.241765][T16038] syzkaller1: entered promiscuous mode [ 399.264865][T16038] syzkaller1: entered allmulticast mode [ 399.629357][T16056] hmac(sha2: entered promiscuous mode [ 399.754206][T16058] bond11: (slave veth7): Releasing backup interface [ 399.783080][T16067] validate_nla: 2 callbacks suppressed [ 399.783101][T16067] netlink: 'syz.2.2603': attribute type 1 has an invalid length. [ 399.809568][T16058] bond12: (slave bridge0): Releasing backup interface [ 399.828277][T16058] bridge0: left promiscuous mode [ 399.856918][T16061] syzkaller0: entered promiscuous mode [ 399.863822][T16061] syzkaller0: entered allmulticast mode [ 399.920652][T16067] 8021q: adding VLAN 0 to HW filter on device bond9 [ 400.709402][T16091] netlink: 'syz.1.2614': attribute type 1 has an invalid length. [ 400.797471][T16091] bond11: (slave dummy0): making interface the new active one [ 400.806828][T16091] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 400.822980][T16091] bond11: entered promiscuous mode [ 400.828355][T16091] dummy0: entered promiscuous mode [ 400.838864][T16090] bond11: left promiscuous mode [ 400.844399][T16090] dummy0: left promiscuous mode [ 400.924354][T16111] __nla_validate_parse: 18 callbacks suppressed [ 400.924386][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'. [ 400.974596][T16111] No such timeout policy "syz0" [ 401.455010][T16135] netlink: 'syz.1.2626': attribute type 1 has an invalid length. [ 401.497528][T16135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2626'. [ 401.506624][T16140] netlink: 'syz.0.2627': attribute type 1 has an invalid length. [ 401.509343][T16142] netlink: 'syz.0.2627': attribute type 1 has an invalid length. [ 401.730429][T16149] netlink: 'syz.1.2630': attribute type 4 has an invalid length. [ 402.045944][T16162] netlink: 'syz.0.2633': attribute type 32 has an invalid length. [ 402.065577][T16162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2633'. [ 402.306223][T16166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2635'. [ 402.362575][T16166] sctp: [Deprecated]: syz.4.2635 (pid 16166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.362575][T16166] Use struct sctp_sack_info instead [ 402.598254][T16169] netlink: 'syz.0.2636': attribute type 3 has an invalid length. [ 402.894592][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2638'. [ 403.018177][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2639'. [ 403.037436][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2639'. [ 403.068348][T16178] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 403.107018][T16178] bond0 (unregistering): Released all slaves [ 403.394999][T16201] openvswitch: netlink: IP tunnel dst address not specified [ 403.632718][T16209] bond10: option mode: invalid value (254) [ 403.656089][T16209] bond10 (unregistering): Released all slaves [ 403.916772][T16229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2649'. [ 403.963033][T16229] openvswitch: netlink: Flow key attr not present in new flow. [ 403.986256][T16237] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2648'. [ 404.203482][T16255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2650'. [ 404.288179][T16232] nbd2: detected capacity change from 0 to 63 [ 404.429144][T16254] block nbd2: NBD_DISCONNECT [ 404.472146][T16254] block nbd2: Disconnected due to user request. [ 404.529568][T16254] block nbd2: shutting down sockets [ 404.553742][ C0] blk_print_req_error: 137 callbacks suppressed [ 404.553761][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.569467][ C0] buffer_io_error: 138 callbacks suppressed [ 404.569484][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 404.583463][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.592601][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 404.600544][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.609335][T16261] xt_hashlimit: size too large, truncated to 1048576 [ 404.609677][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 404.609753][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.609775][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 404.616049][T14013] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.664930][T14013] Buffer I/O error on dev nbd2, logical block 0, async page read [ 404.713193][T14013] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.739234][T14013] Buffer I/O error on dev nbd2, logical block 1, async page read [ 404.771506][T14013] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.794177][T14013] Buffer I/O error on dev nbd2, logical block 2, async page read [ 404.813652][T14013] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.842265][T14013] Buffer I/O error on dev nbd2, logical block 3, async page read [ 404.870162][T14013] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.901156][T14013] Buffer I/O error on dev nbd2, logical block 0, async page read [ 404.926735][T14013] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.953929][T16271] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 404.960246][T14013] Buffer I/O error on dev nbd2, logical block 1, async page read [ 404.975728][ T6497] team_slave_0: entered promiscuous mode [ 404.983445][ T6497] team_slave_1: entered promiscuous mode [ 404.989286][ T6497] batadv0: entered promiscuous mode [ 404.997787][T14013] ldm_validate_partition_table(): Disk read failed. [ 405.024871][T14013] Dev nbd2: unable to read RDB block 0 [ 405.048626][T14013] nbd2: unable to read partition table [ 405.098192][T16271] netlink: 'syz.3.2656': attribute type 10 has an invalid length. [ 405.100879][T14013] ldm_validate_partition_table(): Disk read failed. [ 405.134603][T14013] Dev nbd2: unable to read RDB block 0 [ 405.165491][T14013] nbd2: unable to read partition table [ 405.544161][T16292] nbd1: detected capacity change from 0 to 63 [ 406.014780][T16284] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 406.059801][ T5641] block nbd1: Receive control failed (result -104) [ 406.181092][T16328] __nla_validate_parse: 4 callbacks suppressed [ 406.181182][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2669'. [ 406.203126][T16328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2669'. [ 406.333163][T16332] netlink: 'syz.1.2671': attribute type 1 has an invalid length. [ 406.372157][T16337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2674'. [ 406.393270][T16332] bond12: entered promiscuous mode [ 406.405689][T16332] 8021q: adding VLAN 0 to HW filter on device bond12 [ 406.425551][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2673'. [ 406.449395][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2673'. [ 406.488665][T16338] netlink: 304 bytes leftover after parsing attributes in process `syz.3.2673'. [ 406.538389][T16344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'. [ 406.566234][T16332] bond12: (slave bridge8): making interface the new active one [ 406.574171][T16340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 406.593906][T16332] bridge8: entered promiscuous mode [ 406.606309][T16332] bond12: (slave bridge8): Enslaving as an active interface with an up link [ 407.242016][T16378] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2685'. [ 407.346754][T16383] netlink: 'syz.2.2686': attribute type 10 has an invalid length. [ 407.373690][T16383] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2686'. [ 407.556118][T16382] bridge0: left promiscuous mode [ 407.776448][T16396] tipc: Enabled bearer , priority 0 [ 407.908687][T16396] syzkaller0: entered promiscuous mode [ 407.938966][T16396] syzkaller0: entered allmulticast mode [ 408.015204][T16396] tipc: Resetting bearer [ 411.812019][T16411] __nla_validate_parse: 20 callbacks suppressed [ 411.812042][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2692'. [ 411.842257][T16395] tipc: Resetting bearer [ 411.862531][T16395] tipc: Disabling bearer [ 412.086130][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2706'. [ 412.157840][T16483] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2708'. [ 412.398301][T16494] netlink: 'syz.0.2713': attribute type 1 has an invalid length. [ 412.443255][T16494] 8021q: adding VLAN 0 to HW filter on device bond11 [ 412.539023][T16497] bond11: (slave gretap3): making interface the new active one [ 412.549941][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2715'. [ 412.583074][T16497] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 412.793942][T16516] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2717'. [ 412.941938][T16524] veth0_to_hsr: entered promiscuous mode [ 413.089034][T16529] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2719'. [ 413.110225][T16530] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2719'. [ 413.122744][T16529] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2719'. [ 413.132315][T16530] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2719'. [ 413.257452][T16534] nbd: illegal input index -1 [ 413.367709][T16540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2723'. [ 414.094835][T16571] netlink: 'syz.1.2729': attribute type 1 has an invalid length. [ 414.242241][T16571] bond13: entered promiscuous mode [ 414.266521][T16571] 8021q: adding VLAN 0 to HW filter on device bond13 [ 414.376032][T16578] 8021q: adding VLAN 0 to HW filter on device bond13 [ 414.400361][T16578] bond13: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 414.435100][T16578] bond13: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 414.468854][T16578] bond13: (slave ip6gre1): making interface the new active one [ 414.489703][T16578] ip6gre1: entered promiscuous mode [ 414.506553][T16578] bond13: (slave ip6gre1): Enslaving as an active interface with an up link [ 414.586945][T16587] netlink: 'syz.2.2736': attribute type 1 has an invalid length. [ 414.958950][T16602] netlink: 'syz.4.2742': attribute type 1 has an invalid length. [ 415.105184][T16604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.152204][T16602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.179061][T16613] netlink: 'syz.1.2745': attribute type 1 has an invalid length. [ 415.201296][T16602] bond0: (slave geneve3): making interface the new active one [ 415.241173][T16602] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 415.262585][ T143] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 415.279072][ T143] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 415.301295][ T143] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 415.316767][ T143] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 416.085136][T16643] vlan5: entered promiscuous mode [ 416.328386][T16654] team1: entered promiscuous mode [ 416.342112][T16654] team1: entered allmulticast mode [ 416.355761][T16654] 8021q: adding VLAN 0 to HW filter on device team1 [ 416.470070][T16659] team2: entered promiscuous mode [ 416.481352][T16659] team2: entered allmulticast mode [ 416.493778][T16659] 8021q: adding VLAN 0 to HW filter on device team2 [ 416.865494][T16676] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 416.875545][T16676] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 416.897174][T16685] __nla_validate_parse: 21 callbacks suppressed [ 416.897198][T16685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2767'. [ 416.947985][T16690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2769'. [ 417.083259][T16700] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2771'. [ 419.733968][T16677] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 419.968554][T16710] nbd: must specify a device to reconfigure [ 420.021597][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2776'. [ 420.050633][T16716] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20001 [ 420.199875][T16728] netlink: 'syz.4.2780': attribute type 1 has an invalid length. [ 420.321282][T16732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2781'. [ 420.336831][T16728] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 420.423148][T16732] openvswitch: netlink: Flow key attr not present in new flow. [ 420.551728][T16744] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 420.641152][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2786'. [ 420.675828][T16749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2786'. [ 420.976750][T16769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2789'. [ 421.001183][T16771] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2791'. [ 421.044274][T16771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2791'. [ 421.103816][T16776] netlink: 'syz.1.2794': attribute type 2 has an invalid length. [ 421.128000][T16776] netlink: 'syz.1.2794': attribute type 2 has an invalid length. [ 421.993636][T16796] tipc: Enabled bearer , priority 0 [ 422.023217][T16796] syzkaller0: entered promiscuous mode [ 422.042884][T16796] syzkaller0: entered allmulticast mode [ 422.074746][T16796] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 422.140100][T16796] syzkaller0: mtu greater than device maximum [ 422.196671][T16797] netlink: 'syz.0.2798': attribute type 1 has an invalid length. [ 422.249108][T16797] 8021q: adding VLAN 0 to HW filter on device bond12 [ 422.266090][T16794] tipc: Resetting bearer [ 422.326913][T16794] tipc: Disabling bearer [ 422.633966][T16821] netlink: 'syz.0.2805': attribute type 1 has an invalid length. [ 422.714542][T16821] 8021q: adding VLAN 0 to HW filter on device bond13 [ 422.725249][T16827] __nla_validate_parse: 4 callbacks suppressed [ 422.725272][T16827] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2807'. [ 422.780375][T16821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2805'. [ 422.803775][T16821] bond13: entered promiscuous mode [ 422.812358][T16821] bond13: entered allmulticast mode [ 423.026937][T16840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2811'. [ 423.051133][T16840] hsr_slave_0: left promiscuous mode [ 423.058940][T16840] hsr_slave_1: left promiscuous mode [ 423.167409][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 423.210939][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'. [ 423.265956][T16853] team_slave_0: left promiscuous mode [ 423.275549][T16853] team_slave_1: left promiscuous mode [ 423.281786][T16853] batadv0: left promiscuous mode [ 423.316878][T16853] team0 (unregistering): Port device team_slave_0 removed [ 423.346324][T16853] team0 (unregistering): Port device team_slave_1 removed [ 423.383650][T16853] team0 (unregistering): Port device batadv0 removed [ 423.484288][T16860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2815'. [ 423.506706][T16848] netlink: 'syz.0.2813': attribute type 4 has an invalid length. [ 423.582767][T16851] netlink: 'syz.0.2813': attribute type 4 has an invalid length. [ 423.591252][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2817'. [ 423.779317][T16872] bridge0: entered allmulticast mode [ 423.858987][T16874] 5Ò: entered promiscuous mode [ 423.876986][T16872] syz_tun: left allmulticast mode [ 423.883706][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2820'. [ 423.901951][T16872] syz_tun: left promiscuous mode [ 423.910454][T16872] bridge0: port 1(syz_tun) entered disabled state [ 424.075178][T16877] bond14: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 424.113699][T16877] bond14 (unregistering): Released all slaves [ 424.143938][T16898] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2824'. [ 424.156793][T16895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2822'. [ 424.348945][T16903] sctp: [Deprecated]: syz.3.2825 (pid 16903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.348945][T16903] Use struct sctp_sack_info instead [ 424.440069][T16905] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 424.668126][T16915] netlink: 'syz.1.2828': attribute type 2 has an invalid length. [ 424.682680][T16915] netlink: 'syz.1.2828': attribute type 8 has an invalid length. [ 424.701462][T16915] netlink: 'syz.1.2828': attribute type 9 has an invalid length. [ 424.934097][T16926] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 425.529906][T16939] bond5: (slave syz_tun): speed changed to 0 on port 1 [ 425.577992][T16939] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.713669][T16928] validate_nla: 1 callbacks suppressed [ 425.713692][T16928] netlink: 'syz.4.2831': attribute type 21 has an invalid length. [ 425.877202][T16939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.898677][T16939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.928799][T16939] veth1_vlan: left promiscuous mode [ 425.949435][T16939] veth0_vlan: left promiscuous mode [ 425.959369][T16939] veth0_vlan: entered promiscuous mode [ 425.972658][T16939] veth1_vlan: entered promiscuous mode [ 425.987674][T16939] veth1_macvtap: left promiscuous mode [ 425.996707][T16939] veth0_macvtap: left promiscuous mode [ 426.005897][T16939] veth0_macvtap: entered promiscuous mode [ 426.015206][T16939] veth1_macvtap: entered promiscuous mode [ 426.029132][T16939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.047443][T16939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.068663][T16939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.079512][T16939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.128526][T16939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.143717][T16939] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 426.343739][ T7655] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.352967][ T7655] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.363083][ T7655] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.372018][ T7655] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.425473][ T7655] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.451756][ T7655] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.535993][ T7655] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.574125][ T7655] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.947169][T16993] netlink: 'syz.4.2848': attribute type 1 has an invalid length. [ 426.981083][T16997] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 427.052619][T16993] bond14: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 427.292382][T16993] bond14 (unregistering): Released all slaves [ 427.876522][T17027] __nla_validate_parse: 1 callbacks suppressed [ 427.876544][T17027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2854'. [ 428.808880][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'. [ 428.854906][T17059] netlink: 'syz.1.2864': attribute type 9 has an invalid length. [ 429.166260][T17067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2866'. [ 429.543537][ T5647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 429.557305][ T5647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 429.565568][ T5647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 429.574170][ T5647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 429.584933][ T5647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 430.273577][T17095] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 430.286755][T17095] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 430.370888][T17095] tipc: Enabling of bearer rejected, already enabled [ 431.631488][ T5647] Bluetooth: hci5: command tx timeout [ 432.667266][T17152] syzkaller1: entered promiscuous mode [ 432.679321][T17152] syzkaller1: entered allmulticast mode [ 432.733082][T17160] FAULT_INJECTION: forcing a failure. [ 432.733082][T17160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.736966][T17075] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.751524][T17075] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.758059][T17160] CPU: 1 UID: 0 PID: 17160 Comm: syz.0.2885 Not tainted syzkaller #0 PREEMPT(full) [ 432.758083][T17160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.758095][T17160] Call Trace: [ 432.758103][T17160] [ 432.758111][T17160] dump_stack_lvl+0xe8/0x150 [ 432.758140][T17160] should_fail_ex+0x412/0x560 [ 432.758166][T17160] _copy_from_user+0x2d/0xb0 [ 432.758190][T17160] kstrtouint_from_user+0xd6/0x180 [ 432.758221][T17160] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 432.758267][T17160] proc_fail_nth_write+0x8e/0x210 [ 432.758293][T17160] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 432.758324][T17160] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 432.758350][T17160] vfs_write+0x29a/0xb90 [ 432.758387][T17160] ? __pfx_vfs_write+0x10/0x10 [ 432.758416][T17160] ? __fget_files+0x2a/0x420 [ 432.758444][T17160] ? __fget_files+0x3a0/0x420 [ 432.758466][T17160] ? __fget_files+0x2a/0x420 [ 432.758498][T17160] ksys_write+0x150/0x270 [ 432.758528][T17160] ? __pfx_ksys_write+0x10/0x10 [ 432.758564][T17160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.758585][T17160] do_syscall_64+0x174/0x580 [ 432.758606][T17160] ? trace_irq_disable+0x3b/0x140 [ 432.758633][T17160] ? clear_bhb_loop+0x40/0x90 [ 432.758657][T17160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.758676][T17160] RIP: 0033:0x7f502ef5d68e [ 432.758694][T17160] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 432.758710][T17160] RSP: 002b:00007f502d1ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 432.758730][T17160] RAX: ffffffffffffffda RBX: 00007f502d1cd6c0 RCX: 00007f502ef5d68e [ 432.758744][T17160] RDX: 0000000000000001 RSI: 00007f502d1cd0a0 RDI: 0000000000000003 [ 432.758755][T17160] RBP: 00007f502d1cd090 R08: 0000000000000000 R09: 0000000000000000 [ 432.758766][T17160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.758778][T17160] R13: 00007f502f216128 R14: 00007f502f216090 R15: 00007ffd89659d38 [ 432.758810][T17160] [ 432.970741][T17075] bridge_slave_0: entered allmulticast mode [ 432.978221][T17075] bridge_slave_0: entered promiscuous mode [ 432.987216][T17075] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.995615][T17075] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.003051][T17075] bridge_slave_1: entered allmulticast mode [ 433.011031][T17075] bridge_slave_1: entered promiscuous mode [ 433.035882][T17137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.042436][T17075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.062530][T17075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.326275][T17075] team0: Port device team_slave_0 added [ 433.426002][T17075] team0: Port device team_slave_1 added [ 433.426392][T17179] FAULT_INJECTION: forcing a failure. [ 433.426392][T17179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.446327][T17179] CPU: 1 UID: 0 PID: 17179 Comm: syz.2.2890 Not tainted syzkaller #0 PREEMPT(full) [ 433.446356][T17179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 433.446368][T17179] Call Trace: [ 433.446387][T17179] [ 433.446395][T17179] dump_stack_lvl+0xe8/0x150 [ 433.446425][T17179] should_fail_ex+0x412/0x560 [ 433.446452][T17179] _copy_to_user+0x31/0xb0 [ 433.446479][T17179] bpf_prog_test_run_syscall+0x337/0x4c0 [ 433.446508][T17179] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 433.446540][T17179] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 433.446567][T17179] bpf_prog_test_run+0x2c7/0x340 [ 433.446593][T17179] __sys_bpf+0x643/0x950 [ 433.446626][T17179] ? __pfx___sys_bpf+0x10/0x10 [ 433.446678][T17179] ? ksys_write+0x242/0x270 [ 433.446710][T17179] ? __pfx_ksys_write+0x10/0x10 [ 433.446743][T17179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.446765][T17179] __x64_sys_bpf+0x7c/0x90 [ 433.446794][T17179] do_syscall_64+0x174/0x580 [ 433.446816][T17179] ? trace_irq_disable+0x3b/0x140 [ 433.446845][T17179] ? clear_bhb_loop+0x40/0x90 [ 433.446871][T17179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.446890][T17179] RIP: 0033:0x7f08c2d9ce59 [ 433.446909][T17179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.446926][T17179] RSP: 002b:00007f08c3c5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 433.446948][T17179] RAX: ffffffffffffffda RBX: 00007f08c3015fa0 RCX: 00007f08c2d9ce59 [ 433.446963][T17179] RDX: 000000000000000c RSI: 00002000000005c0 RDI: 000000000000000a [ 433.446977][T17179] RBP: 00007f08c3c5d090 R08: 0000000000000000 R09: 0000000000000000 [ 433.446989][T17179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.447001][T17179] R13: 00007f08c3016038 R14: 00007f08c3015fa0 R15: 00007ffe8769a1e8 [ 433.447034][T17179] [ 433.638240][T17181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2891'. [ 433.711435][ T5647] Bluetooth: hci5: command tx timeout [ 433.748901][T17075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.778845][T17075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.845376][T17187] netlink: 'syz.4.2893': attribute type 11 has an invalid length. [ 433.858767][T17075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.873953][T17075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.881669][T17075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.933468][T17075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.996216][T17195] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 434.003944][T17195] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 434.024949][T17193] 8021q: adding VLAN 0 to HW filter on device .` [ 434.035769][T17193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.084567][T17193] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 434.116455][ T12] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 434.182363][T17206] xt_hashlimit: size too large, truncated to 1048576 [ 434.398981][T17075] hsr_slave_0: entered promiscuous mode [ 434.412750][T17075] hsr_slave_1: entered promiscuous mode [ 434.426476][T17075] debugfs: 'hsr0' already exists in 'hsr' [ 434.449029][T17075] Cannot create hsr debugfs directory [ 434.478256][T17220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.662182][T17226] veth10: entered allmulticast mode [ 434.890503][T17075] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.085214][T17075] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.162462][T17075] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.258687][T17075] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.634219][ T5007] block nbd1: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 30 seconds [ 435.646940][ T5007] block nbd1: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 30 seconds [ 435.658009][ T5007] block nbd1: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 30 seconds [ 435.671408][ T5007] block nbd1: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 30 seconds [ 435.799790][ T5647] Bluetooth: hci5: command tx timeout [ 436.986480][T17200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.015953][T17075] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.086642][T17075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.104750][T17075] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.169058][T17075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.181412][T17075] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 437.208600][T17075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.229235][T17075] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.257771][T17075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.258314][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2908'. [ 437.275878][T17244] netlink: 'syz.4.2906': attribute type 4 has an invalid length. [ 437.281447][T17250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2908'. [ 437.400885][T17254] netlink: 'syz.2.2907': attribute type 4 has an invalid length. [ 437.481178][T17242] 8021q: adding VLAN 0 to HW filter on device bond14 [ 437.651269][T17274] sctp: [Deprecated]: syz.4.2910 (pid 17274) Use of int in max_burst socket option. [ 437.651269][T17274] Use struct sctp_assoc_value instead [ 437.861865][T17075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.869786][ T5647] Bluetooth: hci5: command tx timeout [ 437.976209][T17075] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.055612][T17289] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2915'. [ 438.079501][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.086757][T13389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.124085][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.131332][T13389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.152146][T17293] netlink: 'syz.2.2916': attribute type 4 has an invalid length. [ 439.203387][T17326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2924'. [ 439.581032][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 439.749118][T17075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.139446][T17075] veth0_vlan: entered promiscuous mode [ 440.205289][T17075] veth1_vlan: entered promiscuous mode [ 440.235421][T17351] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 440.274523][T17351] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2930'. [ 440.313085][T17351] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2930'. [ 440.338351][T17075] veth0_macvtap: entered promiscuous mode [ 440.378596][T17075] veth1_macvtap: entered promiscuous mode [ 440.417605][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 440.461362][T17075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.531777][T17075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.593549][T13389] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.619055][T13389] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.638788][T13389] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.664379][T13389] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.447230][T17375] syzkaller1: entered promiscuous mode [ 441.463171][T17375] syzkaller1: entered allmulticast mode [ 443.214988][T17352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.427579][T17368] netlink: 496 bytes leftover after parsing attributes in process `syz.4.2933'. [ 443.449538][ T7655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.465650][ T7655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.563710][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2938'. [ 443.652678][ T7669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.669533][ T7669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.830784][T17407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2942'. [ 444.069940][T17414] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 444.263479][T17425] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 444.403286][T17433] IPVS: length: 158 != 8 [ 444.410306][T17432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2948'. [ 444.724850][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 444.775525][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 444.782391][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'. [ 444.791943][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 444.884355][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.902210][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.918241][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.932650][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.947923][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.184632][T17462] netlink: 'syz.3.2956': attribute type 3 has an invalid length. [ 445.261586][T17462] rdma_op ffff88807d80e1f0 conn xmit_rdma 0000000000000000 [ 445.517389][T17473] syzkaller0: entered allmulticast mode [ 445.540352][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2958'. [ 445.886352][T13389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.902123][T13389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.004388][T17497] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2964'. [ 446.116111][T17489] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2962'. [ 446.209128][T13389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.221380][T13389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.368665][T13389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.401623][T13389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.555425][T13389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.577249][T13389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.738769][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 446.783533][ T7669] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 446.828522][ T7660] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 446.894197][ T12] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 446.946932][T13389] erspan0: left allmulticast mode [ 446.955234][T13389] bridge3: port 1(erspan0) entered disabled state [ 446.991063][ T5647] Bluetooth: hci2: command tx timeout [ 447.324032][T13389] bond1 (unregistering): Released all slaves [ 447.339423][T13389] bond2 (unregistering): (slave veth5): Releasing active interface [ 447.347931][T13389] batadv1: entered promiscuous mode [ 447.358834][T13389] bond2 (unregistering): (slave batadv1): Releasing active interface [ 447.373031][T13389] bond2 (unregistering): Released all slaves [ 447.393352][T13389] bond3 (unregistering): Released all slaves [ 447.408865][T13389] bond0 (unregistering): Released all slaves [ 447.423643][T13389] bond4 (unregistering): Released all slaves [ 447.443355][T13389] bond5 (unregistering): Released all slaves [ 447.463901][T13389] bond6 (unregistering): (slave veth9): Releasing backup interface [ 447.478647][T13389] bond6 (unregistering): (slave batadv2): Releasing backup interface [ 447.491933][T13389] bond6 (unregistering): Released all slaves [ 447.507979][T13389] bond7 (unregistering): Released all slaves [ 447.524547][T13389] bond8 (unregistering): Released all slaves [ 447.549301][T13389] bond9 (unregistering): Released all slaves [ 447.680364][T13389] 5nè‹Ò: left promiscuous mode [ 447.881915][T13389] hmó3)ó€: left promiscuous mode [ 447.948001][T13389] tipc: Left network mode [ 447.968684][T17449] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.977389][T17449] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.985253][T17449] bridge_slave_0: entered allmulticast mode [ 447.993877][T17449] bridge_slave_0: entered promiscuous mode [ 448.007339][T17449] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.014766][T17449] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.022243][T17449] bridge_slave_1: entered allmulticast mode [ 448.030533][T17449] bridge_slave_1: entered promiscuous mode [ 448.172440][T17449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.184617][T17449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.217490][T17449] team0: Port device team_slave_0 added [ 448.228670][T17449] team0: Port device team_slave_1 added [ 448.294043][T17449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.301704][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.328405][T17449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.347028][T17449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.355062][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.382551][T17449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.446981][T17449] hsr_slave_0: entered promiscuous mode [ 448.453694][T17449] hsr_slave_1: entered promiscuous mode [ 448.460592][T17449] debugfs: 'hsr0' already exists in 'hsr' [ 448.466371][T17449] Cannot create hsr debugfs directory [ 448.702527][T17449] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 448.812582][T17449] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 448.847838][T17488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.864356][T17525] netlink: 'syz.4.2970': attribute type 1 has an invalid length. [ 448.878236][T17525] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2970'. [ 449.018385][T17449] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 449.070429][ T5647] Bluetooth: hci2: command tx timeout [ 449.086515][T17539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2971'. [ 449.148124][T17539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.389414][T17449] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 449.586270][T17564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2975'. [ 449.672410][T13389] hsr_slave_0: left promiscuous mode [ 449.693458][T13389] hsr_slave_1: left promiscuous mode [ 449.843712][T13389] veth1_macvtap: left promiscuous mode [ 449.861974][T13389] veth0_macvtap: left promiscuous mode [ 449.877011][T13389] veth1_vlan: left promiscuous mode [ 449.889030][T13389] veth0_vlan: left promiscuous mode [ 449.973856][T17567] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 451.149964][ T5647] Bluetooth: hci2: command tx timeout [ 453.229938][ T5647] Bluetooth: hci2: command tx timeout [ 454.868031][T13389] IPVS: stop unused estimator thread 0... [ 464.415048][ T5641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 464.432004][ T5641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 464.444094][ T5641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 464.455890][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 464.466002][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 464.479028][ T5641] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 464.493856][ T5646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 464.515600][ T5646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 464.529961][ T5646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 464.541506][ T5646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 465.032650][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 465.051556][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 465.060029][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 465.069562][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 465.077854][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 465.539927][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 465.559435][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 465.574612][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 465.586147][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 465.601267][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 465.730532][ T5007] block nbd1: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 60 seconds [ 465.741386][ T5007] block nbd1: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 60 seconds [ 465.752474][ T5007] block nbd1: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 60 seconds [ 465.765840][ T5007] block nbd1: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 60 seconds [ 466.056532][T17601] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.076859][T17601] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.086418][T17601] bridge_slave_0: entered allmulticast mode [ 466.105826][T17601] bridge_slave_0: entered promiscuous mode [ 466.134780][T17601] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.143372][T17601] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.160012][T17601] bridge_slave_1: entered allmulticast mode [ 466.175464][T17601] bridge_slave_1: entered promiscuous mode [ 466.258093][T17601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.291640][T17601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.335253][T17601] team0: Port device team_slave_0 added [ 466.363385][T17601] team0: Port device team_slave_1 added [ 466.449487][T17601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.456953][T17601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.485067][T17601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.515758][T17601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.524752][T17601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.553797][T17601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.590189][ T50] Bluetooth: hci6: command tx timeout [ 466.590884][ T5646] Bluetooth: hci4: command tx timeout [ 466.734304][T17601] hsr_slave_0: entered promiscuous mode [ 466.741625][T17601] hsr_slave_1: entered promiscuous mode [ 466.748058][T17601] debugfs: 'hsr0' already exists in 'hsr' [ 466.754024][T17601] Cannot create hsr debugfs directory [ 467.127994][T17603] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.135295][T17603] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.143329][T17603] bridge_slave_0: entered allmulticast mode [ 467.150075][ T5646] Bluetooth: hci7: command tx timeout [ 467.151663][T17603] bridge_slave_0: entered promiscuous mode [ 467.184127][T17603] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.193608][T17603] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.201127][T17603] bridge_slave_1: entered allmulticast mode [ 467.208695][T17603] bridge_slave_1: entered promiscuous mode [ 467.245460][T17622] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.252757][T17622] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.260552][T17622] bridge_slave_0: entered allmulticast mode [ 467.268579][T17622] bridge_slave_0: entered promiscuous mode [ 467.295888][T17622] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.303212][T17622] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.311442][T17622] bridge_slave_1: entered allmulticast mode [ 467.318917][T17622] bridge_slave_1: entered promiscuous mode [ 467.390425][T17603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.404125][T17603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.427680][T17622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.442732][T17622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.523416][T17622] team0: Port device team_slave_0 added [ 467.540698][T17622] team0: Port device team_slave_1 added [ 467.557959][T17603] team0: Port device team_slave_0 added [ 467.602194][T17603] team0: Port device team_slave_1 added [ 467.616090][T17622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.623757][T17622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.651990][T17622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.665208][T17622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.672542][T17622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.698774][T17622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.721229][ T5646] Bluetooth: hci8: command tx timeout [ 467.784616][T17603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.791820][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.818025][T17603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.836820][T17603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.843891][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.870318][T17603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.947432][T17622] hsr_slave_0: entered promiscuous mode [ 467.954376][T17622] hsr_slave_1: entered promiscuous mode [ 467.961065][T17622] debugfs: 'hsr0' already exists in 'hsr' [ 467.966843][T17622] Cannot create hsr debugfs directory [ 467.985254][T17633] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.992685][T17633] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.000251][T17633] bridge_slave_0: entered allmulticast mode [ 468.007688][T17633] bridge_slave_0: entered promiscuous mode [ 468.016382][T17633] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.023736][T17633] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.032004][T17633] bridge_slave_1: entered allmulticast mode [ 468.039943][T17633] bridge_slave_1: entered promiscuous mode [ 468.082476][T17603] hsr_slave_0: entered promiscuous mode [ 468.088886][T17603] hsr_slave_1: entered promiscuous mode [ 468.095363][T17603] debugfs: 'hsr0' already exists in 'hsr' [ 468.101299][T17603] Cannot create hsr debugfs directory [ 468.144421][T17633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.174751][T17633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.253146][T17633] team0: Port device team_slave_0 added [ 468.277063][T17633] team0: Port device team_slave_1 added [ 468.347226][T17633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.356555][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.384359][T17633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.410879][T17633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.417886][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.445289][T17633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.575041][T17633] hsr_slave_0: entered promiscuous mode [ 468.581959][T17633] hsr_slave_1: entered promiscuous mode [ 468.588415][T17633] debugfs: 'hsr0' already exists in 'hsr' [ 468.594615][T17633] Cannot create hsr debugfs directory [ 468.669845][ T50] Bluetooth: hci6: command tx timeout [ 468.677680][ T5646] Bluetooth: hci4: command tx timeout [ 469.229931][ T5646] Bluetooth: hci7: command tx timeout [ 469.789901][ T5646] Bluetooth: hci8: command tx timeout [ 470.749970][ T5646] Bluetooth: hci4: command tx timeout [ 470.749984][ T50] Bluetooth: hci6: command tx timeout [ 471.309844][ T50] Bluetooth: hci7: command tx timeout [ 471.869871][ T50] Bluetooth: hci8: command tx timeout [ 471.889992][ T4995] udevd[4995]: worker [7577] /devices/virtual/block/nbd1 is taking a long time [ 472.829887][ T50] Bluetooth: hci4: command tx timeout [ 472.829897][ T5646] Bluetooth: hci6: command tx timeout [ 473.391060][ T50] Bluetooth: hci7: command tx timeout [ 473.950015][ T50] Bluetooth: hci8: command tx timeout [ 495.790640][ T5007] block nbd1: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 90 seconds [ 495.801622][ T5007] block nbd1: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 90 seconds [ 495.812635][ T5007] block nbd1: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 90 seconds [ 495.823721][ T5007] block nbd1: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 90 seconds [ 504.936821][ T5646] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 504.946614][ T5646] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 504.960987][ T5646] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 504.972327][ T5646] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 504.981142][ T5646] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 505.552231][T17676] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.559664][T17676] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.567119][T17676] bridge_slave_0: entered allmulticast mode [ 505.574559][T17676] bridge_slave_0: entered promiscuous mode [ 505.582910][T17676] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.590533][T17676] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.598066][T17676] bridge_slave_1: entered allmulticast mode [ 505.605756][T17676] bridge_slave_1: entered promiscuous mode [ 505.637128][T17676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.650027][T17676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.682032][T17676] team0: Port device team_slave_0 added [ 505.690514][T17676] team0: Port device team_slave_1 added [ 505.718813][T17676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.725893][T17676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.752985][T17676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.765465][T17676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.773307][T17676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.800356][T17676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.844864][T17676] hsr_slave_0: entered promiscuous mode [ 505.851801][T17676] hsr_slave_1: entered promiscuous mode [ 505.858146][T17676] debugfs: 'hsr0' already exists in 'hsr' [ 505.864092][T17676] Cannot create hsr debugfs directory [ 507.069859][ T50] Bluetooth: hci9: command tx timeout [ 509.149880][ T50] Bluetooth: hci9: command tx timeout [ 511.230044][ T50] Bluetooth: hci9: command tx timeout [ 513.309992][ T50] Bluetooth: hci9: command tx timeout [ 525.017730][ T5646] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 525.035090][ T5646] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 525.043828][ T5646] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 525.057854][ T5646] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 525.067414][ T5646] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 525.112153][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 525.125336][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 525.137559][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 525.152793][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 525.162739][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 525.277137][ T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 525.294398][ T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 525.306410][ T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 525.319451][ T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 525.331620][ T50] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 525.885131][ T5007] block nbd1: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 120 seconds [ 525.895996][ T5007] block nbd1: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 120 seconds [ 525.907084][ T5007] block nbd1: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 120 seconds [ 525.918217][ T5007] block nbd1: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 120 seconds [ 526.113038][ T50] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 526.125914][ T50] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 526.137566][ T50] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 526.146009][ T50] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 526.157767][ T50] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 526.717939][T17696] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.726454][T17696] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.735692][T17696] bridge_slave_0: entered allmulticast mode [ 526.743988][T17696] bridge_slave_0: entered promiscuous mode [ 526.767188][T17696] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.774555][T17696] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.783161][T17696] bridge_slave_1: entered allmulticast mode [ 526.794174][T17696] bridge_slave_1: entered promiscuous mode [ 526.920828][T17696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.935548][T17696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.052752][T17696] team0: Port device team_slave_0 added [ 527.090660][T17696] team0: Port device team_slave_1 added [ 527.151887][ T5646] Bluetooth: hci10: command tx timeout [ 527.178983][T17696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.186695][T17696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.213028][T17696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.232718][ T5646] Bluetooth: hci11: command tx timeout [ 527.255681][T17696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.262759][T17696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.289289][T17696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.390305][ T5646] Bluetooth: hci12: command tx timeout [ 527.469991][T17696] hsr_slave_0: entered promiscuous mode [ 527.476675][T17696] hsr_slave_1: entered promiscuous mode [ 527.483509][T17696] debugfs: 'hsr0' already exists in 'hsr' [ 527.489269][T17696] Cannot create hsr debugfs directory [ 527.506888][T17698] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.514397][T17698] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.523584][T17698] bridge_slave_0: entered allmulticast mode [ 527.532376][T17698] bridge_slave_0: entered promiscuous mode [ 527.558136][T17698] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.565830][T17698] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.573542][T17698] bridge_slave_1: entered allmulticast mode [ 527.580981][T17698] bridge_slave_1: entered promiscuous mode [ 527.644712][T17698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.673910][T17698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.751383][T17698] team0: Port device team_slave_0 added [ 527.780611][T17698] team0: Port device team_slave_1 added [ 527.895084][T17698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.903350][T17698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.930070][T17698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.957639][T17698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.964817][T17698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.991314][T17698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.078808][T17704] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.086267][T17704] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.095969][T17704] bridge_slave_0: entered allmulticast mode [ 528.103525][T17704] bridge_slave_0: entered promiscuous mode [ 528.113169][T17704] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.120769][T17704] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.128141][T17704] bridge_slave_1: entered allmulticast mode [ 528.136230][T17704] bridge_slave_1: entered promiscuous mode [ 528.228517][T17704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.250977][T17704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.269908][ T5646] Bluetooth: hci13: command tx timeout [ 528.308590][T17698] hsr_slave_0: entered promiscuous mode [ 528.315255][T17698] hsr_slave_1: entered promiscuous mode [ 528.322716][T17698] debugfs: 'hsr0' already exists in 'hsr' [ 528.328550][T17698] Cannot create hsr debugfs directory [ 528.391991][T17704] team0: Port device team_slave_0 added [ 528.401671][T17704] team0: Port device team_slave_1 added [ 528.446715][T17727] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.454124][T17727] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.461989][T17727] bridge_slave_0: entered allmulticast mode [ 528.469200][T17727] bridge_slave_0: entered promiscuous mode [ 528.478725][T17727] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.486742][T17727] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.494336][T17727] bridge_slave_1: entered allmulticast mode [ 528.502020][T17727] bridge_slave_1: entered promiscuous mode [ 528.557348][T17704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.564569][T17704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.591382][T17704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.623850][T17704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.631153][T17704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.657803][T17704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.680706][T17727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.707091][T17727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.761012][T17727] team0: Port device team_slave_0 added [ 528.792347][T17727] team0: Port device team_slave_1 added [ 528.882901][T17704] hsr_slave_0: entered promiscuous mode [ 528.889450][T17704] hsr_slave_1: entered promiscuous mode [ 528.896206][T17704] debugfs: 'hsr0' already exists in 'hsr' [ 528.902430][T17704] Cannot create hsr debugfs directory [ 528.909039][T17727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.916293][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.942427][T17727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.957498][T17727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.964884][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.991617][T17727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.152200][T17727] hsr_slave_0: entered promiscuous mode [ 529.158687][T17727] hsr_slave_1: entered promiscuous mode [ 529.166604][T17727] debugfs: 'hsr0' already exists in 'hsr' [ 529.172620][T17727] Cannot create hsr debugfs directory [ 529.230956][ T5646] Bluetooth: hci10: command tx timeout [ 529.310385][ T5646] Bluetooth: hci11: command tx timeout [ 529.470813][ T5646] Bluetooth: hci12: command tx timeout [ 530.351354][ T5646] Bluetooth: hci13: command tx timeout [ 531.309926][ T5646] Bluetooth: hci10: command tx timeout [ 531.390185][ T5646] Bluetooth: hci11: command tx timeout [ 531.549960][ T5646] Bluetooth: hci12: command tx timeout [ 532.429909][ T5646] Bluetooth: hci13: command tx timeout [ 533.389990][ T5646] Bluetooth: hci10: command tx timeout [ 533.469930][ T5646] Bluetooth: hci11: command tx timeout [ 533.629880][ T5646] Bluetooth: hci12: command tx timeout [ 534.509856][ T5646] Bluetooth: hci13: command tx timeout [ 554.829909][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 555.950402][ T5007] block nbd1: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 150 seconds [ 555.961415][ T5007] block nbd1: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 150 seconds [ 555.973540][ T5007] block nbd1: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 150 seconds [ 555.984639][ T5007] block nbd1: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 150 seconds [ 565.028374][ T50] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 565.038119][ T50] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 565.047422][ T50] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 565.055683][ T50] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 565.066529][ T50] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 565.635741][T17766] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.643009][T17766] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.650498][T17766] bridge_slave_0: entered allmulticast mode [ 565.657856][T17766] bridge_slave_0: entered promiscuous mode [ 565.666689][T17766] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.674004][T17766] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.681631][T17766] bridge_slave_1: entered allmulticast mode [ 565.689274][T17766] bridge_slave_1: entered promiscuous mode [ 565.719504][T17766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.732226][T17766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.761975][T17766] team0: Port device team_slave_0 added [ 565.770325][T17766] team0: Port device team_slave_1 added [ 565.797448][T17766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.804882][T17766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.831668][T17766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.844129][T17766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.851154][T17766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.877105][T17766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.921134][T17766] hsr_slave_0: entered promiscuous mode [ 565.927771][T17766] hsr_slave_1: entered promiscuous mode [ 565.934184][T17766] debugfs: 'hsr0' already exists in 'hsr' [ 565.940110][T17766] Cannot create hsr debugfs directory [ 567.150247][ T5646] Bluetooth: hci14: command tx timeout [ 569.229850][ T5646] Bluetooth: hci14: command tx timeout [ 570.192793][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 571.310111][ T50] Bluetooth: hci14: command tx timeout [ 573.389861][ T50] Bluetooth: hci14: command tx timeout [ 585.654082][ T5646] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 585.666453][ T5646] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 585.677733][ T5646] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 585.690311][ T5646] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 585.699963][ T5646] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 585.764367][ T50] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 585.777134][ T50] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 585.794093][ T50] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 585.803102][ T50] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 585.813261][ T50] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 585.823189][T17797] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 585.832789][T17797] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 585.847296][T17797] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 585.855765][T17797] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 585.865284][T17797] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 586.034775][ T5007] block nbd1: Possible stuck request ffff888027630000: control (read@0,1024B). Runtime 180 seconds [ 586.053626][ T5007] block nbd1: Possible stuck request ffff8880276301c0: control (read@1024,1024B). Runtime 180 seconds [ 586.064730][ T5007] block nbd1: Possible stuck request ffff888027630380: control (read@2048,1024B). Runtime 180 seconds [ 586.076173][ T5007] block nbd1: Possible stuck request ffff888027630540: control (read@3072,1024B). Runtime 180 seconds [ 586.685397][ T50] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 586.698144][ T50] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 586.711718][ T50] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 586.721691][ T50] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 586.730622][ T50] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 587.476021][T17790] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.484526][T17790] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.492267][T17790] bridge_slave_0: entered allmulticast mode [ 587.501095][T17790] bridge_slave_0: entered promiscuous mode [ 587.532598][T17790] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.540113][T17790] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.547528][T17790] bridge_slave_1: entered allmulticast mode [ 587.556416][T17790] bridge_slave_1: entered promiscuous mode [ 587.665514][T17790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.680118][T17790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.789890][ T50] Bluetooth: hci15: command tx timeout [ 587.793302][T17790] team0: Port device team_slave_0 added [ 587.811250][T17790] team0: Port device team_slave_1 added [ 587.865057][T17790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.872466][ T50] Bluetooth: hci16: command tx timeout [ 587.873322][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.906592][T17790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.920101][T17790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.927195][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.955215][T17790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.966121][ T50] Bluetooth: hci17: command tx timeout [ 588.133580][T17790] hsr_slave_0: entered promiscuous mode [ 588.140977][T17790] hsr_slave_1: entered promiscuous mode [ 588.147426][T17790] debugfs: 'hsr0' already exists in 'hsr' [ 588.153372][T17790] Cannot create hsr debugfs directory [ 588.243233][T17792] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.251852][T17792] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.259153][T17792] bridge_slave_0: entered allmulticast mode [ 588.267021][T17792] bridge_slave_0: entered promiscuous mode [ 588.309318][T17792] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.317446][T17792] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.324952][T17792] bridge_slave_1: entered allmulticast mode [ 588.333591][T17792] bridge_slave_1: entered promiscuous mode [ 588.414749][T17792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.436850][T17792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.585105][T17792] team0: Port device team_slave_0 added [ 588.642167][T17795] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.649458][T17795] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.657626][T17795] bridge_slave_0: entered allmulticast mode [ 588.665908][T17795] bridge_slave_0: entered promiscuous mode [ 588.678229][T17792] team0: Port device team_slave_1 added [ 588.704208][T17795] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.711613][T17795] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.719045][T17795] bridge_slave_1: entered allmulticast mode [ 588.726933][T17795] bridge_slave_1: entered promiscuous mode [ 588.749895][T17857] Bluetooth: hci18: command tx timeout [ 588.823462][T17792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.831009][T17792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.857904][T17792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.881200][T17792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.888252][T17792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.916011][T17792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.947337][T17795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.976262][T17795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.041429][T17822] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.048670][T17822] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.056310][T17822] bridge_slave_0: entered allmulticast mode [ 589.064198][T17822] bridge_slave_0: entered promiscuous mode [ 589.097840][T17795] team0: Port device team_slave_0 added [ 589.112217][T17822] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.119379][T17822] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.127091][T17822] bridge_slave_1: entered allmulticast mode [ 589.135735][T17822] bridge_slave_1: entered promiscuous mode [ 589.155057][T17795] team0: Port device team_slave_1 added [ 589.190982][T17792] hsr_slave_0: entered promiscuous mode [ 589.197608][T17792] hsr_slave_1: entered promiscuous mode [ 589.204349][T17792] debugfs: 'hsr0' already exists in 'hsr' [ 589.210174][T17792] Cannot create hsr debugfs directory [ 589.251172][T17795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.258164][T17795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.284811][T17795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.301409][T17822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.315601][T17822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.337778][T17795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.345166][T17795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.372188][T17795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.457078][T17822] team0: Port device team_slave_0 added [ 589.484185][T17822] team0: Port device team_slave_1 added [ 589.550670][T17795] hsr_slave_0: entered promiscuous mode [ 589.557419][T17795] hsr_slave_1: entered promiscuous mode [ 589.564185][T17795] debugfs: 'hsr0' already exists in 'hsr' [ 589.570306][T17795] Cannot create hsr debugfs directory [ 589.577333][T17822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.584710][T17822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.611921][T17822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.652732][T17822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.660204][T17822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 589.688341][T17822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.870098][T17857] Bluetooth: hci15: command tx timeout [ 589.878849][T17822] hsr_slave_0: entered promiscuous mode [ 589.888200][T17822] hsr_slave_1: entered promiscuous mode [ 589.894923][T17822] debugfs: 'hsr0' already exists in 'hsr' [ 589.900954][T17822] Cannot create hsr debugfs directory [ 589.950332][T17861] Bluetooth: hci16: command tx timeout [ 590.030815][T17861] Bluetooth: hci17: command tx timeout [ 590.669859][T17861] Bluetooth: hci7: command 0x0406 tx timeout [ 590.670703][ T5647] Bluetooth: hci8: command 0x0406 tx timeout [ 590.679507][T17861] Bluetooth: hci6: command 0x0406 tx timeout [ 590.687995][ T5647] Bluetooth: hci4: command 0x0406 tx timeout [ 590.830305][ T50] Bluetooth: hci18: command tx timeout [ 591.950092][ T50] Bluetooth: hci15: command tx timeout [ 592.030098][ T50] Bluetooth: hci16: command tx timeout [ 592.110039][ T50] Bluetooth: hci17: command tx timeout [ 592.910039][ T50] Bluetooth: hci18: command tx timeout [ 593.959805][ T4995] udevd[4995]: worker [7577] /devices/virtual/block/nbd1 timeout; kill it [ 593.968746][ T4995] udevd[4995]: seq 21246 '/devices/virtual/block/nbd1' killed [ 594.029866][ T50] Bluetooth: hci15: command tx timeout [ 594.109917][ T50] Bluetooth: hci16: command tx timeout [ 594.189706][ T50] Bluetooth: hci17: command tx timeout [ 594.990072][ T50] Bluetooth: hci18: command tx timeout [ 610.350171][ T31] INFO: task syz-executor:17449 blocked for more than 143 seconds. [ 610.358266][ T31] Not tainted syzkaller #0 [ 610.363337][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 610.372855][ T31] task:syz-executor state:D stack:22904 pid:17449 tgid:17449 ppid:1 task_flags:0x400140 flags:0x00080002 [ 610.385235][ T31] Call Trace: [ 610.388576][ T31] [ 610.391612][ T31] __schedule+0x1821/0x5740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 610.396177][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 610.401760][ T31] ? __pfx___schedule+0x10/0x10 [ 610.407232][ T31] ? schedule+0x90/0x360 [ 610.413026][ T31] schedule+0x164/0x360 [ 610.417266][ T31] schedule_preempt_disabled+0x13/0x30 [ 610.423185][ T31] __mutex_lock+0x7f7/0x1550 [ 610.427853][ T31] ? kernel_text_address+0xa5/0xe0 [ 610.433140][ T31] ? __mutex_lock+0x608/0x1550 [ 610.437954][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 610.444838][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 610.469623][ T31] ? stack_trace_save+0xa9/0x100 [ 610.489802][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 610.508130][ T31] ? radix_tree_lookup+0x240/0x290 [ 610.521435][ T31] genl_rcv_msg+0x10b/0x7a0 [ 610.526254][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.531564][ T31] netlink_rcv_skb+0x232/0x4b0 [ 610.536408][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.541668][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.547100][ T31] ? down_read+0x270/0x2e0 [ 610.551712][ T31] ? genl_rcv+0xd/0x40 [ 610.555820][ T31] genl_rcv+0x28/0x40 [ 610.560056][ T31] netlink_unicast+0x75c/0x8e0 [ 610.564904][ T31] netlink_sendmsg+0x813/0xb40 [ 610.570367][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.575732][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 610.580932][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 610.586292][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.591826][ T31] __sys_sendto+0x672/0x710 [ 610.596469][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 610.601864][ T31] ? fd_install+0x94/0x3d0 [ 610.606371][ T31] ? fd_install+0x306/0x3d0 [ 610.611000][ T31] __x64_sys_sendto+0xde/0x100 [ 610.615800][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.622193][ T31] do_syscall_64+0x174/0x580 [ 610.626829][ T31] ? trace_irq_disable+0x3b/0x140 [ 610.631949][ T31] ? clear_bhb_loop+0x40/0x90 [ 610.636657][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.642790][ T31] RIP: 0033:0x7f4fc075d68e [ 610.647258][ T31] RSP: 002b:00007ffebde2dbb8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 610.655777][ T31] RAX: ffffffffffffffda RBX: 00005555950ca500 RCX: 00007f4fc075d68e [ 610.663875][ T31] RDX: 0000000000000020 RSI: 00007f4fc1544670 RDI: 0000000000000005 [ 610.672867][ T31] RBP: 0000000000000001 R08: 00007ffebde2dc34 R09: 000000000000000c [ 610.681001][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 610.689013][ T31] R13: 00007ffebde2dc88 R14: 00007f4fc1544670 R15: 0000000000000000 [ 610.697072][ T31] [ 610.700226][ T31] INFO: task syz.1.2972:17541 blocked for more than 143 seconds. [ 610.707984][ T31] Not tainted syzkaller #0 [ 610.713170][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 610.721965][ T31] task:syz.1.2972 state:D stack:26328 pid:17541 tgid:17540 ppid:17075 task_flags:0x480140 flags:0x00080002 [ 610.734025][ T31] Call Trace: [ 610.737352][ T31] [ 610.740468][ T31] __schedule+0x1821/0x5740 [ 610.745064][ T31] ? __pfx___schedule+0x10/0x10 [ 610.750946][ T31] ? schedule+0x90/0x360 [ 610.755412][ T31] schedule+0x164/0x360 [ 610.759740][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 610.765342][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 610.771597][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 610.778412][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 610.784846][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 610.791194][ T31] nbd_set_size+0x454/0x680 [ 610.795722][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 610.800952][ T31] ? nla_memcpy+0x5b/0xc0 [ 610.805354][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 610.810741][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 610.816492][ T31] ? rcu_is_watching+0x15/0xb0 [ 610.821537][ T31] ? trace_kmalloc+0x2a/0xf0 [ 610.826468][ T31] ? __nla_parse+0x40/0x60 [ 610.831591][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 610.837986][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 610.844634][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 610.850719][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 610.856874][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 610.862057][ T31] genl_rcv_msg+0x61c/0x7a0 [ 610.866610][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.872097][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 610.878026][ T31] netlink_rcv_skb+0x232/0x4b0 [ 610.882965][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.888063][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.893529][ T31] ? down_read+0x270/0x2e0 [ 610.897973][ T31] ? genl_rcv+0xd/0x40 [ 610.902257][ T31] genl_rcv+0x28/0x40 [ 610.906267][ T31] netlink_unicast+0x75c/0x8e0 [ 610.911580][ T31] netlink_sendmsg+0x813/0xb40 [ 610.916404][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.921850][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 610.926863][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 610.932567][ T31] ____sys_sendmsg+0x972/0x9f0 [ 610.937494][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.942888][ T31] ? import_iovec+0x73/0xa0 [ 610.947433][ T31] ___sys_sendmsg+0x2a5/0x360 [ 610.952334][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 610.957384][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.962772][ T31] ? futex_wake+0x4ac/0x580 [ 610.967352][ T31] ? __fget_files+0x2a/0x420 [ 610.972014][ T31] ? __fget_files+0x3a0/0x420 [ 610.976731][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 610.982010][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.987510][ T31] ? rcu_is_watching+0x15/0xb0 [ 610.992864][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.999013][ T31] do_syscall_64+0x174/0x580 [ 611.003803][ T31] ? trace_irq_disable+0x3b/0x140 [ 611.008931][ T31] ? clear_bhb_loop+0x40/0x90 [ 611.013729][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.019846][ T31] RIP: 0033:0x7f0dd359ce59 [ 611.024319][ T31] RSP: 002b:00007f0dd4447028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.033162][ T31] RAX: ffffffffffffffda RBX: 00007f0dd3815fa0 RCX: 00007f0dd359ce59 [ 611.041297][ T31] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000006 [ 611.049320][ T31] RBP: 00007f0dd3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 611.057490][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.065562][ T31] R13: 00007f0dd3816038 R14: 00007f0dd3815fa0 R15: 00007ffc24d9c0f8 [ 611.074279][ T31] [ 611.077549][ T31] INFO: task syz.1.2972:17551 blocked for more than 144 seconds. [ 611.091052][ T31] Not tainted syzkaller #0 [ 611.096046][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.104939][ T31] task:syz.1.2972 state:D stack:27168 pid:17551 tgid:17540 ppid:17075 task_flags:0x400140 flags:0x00080002 [ 611.117181][ T31] Call Trace: [ 611.120805][ T31] [ 611.123805][ T31] __schedule+0x1821/0x5740 [ 611.128376][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 611.133550][ T31] ? __pfx___schedule+0x10/0x10 [ 611.138551][ T31] ? schedule+0x90/0x360 [ 611.143072][ T31] schedule+0x164/0x360 [ 611.147351][ T31] schedule_preempt_disabled+0x13/0x30 [ 611.153234][ T31] __mutex_lock+0x7f7/0x1550 [ 611.157896][ T31] ? __mutex_lock+0x608/0x1550 [ 611.162854][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 611.167673][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 611.173001][ T31] ? radix_tree_lookup+0x240/0x290 [ 611.178173][ T31] genl_rcv_msg+0x10b/0x7a0 [ 611.183609][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.188715][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 611.194285][ T31] netlink_rcv_skb+0x232/0x4b0 [ 611.199093][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.204613][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.210089][ T31] ? down_read+0x270/0x2e0 [ 611.214544][ T31] ? genl_rcv+0xd/0x40 [ 611.218614][ T31] genl_rcv+0x28/0x40 [ 611.222789][ T31] netlink_unicast+0x75c/0x8e0 [ 611.227608][ T31] netlink_sendmsg+0x813/0xb40 [ 611.232697][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.238058][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 611.244463][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 611.250181][ T31] ____sys_sendmsg+0x972/0x9f0 [ 611.255062][ T31] ? __might_fault+0xaf/0x130 [ 611.260025][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.265483][ T31] ? import_iovec+0x73/0xa0 [ 611.270217][ T31] ___sys_sendmsg+0x2a5/0x360 [ 611.275032][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 611.280314][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.285994][ T31] ? futex_wake+0x4ac/0x580 [ 611.290759][ T31] ? __fget_files+0x2a/0x420 [ 611.295378][ T31] ? __fget_files+0x3a0/0x420 [ 611.300510][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 611.305552][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.311364][ T31] ? rcu_is_watching+0x15/0xb0 [ 611.316234][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.322570][ T31] do_syscall_64+0x174/0x580 [ 611.327461][ T31] ? clear_bhb_loop+0x40/0x90 [ 611.332636][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.338629][ T31] RIP: 0033:0x7f0dd359ce59 [ 611.343511][ T31] RSP: 002b:00007f0dd43e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.352027][ T31] RAX: ffffffffffffffda RBX: 00007f0dd3816270 RCX: 00007f0dd359ce59 [ 611.360353][ T31] RDX: 000000002000c050 RSI: 0000200000000040 RDI: 0000000000000007 [ 611.368405][ T31] RBP: 00007f0dd3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 611.376684][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.385079][ T31] R13: 00007f0dd3816308 R14: 00007f0dd3816270 R15: 00007ffc24d9c0f8 [ 611.394112][ T31] [ 611.397210][ T31] INFO: task syz.4.2973:17549 blocked for more than 144 seconds. [ 611.408207][ T31] Not tainted syzkaller #0 [ 611.413468][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.422699][ T31] task:syz.4.2973 state:D stack:28088 pid:17549 tgid:17547 ppid:5632 task_flags:0x400140 flags:0x00080002 [ 611.434823][ T31] Call Trace: [ 611.438251][ T31] [ 611.441781][ T31] __schedule+0x1821/0x5740 [ 611.446366][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 611.451488][ T31] ? __pfx___schedule+0x10/0x10 [ 611.456370][ T31] ? schedule+0x90/0x360 [ 611.460888][ T31] schedule+0x164/0x360 [ 611.465120][ T31] schedule_preempt_disabled+0x13/0x30 [ 611.470692][ T31] __mutex_lock+0x7f7/0x1550 [ 611.475319][ T31] ? kernel_text_address+0xa5/0xe0 [ 611.480775][ T31] ? __mutex_lock+0x608/0x1550 [ 611.485692][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 611.491228][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 611.497040][ T31] ? stack_trace_save+0xa9/0x100 [ 611.502271][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 611.507302][ T31] ? radix_tree_lookup+0x240/0x290 [ 611.512606][ T31] genl_rcv_msg+0x10b/0x7a0 [ 611.517260][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.522812][ T31] netlink_rcv_skb+0x232/0x4b0 [ 611.527658][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.532816][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.538169][ T31] ? down_read+0x270/0x2e0 [ 611.542883][ T31] ? genl_rcv+0xd/0x40 [ 611.547036][ T31] genl_rcv+0x28/0x40 [ 611.551358][ T31] netlink_unicast+0x75c/0x8e0 [ 611.556322][ T31] netlink_sendmsg+0x813/0xb40 [ 611.561430][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.566995][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 611.572082][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 611.577488][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.583121][ T31] __sys_sendto+0x672/0x710 [ 611.587674][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 611.593449][ T31] ? exc_page_fault+0x6a/0xc0 [ 611.598211][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 611.603784][ T31] __x64_sys_sendto+0xde/0x100 [ 611.608628][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.614965][ T31] do_syscall_64+0x174/0x580 [ 611.619747][ T31] ? trace_irq_disable+0x3b/0x140 [ 611.624902][ T31] ? clear_bhb_loop+0x40/0x90 [ 611.630019][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.635997][ T31] RIP: 0033:0x7f64efd5d68e [ 611.640617][ T31] RSP: 002b:00007f64f0cafe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 611.649102][ T31] RAX: ffffffffffffffda RBX: 00007f64f0cb16c0 RCX: 00007f64efd5d68e [ 611.657177][ T31] RDX: 0000000000000028 RSI: 00007f64f0cb0000 RDI: 0000000000000004 [ 611.665463][ T31] RBP: 0000000000000000 R08: 00007f64f0caff04 R09: 000000000000000c [ 611.673602][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 611.681850][ T31] R13: 00007f64f0caff58 R14: 00007f64f0cb0000 R15: 0000000000000000 [ 611.689974][ T31] [ 611.693041][ T31] INFO: task syz.4.2973:17560 blocked for more than 144 seconds. [ 611.701583][ T31] Not tainted syzkaller #0 [ 611.706602][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.715800][ T31] task:syz.4.2973 state:D stack:27904 pid:17560 tgid:17547 ppid:5632 task_flags:0x400040 flags:0x00080002 [ 611.727983][ T31] Call Trace: [ 611.731496][ T31] [ 611.734461][ T31] __schedule+0x1821/0x5740 [ 611.738975][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 611.744121][ T31] ? __pfx___schedule+0x10/0x10 [ 611.749060][ T31] ? schedule+0x90/0x360 [ 611.753472][ T31] schedule+0x164/0x360 [ 611.757666][ T31] schedule_preempt_disabled+0x13/0x30 [ 611.763329][ T31] __mutex_lock+0x7f7/0x1550 [ 611.767976][ T31] ? __mutex_lock+0x608/0x1550 [ 611.772901][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 611.777628][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 611.782914][ T31] ? radix_tree_lookup+0x240/0x290 [ 611.788096][ T31] genl_rcv_msg+0x10b/0x7a0 [ 611.792861][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.798394][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 611.803985][ T31] netlink_rcv_skb+0x232/0x4b0 [ 611.808830][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.814221][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.819827][ T31] ? down_read+0x270/0x2e0 [ 611.824346][ T31] ? genl_rcv+0xd/0x40 [ 611.828445][ T31] genl_rcv+0x28/0x40 [ 611.832676][ T31] netlink_unicast+0x75c/0x8e0 [ 611.837534][ T31] netlink_sendmsg+0x813/0xb40 [ 611.842511][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.847871][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 611.853137][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 611.858527][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.864081][ T31] __sys_sendto+0x672/0x710 [ 611.868675][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 611.874013][ T31] ? exc_page_fault+0x6a/0xc0 [ 611.878753][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 611.884258][ T31] __x64_sys_sendto+0xde/0x100 [ 611.889109][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.895325][ T31] do_syscall_64+0x174/0x580 [ 611.900497][ T31] ? trace_irq_disable+0x3b/0x140 [ 611.905602][ T31] ? clear_bhb_loop+0x40/0x90 [ 611.910409][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.916327][ T31] RIP: 0033:0x7f64efd5d68e [ 611.921050][ T31] RSP: 002b:00007f64f0c4ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 611.929692][ T31] RAX: ffffffffffffffda RBX: 00007f64f0c4e6c0 RCX: 00007f64efd5d68e [ 611.938063][ T31] RDX: 0000000000000020 RSI: 00007f64f0c4d000 RDI: 0000000000000005 [ 611.946336][ T31] RBP: 0000000000000000 R08: 00007f64f0c4cf04 R09: 000000000000000c [ 611.954686][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 611.962913][ T31] R13: 00007f64f0c4cf58 R14: 00007f64f0c4d000 R15: 0000000000000000 [ 611.970970][ T31] [ 611.974013][ T31] INFO: task syz.3.2975:17561 blocked for more than 144 seconds. [ 611.981952][ T31] Not tainted syzkaller #0 [ 611.986926][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.995821][ T31] task:syz.3.2975 state:D stack:27168 pid:17561 tgid:17559 ppid:5629 task_flags:0x400040 flags:0x00080002 [ 612.008549][ T31] Call Trace: [ 612.012500][ T31] [ 612.015531][ T31] __schedule+0x1821/0x5740 [ 612.020774][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 612.025900][ T31] ? __pfx___schedule+0x10/0x10 [ 612.031539][ T31] ? schedule+0x90/0x360 [ 612.035860][ T31] schedule+0x164/0x360 [ 612.040209][ T31] schedule_preempt_disabled+0x13/0x30 [ 612.045733][ T31] __mutex_lock+0x7f7/0x1550 [ 612.050560][ T31] ? __mutex_lock+0x608/0x1550 [ 612.055414][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 612.060387][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 612.065537][ T31] ? radix_tree_lookup+0x240/0x290 [ 612.071063][ T31] genl_rcv_msg+0x10b/0x7a0 [ 612.075685][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 612.080963][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 612.086488][ T31] netlink_rcv_skb+0x232/0x4b0 [ 612.091915][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 612.097025][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 612.102529][ T31] ? down_read+0x270/0x2e0 [ 612.107093][ T31] ? genl_rcv+0xd/0x40 [ 612.111704][ T31] genl_rcv+0x28/0x40 [ 612.115783][ T31] netlink_unicast+0x75c/0x8e0 [ 612.120872][ T31] netlink_sendmsg+0x813/0xb40 [ 612.125972][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.131414][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 612.136392][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 612.142070][ T31] ____sys_sendmsg+0x972/0x9f0 [ 612.146907][ T31] ? __might_fault+0xaf/0x130 [ 612.151708][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 612.157035][ T31] ? import_iovec+0x73/0xa0 [ 612.161918][ T31] ___sys_sendmsg+0x2a5/0x360 [ 612.166664][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 612.171844][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.177095][ T31] ? futex_wake+0x4ac/0x580 [ 612.182207][ T31] ? __fget_files+0x2a/0x420 [ 612.186869][ T31] ? __fget_files+0x3a0/0x420 [ 612.191871][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 612.197043][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 612.203099][ T31] ? rcu_is_watching+0x15/0xb0 [ 612.208381][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.214823][ T31] do_syscall_64+0x174/0x580 [ 612.219507][ T31] ? trace_irq_disable+0x3b/0x140 [ 612.224978][ T31] ? clear_bhb_loop+0x40/0x90 [ 612.229841][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.235772][ T31] RIP: 0033:0x7f3bde19ce59 [ 612.240601][ T31] RSP: 002b:00007f3bdf0b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.249129][ T31] RAX: ffffffffffffffda RBX: 00007f3bde415fa0 RCX: 00007f3bde19ce59 [ 612.257407][ T31] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 612.265623][ T31] RBP: 00007f3bde232d6f R08: 0000000000000000 R09: 0000000000000000 [ 612.275112][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.284336][ T31] R13: 00007f3bde416038 R14: 00007f3bde415fa0 R15: 00007fff0da35b38 [ 612.293073][ T31] [ 612.296453][ T31] INFO: task syz.0.2976:17579 blocked for more than 145 seconds. [ 612.304398][ T31] Not tainted syzkaller #0 [ 612.309502][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 612.319144][ T31] task:syz.0.2976 state:D stack:24952 pid:17579 tgid:17578 ppid:5630 task_flags:0x400040 flags:0x00080002 [ 612.331813][ T31] Call Trace: [ 612.335144][ T31] [ 612.338089][ T31] __schedule+0x1821/0x5740 [ 612.342718][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 612.347711][ T31] ? __pfx___schedule+0x10/0x10 [ 612.353134][ T31] ? schedule+0x90/0x360 [ 612.357711][ T31] schedule+0x164/0x360 [ 612.362166][ T31] schedule_preempt_disabled+0x13/0x30 [ 612.367721][ T31] __mutex_lock+0x7f7/0x1550 [ 612.373040][ T31] ? __mutex_lock+0x608/0x1550 [ 612.377913][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 612.382796][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 612.387985][ T31] ? radix_tree_lookup+0x240/0x290 [ 612.393380][ T31] genl_rcv_msg+0x10b/0x7a0 [ 612.397977][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 612.403270][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 612.408716][ T31] netlink_rcv_skb+0x232/0x4b0 [ 612.413921][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 612.419018][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 612.424516][ T31] ? down_read+0x270/0x2e0 [ 612.428945][ T31] ? genl_rcv+0xd/0x40 [ 612.434020][ T31] genl_rcv+0x28/0x40 [ 612.438174][ T31] netlink_unicast+0x75c/0x8e0 [ 612.443273][ T31] netlink_sendmsg+0x813/0xb40 [ 612.448271][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.453950][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 612.459046][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 612.464625][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.470372][ T31] __sys_sendto+0x672/0x710 [ 612.474943][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 612.480701][ T31] ? exc_page_fault+0x6a/0xc0 [ 612.485629][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 612.491228][ T31] __x64_sys_sendto+0xde/0x100 [ 612.496356][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.502861][ T31] do_syscall_64+0x174/0x580 [ 612.507548][ T31] ? trace_irq_disable+0x3b/0x140 [ 612.513589][ T31] ? clear_bhb_loop+0x40/0x90 [ 612.518665][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.524836][ T31] RIP: 0033:0x7f502ef5d68e [ 612.529313][ T31] RSP: 002b:00007f502d1ece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 612.537876][ T31] RAX: ffffffffffffffda RBX: 00007f502d1ee6c0 RCX: 00007f502ef5d68e [ 612.545996][ T31] RDX: 0000000000000020 RSI: 00007f502d1ed000 RDI: 0000000000000005 [ 612.554321][ T31] RBP: 0000000000000000 R08: 00007f502d1ecf04 R09: 000000000000000c [ 612.562409][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 612.570658][ T31] R13: 00007f502d1ecf58 R14: 00007f502d1ed000 R15: 0000000000000000 [ 612.578686][ T31] [ 612.581895][ T31] INFO: task syz.0.2976:17581 blocked for more than 145 seconds. [ 612.590502][ T31] Not tainted syzkaller #0 [ 612.595486][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 612.604329][ T31] task:syz.0.2976 state:D stack:26752 pid:17581 tgid:17578 ppid:5630 task_flags:0x400040 flags:0x00080002 [ 612.616558][ T31] Call Trace: [ 612.620020][ T31] [ 612.622986][ T31] __schedule+0x1821/0x5740 [ 612.627587][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 612.632722][ T31] ? __pfx___schedule+0x10/0x10 [ 612.637731][ T31] ? schedule+0x90/0x360 [ 612.642135][ T31] schedule+0x164/0x360 [ 612.646357][ T31] schedule_preempt_disabled+0x13/0x30 [ 612.651880][ T31] __mutex_lock+0x7f7/0x1550 [ 612.656513][ T31] ? __mutex_lock+0x608/0x1550 [ 612.661435][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 612.666192][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 612.671552][ T31] ? radix_tree_lookup+0x240/0x290 [ 612.676749][ T31] genl_rcv_msg+0x10b/0x7a0 [ 612.681422][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 612.686514][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 612.692110][ T31] netlink_rcv_skb+0x232/0x4b0 [ 612.697007][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 612.702324][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 612.707691][ T31] ? down_read+0x270/0x2e0 [ 612.712355][ T31] ? genl_rcv+0xd/0x40 [ 612.716662][ T31] genl_rcv+0x28/0x40 [ 612.721029][ T31] netlink_unicast+0x75c/0x8e0 [ 612.725947][ T31] netlink_sendmsg+0x813/0xb40 [ 612.730927][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.736295][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 612.741354][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 612.746873][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.752476][ T31] __sys_sendto+0x672/0x710 [ 612.757066][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 612.762641][ T31] ? fd_install+0x94/0x3d0 [ 612.767147][ T31] ? fd_install+0x306/0x3d0 [ 612.771776][ T31] __x64_sys_sendto+0xde/0x100 [ 612.776675][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.782851][ T31] do_syscall_64+0x174/0x580 [ 612.787505][ T31] ? trace_irq_disable+0x3b/0x140 [ 612.792724][ T31] ? clear_bhb_loop+0x40/0x90 [ 612.797492][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.803764][ T31] RIP: 0033:0x7f502ef5d68e [ 612.808277][ T31] RSP: 002b:00007f502d1cbe58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 612.817004][ T31] RAX: ffffffffffffffda RBX: 00007f502d1cd6c0 RCX: 00007f502ef5d68e [ 612.825404][ T31] RDX: 0000000000000028 RSI: 00007f502d1cbfe0 RDI: 0000000000000006 [ 612.833792][ T31] RBP: 0000000000000000 R08: 00007f502d1cbed4 R09: 000000000000000c [ 612.841926][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 612.849978][ T31] R13: 00007f502d1cbf28 R14: 00007f502d1cbfe0 R15: 0000000000000000 [ 612.858224][ T31] [ 612.861404][ T31] INFO: task syz.0.2976:17583 blocked for more than 145 seconds. [ 612.869438][ T31] Not tainted syzkaller #0 [ 612.874642][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 612.883595][ T31] task:syz.0.2976 state:D stack:27904 pid:17583 tgid:17578 ppid:5630 task_flags:0x400040 flags:0x00080002 [ 612.895663][ T31] Call Trace: [ 612.899144][ T31] [ 612.902408][ T31] __schedule+0x1821/0x5740 [ 612.907207][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 612.912802][ T31] ? __pfx___schedule+0x10/0x10 [ 612.917745][ T31] ? schedule+0x90/0x360 [ 612.922232][ T31] schedule+0x164/0x360 [ 612.926561][ T31] schedule_preempt_disabled+0x13/0x30 [ 612.932258][ T31] __mutex_lock+0x7f7/0x1550 [ 612.936898][ T31] ? __mutex_lock+0x608/0x1550 [ 612.941788][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 612.946503][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 612.952157][ T31] ? radix_tree_lookup+0x240/0x290 [ 612.957432][ T31] genl_rcv_msg+0x10b/0x7a0 [ 612.962173][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 612.967305][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 612.972966][ T31] netlink_rcv_skb+0x232/0x4b0 [ 612.977792][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 612.982895][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 612.988236][ T31] ? down_read+0x270/0x2e0 [ 612.993281][ T31] ? genl_rcv+0xd/0x40 [ 612.997414][ T31] genl_rcv+0x28/0x40 [ 613.001478][ T31] netlink_unicast+0x75c/0x8e0 [ 613.006649][ T31] netlink_sendmsg+0x813/0xb40 [ 613.011684][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.017366][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 613.022435][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 613.027855][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.033433][ T31] __sys_sendto+0x672/0x710 [ 613.038068][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 613.043242][ T31] ? fd_install+0x94/0x3d0 [ 613.047807][ T31] ? fd_install+0x306/0x3d0 [ 613.052486][ T31] __x64_sys_sendto+0xde/0x100 [ 613.057307][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.063601][ T31] do_syscall_64+0x174/0x580 [ 613.068434][ T31] ? trace_irq_disable+0x3b/0x140 [ 613.074020][ T31] ? clear_bhb_loop+0x40/0x90 [ 613.078988][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.085063][ T31] RIP: 0033:0x7f502ef5d68e [ 613.089630][ T31] RSP: 002b:00007f502d1aae58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 613.098286][ T31] RAX: ffffffffffffffda RBX: 00007f502d1ac6c0 RCX: 00007f502ef5d68e [ 613.106379][ T31] RDX: 0000000000000028 RSI: 00007f502d1aafe0 RDI: 0000000000000007 [ 613.114571][ T31] RBP: 0000000000000000 R08: 00007f502d1aaed4 R09: 000000000000000c [ 613.123456][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 613.132219][ T31] R13: 00007f502d1aaf28 R14: 00007f502d1aafe0 R15: 0000000000000000 [ 613.140503][ T31] [ 613.143594][ T31] INFO: task syz.0.2976:17584 blocked for more than 146 seconds. [ 613.151777][ T31] Not tainted syzkaller #0 [ 613.156756][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.165790][ T31] task:syz.0.2976 state:D stack:27904 pid:17584 tgid:17578 ppid:5630 task_flags:0x400040 flags:0x00080002 [ 613.177996][ T31] Call Trace: [ 613.181411][ T31] [ 613.184377][ T31] __schedule+0x1821/0x5740 [ 613.188885][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 613.194117][ T31] ? __pfx___schedule+0x10/0x10 [ 613.199258][ T31] ? schedule+0x90/0x360 [ 613.203616][ T31] schedule+0x164/0x360 [ 613.207851][ T31] schedule_preempt_disabled+0x13/0x30 [ 613.213542][ T31] __mutex_lock+0x7f7/0x1550 [ 613.218181][ T31] ? __mutex_lock+0x608/0x1550 [ 613.223041][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 613.227753][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 613.233324][ T31] ? radix_tree_lookup+0x240/0x290 [ 613.238517][ T31] genl_rcv_msg+0x10b/0x7a0 [ 613.243080][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.248143][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 613.253697][ T31] netlink_rcv_skb+0x232/0x4b0 [ 613.258516][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.263648][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 613.269317][ T31] ? down_read+0x270/0x2e0 [ 613.273860][ T31] ? genl_rcv+0xd/0x40 [ 613.278014][ T31] genl_rcv+0x28/0x40 [ 613.282078][ T31] netlink_unicast+0x75c/0x8e0 [ 613.286876][ T31] netlink_sendmsg+0x813/0xb40 [ 613.291785][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.297109][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 613.302186][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 613.307513][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.313130][ T31] __sys_sendto+0x672/0x710 [ 613.317703][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 613.322950][ T31] ? fd_install+0x94/0x3d0 [ 613.327439][ T31] ? fd_install+0x306/0x3d0 [ 613.332019][ T31] __x64_sys_sendto+0xde/0x100 [ 613.336897][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.343055][ T31] do_syscall_64+0x174/0x580 [ 613.347694][ T31] ? trace_irq_disable+0x3b/0x140 [ 613.352873][ T31] ? clear_bhb_loop+0x40/0x90 [ 613.357693][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.363913][ T31] RIP: 0033:0x7f502ef5d68e [ 613.368383][ T31] RSP: 002b:00007f502cd87e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 613.376940][ T31] RAX: ffffffffffffffda RBX: 00007f502cd896c0 RCX: 00007f502ef5d68e [ 613.384996][ T31] RDX: 0000000000000028 RSI: 00007f502cd87fe0 RDI: 0000000000000009 [ 613.393331][ T31] RBP: 0000000000000000 R08: 00007f502cd87ed4 R09: 000000000000000c [ 613.401376][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 613.409347][ T31] R13: 00007f502cd87f28 R14: 00007f502cd87fe0 R15: 0000000000000000 [ 613.417593][ T31] [ 613.420715][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 613.429897][ T31] INFO: task syz.0.2976:17585 blocked for more than 146 seconds. [ 613.437854][ T31] Not tainted syzkaller #0 [ 613.443098][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 613.452055][ T31] task:syz.0.2976 state:D stack:27904 pid:17585 tgid:17578 ppid:5630 task_flags:0x400040 flags:0x00080002 [ 613.464159][ T31] Call Trace: [ 613.467466][ T31] [ 613.470876][ T31] __schedule+0x1821/0x5740 [ 613.475433][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 613.480598][ T31] ? __pfx___schedule+0x10/0x10 [ 613.485510][ T31] ? schedule+0x90/0x360 [ 613.489812][ T31] schedule+0x164/0x360 [ 613.493991][ T31] schedule_preempt_disabled+0x13/0x30 [ 613.499445][ T31] __mutex_lock+0x7f7/0x1550 [ 613.504122][ T31] ? __mutex_lock+0x608/0x1550 [ 613.508912][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 613.513762][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 613.518844][ T31] ? radix_tree_lookup+0x240/0x290 [ 613.524100][ T31] genl_rcv_msg+0x10b/0x7a0 [ 613.528659][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.533767][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 613.539256][ T31] netlink_rcv_skb+0x232/0x4b0 [ 613.544118][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 613.549329][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 613.554801][ T31] ? down_read+0x270/0x2e0 [ 613.559315][ T31] ? genl_rcv+0xd/0x40 [ 613.563604][ T31] genl_rcv+0x28/0x40 [ 613.567740][ T31] netlink_unicast+0x75c/0x8e0 [ 613.573042][ T31] netlink_sendmsg+0x813/0xb40 [ 613.577851][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.583341][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 613.588335][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 613.593767][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.599116][ T31] __sys_sendto+0x672/0x710 [ 613.603755][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 613.608928][ T31] ? fd_install+0x94/0x3d0 [ 613.613410][ T31] ? fd_install+0x306/0x3d0 [ 613.617957][ T31] __x64_sys_sendto+0xde/0x100 [ 613.622841][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.628952][ T31] do_syscall_64+0x174/0x580 [ 613.633785][ T31] ? trace_irq_disable+0x3b/0x140 [ 613.638889][ T31] ? clear_bhb_loop+0x40/0x90 [ 613.643860][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.649863][ T31] RIP: 0033:0x7f502ef5d68e [ 613.654282][ T31] RSP: 002b:00007f502c964e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 613.662860][ T31] RAX: ffffffffffffffda RBX: 00007f502c9666c0 RCX: 00007f502ef5d68e [ 613.671040][ T31] RDX: 0000000000000028 RSI: 00007f502c964fe0 RDI: 0000000000000008 [ 613.679029][ T31] RBP: 0000000000000000 R08: 00007f502c964ed4 R09: 000000000000000c [ 613.687232][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 613.695400][ T31] R13: 00007f502c964f28 R14: 00007f502c964fe0 R15: 0000000000000000 [ 613.703522][ T31] [ 613.706581][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 613.716196][ T31] [ 613.716196][ T31] Showing all locks held in the system: [ 613.724007][ T31] 1 lock held by khungtaskd/31: [ 613.728868][ T31] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 613.738843][ T31] 1 lock held by klogd/4984: [ 613.743644][ T31] #0: ffff8880b873b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 613.753645][ T31] 2 locks held by getty/5386: [ 613.758422][ T31] #0: ffff88803662f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 613.768256][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 613.778658][ T31] 1 lock held by udevd/7577: [ 613.783300][ T31] #0: ffff8880275a0350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 613.792767][ T31] 2 locks held by kworker/u8:12/7660: [ 613.798225][ T31] #0: ffff8880b873b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 613.808357][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 613.817368][ T31] 2 locks held by syz-executor/17449: [ 613.822836][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 613.831305][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 613.840401][ T31] 6 locks held by syz.1.2972/17541: [ 613.845740][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 613.854150][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 613.863471][ T31] #2: ffff8880274cea60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 613.874196][ T31] #3: ffff88802759be78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 613.883817][ T31] #4: ffff88802759b840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 613.896004][ T31] #5: ffff88802759b878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 613.908433][ T31] 2 locks held by syz.1.2972/17551: [ 613.913767][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 613.922038][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 613.931266][ T31] 2 locks held by syz.4.2973/17549: [ 613.936546][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 613.944854][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 613.954464][ T31] 2 locks held by syz.4.2973/17560: [ 613.959806][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 613.968134][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 613.977309][ T31] 2 locks held by syz.3.2975/17561: [ 613.982735][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 613.991063][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.000143][ T31] 2 locks held by syz.0.2976/17579: [ 614.005362][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.013654][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.022789][ T31] 2 locks held by syz.0.2976/17581: [ 614.027999][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.036459][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.045632][ T31] 2 locks held by syz.0.2976/17583: [ 614.051157][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.059404][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.068478][ T31] 2 locks held by syz.0.2976/17584: [ 614.073778][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.082081][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.091153][ T31] 2 locks held by syz.0.2976/17585: [ 614.096456][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.104885][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.114103][ T31] 2 locks held by syz-executor/17601: [ 614.119991][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.128364][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.137662][ T31] 2 locks held by syz-executor/17603: [ 614.143158][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.151503][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.160688][ T31] 2 locks held by syz-executor/17622: [ 614.166066][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.174308][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.183384][ T31] 2 locks held by syz-executor/17633: [ 614.188753][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.198742][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.207903][ T31] 2 locks held by syz-executor/17676: [ 614.213417][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.221747][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.231208][ T31] 2 locks held by syz-executor/17696: [ 614.236603][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.245113][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.254223][ T31] 2 locks held by syz-executor/17698: [ 614.259817][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.268110][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.277303][ T31] 2 locks held by syz-executor/17704: [ 614.282863][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.291438][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.300587][ T31] 2 locks held by syz-executor/17727: [ 614.306064][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.314390][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.323503][ T31] 2 locks held by syz-executor/17766: [ 614.328879][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.337173][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.346244][ T31] 2 locks held by syz-executor/17790: [ 614.352046][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.360517][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.369564][ T31] 2 locks held by syz-executor/17792: [ 614.374992][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.383293][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.392450][ T31] 2 locks held by syz-executor/17795: [ 614.397835][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.406195][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.415289][ T31] 2 locks held by syz-executor/17822: [ 614.420763][ T31] #0: ffffffff8fe39f88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 614.429006][ T31] #1: ffffffff8fe39dc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 614.438213][ T31] [ 614.440622][ T31] ============================================= [ 614.440622][ T31] [ 614.449085][ T31] NMI backtrace for cpu 0 [ 614.449097][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 614.449111][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 614.449118][ T31] Call Trace: [ 614.449124][ T31] [ 614.449130][ T31] dump_stack_lvl+0xe8/0x150 [ 614.449149][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 614.449167][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 614.449180][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 614.449199][ T31] sys_info+0x135/0x170 [ 614.449213][ T31] watchdog+0xfd3/0x1030 [ 614.449234][ T31] ? watchdog+0x1c9/0x1030 [ 614.449254][ T31] kthread+0x389/0x470 [ 614.449270][ T31] ? __pfx_watchdog+0x10/0x10 [ 614.449300][ T31] ? __pfx_kthread+0x10/0x10 [ 614.449316][ T31] ret_from_fork+0x514/0xb70 [ 614.449330][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 614.449343][ T31] ? __switch_to+0xc79/0x1410 [ 614.449362][ T31] ? __pfx_kthread+0x10/0x10 [ 614.449378][ T31] ret_from_fork_asm+0x1a/0x30 [ 614.449400][ T31] [ 614.449405][ T31] Sending NMI from CPU 0 to CPUs 1: [ 614.561102][ C1] NMI backtrace for cpu 1 [ 614.561123][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 614.561141][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 614.561151][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 614.561175][ C1] Code: 1b 7d 02 e9 c3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 c1 1f 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 614.561189][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 614.561205][ C1] RAX: 0000000000284ea7 RBX: ffffffff819a845a RCX: 0000000080000001 [ 614.561217][ C1] RDX: 0000000000000001 RSI: ffffffff8dfb055c RDI: ffffffff8c28a560 [ 614.561228][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 614.561243][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 614.561254][ C1] R13: 1ffff11003b5a000 R14: 0000000000000001 R15: 1ffff11003b5a000 [ 614.561266][ C1] FS: 0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 614.561280][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.561291][ C1] CR2: 00007ffd35ce2c5c CR3: 000000000e74a000 CR4: 00000000003526f0 [ 614.561308][ C1] Call Trace: [ 614.561315][ C1] [ 614.561321][ C1] default_idle+0x9/0x20 [ 614.561340][ C1] default_idle_call+0x72/0xb0 [ 614.561360][ C1] do_idle+0x36a/0x5f0 [ 614.561378][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 614.561399][ C1] ? __pfx_do_idle+0x10/0x10 [ 614.561421][ C1] cpu_startup_entry+0x43/0x60 [ 614.561439][ C1] start_secondary+0x101/0x110 [ 614.561455][ C1] common_startup_64+0x13e/0x147 [ 614.561484][ C1] [ 614.729495][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 614.736460][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 614.745608][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 614.755696][ T31] Call Trace: [ 614.758999][ T31] [ 614.761932][ T31] vpanic+0x56c/0xa60 [ 614.765919][ T31] ? __pfx___schedule+0x10/0x10 [ 614.770868][ T31] ? __pfx_vpanic+0x10/0x10 [ 614.775395][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 614.781572][ T31] panic+0xc5/0xd0 [ 614.785295][ T31] ? __pfx_panic+0x10/0x10 [ 614.789728][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 614.795165][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 614.801346][ T31] watchdog+0x102c/0x1030 [ 614.805727][ T31] ? watchdog+0x1c9/0x1030 [ 614.810183][ T31] kthread+0x389/0x470 [ 614.814276][ T31] ? __pfx_watchdog+0x10/0x10 [ 614.819070][ T31] ? __pfx_kthread+0x10/0x10 [ 614.823718][ T31] ret_from_fork+0x514/0xb70 [ 614.828393][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 614.833577][ T31] ? __switch_to+0xc79/0x1410 [ 614.838293][ T31] ? __pfx_kthread+0x10/0x10 [ 614.843013][ T31] ret_from_fork_asm+0x1a/0x30 [ 614.847832][ T31] [ 614.851280][ T31] Kernel Offset: disabled [ 614.855705][ T31] Rebooting in 86400 seconds..