last executing test programs: 19.478513156s ago: executing program 3 (id=645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xbf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbedit={0x60, 0x1, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x78}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000900)) sendmsg(r5, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=[{0x78, 0x113, 0x400, "af17a8345148e7d4dd5d73d6b14bc0fcc2405d8e38b5118ef04128f4530cf373125051227acfd946190f422f5e25cd654062bfbdf7648661afd5785f64ca23da23afa51ee5f5d05cb8bbc4e6d6f3b0065b8a5e5fd473079f460fbaeac1f087a947"}, {0xd8, 0x109, 0x5, "4ac55be7203e37f5a83d6505ce28433cb3a7badd161af7fd661e9f7852b6dd1cbe640582ff342543c05a223f42af911cce175256a893c271e0eba4b7ee38b17792246dcb693af63b7ad22d1d9a427366a6b6aa3d40d1136f73c73d7c027bb135708eb56d8e173b279ced17fbf7d5c9e2d067fdef6e24eaf53a7a2d8ac451609d8855625b3bb8473dc3469daf37ace217132de9508444deae30491723694f3920b3c0f107de26ecc2fec823c448c9ae9c642624f4512b5a4f0f31a5c5e13aa8e49681ed7cc685"}, {0x1010, 0x1, 0xad0, "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"}, {0x18, 0x4, 0x7fffffff, "90ea0fa1"}, {0xb0, 0x107, 0x5, "567ecc14a6a8650a6356a5fe218f7b1e8fb167417f4fd555d75f27de2679d9723b3c6296c2c31abd7928faa8149337ee28e271484bbf5e9666316c04a45fe2efd4587fb17bbe94225220bf6dd597224243627c3d8e751fd2c1220397b088b10c0f67a950e0ab0905ca256a999ad7cc98be93f277e54ccd9a774f31fcf89cada4701a6723ac441b0d413f423f43633ed516e627df5d4577321a"}, {0x10, 0x116, 0x8}, {0x30, 0x1, 0x0, "5574d10213124ca990cccdd88c7f8f63fa056a3cf48883f758cda91954"}, {0x68, 0x105, 0x7, "fa47cefcc96a91789f4bf4b412db5598b015a0b81a268b26153765e065cacd60cbd4d955b19f717c5914778f35b430dab51fa94213bad7208448c448c561714eec7e0292e124e52b0bafef11402df9c2e3335f319a8fc947"}, {0x18, 0x119, 0x9, "00a09cd6102e2349"}, {0xf0, 0x1, 0x7fff, "da60a1ef26c173e88e0b8ddc7aef2f96bb69491fc55d1a0bc2092cfd7c1fff5217154daab77bf477dfa7e88bb250eb3d0aac44762f7caa2b7f99e16630a91ac7f4e64a3433c94370f6985d7051ba75280e59b5f43ade3178c55bdf4d49eab59a9a506b125c1ea1d7126f5718fc9c228978ab791dafff36caee67079d1f146146ea8bc9de5a5680acd0932ea3d20626fff505f06c5402c0f3981a90e870b16e12b651d735b22620167fb57a9fe9f837cba249bb378a86a0d29f64830d173cd1ee2ee69b2bd69a93cd64b88cc12f11eb639b83298912eab25ffb491a843c9684"}], 0x13d8}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000012005704b6eee0c913144cff07000000", @ANYRES32=0x0, @ANYBLOB="000002000000000008001d"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}}], {0x14}}, 0x78}}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x62c, 0x39, 0x301, 0x70bd24, 0xfffffbf8, {0x5}, [@nested={0x618, 0xf6, 0x0, 0x1, [@generic="ddeb444b7254c413c1e8fad6811a8e06c590a584cca274bb731f3af320c3532c837efdb4a3abec31dc2aa5c946d3546712f8cc8ba6a1d816a149815997067be071c1dd574ba398cfb5b81a2d8798e1b5bf8dc187dea79e78ac352a83193a1346aaf3e3c2ffec844c4d3d41b796bf7f28992a240ebf6ebb1cb62124af7cfca1aa2c51b97fe3a2590c76ca46d97b8b89d2581dbb9b91cf84b30b476428cb0cf73d112007ae7746c9a588c57bc677152743c35c4a702d3320d1b16d", @generic="f63ce1e11c53f3aa4ca4315fcf7ff2ad1d30266eee08d2735996a7d3ed8e2d969a228296923eee3c866c7bead5141a93f9f8969b859d", @typed={0x8, 0x5, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x37}}, @typed={0x14, 0xe6, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x20a, 0xa6, 0x0, 0x1, [@nested={0x4, 0x42}, @nested={0x4, 0x158}, @generic="f47dc2a7ba839156d5cf815f421bbf7200c70f563842899e0c8961ec84cc85e0916382f7705d8113ce7830c60e6deca659c1167b19a75709af314a360e0b55d3cadbc8a972f41b7f964411189f597a465118873978b950f7f0dde0610ca6eccafb8c5ca2522cf65027b21b5693f8c2edea8307e8", @generic="8bda4faf7177d53e15f26bf1c2bc19c1889c5c1572618188dfdb2094ddeffda435c2bb7db1f1ed6403207d61e136968c93c2c5e1910b3b24b7657a723eeb74822a4ab33d56a5573c8d3a3abc17108ae4d0095f0030b7dbd46c3bae7884619a0e09f83995f25c6d0eb4ed3d49291ad50ee2f0b423f4f884dfb7b404a344eb1d888fa63c759d6044fb7e74f15b4aeac6ac4cc400520dd8b5a8e9b93ff0166ccd457951ac509bed49e150188593b2cbf4b5a8d8ffaa243fb14f03de45072de4a139acb898be041a757fe472", @generic="542f48a18a09c950b1ee7d17b021276b4141a9d49ac4cca9f954190707d8f62fd8f065852274f71a755351e0aebe8c49269e7a3491df48dbd5bc92ec12f84376a40520ecaf8acbab1221028fcf724f941bc9908cce75d8a0fb34daa69b77b16461a308eb99ea868aa82efe840acff5a8aadc1e520e893cf6b94fff8001d6a7a55fbc26f04897ea3393873859e12ee509bb41e9b450fb0d1d61de4ac3750e22d21a086dfc9825cf2f15df03a1f2dc7acf9596c0e4f60b481c", @nested={0x4, 0x5a}, @nested={0x4, 0xfa}]}, @nested={0x180, 0x22, 0x0, 0x1, [@generic="3907e044f8a134c59ea57281d8d62ae6824a22e6fbbf9f9d9e478c86e15db969fab27445bf1e877d05fc9f712c3d16ac1885fac51baf63729472c9e1efd2987fa31b230ec5b9c71ace172f2e71628e720f83607ce7fa33", @typed={0x9, 0x138, 0x0, 0x0, @str='-.+{\x00'}, @typed={0x6, 0xec, 0x0, 0x0, @str='\\\x00'}, @nested={0x4, 0x9c}, @generic="94f9fa11677147d5a12c46042adfcfef7b3de90309bf900f2a47013ff8086108d29d2bc4d2f0a2227dca8511666d6f9f", @typed={0x42, 0x2c, 0x0, 0x0, @binary="2fb715d6c11c7ae2241e53bdb165222982aad89c5358104585dfc85847c71809240f637a2e1947e153f21f85662727073938bbde6647f3d5b76427fddb71"}, @nested={0x4, 0xec}, @nested={0x4, 0xf5}, @generic="428c78a36aed5fa5704fd589bb9dfc6e60478a38d98adbac6b93d37ac3981cb2858935af344ce92bf4b71057a709df9f62cafa23260a6771b9a89f2d37fe12284a5e999de0546be16bc6c1ccc8a6d4cf16e0c88c659c9ad9e74a72c9357fa4ee93035d03310ae4ea9d8a88cc137d8303b4528a1a8337bd6dc195c1e68274a8b89eb097e64fd6be264d05b58b81", @nested={0x4, 0x14a}]}, @typed={0x7, 0x23, 0x0, 0x0, @str='/.\x00'}, @typed={0x8, 0x50, 0x0, 0x0, @uid}, @nested={0x162, 0x134, 0x0, 0x1, [@generic="82d82941a810dc583446d8404591b74ac686f918e4df6de84261fe0f1cb6a847fe7db7642316ccaf26e3c22ba9893ecc6dfd9422577dc613832e325a29a273006ac5fd8ac068b245895bd6b23bf77948952b5ceb7cd38c86f00b39afb28c6ca885", @typed={0x8, 0x15, 0x0, 0x0, @pid}, @typed={0xc, 0x5f, 0x0, 0x0, @u64=0x50000000000000}, @nested={0x4, 0x2e}, @nested={0x4, 0xe5}, @generic="4cef484ac45b9fe0537d6694737a4cbe7296edbea1b5772902b69a54b198c9d7220f25fe19221b89fedac79bbc2e1d864c997688c3371a3cef0f1e94c5455c3b60a1d676fe5d4ba20bf56620f02c25b1c8a1eb0068c21da611afde6f9306cd5dccf11d55ea48ebb708af6f8f539e3a898a69a832f0ae097dd62075dfe62d74aae5b7efbf6d2b3a417c50b50d17f9c0e7907ebe20b2a72729ba485999a0ee24277c84dca2b71f03f64b73cdaf642e06e9f6106700e96d6ab3ba2d8c0337073837930479ee478d71161ec23c2d581f3103fb3ed81c3bbfae90021cc6610615d91f4d"]}]}]}, 0x62c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004000600"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) 18.702995143s ago: executing program 3 (id=655): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{0x0, 0x3, {0x1, 0xf0}, {0x2, 0x0, 0x1}, 0xfe, 0xfe}, {0x3, 0x1, {0x1, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0xfe, 0x2}, {0x0, 0x2, {0x1, 0x0, 0x2}, {0x0, 0xf0, 0x1}}], 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) unshare(0x22020600) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 18.454930255s ago: executing program 3 (id=657): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)={&(0x7f0000000200)=@can={{0x3, 0x0, 0x1}, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x20090804}, 0x4054) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x0, @empty}}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x1ff, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a300000"], 0xe4}}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@assoc={0x0, 0x117, 0x4, 0x6}], 0xf}], 0x1, 0x40800) 18.117685985s ago: executing program 3 (id=661): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.117151273s ago: executing program 4 (id=662): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno', 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001000)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000a00)="449f6aed247d197178", 0x9}, {&(0x7f0000000780)="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", 0x173}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4004) 17.920574255s ago: executing program 4 (id=665): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007800c"], 0xc0}, 0x7ffffffe, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) 17.874368211s ago: executing program 3 (id=666): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close(r0) r1 = socket(0x1e, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x6, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x6e21, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x20, r8, 0x1, 0xfffffffd, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x4000040) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) 17.820535476s ago: executing program 2 (id=667): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{0x0, 0x3, {0x1, 0xf0}, {0x2, 0x0, 0x1}, 0xfe, 0xfe}, {0x3, 0x1, {0x1, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0xfe, 0x2}, {0x0, 0x2, {0x1, 0x0, 0x2}, {0x0, 0xf0, 0x1}}], 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 17.72192864s ago: executing program 4 (id=669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x28, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000100)={r1, &(0x7f0000000000)='\x00', 0x1, &(0x7f0000000040)={@align=0x3, {0x1, 0x0, 0xde, 0xe2c}}, 0x800, &(0x7f0000000080), 0x0}) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000010201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000"], 0x80}}, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5f, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x26e9affff64e7ce6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r6, 0x0) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'pim6reg0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x58005221}, 0xc, &(0x7f00000011c0)={&(0x7f0000001880)=@newchain={0x12d0, 0x64, 0x8, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0x4}, {0x5, 0xd}, {0x3, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x7b3a}, @filter_kind_options=@f_matchall={{0xd}, {0x5d0, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x5bc, 0x2, [@m_connmark={0x168, 0x1, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x8, 0xd4, 0xfe9}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x7fff, 0x0, 0xdb, 0x1000}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x8, 0x81}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x1, 0x6, 0x5}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x10000, 0x6, 0x2, 0x9}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58f0, 0x9, 0x8, 0x80, 0x6}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x1, 0x1, 0x4, 0x1}, 0x400}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x5c4, 0x0, 0x5, 0x2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x5, 0x5, 0xffffffff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcfc, 0x40, 0x7, 0x0, 0x3}, 0x6}}]}, {0x20, 0x6, "d03459641bec9ce8c6ce7386cd541fa663b616fb12194e205e0b78b2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x3a8, 0x12, 0x0, 0x0, {{0x7}, {0x320, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe7, 0x6, {0x200, 'filter\x00', 0x3, 0x474, "ce7090830561e9939a89ce67539d84325f2e3b2b993c4defb00fffd8ba23a3de19cfe614488f1be325f9f14978adea8e53683f84acdc0b71723493e7efba659b432403e52a7da2130496eea12a17aeee3b5882e602030553a117c09c171985f979715f171060f8dc42c01cd0daf502660f941843a7616730ce83879483c47080a848552603136bba435abe2311ffd5e2cb8029ee41f27fd8b3cf84cf09639c02b3a736a5b8351bfb531a6f0fd173cb8dce5e4bc530700a827938a65e0d"}}, @TCA_IPT_TARG={0x108, 0x6, {0x0, 'security\x00', 0x6, 0x4f3a, "53cbe7e3d80a49c273ad3a5853c5200c17109bf250dbcaaeed42e817715e1bc0422b902b8174199ad64e148608228cb08f510f0c53c025be53349862648ecf5c573d6964c60b3859b0117b3d74f13f1b1dcbdfaf8c034600e03beb9af039b583be180d2b638c6e6309062878e2bf3daa30c6de6ddb9fb21f25aaeb58c70bf20e9d03d066e7d13d228fa53f49c22e9943e05ac1a4f89d336e684d23b1a762e6deb9e81f577a8ab856c047f2cc7a185109eeaefb5851d4c41d66047f71efafad0d472b9e4b9bc0cb0e34e239e562e0d8ed864c793d63555b3e1f3f48897a8b"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe4, 0x6, {0x89a, 'filter\x00', 0x0, 0x7, "eeba48078bbfc3edbf0c66ca9a7ce1c1ed877041c255dcf8b68a4e2f0f54fe00b42da16eb4b0de41e882d9306cacff07525dd4b35a25ea33c8f8e44b28d8d0b1d1612dd52880972941201ec2026b0e20d7222ea313ceb83da373a8e812e67f3b20ba6e67af26b0ee18c38bc48b455e39342c5973d79e00869661c7ca38d55739153442438876cbdbdfce7e604c8e89ddf31a7cdccc6ddba1378d9fce3b6ec155eed47a745c6ae633906ac17db3c1d64c811c09c5eff201c2dee2"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x61, 0x6, "7b61e38f3f408e2ab9aa2983571a2d50204cc18dedc6d87afd703abccc64e4de4127643ada7b6ee13799b0a7a18bec3435a8e99803d9db9a7811b5b7fb0b86ed9de79649af2854e61d63370f6f0b9e2b7d301acb8adb9a52c38d6eb15f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0xa8, 0x10, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6, 0x7, 0x1, 0x5}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}]}, {0x43, 0x6, "860ae1bd76557e0bac28c4180a9c53aa06951fd3d12c496cb47788b11240f6c4c3b3a112381c0d437b73b01ad009459d0f5642a80d8b92f18ed1252459cebe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffff}}]}}, @filter_kind_options=@f_u32={{0x8}, {0xca4, 0x2, [@TCA_U32_POLICE={0xca0, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x985b}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x6, 0x1, 0x7, 0x0, 0x10000, 0x5, 0x1, 0x4, 0xffff, 0x3, 0x8000, 0x1, 0x0, 0x10000, 0x1ff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x8, 0x693ca4eb, 0x7fff, 0xf0200, 0x9, 0x7, 0x8, 0x3, 0x2, 0x8, 0x8000, 0x8, 0x15, 0xff, 0x7fff, 0x3, 0x7f, 0x224, 0x7, 0x9, 0x10001, 0xfffffff7, 0x80, 0x4, 0x1, 0x80000001, 0x7, 0xc4c5, 0x2, 0x81, 0x9, 0x9, 0x0, 0x80, 0x3, 0x2, 0x3, 0x5, 0x7, 0x0, 0x5, 0x4, 0x200, 0x9, 0x7, 0x8000, 0x8, 0x9, 0x0, 0x2, 0x6, 0x4, 0x200, 0xae, 0x6, 0x9, 0x1, 0x10, 0x5, 0x7, 0x6, 0x5, 0x8, 0xcd96, 0x6, 0x8, 0x80000000, 0x3ff, 0x80000001, 0x5, 0x6174, 0xf, 0x516aef6e, 0x3, 0x9, 0x4, 0x7, 0x5, 0x3ff, 0x200, 0x0, 0x7, 0x400000, 0x80, 0x81, 0x9, 0x6, 0x6, 0x4, 0x3, 0x2, 0x1, 0x8, 0xfffffffa, 0x3, 0x4, 0x1, 0x7, 0x9c5d, 0x100, 0x8, 0x7, 0x30, 0x10, 0xff, 0x8ba, 0x2, 0xd8, 0x6, 0x0, 0xe, 0x0, 0x3, 0x1bb, 0x7f, 0x3, 0x50, 0x1, 0x5, 0x8000, 0x9, 0x418, 0x1, 0x3, 0x0, 0x800, 0x8000, 0x100, 0xc9f4, 0x8, 0x5, 0x81, 0x80, 0xe87, 0x8001, 0x9a0d, 0x2, 0x0, 0x5, 0x1, 0x8000, 0x6, 0x10, 0x3, 0x8, 0x80000001, 0x4, 0x0, 0x9, 0x7fff, 0xfffffff7, 0x1000, 0x5, 0x8, 0x6, 0xfffffffa, 0xfff, 0x1000, 0x4, 0x5, 0x5ba, 0x4, 0x395, 0x455, 0x73d8, 0x9a, 0x4, 0x1, 0x3df, 0x1, 0x7, 0x3, 0xf4, 0xd8b, 0x9, 0xc, 0x7, 0x0, 0x9, 0x7, 0x8000, 0x5, 0x800, 0x9, 0x7ff, 0x7791, 0x4, 0x6, 0x1cdd, 0x1, 0xdaa8, 0x80000001, 0x8, 0xb1c3, 0x3, 0x1, 0x7, 0x2, 0x1, 0x5, 0xb, 0x9, 0xff, 0x7, 0x8, 0x10, 0x3, 0xc, 0x7, 0x5958, 0xa25, 0x10001, 0x4, 0x1ff, 0x9, 0x10000, 0x2, 0x400, 0x8000, 0xb, 0x5, 0x1ce, 0x5, 0x1, 0x88, 0x4, 0x6, 0x5, 0x7, 0x81, 0x2, 0x80, 0xc, 0x401, 0xf]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xb, 0x9, 0x8000, 0x7, 0xfffffc01, 0x5, 0x0, 0x5, 0x4, 0xa, 0x401, 0x2, 0xffffffff, 0x9, 0xbcc, 0x9, 0x2564, 0xc09c, 0x7, 0x3, 0x3ff, 0x8001, 0x5, 0x9, 0x1ff, 0x6, 0x40, 0xb3, 0x1, 0x50, 0xe, 0x2, 0x3, 0x9, 0x9, 0xc, 0xf, 0x8, 0x2, 0x5, 0xe, 0x854, 0x80, 0x2, 0x10, 0x800, 0x2, 0x671, 0x3, 0xffffff81, 0x20004000, 0x81, 0x9a0e, 0xf73, 0x6, 0xc, 0xfff, 0x4, 0x7, 0xff, 0x80000001, 0x528d0b6f, 0x3, 0x0, 0xffffff81, 0x7, 0xda02, 0x9, 0x100, 0x8, 0xe, 0x0, 0x6, 0x7fff, 0x800, 0xc73, 0x0, 0x3, 0x81, 0x8, 0x1, 0x3, 0x2, 0x3, 0x2, 0x4, 0x9d0, 0xf, 0x9, 0x7, 0x0, 0x10001, 0x8, 0xfc, 0x9, 0x0, 0x7, 0x9, 0x4, 0x1, 0x6, 0x0, 0x3, 0xe2ab, 0x0, 0x6, 0x80000000, 0x5647543b, 0x6, 0x101, 0xfffffff8, 0x2, 0x3, 0x9, 0x9, 0x1, 0x8e40, 0x9bca, 0x2, 0x1, 0x316, 0xfffffc2a, 0x2, 0x3, 0x6117, 0x81, 0x6, 0x1, 0x7, 0x1, 0x0, 0x10000, 0x4, 0x81, 0xcd, 0x9, 0x1, 0x7, 0x6, 0x4, 0x4a, 0x4, 0x62, 0xd31, 0x80000001, 0x7, 0x0, 0x3, 0x0, 0xd, 0x3, 0x8, 0x401, 0x80000000, 0x0, 0x7, 0x1, 0x1f2d, 0xc, 0x80000004, 0xe, 0x7, 0x9, 0x401, 0xa, 0x8, 0xa1e, 0xe, 0x24, 0x4, 0x680, 0x1, 0x7, 0x2030b775, 0x78a69eea, 0x4, 0x0, 0x6, 0x5, 0x7, 0x1, 0x3, 0x4, 0x7f, 0x7, 0x6790, 0x0, 0x5, 0x55d, 0x2, 0x10000, 0x5, 0x800, 0x1, 0x9, 0x81c, 0x0, 0x4, 0x72f, 0x7, 0x7, 0xa2, 0x7, 0x4, 0x10001, 0x3, 0x706, 0x4, 0x0, 0xc, 0x2, 0xff, 0x2, 0xe, 0x81, 0x1, 0x7, 0xe9a, 0x4, 0x4, 0x1, 0x10001, 0x35480, 0x1500000, 0x9, 0x8, 0x1000, 0x0, 0x9, 0x4, 0x726c, 0x1, 0x10, 0xffff, 0x2, 0x6, 0xff, 0x8, 0x9, 0x7fffffff, 0x6, 0x2, 0x401, 0x3, 0xfffffd1c, 0x769, 0xe17, 0x1, 0x8, 0x3, 0x2, 0x3, 0x1, 0x7c9e, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x0, 0x3a, 0x7, {0x3, 0x7cf429d2b23114bc, 0xba00, 0x5, 0x5, 0x3}, {0xe7, 0x0, 0x4, 0x1, 0x4, 0x54}, 0x800, 0xf, 0x8001}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x8, 0x7, 0xb, 0x80000000, {0x3f, 0x1, 0x2, 0x4, 0xfffd, 0x6}, {0x1, 0x2, 0x3, 0x4, 0x7, 0x6}, 0x1f6b, 0xcdd, 0x6a5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd9, 0x5, 0x7, 0x9, 0x3, 0x7, 0x8b19, 0x4, 0x0, 0x6, 0x6, 0x10000, 0x3, 0x9, 0x80, 0x6, 0x6c, 0xffff, 0x3, 0x401, 0x8, 0x5bec6a68, 0x80000001, 0x2, 0x7, 0x0, 0x2, 0xfffff787, 0x6, 0x1ff, 0x7fe, 0x3dd, 0x3, 0xf, 0xc000000, 0x4, 0x1f3e, 0xffff, 0x10000, 0x4, 0x9, 0x7, 0xb, 0x10, 0xfffffc01, 0x4, 0x4, 0x800, 0x7, 0x7323, 0x1, 0xffff, 0x97d, 0x0, 0x4, 0x10, 0x9, 0x800, 0x5, 0x6, 0x4, 0x6, 0x8, 0x7, 0x1, 0x3, 0xffff, 0x6, 0x3, 0x9, 0x2, 0x1ff, 0x1, 0x0, 0xfffffc00, 0x8, 0x0, 0x0, 0x2, 0x4, 0x9, 0x19b000, 0xc9c, 0x2, 0xffffff81, 0x67, 0xec9, 0x7, 0x0, 0x73, 0x9, 0x8, 0x5, 0x5, 0x800, 0xf, 0x3e, 0xfc3b, 0x0, 0xe7, 0x2, 0x7f, 0x6, 0x84c, 0x9dea, 0x7, 0x3, 0x10000, 0x2, 0x6, 0x5, 0x6, 0xfa, 0xa0b, 0x56aa, 0x8, 0x6, 0x200, 0x6, 0x1, 0x0, 0xfffffff9, 0xfb, 0x6, 0x2, 0x9d4, 0x1, 0x72b4a4c3, 0xfffffffe, 0x6, 0x1, 0x2, 0xccc, 0x1, 0x5, 0x5, 0xd72, 0x1, 0x10, 0x0, 0x5, 0x2, 0xffffffff, 0x0, 0x4, 0x2, 0x1, 0x800000, 0x0, 0x6, 0x1, 0x6, 0x2, 0x7fffffff, 0x40, 0x7, 0xfe5, 0x3, 0xce28, 0x2, 0x800000, 0x421, 0xfffffff9, 0x6b7, 0xd, 0xfffffff7, 0x80000001, 0x46, 0x6, 0x8001, 0x6, 0x1, 0x5, 0x4, 0x7ece3505, 0xa, 0x80000000, 0xfffffff7, 0x6, 0x9, 0x6, 0x3, 0x9, 0xfffffffa, 0x70, 0x3, 0xf, 0x80, 0x7, 0x7f, 0x5, 0xb7c1, 0x3, 0x0, 0xc, 0x0, 0x28, 0xa43c, 0x8, 0x0, 0x3ff, 0x0, 0x5, 0x200, 0x4, 0x5, 0x1, 0xd3, 0xd6d3, 0x7, 0x4, 0x7, 0xfff, 0x7, 0x9, 0x7, 0x8, 0x4, 0xfa3, 0x4, 0x6, 0x8, 0x5, 0x6, 0x7ff, 0x1, 0xf2a, 0x40, 0x6, 0x100000, 0x2, 0x68, 0x2, 0x400, 0x8000000, 0x40, 0x10000, 0x3e53, 0x7, 0x5, 0x9, 0xf, 0x5, 0x4, 0x85e7, 0x0, 0x2, 0x8, 0x7d49, 0x7, 0x6, 0x7f47, 0x0, 0xfffff578, 0xe1b5, 0x8]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x12d0}, 0x1, 0x0, 0x0, 0x20048480}, 0x11) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f0000000340), 0x4) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$nl_generic(0x10, 0x3, 0x10) write$tun(r8, &(0x7f0000000540)={@val={0x0, 0x86dd}, @val={0x0, 0x3, 0x9, 0x4, 0x0, 0xca6}, @x25={0x1, 0x2, 0x5, "640f11c9661dadea85cfba48fa876662d29f5b29b7b5"}}, 0x27) 17.575592542s ago: executing program 2 (id=670): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0x1f4, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 17.371015133s ago: executing program 2 (id=672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018002000000000003000000030000000020000000000000000000003003f44fde700000001000000dff50496f299eddeb1a217c4547ccd03"], 0x0, 0x4a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103e7000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d030000"], 0x40}}, 0x0) 17.315135952s ago: executing program 0 (id=673): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000cb9a603bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) poll(&(0x7f0000000280)=[{r2, 0x800}], 0x1, 0x1) recvmsg(r2, &(0x7f0000000300)={&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000100)=""/221, 0xdd}], 0x2}, 0xc0) 17.254947112s ago: executing program 2 (id=674): close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES16=r2, @ANYRES16=r1], 0x58}}, 0x4810) unshare(0x6a040000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x312) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="1400000016000b63d2b947468b041c031193e473", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=@deltaction={0x1c0, 0x31, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6963}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcdf499b6}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7b4}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="000000000980ffff", 0x8) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r10, 0x1, 0x10, 0x0, 0x0) sendmmsg(r10, &(0x7f0000000940)=[{{&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(chacha20-simd,crc32-generic)\x00'}, 0x80, &(0x7f0000000980)=[{&(0x7f00000003c0)="b3a63c0634200a77a0b008963edb0f06b6a36c2e9d3dcfec68776894fb1f9dc1639b336f3c5145bb13d2b6b1d3965e340ac47251b53d5774c9b4428b1ae8048a81a77bf8620052384234eea770f3fd45d841fbba6cb7e669a5eecf004cba2240d222e13179876fef85b8376854b21db32f6de73e7586b43cd0da297b869ef624d8f70920ae029d1b7d9785524a47098740c5d276c9c659829b3147959e5c086b99931e6a24b160409482c3429246dc13c219fa4b5bcddd00dd3864f4e9ace3ba6df424d006f2ae02412b8a5c269a6fdca5b34679c0efd74ffe3e89718c0653465c798dc463c7c86b1b", 0xe9}, {&(0x7f0000000500)="4275c018bc055500"/22, 0x16}, {0x0}, {&(0x7f0000000580)="96d4bdcfbc7a5ac348780d00621139e7ddea995c53189bc4b921748dd0665db1b882359eb5da65278ea8f22048b5dcf184c18a6444ebe88f58155fb0aa826eca580167776652c4f22032efe37f8cde55e01d4b4e102e0964f997be6843c775b13175ac594c454c1972db92a7069b04f3fc2d35fc44767448a11edf06e419990d932c36117471bd07337fd732d95d067f", 0x90}, {&(0x7f0000000640)="a2719cf7ecbe8412e1826a72b0ad736c70b928724d079fe8cf1109e2d1b1cc2d79ab72ae5a1f9fcaf06dc5660c9a43b7ac36834af28242d953ab6bc7ba89c92515aa88e27b731f3ad2b689912b93b9b9a0a5519097d63a3954ee10731f594cbf", 0x60}, {&(0x7f00000006c0)="78212f625725b2e546096a168b6b0c97194bb354c560f890bcfb999d99788fdaf4f76f5c8190f8cb0a5c40cbcd3c2df2cca66ad7475423f6fdf569964dbb7b952b7bfa93e2d780b574002fcfd8ff6c421ded6bc8bf348c2ff21a5602ff5722ca3b78995c392304", 0x67}, {&(0x7f00000007c0)="05e9b4892a1f35c00866c65ba612b4dd289a09a879ea07afb4a54bcef94b5718c6b2de0892a3aa7e0d136f94433b8d63c2d6b851fa79fb3eaeae7739332b9549b33c90d1966ee1cf2dba3e7e9968d4189f7d74b92bdb69456fe8d1625680f9688ae935812bc825ddc707de3f77220136e6c4be3d4a2da822ea8b6387564987", 0x7f}], 0x7}}], 0x1, 0xc040) write(r9, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 17.08269191s ago: executing program 1 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x9}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) 17.079924551s ago: executing program 4 (id=676): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24000054) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xf8, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xd}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000081) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x7b7e3264eb4f89f1}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r6, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '802.15.4 MAC\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x48000) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r3, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xb9}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0x55, 0x3}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x4}, @enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x9}]}]}, {0x0, [0x0, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000a40)=""/115, 0x5a, 0x73, 0x0, 0x1, 0x10000}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x1, 0x8001, 0x81, 0x2400, 0xffffffffffffffff, 0x2, '\x00', r8, r9, 0x2, 0x0, 0x2, 0xd}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) r11 = socket$alg(0x26, 0x5, 0x0) r12 = accept4$unix(r11, &(0x7f0000000b80), &(0x7f0000000c00)=0x6e, 0xc00) accept4$unix(r12, 0x0, &(0x7f0000000c40), 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r13, 0x4, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x8800) ioctl$XFS_IOC_GETPARENTS(r10, 0xc028583e, &(0x7f0000000ec0)={{[0xffff8000, 0x1, 0x10, 0x86]}, 0x0, 0x0, 0x8000, 0x0, &(0x7f0000000dc0)=[{{@align=0x7, {0x99ed, 0x0, 0x4, 0x3b3}}, 0xffffffff, 0x0, '802.15.4 MAC\x00'}, {{@_ha_fsid={[0x8]}, {0xf84b, 0x1, 0x4, 0x7d1a}}, 0x5, 0x0, 'nl802154\x00'}, {{@align=0x6024, {0x6, 0x2a0, 0x50, 0x2}}, 0x0, 0x0, 'wpan3\x00'}, {{@align=0x1ff, {0x81, 0x8, 0x8, 0x7}}, 0x2, 0x0, 'nl802154\x00'}, {{@align=0x8000000000000001, {0xb, 0x5, 0x8000, 0x6}}, 0x2, 0x0, '\x00'}]}) r14 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000f00)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) sendmmsg$inet(r14, &(0x7f0000001200)=[{{&(0x7f0000000f40)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f80)="6d9ea2f6d712fbc436937a2b8f69b76700b34540302e6722fb2c90d0857c8019e038527109ef7960f1878ea9b054f38364cda4f53ee38a7d1f6101508ec1957fde792a2feb13ade07530089d9e5cb6ddd7dbfc26330ff2a8ac13475d0f57afddbd8a80043550a39a26209e3bfdd4297549119ac517385dd5183c03ad0d", 0x7d}, {&(0x7f0000001000)="39ae29368813a849765049ece822c184f314a995f18aa5b0bf8528c057b4f1f5e26fd38ccc4c3754d7cc7ad1db99c1f08d3473e80dacd319a516e3be0aaf148ba108602830577c599aa2ff62f390", 0x4e}], 0x2, &(0x7f00000010c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x36, 0x0, 0xd, [0x5, 0x2]}, @generic={0x94, 0x10, "c68c7607ad0a0cf99ce26fb025d4"}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010100, @multicast1}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x47, 0x1, 0xc, [{@rand_addr=0x64010101, 0x6}, {@rand_addr=0x64010101, 0x7}, {@local, 0x4}, {@local, 0x5}]}, @timestamp_prespec={0x44, 0x2c, 0x6f, 0x3, 0x9, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0xc}, {@multicast1, 0x5c3}, {@rand_addr=0x64010100, 0x800}, {@remote, 0x3}]}, @timestamp={0x44, 0x1c, 0xa0, 0x0, 0x1, [0x5, 0x9, 0x4, 0x3, 0x2, 0x7]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x64010100, @multicast1}}}], 0x120}}], 0x1, 0x80) r15 = socket$netlink(0x10, 0x3, 0xebae5a2f69cc5f97) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r15) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r15, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x80, r16, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb, 0x33}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "3aeee7f64814ea0f19b7005c45904103"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xe}, @NL80211_ATTR_PMKID={0x14, 0x55, "7b94ae5256e04aecc1f96da7b863a6f4"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x48}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x40) 16.934466075s ago: executing program 1 (id=677): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001000)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000a00)="449f6aed247d197178", 0x9}, {&(0x7f0000000780)="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", 0x173}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="bae4", 0x2}], 0x1}}], 0x3, 0x4004) 16.929275373s ago: executing program 0 (id=678): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x5}, 0x8) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000140)=0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r4], 0xfc}}, 0x4080800) shutdown(r3, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) pwritev(r2, &(0x7f0000000400)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3d8134e72158357ee37fdae", 0x4e}, {&(0x7f0000000280)="cade5b9cc213ae7126ee040435501074ff92d7a0e884c13b2ca248372578fa8684826d39dd0a2e3d444d6134437203f529b3a1e30261d480ad3a64a118a72c71e3353e0895b76257c560cbd5b055821f0a141e721e2ea54408ede26535e7a6f2ece24d7c45a0ff7c32768c7cebfc438701a9e26ea4d242d6d7fc8647386e347a7696b8ec033cdf76720f65fcb3e0dc9bfbf156324186253e4eecbf77806b28be00ab7df52d396a63ba3493f16db0aed9e9dcfd1f01d4f6544f89f02e5653572ab8db2a79284dbbf836fca34baa855e3c00000000", 0xd4}], 0x2, 0x4, 0x0) socket$igmp(0x2, 0x3, 0x2) listen(0xffffffffffffffff, 0x4) listen(0xffffffffffffffff, 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000017c0)={'wpan0\x00'}) r6 = socket(0xa, 0x3, 0x3a) getsockopt$inet_opts(r6, 0x0, 0x0, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) 16.787089241s ago: executing program 1 (id=679): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000cb9a603bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 7) 16.693637911s ago: executing program 4 (id=680): socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{0x0, 0x3, {0x1, 0xf0}, {0x2, 0x0, 0x1}, 0xfe, 0xfe}, {0x3, 0x1, {0x1, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0xfe, 0x2}, {0x0, 0x2, {0x1, 0x0, 0x2}, {0x0, 0xf0, 0x1}}], 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) unshare(0x22020600) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 16.309493033s ago: executing program 1 (id=681): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x3000000, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c0000800000000800010074000000080000002c0005801400028008000200040000000800010001000000140002800800020010000000080001"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008c50) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 16.269049175s ago: executing program 0 (id=682): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x140, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb}, {0x10, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x200000c1}}}, @TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x80, 0x7f, 0x63f5, 0x2, 0x10001, 0x4, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x9, 0x3, 0x83, 0x0, 0x0, 0x10000, 0xffff, 0x4}}, {0xc, 0x2, [0x0, 0xa92e, 0x7, 0xb]}}, {{0x1c, 0x1, {0x1, 0xd9, 0x8000, 0xb, 0x2, 0x1, 0x40, 0x9}}, {0x16, 0x2, [0xfffb, 0xa6f, 0xa3c, 0xff43, 0xd7, 0x570, 0x3, 0xcb31, 0x9]}}, {{0x1c, 0x1, {0x0, 0x1, 0x2, 0x8, 0x1, 0xa68a, 0x5, 0x9}}, {0x16, 0x2, [0xff, 0x1ff, 0x47e, 0xef, 0xc, 0xffff, 0x100, 0x7, 0xff]}}, {{0x1c, 0x1, {0x8, 0xd, 0x1, 0x7, 0x1, 0x80000000, 0xffff8000, 0x4}}, {0xc, 0x2, [0x443e, 0x5, 0x1, 0x7e4]}}, {{0x1c, 0x1, {0xc, 0x6, 0x5, 0x7, 0x2, 0x2, 0x1ff, 0x1}}, {0x6, 0x2e, [0x7]}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140)=0x400, 0x4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmsg$rds(r3, &(0x7f0000002a00)={&(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8040001}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES16=r2, @ANYBLOB="21012bbd7000fcdbdf25090000000c0006000200000002000000050007000a00000008000100000000000500070001000000080001000300000005000800060000000c00060003", @ANYRES32=r3, @ANYBLOB="277533fb158020f7e05489471a1e155e76922de40b20eed94c5a30561a4c75a4031e1ee3b074e84177ac29c4d144d7e8aa765bcfb76d8b6644af05c82125064c0152e3db959ff8f294ac787e56d21db74b495b97d4c1cf7fcfce951abdda3f77aacb66504959b4c02df453bf0d21d6022688f3d14f977ea954c9046c47"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 16.213120176s ago: executing program 1 (id=683): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0e000000040000000800000007", @ANYRESDEC, @ANYRES32, @ANYBLOB="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"], 0x48) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 16.131564226s ago: executing program 4 (id=684): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c0f0008ac2abe0000000000e320fba7567b5fdb094cc0f9f478f43de14cf605190aeb4aca347d874614b4bce7c551eed32971bcce2be2114769e739839fc5e930f8c5af1ab8af8b4fb3fb14da060a21080c15b41087c6b1e8d799978896f4780067f3729e99e062584696b1e9f3a3433494629b5f8fd30946b09a863a665448564a29d1fef320f3eed50712e64c875fef39e10214762274df1731fe57b7a2ad50293e0ff800ccda964fd6b78dcd5967253037226179ce120a6b5551239603be125354690e272a78ed919a589ad5951b"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x800) 16.074613718s ago: executing program 3 (id=685): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007800c"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) (fail_nth: 6) 15.942407054s ago: executing program 0 (id=686): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002000010327bd7000008000000200000000000003"], 0x30}}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x200000000000000) 15.862781418s ago: executing program 1 (id=687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000000}, 0xc000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a00000001800090000000000fcdbdf251c140002"], 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000a00)={0xb, 0x1, {0x9, @usage=0x33d6, 0x0, 0x0, 0x0, 0x4, 0x1, 0xceb, 0xe869493bcdea829, @struct={0x0, 0x3}, 0x805, 0x8, [0x9, 0x2, 0x400, 0x4, 0x9, 0x4]}, {0x4, @usage=0x5, 0x0, 0x1ff, 0x984d, 0x6, 0xfffffffffffffff7, 0x1, 0x440, @struct={0xf, 0x800}, 0x9, 0x0, [0x7, 0x400, 0x4, 0x1000, 0x4, 0xffffffffffffffff]}, {0x2, @struct={0x8001, 0x7}, 0x0, 0x8, 0x7, 0x1, 0x4, 0x8, 0xc0, @usage=0x81, 0x1, 0x4, [0x7, 0xffffffff, 0x10, 0x9, 0x4, 0x100]}, {0x9, 0x8, 0x2}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000040)={0x4, 0x0, {0x7, @usage=0x7, 0x0, 0xa331, 0x3, 0x489e, 0x4, 0x1, 0x14, @usage=0x9, 0x8, 0x2f, [0x400, 0x81, 0xb, 0xfffffffffffff9bb, 0xdf, 0xf98d]}, {0xb, @struct={0x1, 0x7}, r8, 0x1, 0x14, 0x6, 0x8, 0x1, 0x80, @struct={0xe590, 0x9}, 0x0, 0x0, [0xfffffffffffffff8, 0x6, 0x9, 0x0, 0x5, 0x8000000000000000]}, {0x81, @usage=0x5, 0x0, 0xfffffffffffffffb, 0x3, 0x3, 0xd, 0xdf4, 0x0, @struct={0x40, 0x6}, 0x3e5, 0xd, [0x5, 0x8, 0x4, 0x8b9b, 0x5, 0x7]}, {0x7, 0x5, 0x6}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000440)={r9, 0x5, 0xffffffff80000000, 0x1}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x15, 0x5, 0x0) (async) getsockopt(r4, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000008c0)) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000000}, 0xc000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a00000001800090000000000fcdbdf251c140002"], 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000a00)={0xb, 0x1, {0x9, @usage=0x33d6, 0x0, 0x0, 0x0, 0x4, 0x1, 0xceb, 0xe869493bcdea829, @struct={0x0, 0x3}, 0x805, 0x8, [0x9, 0x2, 0x400, 0x4, 0x9, 0x4]}, {0x4, @usage=0x5, 0x0, 0x1ff, 0x984d, 0x6, 0xfffffffffffffff7, 0x1, 0x440, @struct={0xf, 0x800}, 0x9, 0x0, [0x7, 0x400, 0x4, 0x1000, 0x4, 0xffffffffffffffff]}, {0x2, @struct={0x8001, 0x7}, 0x0, 0x8, 0x7, 0x1, 0x4, 0x8, 0xc0, @usage=0x81, 0x1, 0x4, [0x7, 0xffffffff, 0x10, 0x9, 0x4, 0x100]}, {0x9, 0x8, 0x2}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000040)={0x4, 0x0, {0x7, @usage=0x7, 0x0, 0xa331, 0x3, 0x489e, 0x4, 0x1, 0x14, @usage=0x9, 0x8, 0x2f, [0x400, 0x81, 0xb, 0xfffffffffffff9bb, 0xdf, 0xf98d]}, {0xb, @struct={0x1, 0x7}, r8, 0x1, 0x14, 0x6, 0x8, 0x1, 0x80, @struct={0xe590, 0x9}, 0x0, 0x0, [0xfffffffffffffff8, 0x6, 0x9, 0x0, 0x5, 0x8000000000000000]}, {0x81, @usage=0x5, 0x0, 0xfffffffffffffffb, 0x3, 0x3, 0xd, 0xdf4, 0x0, @struct={0x40, 0x6}, 0x3e5, 0xd, [0x5, 0x8, 0x4, 0x8b9b, 0x5, 0x7]}, {0x7, 0x5, 0x6}}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000440)={r9, 0x5, 0xffffffff80000000, 0x1}) (async) 15.750580934s ago: executing program 0 (id=688): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e24, 0xbf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc58e}, 0x1c) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000080)="58fffe001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 15.690976329s ago: executing program 0 (id=689): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in=@loopback, 0x4e20, 0x13, 0x4e22, 0x1, 0xa, 0x80, 0x0, 0x2e}, {0x9, 0x7, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x6, 0x1000}, {0x4, 0x0, 0x0, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in6=@mcast2, 0x3507, 0x2, 0x3, 0x1, 0x2, 0x6507, 0x2}}, 0xe8) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa40c1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={r1, r2+60000000}, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRESHEX=r3, @ANYBLOB="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", @ANYRES16=r3], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) 15.380077828s ago: executing program 2 (id=690): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15.286567065s ago: executing program 2 (id=691): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="4a9cfde6de58979759ea18020000f9dcd1ff000000000000f59c000001000000b0000000ce88e7976ef60fa4c49500000000000000819acf5fbf50b464aea5c102257f01eb146b780d208f38a8c5bd6a82f8aba76fbf4fd62efda910f1eb9576cec01bd34e5209c59944ed"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x268}}, 0x4000800) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x4008000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) write$nci(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="7105126b01034206050a"], 0x1b) socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000001c0)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r8, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x5, 0x7c43, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000010) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e21, 0x1ff, @empty, 0x1}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0x200, @dev={0xfe, 0x80, '\x00', 0x38}, 0x89e9}, @in={0x2, 0x4e22, @empty}], 0x74) 1.025537102s ago: executing program 32 (id=685): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000000c00020002000000000000000800010000000000640007800c"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) (fail_nth: 6) 988.677967ms ago: executing program 33 (id=684): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c0f0008ac2abe0000000000e320fba7567b5fdb094cc0f9f478f43de14cf605190aeb4aca347d874614b4bce7c551eed32971bcce2be2114769e739839fc5e930f8c5af1ab8af8b4fb3fb14da060a21080c15b41087c6b1e8d799978896f4780067f3729e99e062584696b1e9f3a3433494629b5f8fd30946b09a863a665448564a29d1fef320f3eed50712e64c875fef39e10214762274df1731fe57b7a2ad50293e0ff800ccda964fd6b78dcd5967253037226179ce120a6b5551239603be125354690e272a78ed919a589ad5951b"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x800) 488.607811ms ago: executing program 34 (id=689): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@remote, @in=@loopback, 0x4e20, 0x13, 0x4e22, 0x1, 0xa, 0x80, 0x0, 0x2e}, {0x9, 0x7, 0xfffffffffffffff8, 0x9, 0x20d80eb7, 0x7, 0x6, 0x1000}, {0x4, 0x0, 0x0, 0xab4}, 0xfffffff8, 0x6e6bb9, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0x32}, 0x2, @in6=@mcast2, 0x3507, 0x2, 0x3, 0x1, 0x2, 0x6507, 0x2}}, 0xe8) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa40c1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={r1, r2+60000000}, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRESHEX=r3, @ANYBLOB="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", @ANYRES16=r3], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) 443.219224ms ago: executing program 35 (id=687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000000}, 0xc000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a00000001800090000000000fcdbdf251c140002"], 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000a00)={0xb, 0x1, {0x9, @usage=0x33d6, 0x0, 0x0, 0x0, 0x4, 0x1, 0xceb, 0xe869493bcdea829, @struct={0x0, 0x3}, 0x805, 0x8, [0x9, 0x2, 0x400, 0x4, 0x9, 0x4]}, {0x4, @usage=0x5, 0x0, 0x1ff, 0x984d, 0x6, 0xfffffffffffffff7, 0x1, 0x440, @struct={0xf, 0x800}, 0x9, 0x0, [0x7, 0x400, 0x4, 0x1000, 0x4, 0xffffffffffffffff]}, {0x2, @struct={0x8001, 0x7}, 0x0, 0x8, 0x7, 0x1, 0x4, 0x8, 0xc0, @usage=0x81, 0x1, 0x4, [0x7, 0xffffffff, 0x10, 0x9, 0x4, 0x100]}, {0x9, 0x8, 0x2}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000040)={0x4, 0x0, {0x7, @usage=0x7, 0x0, 0xa331, 0x3, 0x489e, 0x4, 0x1, 0x14, @usage=0x9, 0x8, 0x2f, [0x400, 0x81, 0xb, 0xfffffffffffff9bb, 0xdf, 0xf98d]}, {0xb, @struct={0x1, 0x7}, r8, 0x1, 0x14, 0x6, 0x8, 0x1, 0x80, @struct={0xe590, 0x9}, 0x0, 0x0, [0xfffffffffffffff8, 0x6, 0x9, 0x0, 0x5, 0x8000000000000000]}, {0x81, @usage=0x5, 0x0, 0xfffffffffffffffb, 0x3, 0x3, 0xd, 0xdf4, 0x0, @struct={0x40, 0x6}, 0x3e5, 0xd, [0x5, 0x8, 0x4, 0x8b9b, 0x5, 0x7]}, {0x7, 0x5, 0x6}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000440)={r9, 0x5, 0xffffffff80000000, 0x1}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x15, 0x5, 0x0) (async) getsockopt(r4, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000008c0)) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000000}, 0xc000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="a00000001800090000000000fcdbdf251c140002"], 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000a00)={0xb, 0x1, {0x9, @usage=0x33d6, 0x0, 0x0, 0x0, 0x4, 0x1, 0xceb, 0xe869493bcdea829, @struct={0x0, 0x3}, 0x805, 0x8, [0x9, 0x2, 0x400, 0x4, 0x9, 0x4]}, {0x4, @usage=0x5, 0x0, 0x1ff, 0x984d, 0x6, 0xfffffffffffffff7, 0x1, 0x440, @struct={0xf, 0x800}, 0x9, 0x0, [0x7, 0x400, 0x4, 0x1000, 0x4, 0xffffffffffffffff]}, {0x2, @struct={0x8001, 0x7}, 0x0, 0x8, 0x7, 0x1, 0x4, 0x8, 0xc0, @usage=0x81, 0x1, 0x4, [0x7, 0xffffffff, 0x10, 0x9, 0x4, 0x100]}, {0x9, 0x8, 0x2}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000040)={0x4, 0x0, {0x7, @usage=0x7, 0x0, 0xa331, 0x3, 0x489e, 0x4, 0x1, 0x14, @usage=0x9, 0x8, 0x2f, [0x400, 0x81, 0xb, 0xfffffffffffff9bb, 0xdf, 0xf98d]}, {0xb, @struct={0x1, 0x7}, r8, 0x1, 0x14, 0x6, 0x8, 0x1, 0x80, @struct={0xe590, 0x9}, 0x0, 0x0, [0xfffffffffffffff8, 0x6, 0x9, 0x0, 0x5, 0x8000000000000000]}, {0x81, @usage=0x5, 0x0, 0xfffffffffffffffb, 0x3, 0x3, 0xd, 0xdf4, 0x0, @struct={0x40, 0x6}, 0x3e5, 0xd, [0x5, 0x8, 0x4, 0x8b9b, 0x5, 0x7]}, {0x7, 0x5, 0x6}}) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000440)={r9, 0x5, 0xffffffff80000000, 0x1}) (async) 0s ago: executing program 36 (id=691): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="4a9cfde6de58979759ea18020000f9dcd1ff000000000000f59c000001000000b0000000ce88e7976ef60fa4c49500000000000000819acf5fbf50b464aea5c102257f01eb146b780d208f38a8c5bd6a82f8aba76fbf4fd62efda910f1eb9576cec01bd34e5209c59944ed"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x268}}, 0x4000800) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000045000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000011400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f30000000ffff00014000000020090002"], 0x2dc}}, 0x4008000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) write$nci(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="7105126b01034206050a"], 0x1b) socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f00000001c0)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r8, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x5, 0x7c43, @l2={'ib', 0x3a, 'macvlan0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000010) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e21, 0x1ff, @empty, 0x1}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0x200, @dev={0xfe, 0x80, '\x00', 0x38}, 0x89e9}, @in={0x2, 0x4e22, @empty}], 0x74) kernel console output (not intermixed with test programs): ][ T6517] team0: Port device dummy0 added [ 128.103593][ T6522] netlink: 'syz.2.215': attribute type 10 has an invalid length. [ 128.232590][ T6522] team0: Port device dummy0 removed [ 128.267503][ T6522] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.426968][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 128.514205][ T6530] FAULT_INJECTION: forcing a failure. [ 128.514205][ T6530] name failslab, interval 1, probability 0, space 0, times 0 [ 128.536938][ T6526] netlink: 184148 bytes leftover after parsing attributes in process `syz.1.217'. [ 128.592107][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.4.218 Not tainted syzkaller #0 PREEMPT(full) [ 128.592137][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.592149][ T6530] Call Trace: [ 128.592157][ T6530] [ 128.592165][ T6530] dump_stack_lvl+0xe8/0x150 [ 128.592196][ T6530] should_fail_ex+0x412/0x560 [ 128.592229][ T6530] should_failslab+0xa8/0x100 [ 128.592261][ T6530] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 128.592296][ T6530] ? __alloc_skb+0x1d0/0x7d0 [ 128.592320][ T6530] ? __local_bh_enable_ip+0xd0/0x130 [ 128.592347][ T6530] __alloc_skb+0x1d0/0x7d0 [ 128.592379][ T6530] netlink_dump+0x1d8/0xe10 [ 128.592421][ T6530] ? __pfx_netlink_dump+0x10/0x10 [ 128.592462][ T6530] ? netlink_recvmsg+0x5d6/0xa50 [ 128.592489][ T6530] ? kmem_cache_free+0x182/0x650 [ 128.592523][ T6530] netlink_recvmsg+0x690/0xa50 [ 128.592562][ T6530] ? __pfx_netlink_recvmsg+0x10/0x10 [ 128.592596][ T6530] ? __lock_acquire+0x6b5/0x2cf0 [ 128.592626][ T6530] ? __pfx_netlink_recvmsg+0x10/0x10 [ 128.592655][ T6530] sock_recvmsg_nosec+0x10c/0x140 [ 128.592683][ T6530] ____sys_recvmsg+0x3e3/0x4a0 [ 128.592733][ T6530] ? __pfx_____sys_recvmsg+0x10/0x10 [ 128.592780][ T6530] ? import_iovec+0x73/0xa0 [ 128.592813][ T6530] ___sys_recvmsg+0x215/0x590 [ 128.592839][ T6530] ? __pfx____sys_recvmsg+0x10/0x10 [ 128.592865][ T6530] ? __fget_files+0x2a/0x420 [ 128.592924][ T6530] do_recvmmsg+0x334/0x800 [ 128.592953][ T6530] ? __pfx_do_recvmmsg+0x10/0x10 [ 128.592985][ T6530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 128.593025][ T6530] __x64_sys_recvmmsg+0x198/0x250 [ 128.593048][ T6530] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 128.593077][ T6530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.593099][ T6530] do_syscall_64+0x15f/0xf80 [ 128.593116][ T6530] ? trace_irq_disable+0x3b/0x140 [ 128.593145][ T6530] ? clear_bhb_loop+0x40/0x90 [ 128.593170][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.593190][ T6530] RIP: 0033:0x7f5ef5d9cdd9 [ 128.593210][ T6530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.593227][ T6530] RSP: 002b:00007f5ef6d2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 128.593250][ T6530] RAX: ffffffffffffffda RBX: 00007f5ef6015fa0 RCX: 00007f5ef5d9cdd9 [ 128.593263][ T6530] RDX: 0400000000000166 RSI: 0000200000005180 RDI: 0000000000000003 [ 128.593275][ T6530] RBP: 00007f5ef6d2a090 R08: 0000000000000000 R09: 0000000000000000 [ 128.593286][ T6530] R10: 000000000001a000 R11: 0000000000000246 R12: 0000000000000001 [ 128.593297][ T6530] R13: 00007f5ef6016038 R14: 00007f5ef6015fa0 R15: 00007ffeee777548 [ 128.593327][ T6530] [ 130.507636][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 130.919240][ T6590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.233'. [ 130.975243][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 131.321457][ T3382] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.353114][ T3382] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.793082][ T6597] FAULT_INJECTION: forcing a failure. [ 131.793082][ T6597] name failslab, interval 1, probability 0, space 0, times 0 [ 131.807181][ T6597] CPU: 0 UID: 0 PID: 6597 Comm: syz.4.235 Not tainted syzkaller #0 PREEMPT(full) [ 131.807210][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.807221][ T6597] Call Trace: [ 131.807229][ T6597] [ 131.807238][ T6597] dump_stack_lvl+0xe8/0x150 [ 131.807269][ T6597] should_fail_ex+0x412/0x560 [ 131.807303][ T6597] should_failslab+0xa8/0x100 [ 131.807336][ T6597] __kmalloc_cache_noprof+0x88/0x660 [ 131.807364][ T6597] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 131.807385][ T6597] ? sctp_add_bind_addr+0x8c/0x370 [ 131.807421][ T6597] sctp_add_bind_addr+0x8c/0x370 [ 131.807456][ T6597] sctp_copy_local_addr_list+0x314/0x4f0 [ 131.807497][ T6597] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 131.807527][ T6597] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 131.807560][ T6597] ? sctp_v6_is_any+0x64/0x80 [ 131.807581][ T6597] ? sctp_copy_one_addr+0x93/0x360 [ 131.807615][ T6597] sctp_bind_addr_copy+0xb3/0x3c0 [ 131.807655][ T6597] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 131.807686][ T6597] sctp_connect_new_asoc+0x2ff/0x6b0 [ 131.807715][ T6597] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 131.807757][ T6597] ? sctp_inet6_send_verify+0x23a/0x300 [ 131.807786][ T6597] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 131.807813][ T6597] __sctp_connect+0x5cb/0xdc0 [ 131.807851][ T6597] ? __pfx___sctp_connect+0x10/0x10 [ 131.807874][ T6597] ? security_sctp_bind_connect+0x7e/0x2c0 [ 131.807899][ T6597] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 131.807931][ T6597] sctp_getsockopt_connectx3+0x227/0x360 [ 131.807960][ T6597] ? lock_sock_nested+0x6a/0x100 [ 131.807987][ T6597] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 131.808022][ T6597] ? sctp_getsockopt+0x12f/0xb90 [ 131.808048][ T6597] ? __local_bh_enable_ip+0xd0/0x130 [ 131.808076][ T6597] sctp_getsockopt+0x984/0xb90 [ 131.808100][ T6597] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 131.808126][ T6597] do_sock_getsockopt+0x51d/0x7e0 [ 131.808164][ T6597] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 131.808212][ T6597] ? __fget_files+0x3a0/0x420 [ 131.808236][ T6597] ? __fget_files+0x2a/0x420 [ 131.808269][ T6597] __x64_sys_getsockopt+0x1a4/0x240 [ 131.808306][ T6597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.808328][ T6597] do_syscall_64+0x15f/0xf80 [ 131.808347][ T6597] ? trace_irq_disable+0x3b/0x140 [ 131.808377][ T6597] ? clear_bhb_loop+0x40/0x90 [ 131.808403][ T6597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.808423][ T6597] RIP: 0033:0x7f5ef5d9cdd9 [ 131.808454][ T6597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.808471][ T6597] RSP: 002b:00007f5ef6d2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 131.808494][ T6597] RAX: ffffffffffffffda RBX: 00007f5ef6015fa0 RCX: 00007f5ef5d9cdd9 [ 131.808509][ T6597] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 131.808520][ T6597] RBP: 00007f5ef6d2a090 R08: 0000200000000140 R09: 0000000000000000 [ 131.808533][ T6597] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 131.808545][ T6597] R13: 00007f5ef6016038 R14: 00007f5ef6015fa0 R15: 00007ffeee777548 [ 131.808580][ T6597] [ 132.248628][ T6593] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 132.385261][ T3382] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.442042][ T3382] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.496746][ T6601] netlink: 140 bytes leftover after parsing attributes in process `syz.2.237'. [ 132.634529][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.238'. [ 132.683411][ T6604] block nbd0: not configured, cannot reconfigure [ 132.717866][ T6604] FAULT_INJECTION: forcing a failure. [ 132.717866][ T6604] name failslab, interval 1, probability 0, space 0, times 0 [ 132.741410][ T6604] CPU: 1 UID: 0 PID: 6604 Comm: syz.1.238 Not tainted syzkaller #0 PREEMPT(full) [ 132.741438][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 132.741450][ T6604] Call Trace: [ 132.741458][ T6604] [ 132.741467][ T6604] dump_stack_lvl+0xe8/0x150 [ 132.741498][ T6604] should_fail_ex+0x412/0x560 [ 132.741531][ T6604] should_failslab+0xa8/0x100 [ 132.741564][ T6604] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 132.741594][ T6604] ? __alloc_skb+0x1d0/0x7d0 [ 132.741620][ T6604] ? __local_bh_enable_ip+0xd0/0x130 [ 132.741655][ T6604] __alloc_skb+0x1d0/0x7d0 [ 132.741683][ T6604] ? netlink_ack_tlv_len+0x6c/0x210 [ 132.741714][ T6604] netlink_ack+0x146/0xa50 [ 132.741739][ T6604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 132.741779][ T6604] netlink_rcv_skb+0x2b6/0x4b0 [ 132.741809][ T6604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 132.741831][ T6604] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 132.741874][ T6604] ? down_read+0x270/0x2e0 [ 132.741892][ T6604] ? genl_rcv+0xd/0x40 [ 132.741913][ T6604] genl_rcv+0x28/0x40 [ 132.741932][ T6604] netlink_unicast+0x75c/0x8e0 [ 132.741970][ T6604] netlink_sendmsg+0x813/0xb40 [ 132.742009][ T6604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.742041][ T6604] ? aa_sock_msg_perm+0xf1/0x1b0 [ 132.742070][ T6604] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.742100][ T6604] ____sys_sendmsg+0x972/0x9f0 [ 132.742130][ T6604] ? __might_fault+0xaf/0x130 [ 132.742163][ T6604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.742200][ T6604] ? import_iovec+0x73/0xa0 [ 132.742232][ T6604] ___sys_sendmsg+0x2a5/0x360 [ 132.742259][ T6604] ? __lock_acquire+0x6b5/0x2cf0 [ 132.742286][ T6604] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.742352][ T6604] ? __fget_files+0x2a/0x420 [ 132.742375][ T6604] ? __fget_files+0x3a0/0x420 [ 132.742409][ T6604] __x64_sys_sendmsg+0x1bd/0x2a0 [ 132.742448][ T6604] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.742486][ T6604] ? __pfx_ksys_write+0x10/0x10 [ 132.742524][ T6604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.742545][ T6604] do_syscall_64+0x15f/0xf80 [ 132.742564][ T6604] ? trace_irq_disable+0x3b/0x140 [ 132.742594][ T6604] ? clear_bhb_loop+0x40/0x90 [ 132.742620][ T6604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.742640][ T6604] RIP: 0033:0x7f4af9f9cdd9 [ 132.742669][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.742686][ T6604] RSP: 002b:00007f4af81f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.742709][ T6604] RAX: ffffffffffffffda RBX: 00007f4afa215fa0 RCX: 00007f4af9f9cdd9 [ 132.742723][ T6604] RDX: 0000000020000804 RSI: 0000200000001900 RDI: 0000000000000004 [ 132.742737][ T6604] RBP: 00007f4af81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.742749][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.742761][ T6604] R13: 00007f4afa216038 R14: 00007f4afa215fa0 R15: 00007ffc4edfe108 [ 132.742796][ T6604] [ 133.135057][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.143009][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.661667][ T6629] syzkaller0: entered promiscuous mode [ 133.705786][ T6629] syzkaller0: entered allmulticast mode [ 133.734499][ T6629] tipc: Started in network mode [ 133.765426][ T6629] tipc: Node identity 26faf417f434, cluster identity 4711 [ 133.796836][ T6629] tipc: Enabled bearer , priority 0 [ 133.835446][ T6640] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.253'. [ 133.955549][ T6647] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 134.279289][ T6626] tipc: Resetting bearer [ 134.303587][ T6626] tipc: Disabling bearer [ 134.568835][ T6656] netlink: 72 bytes leftover after parsing attributes in process `syz.3.257'. [ 134.580297][ T6657] SET target dimension over the limit! [ 135.319203][ T6683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.348203][ T6683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.497662][ T6689] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.268'. [ 135.666226][ T6697] netlink: 44 bytes leftover after parsing attributes in process `syz.4.271'. [ 135.680776][ T6697] netlink: 43 bytes leftover after parsing attributes in process `syz.4.271'. [ 135.708986][ T6695] syzkaller0: entered promiscuous mode [ 135.723182][ T6697] netlink: 'syz.4.271': attribute type 6 has an invalid length. [ 135.723244][ T6695] syzkaller0: entered allmulticast mode [ 135.738014][ T6697] netlink: 'syz.4.271': attribute type 5 has an invalid length. [ 135.738051][ T6697] netlink: 43 bytes leftover after parsing attributes in process `syz.4.271'. [ 135.764245][ T6695] tipc: Started in network mode [ 135.770680][ T6695] tipc: Node identity 8e455f2f558f, cluster identity 4711 [ 135.778329][ T6695] tipc: Enabled bearer , priority 0 [ 135.813357][ T6694] tipc: Resetting bearer [ 135.890479][ T6694] tipc: Disabling bearer [ 136.095526][ T6706] netlink: 'syz.4.275': attribute type 11 has an invalid length. [ 136.105930][ T6711] netlink: 'syz.2.277': attribute type 10 has an invalid length. [ 136.114776][ T6706] netlink: 'syz.4.275': attribute type 4 has an invalid length. [ 136.127807][ T6706] netlink: 199780 bytes leftover after parsing attributes in process `syz.4.275'. [ 136.139429][ T6711] bond0: (slave dummy0): Releasing backup interface [ 136.153841][ T6709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.276'. [ 136.178651][ T6714] netlink: 72 bytes leftover after parsing attributes in process `syz.3.279'. [ 136.188071][ T6715] netlink: 'syz.2.277': attribute type 10 has an invalid length. [ 136.191017][ T6716] FAULT_INJECTION: forcing a failure. [ 136.191017][ T6716] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 136.198572][ T6711] team0: Port device dummy0 added [ 136.216367][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.1.278 Not tainted syzkaller #0 PREEMPT(full) [ 136.216394][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.216406][ T6716] Call Trace: [ 136.216414][ T6716] [ 136.216422][ T6716] dump_stack_lvl+0xe8/0x150 [ 136.216452][ T6716] should_fail_ex+0x412/0x560 [ 136.216484][ T6716] prepare_alloc_pages+0x22a/0x650 [ 136.216522][ T6716] __alloc_frozen_pages_noprof+0x12f/0x380 [ 136.216556][ T6716] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 136.216589][ T6716] ? __pfx_policy_nodemask+0x10/0x10 [ 136.216632][ T6716] ? __lock_acquire+0x6b5/0x2cf0 [ 136.216657][ T6716] alloc_pages_mpol+0x235/0x490 [ 136.216694][ T6716] folio_alloc_mpol_noprof+0x39/0x160 [ 136.216728][ T6716] vma_alloc_folio_noprof+0xe1/0x1e0 [ 136.216752][ T6716] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 136.216774][ T6716] ? __pte_offset_map+0x29/0x240 [ 136.216800][ T6716] ? __pte_offset_map+0x29/0x240 [ 136.216828][ T6716] do_pte_missing+0x159d/0x33f0 [ 136.216871][ T6716] ? handle_mm_fault+0xee/0x3170 [ 136.216901][ T6716] handle_mm_fault+0x1bd7/0x3170 [ 136.216943][ T6716] ? handle_mm_fault+0xee/0x3170 [ 136.216977][ T6716] ? __pfx_handle_mm_fault+0x10/0x10 [ 136.217003][ T6716] ? follow_page_pte+0x6b5/0xe50 [ 136.217038][ T6716] ? __pfx_follow_page_pte+0x10/0x10 [ 136.217076][ T6716] __get_user_pages+0x1683/0x2720 [ 136.217150][ T6716] __gup_longterm_locked+0x3db/0x1630 [ 136.217189][ T6716] ? xdp_umem_pin_pages+0xca/0x340 [ 136.217235][ T6716] pin_user_pages+0x9d/0xd0 [ 136.217264][ T6716] xdp_umem_pin_pages+0x11b/0x340 [ 136.217299][ T6716] xdp_umem_create+0x631/0x8b0 [ 136.217339][ T6716] xsk_setsockopt+0x860/0x990 [ 136.217369][ T6716] ? __pfx_xsk_setsockopt+0x10/0x10 [ 136.217403][ T6716] ? aa_sock_opt_perm+0xff/0x1a0 [ 136.217434][ T6716] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 136.217461][ T6716] ? __pfx_xsk_setsockopt+0x10/0x10 [ 136.217489][ T6716] do_sock_setsockopt+0x17c/0x1b0 [ 136.217525][ T6716] __x64_sys_setsockopt+0x13d/0x1b0 [ 136.217557][ T6716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.217579][ T6716] do_syscall_64+0x15f/0xf80 [ 136.217598][ T6716] ? trace_irq_disable+0x3b/0x140 [ 136.217635][ T6716] ? clear_bhb_loop+0x40/0x90 [ 136.217661][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.217680][ T6716] RIP: 0033:0x7f4af9f9cdd9 [ 136.217700][ T6716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.217716][ T6716] RSP: 002b:00007f4af81f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 136.217738][ T6716] RAX: ffffffffffffffda RBX: 00007f4afa215fa0 RCX: 00007f4af9f9cdd9 [ 136.217751][ T6716] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 136.217763][ T6716] RBP: 00007f4af81f6090 R08: 0000000000000020 R09: 0000000000000000 [ 136.217774][ T6716] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 136.217786][ T6716] R13: 00007f4afa216038 R14: 00007f4afa215fa0 R15: 00007ffc4edfe108 [ 136.217818][ T6716] [ 136.603328][ T6715] team0: Port device dummy0 removed [ 136.611665][ T6723] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.280'. [ 136.662053][ T6715] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 136.997087][ T6738] FAULT_INJECTION: forcing a failure. [ 136.997087][ T6738] name failslab, interval 1, probability 0, space 0, times 0 [ 137.029074][ T6738] CPU: 1 UID: 0 PID: 6738 Comm: syz.1.284 Not tainted syzkaller #0 PREEMPT(full) [ 137.029103][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.029115][ T6738] Call Trace: [ 137.029123][ T6738] [ 137.029131][ T6738] dump_stack_lvl+0xe8/0x150 [ 137.029162][ T6738] should_fail_ex+0x412/0x560 [ 137.029194][ T6738] should_failslab+0xa8/0x100 [ 137.029227][ T6738] __kmalloc_cache_noprof+0x88/0x660 [ 137.029253][ T6738] ? __pfx_stack_trace_save+0x10/0x10 [ 137.029282][ T6738] ? rtnl_newlink+0x136/0x1bb0 [ 137.029314][ T6738] rtnl_newlink+0x136/0x1bb0 [ 137.029341][ T6738] ? kasan_save_track+0x3e/0x80 [ 137.029366][ T6738] ? kasan_save_free_info+0x46/0x50 [ 137.029384][ T6738] ? __kasan_slab_free+0x5c/0x80 [ 137.029409][ T6738] ? dev_hard_start_xmit+0x2cd/0x830 [ 137.029427][ T6738] ? __dev_queue_xmit+0x14d9/0x3950 [ 137.029445][ T6738] ? __netlink_deliver_tap+0x5ad/0x850 [ 137.029472][ T6738] ? netlink_deliver_tap+0x19c/0x1b0 [ 137.029497][ T6738] ? netlink_unicast+0x730/0x8e0 [ 137.029519][ T6738] ? netlink_sendmsg+0x813/0xb40 [ 137.029548][ T6738] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.029590][ T6738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.029646][ T6738] ? kasan_quarantine_put+0xbb/0x1f0 [ 137.029672][ T6738] ? lockdep_hardirqs_on+0x7a/0x110 [ 137.029705][ T6738] ? nlmon_xmit+0xb0/0x100 [ 137.029728][ T6738] ? kmem_cache_free+0x182/0x650 [ 137.029766][ T6738] ? __lock_acquire+0x6b5/0x2cf0 [ 137.029793][ T6738] ? __dev_queue_xmit+0x2b6/0x3950 [ 137.029816][ T6738] ? __local_bh_enable_ip+0xd0/0x130 [ 137.029837][ T6738] ? lockdep_hardirqs_on+0x7a/0x110 [ 137.029865][ T6738] ? __dev_queue_xmit+0x2b6/0x3950 [ 137.029883][ T6738] ? __local_bh_enable_ip+0xd0/0x130 [ 137.029902][ T6738] ? __dev_queue_xmit+0x2b6/0x3950 [ 137.029937][ T6738] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 137.029980][ T6738] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.030005][ T6738] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 137.030035][ T6738] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 137.030060][ T6738] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.030084][ T6738] ? ref_tracker_free+0x693/0x840 [ 137.030114][ T6738] ? __pfx_ref_tracker_free+0x10/0x10 [ 137.030151][ T6738] netlink_rcv_skb+0x232/0x4b0 [ 137.030180][ T6738] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.030208][ T6738] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.030255][ T6738] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.030283][ T6738] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.030315][ T6738] netlink_unicast+0x75c/0x8e0 [ 137.030349][ T6738] netlink_sendmsg+0x813/0xb40 [ 137.030387][ T6738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.030419][ T6738] ? aa_sock_msg_perm+0xf1/0x1b0 [ 137.030447][ T6738] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.030478][ T6738] ____sys_sendmsg+0x972/0x9f0 [ 137.030507][ T6738] ? __might_fault+0xaf/0x130 [ 137.030539][ T6738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.030579][ T6738] ? import_iovec+0x73/0xa0 [ 137.030611][ T6738] ___sys_sendmsg+0x2a5/0x360 [ 137.030639][ T6738] ? __lock_acquire+0x6b5/0x2cf0 [ 137.030664][ T6738] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.030727][ T6738] ? __fget_files+0x2a/0x420 [ 137.030751][ T6738] ? __fget_files+0x3a0/0x420 [ 137.030785][ T6738] __x64_sys_sendmsg+0x1bd/0x2a0 [ 137.030817][ T6738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.030856][ T6738] ? __pfx_ksys_write+0x10/0x10 [ 137.030893][ T6738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.030914][ T6738] do_syscall_64+0x15f/0xf80 [ 137.030941][ T6738] ? trace_irq_disable+0x3b/0x140 [ 137.030971][ T6738] ? clear_bhb_loop+0x40/0x90 [ 137.030995][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.031015][ T6738] RIP: 0033:0x7f4af9f9cdd9 [ 137.031036][ T6738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.031052][ T6738] RSP: 002b:00007f4af81d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.031075][ T6738] RAX: ffffffffffffffda RBX: 00007f4afa216090 RCX: 00007f4af9f9cdd9 [ 137.031090][ T6738] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 137.031102][ T6738] RBP: 00007f4af81d5090 R08: 0000000000000000 R09: 0000000000000000 [ 137.031114][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.031125][ T6738] R13: 00007f4afa216128 R14: 00007f4afa216090 R15: 00007ffc4edfe108 [ 137.031158][ T6738] [ 137.033077][ T6739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.505843][ T6745] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 137.601430][ T6752] syzkaller0: entered promiscuous mode [ 137.607904][ T6752] syzkaller0: entered allmulticast mode [ 137.619827][ T6752] tipc: Started in network mode [ 137.624917][ T6752] tipc: Node identity 2a694e96b1e2, cluster identity 4711 [ 137.632960][ T6752] tipc: Enabled bearer , priority 0 [ 137.697800][ T6751] tipc: Resetting bearer [ 137.761205][ T6751] tipc: Disabling bearer [ 138.002796][ T6771] tipc: Enabled bearer , priority 0 [ 138.036231][ T6771] syzkaller0: entered promiscuous mode [ 138.053936][ T6771] syzkaller0: entered allmulticast mode [ 138.077939][ T6780] FAULT_INJECTION: forcing a failure. [ 138.077939][ T6780] name failslab, interval 1, probability 0, space 0, times 0 [ 138.113599][ T6780] CPU: 0 UID: 0 PID: 6780 Comm: syz.3.296 Not tainted syzkaller #0 PREEMPT(full) [ 138.113629][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 138.113640][ T6780] Call Trace: [ 138.113648][ T6780] [ 138.113657][ T6780] dump_stack_lvl+0xe8/0x150 [ 138.113688][ T6780] should_fail_ex+0x412/0x560 [ 138.113721][ T6780] should_failslab+0xa8/0x100 [ 138.113752][ T6780] __kmalloc_noprof+0xe8/0x760 [ 138.113781][ T6780] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 138.113813][ T6780] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 138.113847][ T6780] genl_family_rcv_msg_doit+0xd9/0x330 [ 138.113888][ T6780] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 138.113922][ T6780] ? apparmor_capable+0x126/0x170 [ 138.113945][ T6780] ? bpf_lsm_capable+0x9/0x20 [ 138.113966][ T6780] ? security_capable+0x7e/0x2c0 [ 138.114000][ T6780] genl_rcv_msg+0x61c/0x7a0 [ 138.114031][ T6780] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.114051][ T6780] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 138.114077][ T6780] ? __pfx_nl80211_set_interface+0x10/0x10 [ 138.114105][ T6780] ? __pfx_nl80211_post_doit+0x10/0x10 [ 138.114132][ T6780] ? __pfx_ref_tracker_free+0x10/0x10 [ 138.114173][ T6780] netlink_rcv_skb+0x232/0x4b0 [ 138.114204][ T6780] ? __pfx_genl_rcv_msg+0x10/0x10 [ 138.114229][ T6780] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.114276][ T6780] ? down_read+0x270/0x2e0 [ 138.114297][ T6780] ? genl_rcv+0xd/0x40 [ 138.114322][ T6780] genl_rcv+0x28/0x40 [ 138.114343][ T6780] netlink_unicast+0x75c/0x8e0 [ 138.114382][ T6780] netlink_sendmsg+0x813/0xb40 [ 138.114423][ T6780] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.114455][ T6780] ? aa_sock_msg_perm+0xf1/0x1b0 [ 138.114489][ T6780] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.114519][ T6780] ____sys_sendmsg+0x972/0x9f0 [ 138.114548][ T6780] ? __might_fault+0xaf/0x130 [ 138.114580][ T6780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.114619][ T6780] ? import_iovec+0x73/0xa0 [ 138.114652][ T6780] ___sys_sendmsg+0x2a5/0x360 [ 138.114678][ T6780] ? __lock_acquire+0x6b5/0x2cf0 [ 138.114703][ T6780] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.114769][ T6780] ? __fget_files+0x2a/0x420 [ 138.114791][ T6780] ? __fget_files+0x3a0/0x420 [ 138.114826][ T6780] __x64_sys_sendmsg+0x1bd/0x2a0 [ 138.114860][ T6780] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.114910][ T6780] ? __pfx_ksys_write+0x10/0x10 [ 138.114949][ T6780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.114971][ T6780] do_syscall_64+0x15f/0xf80 [ 138.114988][ T6780] ? trace_irq_disable+0x3b/0x140 [ 138.115018][ T6780] ? clear_bhb_loop+0x40/0x90 [ 138.115043][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.115062][ T6780] RIP: 0033:0x7f4d6e19cdd9 [ 138.115082][ T6780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.115098][ T6780] RSP: 002b:00007f4d6c3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.115120][ T6780] RAX: ffffffffffffffda RBX: 00007f4d6e415fa0 RCX: 00007f4d6e19cdd9 [ 138.115134][ T6780] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000003 [ 138.115146][ T6780] RBP: 00007f4d6c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.115159][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.115170][ T6780] R13: 00007f4d6e416038 R14: 00007f4d6e415fa0 R15: 00007fff2f8e5778 [ 138.115204][ T6780] [ 138.572769][ T6783] tipc: Resetting bearer [ 138.629542][ T6770] tipc: Resetting bearer [ 139.028875][ T6770] tipc: Disabling bearer [ 139.233296][ T6807] openvswitch: netlink: Flow actions attr not present in new flow. [ 139.438523][ T6809] syzkaller0: entered promiscuous mode [ 139.444846][ T6813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.464643][ T6809] syzkaller0: entered allmulticast mode [ 139.476540][ T6815] __nla_validate_parse: 4 callbacks suppressed [ 139.476559][ T6815] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.305'. [ 139.496089][ T6813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.519564][ T6809] tipc: Enabled bearer , priority 0 [ 139.545227][ T6808] tipc: Resetting bearer [ 139.594945][ T6808] tipc: Disabling bearer [ 139.732400][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.310'. [ 139.762366][ T6827] netem: incorrect ge model size [ 139.796601][ T6827] netem: change failed [ 139.880901][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.310'. [ 140.064658][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 140.178520][ T6822] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.322284][ T6845] ip6gre1: entered allmulticast mode [ 140.332576][ T6851] Cannot find set identified by id 65534 to match [ 140.343308][ T6845] team0: Device ip6gre1 is of different type [ 140.448158][ T6822] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.535293][ T6856] netlink: 104 bytes leftover after parsing attributes in process `syz.3.318'. [ 140.565220][ T6856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.318'. [ 140.759281][ T6865] FAULT_INJECTION: forcing a failure. [ 140.759281][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 140.777827][ T6822] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.830919][ T6865] CPU: 1 UID: 0 PID: 6865 Comm: syz.0.320 Not tainted syzkaller #0 PREEMPT(full) [ 140.830947][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.830959][ T6865] Call Trace: [ 140.830966][ T6865] [ 140.830976][ T6865] dump_stack_lvl+0xe8/0x150 [ 140.831006][ T6865] should_fail_ex+0x412/0x560 [ 140.831036][ T6865] should_failslab+0xa8/0x100 [ 140.831070][ T6865] __kmalloc_noprof+0xe8/0x760 [ 140.831103][ T6865] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 140.831135][ T6865] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 140.831167][ T6865] genl_family_rcv_msg_doit+0xd9/0x330 [ 140.831199][ T6865] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.831227][ T6865] ? __pfx_genl_get_cmd+0x10/0x10 [ 140.831246][ T6865] ? stack_trace_save+0xa9/0x100 [ 140.831272][ T6865] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 140.831295][ T6865] ? __lock_acquire+0x6b5/0x2cf0 [ 140.831325][ T6865] genl_rcv_msg+0x61c/0x7a0 [ 140.831355][ T6865] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.831378][ T6865] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 140.831413][ T6865] netlink_rcv_skb+0x232/0x4b0 [ 140.831443][ T6865] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.831468][ T6865] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.831516][ T6865] ? down_read+0x270/0x2e0 [ 140.831536][ T6865] ? genl_rcv+0xd/0x40 [ 140.831560][ T6865] genl_rcv+0x28/0x40 [ 140.831580][ T6865] netlink_unicast+0x75c/0x8e0 [ 140.831621][ T6865] netlink_sendmsg+0x813/0xb40 [ 140.831660][ T6865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.831693][ T6865] ? aa_sock_msg_perm+0xf1/0x1b0 [ 140.831723][ T6865] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.831755][ T6865] ____sys_sendmsg+0x972/0x9f0 [ 140.831786][ T6865] ? __might_fault+0xaf/0x130 [ 140.831820][ T6865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.831859][ T6865] ? import_iovec+0x73/0xa0 [ 140.831893][ T6865] ___sys_sendmsg+0x2a5/0x360 [ 140.831930][ T6865] ? __lock_acquire+0x6b5/0x2cf0 [ 140.831958][ T6865] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.832031][ T6865] ? __fget_files+0x2a/0x420 [ 140.832054][ T6865] ? __fget_files+0x3a0/0x420 [ 140.832091][ T6865] __x64_sys_sendmsg+0x1bd/0x2a0 [ 140.832126][ T6865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.832168][ T6865] ? __pfx_ksys_write+0x10/0x10 [ 140.832208][ T6865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.832230][ T6865] do_syscall_64+0x15f/0xf80 [ 140.832248][ T6865] ? trace_irq_disable+0x3b/0x140 [ 140.832278][ T6865] ? clear_bhb_loop+0x40/0x90 [ 140.832304][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.832325][ T6865] RIP: 0033:0x7f37b339cdd9 [ 140.832345][ T6865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.832361][ T6865] RSP: 002b:00007f37b424c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.832385][ T6865] RAX: ffffffffffffffda RBX: 00007f37b3615fa0 RCX: 00007f37b339cdd9 [ 140.832399][ T6865] RDX: 0000000020000804 RSI: 0000200000001900 RDI: 0000000000000004 [ 140.832412][ T6865] RBP: 00007f37b424c090 R08: 0000000000000000 R09: 0000000000000000 [ 140.832425][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.832437][ T6865] R13: 00007f37b3616038 R14: 00007f37b3615fa0 R15: 00007ffde2271608 [ 140.832472][ T6865] [ 141.407409][ T6822] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.526794][ T6874] syzkaller0: entered promiscuous mode [ 141.554605][ T6874] syzkaller0: entered allmulticast mode [ 141.604147][ T6874] tipc: Started in network mode [ 141.625880][ T6874] tipc: Node identity 2632ad5d89c5, cluster identity 4711 [ 141.640210][ T6874] tipc: Enabled bearer , priority 0 [ 141.652694][ T6873] tipc: Resetting bearer [ 141.694979][ T6873] tipc: Disabling bearer [ 141.741744][ T42] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.822131][ T145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.894365][ T145] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.977479][ T145] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.031959][ T6892] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 142.669128][ T6916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.713653][ T6916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.420104][ T6928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.336'. [ 143.733399][ T6941] openvswitch: netlink: IPv4 tunnel dst address is zero [ 144.475441][ T6960] syzkaller0: entered promiscuous mode [ 144.486182][ T6960] syzkaller0: entered allmulticast mode [ 144.542998][ T6960] tipc: Started in network mode [ 144.556812][ T6960] tipc: Node identity 622b5a1d7ad1, cluster identity 4711 [ 144.564348][ T6960] tipc: Enabled bearer , priority 0 [ 144.593841][ T6958] tipc: Resetting bearer [ 144.621010][ T6958] tipc: Disabling bearer [ 144.990913][ T6977] netlink: 72 bytes leftover after parsing attributes in process `syz.3.345'. [ 145.847535][ T6973] syz.1.343 (6973) used greatest stack depth: 17408 bytes left [ 145.918983][ T6998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.964399][ T6998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.390067][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.407765][ T7008] netlink: 72 bytes leftover after parsing attributes in process `syz.1.353'. [ 146.436652][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.702928][ T7016] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.729180][ T7018] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 146.989964][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.362'. [ 147.118305][ T7040] netlink: 'syz.2.364': attribute type 3 has an invalid length. [ 147.138834][ T7040] netlink: 'syz.2.364': attribute type 3 has an invalid length. [ 147.169768][ T7042] netlink: 'syz.3.366': attribute type 11 has an invalid length. [ 147.174276][ T7040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.364'. [ 147.231098][ T7042] netlink: 7 bytes leftover after parsing attributes in process `syz.3.366'. [ 147.273135][ T7042] sit0: entered promiscuous mode [ 147.344490][ T7042] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 147.402600][ T7042] netlink: 1 bytes leftover after parsing attributes in process `syz.3.366'. [ 147.417925][ T7052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 147.486559][ T7054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.542909][ T7054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.623771][ T7056] syzkaller0: entered promiscuous mode [ 147.634938][ T7056] syzkaller0: entered allmulticast mode [ 147.670928][ T7056] tipc: Enabled bearer , priority 0 [ 147.693583][ T7055] tipc: Resetting bearer [ 147.766232][ T7055] tipc: Disabling bearer [ 147.920105][ T7069] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.376'. [ 148.059122][ T7077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'. [ 148.151497][ T7082] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 148.207156][ T7077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'. [ 148.236651][ T7085] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 148.394368][ T7077] ip6gre1: left allmulticast mode [ 148.402873][ T7077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.412292][ T7077] gretap1: left allmulticast mode [ 148.420375][ T7077] ip6gre2: left promiscuous mode [ 148.517750][ T7097] block nbd0: not configured, cannot reconfigure [ 148.982089][ T7110] FAULT_INJECTION: forcing a failure. [ 148.982089][ T7110] name failslab, interval 1, probability 0, space 0, times 0 [ 149.057204][ T7110] CPU: 1 UID: 0 PID: 7110 Comm: syz.2.387 Not tainted syzkaller #0 PREEMPT(full) [ 149.057233][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.057245][ T7110] Call Trace: [ 149.057253][ T7110] [ 149.057261][ T7110] dump_stack_lvl+0xe8/0x150 [ 149.057293][ T7110] should_fail_ex+0x412/0x560 [ 149.057325][ T7110] should_failslab+0xa8/0x100 [ 149.057355][ T7110] ? skb_clone+0x212/0x3a0 [ 149.057376][ T7110] kmem_cache_alloc_noprof+0x87/0x650 [ 149.057402][ T7110] ? sk_filter_trim_cap+0x19e/0xce0 [ 149.057431][ T7110] skb_clone+0x212/0x3a0 [ 149.057455][ T7110] __netlink_deliver_tap+0x404/0x850 [ 149.057497][ T7110] ? netlink_deliver_tap+0x2e/0x1b0 [ 149.057528][ T7110] netlink_deliver_tap+0x19c/0x1b0 [ 149.057558][ T7110] netlink_dump+0x8ed/0xe10 [ 149.057599][ T7110] ? __pfx_netlink_dump+0x10/0x10 [ 149.057658][ T7110] netlink_recvmsg+0x690/0xa50 [ 149.057697][ T7110] ? __pfx_netlink_recvmsg+0x10/0x10 [ 149.057731][ T7110] ? __lock_acquire+0x6b5/0x2cf0 [ 149.057753][ T7110] ? aa_sock_msg_perm+0xf1/0x1b0 [ 149.057782][ T7110] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 149.057807][ T7110] ? security_socket_recvmsg+0x7e/0x2c0 [ 149.057838][ T7110] ? __pfx_netlink_recvmsg+0x10/0x10 [ 149.057867][ T7110] sock_recvmsg+0x172/0x1b0 [ 149.057895][ T7110] ____sys_recvmsg+0x1e6/0x4a0 [ 149.057936][ T7110] ? __pfx_____sys_recvmsg+0x10/0x10 [ 149.057984][ T7110] ? import_iovec+0x73/0xa0 [ 149.058018][ T7110] ___sys_recvmsg+0x215/0x590 [ 149.058035][ T7110] ? get_pid_task+0x20/0x1f0 [ 149.058066][ T7110] ? __pfx____sys_recvmsg+0x10/0x10 [ 149.058091][ T7110] ? __fget_files+0x2a/0x420 [ 149.058135][ T7110] ? __fget_files+0x3a0/0x420 [ 149.058171][ T7110] __x64_sys_recvmsg+0x1ba/0x2a0 [ 149.058194][ T7110] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 149.058225][ T7110] ? __pfx_ksys_write+0x10/0x10 [ 149.058263][ T7110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.058285][ T7110] do_syscall_64+0x15f/0xf80 [ 149.058303][ T7110] ? trace_irq_disable+0x3b/0x140 [ 149.058332][ T7110] ? clear_bhb_loop+0x40/0x90 [ 149.058358][ T7110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.058377][ T7110] RIP: 0033:0x7f9e3d79cdd9 [ 149.058397][ T7110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.058413][ T7110] RSP: 002b:00007f9e3b9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 149.058435][ T7110] RAX: ffffffffffffffda RBX: 00007f9e3da16090 RCX: 00007f9e3d79cdd9 [ 149.058449][ T7110] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 149.058461][ T7110] RBP: 00007f9e3b9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 149.058473][ T7110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.058484][ T7110] R13: 00007f9e3da16128 R14: 00007f9e3da16090 R15: 00007ffc81249598 [ 149.058518][ T7110] [ 149.513700][ T7116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.591096][ T7116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.541245][ T7160] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 150.572921][ T7160] __nla_validate_parse: 85 callbacks suppressed [ 150.572944][ T7160] netlink: 1 bytes leftover after parsing attributes in process `syz.3.408'. [ 150.602000][ T7161] --map-set only usable from mangle table [ 150.628618][ T7164] SET target dimension over the limit! [ 150.694764][ T7166] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.410'. [ 151.154080][ T7182] netlink: 'syz.1.416': attribute type 10 has an invalid length. [ 151.208016][ T7182] team0: Device dummy0 is of different type [ 151.214499][ T7188] netlink: 'syz.1.416': attribute type 10 has an invalid length. [ 151.240054][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.418'. [ 151.251302][ T7188] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 151.260550][ T7188] dummy0: entered promiscuous mode [ 151.533433][ T7199] FAULT_INJECTION: forcing a failure. [ 151.533433][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 151.574250][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz.2.423 Not tainted syzkaller #0 PREEMPT(full) [ 151.574278][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.574291][ T7199] Call Trace: [ 151.574298][ T7199] [ 151.574306][ T7199] dump_stack_lvl+0xe8/0x150 [ 151.574341][ T7199] should_fail_ex+0x412/0x560 [ 151.574374][ T7199] should_failslab+0xa8/0x100 [ 151.574405][ T7199] __kmalloc_node_noprof+0xf0/0x7c0 [ 151.574434][ T7199] ? alloc_slab_obj_exts+0xbf/0x250 [ 151.574465][ T7199] alloc_slab_obj_exts+0xbf/0x250 [ 151.574492][ T7199] __memcg_slab_post_alloc_hook+0x5c4/0xe80 [ 151.574543][ T7199] kmem_cache_alloc_node_noprof+0x40e/0x690 [ 151.574572][ T7199] ? __alloc_skb+0x1d0/0x7d0 [ 151.574606][ T7199] ? kmem_cache_alloc_node_noprof+0x23e/0x690 [ 151.574637][ T7199] __alloc_skb+0x1d0/0x7d0 [ 151.574668][ T7199] alloc_skb_with_frags+0xc8/0x760 [ 151.574694][ T7199] ? __pfx_css_rstat_updated+0x10/0x10 [ 151.574725][ T7199] sock_alloc_send_pskb+0x878/0x990 [ 151.574764][ T7199] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 151.574798][ T7199] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 151.574831][ T7199] unix_dgram_sendmsg+0x460/0x18d0 [ 151.574860][ T7199] ? __pfx_handle_mm_fault+0x10/0x10 [ 151.574889][ T7199] ? __up_read+0x291/0x6b0 [ 151.574922][ T7199] ? __pfx___up_read+0x10/0x10 [ 151.574952][ T7199] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 151.574989][ T7199] ? aa_sock_msg_perm+0xda/0x1b0 [ 151.575016][ T7199] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 151.575045][ T7199] ____sys_sendmsg+0x972/0x9f0 [ 151.575074][ T7199] ? irqentry_exit+0x218/0x730 [ 151.575093][ T7199] ? trace_irq_disable+0x3b/0x140 [ 151.575128][ T7199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.575167][ T7199] ? import_iovec+0x73/0xa0 [ 151.575200][ T7199] ___sys_sendmsg+0x2a5/0x360 [ 151.575235][ T7199] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.575262][ T7199] ? __lock_acquire+0x6b5/0x2cf0 [ 151.575334][ T7199] __sys_sendmmsg+0x27c/0x4e0 [ 151.575370][ T7199] ? __pfx___sys_sendmmsg+0x10/0x10 [ 151.575397][ T7199] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 151.575445][ T7199] ? ksys_write+0x242/0x270 [ 151.575476][ T7199] ? __pfx_ksys_write+0x10/0x10 [ 151.575511][ T7199] __x64_sys_sendmmsg+0xa0/0xc0 [ 151.575540][ T7199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.575562][ T7199] do_syscall_64+0x15f/0xf80 [ 151.575579][ T7199] ? trace_irq_disable+0x3b/0x140 [ 151.575616][ T7199] ? clear_bhb_loop+0x40/0x90 [ 151.575641][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.575659][ T7199] RIP: 0033:0x7f9e3d79cdd9 [ 151.575679][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.575695][ T7199] RSP: 002b:00007f9e3e578028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 151.575716][ T7199] RAX: ffffffffffffffda RBX: 00007f9e3da15fa0 RCX: 00007f9e3d79cdd9 [ 151.575731][ T7199] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000004 [ 151.575744][ T7199] RBP: 00007f9e3e578090 R08: 0000000000000000 R09: 0000000000000000 [ 151.575756][ T7199] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 151.575768][ T7199] R13: 00007f9e3da16038 R14: 00007f9e3da15fa0 R15: 00007ffc81249598 [ 151.575800][ T7199] [ 151.977000][ T7206] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.425'. [ 152.007136][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.425'. [ 152.008189][ T7205] tipc: Enabled bearer , priority 0 [ 152.208619][ T7204] tipc: Disabling bearer [ 152.266746][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.430'. [ 152.754428][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 153.223365][ T7240] netlink: 'syz.2.437': attribute type 10 has an invalid length. [ 153.288788][ T7240] bond0: (slave dummy0): Releasing backup interface [ 153.307234][ T7247] netlink: 'syz.2.437': attribute type 10 has an invalid length. [ 153.351172][ T7240] team0: Port device dummy0 added [ 153.367957][ T7224] infiniband syz0: set active [ 153.392783][ T7224] infiniband syz0: added bridge_slave_1 [ 153.404774][ T7247] team0: Port device dummy0 removed [ 153.447384][ T7224] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 153.463958][ T7224] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 153.477844][ T7247] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.481677][ T7224] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 153.504781][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'. [ 153.561224][ T7224] RDS/IB: syz0: added [ 153.570870][ T7224] smc: adding ib device syz0 with port count 1 [ 153.578419][ T7224] smc: ib device syz0 port 1 has no pnetid [ 154.156856][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 154.532731][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.446'. [ 154.581941][ T7281] FAULT_INJECTION: forcing a failure. [ 154.581941][ T7281] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 154.602733][ T7281] CPU: 0 UID: 0 PID: 7281 Comm: syz.1.448 Not tainted syzkaller #0 PREEMPT(full) [ 154.602763][ T7281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 154.602774][ T7281] Call Trace: [ 154.602782][ T7281] [ 154.602790][ T7281] dump_stack_lvl+0xe8/0x150 [ 154.602819][ T7281] should_fail_ex+0x412/0x560 [ 154.602852][ T7281] prepare_alloc_pages+0x22a/0x650 [ 154.602893][ T7281] __alloc_frozen_pages_noprof+0x12f/0x380 [ 154.602930][ T7281] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 154.602966][ T7281] ? __pfx_policy_nodemask+0x10/0x10 [ 154.603002][ T7281] ? __lock_acquire+0x6b5/0x2cf0 [ 154.603029][ T7281] alloc_pages_mpol+0x235/0x490 [ 154.603066][ T7281] folio_alloc_mpol_noprof+0x39/0x160 [ 154.603097][ T7281] vma_alloc_folio_noprof+0xe1/0x1e0 [ 154.603121][ T7281] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 154.603142][ T7281] ? __pte_offset_map+0x29/0x240 [ 154.603167][ T7281] ? __pte_offset_map+0x29/0x240 [ 154.603195][ T7281] do_pte_missing+0x159d/0x33f0 [ 154.603238][ T7281] ? handle_mm_fault+0xee/0x3170 [ 154.603269][ T7281] handle_mm_fault+0x1bd7/0x3170 [ 154.603311][ T7281] ? handle_mm_fault+0xee/0x3170 [ 154.603343][ T7281] ? __pfx_handle_mm_fault+0x10/0x10 [ 154.603369][ T7281] ? follow_page_pte+0x6b5/0xe50 [ 154.603405][ T7281] ? __pfx_follow_page_pte+0x10/0x10 [ 154.603444][ T7281] __get_user_pages+0x1683/0x2720 [ 154.603504][ T7281] __gup_longterm_locked+0x3db/0x1630 [ 154.603538][ T7281] ? xdp_umem_pin_pages+0xca/0x340 [ 154.603593][ T7281] pin_user_pages+0x9d/0xd0 [ 154.603621][ T7281] xdp_umem_pin_pages+0x11b/0x340 [ 154.603655][ T7281] xdp_umem_create+0x631/0x8b0 [ 154.603694][ T7281] xsk_setsockopt+0x860/0x990 [ 154.603723][ T7281] ? __pfx_xsk_setsockopt+0x10/0x10 [ 154.603757][ T7281] ? aa_sock_opt_perm+0xff/0x1a0 [ 154.603788][ T7281] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 154.603813][ T7281] ? __pfx_xsk_setsockopt+0x10/0x10 [ 154.603841][ T7281] do_sock_setsockopt+0x17c/0x1b0 [ 154.603876][ T7281] __x64_sys_setsockopt+0x13d/0x1b0 [ 154.603908][ T7281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.603932][ T7281] do_syscall_64+0x15f/0xf80 [ 154.603950][ T7281] ? trace_irq_disable+0x3b/0x140 [ 154.603980][ T7281] ? clear_bhb_loop+0x40/0x90 [ 154.604011][ T7281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.604031][ T7281] RIP: 0033:0x7f4af9f9cdd9 [ 154.604051][ T7281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.604068][ T7281] RSP: 002b:00007f4af81f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.604091][ T7281] RAX: ffffffffffffffda RBX: 00007f4afa215fa0 RCX: 00007f4af9f9cdd9 [ 154.604105][ T7281] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 154.604117][ T7281] RBP: 00007f4af81f6090 R08: 0000000000000020 R09: 0000000000000000 [ 154.604129][ T7281] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 154.604142][ T7281] R13: 00007f4afa216038 R14: 00007f4afa215fa0 R15: 00007ffc4edfe108 [ 154.604177][ T7281] [ 154.990471][ T7271] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.254098][ T7271] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.583137][ T7271] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.593334][ T7298] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 155.660347][ T7301] netlink: 'syz.2.452': attribute type 10 has an invalid length. [ 155.662812][ T7298] bond0: (slave dummy0): Releasing backup interface [ 155.725644][ T7298] team0: Port device dummy0 added [ 155.745587][ T7301] team0: Port device dummy0 removed [ 155.756808][ T7301] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 155.772621][ T7303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'. [ 155.811127][ T7271] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.826696][ T7305] FAULT_INJECTION: forcing a failure. [ 155.826696][ T7305] name failslab, interval 1, probability 0, space 0, times 0 [ 155.871090][ T7305] CPU: 1 UID: 0 PID: 7305 Comm: syz.1.454 Not tainted syzkaller #0 PREEMPT(full) [ 155.871120][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.871132][ T7305] Call Trace: [ 155.871139][ T7305] [ 155.871148][ T7305] dump_stack_lvl+0xe8/0x150 [ 155.871178][ T7305] should_fail_ex+0x412/0x560 [ 155.871208][ T7305] should_failslab+0xa8/0x100 [ 155.871240][ T7305] __kmalloc_cache_noprof+0x88/0x660 [ 155.871266][ T7305] ? __pfx_stack_trace_save+0x10/0x10 [ 155.871296][ T7305] ? rtnl_newlink+0x136/0x1bb0 [ 155.871330][ T7305] rtnl_newlink+0x136/0x1bb0 [ 155.871360][ T7305] ? kasan_save_track+0x3e/0x80 [ 155.871385][ T7305] ? kasan_save_free_info+0x46/0x50 [ 155.871406][ T7305] ? __kasan_slab_free+0x5c/0x80 [ 155.871432][ T7305] ? dev_hard_start_xmit+0x2cd/0x830 [ 155.871451][ T7305] ? __dev_queue_xmit+0x14d9/0x3950 [ 155.871469][ T7305] ? __netlink_deliver_tap+0x5ad/0x850 [ 155.871496][ T7305] ? netlink_deliver_tap+0x19c/0x1b0 [ 155.871521][ T7305] ? netlink_unicast+0x730/0x8e0 [ 155.871545][ T7305] ? netlink_sendmsg+0x813/0xb40 [ 155.871574][ T7305] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.871596][ T7305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.871656][ T7305] ? kasan_quarantine_put+0xbb/0x1f0 [ 155.871683][ T7305] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.871718][ T7305] ? nlmon_xmit+0xb0/0x100 [ 155.871742][ T7305] ? kmem_cache_free+0x182/0x650 [ 155.871783][ T7305] ? __lock_acquire+0x6b5/0x2cf0 [ 155.871810][ T7305] ? __dev_queue_xmit+0x2b6/0x3950 [ 155.871844][ T7305] ? __local_bh_enable_ip+0xd0/0x130 [ 155.871867][ T7305] ? lockdep_hardirqs_on+0x7a/0x110 [ 155.871896][ T7305] ? __dev_queue_xmit+0x2b6/0x3950 [ 155.871915][ T7305] ? __local_bh_enable_ip+0xd0/0x130 [ 155.871933][ T7305] ? __dev_queue_xmit+0x2b6/0x3950 [ 155.871961][ T7305] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 155.872003][ T7305] ? __pfx_rtnl_newlink+0x10/0x10 [ 155.872030][ T7305] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 155.872061][ T7305] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 155.872087][ T7305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.872112][ T7305] ? ref_tracker_free+0x693/0x840 [ 155.872142][ T7305] ? __pfx_ref_tracker_free+0x10/0x10 [ 155.872180][ T7305] netlink_rcv_skb+0x232/0x4b0 [ 155.872210][ T7305] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 155.872239][ T7305] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 155.872280][ T7305] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.872308][ T7305] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.872342][ T7305] netlink_unicast+0x75c/0x8e0 [ 155.872379][ T7305] netlink_sendmsg+0x813/0xb40 [ 155.872418][ T7305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.872451][ T7305] ? aa_sock_msg_perm+0xf1/0x1b0 [ 155.872480][ T7305] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 155.872512][ T7305] ____sys_sendmsg+0x972/0x9f0 [ 155.872543][ T7305] ? __might_fault+0xaf/0x130 [ 155.872580][ T7305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.872618][ T7305] ? import_iovec+0x73/0xa0 [ 155.872651][ T7305] ___sys_sendmsg+0x2a5/0x360 [ 155.872679][ T7305] ? __lock_acquire+0x6b5/0x2cf0 [ 155.872706][ T7305] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.872773][ T7305] ? __fget_files+0x2a/0x420 [ 155.872796][ T7305] ? __fget_files+0x3a0/0x420 [ 155.872838][ T7305] __x64_sys_sendmsg+0x1bd/0x2a0 [ 155.872872][ T7305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 155.872913][ T7305] ? __pfx_ksys_write+0x10/0x10 [ 155.872951][ T7305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.872973][ T7305] do_syscall_64+0x15f/0xf80 [ 155.872991][ T7305] ? trace_irq_disable+0x3b/0x140 [ 155.873021][ T7305] ? clear_bhb_loop+0x40/0x90 [ 155.873046][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.873066][ T7305] RIP: 0033:0x7f4af9f9cdd9 [ 155.873086][ T7305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.873103][ T7305] RSP: 002b:00007f4af81d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.873126][ T7305] RAX: ffffffffffffffda RBX: 00007f4afa216090 RCX: 00007f4af9f9cdd9 [ 155.873140][ T7305] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 155.873152][ T7305] RBP: 00007f4af81d5090 R08: 0000000000000000 R09: 0000000000000000 [ 155.873164][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.873175][ T7305] R13: 00007f4afa216128 R14: 00007f4afa216090 R15: 00007ffc4edfe108 [ 155.873207][ T7305] [ 156.317955][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.455'. [ 156.489432][ T7310] FAULT_INJECTION: forcing a failure. [ 156.489432][ T7310] name failslab, interval 1, probability 0, space 0, times 0 [ 156.525948][ T7310] CPU: 1 UID: 0 PID: 7310 Comm: syz.1.456 Not tainted syzkaller #0 PREEMPT(full) [ 156.525978][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 156.525990][ T7310] Call Trace: [ 156.525999][ T7310] [ 156.526007][ T7310] dump_stack_lvl+0xe8/0x150 [ 156.526038][ T7310] should_fail_ex+0x412/0x560 [ 156.526071][ T7310] should_failslab+0xa8/0x100 [ 156.526105][ T7310] __kvmalloc_node_noprof+0x178/0x8a0 [ 156.526135][ T7310] ? rhashtable_init_noprof+0x52e/0xad0 [ 156.526163][ T7310] ? rhashtable_init_noprof+0x12d/0xad0 [ 156.526196][ T7310] rhashtable_init_noprof+0x52e/0xad0 [ 156.526231][ T7310] br_vlan_init+0x6e/0x1b0 [ 156.526264][ T7310] br_dev_init+0x65/0x490 [ 156.526295][ T7310] register_netdevice+0x6c6/0x1ec0 [ 156.526321][ T7310] ? trace_kmalloc+0x2a/0xf0 [ 156.526353][ T7310] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 156.526386][ T7310] ? __pfx_register_netdevice+0x10/0x10 [ 156.526412][ T7310] ? validate_linkmsg+0x765/0x950 [ 156.526446][ T7310] br_dev_newlink+0x6a/0x140 [ 156.526472][ T7310] ? rtnl_newlink_create+0x311/0xb70 [ 156.526499][ T7310] ? __pfx_br_dev_newlink+0x10/0x10 [ 156.526528][ T7310] rtnl_newlink_create+0x329/0xb70 [ 156.526558][ T7310] ? __pfx___nla_validate_parse+0x10/0x10 [ 156.526599][ T7310] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 156.526631][ T7310] ? __pfx___mutex_lock+0x10/0x10 [ 156.526665][ T7310] ? ns_capable+0x89/0xe0 [ 156.526690][ T7310] rtnl_newlink+0x166a/0x1bb0 [ 156.526746][ T7310] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.526770][ T7310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.526833][ T7310] ? kasan_quarantine_put+0xbb/0x1f0 [ 156.526859][ T7310] ? lockdep_hardirqs_on+0x7a/0x110 [ 156.526893][ T7310] ? nlmon_xmit+0xb0/0x100 [ 156.526917][ T7310] ? kmem_cache_free+0x182/0x650 [ 156.526958][ T7310] ? __lock_acquire+0x6b5/0x2cf0 [ 156.526987][ T7310] ? __dev_queue_xmit+0x2b6/0x3950 [ 156.527012][ T7310] ? __local_bh_enable_ip+0xd0/0x130 [ 156.527033][ T7310] ? lockdep_hardirqs_on+0x7a/0x110 [ 156.527061][ T7310] ? __dev_queue_xmit+0x2b6/0x3950 [ 156.527080][ T7310] ? __local_bh_enable_ip+0xd0/0x130 [ 156.527099][ T7310] ? __dev_queue_xmit+0x2b6/0x3950 [ 156.527128][ T7310] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 156.527173][ T7310] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.527200][ T7310] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 156.527231][ T7310] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 156.527258][ T7310] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.527282][ T7310] ? ref_tracker_free+0x693/0x840 [ 156.527314][ T7310] ? __pfx_ref_tracker_free+0x10/0x10 [ 156.527354][ T7310] netlink_rcv_skb+0x232/0x4b0 [ 156.527385][ T7310] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.527414][ T7310] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.527456][ T7310] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.527483][ T7310] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.527519][ T7310] netlink_unicast+0x75c/0x8e0 [ 156.527559][ T7310] netlink_sendmsg+0x813/0xb40 [ 156.527599][ T7310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.527633][ T7310] ? aa_sock_msg_perm+0xf1/0x1b0 [ 156.527662][ T7310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.527695][ T7310] ____sys_sendmsg+0x972/0x9f0 [ 156.527725][ T7310] ? __might_fault+0xaf/0x130 [ 156.527767][ T7310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.527807][ T7310] ? import_iovec+0x73/0xa0 [ 156.527841][ T7310] ___sys_sendmsg+0x2a5/0x360 [ 156.527869][ T7310] ? __lock_acquire+0x6b5/0x2cf0 [ 156.527897][ T7310] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.527968][ T7310] ? __fget_files+0x2a/0x420 [ 156.527992][ T7310] ? __fget_files+0x3a0/0x420 [ 156.528029][ T7310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 156.528063][ T7310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.528105][ T7310] ? __pfx_ksys_write+0x10/0x10 [ 156.528144][ T7310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.528166][ T7310] do_syscall_64+0x15f/0xf80 [ 156.528184][ T7310] ? trace_irq_disable+0x3b/0x140 [ 156.528215][ T7310] ? clear_bhb_loop+0x40/0x90 [ 156.528241][ T7310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.528261][ T7310] RIP: 0033:0x7f4af9f9cdd9 [ 156.528282][ T7310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.528300][ T7310] RSP: 002b:00007f4af81f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.528322][ T7310] RAX: ffffffffffffffda RBX: 00007f4afa215fa0 RCX: 00007f4af9f9cdd9 [ 156.528337][ T7310] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 156.528350][ T7310] RBP: 00007f4af81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 156.528363][ T7310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.528375][ T7310] R13: 00007f4afa216038 R14: 00007f4afa215fa0 R15: 00007ffc4edfe108 [ 156.528410][ T7310] [ 157.222383][ T7318] netlink: 'syz.1.458': attribute type 11 has an invalid length. [ 157.230470][ T7318] netlink: 7 bytes leftover after parsing attributes in process `syz.1.458'. [ 157.356578][ T7320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.459'. [ 157.372930][ T3382] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.374096][ T7323] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.460'. [ 157.399351][ T3382] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.430043][ T145] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.509785][ T3382] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.792656][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 157.870155][ T7335] tipc: Enabled bearer , priority 0 [ 157.903698][ T7334] tipc: Disabling bearer [ 158.313659][ T7344] Bluetooth: MGMT ver 1.23 [ 158.535555][ T7350] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.552535][ T7351] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.609256][ T7357] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.473'. [ 159.087549][ T7368] tipc: Enabled bearer , priority 0 [ 159.237886][ T7379] netlink: 'syz.3.480': attribute type 10 has an invalid length. [ 159.273452][ T7362] tipc: Disabling bearer [ 159.283777][ T7369] syzkaller1: entered promiscuous mode [ 159.291258][ T7369] syzkaller1: entered allmulticast mode [ 159.298842][ T7380] netlink: 'syz.3.480': attribute type 10 has an invalid length. [ 159.324601][ T7379] bond0: (slave dummy0): Releasing backup interface [ 159.353283][ T7379] team0: Port device dummy0 added [ 159.382634][ T7380] team0: Port device dummy0 removed [ 159.403085][ T7380] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 159.623589][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.484'. [ 159.755104][ T7395] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.486'. [ 159.928323][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.489'. [ 160.088117][ T7413] xt_TPROXY: Can be used only with -p tcp or -p udp [ 160.905310][ T7431] __nla_validate_parse: 4 callbacks suppressed [ 160.905332][ T7431] netlink: 96 bytes leftover after parsing attributes in process `syz.3.496'. [ 161.058263][ T7435] netlink: 220 bytes leftover after parsing attributes in process `syz.1.497'. [ 161.103186][ T7435] netlink: 'syz.1.497': attribute type 2 has an invalid length. [ 161.276898][ T7441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.499'. [ 161.370992][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'. [ 161.653682][ T7452] netlink: 72 bytes leftover after parsing attributes in process `syz.1.503'. [ 162.600391][ T7477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.511'. [ 162.611349][ T7476] netlink: 'syz.2.510': attribute type 5 has an invalid length. [ 162.612575][ T7474] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.512'. [ 162.625968][ T7476] netlink: 'syz.2.510': attribute type 4 has an invalid length. [ 162.834188][ T7481] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.955472][ T7485] tipc: Enabling of bearer rejected, failed to enable media [ 163.395752][ T7503] netlink: 72 bytes leftover after parsing attributes in process `syz.0.519'. [ 163.416783][ T7504] netlink: 'syz.2.520': attribute type 10 has an invalid length. [ 163.417987][ T7505] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.521'. [ 163.439162][ T7504] bond0: (slave dummy0): Releasing backup interface [ 163.451715][ T7504] team0: Port device dummy0 added [ 163.467649][ T7504] netlink: 'syz.2.520': attribute type 10 has an invalid length. [ 163.505394][ T7504] team0: Port device dummy0 removed [ 163.534760][ T7504] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 163.579666][ T7510] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.522'. [ 164.028809][ T7528] syz0: rxe_newlink: already configured on bridge_slave_1 [ 164.125262][ T7532] SET target dimension over the limit! [ 164.518695][ T9] IPVS: starting estimator thread 0... [ 164.616049][ T7546] IPVS: using max 25 ests per chain, 60000 per kthread [ 165.059887][ T7562] netlink: 'syz.2.542': attribute type 11 has an invalid length. [ 165.084822][ T7562] sit0: entered promiscuous mode [ 165.116316][ T7562] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 165.138080][ T7565] netlink: 'syz.0.543': attribute type 1 has an invalid length. [ 165.699427][ T7590] tipc: Enabling of bearer rejected, failed to enable media [ 165.871854][ T7596] bond0: (slave dummy0): Releasing backup interface [ 165.964662][ T7596] bridge_slave_0: left allmulticast mode [ 165.988381][ T7596] bridge_slave_0: left promiscuous mode [ 165.996105][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.022167][ T7596] bridge_slave_1: left allmulticast mode [ 166.028361][ T7596] bridge_slave_1: left promiscuous mode [ 166.034455][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.054958][ T7596] bond0: (slave bond_slave_0): Releasing backup interface [ 166.068298][ T7596] bond0: (slave bond_slave_1): Releasing backup interface [ 166.077435][ T7606] netlink: 'syz.2.555': attribute type 11 has an invalid length. [ 166.087834][ T7606] __nla_validate_parse: 7 callbacks suppressed [ 166.087857][ T7606] netlink: 7 bytes leftover after parsing attributes in process `syz.2.555'. [ 166.116512][ T7596] team0: Port device team_slave_0 removed [ 166.130017][ T7596] team0: Port device team_slave_1 removed [ 166.137724][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.145338][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.157414][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.164892][ T7596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.175600][ T7596] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.223358][ T7600] ip6gre1: entered allmulticast mode [ 166.234655][ T7600] team0: Port device ip6gre1 added [ 166.267392][ T7607] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 166.310248][ T7607] netlink: 1 bytes leftover after parsing attributes in process `syz.2.555'. [ 166.479714][ T7611] netlink: 'syz.1.557': attribute type 10 has an invalid length. [ 166.547760][ T7617] netlink: 'syz.1.557': attribute type 10 has an invalid length. [ 166.559053][ T7611] bond0: (slave dummy0): Releasing backup interface [ 166.594129][ T7611] team0: Device dummy0 is of different type [ 166.627863][ T7624] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.560'. [ 166.796680][ T7617] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 167.723168][ T7657] netlink: 'syz.4.570': attribute type 3 has an invalid length. [ 167.761578][ T7660] tipc: Enabling of bearer rejected, failed to enable media [ 167.796678][ T7661] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.571'. [ 168.237972][ T7677] FAULT_INJECTION: forcing a failure. [ 168.237972][ T7677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 168.281421][ T7677] CPU: 1 UID: 0 PID: 7677 Comm: syz.1.577 Not tainted syzkaller #0 PREEMPT(full) [ 168.281450][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.281462][ T7677] Call Trace: [ 168.281470][ T7677] [ 168.281480][ T7677] dump_stack_lvl+0xe8/0x150 [ 168.281508][ T7677] should_fail_ex+0x412/0x560 [ 168.281584][ T7677] prepare_alloc_pages+0x22a/0x650 [ 168.281624][ T7677] __alloc_frozen_pages_noprof+0x12f/0x380 [ 168.281659][ T7677] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 168.281695][ T7677] ? __pfx_policy_nodemask+0x10/0x10 [ 168.281728][ T7677] ? __lock_acquire+0x6b5/0x2cf0 [ 168.281754][ T7677] alloc_pages_mpol+0x235/0x490 [ 168.281788][ T7677] folio_alloc_mpol_noprof+0x39/0x160 [ 168.281821][ T7677] vma_alloc_folio_noprof+0xe1/0x1e0 [ 168.281846][ T7677] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 168.281867][ T7677] ? __pte_offset_map+0x29/0x240 [ 168.281893][ T7677] ? __pte_offset_map+0x29/0x240 [ 168.281920][ T7677] do_pte_missing+0x159d/0x33f0 [ 168.281963][ T7677] ? handle_mm_fault+0xee/0x3170 [ 168.281993][ T7677] handle_mm_fault+0x1bd7/0x3170 [ 168.282034][ T7677] ? handle_mm_fault+0xee/0x3170 [ 168.282068][ T7677] ? __pfx_handle_mm_fault+0x10/0x10 [ 168.282093][ T7677] ? follow_page_pte+0x6b5/0xe50 [ 168.282127][ T7677] ? __pfx_follow_page_pte+0x10/0x10 [ 168.282164][ T7677] __get_user_pages+0x1683/0x2720 [ 168.282226][ T7677] __gup_longterm_locked+0x3db/0x1630 [ 168.282257][ T7677] ? xdp_umem_pin_pages+0xca/0x340 [ 168.282303][ T7677] pin_user_pages+0x9d/0xd0 [ 168.282331][ T7677] xdp_umem_pin_pages+0x11b/0x340 [ 168.282365][ T7677] xdp_umem_create+0x631/0x8b0 [ 168.282406][ T7677] xsk_setsockopt+0x860/0x990 [ 168.282435][ T7677] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.282477][ T7677] ? aa_sock_opt_perm+0xff/0x1a0 [ 168.282509][ T7677] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 168.282545][ T7677] ? __pfx_xsk_setsockopt+0x10/0x10 [ 168.282573][ T7677] do_sock_setsockopt+0x17c/0x1b0 [ 168.282609][ T7677] __x64_sys_setsockopt+0x13d/0x1b0 [ 168.282641][ T7677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.282664][ T7677] do_syscall_64+0x15f/0xf80 [ 168.282683][ T7677] ? trace_irq_disable+0x3b/0x140 [ 168.282714][ T7677] ? clear_bhb_loop+0x40/0x90 [ 168.282740][ T7677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.282760][ T7677] RIP: 0033:0x7f4af9f9cdd9 [ 168.282780][ T7677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.282798][ T7677] RSP: 002b:00007f4af81f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.282821][ T7677] RAX: ffffffffffffffda RBX: 00007f4afa215fa0 RCX: 00007f4af9f9cdd9 [ 168.282836][ T7677] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 168.282848][ T7677] RBP: 00007f4af81f6090 R08: 0000000000000020 R09: 0000000000000000 [ 168.282860][ T7677] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 168.282873][ T7677] R13: 00007f4afa216038 R14: 00007f4afa215fa0 R15: 00007ffc4edfe108 [ 168.282908][ T7677] [ 168.996073][ T7694] netlink: 'syz.4.585': attribute type 3 has an invalid length. [ 169.010566][ T7699] netlink: 'syz.2.584': attribute type 1 has an invalid length. [ 169.031734][ T7699] netlink: 1 bytes leftover after parsing attributes in process `syz.2.584'. [ 169.295720][ T7707] netlink: 52 bytes leftover after parsing attributes in process `syz.2.588'. [ 169.498353][ T7707] nbd0: detected capacity change from 0 to 536870912 [ 169.542391][ T7707] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 169.560353][ T5628] block nbd0: Receive control failed (result -104) [ 169.613654][ T7718] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 170.013116][ T7726] syzkaller0: entered promiscuous mode [ 170.039469][ T7726] syzkaller0: entered allmulticast mode [ 170.103735][ T7733] sit0: entered promiscuous mode [ 170.112753][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 170.117216][ T7733] validate_nla: 1 callbacks suppressed [ 170.117237][ T7733] netlink: 'syz.1.598': attribute type 1 has an invalid length. [ 170.135549][ T7733] netlink: 1 bytes leftover after parsing attributes in process `syz.1.598'. [ 170.279214][ T7741] netlink: 9 bytes leftover after parsing attributes in process `syz.4.600'. [ 170.336987][ T7741] gretap0: entered promiscuous mode [ 170.345473][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 170.396063][ T7746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.488520][ T7753] FAULT_INJECTION: forcing a failure. [ 170.488520][ T7753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.503242][ T7753] CPU: 1 UID: 0 PID: 7753 Comm: syz.4.604 Not tainted syzkaller #0 PREEMPT(full) [ 170.503270][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.503281][ T7753] Call Trace: [ 170.503290][ T7753] [ 170.503298][ T7753] dump_stack_lvl+0xe8/0x150 [ 170.503328][ T7753] should_fail_ex+0x412/0x560 [ 170.503358][ T7753] _copy_from_user+0x2d/0xb0 [ 170.503393][ T7753] ___sys_sendmsg+0x1c6/0x360 [ 170.503423][ T7753] ? __lock_acquire+0x6b5/0x2cf0 [ 170.503448][ T7753] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.503513][ T7753] ? __fget_files+0x2a/0x420 [ 170.503538][ T7753] ? __fget_files+0x3a0/0x420 [ 170.503572][ T7753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 170.503605][ T7753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.503645][ T7753] ? __pfx_ksys_write+0x10/0x10 [ 170.503683][ T7753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.503706][ T7753] do_syscall_64+0x15f/0xf80 [ 170.503727][ T7753] ? clear_bhb_loop+0x40/0x90 [ 170.503762][ T7753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.503782][ T7753] RIP: 0033:0x7f5ef5d9cdd9 [ 170.503802][ T7753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.503819][ T7753] RSP: 002b:00007f5ef6d2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.503843][ T7753] RAX: ffffffffffffffda RBX: 00007f5ef6015fa0 RCX: 00007f5ef5d9cdd9 [ 170.503857][ T7753] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 170.503870][ T7753] RBP: 00007f5ef6d2a090 R08: 0000000000000000 R09: 0000000000000000 [ 170.503881][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.503893][ T7753] R13: 00007f5ef6016038 R14: 00007f5ef6015fa0 R15: 00007ffeee777548 [ 170.503925][ T7753] [ 171.080018][ T7767] netlink: 'syz.2.608': attribute type 3 has an invalid length. [ 171.258431][ T7771] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.424482][ T7787] __nla_validate_parse: 1 callbacks suppressed [ 171.424544][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 171.522143][ T7771] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.631438][ T7773] tipc: Enabling of bearer rejected, failed to enable media [ 171.711878][ T7771] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.812983][ T7771] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.852274][ T7804] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 171.863837][ T7804] netlink: 2 bytes leftover after parsing attributes in process `syz.0.617'. [ 171.894636][ T7804] veth1_virt_wifi: entered promiscuous mode [ 171.904893][ T7804] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 171.917123][ T7804] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 171.925035][ T7804] veth1_virt_wifi: entered allmulticast mode [ 171.937852][ T7804] veth1_virt_wifi: left allmulticast mode [ 171.945257][ T7806] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.619'. [ 172.130483][ T3382] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.158206][ T7816] netlink: 'syz.3.621': attribute type 10 has an invalid length. [ 172.171356][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.206931][ T7816] team0: Device dummy0 is of different type [ 172.218547][ T7818] netlink: 'syz.3.621': attribute type 10 has an invalid length. [ 172.292247][ T7818] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 172.322348][ T145] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.371961][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.522758][ T7820] netlink: 'syz.3.623': attribute type 1 has an invalid length. [ 172.543821][ T7820] netlink: 1 bytes leftover after parsing attributes in process `syz.3.623'. [ 172.944288][ T7836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.630'. [ 173.050754][ T7841] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.631'. [ 173.083017][ T7842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.134063][ T7842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.174150][ T7844] netlink: 'syz.0.633': attribute type 2 has an invalid length. [ 173.182751][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 173.252964][ T7848] siw: device registration error -23 [ 173.277530][ T7848] netlink: 276 bytes leftover after parsing attributes in process `syz.1.634'. [ 173.366163][ T7851] netlink: 32 bytes leftover after parsing attributes in process `syz.0.635'. [ 173.384048][ T7851] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 173.424150][ T7851] bond2: Removing last arp target with arp_interval on [ 173.593393][ T7866] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 173.619553][ T7865] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 173.660968][ T7865] netlink: 1 bytes leftover after parsing attributes in process `syz.3.639'. [ 173.704505][ T7872] tipc: Enabling of bearer rejected, failed to enable media [ 174.860116][ T7920] FAULT_INJECTION: forcing a failure. [ 174.860116][ T7920] name failslab, interval 1, probability 0, space 0, times 0 [ 174.884477][ T7920] CPU: 0 UID: 0 PID: 7920 Comm: syz.4.658 Not tainted syzkaller #0 PREEMPT(full) [ 174.884506][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.884517][ T7920] Call Trace: [ 174.884525][ T7920] [ 174.884533][ T7920] dump_stack_lvl+0xe8/0x150 [ 174.884563][ T7920] should_fail_ex+0x412/0x560 [ 174.884592][ T7920] ? __d_alloc+0x37/0x6f0 [ 174.884619][ T7920] should_failslab+0xa8/0x100 [ 174.884652][ T7920] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 174.884678][ T7920] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 174.884710][ T7920] __d_alloc+0x37/0x6f0 [ 174.884751][ T7920] d_alloc_pseudo+0x21/0xc0 [ 174.884781][ T7920] alloc_file_pseudo+0xdd/0x240 [ 174.884807][ T7920] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 174.884832][ T7920] ? rcu_is_watching+0x15/0xb0 [ 174.884857][ T7920] ? hugetlbfs_get_inode+0x432/0x650 [ 174.884883][ T7920] hugetlb_file_setup+0x3ee/0x630 [ 174.884906][ T7920] ksys_mmap_pgoff+0x22e/0x760 [ 174.884936][ T7920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.884957][ T7920] do_syscall_64+0x15f/0xf80 [ 174.884974][ T7920] ? trace_irq_disable+0x3b/0x140 [ 174.885001][ T7920] ? clear_bhb_loop+0x40/0x90 [ 174.885025][ T7920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.885043][ T7920] RIP: 0033:0x7f5ef5d9cdd9 [ 174.885062][ T7920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.885085][ T7920] RSP: 002b:00007f5ef6d2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 174.885107][ T7920] RAX: ffffffffffffffda RBX: 00007f5ef6015fa0 RCX: 00007f5ef5d9cdd9 [ 174.885122][ T7920] RDX: 0000000002000009 RSI: 0000000000003000 RDI: 0000200000400000 [ 174.885135][ T7920] RBP: 00007f5ef6d2a090 R08: ffffffffffffffff R09: 0000000000000000 [ 174.885148][ T7920] R10: 000000000004d032 R11: 0000000000000246 R12: 0000000000000001 [ 174.885159][ T7920] R13: 00007f5ef6016038 R14: 00007f5ef6015fa0 R15: 00007ffeee777548 [ 174.885188][ T7920] [ 175.429331][ T7938] validate_nla: 2 callbacks suppressed [ 175.429354][ T7938] netlink: 'syz.3.666': attribute type 7 has an invalid length. [ 175.643263][ T7942] netlink: 'syz.2.667': attribute type 1 has an invalid length. [ 175.662882][ T7943] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.887702][ T7943] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.018816][ T7943] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.216769][ T7968] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 176.274896][ T7943] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.548661][ T145] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.642291][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.658761][ T7980] FAULT_INJECTION: forcing a failure. [ 176.658761][ T7980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.683106][ T7980] CPU: 1 UID: 0 PID: 7980 Comm: syz.1.679 Not tainted syzkaller #0 PREEMPT(full) [ 176.683133][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.683145][ T7980] Call Trace: [ 176.683153][ T7980] [ 176.683162][ T7980] dump_stack_lvl+0xe8/0x150 [ 176.683190][ T7980] should_fail_ex+0x412/0x560 [ 176.683222][ T7980] _copy_to_user+0x31/0xb0 [ 176.683254][ T7980] simple_read_from_buffer+0xe1/0x170 [ 176.683287][ T7980] proc_fail_nth_read+0x1bb/0x230 [ 176.683315][ T7980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.683345][ T7980] ? rw_verify_area+0x2a6/0x4d0 [ 176.683372][ T7980] ? __fget_files+0x2a/0x420 [ 176.683393][ T7980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.683422][ T7980] vfs_read+0x20c/0xa70 [ 176.683457][ T7980] ? __pfx___mutex_lock+0x10/0x10 [ 176.683490][ T7980] ? __pfx_vfs_read+0x10/0x10 [ 176.683520][ T7980] ? __fget_files+0x2a/0x420 [ 176.683550][ T7980] ? __fget_files+0x3a0/0x420 [ 176.683578][ T7980] ? __fget_files+0x2a/0x420 [ 176.683613][ T7980] ksys_read+0x150/0x270 [ 176.683645][ T7980] ? __pfx_ksys_read+0x10/0x10 [ 176.683683][ T7980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.683707][ T7980] do_syscall_64+0x15f/0xf80 [ 176.683725][ T7980] ? trace_irq_disable+0x3b/0x140 [ 176.683755][ T7980] ? clear_bhb_loop+0x40/0x90 [ 176.683782][ T7980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.683803][ T7980] RIP: 0033:0x7f4af9f5d60e [ 176.683823][ T7980] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.683841][ T7980] RSP: 002b:00007f4af81f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.683864][ T7980] RAX: ffffffffffffffda RBX: 00007f4af81f66c0 RCX: 00007f4af9f5d60e [ 176.683880][ T7980] RDX: 000000000000000f RSI: 00007f4af81f60a0 RDI: 0000000000000005 [ 176.683893][ T7980] RBP: 00007f4af81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 176.683905][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.683917][ T7980] R13: 00007f4afa216038 R14: 00007f4afa215fa0 R15: 00007ffc4edfe108 [ 176.683953][ T7980] [ 176.943026][ T7982] sit0: entered promiscuous mode [ 176.979360][ T7984] __nla_validate_parse: 12 callbacks suppressed [ 176.979382][ T7984] netlink: 220 bytes leftover after parsing attributes in process `syz.1.681'. [ 177.008334][ T7982] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 177.026110][ T7984] netlink: 'syz.1.681': attribute type 2 has an invalid length. [ 177.044209][ T7982] netlink: 1 bytes leftover after parsing attributes in process `syz.4.680'. [ 177.090802][ T3382] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.154040][ T3382] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.183382][ T7986] netlink: 'syz.1.683': attribute type 10 has an invalid length. [ 177.242862][ T7993] netlink: 'syz.1.683': attribute type 10 has an invalid length. [ 177.262834][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.3.685'. [ 177.289859][ T7986] bond0: (slave dummy0): Releasing backup interface [ 177.305568][ T7986] team0: Device dummy0 is of different type [ 177.348826][ T7993] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 177.389699][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.686'. [ 177.502457][ T8002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.687'. [ 178.040684][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 178.050030][ T8015] netlink: 304 bytes leftover after parsing attributes in process `syz.2.691'. [ 192.407743][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 192.418674][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 192.429885][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 192.443271][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 192.445600][ T4943] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 192.452299][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 192.465579][ T4943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 192.474770][ T4943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 192.488035][ T5637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 192.496892][ T5637] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.100180][ T5637] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.112799][ T5637] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.123514][ T5637] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.131849][ T5637] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.145378][ T5637] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.158093][ T5632] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 193.172185][ T5632] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 193.187534][ T5632] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 193.204588][ T5632] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 193.218354][ T5632] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 193.614382][ T4943] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 193.628125][ T4943] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 193.639280][ T4943] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 193.652926][ T4943] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 193.661589][ T4943] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 194.374002][ T8028] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.395958][ T8028] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.404985][ T8028] bridge_slave_0: entered allmulticast mode [ 194.430272][ T8028] bridge_slave_0: entered promiscuous mode [ 194.444067][ T8028] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.468493][ T8028] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.478038][ T8028] bridge_slave_1: entered allmulticast mode [ 194.485849][ T5632] Bluetooth: hci5: command tx timeout [ 194.500828][ T8028] bridge_slave_1: entered promiscuous mode [ 194.569769][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.576330][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.582803][ T5632] Bluetooth: hci6: command tx timeout [ 194.634685][ T8028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.648130][ T8028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.750441][ T8028] team0: Port device team_slave_0 added [ 194.771615][ T8028] team0: Port device team_slave_1 added [ 194.883385][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.897468][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.926982][ T8028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.944753][ T8028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.952130][ T8028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.979160][ T8028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.207176][ T5632] Bluetooth: hci7: command tx timeout [ 195.223631][ T8028] hsr_slave_0: entered promiscuous mode [ 195.234510][ T8028] hsr_slave_1: entered promiscuous mode [ 195.242050][ T8028] debugfs: 'hsr0' already exists in 'hsr' [ 195.249406][ T8028] Cannot create hsr debugfs directory [ 195.285879][ T5632] Bluetooth: hci8: command tx timeout [ 195.539559][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.547653][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.554916][ T8030] bridge_slave_0: entered allmulticast mode [ 195.562668][ T8030] bridge_slave_0: entered promiscuous mode [ 195.607855][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.615222][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.623460][ T8030] bridge_slave_1: entered allmulticast mode [ 195.632418][ T8030] bridge_slave_1: entered promiscuous mode [ 195.696687][ T8030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.733845][ T8030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.776272][ T5632] Bluetooth: hci9: command tx timeout [ 195.890847][ T8030] team0: Port device team_slave_0 added [ 195.900837][ T8030] team0: Port device team_slave_1 added [ 196.002258][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.009823][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.037918][ T8030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.061729][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.069427][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.077083][ T8050] bridge_slave_0: entered allmulticast mode [ 196.085248][ T8050] bridge_slave_0: entered promiscuous mode [ 196.095366][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.104886][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.132327][ T8030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.163557][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.171618][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.180022][ T8050] bridge_slave_1: entered allmulticast mode [ 196.188556][ T8050] bridge_slave_1: entered promiscuous mode [ 196.280371][ T8050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.317330][ T8050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.371352][ T8030] hsr_slave_0: entered promiscuous mode [ 196.378994][ T8030] hsr_slave_1: entered promiscuous mode [ 196.386270][ T8030] debugfs: 'hsr0' already exists in 'hsr' [ 196.392169][ T8030] Cannot create hsr debugfs directory [ 196.446403][ T8050] team0: Port device team_slave_0 added [ 196.486729][ T8050] team0: Port device team_slave_1 added [ 196.499294][ T8051] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.506922][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.514128][ T8051] bridge_slave_0: entered allmulticast mode [ 196.521932][ T8051] bridge_slave_0: entered promiscuous mode [ 196.551378][ T8051] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.558849][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.566784][ T8051] bridge_slave_1: entered allmulticast mode [ 196.573924][ T8051] bridge_slave_1: entered promiscuous mode [ 196.576495][ T5632] Bluetooth: hci5: command tx timeout [ 196.630368][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.637404][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.664470][ T5632] Bluetooth: hci6: command tx timeout [ 196.670267][ T8050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.709870][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.717338][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.743680][ T8050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.775867][ T8051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.799256][ T8064] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.806820][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.814183][ T8064] bridge_slave_0: entered allmulticast mode [ 196.822603][ T8064] bridge_slave_0: entered promiscuous mode [ 196.832609][ T8051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.860329][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.867739][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.875097][ T8064] bridge_slave_1: entered allmulticast mode [ 196.883214][ T8064] bridge_slave_1: entered promiscuous mode [ 196.951756][ T8051] team0: Port device team_slave_0 added [ 196.984124][ T8050] hsr_slave_0: entered promiscuous mode [ 196.991333][ T8050] hsr_slave_1: entered promiscuous mode [ 196.997772][ T8050] debugfs: 'hsr0' already exists in 'hsr' [ 197.003525][ T8050] Cannot create hsr debugfs directory [ 197.011493][ T8051] team0: Port device team_slave_1 added [ 197.027220][ T8064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.058054][ T8064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.128241][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.135527][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.162297][ T8051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.199295][ T8064] team0: Port device team_slave_0 added [ 197.206594][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.213667][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.240193][ T8051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.276392][ T8064] team0: Port device team_slave_1 added [ 197.285931][ T5632] Bluetooth: hci7: command tx timeout [ 197.332653][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.339919][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.366440][ T5632] Bluetooth: hci8: command tx timeout [ 197.366528][ T8064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.411360][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.418675][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.446127][ T8064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.497965][ T8051] hsr_slave_0: entered promiscuous mode [ 197.504433][ T8051] hsr_slave_1: entered promiscuous mode [ 197.511232][ T8051] debugfs: 'hsr0' already exists in 'hsr' [ 197.517267][ T8051] Cannot create hsr debugfs directory [ 197.637233][ T8064] hsr_slave_0: entered promiscuous mode [ 197.643959][ T8064] hsr_slave_1: entered promiscuous mode [ 197.650533][ T8064] debugfs: 'hsr0' already exists in 'hsr' [ 197.656369][ T8064] Cannot create hsr debugfs directory [ 197.846812][ T5632] Bluetooth: hci9: command tx timeout [ 198.645902][ T5632] Bluetooth: hci5: command tx timeout [ 198.725932][ T5632] Bluetooth: hci6: command tx timeout [ 199.366041][ T5632] Bluetooth: hci7: command tx timeout [ 199.445982][ T5632] Bluetooth: hci8: command tx timeout [ 199.687188][ T1637] block nbd0: Possible stuck request ffff888027250000: control (read@0,4096B). Runtime 30 seconds [ 199.925956][ T5632] Bluetooth: hci9: command tx timeout [ 200.725967][ T5632] Bluetooth: hci5: command tx timeout [ 200.806060][ T5632] Bluetooth: hci6: command tx timeout [ 201.446611][ T5632] Bluetooth: hci7: command tx timeout [ 201.525938][ T5632] Bluetooth: hci8: command tx timeout [ 202.005947][ T5632] Bluetooth: hci9: command tx timeout [ 212.005998][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 212.012142][ T5645] Bluetooth: hci4: command 0x0405 tx timeout [ 212.018386][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 212.028264][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 229.767868][ T1637] block nbd0: Possible stuck request ffff888027250000: control (read@0,4096B). Runtime 60 seconds [ 230.085403][ T4992] udevd[4992]: worker [5630] /devices/virtual/block/nbd0 is taking a long time [ 252.489156][ T4943] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 252.501340][ T4943] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 252.513860][ T5628] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 252.514391][ T4943] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 252.523445][ T5628] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 252.532430][ T4943] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 252.540588][ T5628] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 252.545158][ T4943] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 252.564919][ T5628] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 252.574821][ T5628] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 253.694846][ T5628] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 253.704395][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.714798][ T5628] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 253.723895][ T5628] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 253.734925][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.744074][ T5628] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 253.752948][ T8125] bridge_slave_0: entered allmulticast mode [ 253.762465][ T4943] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 253.764659][ T8125] bridge_slave_0: entered promiscuous mode [ 253.772084][ T4943] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 253.791892][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.794576][ T4943] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 253.805481][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.816474][ T4943] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 253.817279][ T8125] bridge_slave_1: entered allmulticast mode [ 253.845391][ T5637] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 253.855589][ T5637] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 253.868031][ T5637] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 253.879053][ T5637] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 253.892136][ T5637] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 253.911609][ T5637] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 253.914762][ T8125] bridge_slave_1: entered promiscuous mode [ 253.928748][ T5637] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 254.122669][ T8125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.164053][ T8125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.287598][ T8125] team0: Port device team_slave_0 added [ 254.316193][ T8125] team0: Port device team_slave_1 added [ 254.379302][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.395852][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.431011][ T8125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.457023][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.478960][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.507010][ T8125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.576237][ T5637] Bluetooth: hci10: command tx timeout [ 254.635115][ T8125] hsr_slave_0: entered promiscuous mode [ 254.646434][ T5637] Bluetooth: hci11: command tx timeout [ 254.667400][ T8125] hsr_slave_1: entered promiscuous mode [ 254.674267][ T8125] debugfs: 'hsr0' already exists in 'hsr' [ 254.696886][ T8125] Cannot create hsr debugfs directory [ 254.968601][ T8127] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.978074][ T8127] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.986455][ T8127] bridge_slave_0: entered allmulticast mode [ 254.995926][ T8127] bridge_slave_0: entered promiscuous mode [ 255.024416][ T8127] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.032549][ T8127] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.040082][ T8127] bridge_slave_1: entered allmulticast mode [ 255.048786][ T8127] bridge_slave_1: entered promiscuous mode [ 255.144444][ T8127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.159096][ T8127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.252429][ T8127] team0: Port device team_slave_0 added [ 255.303676][ T8127] team0: Port device team_slave_1 added [ 255.377526][ T8127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.385031][ T8127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.413029][ T8127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.449973][ T8127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.457404][ T8127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.483941][ T8127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.690908][ T8127] hsr_slave_0: entered promiscuous mode [ 255.699338][ T8127] hsr_slave_1: entered promiscuous mode [ 255.706706][ T8127] debugfs: 'hsr0' already exists in 'hsr' [ 255.712677][ T8127] Cannot create hsr debugfs directory [ 255.846180][ T5637] Bluetooth: hci12: command tx timeout [ 255.938259][ T5637] Bluetooth: hci13: command tx timeout [ 256.009393][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.016196][ T5637] Bluetooth: hci14: command tx timeout [ 256.018161][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.366112][ T8156] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.373622][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.381820][ T8156] bridge_slave_0: entered allmulticast mode [ 256.389187][ T8156] bridge_slave_0: entered promiscuous mode [ 256.399775][ T8156] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.407190][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.414526][ T8156] bridge_slave_1: entered allmulticast mode [ 256.422104][ T8156] bridge_slave_1: entered promiscuous mode [ 256.515219][ T8156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.553933][ T8156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.593228][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.600641][ T8158] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.608496][ T8158] bridge_slave_0: entered allmulticast mode [ 256.616810][ T8158] bridge_slave_0: entered promiscuous mode [ 256.646495][ T5637] Bluetooth: hci10: command tx timeout [ 256.661596][ T8156] team0: Port device team_slave_0 added [ 256.668244][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.676750][ T8158] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.684119][ T8158] bridge_slave_1: entered allmulticast mode [ 256.693083][ T8158] bridge_slave_1: entered promiscuous mode [ 256.702694][ T8156] team0: Port device team_slave_1 added [ 256.735978][ T5637] Bluetooth: hci11: command tx timeout [ 256.809647][ T8158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.820025][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.827550][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.854530][ T8156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.867638][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.874720][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.902885][ T8156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.935244][ T8158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.024563][ T8158] team0: Port device team_slave_0 added [ 257.048952][ T8156] hsr_slave_0: entered promiscuous mode [ 257.055519][ T8156] hsr_slave_1: entered promiscuous mode [ 257.062543][ T8156] debugfs: 'hsr0' already exists in 'hsr' [ 257.068563][ T8156] Cannot create hsr debugfs directory [ 257.086949][ T8158] team0: Port device team_slave_1 added [ 257.162288][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.169838][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.177325][ T8160] bridge_slave_0: entered allmulticast mode [ 257.185337][ T8160] bridge_slave_0: entered promiscuous mode [ 257.193834][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.201395][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.228579][ T8158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.241909][ T8158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.249353][ T8158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.276881][ T8158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.310920][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.318527][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.326202][ T8160] bridge_slave_1: entered allmulticast mode [ 257.333496][ T8160] bridge_slave_1: entered promiscuous mode [ 257.415409][ T8160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.451437][ T8160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.510354][ T8158] hsr_slave_0: entered promiscuous mode [ 257.517200][ T8158] hsr_slave_1: entered promiscuous mode [ 257.523657][ T8158] debugfs: 'hsr0' already exists in 'hsr' [ 257.530051][ T8158] Cannot create hsr debugfs directory [ 257.552989][ T8160] team0: Port device team_slave_0 added [ 257.561731][ T8160] team0: Port device team_slave_1 added [ 257.638169][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.646328][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.672893][ T8160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.707027][ T8160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.714282][ T8160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.741138][ T8160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.851671][ T8160] hsr_slave_0: entered promiscuous mode [ 257.858420][ T8160] hsr_slave_1: entered promiscuous mode [ 257.864652][ T8160] debugfs: 'hsr0' already exists in 'hsr' [ 257.870582][ T8160] Cannot create hsr debugfs directory [ 257.937133][ T5637] Bluetooth: hci12: command tx timeout [ 258.007700][ T5637] Bluetooth: hci13: command tx timeout [ 258.085922][ T5637] Bluetooth: hci14: command tx timeout [ 258.726431][ T5637] Bluetooth: hci10: command tx timeout [ 258.805978][ T5637] Bluetooth: hci11: command tx timeout [ 259.846800][ T1637] block nbd0: Possible stuck request ffff888027250000: control (read@0,4096B). Runtime 90 seconds [ 260.005970][ T5637] Bluetooth: hci12: command tx timeout [ 260.085931][ T5637] Bluetooth: hci13: command tx timeout [ 260.166169][ T5637] Bluetooth: hci14: command tx timeout [ 260.806088][ T5637] Bluetooth: hci10: command tx timeout [ 260.886143][ T5637] Bluetooth: hci11: command tx timeout [ 262.085995][ T5637] Bluetooth: hci12: command tx timeout [ 262.165959][ T5637] Bluetooth: hci13: command tx timeout [ 262.245916][ T5637] Bluetooth: hci14: command tx timeout [ 289.929399][ T1637] block nbd0: Possible stuck request ffff888027250000: control (read@0,4096B). Runtime 120 seconds [ 312.450392][ T4943] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 312.459929][ T4943] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 312.469766][ T4943] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 312.482626][ T4943] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 312.491061][ T4943] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 313.021013][ T5637] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 313.033773][ T5637] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 313.042662][ T5637] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 313.051594][ T5637] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 313.064330][ T5637] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 313.270642][ T8218] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.281285][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.298201][ T8218] bridge_slave_0: entered allmulticast mode [ 313.307196][ T8218] bridge_slave_0: entered promiscuous mode [ 313.316118][ T8218] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.323755][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.331984][ T8218] bridge_slave_1: entered allmulticast mode [ 313.341126][ T8218] bridge_slave_1: entered promiscuous mode [ 313.391086][ T8218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.405123][ T8218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.460388][ T8218] team0: Port device team_slave_0 added [ 313.470421][ T8218] team0: Port device team_slave_1 added [ 313.510252][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.517420][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.545166][ T8218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.566130][ T8218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.575436][ T8218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.602057][ T8218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.668319][ T8218] hsr_slave_0: entered promiscuous mode [ 313.677414][ T8218] hsr_slave_1: entered promiscuous mode [ 313.684367][ T8218] debugfs: 'hsr0' already exists in 'hsr' [ 313.692628][ T8218] Cannot create hsr debugfs directory [ 314.179002][ T4943] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 314.193565][ T4943] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 314.203817][ T4943] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 314.219398][ T4943] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 314.229822][ T4943] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 314.231856][ T5641] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 314.240188][ T4943] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 314.248083][ T5641] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 314.264571][ T5641] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 314.272994][ T5641] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 314.311153][ T5641] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 314.336010][ T5637] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 314.348973][ T5637] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 314.363401][ T5637] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 314.376901][ T5637] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 314.567092][ T4943] Bluetooth: hci15: command tx timeout [ 315.070303][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.078088][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.085489][ T8231] bridge_slave_0: entered allmulticast mode [ 315.101759][ T8231] bridge_slave_0: entered promiscuous mode [ 315.126894][ T4943] Bluetooth: hci16: command tx timeout [ 315.135547][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.145944][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.153442][ T8231] bridge_slave_1: entered allmulticast mode [ 315.161995][ T8231] bridge_slave_1: entered promiscuous mode [ 315.221995][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.236185][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.310128][ T8231] team0: Port device team_slave_0 added [ 315.342322][ T8231] team0: Port device team_slave_1 added [ 315.411234][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.418327][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.445467][ T8231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.472747][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.495663][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.523520][ T8231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.619938][ T8231] hsr_slave_0: entered promiscuous mode [ 315.629146][ T8231] hsr_slave_1: entered promiscuous mode [ 315.636273][ T8231] debugfs: 'hsr0' already exists in 'hsr' [ 315.642152][ T8231] Cannot create hsr debugfs directory [ 316.326541][ T4943] Bluetooth: hci18: command tx timeout [ 316.326551][ T5637] Bluetooth: hci17: command tx timeout [ 316.379768][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.387303][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.395245][ T8254] bridge_slave_0: entered allmulticast mode [ 316.403929][ T8254] bridge_slave_0: entered promiscuous mode [ 316.410355][ T4943] Bluetooth: hci19: command tx timeout [ 316.425733][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.433093][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.440721][ T8254] bridge_slave_1: entered allmulticast mode [ 316.448147][ T8254] bridge_slave_1: entered promiscuous mode [ 316.577485][ T8254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.611478][ T8254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.645963][ T4943] Bluetooth: hci15: command tx timeout [ 316.707690][ T8254] team0: Port device team_slave_0 added [ 316.737931][ T8254] team0: Port device team_slave_1 added [ 316.825444][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.833086][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.859703][ T8254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.887385][ T8256] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.894808][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.902827][ T8256] bridge_slave_0: entered allmulticast mode [ 316.910454][ T8256] bridge_slave_0: entered promiscuous mode [ 316.920386][ T8254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.927813][ T8254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.954328][ T8254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.983081][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.990689][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.998903][ T8256] bridge_slave_1: entered allmulticast mode [ 317.006909][ T8256] bridge_slave_1: entered promiscuous mode [ 317.061454][ T8256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.092499][ T8256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.147879][ T8254] hsr_slave_0: entered promiscuous mode [ 317.154453][ T8254] hsr_slave_1: entered promiscuous mode [ 317.160919][ T8254] debugfs: 'hsr0' already exists in 'hsr' [ 317.167242][ T8254] Cannot create hsr debugfs directory [ 317.181514][ T8256] team0: Port device team_slave_0 added [ 317.193835][ T8256] team0: Port device team_slave_1 added [ 317.206062][ T4943] Bluetooth: hci16: command tx timeout [ 317.266798][ T8256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.274049][ T8256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.300986][ T8256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.330896][ T8256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.338086][ T8256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.364661][ T8256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.458730][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.467655][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.520666][ T8256] hsr_slave_0: entered promiscuous mode [ 317.531116][ T8256] hsr_slave_1: entered promiscuous mode [ 317.537911][ T8256] debugfs: 'hsr0' already exists in 'hsr' [ 317.543675][ T8256] Cannot create hsr debugfs directory [ 317.620498][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.628225][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.636801][ T8252] bridge_slave_0: entered allmulticast mode [ 317.644220][ T8252] bridge_slave_0: entered promiscuous mode [ 317.666872][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.674426][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.682401][ T8252] bridge_slave_1: entered allmulticast mode [ 317.690641][ T8252] bridge_slave_1: entered promiscuous mode [ 317.789691][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.802420][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.867248][ T8252] team0: Port device team_slave_0 added [ 317.892103][ T8252] team0: Port device team_slave_1 added [ 317.954313][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.961983][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.989887][ T8252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.004079][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.012000][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.040404][ T8252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.092788][ T8252] hsr_slave_0: entered promiscuous mode [ 318.101713][ T8252] hsr_slave_1: entered promiscuous mode [ 318.108697][ T8252] debugfs: 'hsr0' already exists in 'hsr' [ 318.114693][ T8252] Cannot create hsr debugfs directory [ 318.406398][ T4943] Bluetooth: hci18: command tx timeout [ 318.416191][ T4943] Bluetooth: hci17: command tx timeout [ 318.486409][ T4943] Bluetooth: hci19: command tx timeout [ 318.731093][ T4943] Bluetooth: hci15: command tx timeout [ 319.285979][ T4943] Bluetooth: hci16: command tx timeout [ 319.528337][ T4943] Bluetooth: hci8: command 0x0406 tx timeout [ 319.529046][ T50] Bluetooth: hci9: command 0x0406 tx timeout [ 319.534529][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 319.551578][ T4943] Bluetooth: hci7: command 0x0406 tx timeout [ 319.559065][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 320.006246][ T1637] block nbd0: Possible stuck request ffff888027250000: control (read@0,4096B). Runtime 150 seconds [ 320.485965][ T5645] Bluetooth: hci18: command tx timeout [ 320.487633][ T5628] Bluetooth: hci17: command tx timeout [ 320.566037][ T5628] Bluetooth: hci19: command tx timeout [ 320.805902][ T5628] Bluetooth: hci15: command tx timeout [ 321.375946][ T5628] Bluetooth: hci16: command tx timeout [ 322.569056][ T5628] Bluetooth: hci18: command tx timeout [ 322.569233][ T5645] Bluetooth: hci17: command tx timeout [ 322.646373][ T5645] Bluetooth: hci19: command tx timeout [ 328.326418][ T31] INFO: task syz.4.684:7994 blocked for more than 143 seconds. [ 328.334124][ T31] Not tainted syzkaller #0 [ 328.339417][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.348560][ T31] task:syz.4.684 state:D stack:27640 pid:7994 tgid:7990 ppid:5633 task_flags:0x400140 flags:0x00080002 [ 328.361129][ T31] Call Trace: [ 328.364692][ T31] [ 328.368038][ T31] __schedule+0x17b4/0x5680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 328.372619][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 328.379075][ T31] ? __pfx___schedule+0x10/0x10 [ 328.384021][ T31] ? schedule+0x90/0x360 [ 328.388981][ T31] schedule+0x164/0x360 [ 328.393344][ T31] schedule_preempt_disabled+0x13/0x30 [ 328.399021][ T31] __mutex_lock+0x7f7/0x1550 [ 328.403666][ T31] ? kernel_text_address+0xa5/0xe0 [ 328.428119][ T31] ? __mutex_lock+0x608/0x1550 [ 328.445337][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 328.464759][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 328.476229][ T31] ? stack_trace_save+0xa9/0x100 [ 328.482295][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 328.487773][ T31] ? radix_tree_lookup+0x240/0x290 [ 328.493057][ T31] genl_rcv_msg+0x10b/0x7a0 [ 328.497783][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.502908][ T31] netlink_rcv_skb+0x232/0x4b0 [ 328.508094][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.513304][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.518802][ T31] ? down_read+0x270/0x2e0 [ 328.523367][ T31] ? genl_rcv+0xd/0x40 [ 328.527728][ T31] genl_rcv+0x28/0x40 [ 328.531929][ T31] netlink_unicast+0x75c/0x8e0 [ 328.536900][ T31] netlink_sendmsg+0x813/0xb40 [ 328.541726][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.547242][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 328.552323][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.558271][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.563726][ T31] __sys_sendto+0x672/0x710 [ 328.568533][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 328.573747][ T31] ? exc_page_fault+0x6a/0xc0 [ 328.578667][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 328.584443][ T31] __x64_sys_sendto+0xde/0x100 [ 328.589675][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.596042][ T31] do_syscall_64+0x15f/0xf80 [ 328.600687][ T31] ? trace_irq_disable+0x3b/0x140 [ 328.606165][ T31] ? clear_bhb_loop+0x40/0x90 [ 328.611337][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.617329][ T31] RIP: 0033:0x7f5ef5d5d60e [ 328.621800][ T31] RSP: 002b:00007f5ef6d28e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 328.630581][ T31] RAX: ffffffffffffffda RBX: 00007f5ef6d2a6c0 RCX: 00007f5ef5d5d60e [ 328.638652][ T31] RDX: 0000000000000028 RSI: 00007f5ef6d29000 RDI: 0000000000000004 [ 328.647092][ T31] RBP: 0000000000000000 R08: 00007f5ef6d28f04 R09: 000000000000000c [ 328.655200][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 328.663737][ T31] R13: 00007f5ef6d28f58 R14: 00007f5ef6d29000 R15: 0000000000000000 [ 328.671983][ T31] [ 328.675267][ T31] INFO: task syz.3.685:7995 blocked for more than 143 seconds. [ 328.683219][ T31] Not tainted syzkaller #0 [ 328.688602][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.697851][ T31] task:syz.3.685 state:D stack:26312 pid:7995 tgid:7991 ppid:5625 task_flags:0x480140 flags:0x00080002 [ 328.710231][ T31] Call Trace: [ 328.713552][ T31] [ 328.716669][ T31] __schedule+0x17b4/0x5680 [ 328.721308][ T31] ? __pfx___schedule+0x10/0x10 [ 328.726605][ T31] ? schedule+0x90/0x360 [ 328.731048][ T31] schedule+0x164/0x360 [ 328.735368][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 328.741156][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 328.747914][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 328.754336][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 328.761124][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 328.767476][ T31] nbd_set_size+0x454/0x680 [ 328.772152][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 328.777483][ T31] ? nla_memcpy+0x5b/0xc0 [ 328.781865][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 328.787369][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 328.793201][ T31] ? rcu_is_watching+0x15/0xb0 [ 328.798086][ T31] ? trace_kmalloc+0x2a/0xf0 [ 328.802821][ T31] ? __nla_parse+0x40/0x60 [ 328.808015][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 328.814527][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 328.821041][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 328.826756][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 328.832853][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 328.838078][ T31] genl_rcv_msg+0x61c/0x7a0 [ 328.842634][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.848039][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 328.853873][ T31] netlink_rcv_skb+0x232/0x4b0 [ 328.858777][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 328.864033][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.869542][ T31] ? down_read+0x270/0x2e0 [ 328.874099][ T31] ? genl_rcv+0xd/0x40 [ 328.878485][ T31] genl_rcv+0x28/0x40 [ 328.882601][ T31] netlink_unicast+0x75c/0x8e0 [ 328.887604][ T31] netlink_sendmsg+0x813/0xb40 [ 328.892717][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.898430][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 328.903440][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.909080][ T31] ____sys_sendmsg+0x972/0x9f0 [ 328.913905][ T31] ? __might_fault+0xaf/0x130 [ 328.918897][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.924363][ T31] ? import_iovec+0x73/0xa0 [ 328.929148][ T31] ___sys_sendmsg+0x2a5/0x360 [ 328.933958][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 328.939130][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.944686][ T31] ? __fget_files+0x2a/0x420 [ 328.949502][ T31] ? __fget_files+0x3a0/0x420 [ 328.954502][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 328.959836][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.966929][ T31] ? __pfx_ksys_write+0x10/0x10 [ 328.971992][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.978377][ T31] do_syscall_64+0x15f/0xf80 [ 328.983055][ T31] ? trace_irq_disable+0x3b/0x140 [ 328.988293][ T31] ? clear_bhb_loop+0x40/0x90 [ 328.993219][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.999300][ T31] RIP: 0033:0x7f4d6e19cdd9 [ 329.003755][ T31] RSP: 002b:00007f4d6c3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.012456][ T31] RAX: ffffffffffffffda RBX: 00007f4d6e415fa0 RCX: 00007f4d6e19cdd9 [ 329.020658][ T31] RDX: 0000000020000804 RSI: 0000200000001900 RDI: 0000000000000004 [ 329.028970][ T31] RBP: 00007f4d6c3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 329.037329][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.045347][ T31] R13: 00007f4d6e416038 R14: 00007f4d6e415fa0 R15: 00007fff2f8e5778 [ 329.054475][ T31] [ 329.058892][ T31] INFO: task syz.1.687:8001 blocked for more than 144 seconds. [ 329.066660][ T31] Not tainted syzkaller #0 [ 329.071864][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.080907][ T31] task:syz.1.687 state:D stack:27904 pid:8001 tgid:8000 ppid:5624 task_flags:0x400040 flags:0x00080002 [ 329.093030][ T31] Call Trace: [ 329.096489][ T31] [ 329.099463][ T31] __schedule+0x17b4/0x5680 [ 329.103978][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 329.109199][ T31] ? __pfx___schedule+0x10/0x10 [ 329.114087][ T31] ? schedule+0x90/0x360 [ 329.118613][ T31] schedule+0x164/0x360 [ 329.122894][ T31] schedule_preempt_disabled+0x13/0x30 [ 329.128653][ T31] __mutex_lock+0x7f7/0x1550 [ 329.133276][ T31] ? __mutex_lock+0x608/0x1550 [ 329.138380][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 329.143150][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 329.148323][ T31] ? radix_tree_lookup+0x240/0x290 [ 329.153504][ T31] genl_rcv_msg+0x10b/0x7a0 [ 329.158259][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.163355][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 329.168970][ T31] netlink_rcv_skb+0x232/0x4b0 [ 329.174361][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.180108][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.185562][ T31] ? down_read+0x270/0x2e0 [ 329.190191][ T31] ? genl_rcv+0xd/0x40 [ 329.194509][ T31] genl_rcv+0x28/0x40 [ 329.198694][ T31] netlink_unicast+0x75c/0x8e0 [ 329.203522][ T31] netlink_sendmsg+0x813/0xb40 [ 329.208691][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.214167][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 329.219621][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.225075][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.230482][ T31] __sys_sendto+0x672/0x710 [ 329.235045][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 329.240555][ T31] ? exc_page_fault+0x6a/0xc0 [ 329.245422][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 329.251178][ T31] __x64_sys_sendto+0xde/0x100 [ 329.256563][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.262963][ T31] do_syscall_64+0x15f/0xf80 [ 329.267828][ T31] ? trace_irq_disable+0x3b/0x140 [ 329.273485][ T31] ? clear_bhb_loop+0x40/0x90 [ 329.278634][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.284621][ T31] RIP: 0033:0x7f4af9f5d60e [ 329.289276][ T31] RSP: 002b:00007f4af81f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 329.298228][ T31] RAX: ffffffffffffffda RBX: 00007f4af81f66c0 RCX: 00007f4af9f5d60e [ 329.306285][ T31] RDX: 0000000000000020 RSI: 00007f4af81f5000 RDI: 0000000000000007 [ 329.314561][ T31] RBP: 0000000000000000 R08: 00007f4af81f4f04 R09: 000000000000000c [ 329.322943][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 329.331039][ T31] R13: 00007f4af81f4f58 R14: 00007f4af81f5000 R15: 0000000000000000 [ 329.339525][ T31] [ 329.342614][ T31] INFO: task syz.0.689:8009 blocked for more than 144 seconds. [ 329.356025][ T31] Not tainted syzkaller #0 [ 329.361152][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.370395][ T31] task:syz.0.689 state:D stack:27800 pid:8009 tgid:8007 ppid:5636 task_flags:0x400140 flags:0x00080002 [ 329.383395][ T31] Call Trace: [ 329.387308][ T31] [ 329.390405][ T31] __schedule+0x17b4/0x5680 [ 329.395219][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 329.401019][ T31] ? __pfx___schedule+0x10/0x10 [ 329.406186][ T31] ? schedule+0x90/0x360 [ 329.410486][ T31] schedule+0x164/0x360 [ 329.414654][ T31] schedule_preempt_disabled+0x13/0x30 [ 329.420339][ T31] __mutex_lock+0x7f7/0x1550 [ 329.424974][ T31] ? preempt_schedule_common+0x82/0xd0 [ 329.430739][ T31] ? __mutex_lock+0x608/0x1550 [ 329.435637][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 329.440358][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 329.445511][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 329.450670][ T31] ? radix_tree_lookup+0x240/0x290 [ 329.455916][ T31] genl_rcv_msg+0x10b/0x7a0 [ 329.460449][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.465478][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 329.471243][ T31] netlink_rcv_skb+0x232/0x4b0 [ 329.476925][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.482007][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.487595][ T31] ? down_read+0x270/0x2e0 [ 329.492188][ T31] ? genl_rcv+0xd/0x40 [ 329.496470][ T31] genl_rcv+0x28/0x40 [ 329.500480][ T31] netlink_unicast+0x75c/0x8e0 [ 329.505260][ T31] netlink_sendmsg+0x813/0xb40 [ 329.510380][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.515841][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 329.520817][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.526611][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.531971][ T31] __sys_sendto+0x672/0x710 [ 329.536578][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 329.541679][ T31] ? exc_page_fault+0x6a/0xc0 [ 329.546597][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 329.552022][ T31] __x64_sys_sendto+0xde/0x100 [ 329.556845][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.562969][ T31] do_syscall_64+0x15f/0xf80 [ 329.567710][ T31] ? trace_irq_disable+0x3b/0x140 [ 329.573120][ T31] ? clear_bhb_loop+0x40/0x90 [ 329.577918][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.584117][ T31] RIP: 0033:0x7f37b335d60e [ 329.588792][ T31] RSP: 002b:00007f37b4229e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 329.597381][ T31] RAX: ffffffffffffffda RBX: 00007f37b422b6c0 RCX: 00007f37b335d60e [ 329.605458][ T31] RDX: 000000000000001c RSI: 00007f37b422a000 RDI: 0000000000000003 [ 329.613887][ T31] RBP: 0000000000000000 R08: 00007f37b4229f04 R09: 000000000000000c [ 329.622104][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 329.630349][ T31] R13: 00007f37b4229f58 R14: 00007f37b422a000 R15: 0000000000000000 [ 329.638410][ T31] [ 329.641477][ T31] INFO: task syz.2.691:8014 blocked for more than 144 seconds. [ 329.649458][ T31] Not tainted syzkaller #0 [ 329.654448][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.663426][ T31] task:syz.2.691 state:D stack:27264 pid:8014 tgid:8013 ppid:5631 task_flags:0x400140 flags:0x00080002 [ 329.675766][ T31] Call Trace: [ 329.679198][ T31] [ 329.682741][ T31] __schedule+0x17b4/0x5680 [ 329.687525][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 329.692768][ T31] ? __pfx___schedule+0x10/0x10 [ 329.697968][ T31] ? schedule+0x90/0x360 [ 329.702375][ T31] schedule+0x164/0x360 [ 329.706820][ T31] schedule_preempt_disabled+0x13/0x30 [ 329.712337][ T31] __mutex_lock+0x7f7/0x1550 [ 329.717081][ T31] ? __mutex_lock+0x608/0x1550 [ 329.721892][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 329.726611][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 329.731677][ T31] ? radix_tree_lookup+0x240/0x290 [ 329.737106][ T31] genl_rcv_msg+0x10b/0x7a0 [ 329.741847][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.747023][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 329.752567][ T31] netlink_rcv_skb+0x232/0x4b0 [ 329.757843][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.762945][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.768666][ T31] ? down_read+0x270/0x2e0 [ 329.773182][ T31] ? genl_rcv+0xd/0x40 [ 329.777661][ T31] genl_rcv+0x28/0x40 [ 329.781717][ T31] netlink_unicast+0x75c/0x8e0 [ 329.786851][ T31] netlink_sendmsg+0x813/0xb40 [ 329.791770][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.797201][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 329.802191][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.807535][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.812918][ T31] __sys_sendto+0x672/0x710 [ 329.817665][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 329.822768][ T31] ? exc_page_fault+0x6a/0xc0 [ 329.827518][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 329.832894][ T31] __x64_sys_sendto+0xde/0x100 [ 329.838001][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.844155][ T31] do_syscall_64+0x15f/0xf80 [ 329.849006][ T31] ? trace_irq_disable+0x3b/0x140 [ 329.854179][ T31] ? clear_bhb_loop+0x40/0x90 [ 329.859095][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.865174][ T31] RIP: 0033:0x7f9e3d75d60e [ 329.869769][ T31] RSP: 002b:00007f9e3e576e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 329.878539][ T31] RAX: ffffffffffffffda RBX: 00007f9e3e5786c0 RCX: 00007f9e3d75d60e [ 329.886959][ T31] RDX: 0000000000000020 RSI: 00007f9e3e577000 RDI: 0000000000000003 [ 329.895050][ T31] RBP: 0000000000000000 R08: 00007f9e3e576f04 R09: 000000000000000c [ 329.903203][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 329.911305][ T31] R13: 00007f9e3e576f58 R14: 00007f9e3e577000 R15: 0000000000000000 [ 329.919652][ T31] [ 329.922773][ T31] INFO: task syz.2.691:8015 blocked for more than 144 seconds. [ 329.931237][ T31] Not tainted syzkaller #0 [ 329.936336][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.945084][ T31] task:syz.2.691 state:D stack:25512 pid:8015 tgid:8013 ppid:5631 task_flags:0x400140 flags:0x00080002 [ 329.957161][ T31] Call Trace: [ 329.960512][ T31] [ 329.963470][ T31] __schedule+0x17b4/0x5680 [ 329.968062][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 329.973138][ T31] ? __pfx___schedule+0x10/0x10 [ 329.978164][ T31] ? schedule+0x90/0x360 [ 329.982469][ T31] schedule+0x164/0x360 [ 329.986699][ T31] schedule_preempt_disabled+0x13/0x30 [ 329.992421][ T31] __mutex_lock+0x7f7/0x1550 [ 329.997197][ T31] ? kernel_text_address+0xa5/0xe0 [ 330.002386][ T31] ? __mutex_lock+0x608/0x1550 [ 330.008569][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 330.013566][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 330.019101][ T31] ? stack_trace_save+0xa9/0x100 [ 330.024203][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 330.029350][ T31] ? radix_tree_lookup+0x240/0x290 [ 330.034776][ T31] genl_rcv_msg+0x10b/0x7a0 [ 330.039559][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.044687][ T31] netlink_rcv_skb+0x232/0x4b0 [ 330.049676][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.054887][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.060476][ T31] ? down_read+0x270/0x2e0 [ 330.064920][ T31] ? genl_rcv+0xd/0x40 [ 330.069244][ T31] genl_rcv+0x28/0x40 [ 330.073393][ T31] netlink_unicast+0x75c/0x8e0 [ 330.078542][ T31] netlink_sendmsg+0x813/0xb40 [ 330.083352][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.090007][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 330.095321][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.100768][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.106235][ T31] __sys_sendto+0x672/0x710 [ 330.110813][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 330.116001][ T31] ? exc_page_fault+0x6a/0xc0 [ 330.120727][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 330.126212][ T31] __x64_sys_sendto+0xde/0x100 [ 330.131155][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.137397][ T31] do_syscall_64+0x15f/0xf80 [ 330.142045][ T31] ? trace_irq_disable+0x3b/0x140 [ 330.147358][ T31] ? clear_bhb_loop+0x40/0x90 [ 330.152296][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.158488][ T31] RIP: 0033:0x7f9e3d75d60e [ 330.163077][ T31] RSP: 002b:00007f9e3b9f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 330.171865][ T31] RAX: ffffffffffffffda RBX: 00007f9e3b9f66c0 RCX: 00007f9e3d75d60e [ 330.180235][ T31] RDX: 000000000000001c RSI: 00007f9e3b9f5000 RDI: 0000000000000007 [ 330.188633][ T31] RBP: 0000000000000000 R08: 00007f9e3b9f4f04 R09: 000000000000000c [ 330.197157][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 330.205334][ T31] R13: 00007f9e3b9f4f58 R14: 00007f9e3b9f5000 R15: 0000000000000000 [ 330.214221][ T31] [ 330.217446][ T31] [ 330.217446][ T31] Showing all locks held in the system: [ 330.225273][ T31] 1 lock held by khungtaskd/31: [ 330.230503][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 330.240625][ T31] 2 locks held by getty/5379: [ 330.245478][ T31] #0: ffff88803233d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 330.257360][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 330.267909][ T31] 1 lock held by udevd/5630: [ 330.272611][ T31] #0: ffff8880271c7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 330.282512][ T31] 2 locks held by syz.4.684/7994: [ 330.287661][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.296459][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.305542][ T31] 6 locks held by syz.3.685/7995: [ 330.310682][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.319099][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.328492][ T31] #2: ffff888027158a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 330.339189][ T31] #3: ffff8880272147c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 330.348889][ T31] #4: ffff888027214190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 330.361442][ T31] #5: ffff8880272141c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 330.373964][ T31] 2 locks held by syz.1.687/8001: [ 330.379126][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.387412][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.396528][ T31] 2 locks held by syz.0.689/8009: [ 330.401997][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.410789][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.420085][ T31] 2 locks held by syz.2.691/8014: [ 330.425429][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.433724][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.442894][ T31] 2 locks held by syz.2.691/8015: [ 330.448009][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.456477][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.465548][ T31] 2 locks held by syz-executor/8028: [ 330.471086][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.480051][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.489356][ T31] 2 locks held by syz-executor/8030: [ 330.494792][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.503486][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.512833][ T31] 2 locks held by syz-executor/8050: [ 330.518231][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.526588][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.535846][ T31] 2 locks held by syz-executor/8051: [ 330.541184][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.549540][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.558876][ T31] 2 locks held by syz-executor/8064: [ 330.564190][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.572900][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.582196][ T31] 2 locks held by syz-executor/8125: [ 330.587819][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.596394][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.605950][ T31] 2 locks held by syz-executor/8127: [ 330.611468][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.619931][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.629081][ T31] 2 locks held by syz-executor/8156: [ 330.634367][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.642901][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.652183][ T31] 2 locks held by syz-executor/8158: [ 330.657729][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.666127][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.675576][ T31] 2 locks held by syz-executor/8160: [ 330.681048][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.689902][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.699424][ T31] 2 locks held by syz-executor/8218: [ 330.704940][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.713740][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.722978][ T31] 2 locks held by syz-executor/8231: [ 330.728470][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.736774][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.745937][ T31] 2 locks held by syz-executor/8252: [ 330.751354][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.759600][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.769040][ T31] 2 locks held by syz-executor/8254: [ 330.774359][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.782596][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.791770][ T31] 2 locks held by syz-executor/8256: [ 330.797170][ T31] #0: ffffffff8fe3f8c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 330.805405][ T31] #1: ffffffff8fe3f700 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 330.815297][ T31] [ 330.817730][ T31] ============================================= [ 330.817730][ T31] [ 330.826249][ T31] NMI backtrace for cpu 1 [ 330.826263][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 330.826277][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.826285][ T31] Call Trace: [ 330.826290][ T31] [ 330.826295][ T31] dump_stack_lvl+0xe8/0x150 [ 330.826314][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 330.826329][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 330.826344][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 330.826361][ T31] sys_info+0x135/0x170 [ 330.826373][ T31] watchdog+0xfd3/0x1030 [ 330.826394][ T31] ? watchdog+0x1c9/0x1030 [ 330.826413][ T31] kthread+0x388/0x470 [ 330.826429][ T31] ? __pfx_watchdog+0x10/0x10 [ 330.826445][ T31] ? __pfx_kthread+0x10/0x10 [ 330.826460][ T31] ret_from_fork+0x514/0xb70 [ 330.826475][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 330.826488][ T31] ? __switch_to+0xc79/0x1410 [ 330.826506][ T31] ? __pfx_kthread+0x10/0x10 [ 330.826522][ T31] ret_from_fork_asm+0x1a/0x30 [ 330.826544][ T31] [ 330.826549][ T31] Sending NMI from CPU 1 to CPUs 0: [ 330.938532][ C0] NMI backtrace for cpu 0 [ 330.938553][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 330.938572][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.938582][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 330.938613][ C0] Code: db 7c 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 c1 1f 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 330.938627][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 330.938644][ C0] RAX: 0000000000179a59 RBX: ffffffff819a91ea RCX: 0000000080000001 [ 330.938656][ C0] RDX: 0000000000000001 RSI: ffffffff8dfaaad9 RDI: ffffffff8c28ade0 [ 330.938667][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 330.938678][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 330.938697][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 330.938708][ C0] FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 330.938722][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.938733][ C0] CR2: 00007f32d4347e20 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 330.938750][ C0] Call Trace: [ 330.938756][ C0] [ 330.938762][ C0] default_idle+0x9/0x20 [ 330.938779][ C0] default_idle_call+0x72/0xb0 [ 330.938796][ C0] do_idle+0x36a/0x5f0 [ 330.938813][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 330.938833][ C0] ? __pfx_do_idle+0x10/0x10 [ 330.938855][ C0] cpu_startup_entry+0x43/0x60 [ 330.938873][ C0] rest_init+0x2de/0x300 [ 330.938892][ C0] start_kernel+0x38a/0x3e0 [ 330.938915][ C0] x86_64_start_reservations+0x24/0x30 [ 330.938933][ C0] x86_64_start_kernel+0x143/0x1c0 [ 330.938950][ C0] common_startup_64+0x13e/0x147 [ 330.938979][ C0] [ 331.123105][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 331.135222][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 331.144430][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.154480][ T31] Call Trace: [ 331.157774][ T31] [ 331.160740][ T31] vpanic+0x56c/0xa60 [ 331.164721][ T31] ? __pfx___schedule+0x10/0x10 [ 331.169664][ T31] ? __pfx_vpanic+0x10/0x10 [ 331.174167][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 331.180345][ T31] panic+0xc5/0xd0 [ 331.184273][ T31] ? __pfx_panic+0x10/0x10 [ 331.188855][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 331.194253][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 331.200411][ T31] watchdog+0x102c/0x1030 [ 331.204748][ T31] ? watchdog+0x1c9/0x1030 [ 331.209168][ T31] kthread+0x388/0x470 [ 331.213243][ T31] ? __pfx_watchdog+0x10/0x10 [ 331.218096][ T31] ? __pfx_kthread+0x10/0x10 [ 331.222699][ T31] ret_from_fork+0x514/0xb70 [ 331.227319][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 331.232436][ T31] ? __switch_to+0xc79/0x1410 [ 331.237219][ T31] ? __pfx_kthread+0x10/0x10 [ 331.241914][ T31] ret_from_fork_asm+0x1a/0x30 [ 331.246877][ T31] [ 331.250794][ T31] Kernel Offset: disabled [ 331.255150][ T31] Rebooting in 86400 seconds..