last executing test programs: 18.547743702s ago: executing program 3 (id=1524): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711247000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000500), &(0x7f00000005c0)=0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="8800000900020073797a320000e5e9ec3b95cc40cc000008024100727865001400330070696d367265673100000000000000000900020073797a3200000000080041007278650014003300677265300000000000000000000000000900020073797a320000000008004100736977001400335f736c6176655f3000"/141], 0x88}, 0x1, 0x0, 0x0, 0x20004040}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv4_delrule={0x30, 0x21, 0x20, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x5, 0x10}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0xff800000}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0xc000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20) sendmsg$inet(r9, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r8) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x1c, r13, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r13, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x20}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4014) 18.424810099s ago: executing program 1 (id=1527): getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xa, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x54}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x147}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x129}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0xc000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.36379041s ago: executing program 2 (id=1528): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) socket$xdp(0x2c, 0x3, 0x0) ioctl$PPPIOCGUNIT(r8, 0x80047456, &(0x7f0000000080)) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.244112264s ago: executing program 1 (id=1530): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0003000000dcffed3430410000000000"], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f7, &(0x7f0000003200)={'ip6_vti0\x00', 0x0}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x10, 0xfffffff9, 0x4, {{0xa, 0x4, 0x2, 0x4, 0x28, 0x67, 0x0, 0x2, 0x29, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x13, 0xc9, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2]}]}}}}}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x700, 0x20, 0x2, 0x1, {{0xc, 0x4, 0x2, 0x37, 0x30, 0x65, 0x0, 0xb, 0x29, 0x0, @broadcast, @empty, {[@timestamp={0x44, 0x1c, 0xd, 0x0, 0x9, [0xc, 0x9, 0x5, 0x9, 0x5, 0x1]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="cc070000", @ANYRES16=r2, @ANYBLOB="00052dbd7000fedbdf250c0000003000018008000100", @ANYRES32=r3, @ANYBLOB="08000300000000001400020073797a6b616c6c6572310000000000000800030002000000380003802c0003802800018008000100ffffffff0500020000000000050002000000000008000100000000000400030008000200040000005c000180140002006772653000000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300020000000800030002000000140002006261746164765f736c6176655f31000008000100", @ANYRES32=r6, @ANYBLOB="8481dff069423e44db40556206000000ae923c4164233edd9744e098e0b6f6029651aaf81bc7f75df571e6a8ed69b7a4fa2bc4f53838742cfd66fbd3e21a8206a586a0689d5a43bba36566a3576c68242a65e95abddd2c28", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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"], 0x7cc}}, 0x20088000) 17.850520871s ago: executing program 3 (id=1534): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000200)="4b4f9d", 0x3}], 0x1) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sec_ctx={0xc, 0x8, {0xfffffe9c}}, @XFRMA_IF_ID={0x8}]}, 0x14c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 17.754145737s ago: executing program 1 (id=1535): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a0000e107000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="331b05cb1becb5ac0fd01c051210ac7b57cc111cbfdb16eb931c64804b537ff77bbe36514e0c122c18cf83401b16d8efd5c6cae8ba391c82ce10b59fb3854d81298bdb48086d79eff7537af7ed767cb34bb360012d516671d30cb036b12a57f55f3ecc28898f874f87cfbca86f4196f6184262175b0d66b6d789715efc6923b25cdb16cbfed0a6f83eae13bde8945a9c"], 0x138}, 0x1, 0x0, 0x0, 0x240040d7}, 0x40050) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x3) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000061df815f42561646bf00240012800b0001006d616373656800001400028005000b00010000000500090001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0x401) listen(r3, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0x3}, &(0x7f0000000300)=0x8) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x27, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010002d04040000005c000000", @ANYRESHEX=r0, @ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x80) 17.696490343s ago: executing program 3 (id=1536): socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x70bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x22, 0x2, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x8080) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000001c0)={{0x16, @remote, 0x4e20, 0x0, 'none\x00', 0x1a, 0x49f2, 0x5a}, {@broadcast, 0x4e20, 0x0, 0x8000, 0x4, 0xf}}, 0x44) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x9) 17.488004512s ago: executing program 1 (id=1539): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) accept(r2, 0x0, 0x0) close(0x3) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000140)={r1, 0xa3, 0x7fffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x22, 0x0, &(0x7f0000000100)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x404c080) 17.483141816s ago: executing program 2 (id=1540): socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'ipvlan0\x00', {0x4}, 0x7f}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17.431117628s ago: executing program 4 (id=1541): socket(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x620, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x22}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063010400000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.27548501s ago: executing program 3 (id=1542): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x2e, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f00000000c0)) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25021f00ff", @ANYRES32=r4, @ANYBLOB="08000400640101040800085723e9d911bc96d1000a010102080001000300000008000900030000000800090007010000"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000240)={r6, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r5, 0x8915, &(0x7f00000002c0)={'geneve1\x00'}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100fb19ffff0000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b00"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r11, 0x20a, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x404a820) 17.27475834s ago: executing program 0 (id=1543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x400448c9, &(0x7f00000000c0)={'wlan0\x00', 0x1}) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, 0x0, 0x601, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x30}}, 0x4000) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x38}}, 0x4) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000001540)={0xffffffffffffffff, 0xffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b70400008000000085000000aa00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.25918531s ago: executing program 4 (id=1544): r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000000)={0x8e8, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f000000d600)={'veth1_macvtap\x00', @broadcast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f000000d640)={0x13, 0x2, {0xfffffffffffffffe, @struct={0x9, 0xff}, 0x0, 0xc9c, 0x8, 0x8, 0xffffffff, 0x8001, 0x40, @usage=0x4, 0x71dc5af8, 0x1e3, [0x4, 0x5, 0x8, 0x3ff, 0xc, 0x87]}, {0x6, @usage, 0x0, 0xa, 0x49b, 0x1, 0x8, 0x80, 0x1, @struct={0xe0e8, 0x6}, 0x6, 0x7fffffff, [0x8, 0x3, 0x7, 0x3, 0xffffffffffff4cfc, 0xbf]}, {0x2b9, @usage=0x2, 0x0, 0x8, 0x10, 0x0, 0x9, 0x6, 0x30, @struct={0x3, 0xb8}, 0x8, 0x9, [0x80, 0x514f, 0x7, 0x4, 0x4, 0x400]}, {0x15e, 0x2, 0x4ac4}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f000000da40)={r2, 0x3, 0x7fffffff, 0x1}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f000000de40), &(0x7f000000de80)=0x4) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f000000dec0)={r1}, 0x8) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f000000df00)=0x3, 0x4) readv(r3, &(0x7f000000e000)=[{&(0x7f000000df40)=""/154, 0x9a}], 0x1) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f000000e040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f000000e080)={'geneve0\x00', 0x10}) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f000000e0c0)={{0x5, 0x0, 0x8, 0x6}, [{0x597, 0x6, 0x9, 0x8}, {0x400, 0x7fffffff, 0x7, 0x3}, {0x60d3, 0x2, 0xc, 0xd0}, {0x8, 0x7, 0x21, 0x1}, {0xa1, 0x40, 0x5, 0xe7}, {0x5, 0xe, 0x4, 0x3}, {0x9, 0x2, 0x9, 0x5}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f000000e1c0)={r0, 0x7fff, 0x0, 0xcaa5}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f000000e200)=0xdfca, 0x4) ioctl$NILFS_IOCTL_RESIZE(r7, 0x40086e8b, &(0x7f000000e240)=0xfffffffffffffffd) r8 = socket(0x63f22e8b17d2c82, 0xa, 0x9) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f000000e340)={&(0x7f000000e280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000e300)={&(0x7f000000e2c0)={0x30, 0x1, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9f}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000051}, 0x40800) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f000000e380)={0x1, 0x6, 0x6, 0xfff8}, 0x8) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f000000e3c0)) getsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f000000e400), &(0x7f000000e440)=0x4) sendmsg$NFT_BATCH(r8, &(0x7f000000e900)={&(0x7f000000e480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000e8c0)={&(0x7f000000e4c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x14c, 0xb, 0xa, 0x1, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPRESSIONS={0xbc, 0x12, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x44}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xf}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x20}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}, {0x6c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x58, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2b, 0x1, "fd506d39d27a05ee126faed3d50b29b9f6a459dcdf8972dfebdedb05372d5ef7dc6563e4abc39a"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4b}, @NFTA_SET_EXPR={0x4c, 0x11, 0x0, 0x1, @queue={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2774}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x101}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1f}]}}}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x24}]}, @NFT_MSG_DELTABLE={0x10c, 0x2, 0xa, 0xb01, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0xf7, 0x6, "da7f020478c53a734187f40ed71ea598586fc36c361574474ff44b5edc8104500e1cd3590e750d7e833d465a9d122776a972c0928d2090248c6a6f76fe63808d3af54ede16ec04cd303dc02977bf773a02315bfcb4045fceb94e671eb7d4c640a44ce177126d14254903c4bcf9d03bd6681ca3065dd3f6f8547ca9463fd5bd811187445ba28c72320f53ef635b031d25330bd0d7ecc878605b0b2516c34d6f677fa7df968553d37e94a4ab8f07345b89eb57e1fd07819d51349df894baac8632170f34db75997d128d74ca2b28357ca1c075ad80f31e93a6c0c47ebeb0db73ca6e5f125b4e3c6ede09ea273e3d89770e4f236b"}]}, @NFT_MSG_DELFLOWTABLE={0x11c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xdc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd3c2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'caif0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c4}, 0x1, 0x0, 0x0, 0x4c091}, 0x20040050) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000000e940)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f000000e980)=0x14) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f000000e9c0)={'gre0\x00', @multicast}) 17.23629397s ago: executing program 2 (id=1545): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x100, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x10) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x890c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0x28, 0x1c, 0x401, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x5}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000440)={r6}, 0xc) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000140), &(0x7f0000000380)=0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r1, &(0x7f0000000100)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x7, {0x6, 0x7, 0x0, 0xf7, 0x7, 0x9}}, 0xc) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="20000000ac1414aa000000002c0000000000000000000000070000000512"], 0x50}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 17.051992856s ago: executing program 1 (id=1546): socket$netlink(0x10, 0x3, 0xe) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) epoll_create(0x3ff) epoll_create1(0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x6, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x36) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0xc1, 0x3, 0x2}, 0xfffffffffffffd90) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x1}}, 0x10, 0x0}, 0xc018) mmap(&(0x7f000042e000/0x3000)=nil, 0x3000, 0xb635773f05ebbeef, 0x8031, r1, 0x215ea000) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1d, 0x2, 0x43837ed4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0xa, 0xb7, 0x10001, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xc}, 0x20, 0x7, 0x8, 0x80000000}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @private1, 0x5, 0x0, 0xff4, 0x300, 0x4, 0x10044, r7}) 17.051398268s ago: executing program 0 (id=1547): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) recvmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}, 0x8057}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/103, 0x67}, {&(0x7f00000028c0)=""/49, 0x31}], 0x6}, 0x9}], 0x2, 0x10020, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw\nw'], 0xa) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) recvmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}, 0x8057}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/103, 0x67}, {&(0x7f00000028c0)=""/49, 0x31}], 0x6}, 0x9}], 0x2, 0x10020, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw\nw'], 0xa) (async) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) (async) 16.955007185s ago: executing program 2 (id=1548): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001"], 0x4e) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 32) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @bcast, 0x5, 0x2, [@default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}}, 0x800) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x64c, 0x0}, 0x8) (async) r14 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r14, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r15 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r15, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000180)="b0b3", 0x2}], 0x1, 0x0, 0x0, 0x20000851}, 0x0) recvmmsg(r15, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/195, 0xc3}], 0x1, &(0x7f00000000c0)=""/75, 0x4b}, 0x9}], 0x1, 0x40010000, 0x0) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r13, 0x4) (async) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r11) 16.903060811s ago: executing program 0 (id=1549): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000804, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0xad, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x0, 0x0, 0x200}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000001ac1414bb000000000000000000000000000000000000bb8f0a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000004d53c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000fc010000000000000000000000000001000000006c00000000000000ac1414aa000000000000000000000000000000000000800000000000000000000000000000000000000000000000ffffac1414aa00000000330000000000000000000000000000000000ffffffffffff0300000000008100000000000000000000000000fe880000000000000000000000000001fffffffe6c00000000000000e00000010000000000000000000000000000000000000300000000000000000000000000ff01000000000000000000000000000100000000320000000a000000fc0100000000000000000000000000000000000004000200"/500], 0x23c}}, 0x0) 16.852484362s ago: executing program 3 (id=1550): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000600fddbdf251c00000000", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) 16.696316389s ago: executing program 3 (id=1551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25030000000c0002000700000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="080001"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="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", 0xfd}], 0x1}, 0x4400000c) socket$phonet_pipe(0x23, 0x5, 0x2) 16.65424156s ago: executing program 2 (id=1552): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f0000000180)) close(0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="500100001a00130700000000ffdbdf25fe8000000000000000000000000000bbff020000000000000000000000000001000400004e2100020a00000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0301000000000000000000000000000004d632000000fc000000000000000000000000000000050000000000000000000000008000001100000000000000070000000000000001000000ffffffff0000000000000000010000800000000043050000000000000300000001000000ffffffffffffff7f020100000000000001000000000000000000000000000000000000002cbd7000453500000a000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000040"], 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x2014) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) socket$tipc(0x1e, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x400, 0x10000000, 0x7fff, 0x9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4004084) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300000000000085000000c4000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 16.520399377s ago: executing program 1 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001114015dd4a145ccd1f381d84cb525731acc00000000000000000008004b0000000000"], 0x18}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x3, 0x2, 0x5, 0x16, 0x10, 0x5, 0x0, 0x6, 0x7, 0x2e, 0xa7, 0x2, 0x5}, 0xe) 16.380319913s ago: executing program 2 (id=1554): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x1, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@ip4=@multicast2, 0x800}}}]}, 0x38}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f00000001c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r8, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1, 0x1, {{0x38, 0x4, 0x0, 0x13, 0xe0, 0x66, 0x0, 0x7f, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0x0, [{@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local, 0x1}]}, @timestamp={0x44, 0x10, 0xa8, 0x0, 0x5, [0x8, 0x9, 0x10001]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x30, 0x1, 0x1, [{@loopback, 0x2}]}, @timestamp_addr={0x44, 0x24, 0x75, 0x1, 0x2, [{@loopback, 0xc13}, {@broadcast, 0xc}, {@loopback, 0xfffffffa}, {@multicast1, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x51, 0x1, 0x0, [{@loopback, 0x1}, {@empty, 0xc43}, {@empty, 0x28000}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @timestamp_addr={0x44, 0x3c, 0xe7, 0x1, 0x2, [{@loopback, 0x69c}, {@remote, 0x5dedf705}, {@empty, 0x98}, {@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfebf}, {@loopback, 0xffff8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}]}, @end]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@initdev, @remote, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001500)={0xffffffffffffffff, 0x0, &(0x7f00000014c0)={&(0x7f00000012c0)={0x1e0, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0xd, 0xf6, 0x3}, {0x2, 0x3, 0x9, 0x3}, {0x0, 0x8, 0x10, 0x2e2}]}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 16.313657275s ago: executing program 4 (id=1555): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0x4, 0x2, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x49, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 16.144081533s ago: executing program 4 (id=1556): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r7, 0x400454de, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0xa) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) (async) bind$bt_l2cap(r10, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r1, 0x84, 0x2, 0x0, &(0x7f0000000700)) 16.115733811s ago: executing program 4 (id=1557): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a00)={{0xffffffffffffffff, &(0x7f0000000000)=',-\x00', 0x80201, &(0x7f00000000c0)={@align=0x5, {0xbb, 0x4, 0x200, 0x1000}}, 0x1, &(0x7f0000000100), &(0x7f00000002c0)}, 0x8, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000300)='GPL\x00', &(0x7f0000000340), 0x0, 0x6a}, {0x1, 0x9, &(0x7f0000000380)='\'\'#\x00', &(0x7f00000003c0)="b8e5c2ce070d3ce5ced7e8ff79569a15e8871576d4d844247e95f92942ac4637992bfa76ae5d3a61c1da33a5b729e0e4faa416201c00e1a60b9caa14e4c7b7deaabb310ee581da983641ff3f47b0d11cd4c0f43d42c680be851fd57b739571de75509c45514c7a00167ce2d6fea6", 0x6e, 0x8}, {0x3, 0x7fff, &(0x7f0000000440)='GPL\x00', &(0x7f0000000480)="341dc1e3ec1a1576b545ac955267854df1d1455ca88d52536d771fbb0176575e3ac268d07ca764bcd5889ac807b4c955c61b0539a181568de6b59197ff278682414531bf6a2094735ce63b8eab66c3a0325a472398f550f10a0f70a3d3237ad4a0e203fe3e7375c2171f51f0914d1f4bd3e843599bb91ec2b00f42fe", 0x7c, 0x30}, {0x1, 0x7, &(0x7f0000000500)='\x00', &(0x7f0000000540)="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", 0x1000, 0x30}, {0x1, 0x1, &(0x7f0000001540)='\x00', &(0x7f0000001580)="3bba801f82c5835ab5b7a72328124a6f802b9dd38b3c5aa74b7ce1a326b909", 0x1f, 0x20}, {0x2, 0x93bb, &(0x7f00000015c0)='%\x00', &(0x7f0000001600)="032baa97ab953d1c48bd84797ba8cd99b798a94a77400fe64efe11fcd1e2935e6287c7dc03a531652b646839550ec1f5d20abbfa0241a558882e8a30614abeb0c49df72bd458a8319eb81428ae0aad0d22e0d547453a86f89b639610241445f3a6287326a35f8120560c7d40d815505e64dcc3ab163aa35b8241840cddb7a4ad97597cb33e62013a027f7a1a3b4a7147bf01546eff14e4e8a18be571c4cace825c355c85b0ba", 0xa6, 0xa}, {0x1, 0xc, &(0x7f00000016c0)='}%@\x00', &(0x7f0000001700)="2027cd44cd4375bd567b414837e6797eb8d250b0b5010ff91f420dcc9b0e9be208643edcbf0cd37832623639a81bc3130619b1de2f741cdec2c4e93185fd2f4786251b710e6f97183ca50e6fb72abf6d48f50be0ebf7bb522a719bfca85eada4b8c64ef74da6b063b2ef7e11531dbcaf2f9fcdd7456e9bbe2a4604b31568633686e7b3b7d5d0", 0x86, 0x20}, {0x2, 0x7ff, &(0x7f00000017c0)='GPL\x00', &(0x7f0000001800)="d8b4f1ac572cc5462725adde8c9d02f9b371c4da9ae214d72cf6374560b38af478664410d40a968fbda1a0288bc871f61b0a723eb30ad524c8805e8485f545b0ab90bd3a848dc3b7998a117d70ed1197024de377c0a25f2f29f8e2d32b2ac6733feed60ddad228ad1c0387cfe34261dfff6feea1c65603266476bdff8df1fd8a32bf1a917d14e66737e97371745606dda00e59c03abab6063423e4fc6586596b7b5ed0d8b8c01810bc1cd7b1c47eae53bba594a725f351e4ee38785f8e8e3af042c8fdadb304", 0xc6, 0x10}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x24}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000a52f28ae68cadd16cc6a7d2411bb410c507c84f15bf1fabd947a180a3a25bd41d85bbf1feb6a91f843fe31cafdb2edaccb03a987b7cb5fd682867335a5fd5087034486e6ad0362cdfface6b04a91baef5b6b333545b3df433b8c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async, rerun: 32) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r0, 0x0) (async, rerun: 32) syz_extract_tcp_res$synack(&(0x7f0000000340)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000001a80)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xfa, &(0x7f0000001ac0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "ccff00", 0xc4, 0x6, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x84, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra, @enc_lim={0x4, 0x1, 0x6}]}, @dstopts={0x59, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @loopback}]}], {{0x4e22, 0x4e22, r1, r2, 0x1, 0x0, 0x6, 0x8, 0x7, 0x0, 0x3, {[@eol]}}, {"25c507a5782ea6f3071b5a30a3feebc7abb84feadb31c4a15c3573e373d87468690e3a6a79c1977508b8a81519ae62b4130d2948cf7637476c15a36c8ae0013b6eeb921c2eff21fd4f99b86daeccf10883b062a94ce7d9b0ba4dbb8785b73f60652d388fc0cdeed57c7a27522f9cdb43869dfcf9"}}}}}}}, &(0x7f0000001bc0)={0xe7b, 0x3, [0x451, 0x82c, 0x9545, 0xe21]}) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) 16.026399026s ago: executing program 4 (id=1558): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x100, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x10) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x890c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0x28, 0x1c, 0x401, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x5}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000440)={r6}, 0xc) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000140), &(0x7f0000000380)=0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r1, &(0x7f0000000100)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x7, {0x6, 0x7, 0x0, 0xf7, 0x7, 0x9}}, 0xc) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="20000000ac1414aa000000002c0000000000000000000000070000000512"], 0x50}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 15.908316076s ago: executing program 0 (id=1559): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="3f0400001c00810ce00f80ecdb68b9f207c8e2494706eaa49104a01f000000010006fb0a0002000a0ada1b40d803faffffff0000002dcb17e28752a1f285ed5e8aca7fea955daf0deb87029ee540639e53a250855e9545fc309841b25522ebc6f29d7b10be29e6de84c554782e53c40f54c7b232aba6fbe32381649367f3bd335ab64fea3a4a954a731a9590c2fa22fa33536303219f8a9d4a60a7ebd2782fd4e7ca6d12e96b79e61c350498975522cbfea9e114863e09fd5707031c712245daa3e5d6b990a1900ac417f9b56b931f5eb4f8462fc0f3adcc5c3a51cedf85dd90e473c2e51e8503f54fd15b76b2329c629533ee1c0bcbfcccbd27e47240373fd1719b9b60874a5767de5788b1eedc8af8d58d395e1a0edba6081a9afb99ac8f33350e5fa6092d128aa0c7a6ec762255f420132c07d1ca84096b55fae98b4ac4e84c860d60b34066ca4bbb1fae06b5dc5b7548c30b89a1dc", 0x157}], 0x1, 0x0, 0x0, 0x5865}, 0x800) 15.892933472s ago: executing program 0 (id=1560): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 15.84363559s ago: executing program 0 (id=1561): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x26ffc86098878bdf}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xb, 0x10, 0x0, 0x1, [@generic="07000000772e8b"]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0x4010) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0xc000) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}, {{0x0, 0x0, 0x0}, 0x7c64}], 0x2, 0x0, 0x0) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r6) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4040084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) 1.207808087s ago: executing program 32 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001114015dd4a145ccd1f381d84cb525731acc00000000000000000008004b0000000000"], 0x18}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x3, 0x2, 0x5, 0x16, 0x10, 0x5, 0x0, 0x6, 0x7, 0x2e, 0xa7, 0x2, 0x5}, 0xe) 1.163312139s ago: executing program 33 (id=1554): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x1, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@ip4=@multicast2, 0x800}}}]}, 0x38}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f00000001c0)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000010000000f000000080034000800030008000300", @ANYRES32=r8, @ANYBLOB="050033"], 0x2c}, 0x1, 0x0, 0x0, 0x24004040}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x1, 0x1, {{0x38, 0x4, 0x0, 0x13, 0xe0, 0x66, 0x0, 0x7f, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x9f, 0x1, 0x0, [{@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@local, 0x1}]}, @timestamp={0x44, 0x10, 0xa8, 0x0, 0x5, [0x8, 0x9, 0x10001]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x30, 0x1, 0x1, [{@loopback, 0x2}]}, @timestamp_addr={0x44, 0x24, 0x75, 0x1, 0x2, [{@loopback, 0xc13}, {@broadcast, 0xc}, {@loopback, 0xfffffffa}, {@multicast1, 0x7}]}, @timestamp_addr={0x44, 0x2c, 0x51, 0x1, 0x0, [{@loopback, 0x1}, {@empty, 0xc43}, {@empty, 0x28000}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @timestamp_addr={0x44, 0x3c, 0xe7, 0x1, 0x2, [{@loopback, 0x69c}, {@remote, 0x5dedf705}, {@empty, 0x98}, {@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfebf}, {@loopback, 0xffff8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}]}, @end]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@initdev, @remote, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001500)={0xffffffffffffffff, 0x0, &(0x7f00000014c0)={&(0x7f00000012c0)={0x1e0, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x8, 0xd, 0xf6, 0x3}, {0x2, 0x3, 0x9, 0x3}, {0x0, 0x8, 0x10, 0x2e2}]}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 1.122548276s ago: executing program 34 (id=1551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25030000000c0002000700000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="080001"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20040080) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="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", 0xfd}], 0x1}, 0x4400000c) socket$phonet_pipe(0x23, 0x5, 0x2) 59.194086ms ago: executing program 35 (id=1561): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x26ffc86098878bdf}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xb, 0x10, 0x0, 0x1, [@generic="07000000772e8b"]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0x4010) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0xc000) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}], 0x3}, 0x1}, {{0x0, 0x0, 0x0}, 0x7c64}], 0x2, 0x0, 0x0) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r6) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4040084) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r5) 0s ago: executing program 36 (id=1558): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x100, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x10) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x890c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000004100000095000000000000003d789ade838a5adf0c21f97a9d6f55528c474cb385573d9fd2aff88c497a5d0ab93dbb1df77098cacd277206f0902cf2c1d66e1ef4fe6deeaf8739f048bff4c9d61b5c334ef7384130fd875789e46307b8f29c46149360bea59a42011aabc5001093a06d23b6cf4f033c6000c3ab63ee036fe7023574b86c8964c32f955d410083f7567735a2ca0100000000000000c644e801f17579bac767236f2b3addb04f55cee250cb376879ae14b9e1ab98703bc7db41925c55b0a4141ae3c08d264831d0f6365469c35621850000f6ff0000000000000000000000000000000000317dc59df6de3bfd0d7f785ff1e9606c84574e4b80937ae83516d820278c4c3fda817aeb17be0cca599b7c4bf6350dcb747508404034d9478ff88e1cbfe43f46a1a5d9239e393f2bb309160118a787cb0c64b606ffe744f79c1bba0ca081302b0f04e377f1b6a3646cbe934ef6ad95d4f160a9dcc9550f9777ca5d2daa2b239547f27a221d2eefb2c40ffe95c97ce091b7c2a8c0471b9124af726edb5a3b9aba486b93cb5ea7fff68f53401f8e826d5afbb98ed8b015dc328a507d15260a18a79110e68f1d43dad73121b60ec43e98e3f522b61a4f8fc0ba0257e8fd5ac428b986c49c76395b5a51c2c75d8c1453771915705bd0925cf573b0a9c01d8e552fe288d3c0433cbe801747f335448deb0e7164f6df7d3554bc66ff51352f912d76519aa6290fe7e72402000000e85552c5c049dde27c5294dc77c8a4490492a6deb8108c14ac9a261e2d990f65ea36f217783759c06e37c3a2f3b0b3c3893700152cdca1a4a045b3645b827c989b6a42f3a19d7df9b6c176a209afe66b38ab5a44bffc22ff89f0f03345e2f83f38b01df7ad086b462aad68f9fdf167f53fac61f511bf206de4eaf6d3eabde1bbe1077c3df5ff031bb8e9fc7f562c68e71db1dc7e61eb73a7b068ed9782ab069743d99dfe6209bd936d3e706df924e7043c5a66b730b6c64b6df44ad36788bd93ac57fd67baf927ec64f9ba759e7d4ed9bcf1a33ca39864d3bde66ad03a491ddfd17a3189ad7340ef90306e8dca300131219a55bbbd21289cf14fe40ef8fad89488df3503a766a8edf43bf816f4a5f0d8b1a0c183575a1589994054af2338e49a18186b94de6151107353eccd2817a075f9c4da88c31af5af5c981c6d72edb4df8b352a7d339e903a81b3c4eb51d8a286d0505cf8ee7c0daba3c2beb61865ee571a16cfb00e99088c8236964c798972daa234a0f055e33ea334d85a01d6f53da316813ea458430671b5eb59007a3e0a359aeb67a512576c942d"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0x28, 0x1c, 0x401, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x5}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000440)={r6}, 0xc) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000140), &(0x7f0000000380)=0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r1, &(0x7f0000000100)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x7, {0x6, 0x7, 0x0, 0xf7, 0x7, 0x9}}, 0xc) r7 = socket$kcm(0x2, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="20000000ac1414aa000000002c0000000000000000000000070000000512"], 0x50}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): yz.1.209'. [ 113.781211][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 114.534058][ T6755] netlink: 'syz.2.221': attribute type 1 has an invalid length. [ 115.375109][ T6795] syz.1.233 uses old SIOCAX25GETINFO [ 115.588220][ T6803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.923242][ T6814] gretap1: entered promiscuous mode [ 115.940924][ T6814] batman_adv: batadv0: Adding interface: gretap1 [ 115.949991][ T6814] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 115.971049][ T6814] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 116.089383][ T6832] netlink: 'syz.3.241': attribute type 5 has an invalid length. [ 116.116828][ T6832] __nla_validate_parse: 9 callbacks suppressed [ 116.116874][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 116.170898][ T6837] netlink: 'syz.4.242': attribute type 2 has an invalid length. [ 116.179644][ T6839] netlink: 84 bytes leftover after parsing attributes in process `syz.2.244'. [ 116.235342][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 116.276215][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.243'. [ 116.282951][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 116.406324][ T6847] ipt_REJECT: ECHOREPLY no longer supported. [ 116.429282][ T6847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.248'. [ 116.466847][ T6843] netlink: 'syz.3.246': attribute type 29 has an invalid length. [ 116.487150][ T6850] ipt_REJECT: ECHOREPLY no longer supported. [ 116.511908][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 116.937190][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 116.957907][ T6875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'. [ 116.968447][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 117.721419][ T6913] netlink: 'syz.0.264': attribute type 12 has an invalid length. [ 118.539854][ T6935] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 118.606103][ T6935] syzkaller0: entered promiscuous mode [ 118.621645][ T6935] syzkaller0: entered allmulticast mode [ 118.663668][ T6958] warning: `syz.0.275' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.966470][ T6980] Bluetooth: MGMT ver 1.23 [ 119.426788][ T6995] wireguard0: entered promiscuous mode [ 119.446408][ T6995] wireguard0: entered allmulticast mode [ 119.487152][ T7007] netlink: 'syz.4.292': attribute type 1 has an invalid length. [ 119.496296][ T7007] netlink: 'syz.4.292': attribute type 7 has an invalid length. [ 119.505222][ T7007] netlink: 'syz.4.292': attribute type 8 has an invalid length. [ 119.982797][ T7027] syzkaller0: entered promiscuous mode [ 119.997849][ T7027] syzkaller0: entered allmulticast mode [ 120.111285][ T7022] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 120.822628][ T7072] openvswitch: netlink: Key type 12040 is out of range max 32 [ 120.855902][ T7064] bridge2: port 1(bond2) entered blocking state [ 120.863295][ T7064] bridge2: port 1(bond2) entered disabled state [ 120.869934][ T7064] bond2: entered allmulticast mode [ 120.880457][ T7064] bond2: entered promiscuous mode [ 121.171335][ T7080] netlink: 'syz.0.311': attribute type 1 has an invalid length. [ 121.247459][ T7081] __nla_validate_parse: 19 callbacks suppressed [ 121.247474][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 121.270975][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 121.335694][ T7066] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 121.371860][ T7066] netlink: 184 bytes leftover after parsing attributes in process `syz.4.308'. [ 121.438932][ T7070] ipvlan2: entered allmulticast mode [ 121.461620][ T7070] batadv0: entered allmulticast mode [ 121.480006][ T7070] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 121.787871][ T7102] block nbd2: not configured, cannot reconfigure [ 121.812995][ T7080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.937123][ T7082] bond2: (slave batadv1): Opening slave failed [ 121.992883][ T7083] syzkaller0: entered promiscuous mode [ 122.000173][ T7083] syzkaller0: entered allmulticast mode [ 122.218872][ T7125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.319'. [ 122.234446][ T7125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.319'. [ 122.376850][ T7130] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 122.403704][ T7130] netlink: 224 bytes leftover after parsing attributes in process `syz.0.322'. [ 122.686812][ T7134] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 122.728724][ T7134] bond3 (unregistering): Released all slaves [ 122.821961][ T7140] netlink: 256 bytes leftover after parsing attributes in process `syz.2.323'. [ 123.192104][ T7163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.276946][ T7173] netlink: 'syz.0.331': attribute type 1 has an invalid length. [ 123.540728][ T7182] xt_hashlimit: size too large, truncated to 1048576 [ 123.560934][ T7186] netlink: 43 bytes leftover after parsing attributes in process `syz.0.336'. [ 123.616565][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.335'. [ 123.748742][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 124.181199][ T7211] bridge1: entered promiscuous mode [ 124.188774][ T7211] bridge1: entered allmulticast mode [ 125.064927][ T7266] trusted_key: syz.1.355 sent an empty control message without MSG_MORE. [ 125.638989][ T7294] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.069427][ T7317] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 126.086605][ T7320] bridge_slave_1: left allmulticast mode [ 126.113453][ T7320] bridge_slave_1: left promiscuous mode [ 126.129816][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.148733][ T7326] xt_hashlimit: size too large, truncated to 1048576 [ 126.157547][ T7320] bridge_slave_0: left allmulticast mode [ 126.177522][ T7320] bridge_slave_0: left promiscuous mode [ 126.194006][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.569471][ T7344] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 126.936254][ T7356] __nla_validate_parse: 12 callbacks suppressed [ 126.936276][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 127.176617][ T7368] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 127.253801][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 127.289257][ T7371] netlink: 'syz.1.387': attribute type 30 has an invalid length. [ 127.330013][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 127.445925][ T7381] geneve2: entered promiscuous mode [ 127.764742][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 128.132815][ T7417] netlink: 48 bytes leftover after parsing attributes in process `syz.4.395'. [ 128.187923][ T7412] netlink: 'syz.4.395': attribute type 1 has an invalid length. [ 128.595009][ T7438] netlink: 'syz.2.402': attribute type 4 has an invalid length. [ 128.775357][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.404'. [ 128.810334][ T7448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.405'. [ 128.828515][ T7449] netlink: 'syz.2.402': attribute type 4 has an invalid length. [ 128.841888][ T7452] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 128.987141][ T7452] bond3: entered promiscuous mode [ 128.993321][ T7452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.018073][ T7446] ipvlan3: entered allmulticast mode [ 129.023797][ T7446] bond3: entered allmulticast mode [ 129.098613][ T7460] ipvlan4: entered allmulticast mode [ 129.208087][ T7446] bond3: (slave bridge3): making interface the new active one [ 129.226045][ T7446] bridge3: entered promiscuous mode [ 129.234049][ T7446] bridge3: entered allmulticast mode [ 129.243802][ T7446] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 129.257403][ T7471] netlink: 'syz.1.412': attribute type 2 has an invalid length. [ 129.277752][ T7467] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 129.284694][ T7467] syzkaller1: linktype set to 823 [ 129.327865][ T7473] netlink: 96 bytes leftover after parsing attributes in process `syz.1.412'. [ 129.420580][ T7476] netlink: 84 bytes leftover after parsing attributes in process `syz.3.413'. [ 129.525709][ T7483] netlink: 'syz.2.415': attribute type 24 has an invalid length. [ 129.538628][ T7484] netlink: 'syz.2.415': attribute type 32 has an invalid length. [ 129.553161][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.4.414'. [ 129.604929][ T7489] xt_cluster: node mask cannot exceed total number of nodes [ 129.612941][ T7484] bond3: option coupled_control: invalid value (192) [ 129.624912][ T7484] bond3 (unregistering): Released all slaves [ 129.748484][ T7493] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 129.886388][ T7498] team0: No ports can be present during mode change [ 129.928762][ T7501] netlink: 'syz.2.421': attribute type 10 has an invalid length. [ 129.977505][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.987705][ T7501] bridge_slave_1: left allmulticast mode [ 129.995881][ T7501] bridge_slave_1: left promiscuous mode [ 130.004423][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.035894][ T7501] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 130.111437][ T7515] tipc: Enabling not permitted [ 130.137989][ T7515] tipc: Enabling of bearer rejected, failed to enable media [ 130.296250][ T7523] veth1_to_batadv: mtu less than device minimum [ 130.488348][ T7533] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 130.909813][ T7550] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.994063][ T7561] bond3: (slave geneve2): making interface the new active one [ 131.051433][ T7561] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 131.126431][ T7564] syzkaller0: entered promiscuous mode [ 131.134983][ T7564] syzkaller0: entered allmulticast mode [ 132.690391][ T7580] gtp0: entered promiscuous mode [ 132.703428][ T7580] gtp0: entered allmulticast mode [ 132.716410][ T7584] __nla_validate_parse: 4 callbacks suppressed [ 132.716432][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.440'. [ 132.829941][ T7587] validate_nla: 1 callbacks suppressed [ 132.829962][ T7587] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 132.882852][ T7587] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 132.927245][ T7598] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 132.931245][ T7584] netlink: 64 bytes leftover after parsing attributes in process `syz.1.440'. [ 133.011927][ T7602] netlink: 'syz.3.444': attribute type 83 has an invalid length. [ 133.061102][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.121026][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.942734][ T7637] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 134.213207][ T7652] netlink: 'syz.4.456': attribute type 4 has an invalid length. [ 134.252440][ T7652] netlink: 244 bytes leftover after parsing attributes in process `syz.4.456'. [ 134.617098][ T7668] macvlan0: entered promiscuous mode [ 134.741469][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 134.758988][ T7677] netlink: 'syz.3.462': attribute type 5 has an invalid length. [ 134.778847][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 134.817859][ T7677] geneve2: entered promiscuous mode [ 134.823298][ T7677] geneve2: entered allmulticast mode [ 134.834292][ T48] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 134.843478][ T48] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 134.852886][ T7677] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20002 [ 134.861083][ T48] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 134.863823][ T7667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.883350][ T7676] syzkaller0: entered promiscuous mode [ 134.890643][ T7676] syzkaller0: entered allmulticast mode [ 134.902333][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 135.080206][ T7686] tipc: Started in network mode [ 135.087432][ T7686] tipc: Node identity 6672af27ffb8, cluster identity 4711 [ 135.095063][ T7686] tipc: Enabled bearer , priority 0 [ 135.105147][ T7686] syzkaller0: entered promiscuous mode [ 135.110748][ T7686] syzkaller0: entered allmulticast mode [ 135.188966][ T7686] tipc: Resetting bearer [ 135.228835][ T7684] tipc: Resetting bearer [ 135.240640][ T7695] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 135.262993][ T7695] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.468'. [ 135.296401][ T7695] netlink: 32 bytes leftover after parsing attributes in process `syz.0.468'. [ 135.308812][ T7684] tipc: Disabling bearer [ 135.550487][ T7703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.471'. [ 135.688837][ T7714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.474'. [ 135.827373][ T7719] bridge0: entered promiscuous mode [ 135.840797][ T7719] macsec1: entered promiscuous mode [ 135.848560][ T7719] macsec1: entered allmulticast mode [ 135.855258][ T7719] bridge0: entered allmulticast mode [ 135.864828][ T7719] bridge0: port 2(macsec1) entered blocking state [ 135.872463][ T7719] bridge0: port 2(macsec1) entered disabled state [ 135.897669][ T7719] bridge0: left allmulticast mode [ 135.911798][ T7719] bridge0: left promiscuous mode [ 135.979095][ T7726] syzkaller0: entered promiscuous mode [ 135.985529][ T7726] syzkaller0: entered allmulticast mode [ 136.219467][ T7739] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.481'. [ 136.416902][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.523628][ T7745] xt_CT: No such helper "pptp" [ 136.621307][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.659705][ T7735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.833338][ T7735] macvlan0: left promiscuous mode [ 137.056408][ T7735] bridge1: left promiscuous mode [ 137.062671][ T7735] bridge1: left allmulticast mode [ 137.097486][ T7771] openvswitch: netlink: Flow key attr not present in new flow. [ 137.142199][ T36] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.175118][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.242904][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.255906][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.311359][ T7773] tipc: Enabled bearer , priority 10 [ 137.316486][ T7782] x_tables: duplicate underflow at hook 2 [ 137.434975][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.471412][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.505977][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.547596][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.581887][ T7793] x_tables: duplicate underflow at hook 2 [ 137.974060][ T7821] netlink: 'syz.2.501': attribute type 5 has an invalid length. [ 138.272353][ T7835] __nla_validate_parse: 2 callbacks suppressed [ 138.272375][ T7835] netlink: 14 bytes leftover after parsing attributes in process `syz.1.506'. [ 138.339425][ T7836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.505'. [ 138.386823][ T7836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.505'. [ 138.444621][ T5957] tipc: Node number set to 2580197159 [ 138.597325][ T7840] netlink: 'syz.1.507': attribute type 21 has an invalid length. [ 138.655294][ T7816] netlink: 'syz.4.500': attribute type 10 has an invalid length. [ 138.663362][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.500'. [ 138.876987][ T7843] tipc: Enabled bearer , priority 0 [ 139.036631][ T7845] tipc: Disabling bearer [ 139.263783][ T5957] IPVS: starting estimator thread 0... [ 139.382572][ T7868] IPVS: using max 25 ests per chain, 60000 per kthread [ 139.476982][ T7870] dvmrp0: entered allmulticast mode [ 139.822000][ T7890] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 139.896559][ T7895] netlink: 'syz.3.522': attribute type 62 has an invalid length. [ 139.932003][ T7897] netlink: 48 bytes leftover after parsing attributes in process `syz.0.524'. [ 140.318744][ T7912] bond4: Removing last ns target with arp_interval on [ 140.824452][ T7949] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 140.999896][ T7949] bond4: entered promiscuous mode [ 141.021200][ T7949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.038675][ T7967] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 141.086380][ T7958] bond4: entered promiscuous mode [ 141.104957][ T7963] macvlan2: entered promiscuous mode [ 141.123387][ T7963] macvlan2: entered allmulticast mode [ 141.138330][ T7963] bond4: (slave macvlan2): Opening slave failed [ 141.317933][ T7975] netlink: 'syz.1.540': attribute type 10 has an invalid length. [ 141.334107][ T9] IPVS: starting estimator thread 0... [ 141.342629][ T7979] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 141.419122][ T7967] bond3: entered promiscuous mode [ 141.442051][ T7980] IPVS: using max 27 ests per chain, 64800 per kthread [ 141.453519][ T7967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.607050][ T7975] team0: Port device dummy0 added [ 141.829899][ T7987] ip6erspan0: entered allmulticast mode [ 143.003709][ T8043] xt_hashlimit: overflow, try lower: 3/0 [ 143.070268][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.558'. [ 143.082779][ T8048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.559'. [ 143.167246][ T8048] netlink: 'syz.1.559': attribute type 1 has an invalid length. [ 143.418199][ T8048] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.493903][ T8058] syz.0.561: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 143.520388][ T5843] Bluetooth: hci4: link tx timeout [ 143.526854][ T5843] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.612333][ T8058] CPU: 0 UID: 0 PID: 8058 Comm: syz.0.561 Not tainted syzkaller #0 PREEMPT(full) [ 143.612365][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.612377][ T8058] Call Trace: [ 143.612385][ T8058] [ 143.612395][ T8058] dump_stack_lvl+0xe8/0x150 [ 143.612432][ T8058] warn_alloc+0x249/0x340 [ 143.612466][ T8058] ? stack_trace_save+0xa9/0x100 [ 143.612495][ T8058] ? __pfx_warn_alloc+0x10/0x10 [ 143.612536][ T8058] ? kasan_save_track+0x4f/0x80 [ 143.612566][ T8058] ? kasan_save_track+0x3e/0x80 [ 143.612593][ T8058] ? __kasan_kmalloc+0x93/0xb0 [ 143.612611][ T8058] ? __kmalloc_cache_noprof+0x31c/0x660 [ 143.612641][ T8058] ? xskq_create+0x56/0x170 [ 143.612673][ T8058] ? xsk_setsockopt+0x54c/0x990 [ 143.612691][ T8058] ? do_sock_setsockopt+0x17c/0x1b0 [ 143.612721][ T8058] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 143.612750][ T8058] ? do_syscall_64+0x15f/0xf80 [ 143.612781][ T8058] __vmalloc_node_range_noprof+0x132/0x1730 [ 143.612849][ T8058] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 143.612888][ T8058] ? __kasan_kmalloc+0x93/0xb0 [ 143.612913][ T8058] vmalloc_user_noprof+0xad/0xe0 [ 143.612943][ T8058] ? xskq_create+0xbf/0x170 [ 143.612965][ T8058] xskq_create+0xbf/0x170 [ 143.612989][ T8058] xsk_init_queue+0x8a/0xe0 [ 143.613014][ T8058] xsk_setsockopt+0x54c/0x990 [ 143.613038][ T8058] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.613059][ T8058] ? __pfx_aa_sk_perm+0x10/0x10 [ 143.613091][ T8058] ? aa_sock_opt_perm+0xff/0x1a0 [ 143.613123][ T8058] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 143.613153][ T8058] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.613176][ T8058] do_sock_setsockopt+0x17c/0x1b0 [ 143.613212][ T8058] __x64_sys_setsockopt+0x13d/0x1b0 [ 143.613244][ T8058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.613267][ T8058] do_syscall_64+0x15f/0xf80 [ 143.613296][ T8058] ? trace_irq_disable+0x3b/0x140 [ 143.613319][ T8058] ? clear_bhb_loop+0x40/0x90 [ 143.613345][ T8058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.613366][ T8058] RIP: 0033:0x7f981799c819 [ 143.613386][ T8058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.613404][ T8058] RSP: 002b:00007f981887b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.613428][ T8058] RAX: ffffffffffffffda RBX: 00007f9817c15fa0 RCX: 00007f981799c819 [ 143.613443][ T8058] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 143.613456][ T8058] RBP: 00007f9817a32c91 R08: 0000000000000004 R09: 0000000000000000 [ 143.613468][ T8058] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.613479][ T8058] R13: 00007f9817c16038 R14: 00007f9817c15fa0 R15: 00007ffdad6722b8 [ 143.613514][ T8058] [ 143.613598][ T8058] Mem-Info: [ 143.629103][ T8063] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 143.637262][ T8058] active_anon:6018 inactive_anon:0 isolated_anon:0 [ 143.637262][ T8058] active_file:2637 inactive_file:39951 isolated_file:0 [ 143.637262][ T8058] unevictable:768 dirty:100 writeback:0 [ 143.637262][ T8058] slab_reclaimable:10439 slab_unreclaimable:99759 [ 143.637262][ T8058] mapped:30271 shmem:1359 pagetables:1141 [ 143.637262][ T8058] sec_pagetables:0 bounce:0 [ 143.637262][ T8058] kernel_misc_reclaimable:0 [ 143.637262][ T8058] free:1328960 free_pcp:10329 free_cma:0 [ 143.768403][ T8075] pimreg: entered allmulticast mode [ 143.868320][ T8058] Node 0 active_anon:24372kB inactive_anon:0kB active_file:10548kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121184kB dirty:400kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12796kB pagetables:4628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 144.030406][ T8058] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 144.073702][ T8058] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.106543][ T5835] Bluetooth: hci4: link tx timeout [ 144.118161][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.125910][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.568'. [ 144.162809][ T8058] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 144.169378][ T8058] Node 0 DMA32 free:1356924kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24232kB inactive_anon:0kB active_file:10548kB inactive_file:159592kB unevictable:1536kB writepending:400kB zspages:0kB present:3129332kB managed:2551532kB mlocked:0kB bounce:0kB free_pcp:41580kB local_pcp:20576kB free_cma:0kB [ 144.201039][ T8087] netlink: 36 bytes leftover after parsing attributes in process `syz.3.569'. [ 144.204038][ T8058] lowmem_reserve[]: 0 0 0 0 0 [ 144.224888][ T5835] Bluetooth: hci4: link tx timeout [ 144.231258][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.239638][ T8058] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.286082][ T8058] lowmem_reserve[]: 0 0 0 0 0 [ 144.311254][ T8058] Node 1 Normal free:3943620kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 144.377118][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 144.429638][ T8058] lowmem_reserve[]: 0 0 0 0 0 [ 144.447704][ T8058] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 144.502348][ T8058] Node 0 DMA32: 3297*4kB (UME) 1181*8kB (UM) 395*16kB (UM) 193*32kB (UM) 35*64kB (UM) 15*128kB (UME) 17*256kB (UM) 5*512kB (ME) 4*1024kB (ME) 2*2048kB (UM) 318*4096kB (M) = 1356924kB [ 144.559406][ T8058] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 144.572346][ T5835] Bluetooth: hci4: link tx timeout [ 144.577620][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.600852][ T8058] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 5*16kB (UM) 9*32kB (UM) 9*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (U) 960*4096kB (M) = 3943620kB [ 144.633109][ T8058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.643305][ T8058] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.661378][ T8058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 144.671632][ T8058] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 144.691920][ T8058] 43943 total pagecache pages [ 144.703432][ T8058] 0 pages in swap cache [ 144.734123][ T8058] Free swap = 124996kB [ 144.741833][ T8058] Total swap = 124996kB [ 144.751870][ T8058] 2097051 pages RAM [ 144.763716][ T8058] 0 pages HighMem/MovableOnly [ 144.779277][ T8058] 427400 pages reserved [ 144.781728][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 144.793038][ T8058] 0 pages cma reserved [ 145.294247][ T5835] Bluetooth: hci4: link tx timeout [ 145.299487][ T5835] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.421997][ T8134] syzkaller1: entered promiscuous mode [ 145.436740][ T8134] syzkaller1: entered allmulticast mode [ 145.612212][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 145.658070][ T8138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.580'. [ 145.713461][ T8149] xt_hashlimit: invalid rate [ 145.777968][ T8157] netlink: 104 bytes leftover after parsing attributes in process `syz.4.583'. [ 146.036876][ T8166] netlink: 'syz.4.586': attribute type 4 has an invalid length. [ 146.064279][ T8166] netlink: 17 bytes leftover after parsing attributes in process `syz.4.586'. [ 146.205747][ T8171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.387393][ T8176] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 146.443597][ T8179] syzkaller0: entered promiscuous mode [ 146.465365][ T8179] syzkaller0: entered allmulticast mode [ 146.510166][ T8179] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.591'. [ 146.691098][ T8187] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.594'. [ 146.804188][ T8181] IPVS: Scheduler module ip_vs_sip not found [ 146.966214][ T8199] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 147.225204][ T8215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.278589][ T8215] netlink: 'syz.3.601': attribute type 39 has an invalid length. [ 147.630703][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.665872][ T8232] sctp: [Deprecated]: syz.4.606 (pid 8232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.665872][ T8232] Use struct sctp_sack_info instead [ 147.830510][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.608'. [ 147.841349][ T8243] netlink: 'syz.0.610': attribute type 1 has an invalid length. [ 147.880755][ T8240] SET target dimension over the limit! [ 147.995175][ T8246] bond3: (slave geneve3): making interface the new active one [ 148.004570][ T8246] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 148.025707][ T8258] netlink: 'syz.3.608': attribute type 16 has an invalid length. [ 148.041727][ T8258] netlink: 'syz.3.608': attribute type 17 has an invalid length. [ 148.153534][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.166065][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.217143][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 148.242845][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 149.253067][ T8300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.625'. [ 149.400926][ T8309] sctp: [Deprecated]: syz.1.626 (pid 8309) Use of int in max_burst socket option deprecated. [ 149.400926][ T8309] Use struct sctp_assoc_value instead [ 150.079759][ T8336] bond0: (slave bond_slave_0): Releasing backup interface [ 150.459966][ T8348] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 150.833555][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 150.893978][ T8360] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 150.922642][ T8360] netlink: 'syz.3.643': attribute type 2 has an invalid length. [ 151.119690][ T8376] netlink: 788 bytes leftover after parsing attributes in process `syz.1.647'. [ 151.333971][ T8383] ip6gre1: entered promiscuous mode [ 151.346029][ T8383] ip6gre1: entered allmulticast mode [ 151.700121][ T8408] sctp: [Deprecated]: syz.1.654 (pid 8408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.700121][ T8408] Use struct sctp_sack_info instead [ 152.162990][ T8434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.209819][ T8437] netlink: 'syz.3.660': attribute type 1 has an invalid length. [ 152.247890][ T8428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 152.348481][ T8437] 8021q: adding VLAN 0 to HW filter on device bond5 [ 152.417437][ T8428] bond5: (slave geneve3): making interface the new active one [ 152.428096][ T8428] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 152.431075][ T8450] netlink: 14 bytes leftover after parsing attributes in process `syz.1.665'. [ 152.464803][ T48] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 152.489680][ T48] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 152.557877][ T8450] team0: Port device dummy0 removed [ 152.580532][ T48] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 152.592864][ T48] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 152.660224][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 152.757305][ T8457] netlink: 52 bytes leftover after parsing attributes in process `syz.3.668'. [ 153.176576][ T8482] Cannot find add_set index 2 as target [ 153.194822][ T8482] netlink: 'syz.3.674': attribute type 39 has an invalid length. [ 153.215878][ T8483] netlink: 56 bytes leftover after parsing attributes in process `syz.4.673'. [ 153.936406][ T8501] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.963345][ T8501] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 154.034737][ T8522] netlink: 248 bytes leftover after parsing attributes in process `syz.1.685'. [ 154.072321][ T8501] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.092875][ T8501] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 154.187538][ T8501] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.209767][ T8501] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 154.330638][ T8501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.353261][ T8501] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 154.432285][ T8501] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 154.450047][ T8501] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 154.562220][ T8534] IPVS: set_ctl: invalid protocol: 14380 212.145.0.220:26150 [ 155.352582][ T8559] h: entered promiscuous mode [ 155.464704][ T8576] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 155.465008][ T8561] rdma_rxe: rxe_newlink: failed to add lo [ 155.607766][ T8568] lo speed is unknown, defaulting to 1000 [ 155.652837][ T8580] bridge3: entered promiscuous mode [ 155.668669][ T8580] bridge3: entered allmulticast mode [ 155.685281][ T8580] team0: Port device bridge3 added [ 155.722813][ T8568] lo speed is unknown, defaulting to 1000 [ 155.807858][ T8568] lo speed is unknown, defaulting to 1000 [ 156.299314][ T8611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.705'. [ 156.986634][ T5923] lo speed is unknown, defaulting to 1000 [ 156.998633][ T8568] infiniband syz2: set active [ 157.024409][ T8568] infiniband syz2: added lo [ 157.037391][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.714'. [ 157.089814][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.714'. [ 157.122361][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 157.160730][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.716'. [ 157.173102][ T8568] RDS/IB: syz2: added [ 157.190715][ T8568] smc: adding ib device syz2 with port count 1 [ 157.217950][ T8568] smc: ib device syz2 port 1 has no pnetid [ 157.238891][ T24] lo speed is unknown, defaulting to 1000 [ 157.291358][ T8655] netlink: 'syz.1.717': attribute type 14 has an invalid length. [ 157.292302][ T8568] lo speed is unknown, defaulting to 1000 [ 157.322770][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'. [ 157.422945][ T1166] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.448708][ T1166] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.485042][ T1166] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.525404][ T1166] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.641042][ T8669] tipc: Enabling of bearer rejected, media not registered [ 157.684453][ T8670] xt_TCPMSS: Only works on TCP SYN packets [ 157.769142][ T8674] netlink: 148 bytes leftover after parsing attributes in process `syz.3.722'. [ 158.155317][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 158.359374][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 158.507687][ T24] IPVS: starting estimator thread 0... [ 158.540982][ T8568] lo speed is unknown, defaulting to 1000 [ 158.601755][ T8706] IPVS: using max 27 ests per chain, 64800 per kthread [ 158.689145][ T8713] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 158.771436][ T8718] syzkaller1: entered promiscuous mode [ 158.807759][ T8718] syzkaller1: entered allmulticast mode [ 159.334866][ T8740] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.737'. [ 159.469648][ T8745] netlink: 'syz.2.739': attribute type 4 has an invalid length. [ 159.778327][ T8568] lo speed is unknown, defaulting to 1000 [ 160.368891][ T8782] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.919488][ T8805] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 160.959212][ T8805] netlink: 'syz.1.756': attribute type 3 has an invalid length. [ 161.011921][ T8805] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 161.239136][ T8568] lo speed is unknown, defaulting to 1000 [ 161.269600][ T8825] IPv6: Can't replace route, no match found [ 161.334040][ T8826] __nla_validate_parse: 8 callbacks suppressed [ 161.334059][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 161.513198][ T8831] netlink: 132 bytes leftover after parsing attributes in process `syz.4.764'. [ 161.557510][ T8838] netlink: 'syz.4.764': attribute type 25 has an invalid length. [ 161.567294][ T8836] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20003 [ 161.847004][ T8851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.768'. [ 161.928301][ T8855] ieee802154 phy1 wpan1: encryption failed: -22 [ 162.515052][ T8568] lo speed is unknown, defaulting to 1000 [ 162.907738][ T8891] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 162.941027][ T8891] netlink: 'syz.3.778': attribute type 4 has an invalid length. [ 162.982360][ T8891] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.778'. [ 162.996265][ T8897] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 163.005769][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 163.068430][ T8897] netlink: 'syz.3.778': attribute type 4 has an invalid length. [ 163.102665][ T8897] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.778'. [ 163.188185][ T8896] vlan1: entered allmulticast mode [ 163.235881][ T8896] bridge4: entered allmulticast mode [ 163.379614][ T8904] bridge4: port 1(bond6) entered blocking state [ 163.407525][ T8904] bridge4: port 1(bond6) entered disabled state [ 163.433555][ T8904] bond6: entered allmulticast mode [ 163.465150][ T8904] bond6: entered promiscuous mode [ 183.921177][ T9032] netlink: 'syz.2.785': attribute type 11 has an invalid length. [ 183.961375][ T9032] netlink: 224 bytes leftover after parsing attributes in process `syz.2.785'. [ 184.150593][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 184.171029][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 184.458100][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 184.559418][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 184.596143][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 184.639411][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 184.663939][ T9072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.688648][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 184.690970][ T9078] netlink: 36 bytes leftover after parsing attributes in process `syz.4.799'. [ 184.703473][ T9069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.797'. [ 185.224338][ T9097] bond5: option lp_interval: invalid value (0) [ 185.233859][ T9097] bond5: option lp_interval: allowed values 1 - 2147483647 [ 185.250086][ T9097] bond5 (unregistering): Released all slaves [ 185.642010][ T9117] lo: MTU too low for tipc bearer [ 185.656445][ T9117] tipc: Enabling of bearer rejected, failed to enable media [ 185.688948][ T9089] lo speed is unknown, defaulting to 1000 [ 186.455076][ T9142] lo speed is unknown, defaulting to 1000 [ 188.165275][ T9207] xt_l2tp: missing protocol rule (udp|l2tpip) [ 188.172806][ T9208] xt_TCPMSS: Only works on TCP SYN packets [ 188.205805][ T9206] netlink: 'syz.1.823': attribute type 1 has an invalid length. [ 188.974788][ T9242] __nla_validate_parse: 44 callbacks suppressed [ 188.974808][ T9242] netlink: 80 bytes leftover after parsing attributes in process `syz.0.833'. [ 189.137529][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 189.282679][ T9258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.316858][ T9261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.569162][ T9276] syzkaller0: entered promiscuous mode [ 189.605596][ T9276] syzkaller0: entered allmulticast mode [ 189.917767][ T9305] netlink: 132 bytes leftover after parsing attributes in process `syz.1.850'. [ 190.520510][ T9326] ip6gre1: entered allmulticast mode [ 190.540797][ T9338] sysfs: cannot create duplicate filename '/class/ieee80211/KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' [ 190.578797][ T9338] CPU: 0 UID: 0 PID: 9338 Comm: syz.0.860 Not tainted syzkaller #0 PREEMPT(full) [ 190.578826][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 190.578837][ T9338] Call Trace: [ 190.578845][ T9338] [ 190.578854][ T9338] dump_stack_lvl+0xe8/0x150 [ 190.578889][ T9338] sysfs_warn_dup+0x8e/0xa0 [ 190.578918][ T9338] sysfs_do_create_link_sd+0xc0/0x110 [ 190.578947][ T9338] device_add_class_symlinks+0x1cf/0x240 [ 190.578977][ T9338] device_add+0x475/0xb70 [ 190.579007][ T9338] wiphy_register+0x1dc5/0x2dc0 [ 190.579052][ T9338] ? __pfx_wiphy_register+0x10/0x10 [ 190.579077][ T9338] ? __pfx_netdev_run_todo+0x10/0x10 [ 190.579099][ T9338] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 190.579137][ T9338] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 190.579169][ T9338] ieee80211_register_hw+0x3d82/0x4a70 [ 190.579213][ T9338] ? ieee80211_register_hw+0x19b1/0x4a70 [ 190.579275][ T9338] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 190.579306][ T9338] ? __asan_memset+0x22/0x50 [ 190.579333][ T9338] ? __hrtimer_setup+0x1b7/0x260 [ 190.579361][ T9338] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 190.579397][ T9338] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 190.579463][ T9338] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 190.579488][ T9338] ? kstrndup+0xbf/0x160 [ 190.579522][ T9338] hwsim_new_radio_nl+0xf6a/0x1c00 [ 190.579580][ T9338] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.579628][ T9338] ? rcu_is_watching+0x15/0xb0 [ 190.579658][ T9338] ? trace_kmalloc+0x2a/0xf0 [ 190.579696][ T9338] ? __nla_parse+0x40/0x60 [ 190.579722][ T9338] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 190.579745][ T9338] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 190.579779][ T9338] genl_family_rcv_msg_doit+0x22a/0x330 [ 190.579811][ T9338] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.579851][ T9338] ? bpf_lsm_capable+0x9/0x20 [ 190.579873][ T9338] ? security_capable+0x7e/0x2c0 [ 190.579908][ T9338] genl_rcv_msg+0x61c/0x7a0 [ 190.579940][ T9338] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.579962][ T9338] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.579991][ T9338] ? __pfx_ref_tracker_free+0x10/0x10 [ 190.580035][ T9338] netlink_rcv_skb+0x232/0x4b0 [ 190.580065][ T9338] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.580091][ T9338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.580141][ T9338] ? down_read+0x270/0x2e0 [ 190.580166][ T9338] ? genl_rcv+0xd/0x40 [ 190.580190][ T9338] genl_rcv+0x28/0x40 [ 190.580209][ T9338] netlink_unicast+0x75c/0x8e0 [ 190.580251][ T9338] netlink_sendmsg+0x813/0xb40 [ 190.580292][ T9338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.580326][ T9338] ? aa_sock_msg_perm+0xf1/0x1b0 [ 190.580356][ T9338] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.580390][ T9338] ____sys_sendmsg+0x972/0x9f0 [ 190.580419][ T9338] ? __might_fault+0xaf/0x130 [ 190.580452][ T9338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.580493][ T9338] ? import_iovec+0x73/0xa0 [ 190.580520][ T9338] ___sys_sendmsg+0x2a5/0x360 [ 190.580549][ T9338] ? __lock_acquire+0x6b5/0x2cf0 [ 190.580590][ T9338] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.580630][ T9338] ? futex_wake+0x4ac/0x580 [ 190.580684][ T9338] ? __fget_files+0x2a/0x420 [ 190.580707][ T9338] ? __fget_files+0x3a0/0x420 [ 190.580745][ T9338] __x64_sys_sendmsg+0x1bd/0x2a0 [ 190.580780][ T9338] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.580822][ T9338] ? rcu_is_watching+0x15/0xb0 [ 190.580864][ T9338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.580887][ T9338] do_syscall_64+0x15f/0xf80 [ 190.580912][ T9338] ? trace_irq_disable+0x3b/0x140 [ 190.580934][ T9338] ? clear_bhb_loop+0x40/0x90 [ 190.580960][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.580980][ T9338] RIP: 0033:0x7f981799c819 [ 190.581000][ T9338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.581016][ T9338] RSP: 002b:00007f981887b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.581039][ T9338] RAX: ffffffffffffffda RBX: 00007f9817c15fa0 RCX: 00007f981799c819 [ 190.581054][ T9338] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 190.581067][ T9338] RBP: 00007f9817a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 190.581078][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.581090][ T9338] R13: 00007f9817c16038 R14: 00007f9817c15fa0 R15: 00007ffdad6722b8 [ 190.581127][ T9338] [ 191.156958][ T9347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 191.251339][ T9347] hsr_slave_0: left promiscuous mode [ 191.281049][ T9357] netlink: 128 bytes leftover after parsing attributes in process `syz.3.865'. [ 191.335477][ T9347] hsr_slave_1: left promiscuous mode [ 191.355633][ T9354] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.864'. [ 191.764575][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 191.926536][ T9374] veth0_macvtap: left promiscuous mode [ 191.984004][ T9386] xt_NFQUEUE: number of total queues is 0 [ 192.455936][ T9410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.882'. [ 192.734932][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 193.169183][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.890'. [ 193.313832][ T9448] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 193.369251][ T9440] syzkaller0: entered promiscuous mode [ 193.404565][ T9440] syzkaller0: entered allmulticast mode [ 193.695193][ T9478] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 193.725109][ T9475] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 193.750624][ T9478] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 194.496311][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.505943][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 197.973216][ T9490] __nla_validate_parse: 6 callbacks suppressed [ 197.973244][ T9490] netlink: 228 bytes leftover after parsing attributes in process `syz.4.907'. [ 198.022386][ T9490] netlink: 52 bytes leftover after parsing attributes in process `syz.4.907'. [ 198.031190][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.904'. [ 198.065541][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.905'. [ 198.125893][ T9498] team0 (unregistering): Port device team_slave_0 removed [ 198.145288][ T9498] team0 (unregistering): Port device team_slave_1 removed [ 198.246993][ T9497] veth3: entered allmulticast mode [ 198.257053][ T9507] netlink: 40 bytes leftover after parsing attributes in process `syz.4.909'. [ 198.278806][ T9508] netlink: 'syz.3.908': attribute type 15 has an invalid length. [ 198.345353][ T9487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.860439][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'. [ 198.875149][ T9534] netlink: 830 bytes leftover after parsing attributes in process `syz.3.918'. [ 199.116851][ T9539] syzkaller1: entered promiscuous mode [ 199.132562][ T9539] syzkaller1: entered allmulticast mode [ 199.286595][ T9552] netlink: 'syz.3.921': attribute type 32 has an invalid length. [ 199.329741][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 199.486319][ T9562] x_tables: duplicate underflow at hook 1 [ 199.496573][ T9562] sctp: [Deprecated]: syz.1.927 (pid 9562) Use of int in max_burst socket option deprecated. [ 199.496573][ T9562] Use struct sctp_assoc_value instead [ 199.550854][ T9552] bond6: Setting coupled_control to off (0) [ 199.683869][ T9573] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 199.694290][ T9573] netlink: 64 bytes leftover after parsing attributes in process `syz.4.930'. [ 199.796493][ T9575] netlink: 52 bytes leftover after parsing attributes in process `syz.0.929'. [ 200.201963][ T9598] SET target dimension over the limit! [ 200.215425][ T9604] netlink: 'syz.1.936': attribute type 10 has an invalid length. [ 200.279276][ T9604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.299651][ T9604] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 200.332118][ T9604] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 200.444357][ T3448] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.468900][ T3448] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.498672][ T3448] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.541266][ T3448] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.175775][ T9653] veth1_macvtap: left promiscuous mode [ 201.181330][ T9653] macsec0: entered promiscuous mode [ 201.214742][ T9653] macsec0: entered allmulticast mode [ 201.289493][ T9661] veth1_macvtap: entered promiscuous mode [ 201.302191][ T9661] veth1_macvtap: entered allmulticast mode [ 201.339835][ T9661] macsec0: left promiscuous mode [ 201.362125][ T9661] macsec0: left allmulticast mode [ 201.382660][ T9661] veth1_macvtap: left allmulticast mode [ 201.510914][ T9669] netdevsim netdevsim3: Direct firmware load for r1 failed with error -2 [ 201.525519][ T9669] netdevsim netdevsim3: Falling back to sysfs fallback for: r1 [ 202.237687][ T9707] syzkaller1: entered promiscuous mode [ 202.252242][ T9707] syzkaller1: entered allmulticast mode [ 202.277650][ T9665] infiniband syz0: set active [ 202.282478][ T9665] infiniband syz0: added veth0_vlan [ 202.291305][ T9665] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 202.298075][ T9665] infiniband syz0: Couldn't open port 1 [ 202.371884][ T9665] RDS/IB: syz0: added [ 202.377559][ T9665] smc: adding ib device syz0 with port count 1 [ 202.384941][ T9665] smc: ib device syz0 port 1 has no pnetid [ 202.960320][ T9733] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 202.967745][ T9734] veth0: entered promiscuous mode [ 203.048082][ T9734] __nla_validate_parse: 7 callbacks suppressed [ 203.048103][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 203.094605][ T9734] veth0 (unregistering): left promiscuous mode [ 203.250741][ T9742] netlink: 36 bytes leftover after parsing attributes in process `syz.1.977'. [ 203.329547][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 203.355273][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'. [ 203.384346][ T9748] netlink: 13 bytes leftover after parsing attributes in process `syz.0.980'. [ 204.010215][ T9776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.031269][ T9776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.063918][ T9776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.106919][ T9776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.643475][ T9791] nbd0: detected capacity change from 0 to 127 [ 204.729356][ T9802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.993'. [ 204.744134][ T5843] block nbd0: Receive control failed (result -104) [ 205.016969][ T9809] netlink: 64 bytes leftover after parsing attributes in process `syz.1.996'. [ 205.140931][ T9811] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.997'. [ 205.208569][ T9815] unsupported nlmsg_type 40 [ 205.417243][ T9819] IPv6: NLM_F_REPLACE set, but no existing node found! [ 205.582004][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 205.930871][ T9843] netlink: 'syz.0.1010': attribute type 29 has an invalid length. [ 206.015236][ T9837] syzkaller0: entered promiscuous mode [ 206.425866][ T9868] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.1017'. [ 206.442744][ T9864] netlink: 'syz.0.1015': attribute type 10 has an invalid length. [ 208.638618][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 208.676761][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1022'. [ 208.750819][ T9900] bridge2: port 1(vlan2) entered blocking state [ 208.767405][ T9900] bridge2: port 1(vlan2) entered disabled state [ 208.823727][ T9900] vlan2: entered allmulticast mode [ 208.828947][ T9900] bridge2: entered allmulticast mode [ 208.861143][ T9900] vlan2: left allmulticast mode [ 208.905664][ T9900] bridge2: left allmulticast mode [ 209.039031][ T9921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 209.105395][ T9921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 209.633105][ T9956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1039'. [ 209.704057][ T9959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.994485][ T9966] caif0: entered allmulticast mode [ 210.225459][ T9977] bond7: entered promiscuous mode [ 210.494605][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 211.218078][T10024] netlink: 'syz.0.1059': attribute type 4 has an invalid length. [ 211.248942][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 211.508049][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1062'. [ 211.529917][T10039] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1064'. [ 211.558473][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'. [ 211.606357][T10043] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 211.627393][T10043] netlink: 'syz.3.1066': attribute type 1 has an invalid length. [ 211.645540][T10043] netlink: 'syz.3.1066': attribute type 8 has an invalid length. [ 211.724178][T10016] bridge3: entered promiscuous mode [ 211.745202][T10016] bridge3: entered allmulticast mode [ 211.920884][T10057] netlink: 'syz.1.1070': attribute type 4 has an invalid length. [ 211.944257][T10057] netlink: 'syz.1.1070': attribute type 4 has an invalid length. [ 211.944260][T10058] netlink: 'syz.1.1070': attribute type 4 has an invalid length. [ 212.404653][T10079] geneve3: entered promiscuous mode [ 212.425873][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.446058][ T9200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.471006][T10084] tipc: Failed to remove unknown binding: 66,1,1/0:1452209061/1452209063 [ 212.520185][T10084] tipc: Failed to remove unknown binding: 66,1,1/0:1452209061/1452209063 [ 212.594971][ T9200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.639132][ T9200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.994753][T10112] netlink: 'syz.3.1088': attribute type 39 has an invalid length. [ 213.653895][T10144] __nla_validate_parse: 6 callbacks suppressed [ 213.653917][T10144] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1097'. [ 213.715423][T10153] bond6: entered promiscuous mode [ 213.720710][T10153] bond6: entered allmulticast mode [ 213.868955][T10162] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1102'. [ 214.034960][T10179] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.1105'. [ 214.169901][T10185] syzkaller0: entered promiscuous mode [ 214.218275][T10185] 0: reclassify loop, rule prio 0, protocol 800 [ 214.247275][T10190] tipc: Enabled bearer , priority 10 [ 214.730636][T10210] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1112'. [ 214.779185][T10210] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1112'. [ 214.801222][T10210] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1112'. [ 214.855850][T10210] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1112'. [ 214.876666][T10215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1113'. [ 214.929581][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1114'. [ 214.971319][T10221] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 215.228804][T10233] block nbd1: Unsupported socket: should be TCP or UNIX. [ 215.508684][T10248] openvswitch: netlink: IP tunnel TTL not specified. [ 215.628302][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1123'. [ 216.348979][T10294] syzkaller0: entered promiscuous mode [ 216.374206][T10294] syzkaller0: entered allmulticast mode [ 216.429168][T10301] GUP no longer grows the stack in syz.3.1135 (10301): 200000003000-20000000a000 (200000001000) [ 216.450577][T10301] CPU: 0 UID: 0 PID: 10301 Comm: syz.3.1135 Not tainted syzkaller #0 PREEMPT(full) [ 216.450608][T10301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 216.450621][T10301] Call Trace: [ 216.450629][T10301] [ 216.450639][T10301] dump_stack_lvl+0xe8/0x150 [ 216.450676][T10301] __get_user_pages+0x2453/0x29d0 [ 216.450728][T10301] ? __gup_longterm_locked+0xc4e/0x1630 [ 216.450755][T10301] ? down_read_killable+0x1bb/0x340 [ 216.450783][T10301] ? try_get_folio+0xec/0x650 [ 216.450815][T10301] __gup_longterm_locked+0xdcf/0x1630 [ 216.450868][T10301] gup_fast_fallback+0x1d82/0x22e0 [ 216.450934][T10301] ? __pfx_gup_fast_fallback+0x10/0x10 [ 216.450963][T10301] ? is_valid_gup_args+0x11f/0x200 [ 216.450991][T10301] ? get_user_pages_fast+0x4d/0xb0 [ 216.451019][T10301] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 216.451048][T10301] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 216.451081][T10301] iov_iter_get_pages2+0x5e/0xa0 [ 216.451107][T10301] __se_sys_vmsplice+0x7b3/0x1490 [ 216.451158][T10301] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 216.451190][T10301] ? __pfx_futex_wake+0x10/0x10 [ 216.451302][T10301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.451327][T10301] do_syscall_64+0x15f/0xf80 [ 216.451353][T10301] ? trace_irq_disable+0x3b/0x140 [ 216.451376][T10301] ? clear_bhb_loop+0x40/0x90 [ 216.451403][T10301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.451424][T10301] RIP: 0033:0x7f16ea99c819 [ 216.451445][T10301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.451461][T10301] RSP: 002b:00007f16eb807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 216.451485][T10301] RAX: ffffffffffffffda RBX: 00007f16eac15fa0 RCX: 00007f16ea99c819 [ 216.451500][T10301] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 216.451512][T10301] RBP: 00007f16eaa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 216.451525][T10301] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 216.451537][T10301] R13: 00007f16eac16038 R14: 00007f16eac15fa0 R15: 00007ffe6ffb7518 [ 216.451575][T10301] [ 217.268553][T10321] : entered promiscuous mode [ 217.560199][T10334] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 217.841794][T10351] netlink: 'syz.0.1150': attribute type 83 has an invalid length. [ 218.271903][T10370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.305603][ T5894] lo speed is unknown, defaulting to 1000 [ 218.514708][T10382] ieee802154 phy1 wpan1: encryption failed: -22 [ 218.964522][T10399] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 219.605832][T10419] netlink: 'syz.0.1165': attribute type 3 has an invalid length. [ 219.655931][T10419] netlink: 'syz.0.1165': attribute type 1 has an invalid length. [ 219.684269][T10419] __nla_validate_parse: 12 callbacks suppressed [ 219.684289][T10419] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1165'. [ 219.711546][T10419] NCSI netlink: No device for ifindex 813332851 [ 219.949561][T10432] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1169'. [ 220.012866][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1171'. [ 220.043843][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1171'. [ 220.189339][T10445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1173'. [ 220.445850][T10456] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 220.475483][T10456] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1178'. [ 220.585265][T10464] netlink: 'syz.1.1179': attribute type 8 has an invalid length. [ 221.176307][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 221.190397][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 221.727748][T10515] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1193'. [ 221.935680][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 222.146499][T10531] netlink: 'syz.2.1197': attribute type 5 has an invalid length. [ 222.339674][T10538] netlink: zone id is out of range [ 222.979151][T10559] Bluetooth: MGMT ver 1.23 [ 223.119801][T10583] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 223.238988][T10583] gtp0: entered promiscuous mode [ 223.270019][T10583] gtp0: entered allmulticast mode [ 223.320906][T10595] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 223.621413][T10613] nbd: must specify at least one socket [ 224.136599][T10633] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 224.227664][T10633] bond7: (slave lo): Enslaving as an active interface with an up link [ 224.256882][T10633] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 224.312169][T10640] IPVS: Unknown mcast interface: vcan0 [ 224.474871][T10643] bridge0: port 2(veth0_to_bridge) entered blocking state [ 224.515142][T10643] bridge0: port 2(veth0_to_bridge) entered disabled state [ 224.536056][T10643] veth0_to_bridge: entered allmulticast mode [ 224.546686][T10654] netlink: 'syz.3.1234': attribute type 11 has an invalid length. [ 224.551290][T10643] veth0_to_bridge: entered promiscuous mode [ 224.696349][T10654] bond9: Removing last ns target with arp_interval on [ 224.777595][T10663] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 224.842723][T10672] netlink: 'syz.3.1237': attribute type 50 has an invalid length. [ 224.857590][T10672] __nla_validate_parse: 13 callbacks suppressed [ 224.857612][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1237'. [ 224.972916][T10679] netlink: 'syz.2.1239': attribute type 5 has an invalid length. [ 225.210365][T10693] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 225.245592][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1242'. [ 225.310247][T10691] dvmrp0: entered allmulticast mode [ 225.385771][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'. [ 225.398273][T10698] nbd: must specify a size in bytes for the device [ 225.406356][T10698] nbd: must specify an index to disconnect [ 225.479383][T10698] SET target dimension over the limit! [ 225.487552][T10705] netlink: 'syz.3.1245': attribute type 29 has an invalid length. [ 225.498001][T10705] netlink: 'syz.3.1245': attribute type 29 has an invalid length. [ 225.507726][T10705] netlink: 'syz.3.1245': attribute type 29 has an invalid length. [ 225.527145][T10705] netlink: 'syz.3.1245': attribute type 29 has an invalid length. [ 225.567796][T10705] netlink: 'syz.3.1245': attribute type 29 has an invalid length. [ 225.580142][T10705] netlink: 'syz.3.1245': attribute type 29 has an invalid length. [ 225.836308][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'. [ 225.845448][T10720] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.889596][T10720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.918596][T10720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.019953][T10726] bond0: entered promiscuous mode [ 226.049126][T10726] bond_slave_1: entered promiscuous mode [ 226.079631][T10726] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 226.079872][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 226.226210][T10730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.317050][T10736] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1254'. [ 226.343250][T10735] bond4: (slave veth3): Enslaving as an active interface with a down link [ 226.422685][T10730] bond4: (slave veth0_to_bond): making interface the new active one [ 226.464574][T10730] veth0_to_bond: entered promiscuous mode [ 226.494524][T10730] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 226.649303][T10742] bond4: (slave veth5): Enslaving as an active interface with a down link [ 226.701667][T10752] veth0: entered promiscuous mode [ 226.742725][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1258'. [ 226.897108][T10760] ieee802154 phy1 wpan1: encryption failed: -22 [ 226.897970][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1261'. [ 227.094421][T10768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1266'. [ 227.146939][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1265'. [ 227.384165][T10773] syzkaller0: entered promiscuous mode [ 227.407131][T10773] syzkaller0: entered allmulticast mode [ 229.914637][T10846] x_tables: duplicate underflow at hook 1 [ 230.073881][T10871] __nla_validate_parse: 5 callbacks suppressed [ 230.073900][T10871] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1288'. [ 230.159732][T10854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1288'. [ 230.398531][T10886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1290'. [ 230.850329][T10904] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1297'. [ 230.881740][T10904] netlink: Unknown conntrack attr (0) [ 231.149629][T10918] validate_nla: 6 callbacks suppressed [ 231.149650][T10918] netlink: 'syz.3.1303': attribute type 10 has an invalid length. [ 231.166814][T10918] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.178424][T10918] bridge_slave_1: left allmulticast mode [ 231.185198][T10918] bridge_slave_1: left promiscuous mode [ 231.191182][T10918] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.212390][T10918] bridge_slave_1: entered promiscuous mode [ 231.234132][T10918] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 231.296085][T10918] netlink: 'syz.3.1303': attribute type 11 has an invalid length. [ 231.300714][T10923] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.315894][T10921] netlink: 'syz.0.1304': attribute type 7 has an invalid length. [ 231.407223][ T5895] IPVS: starting estimator thread 0... [ 231.418244][T10921] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.522740][T10930] IPVS: using max 24 ests per chain, 57600 per kthread [ 231.707930][T10937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1309'. [ 231.914483][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1314'. [ 231.933443][T10950] netlink: 'syz.3.1314': attribute type 1 has an invalid length. [ 231.959611][T10950] netlink: 'syz.3.1314': attribute type 2 has an invalid length. [ 232.041743][T10959] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 232.080894][T10959] netlink: 'syz.2.1316': attribute type 15 has an invalid length. [ 233.119734][T11005] netlink: 'syz.3.1329': attribute type 15 has an invalid length. [ 233.390865][T11014] syzkaller0: entered promiscuous mode [ 233.414073][T11014] syzkaller0: entered allmulticast mode [ 234.827736][ T11] block nbd0: Possible stuck request ffff888026dd0000: control (read@0,1024B). Runtime 30 seconds [ 234.839460][ T11] block nbd0: Possible stuck request ffff888026dd01c0: control (read@1024,1024B). Runtime 30 seconds [ 234.851392][ T11] block nbd0: Possible stuck request ffff888026dd0380: control (read@2048,1024B). Runtime 30 seconds [ 234.862656][ T11] block nbd0: Possible stuck request ffff888026dd0540: control (read@3072,1024B). Runtime 30 seconds [ 235.596711][T11045] netlink: 'syz.2.1343': attribute type 9 has an invalid length. [ 235.625068][T11045] netlink: 212352 bytes leftover after parsing attributes in process `syz.2.1343'. [ 235.956444][T11053] veth7: entered allmulticast mode [ 235.975190][T11065] netlink: 'syz.2.1352': attribute type 13 has an invalid length. [ 236.079826][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1350'. [ 236.303331][T11083] netlink: 'syz.0.1354': attribute type 2 has an invalid length. [ 236.391002][T11083] vþ: entered promiscuous mode [ 236.554401][T11087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1357'. [ 236.986292][T11113] raw_sendmsg: syz.0.1367 forgot to set AF_INET. Fix it! [ 237.199071][T11122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.211957][T11122] batadv_slave_0: entered allmulticast mode [ 237.405356][T11137] netlink: 'syz.2.1376': attribute type 10 has an invalid length. [ 237.505769][T11139] netlink: 'syz.0.1375': attribute type 1 has an invalid length. [ 237.537087][T11144] xt_hashlimit: size too large, truncated to 1048576 [ 237.660653][T11153] lo: Caught tx_queue_len zero misconfig [ 237.685734][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 237.812337][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 237.877953][T11160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1380'. [ 237.893877][ T48] veth0_to_bond: left promiscuous mode [ 238.074056][T11165] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1381'. [ 238.115167][T11163] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1381'. [ 238.155577][T11170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.299395][T11181] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1386'. [ 238.339953][T11183] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1388'. [ 238.356368][T11180] syzkaller0: entered promiscuous mode [ 238.373025][T11180] syzkaller0: entered allmulticast mode [ 238.530229][T11192] team0: Port device gretap2 added [ 238.945956][T11206] syzkaller1: entered promiscuous mode [ 238.952213][T11206] syzkaller1: entered allmulticast mode [ 238.959400][T11209] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 239.253085][T11228] chnl_net:caif_netlink_parms(): no params data found [ 239.468772][T11195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.619581][T11287] netlink: 'syz.3.1417': attribute type 30 has an invalid length. [ 240.735143][T11292] netlink: 'syz.2.1418': attribute type 3 has an invalid length. [ 240.788133][T11292] netlink: 'syz.2.1418': attribute type 3 has an invalid length. [ 241.082370][T11318] xt_hashlimit: size too large, truncated to 1048576 [ 241.808763][T11345] __nla_validate_parse: 6 callbacks suppressed [ 241.808783][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 242.039419][T11365] netlink: 'syz.0.1438': attribute type 1 has an invalid length. [ 242.230685][T11365] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.298835][T11371] vlan2: entered allmulticast mode [ 242.306026][T11371] bond5: entered allmulticast mode [ 242.323798][T11369] syzkaller1: entered promiscuous mode [ 242.350489][T11369] syzkaller1: entered allmulticast mode [ 242.408639][T11379] bond5: (slave geneve4): making interface the new active one [ 242.428082][T11379] geneve4: entered allmulticast mode [ 242.448431][T11379] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 242.663257][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 242.861916][T11403] bond1: (slave lo): Releasing backup interface [ 242.866004][T11407] netlink: 'syz.1.1448': attribute type 7 has an invalid length. [ 242.877176][T11407] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1448'. [ 242.878046][T11403] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 242.899726][T11403] veth0_to_bridge: left allmulticast mode [ 242.905906][T11403] veth0_to_bridge: left promiscuous mode [ 242.914068][T11403] bridge0: port 2(veth0_to_bridge) entered disabled state [ 242.939107][T11403] bridge_slave_0: left allmulticast mode [ 242.950598][T11403] bridge_slave_0: left promiscuous mode [ 242.960090][T11403] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.974071][T11414] netlink: 'syz.0.1450': attribute type 1 has an invalid length. [ 242.983875][T11403] bond0: (slave bridge_slave_1): Releasing backup interface [ 242.993940][T11403] bond0: (slave bond_slave_0): Releasing backup interface [ 243.003312][T11403] bond0: (slave bond_slave_1): Releasing backup interface [ 243.014368][T11403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 243.065588][T11412] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 243.095031][T11412] team0 (unregistering): Port device team_slave_0 removed [ 243.162551][T11412] team0 (unregistering): Failed to send options change via netlink (err -105) [ 243.192086][T11412] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 243.213397][T11412] team0 (unregistering): Port device team_slave_1 removed [ 243.235412][T11412] team0 (unregistering): Failed to send options change via netlink (err -105) [ 243.245503][T11412] team0 (unregistering): Failed to send port change of device bridge3 via netlink (err -105) [ 243.257130][T11412] team0 (unregistering): Port device bridge3 removed [ 243.643365][T11440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1458'. [ 243.699762][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 243.759183][T11440] netlink: 'syz.4.1458': attribute type 1 has an invalid length. [ 243.851046][ T30] audit: type=1800 audit(1776663661.570:2): pid=11450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1459" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 243.870761][T11450] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 243.892570][T11450] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 243.944545][T11450] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 244.193009][T11468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1463'. [ 244.233321][T11473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1464'. [ 245.177349][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 245.214752][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 245.311019][T11528] netlink: 'syz.2.1476': attribute type 10 has an invalid length. [ 245.408452][T11537] xt_hashlimit: size too large, truncated to 1048576 [ 245.579732][T11547] netlink: 'syz.2.1481': attribute type 3 has an invalid length. [ 245.825652][T11558] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1484'. [ 245.859691][T11558] veth0: entered promiscuous mode [ 245.892017][T11557] veth0: left promiscuous mode [ 246.158179][T11579] xfrm1: entered promiscuous mode [ 246.182890][T11579] xfrm1: entered allmulticast mode [ 246.688143][T11617] netlink: 'syz.4.1498': attribute type 1 has an invalid length. [ 246.895639][T11617] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.926533][T11630] netlink: 'syz.4.1498': attribute type 10 has an invalid length. [ 246.953507][T11630] bridge_slave_1: left allmulticast mode [ 246.978917][T11630] bridge_slave_1: left promiscuous mode [ 246.985291][T11630] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.004227][T11630] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 247.021666][T11610] bond9: (slave veth0_to_bond): making interface the new active one [ 247.030936][T11610] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 247.042951][T11626] bond9: entered promiscuous mode [ 247.048040][T11626] veth0_to_bond: entered promiscuous mode [ 247.054923][T11626] bond9: entered allmulticast mode [ 247.060112][T11626] veth0_to_bond: entered allmulticast mode [ 247.635683][T11658] __nla_validate_parse: 8 callbacks suppressed [ 247.635703][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 247.684554][T11664] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1510'. [ 247.715974][T11664] netlink: 'syz.0.1510': attribute type 4 has an invalid length. [ 247.737491][ T5894] lo speed is unknown, defaulting to 1000 [ 247.743387][ T5894] syz2: Port: 1 Link DOWN [ 247.761588][T11664] netlink: 'syz.0.1510': attribute type 4 has an invalid length. [ 247.770167][ T5894] lo speed is unknown, defaulting to 1000 [ 247.796469][ T5894] lo speed is unknown, defaulting to 1000 [ 247.815907][ T5894] syz2: Port: 1 Link ACTIVE [ 247.842549][ T5894] lo speed is unknown, defaulting to 1000 [ 248.134340][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1514'. [ 248.361310][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 248.429503][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1514'. [ 248.460028][T11699] nbd: must specify an index to disconnect [ 248.481570][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 248.532186][T11689] veth0_macvtap: left promiscuous mode [ 248.783684][T11710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1519'. [ 248.872144][T11728] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1519'. [ 249.362374][T11743] netlink: 'syz.3.1524': attribute type 12 has an invalid length. [ 249.439482][T11743] netlink: 'syz.3.1524': attribute type 1 has an invalid length. [ 249.513353][T11747] netlink: get zone limit has 4 unknown bytes [ 249.552443][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1528'. [ 249.739474][T11755] ip6tnl0: Caught tx_queue_len zero misconfig [ 249.926758][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1533'. [ 250.024142][T11750] 8021q: adding VLAN 0 to HW filter on device bond6 [ 250.036844][T11750] bond5: (slave bond6): Enslaving as an active interface with an up link [ 250.177534][T11785] netlink: 'syz.3.1536': attribute type 7 has an invalid length. [ 250.207354][T11785] netlink: 'syz.3.1536': attribute type 8 has an invalid length. [ 250.477451][T11797] 8021q: VLANs not supported on ipvlan0 [ 250.595803][T11802] rdma_rxe: rxe_newlink: failed to add veth0_vlan [ 250.645493][T11801] netlink: 'syz.3.1542': attribute type 11 has an invalid length. [ 251.108029][T11830] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 251.567022][T11848] netlink: 'syz.4.1555': attribute type 2 has an invalid length. [ 255.934762][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.946157][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 264.734320][ T5193] udevd[5193]: worker [9502] /devices/virtual/block/nbd0 is taking a long time [ 264.891837][ T11] block nbd0: Possible stuck request ffff888026dd0000: control (read@0,1024B). Runtime 60 seconds [ 264.902668][ T11] block nbd0: Possible stuck request ffff888026dd01c0: control (read@1024,1024B). Runtime 60 seconds [ 264.913666][ T11] block nbd0: Possible stuck request ffff888026dd0380: control (read@2048,1024B). Runtime 60 seconds [ 264.924590][ T11] block nbd0: Possible stuck request ffff888026dd0540: control (read@3072,1024B). Runtime 60 seconds [ 266.827046][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.837287][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.847963][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.856314][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.864492][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.931520][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.948247][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.958300][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.966144][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 266.968547][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.980540][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 266.984004][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.992061][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 267.009654][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 267.024649][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 267.074373][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 267.079904][T11879] lo speed is unknown, defaulting to 1000 [ 267.086626][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 267.096332][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 267.105698][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 267.113764][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 267.275476][T11881] lo speed is unknown, defaulting to 1000 [ 267.543362][T11883] lo speed is unknown, defaulting to 1000 [ 267.796284][T11879] chnl_net:caif_netlink_parms(): no params data found [ 268.075703][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 268.089471][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 268.101200][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 268.110010][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 268.122440][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 268.206338][ T5835] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 268.217014][T11879] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.226600][ T5835] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 268.234791][T11879] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.245177][ T5835] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 268.256663][ T5835] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 268.264734][T11879] bridge_slave_0: entered allmulticast mode [ 268.274787][ T5835] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 268.286540][T11879] bridge_slave_0: entered promiscuous mode [ 268.316264][T11879] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.323597][T11879] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.330935][T11879] bridge_slave_1: entered allmulticast mode [ 268.340508][T11879] bridge_slave_1: entered promiscuous mode [ 268.387122][T11891] lo speed is unknown, defaulting to 1000 [ 268.466574][T11879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.480523][T11879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.573817][T11879] team0: Port device team_slave_0 added [ 268.608636][T11879] team0: Port device team_slave_1 added [ 268.699729][T11879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.707327][T11879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.739578][T11879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.785460][T11895] lo speed is unknown, defaulting to 1000 [ 268.796829][T11879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.821563][T11879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.851622][T11879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.040327][T11879] hsr_slave_0: entered promiscuous mode [ 269.052162][ T5835] Bluetooth: hci6: command tx timeout [ 269.058746][ T5843] Bluetooth: hci5: command tx timeout [ 269.070387][T11879] hsr_slave_1: entered promiscuous mode [ 269.077205][T11879] debugfs: 'hsr0' already exists in 'hsr' [ 269.083657][T11879] Cannot create hsr debugfs directory [ 269.115384][T11881] chnl_net:caif_netlink_parms(): no params data found [ 269.131897][ T5843] Bluetooth: hci7: command tx timeout [ 269.417755][T11881] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.425243][T11881] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.432648][T11881] bridge_slave_0: entered allmulticast mode [ 269.440081][T11881] bridge_slave_0: entered promiscuous mode [ 269.481262][T11881] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.488515][T11881] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.496307][T11881] bridge_slave_1: entered allmulticast mode [ 269.504613][T11881] bridge_slave_1: entered promiscuous mode [ 269.597809][T11881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.610849][T11881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.627534][T11883] chnl_net:caif_netlink_parms(): no params data found [ 269.743699][T11881] team0: Port device team_slave_0 added [ 269.782923][T11881] team0: Port device team_slave_1 added [ 269.864022][T11881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.874291][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.900649][T11881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.915118][T11881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.922395][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.948573][T11881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.018210][T11891] chnl_net:caif_netlink_parms(): no params data found [ 270.054685][T11883] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.063002][T11883] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.070380][T11883] bridge_slave_0: entered allmulticast mode [ 270.078483][T11883] bridge_slave_0: entered promiscuous mode [ 270.138433][T11883] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.145838][T11883] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.153225][T11883] bridge_slave_1: entered allmulticast mode [ 270.160692][T11883] bridge_slave_1: entered promiscuous mode [ 270.173375][ T5843] Bluetooth: hci8: command tx timeout [ 270.204972][T11881] hsr_slave_0: entered promiscuous mode [ 270.211330][T11881] hsr_slave_1: entered promiscuous mode [ 270.217840][T11881] debugfs: 'hsr0' already exists in 'hsr' [ 270.223648][T11881] Cannot create hsr debugfs directory [ 270.303571][T11883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.317341][T11883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.342665][ T5843] Bluetooth: hci9: command tx timeout [ 270.426675][T11895] chnl_net:caif_netlink_parms(): no params data found [ 270.438391][T11891] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.445695][T11891] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.453145][T11891] bridge_slave_0: entered allmulticast mode [ 270.460443][T11891] bridge_slave_0: entered promiscuous mode [ 270.470183][T11883] team0: Port device team_slave_0 added [ 270.490042][T11891] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.497485][T11891] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.507105][T11891] bridge_slave_1: entered allmulticast mode [ 270.514774][T11891] bridge_slave_1: entered promiscuous mode [ 270.523874][T11883] team0: Port device team_slave_1 added [ 270.623401][T11891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.633513][T11883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.640505][T11883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.667656][T11883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.693425][T11891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.715667][T11883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.724398][T11883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.751022][T11883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.817694][T11891] team0: Port device team_slave_0 added [ 270.826498][T11891] team0: Port device team_slave_1 added [ 270.865651][T11895] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.873241][T11895] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.880439][T11895] bridge_slave_0: entered allmulticast mode [ 270.888084][T11895] bridge_slave_0: entered promiscuous mode [ 270.936089][T11895] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.945016][T11895] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.952699][T11895] bridge_slave_1: entered allmulticast mode [ 270.960853][T11895] bridge_slave_1: entered promiscuous mode [ 270.980106][T11891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.987522][T11891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.013832][T11891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.028196][T11891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.035279][T11891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.061766][T11891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.093055][T11883] hsr_slave_0: entered promiscuous mode [ 271.099409][T11883] hsr_slave_1: entered promiscuous mode [ 271.106256][T11883] debugfs: 'hsr0' already exists in 'hsr' [ 271.112111][T11883] Cannot create hsr debugfs directory [ 271.132140][ T5843] Bluetooth: hci5: command tx timeout [ 271.132439][ T5835] Bluetooth: hci6: command tx timeout [ 271.154277][T11895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.189663][T11895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.212168][ T5835] Bluetooth: hci7: command tx timeout [ 271.286391][T11891] hsr_slave_0: entered promiscuous mode [ 271.296095][T11891] hsr_slave_1: entered promiscuous mode [ 271.306116][T11891] debugfs: 'hsr0' already exists in 'hsr' [ 271.312454][T11891] Cannot create hsr debugfs directory [ 271.334405][T11895] team0: Port device team_slave_0 added [ 271.390857][T11895] team0: Port device team_slave_1 added [ 271.538648][T11895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.546774][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.573352][T11895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.606157][T11895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.613731][T11895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.640480][T11895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.779225][T11895] hsr_slave_0: entered promiscuous mode [ 271.785832][T11895] hsr_slave_1: entered promiscuous mode [ 271.792406][T11895] debugfs: 'hsr0' already exists in 'hsr' [ 271.798166][T11895] Cannot create hsr debugfs directory [ 272.251897][ T5835] Bluetooth: hci8: command tx timeout [ 272.411830][ T5835] Bluetooth: hci9: command tx timeout [ 273.211633][ T5835] Bluetooth: hci6: command tx timeout [ 273.222589][ T5835] Bluetooth: hci5: command tx timeout [ 273.291623][ T5835] Bluetooth: hci7: command tx timeout [ 274.331902][ T5835] Bluetooth: hci8: command tx timeout [ 274.491696][ T5835] Bluetooth: hci9: command tx timeout [ 275.291725][ T5835] Bluetooth: hci5: command tx timeout [ 275.291737][ T5843] Bluetooth: hci6: command tx timeout [ 275.371903][ T5835] Bluetooth: hci7: command tx timeout [ 276.411761][ T5835] Bluetooth: hci8: command tx timeout [ 276.573019][ T5835] Bluetooth: hci9: command tx timeout [ 294.972278][ T11] block nbd0: Possible stuck request ffff888026dd0000: control (read@0,1024B). Runtime 90 seconds [ 294.984023][ T11] block nbd0: Possible stuck request ffff888026dd01c0: control (read@1024,1024B). Runtime 90 seconds [ 294.995019][ T11] block nbd0: Possible stuck request ffff888026dd0380: control (read@2048,1024B). Runtime 90 seconds [ 295.006005][ T11] block nbd0: Possible stuck request ffff888026dd0540: control (read@3072,1024B). Runtime 90 seconds [ 317.374365][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.384810][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 325.053496][ T11] block nbd0: Possible stuck request ffff888026dd0000: control (read@0,1024B). Runtime 120 seconds [ 325.064406][ T11] block nbd0: Possible stuck request ffff888026dd01c0: control (read@1024,1024B). Runtime 120 seconds [ 325.078124][ T11] block nbd0: Possible stuck request ffff888026dd0380: control (read@2048,1024B). Runtime 120 seconds [ 325.089197][ T11] block nbd0: Possible stuck request ffff888026dd0540: control (read@3072,1024B). Runtime 120 seconds [ 327.114919][ T5843] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 327.126580][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 327.134528][ T5843] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 327.149784][ T5843] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 327.159058][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 327.168216][ T5843] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 327.177997][ T5840] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 327.189302][ T5840] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 327.197013][ T5843] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 327.208603][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 327.254693][T11930] lo speed is unknown, defaulting to 1000 [ 327.283801][ T5835] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 327.298866][ T5835] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 327.310269][ T5835] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 327.323856][ T5835] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 327.333034][ T5835] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 327.473551][T11929] lo speed is unknown, defaulting to 1000 [ 327.739203][T11933] lo speed is unknown, defaulting to 1000 [ 328.088569][T11930] chnl_net:caif_netlink_parms(): no params data found [ 328.256906][ T5837] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 328.268802][ T5837] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 328.281842][ T5837] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 328.296303][ T5837] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 328.304455][ T5837] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 328.394611][ T5835] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 328.410299][ T5835] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 328.419144][ T5835] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 328.428685][ T5835] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 328.436924][ T5835] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 328.523388][T11930] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.532069][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.539414][T11930] bridge_slave_0: entered allmulticast mode [ 328.548089][T11930] bridge_slave_0: entered promiscuous mode [ 328.582839][T11930] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.591810][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.599518][T11930] bridge_slave_1: entered allmulticast mode [ 328.610364][T11930] bridge_slave_1: entered promiscuous mode [ 328.664329][T11940] lo speed is unknown, defaulting to 1000 [ 328.730227][T11930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.745958][T11930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.906966][T11930] team0: Port device team_slave_0 added [ 328.935347][T11929] chnl_net:caif_netlink_parms(): no params data found [ 328.951094][T11930] team0: Port device team_slave_1 added [ 328.964214][T11944] lo speed is unknown, defaulting to 1000 [ 329.095719][T11930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.102830][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.129168][T11930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.173453][T11930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.181053][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.208200][T11930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.218989][ T5837] Bluetooth: hci11: command tx timeout [ 329.291875][ T5837] Bluetooth: hci10: command tx timeout [ 329.371763][ T5837] Bluetooth: hci12: command tx timeout [ 329.484826][T11930] hsr_slave_0: entered promiscuous mode [ 329.492023][T11930] hsr_slave_1: entered promiscuous mode [ 329.499037][T11930] debugfs: 'hsr0' already exists in 'hsr' [ 329.505877][T11930] Cannot create hsr debugfs directory [ 329.569573][T11929] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.577290][T11929] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.586597][T11929] bridge_slave_0: entered allmulticast mode [ 329.597716][T11929] bridge_slave_0: entered promiscuous mode [ 329.636845][T11933] chnl_net:caif_netlink_parms(): no params data found [ 329.649227][T11929] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.656806][T11929] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.664228][T11929] bridge_slave_1: entered allmulticast mode [ 329.671342][T11929] bridge_slave_1: entered promiscuous mode [ 329.796907][T11929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.827683][T11929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.915118][T11929] team0: Port device team_slave_0 added [ 329.942051][T11929] team0: Port device team_slave_1 added [ 329.975985][T11933] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.983643][T11933] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.990863][T11933] bridge_slave_0: entered allmulticast mode [ 329.998642][T11933] bridge_slave_0: entered promiscuous mode [ 330.030285][T11933] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.037730][T11933] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.045733][T11933] bridge_slave_1: entered allmulticast mode [ 330.052996][T11933] bridge_slave_1: entered promiscuous mode [ 330.103738][T11929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.110712][T11929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.137563][T11929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.181152][T11929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.188286][T11929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.215126][T11929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.255338][T11933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.290346][T11933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.342000][ T5837] Bluetooth: hci13: command tx timeout [ 330.385115][T11940] chnl_net:caif_netlink_parms(): no params data found [ 330.412297][T11933] team0: Port device team_slave_0 added [ 330.459945][T11933] team0: Port device team_slave_1 added [ 330.473350][T11929] hsr_slave_0: entered promiscuous mode [ 330.479711][T11929] hsr_slave_1: entered promiscuous mode [ 330.486406][T11929] debugfs: 'hsr0' already exists in 'hsr' [ 330.494459][ T5837] Bluetooth: hci14: command tx timeout [ 330.502526][T11929] Cannot create hsr debugfs directory [ 330.558202][T11933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.565278][T11933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.594299][T11933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.625410][T11944] chnl_net:caif_netlink_parms(): no params data found [ 330.637519][T11933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.644812][T11933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.672399][T11933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.819248][T11940] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.827741][T11940] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.835342][T11940] bridge_slave_0: entered allmulticast mode [ 330.843031][T11940] bridge_slave_0: entered promiscuous mode [ 330.892266][T11933] hsr_slave_0: entered promiscuous mode [ 330.898975][T11933] hsr_slave_1: entered promiscuous mode [ 330.906804][T11933] debugfs: 'hsr0' already exists in 'hsr' [ 330.912651][T11933] Cannot create hsr debugfs directory [ 330.918400][T11940] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.926400][T11940] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.933952][T11940] bridge_slave_1: entered allmulticast mode [ 330.941087][T11940] bridge_slave_1: entered promiscuous mode [ 331.068506][T11940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.077933][T11944] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.085482][T11944] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.092914][T11944] bridge_slave_0: entered allmulticast mode [ 331.100127][T11944] bridge_slave_0: entered promiscuous mode [ 331.137475][T11940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.147486][T11944] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.154930][T11944] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.162865][T11944] bridge_slave_1: entered allmulticast mode [ 331.170183][T11944] bridge_slave_1: entered promiscuous mode [ 331.266426][T11944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.279787][T11944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.301890][ T5837] Bluetooth: hci11: command tx timeout [ 331.324721][T11940] team0: Port device team_slave_0 added [ 331.359752][T11940] team0: Port device team_slave_1 added [ 331.371776][ T5837] Bluetooth: hci10: command tx timeout [ 331.414366][T11944] team0: Port device team_slave_0 added [ 331.452062][ T5837] Bluetooth: hci12: command tx timeout [ 331.462079][T11944] team0: Port device team_slave_1 added [ 331.487888][T11940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.495945][T11940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.522467][T11940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.538577][T11940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.545848][T11940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.572303][T11940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.628945][T11944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.636221][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.663046][T11944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.683575][T11944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.690594][T11944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.717681][T11944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.774404][T11940] hsr_slave_0: entered promiscuous mode [ 331.781118][T11940] hsr_slave_1: entered promiscuous mode [ 331.788351][T11940] debugfs: 'hsr0' already exists in 'hsr' [ 331.794454][T11940] Cannot create hsr debugfs directory [ 331.828618][T11944] hsr_slave_0: entered promiscuous mode [ 331.836121][T11944] hsr_slave_1: entered promiscuous mode [ 331.842541][T11944] debugfs: 'hsr0' already exists in 'hsr' [ 331.848300][T11944] Cannot create hsr debugfs directory [ 332.411640][ T5837] Bluetooth: hci13: command tx timeout [ 332.572166][ T5837] Bluetooth: hci14: command tx timeout [ 333.373490][ T5837] Bluetooth: hci11: command tx timeout [ 333.451955][ T5837] Bluetooth: hci10: command tx timeout [ 333.531857][ T5837] Bluetooth: hci12: command tx timeout [ 334.501658][ T5837] Bluetooth: hci13: command tx timeout [ 334.652252][ T5837] Bluetooth: hci14: command tx timeout [ 335.451767][ T5837] Bluetooth: hci11: command tx timeout [ 335.541800][ T5837] Bluetooth: hci10: command tx timeout [ 335.611996][ T5837] Bluetooth: hci12: command tx timeout [ 336.571741][ T5837] Bluetooth: hci13: command tx timeout [ 336.741655][ T5837] Bluetooth: hci14: command tx timeout [ 355.132004][ T11] block nbd0: Possible stuck request ffff888026dd0000: control (read@0,1024B). Runtime 150 seconds [ 355.142918][ T11] block nbd0: Possible stuck request ffff888026dd01c0: control (read@1024,1024B). Runtime 150 seconds [ 355.154213][ T11] block nbd0: Possible stuck request ffff888026dd0380: control (read@2048,1024B). Runtime 150 seconds [ 355.165363][ T11] block nbd0: Possible stuck request ffff888026dd0540: control (read@3072,1024B). Runtime 150 seconds [ 378.815438][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.824067][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 385.214062][ T11] block nbd0: Possible stuck request ffff888026dd0000: control (read@0,1024B). Runtime 180 seconds [ 385.224906][ T11] block nbd0: Possible stuck request ffff888026dd01c0: control (read@1024,1024B). Runtime 180 seconds [ 385.235987][ T11] block nbd0: Possible stuck request ffff888026dd0380: control (read@2048,1024B). Runtime 180 seconds [ 385.247018][ T11] block nbd0: Possible stuck request ffff888026dd0540: control (read@3072,1024B). Runtime 180 seconds [ 387.239539][ T5193] udevd[5193]: worker [9502] /devices/virtual/block/nbd0 timeout; kill it [ 387.248465][ T5193] udevd[5193]: seq 14579 '/devices/virtual/block/nbd0' killed [ 387.945312][ T5835] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 387.958445][ T5835] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 387.966667][ T5835] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 387.979885][ T5835] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 387.988875][ T5835] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 387.997676][ T5843] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 388.011484][ T5843] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 388.029669][ T5843] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 388.039280][ T5843] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 388.047753][ T5843] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 388.110984][ T5843] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 388.124414][ T5843] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 388.137916][ T5843] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 388.147539][ T5843] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 388.155603][ T5843] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 388.166431][T11981] lo speed is unknown, defaulting to 1000 [ 388.316940][T11979] lo speed is unknown, defaulting to 1000 [ 388.578398][T11983] lo speed is unknown, defaulting to 1000 [ 388.798336][T11981] chnl_net:caif_netlink_parms(): no params data found [ 389.145223][T11994] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 389.158371][T11994] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 389.170103][T11994] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 389.179131][T11994] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 389.187758][T11994] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 389.252112][T11981] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.268516][T11994] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 389.270558][T11981] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.286363][T11981] bridge_slave_0: entered allmulticast mode [ 389.287331][T11994] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 389.303439][T11994] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 389.304743][T11981] bridge_slave_0: entered promiscuous mode [ 389.318156][T11994] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 389.320425][T11981] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.333710][T11994] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 389.333922][T11981] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.349934][T11981] bridge_slave_1: entered allmulticast mode [ 389.381893][T11981] bridge_slave_1: entered promiscuous mode [ 389.463257][T11981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.477882][T11981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.592168][T11996] lo speed is unknown, defaulting to 1000 [ 389.610025][T11981] team0: Port device team_slave_0 added [ 389.645202][T11981] team0: Port device team_slave_1 added [ 389.754500][T11981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.761606][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.791165][T11981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.838825][T11981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.846771][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.876028][T11981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.899086][T11999] lo speed is unknown, defaulting to 1000 [ 390.077173][T11981] hsr_slave_0: entered promiscuous mode [ 390.085946][T11981] hsr_slave_1: entered promiscuous mode [ 390.101746][T11994] Bluetooth: hci15: command tx timeout [ 390.111179][T11981] debugfs: 'hsr0' already exists in 'hsr' [ 390.119259][T11981] Cannot create hsr debugfs directory [ 390.138935][T11979] chnl_net:caif_netlink_parms(): no params data found [ 390.171788][T11995] Bluetooth: hci16: command tx timeout [ 390.179243][T11994] Bluetooth: hci17: command tx timeout [ 390.500118][T11983] chnl_net:caif_netlink_parms(): no params data found [ 390.534831][T11979] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.543023][T11979] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.550413][T11979] bridge_slave_0: entered allmulticast mode [ 390.559714][T11979] bridge_slave_0: entered promiscuous mode [ 390.605726][T11979] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.613092][T11979] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.620411][T11979] bridge_slave_1: entered allmulticast mode [ 390.628822][T11979] bridge_slave_1: entered promiscuous mode [ 390.771256][T11979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.786696][T11979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.891258][T11979] team0: Port device team_slave_0 added [ 390.906521][T11983] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.914031][T11983] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.921264][T11983] bridge_slave_0: entered allmulticast mode [ 390.929452][T11983] bridge_slave_0: entered promiscuous mode [ 390.959487][T11979] team0: Port device team_slave_1 added [ 390.980914][T11983] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.991158][T11983] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.999244][T11983] bridge_slave_1: entered allmulticast mode [ 391.012373][T11983] bridge_slave_1: entered promiscuous mode [ 391.080986][T11979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.088142][T11979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.114243][T11979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.127762][T11979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.140741][T11995] Bluetooth: hci7: command 0x0406 tx timeout [ 391.144318][T11997] Bluetooth: hci8: command 0x0406 tx timeout [ 391.148237][T11995] Bluetooth: hci5: command 0x0406 tx timeout [ 391.158167][T11997] Bluetooth: hci9: command 0x0406 tx timeout [ 391.160601][T11994] Bluetooth: hci6: command 0x0406 tx timeout [ 391.189217][T11979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.217145][T11979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.290374][T11983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.300537][T11993] Bluetooth: hci18: command tx timeout [ 391.311757][T11983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.381295][T11996] chnl_net:caif_netlink_parms(): no params data found [ 391.412811][T11983] team0: Port device team_slave_0 added [ 391.451733][T11993] Bluetooth: hci19: command tx timeout [ 391.460199][T11983] team0: Port device team_slave_1 added [ 391.507236][T11979] hsr_slave_0: entered promiscuous mode [ 391.514810][T11979] hsr_slave_1: entered promiscuous mode [ 391.520966][T11979] debugfs: 'hsr0' already exists in 'hsr' [ 391.527254][T11979] Cannot create hsr debugfs directory [ 391.599916][T11983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.607210][T11983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.638961][T11983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.680170][T11983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.693236][T11983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.720094][T11983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.777339][T11999] chnl_net:caif_netlink_parms(): no params data found [ 391.872303][T11983] hsr_slave_0: entered promiscuous mode [ 391.878796][T11983] hsr_slave_1: entered promiscuous mode [ 391.885439][T11983] debugfs: 'hsr0' already exists in 'hsr' [ 391.891190][T11983] Cannot create hsr debugfs directory [ 391.919075][T11996] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.926531][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.934934][T11996] bridge_slave_0: entered allmulticast mode [ 391.942595][T11996] bridge_slave_0: entered promiscuous mode [ 391.986048][T11996] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.993512][T11996] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.000792][T11996] bridge_slave_1: entered allmulticast mode [ 392.008615][T11996] bridge_slave_1: entered promiscuous mode [ 392.130659][T11996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.144392][T11996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.172874][T11999] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.180098][T11999] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.181658][T11993] Bluetooth: hci15: command tx timeout [ 392.188567][T11999] bridge_slave_0: entered allmulticast mode [ 392.201304][T11999] bridge_slave_0: entered promiscuous mode [ 392.248864][T11999] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.256377][T11993] Bluetooth: hci17: command tx timeout [ 392.261889][ T5837] Bluetooth: hci16: command tx timeout [ 392.267814][T11999] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.275253][T11999] bridge_slave_1: entered allmulticast mode [ 392.283513][T11999] bridge_slave_1: entered promiscuous mode [ 392.298974][T11996] team0: Port device team_slave_0 added [ 392.309161][T11996] team0: Port device team_slave_1 added [ 392.381164][T11999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.417740][T11999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.443461][T11996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.450531][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.476782][T11996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.504926][T11996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.512512][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.539065][T11996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.588144][T11999] team0: Port device team_slave_0 added [ 392.604979][T11999] team0: Port device team_slave_1 added [ 392.668122][T11999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.675458][T11999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.702270][T11999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.733831][T11999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.740787][T11999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.767715][T11999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.784038][T11996] hsr_slave_0: entered promiscuous mode [ 392.790598][T11996] hsr_slave_1: entered promiscuous mode [ 392.798039][T11996] debugfs: 'hsr0' already exists in 'hsr' [ 392.804166][T11996] Cannot create hsr debugfs directory [ 392.922029][T11999] hsr_slave_0: entered promiscuous mode [ 392.928758][T11999] hsr_slave_1: entered promiscuous mode [ 392.935555][T11999] debugfs: 'hsr0' already exists in 'hsr' [ 392.941312][T11999] Cannot create hsr debugfs directory [ 393.381891][T11993] Bluetooth: hci18: command tx timeout [ 393.531900][ T5837] Bluetooth: hci19: command tx timeout [ 394.251628][ T5837] Bluetooth: hci15: command tx timeout [ 394.331696][T11993] Bluetooth: hci16: command tx timeout [ 394.332728][ T5837] Bluetooth: hci17: command tx timeout [ 395.451665][ T5837] Bluetooth: hci18: command tx timeout [ 395.611821][ T5837] Bluetooth: hci19: command tx timeout [ 396.331948][ T5837] Bluetooth: hci15: command tx timeout [ 396.411710][ T5837] Bluetooth: hci16: command tx timeout [ 396.414913][T11993] Bluetooth: hci17: command tx timeout [ 397.531603][T11993] Bluetooth: hci18: command tx timeout [ 397.691618][T11993] Bluetooth: hci19: command tx timeout [ 411.452103][ T31] INFO: task syz.3.1551:11837 blocked for more than 143 seconds. [ 411.459952][ T31] Not tainted syzkaller #0 [ 411.465103][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.474109][ T31] task:syz.3.1551 state:D stack:26328 pid:11837 tgid:11836 ppid:5822 task_flags:0x480140 flags:0x00080002 [ 411.486438][ T31] Call Trace: [ 411.489800][ T31] [ 411.492831][ T31] __schedule+0x17b4/0x5680 [ 411.497414][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 411.502471][ T31] ? schedule+0x90/0x360 [ 411.506784][ T31] schedule+0x164/0x360 [ 411.512331][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 411.517964][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 411.524324][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 411.551517][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 411.560537][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 411.580882][ T31] nbd_set_size+0x454/0x680 [ 411.589846][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 411.596437][ T31] ? nla_memcpy+0x5b/0xc0 [ 411.600857][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 411.608459][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 411.614776][ T31] ? rcu_is_watching+0x15/0xb0 [ 411.619608][ T31] ? trace_kmalloc+0x2a/0xf0 [ 411.624725][ T31] ? __nla_parse+0x40/0x60 [ 411.629219][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 411.636335][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 411.642780][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 411.648363][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 411.654670][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 411.659656][ T31] genl_rcv_msg+0x61c/0x7a0 [ 411.664556][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.669631][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 411.675802][ T31] netlink_rcv_skb+0x232/0x4b0 [ 411.680629][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.685796][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.691136][ T31] ? down_read+0x270/0x2e0 [ 411.699117][ T31] ? genl_rcv+0xd/0x40 [ 411.703394][ T31] genl_rcv+0x28/0x40 [ 411.707426][ T31] netlink_unicast+0x75c/0x8e0 [ 411.712284][ T31] netlink_sendmsg+0x813/0xb40 [ 411.717089][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.722709][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 411.727694][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.733169][ T31] ____sys_sendmsg+0x972/0x9f0 [ 411.737994][ T31] ? __might_fault+0xaf/0x130 [ 411.742789][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.748119][ T31] ? import_iovec+0x73/0xa0 [ 411.752935][ T31] ___sys_sendmsg+0x2a5/0x360 [ 411.757632][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 411.762816][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.768075][ T31] ? futex_wake+0x4ac/0x580 [ 411.773047][ T31] ? __fget_files+0x2a/0x420 [ 411.777690][ T31] ? __fget_files+0x3a0/0x420 [ 411.782752][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 411.787728][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.793254][ T31] ? rcu_is_watching+0x15/0xb0 [ 411.798054][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.804444][ T31] do_syscall_64+0x15f/0xf80 [ 411.809079][ T31] ? trace_irq_disable+0x3b/0x140 [ 411.814577][ T31] ? clear_bhb_loop+0x40/0x90 [ 411.819402][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.825403][ T31] RIP: 0033:0x7f16ea99c819 [ 411.829836][ T31] RSP: 002b:00007f16eb807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.838327][ T31] RAX: ffffffffffffffda RBX: 00007f16eac15fa0 RCX: 00007f16ea99c819 [ 411.846599][ T31] RDX: 0000000020040080 RSI: 00002000000003c0 RDI: 0000000000000004 [ 411.854843][ T31] RBP: 00007f16eaa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 411.862994][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.871142][ T31] R13: 00007f16eac16038 R14: 00007f16eac15fa0 R15: 00007ffe6ffb7518 [ 411.879556][ T31] [ 411.882821][ T31] INFO: task syz.1.1553:11842 blocked for more than 143 seconds. [ 411.890570][ T31] Not tainted syzkaller #0 [ 411.895576][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.904456][ T31] task:syz.1.1553 state:D stack:27936 pid:11842 tgid:11841 ppid:5825 task_flags:0x400040 flags:0x00080002 [ 411.916666][ T31] Call Trace: [ 411.919976][ T31] [ 411.923108][ T31] __schedule+0x17b4/0x5680 [ 411.927677][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 411.933094][ T31] ? __pfx___schedule+0x10/0x10 [ 411.937994][ T31] ? schedule+0x90/0x360 [ 411.942351][ T31] schedule+0x164/0x360 [ 411.946545][ T31] schedule_preempt_disabled+0x13/0x30 [ 411.952075][ T31] __mutex_lock+0x7f5/0x1550 [ 411.956701][ T31] ? __mutex_lock+0x606/0x1550 [ 411.961788][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 411.966474][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 411.971594][ T31] ? radix_tree_lookup+0x240/0x290 [ 411.976741][ T31] genl_rcv_msg+0x10b/0x7a0 [ 411.981338][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 411.986664][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 411.992389][ T31] netlink_rcv_skb+0x232/0x4b0 [ 411.997194][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.002320][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.007645][ T31] ? down_read+0x270/0x2e0 [ 412.012553][ T31] ? genl_rcv+0xd/0x40 [ 412.016656][ T31] genl_rcv+0x28/0x40 [ 412.020636][ T31] netlink_unicast+0x75c/0x8e0 [ 412.025880][ T31] netlink_sendmsg+0x813/0xb40 [ 412.030704][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.036086][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.041067][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.046470][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.051960][ T31] __sys_sendto+0x672/0x710 [ 412.056483][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 412.061695][ T31] ? exc_page_fault+0x6a/0xc0 [ 412.066436][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 412.071804][ T31] __x64_sys_sendto+0xde/0x100 [ 412.076616][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.082965][ T31] do_syscall_64+0x15f/0xf80 [ 412.087568][ T31] ? trace_irq_disable+0x3b/0x140 [ 412.093192][ T31] ? clear_bhb_loop+0x40/0x90 [ 412.097926][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.104023][ T31] RIP: 0033:0x7f108cd5d04e [ 412.108467][ T31] RSP: 002b:00007f108dba1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 412.117223][ T31] RAX: ffffffffffffffda RBX: 00007f108dba36c0 RCX: 00007f108cd5d04e [ 412.125288][ T31] RDX: 0000000000000020 RSI: 00007f108dba2000 RDI: 0000000000000003 [ 412.133542][ T31] RBP: 0000000000000000 R08: 00007f108dba1f04 R09: 000000000000000c [ 412.141798][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 412.149777][ T31] R13: 00007f108dba1f58 R14: 00007f108dba2000 R15: 0000000000000000 [ 412.157871][ T31] [ 412.160927][ T31] INFO: task syz.2.1554:11845 blocked for more than 144 seconds. [ 412.168834][ T31] Not tainted syzkaller #0 [ 412.174196][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.182926][ T31] task:syz.2.1554 state:D stack:28224 pid:11845 tgid:11844 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 412.194937][ T31] Call Trace: [ 412.198233][ T31] [ 412.201170][ T31] __schedule+0x17b4/0x5680 [ 412.206177][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 412.211193][ T31] ? __pfx___schedule+0x10/0x10 [ 412.216128][ T31] ? schedule+0x90/0x360 [ 412.220400][ T31] schedule+0x164/0x360 [ 412.224626][ T31] schedule_preempt_disabled+0x13/0x30 [ 412.230117][ T31] __mutex_lock+0x7f5/0x1550 [ 412.235014][ T31] ? kernel_text_address+0xa5/0xe0 [ 412.240149][ T31] ? __mutex_lock+0x606/0x1550 [ 412.245224][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 412.249948][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 412.255142][ T31] ? stack_trace_save+0xa9/0x100 [ 412.260125][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 412.265451][ T31] ? radix_tree_lookup+0x240/0x290 [ 412.270605][ T31] genl_rcv_msg+0x10b/0x7a0 [ 412.275227][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.280310][ T31] netlink_rcv_skb+0x232/0x4b0 [ 412.285186][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.290253][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.295838][ T31] ? down_read+0x270/0x2e0 [ 412.300263][ T31] ? genl_rcv+0xd/0x40 [ 412.304418][ T31] genl_rcv+0x28/0x40 [ 412.308437][ T31] netlink_unicast+0x75c/0x8e0 [ 412.313453][ T31] netlink_sendmsg+0x813/0xb40 [ 412.318261][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.323879][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.328936][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.334292][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.339607][ T31] __sys_sendto+0x672/0x710 [ 412.344207][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 412.349289][ T31] ? exc_page_fault+0x6a/0xc0 [ 412.354399][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 412.359717][ T31] __x64_sys_sendto+0xde/0x100 [ 412.364567][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.370667][ T31] do_syscall_64+0x15f/0xf80 [ 412.375372][ T31] ? trace_irq_disable+0x3b/0x140 [ 412.380427][ T31] ? clear_bhb_loop+0x40/0x90 [ 412.385398][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.391310][ T31] RIP: 0033:0x7f02abd5d04e [ 412.395798][ T31] RSP: 002b:00007f02a9ff4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 412.404308][ T31] RAX: ffffffffffffffda RBX: 00007f02a9ff66c0 RCX: 00007f02abd5d04e [ 412.412731][ T31] RDX: 0000000000000020 RSI: 00007f02a9ff5000 RDI: 0000000000000004 [ 412.420733][ T31] RBP: 0000000000000000 R08: 00007f02a9ff4f04 R09: 000000000000000c [ 412.428943][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 412.436980][ T31] R13: 00007f02a9ff4f58 R14: 00007f02a9ff5000 R15: 0000000000000000 [ 412.445300][ T31] [ 412.448335][ T31] INFO: task syz.2.1554:11846 blocked for more than 144 seconds. [ 412.458288][ T31] Not tainted syzkaller #0 [ 412.463506][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.472537][ T31] task:syz.2.1554 state:D stack:28224 pid:11846 tgid:11844 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 412.484563][ T31] Call Trace: [ 412.487863][ T31] [ 412.490805][ T31] __schedule+0x17b4/0x5680 [ 412.495500][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 412.500587][ T31] ? __pfx___schedule+0x10/0x10 [ 412.505739][ T31] ? schedule+0x90/0x360 [ 412.509996][ T31] schedule+0x164/0x360 [ 412.514227][ T31] schedule_preempt_disabled+0x13/0x30 [ 412.519717][ T31] __mutex_lock+0x7f5/0x1550 [ 412.524390][ T31] ? kernel_text_address+0xa5/0xe0 [ 412.529533][ T31] ? __mutex_lock+0x606/0x1550 [ 412.534809][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 412.539557][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 412.544683][ T31] ? stack_trace_save+0xa9/0x100 [ 412.549656][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 412.554689][ T31] ? radix_tree_lookup+0x240/0x290 [ 412.559823][ T31] genl_rcv_msg+0x10b/0x7a0 [ 412.564609][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.569651][ T31] netlink_rcv_skb+0x232/0x4b0 [ 412.574781][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.579842][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.585337][ T31] ? down_read+0x270/0x2e0 [ 412.589782][ T31] ? genl_rcv+0xd/0x40 [ 412.594168][ T31] genl_rcv+0x28/0x40 [ 412.598184][ T31] netlink_unicast+0x75c/0x8e0 [ 412.603058][ T31] netlink_sendmsg+0x813/0xb40 [ 412.607861][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.613222][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.618202][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.623805][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.629100][ T31] __sys_sendto+0x672/0x710 [ 412.633668][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 412.638734][ T31] ? fd_install+0x94/0x3d0 [ 412.643410][ T31] ? fd_install+0x306/0x3d0 [ 412.647961][ T31] __x64_sys_sendto+0xde/0x100 [ 412.653601][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.659735][ T31] do_syscall_64+0x15f/0xf80 [ 412.664529][ T31] ? trace_irq_disable+0x3b/0x140 [ 412.669601][ T31] ? clear_bhb_loop+0x40/0x90 [ 412.674442][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.680381][ T31] RIP: 0033:0x7f02abd5d04e [ 412.684896][ T31] RSP: 002b:00007f02a9fd3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 412.693724][ T31] RAX: ffffffffffffffda RBX: 00007f02a9fd56c0 RCX: 00007f02abd5d04e [ 412.701893][ T31] RDX: 0000000000000020 RSI: 00007f02a9fd4000 RDI: 0000000000000008 [ 412.709905][ T31] RBP: 0000000000000000 R08: 00007f02a9fd3f04 R09: 000000000000000c [ 412.717949][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 412.725984][ T31] R13: 00007f02a9fd3f58 R14: 00007f02a9fd4000 R15: 0000000000000000 [ 412.734710][ T31] [ 412.737820][ T31] INFO: task syz.4.1558:11861 blocked for more than 144 seconds. [ 412.746008][ T31] Not tainted syzkaller #0 [ 412.750970][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.759711][ T31] task:syz.4.1558 state:D stack:26472 pid:11861 tgid:11860 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 412.771991][ T31] Call Trace: [ 412.775336][ T31] [ 412.778271][ T31] __schedule+0x17b4/0x5680 [ 412.782885][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 412.787929][ T31] ? __pfx___schedule+0x10/0x10 [ 412.793170][ T31] ? schedule+0x90/0x360 [ 412.797482][ T31] schedule+0x164/0x360 [ 412.802117][ T31] schedule_preempt_disabled+0x13/0x30 [ 412.807627][ T31] __mutex_lock+0x7f5/0x1550 [ 412.812574][ T31] ? kernel_text_address+0xa5/0xe0 [ 412.817805][ T31] ? __mutex_lock+0x606/0x1550 [ 412.822736][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 412.827461][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 412.832579][ T31] ? stack_trace_save+0xa9/0x100 [ 412.837562][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 412.842656][ T31] ? radix_tree_lookup+0x240/0x290 [ 412.847793][ T31] genl_rcv_msg+0x10b/0x7a0 [ 412.852370][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.857444][ T31] netlink_rcv_skb+0x232/0x4b0 [ 412.862407][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 412.867488][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.872888][ T31] ? down_read+0x270/0x2e0 [ 412.877347][ T31] ? genl_rcv+0xd/0x40 [ 412.881684][ T31] genl_rcv+0x28/0x40 [ 412.885710][ T31] netlink_unicast+0x75c/0x8e0 [ 412.890488][ T31] netlink_sendmsg+0x813/0xb40 [ 412.895785][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.901148][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 412.906298][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.911694][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.917027][ T31] __sys_sendto+0x672/0x710 [ 412.921617][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 412.926683][ T31] ? exc_page_fault+0x6a/0xc0 [ 412.931421][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 412.936740][ T31] __x64_sys_sendto+0xde/0x100 [ 412.941590][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.947692][ T31] do_syscall_64+0x15f/0xf80 [ 412.952387][ T31] ? trace_irq_disable+0x3b/0x140 [ 412.957463][ T31] ? clear_bhb_loop+0x40/0x90 [ 412.962375][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.968297][ T31] RIP: 0033:0x7fcfe255d04e [ 412.972879][ T31] RSP: 002b:00007fcfe3470e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 412.981347][ T31] RAX: ffffffffffffffda RBX: 00007fcfe34726c0 RCX: 00007fcfe255d04e [ 412.989387][ T31] RDX: 000000000000001c RSI: 00007fcfe3471000 RDI: 0000000000000007 [ 412.997575][ T31] RBP: 0000000000000000 R08: 00007fcfe3470f04 R09: 000000000000000c [ 413.005629][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 413.013690][ T31] R13: 00007fcfe3470f58 R14: 00007fcfe3471000 R15: 0000000000000000 [ 413.021772][ T31] [ 413.024844][ T31] INFO: task syz.0.1561:11871 blocked for more than 144 seconds. [ 413.032661][ T31] Not tainted syzkaller #0 [ 413.037618][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.046343][ T31] task:syz.0.1561 state:D stack:27200 pid:11871 tgid:11870 ppid:5823 task_flags:0x400040 flags:0x00080002 [ 413.058599][ T31] Call Trace: [ 413.061954][ T31] [ 413.064895][ T31] __schedule+0x17b4/0x5680 [ 413.069419][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 413.074445][ T31] ? __pfx___schedule+0x10/0x10 [ 413.079426][ T31] ? schedule+0x90/0x360 [ 413.083735][ T31] schedule+0x164/0x360 [ 413.087920][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.093461][ T31] __mutex_lock+0x7f5/0x1550 [ 413.098084][ T31] ? __mutex_lock+0x606/0x1550 [ 413.103049][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 413.107792][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.112953][ T31] ? radix_tree_lookup+0x240/0x290 [ 413.118092][ T31] genl_rcv_msg+0x10b/0x7a0 [ 413.122764][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.127828][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 413.133670][ T31] netlink_rcv_skb+0x232/0x4b0 [ 413.138504][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.143602][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.148939][ T31] ? down_read+0x270/0x2e0 [ 413.153480][ T31] ? genl_rcv+0xd/0x40 [ 413.157591][ T31] genl_rcv+0x28/0x40 [ 413.161666][ T31] netlink_unicast+0x75c/0x8e0 [ 413.166485][ T31] netlink_sendmsg+0x813/0xb40 [ 413.171299][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.176697][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 413.181714][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.187045][ T31] ____sys_sendmsg+0x972/0x9f0 [ 413.191895][ T31] ? __might_fault+0xaf/0x130 [ 413.196618][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.202034][ T31] ? import_iovec+0x73/0xa0 [ 413.206599][ T31] ___sys_sendmsg+0x2a5/0x360 [ 413.211291][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 413.216585][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.221874][ T31] ? futex_wait+0x2a2/0x390 [ 413.226418][ T31] ? __fget_files+0x2a/0x420 [ 413.231023][ T31] ? __fget_files+0x3a0/0x420 [ 413.235840][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 413.240840][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.246395][ T31] ? rcu_is_watching+0x15/0xb0 [ 413.251197][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.257358][ T31] do_syscall_64+0x15f/0xf80 [ 413.262022][ T31] ? trace_irq_disable+0x3b/0x140 [ 413.267081][ T31] ? clear_bhb_loop+0x40/0x90 [ 413.271843][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.277771][ T31] RIP: 0033:0x7f981799c819 [ 413.282282][ T31] RSP: 002b:00007f981887b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.290729][ T31] RAX: ffffffffffffffda RBX: 00007f9817c15fa0 RCX: 00007f981799c819 [ 413.299037][ T31] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 413.307081][ T31] RBP: 00007f9817a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 413.315121][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.323233][ T31] R13: 00007f9817c16038 R14: 00007f9817c15fa0 R15: 00007ffdad6722b8 [ 413.331236][ T31] [ 413.334359][ T31] INFO: task syz.0.1561:11872 blocked for more than 145 seconds. [ 413.342565][ T31] Not tainted syzkaller #0 [ 413.347502][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.356251][ T31] task:syz.0.1561 state:D stack:27488 pid:11872 tgid:11870 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 413.368241][ T31] Call Trace: [ 413.371777][ T31] [ 413.374764][ T31] __schedule+0x17b4/0x5680 [ 413.379298][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 413.384460][ T31] ? __pfx___schedule+0x10/0x10 [ 413.389343][ T31] ? schedule+0x90/0x360 [ 413.393673][ T31] schedule+0x164/0x360 [ 413.397866][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.403412][ T31] __mutex_lock+0x7f5/0x1550 [ 413.408041][ T31] ? kernel_text_address+0xa5/0xe0 [ 413.413263][ T31] ? __mutex_lock+0x606/0x1550 [ 413.418057][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 413.422831][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.427888][ T31] ? stack_trace_save+0xa9/0x100 [ 413.433075][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 413.438062][ T31] ? radix_tree_lookup+0x240/0x290 [ 413.443241][ T31] genl_rcv_msg+0x10b/0x7a0 [ 413.447775][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.453251][ T31] netlink_rcv_skb+0x232/0x4b0 [ 413.458070][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.463181][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.468511][ T31] ? down_read+0x270/0x2e0 [ 413.473008][ T31] ? genl_rcv+0xd/0x40 [ 413.477125][ T31] genl_rcv+0x28/0x40 [ 413.481110][ T31] netlink_unicast+0x75c/0x8e0 [ 413.485964][ T31] netlink_sendmsg+0x813/0xb40 [ 413.490775][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.496121][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 413.501088][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.506438][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.511809][ T31] __sys_sendto+0x672/0x710 [ 413.516335][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 413.521433][ T31] ? exc_page_fault+0x6a/0xc0 [ 413.526150][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 413.531794][ T31] __x64_sys_sendto+0xde/0x100 [ 413.536624][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.542891][ T31] do_syscall_64+0x15f/0xf80 [ 413.547544][ T31] ? trace_irq_disable+0x3b/0x140 [ 413.552682][ T31] ? clear_bhb_loop+0x40/0x90 [ 413.557406][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.563379][ T31] RIP: 0033:0x7f981795d04e [ 413.567820][ T31] RSP: 002b:00007f9818858e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 413.576312][ T31] RAX: ffffffffffffffda RBX: 00007f981885a6c0 RCX: 00007f981795d04e [ 413.584349][ T31] RDX: 0000000000000028 RSI: 00007f9818859000 RDI: 0000000000000005 [ 413.592389][ T31] RBP: 0000000000000000 R08: 00007f9818858f04 R09: 000000000000000c [ 413.600403][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 413.608469][ T31] R13: 00007f9818858f58 R14: 00007f9818859000 R15: 0000000000000000 [ 413.617042][ T31] [ 413.620092][ T31] INFO: task syz.0.1561:11874 blocked for more than 145 seconds. [ 413.627947][ T31] Not tainted syzkaller #0 [ 413.632958][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 413.641671][ T31] task:syz.0.1561 state:D stack:28120 pid:11874 tgid:11870 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 413.653928][ T31] Call Trace: [ 413.657269][ T31] [ 413.660212][ T31] __schedule+0x17b4/0x5680 [ 413.665159][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 413.670194][ T31] ? __pfx___schedule+0x10/0x10 [ 413.675594][ T31] ? schedule+0x90/0x360 [ 413.679875][ T31] schedule+0x164/0x360 [ 413.684550][ T31] schedule_preempt_disabled+0x13/0x30 [ 413.690087][ T31] __mutex_lock+0x7f5/0x1550 [ 413.695127][ T31] ? kernel_text_address+0xa5/0xe0 [ 413.700295][ T31] ? __mutex_lock+0x606/0x1550 [ 413.705473][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 413.710180][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 413.715332][ T31] ? stack_trace_save+0xa9/0x100 [ 413.720315][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 413.725336][ T31] ? radix_tree_lookup+0x240/0x290 [ 413.730472][ T31] genl_rcv_msg+0x10b/0x7a0 [ 413.735048][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.740111][ T31] netlink_rcv_skb+0x232/0x4b0 [ 413.744963][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 413.750034][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.755423][ T31] ? down_read+0x270/0x2e0 [ 413.759882][ T31] ? genl_rcv+0xd/0x40 [ 413.764145][ T31] genl_rcv+0x28/0x40 [ 413.768212][ T31] netlink_unicast+0x75c/0x8e0 [ 413.773352][ T31] netlink_sendmsg+0x813/0xb40 [ 413.778209][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.783673][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 413.788655][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 413.794390][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.799713][ T31] __sys_sendto+0x672/0x710 [ 413.804297][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 413.809625][ T31] ? exc_page_fault+0x6a/0xc0 [ 413.814372][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 413.819689][ T31] __x64_sys_sendto+0xde/0x100 [ 413.824494][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.830583][ T31] do_syscall_64+0x15f/0xf80 [ 413.835241][ T31] ? trace_irq_disable+0x3b/0x140 [ 413.840374][ T31] ? clear_bhb_loop+0x40/0x90 [ 413.845123][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.851033][ T31] RIP: 0033:0x7f981795d04e [ 413.855874][ T31] RSP: 002b:00007f9818816e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 413.864400][ T31] RAX: ffffffffffffffda RBX: 00007f98188186c0 RCX: 00007f981795d04e [ 413.872508][ T31] RDX: 0000000000000028 RSI: 00007f9818817000 RDI: 0000000000000009 [ 413.880493][ T31] RBP: 0000000000000000 R08: 00007f9818816f04 R09: 000000000000000c [ 413.888522][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 413.896583][ T31] R13: 00007f9818816f58 R14: 00007f9818817000 R15: 0000000000000000 [ 413.904674][ T31] [ 413.907790][ T31] [ 413.907790][ T31] Showing all locks held in the system: [ 413.915892][ T31] 1 lock held by khungtaskd/31: [ 413.920811][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 413.930810][ T31] 2 locks held by getty/5584: [ 413.935782][ T31] #0: ffff88803298a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 413.945666][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 413.955864][ T31] 1 lock held by udevd/9502: [ 413.960457][ T31] #0: ffff888026d46350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 413.969757][ T31] 6 locks held by syz.3.1551/11837: [ 413.975009][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 413.983399][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 413.992450][ T31] #2: ffff888026d95260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 414.002857][ T31] #3: ffff888026c60698 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 414.012502][ T31] #4: ffff888026c60060 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 414.024644][ T31] #5: ffff888026c60098 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 414.037020][ T31] 2 locks held by syz.1.1553/11842: [ 414.042301][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.050528][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.059614][ T31] 2 locks held by syz.2.1554/11845: [ 414.064841][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.073069][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.082143][ T31] 2 locks held by syz.2.1554/11846: [ 414.087366][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.095946][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.105008][ T31] 2 locks held by syz.4.1558/11861: [ 414.110195][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.118450][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.127486][ T31] 2 locks held by syz.0.1561/11871: [ 414.132807][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.141029][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.150039][ T31] 2 locks held by syz.0.1561/11872: [ 414.155311][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.163590][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.172780][ T31] 2 locks held by syz.0.1561/11874: [ 414.178015][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.186348][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.195412][ T31] 2 locks held by syz-executor/11879: [ 414.200778][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.209188][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.218258][ T31] 2 locks held by syz-executor/11881: [ 414.223672][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.231963][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.240971][ T31] 2 locks held by syz-executor/11883: [ 414.246415][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.254675][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.263700][ T31] 2 locks held by syz-executor/11891: [ 414.269082][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.277334][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.286406][ T31] 2 locks held by syz-executor/11895: [ 414.291877][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.300102][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.309219][ T31] 2 locks held by syz-executor/11929: [ 414.314714][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.322977][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.332192][ T31] 2 locks held by syz-executor/11930: [ 414.337597][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.345830][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.354867][ T31] 2 locks held by syz-executor/11933: [ 414.360242][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.368468][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.377506][ T31] 2 locks held by syz-executor/11940: [ 414.382927][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.391148][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.400193][ T31] 2 locks held by syz-executor/11944: [ 414.405641][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.414004][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.423137][ T31] 2 locks held by syz-executor/11979: [ 414.428518][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.436768][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.445821][ T31] 2 locks held by syz-executor/11981: [ 414.451184][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.459446][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.468495][ T31] 2 locks held by syz-executor/11983: [ 414.473916][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.482178][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.491140][ T31] 2 locks held by syz-executor/11996: [ 414.496664][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.504937][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.513956][ T31] 2 locks held by syz-executor/11999: [ 414.519336][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 414.527623][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 414.536812][ T31] [ 414.539186][ T31] ============================================= [ 414.539186][ T31] [ 414.547680][ T31] NMI backtrace for cpu 0 [ 414.547696][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 414.547716][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 414.547727][ T31] Call Trace: [ 414.547735][ T31] [ 414.547744][ T31] dump_stack_lvl+0xe8/0x150 [ 414.547777][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 414.547809][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 414.547839][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 414.547872][ T31] sys_info+0x135/0x170 [ 414.547899][ T31] watchdog+0xfaa/0x1000 [ 414.547926][ T31] ? watchdog+0x209/0x1000 [ 414.547957][ T31] kthread+0x388/0x470 [ 414.547980][ T31] ? __pfx_watchdog+0x10/0x10 [ 414.547999][ T31] ? __pfx_kthread+0x10/0x10 [ 414.548021][ T31] ret_from_fork+0x514/0xb70 [ 414.548051][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 414.548079][ T31] ? __switch_to+0xc79/0x1410 [ 414.548105][ T31] ? __pfx_kthread+0x10/0x10 [ 414.548127][ T31] ret_from_fork_asm+0x1a/0x30 [ 414.548180][ T31] [ 414.548188][ T31] Sending NMI from CPU 0 to CPUs 1: [ 414.658232][ C1] NMI backtrace for cpu 1 [ 414.658251][ C1] CPU: 1 UID: 0 PID: 1004 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 414.658269][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 414.658280][ C1] Workqueue: events_unbound toggle_allocation_gate [ 414.658302][ C1] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 414.658327][ C1] Code: e8 db 81 08 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 67 27 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 7c 8c 86 00 48 c7 c3 d8 e9 3e 93 49 03 1e 48 89 [ 414.658341][ C1] RSP: 0018:ffffc9000549f5e8 EFLAGS: 00000246 [ 414.658355][ C1] RAX: 1ffffffff1c4ecf3 RBX: 0000000000000001 RCX: 0000000080000001 [ 414.658367][ C1] RDX: 0000000000000000 RSI: ffffffff8c27efe0 RDI: ffffffff8c27efa0 [ 414.658378][ C1] RBP: ffffffff821c7259 R08: 0000000000000000 R09: 0000000000000000 [ 414.658388][ C1] R10: dffffc0000000000 R11: fffff940000112a1 R12: 0000000000000002 [ 414.658399][ C1] R13: ffffffff8e95d020 R14: ffffffff8e276798 R15: dffffc0000000000 [ 414.658411][ C1] FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 414.658424][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.658435][ C1] CR2: 00007f6cb1347e20 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 414.658451][ C1] Call Trace: [ 414.658458][ C1] [ 414.658466][ C1] lock_acquire+0x5f/0x350 [ 414.658486][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 414.658506][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 414.658530][ C1] __pte_offset_map+0x45/0x240 [ 414.658549][ C1] ? __pte_offset_map+0x29/0x240 [ 414.658567][ C1] ? pte_offset_map_lock+0x2d/0x210 [ 414.658586][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 414.658609][ C1] pte_offset_map_lock+0x46/0x210 [ 414.658629][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 414.658652][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 414.658675][ C1] __text_poke+0x2d3/0x9a0 [ 414.658694][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 414.658709][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 414.658731][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 414.658753][ C1] ? __pfx___text_poke+0x10/0x10 [ 414.658773][ C1] smp_text_poke_batch_finish+0x923/0x1160 [ 414.658796][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 414.658815][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 414.658840][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 414.658859][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 414.658880][ C1] static_key_enable+0x1a/0x20 [ 414.658899][ C1] toggle_allocation_gate+0xab/0x290 [ 414.658914][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 414.659020][ C1] ? process_scheduled_works+0xa70/0x1860 [ 414.659045][ C1] ? process_scheduled_works+0xa70/0x1860 [ 414.659065][ C1] ? process_scheduled_works+0xa70/0x1860 [ 414.659085][ C1] process_scheduled_works+0xb5d/0x1860 [ 414.659121][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 414.659144][ C1] ? assign_work+0x3d5/0x5e0 [ 414.659176][ C1] worker_thread+0xa53/0xfc0 [ 414.659209][ C1] kthread+0x388/0x470 [ 414.659225][ C1] ? __pfx_worker_thread+0x10/0x10 [ 414.659245][ C1] ? __pfx_kthread+0x10/0x10 [ 414.659260][ C1] ret_from_fork+0x514/0xb70 [ 414.659283][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 414.659304][ C1] ? __switch_to+0xc79/0x1410 [ 414.659324][ C1] ? __pfx_kthread+0x10/0x10 [ 414.659340][ C1] ret_from_fork_asm+0x1a/0x30 [ 414.659371][ C1] [ 414.660314][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 414.660333][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 414.660355][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 414.660366][ T31] Call Trace: [ 414.660376][ T31] [ 414.660384][ T31] vpanic+0x56c/0xa60 [ 414.660414][ T31] ? __pfx___schedule+0x10/0x10 [ 414.660437][ T31] ? __pfx_vpanic+0x10/0x10 [ 414.660471][ T31] panic+0xc5/0xd0 [ 414.660496][ T31] ? __pfx_panic+0x10/0x10 [ 414.660523][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 414.660551][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 414.660593][ T31] watchdog+0xff4/0x1000 [ 414.660619][ T31] ? watchdog+0x209/0x1000 [ 414.660645][ T31] kthread+0x388/0x470 [ 414.660665][ T31] ? __pfx_watchdog+0x10/0x10 [ 414.660683][ T31] ? __pfx_kthread+0x10/0x10 [ 414.660704][ T31] ret_from_fork+0x514/0xb70 [ 414.660732][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 414.660757][ T31] ? __switch_to+0xc79/0x1410 [ 414.660782][ T31] ? __pfx_kthread+0x10/0x10 [ 414.660803][ T31] ret_from_fork_asm+0x1a/0x30 [ 414.660845][ T31] [ 415.110597][ T31] Kernel Offset: disabled [ 415.114920][ T31] Rebooting in 86400 seconds..