last executing test programs: 24.215472586s ago: executing program 1 (id=2778): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0c000000010001", 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x5, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000112"], 0xfdef) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0) r11 = socket(0x10, 0x3, 0x0) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r12, 0x1, 0x3c, &(0x7f00000003c0)={0xfffffffd}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=r0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0", @ANYBLOB="18ae56c62f7e7aa6b1c3c55002f92f632d3d01d619d7066194944f6b0fa63c428ce0e42645ba7796d0ddd207df6e639a01e3254d9ea90bd55f74a2e1cd3759307dac79e3defaf2dad013cdb0637d5bd931112553407983f4a56a47582b82888cbdf377b48874752e525d1a11dc7c82a952f8d2875dba1c026c19fcda0c12266318a4201c137de23529d32be059708dfbbcddf4c7d25a7a2c2ac237c47270da6b938095b33e13c8b573e0e2334a324fc63c08c0611c8d17af6766cb8c09ce2a2d", @ANYRES16=r10], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r8, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000030, 0x0) 22.83376452s ago: executing program 4 (id=2787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000060a010400000000000000000a6d810000010900010073797a31000000001800048014000180090001007866726d00000000040002800900020073797a3200000000140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0xdda7}, 0x8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_emit_ethernet(0x3e7, &(0x7f00000001c0)={@multicast, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv6={0x86dd, @dccp_packet={0xa, 0x6, "839577", 0x3a9, 0x21, 0xff, @mcast1, @rand_addr=' \x01\x00', {[@srh={0x88, 0x2, 0x4, 0x1, 0xf1, 0x0, 0x8001, [@empty]}, @hopopts={0x8, 0x28, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x40, 0x5, [0x5, 0x3, 0x9, 0x5, 0x0, 0x6]}}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x3, 0x1, [0xae, 0x2f5, 0xfffffffffffffffd, 0x0]}}, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @empty}, @generic={0xaa, 0x6d, "bda44ab3ccee868534c86a0d7530909f2fa4ea699e0675007b74bf8977f062fc34c56a494c104866b2a5480a43e920666bc2f53c879ceaa64868504ea8d5864e863646afaaf1d78f5fd6bf0f41c710376db45b1f3b056b09a18014f0b7d6245e6a80428246d91a21a25145b586"}, @generic={0x4a, 0x3e, "6bc296f2149b2917860e5c5992b720ce41f65685241481eabf3964fc4d5c837b6a4e549113c7b5e5cc8eff985f9ade1095ccc6d2259b4fa207ebbb03b947"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffff6}]}, @dstopts={0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}, @dstopts={0x2c, 0xd, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x1, [0x7fffffffffffffff, 0x78, 0x7, 0x5]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x98, 0xeb, [0x7a, 0x7fff]}}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0xf6}, @ra={0x5, 0x2, 0x9}]}, @hopopts={0x3c, 0x1b, '\x00', [@generic={0x8, 0x98, "272fd2d8c9bd478a894eda9d3b346a1bc0b3c2c559f86b65009740869d345c3d75825a367487083346bfbfa2dd4cee84eddaf1df56911b194a151cd9bd542fff01b2bf9bf4ca46aa13a30d1dadd9e334739092a2685aa01a1e129ab8cc6c5f4efc33fffcba5ab19bd3579c811b0d411ba8029a55bf7803d0f57dfefb53d3387fa4d8dc3298fc202b7b6469166d0905593cd44f186ee5ac99"}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x5, 0x3b, "dcb81dbf813b44100700debc8dc79828040e656e5ca843b2964da97ef7097a1f235dd82148748c432ac24104d300"/59}, @enc_lim={0x4, 0x1, 0x3}]}], {{0x4e24, 0x4e20, 0x4, 0x1, 0x7, 0x0, 0x0, 0x7, 0x6, "97487d", 0x0, "e73222"}, "f20f657480b14cdf2d34cf0d0c71163c640127df2061ab74027df2d037af04d980b4ee37270127bc44c162555806fa24c0f2f43d3a5c869a12aefb614ce2a4fc601a7a233a847af8ba77da2e5462c804d914a91b6f0567c3fb31afc30e72a57977c15d2b487470e11b5516ab03dea23c672b4adc9d447104bfb71e90ff922df41761b2cf8b70e7b0db021eb37f4b1e5aaaf143ee2b95bc8689304a31863620119e07983e576bd72df4"}}}}}}, &(0x7f00000005c0)={0x0, 0x2, [0x182, 0xfffffffd, 0x7df, 0x6e4]}) socket$inet6(0xa, 0x800000000000002, 0x0) getpid() r6 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000000000)=0x4, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000007c0), 0x4) write$cgroup_pid(r5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x4008030) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4801) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 22.441573365s ago: executing program 1 (id=2791): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtaction={0x48, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000f80)=0x60, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) bind$nfc_llcp(r2, &(0x7f0000001000)={0x27, r6, 0x1, 0x6, 0x90, 0x3, "af26696510e5417665051eb6ede13aedccfe389d5c54ea8b7fdfc361aaec8968fc4184f0208aeaf7c20bbb3307cd13ca9d9120c81fc5390bb910abd8981c90", 0xa}, 0x60) 21.983072809s ago: executing program 2 (id=2795): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000041c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000007880)=[{{&(0x7f00000004c0)=@hci, 0x80, &(0x7f00000066c0)=[{&(0x7f0000000780)=""/95, 0x5f}, {&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/106, 0x6a}, {&(0x7f0000003b00)=""/187, 0xbb}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/138, 0x8a}, {&(0x7f0000006580)=""/124, 0x7c}, {&(0x7f0000006600)=""/77, 0x4d}, {&(0x7f0000006680)=""/4, 0x4}], 0xa, &(0x7f0000006780)=""/160, 0xa0}, 0x8}, {{&(0x7f0000006840)=@ax25={{}, [@netrom, @netrom, @bcast, @remote, @remote, @remote, @remote, @bcast]}, 0x80, &(0x7f0000006cc0)=[{&(0x7f00000068c0)=""/84, 0x54}, {&(0x7f0000006940)=""/219, 0xdb}, {&(0x7f0000006a40)=""/247, 0xf7}, {&(0x7f0000006b40)=""/170, 0xaa}, {&(0x7f0000006c00)=""/131, 0x83}], 0x5, &(0x7f0000006d40)=""/116, 0x74}, 0x5}, {{&(0x7f0000006dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000007040)=[{&(0x7f0000006e40)=""/161, 0xa1}, {&(0x7f0000006f00)=""/20, 0x14}, {&(0x7f0000006f40)=""/51, 0x33}, {&(0x7f0000006f80)=""/176, 0xb0}], 0x4, &(0x7f0000007080)=""/68, 0x44}, 0xffff}, {{&(0x7f0000007100)=@hci, 0x80, &(0x7f0000007380)=[{&(0x7f0000007180)=""/149, 0x95}, {&(0x7f0000007240)=""/36, 0x24}, {&(0x7f0000007280)=""/84, 0x54}, {&(0x7f0000007300)=""/85, 0x55}], 0x4, &(0x7f00000073c0)=""/225, 0xe1}, 0xa}, {{&(0x7f00000074c0)=@generic, 0x80, &(0x7f00000077c0)=[{&(0x7f0000007540)=""/228, 0xe4}, {&(0x7f0000007640)=""/212, 0xd4}, {&(0x7f0000007740)=""/123, 0x7b}], 0x3, &(0x7f0000007800)=""/118, 0x76}, 0x7}], 0x5, 0x0, &(0x7f00000079c0)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x7}}], 0x1, 0x40, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmmsg(r2, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[{0x10, 0x1, 0x6}], 0x10}}], 0x2, 0x40840) r5 = socket$netlink(0x10, 0x3, 0x15) write(r5, &(0x7f0000000000)="2700000014000707030e0000120f0a0004000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@remote, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x2c, 0x66, 0x20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xe, 0xb}, {0x1}, {0xe, 0x4}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048005}, 0xc000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x31}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 21.824258129s ago: executing program 4 (id=2796): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f0001fffffff7126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x28) 21.726291974s ago: executing program 2 (id=2798): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000500)={0x18, 0x0, {0x1, @empty, 'wg0\x00'}}, 0x1e) (async) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) close(0x3) (async) write$ppp(r1, &(0x7f00000001c0)="ab29", 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r4, &(0x7f00000079c0)=[{{&(0x7f0000000240)=@l2tp, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/88, 0x58}, 0x7}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/103, 0x67}], 0x1, &(0x7f0000000440)=""/24, 0x18}, 0x6}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/71, 0x47}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/174, 0xae}, {&(0x7f00000016c0)=""/224, 0xe0}], 0x5, &(0x7f0000001b00)=""/4096, 0x1000}, 0x673e}, {{&(0x7f0000002b00)=@isdn, 0x80, &(0x7f0000006000)=[{&(0x7f0000002b80)=""/233, 0xe9}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/213, 0xd5}, {&(0x7f0000003d80)=""/246, 0xf6}, {&(0x7f0000003e80)=""/60, 0x3c}, {&(0x7f0000003ec0)=""/128, 0x80}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/132, 0x84}, {&(0x7f0000005000)=""/4096, 0x1000}], 0x9}, 0x8001}, {{0x0, 0x0, &(0x7f0000006600)=[{&(0x7f00000060c0)=""/211, 0xd3}, {&(0x7f00000061c0)}, {&(0x7f0000006200)=""/100, 0x64}, {&(0x7f0000006280)=""/182, 0xb6}, {&(0x7f0000006340)=""/215, 0xd7}, {&(0x7f0000006440)=""/188, 0xbc}, {&(0x7f0000006500)=""/193, 0xc1}], 0x7, &(0x7f0000006680)=""/160, 0xa0}, 0x3}, {{&(0x7f0000006740)=@can, 0x80, &(0x7f0000007940)=[{&(0x7f00000067c0)=""/29, 0x1d}, {&(0x7f0000006800)=""/88, 0x58}, {&(0x7f0000006880)=""/4096, 0x1000}, {&(0x7f0000007880)=""/172, 0xac}], 0x4, &(0x7f0000007980)=""/20, 0x14}}], 0x6, 0x20, &(0x7f0000007b40)={0x0, 0x3938700}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="2f0100003201"], 0x138) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x5}}}}, 0x30}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f880000004d000f"], 0x90}}, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001f00010000008000000000002c0000800c000100000000000000000014001100fe8800000000000000000000000000010800320067d2a3b2872a2242703812", @ANYRES32, @ANYBLOB], 0x3c}], 0x1}, 0x0) 21.615909454s ago: executing program 4 (id=2800): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x920ef000) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}}, 0x4000010) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="09fe000500"}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xffff, 0xa}, {0x1, 0x3}}}, 0x24}}, 0x40080) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}]}) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r9, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) 19.05661748s ago: executing program 2 (id=2804): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000840)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xe}, 0x94) 19.047678999s ago: executing program 4 (id=2805): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000001240)={&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) 19.037214766s ago: executing program 2 (id=2806): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) getpid() write$cgroup_pid(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x4008030) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r5) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="f1bf29177000fcdfdf2517"], 0x6b}, 0x1, 0x0, 0x0, 0x44000}, 0x240080a4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4801) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 18.95667022s ago: executing program 1 (id=2807): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xd0e, 0x0, 0x1, {0x60, 0x0, 0x0, r0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x5c}}, 0x4004) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') 18.661078275s ago: executing program 2 (id=2809): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000844}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e22, 0x3f8, @empty, 0x1}}, 0x7, 0x6, 0x8, 0x0, 0x80, 0x3ff, 0x9}, 0x9c) 18.523370815s ago: executing program 3 (id=2810): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f0003fffffff7126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x28) 18.521734156s ago: executing program 1 (id=2812): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20008844) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 18.488773539s ago: executing program 2 (id=2813): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xf}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xb44, 0x6, 0x88a8}}, {0x14, 0x1, {0x101, 0x766, 0xb1a, 0x88a8}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x0, 0xfff1}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004811}, 0x4041810) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x96c4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8000}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x3}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000580)=0x108e75, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) recvmmsg(r6, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r8) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r9, 0x1, 0x70bd28, 0x25dfd3fd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2000004}]}, 0x55}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r10, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x8081) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$NILFS_IOCTL_GET_CPINFO(r5, 0x80186e82, &(0x7f0000000280)={&(0x7f00000000c0)=[{0x2, 0x0, 0x6, 0x7e, 0x2, 0x3, 0x7, 0x7fff}, {0x0, 0x0, 0x4, 0x8, 0x8000000000000000, 0x101, 0x9, 0x2}, {0x0, 0x0, 0xa8, 0x8, 0x0, 0x1ff, 0x80000001, 0x401}, {0x1, 0x0, 0x2, 0x9, 0x9, 0xc07, 0x2b, 0x7fff}, {0x2, 0x0, 0xbac7, 0x8, 0xb, 0xb, 0x9, 0x3}, {0x3, 0x0, 0x8, 0x0, 0x800, 0x8, 0x9, 0x7}, {0x3, 0x0, 0x7, 0x9, 0x3, 0x10001, 0x1, 0xffffffffffff0001}], 0x7, 0x38, 0x1}) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) 18.375721825s ago: executing program 1 (id=2814): write$tun(0xffffffffffffffff, &(0x7f0000000340)={@void, @void, @x25={0x0, 0x77, 0xdc, "d7ad51f7d05ef61bd4a7b3ecb9b92e974f532f39ac5e89ba3d91749d683d7ae222e7b50240b0b16c04dd7e6e6af9b7c0972b05048cf83fd3d3b8fc3995f838f89d0e9dad02419ba07ed1ae0583cfb513eca9782c7553cc4957c9cf2e133f87534e1c7a2978f5dd3166ec40acf74b44437f1580b49b39"}}, 0x79) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x15c, 0x10, 0x1, 0x0, 0xfffffffe, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x3ffffffe}, {}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x84}, [@replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff, 0x0, 0xffffffff}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @sa_dir={0x5, 0x21, 0x2}]}, 0x15c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@canfd={{0x0, 0x0, 0x0, 0x1}, 0xb, 0x1, 0x0, 0x0, "029dd721b12a0514886f14d88030a75edeeacb0168254f79db50539d2bbe9cfa9de8e9f087e77a3a348d5ccf730362563a46d041f2b1a92bf3f86fe01822d19c"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20004800) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xc}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7}}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071106a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 18.312020165s ago: executing program 3 (id=2815): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x24, 0x22, 0x601, 0x70bd2a, 0xfffffffc, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x24}], 0x1, 0x0, 0x0, 0x1}, 0x4000) r2 = epoll_create(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000500)={0x90000000}) write$cgroup_int(r4, &(0x7f0000000080)=0x4, 0xfffffe7d) close(0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000100)="66be50f23770c13e51d8584154dbaebb76da70a4a51fbcc0919d32d187822a073ea6eed865e92377f8095e2ddb25784af2ecb6b1b5c0f3a373f14bb26a50b746da1572fc204a0c0ebd38ccb3f288086669317e152f2569f61d4929b7cbe192d10ccf5f7dfa453cd4223dc1dfbafe7e22dc18ea39191618de03a264aa", 0x7c}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="da68d847fb60d80837537d18ffc25a22140073649cf8765bb1802d89345d795a91bc37e69d1e828ca77838a4fb6e73801e90861cfca1f4550736ebcbf396ef4a2ed95f9bab017f974461b46b2ebe5295c116a9bd25c5d7a7d7da7b733a95ff30fa4f09e30c448f4f83aba6871afe6126a91374073809909c2c", 0x79}, {&(0x7f0000000300)="83530f3abe4f157efb77291cd32d3c399105bc764b7c82b784c614577e72da2d9af4e22dbc4bb6385c96a6a144155b842b3db55586cea0c52ffdf0a998f01f678570d4ef3010a51f2aee50d202b897af87c4e1640987aea4da200ba4f6420e7b2178b06ac23637cb92fd2cb8dc418d41ebd95b9d94db33bd9e7ca885305f12d1aef9955823bb8cb0e20a872f1fa7167ca6ccf28d0b8c2d759e57fda37e82c2fe2235a7250809aa43ac40916e5b6a861273c4fa3d72dc94ab673c4269093cf1bc287a6c", 0xc3}, {&(0x7f00000004c0)="ccf4a342ecdda39ad791151de58ae1ccdaeda56f475d769032b7a88fe60cca5393f07049b341aa2534d1f15494a9e1d4d040dbca1698e8639a7526735fe90eecd34230ebb7ab57371d59dd335e41c3e88bb96341b5a77d691e37fc2a76cb0fdfa551a8ecbc253d1264f167900b1d61cfb278b71bbd672a59701f912d640032ff253c2105eff246895b681cbdd13cc95a5adcd759ea41e9cb1e0a2cee82325640f86fe32bf963e64a1dbd369853210e6855f48c239a5f8a63c4b848297f4976f9c45735978606b30b848b1ba0e64b0ad97c7f5356fbd2e18af8cdc280e1658a2bd639835c8fca", 0xe6}, {&(0x7f00000005c0)="cb658b67263a382f143a", 0xa}], 0x6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000011000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000001000800030000000000080004"], 0x54}}, 0x0) 18.118644805s ago: executing program 0 (id=2816): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x81, 0x4, 0xfd}, {0x0, 0x0, 0x0, 0x8}]}) getpid() (async) getpid() syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0xee2eb211bede4459}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 18.046666885s ago: executing program 4 (id=2817): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000980)={r2, 0x9}, &(0x7f00000009c0)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000ff00"}]}}]}, 0x170}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 17.86300478s ago: executing program 4 (id=2818): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0xc00) getpeername$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x8000, @rand_addr=' \x01\x00', 0x1}}, [0x6, 0x0, 0x7, 0x8, 0x5, 0xfffffffffffffff9, 0x401, 0x2, 0x5, 0x8, 0x0, 0x6, 0x7fff, 0x1c9, 0x5]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={r1, 0x3}, &(0x7f0000000280)=0x8) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) r4 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000440)={0xfe, 0x3, 0x60, 0x12, 0x5, 0x5, 0xb6, 0xf1, 0x2, 0x6, 0x4, 0x9, 0xf9, 0x8}, 0xe) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000004c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000500)={r1, 0x7}, 0x8) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000540)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="6fbfeb20f9ea6f36b085530ef4f6e3e364e2c7390ff6ccc5f6ec8af7cbeb5129bf6b13a56cf1e616ccef56a8501d6cfffc5169f34d18bf1125adc17dcd352977a9e84ffa46d5b627ae000e525487b41a726991da93a7ea236b2e07dd6b4d79f39068e6a62e2fd89842f898617756afc89b55b405", 0x74}, {&(0x7f0000000640)="9e9af439bc738ce3312f1d54eb790d97a83bcd353c49ea85fb370d2aacec3a9fb0bf3e814cd782e93c689278fae21d6679301eb2a4dc69836253bfc70d44a7e7521f0302b016de21087a4f732ee1cccdce6ee7b48a4ddb", 0x57}], 0x2, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x260e012e}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x707d}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x378}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0xa8}, 0x4040) ioctl$PPPIOCGMRU(r6, 0x80047453, &(0x7f0000000800)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000840)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000880)=0x14) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r6) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4e402f6d373a0f22}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r9, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={r8, 0x400}, &(0x7f0000000a40)=0x8) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000a80)=0x4) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl0\x00', r3, 0x7800, 0x1f, 0x8, 0xa, {{0x6, 0x4, 0x3, 0x2f, 0x18, 0x65, 0x0, 0xe, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@end]}}}}}) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000000b40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xadd, 0x3ff, 0x5, 0x100, 0x6deb, 0x4000000, r12}) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r13, 0x84, 0x1, &(0x7f0000000bc0)={0x0, 0x617, 0x9, 0x1, 0x44a, 0x1}, &(0x7f0000000c00)=0x14) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000c40)=0x4) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r6) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r14, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x15}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000401}, 0x20044884) getsockopt$IP_SET_OP_VERSION(r11, 0x1, 0x53, &(0x7f0000000dc0), &(0x7f0000000e00)=0x8) 17.733939749s ago: executing program 1 (id=2819): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000000)={0x0, 0x0, "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", "5588f7f6c7b249e7bb14b70a23a48b0a709b033ffdbc6ba031a7678c5a1c615bd537c8b63823c85b6efeb9f0fa064886fd920af84fe8bc118f103add6903e63dfdcdf6425f708bcdb82d87a69b61cf4c1a41a496ca471f1d8eb69d6a1121c387748e0275389c9daabca774fe85b58772ab931e214d703e8c568a2d082311ceeddfb917bd1a7560625b02feef04bc9f71085dde459248cb8776347c3a39cb35c4f7383e73eb168d8a7f76f627500e8b230c0af008c4ec46f2b3fad697164a80435bf3fd17767cb56dcac34d0c4f526cf2540d8a15793f9924ed1a94c364bf839e246038bdba258a1c75f673165df21424daeb6e6cd874fd50ad8e9e575964137c2616a58759ca98ca067b41ea538a65619802dd7ac145eda12a2df8ff3da5fb327c5dc3609d2d4c8babe4d63f0918a5006415719c014fde3e75d6015c5f6291b98c238420d7d083cfb1e080c8d2dff59cdae9e760ae9a217d69d2df14c7e6054224294b7ed5f40af6b9eb6eee5687dbdfd0451fe0220c09a9350d5d9390314728c63a4c0e375cce8f926082f340ed83c99b5284c94e8dd9fe3ead74489c95ccef4926ef6f80b3289712fe9d7c02f3d573d0d76d677e716e6b27470e097347dbf8ba0a822d95fe4c82c8367f691183eb8278ceb7fc9a8f8845be36a1f9049cbc75588c89c70d126a64de17e20a341d914ec317a9a1ef0ba6b48ae04c2c235058721ee0e8574253a3135132161468671a1b58e969731c202d118f567dd0a1571ab1ae05e36b5ffef84b2fcff382986c9d43f6e4df80c9faee34fb131e9d563b38f1790557ec489844825c985d367dce30a7c24ab39bc9b01ffe463cb40588e6e34a25d1e0ae13f782dd9221dc03b952f176dd2768493a40943b9e2177c90ab8e3b01699fb5804eb6778a7eefe5799d9b744bbd1339bf7f46d5e9fcc3eebf7272b80969195e33ad95a912cc6530faa6be1e731edbcbab6a0d0b64daf69af9ec67a4901d24ca5031c1b2a129c4594befbb9878cd82bcf9dd48aa20cf53ea37be070cb3c8f8cd171fbf1e448bc26a5b5a30ec4d236d11b10d89ae1985a511cd569e18987018b95b87c96252b80089d3aaf73647c0fe8ac438845560e28c92d5fe8aa760f5601e0efd18ef8d5dd62cd230d496fbf391a5caaf922e566c39258411b0bc1a42fa199a65316642b6f2a7b906a6013dde8712f6045e9f211fbefb79b914b56be68d20c66627a267a87260790ed477b4d024ca1f40199ad0a8b211aa8b5856dd4a188067687cc4020746080e2b0b847c68836fda7e229dd4ea84b5eba2b9244683ff10b6b7ac31e3e1f9511cbecc4056a7df2437d5c57c4640cdb1af5afae05107d6b92aec09789a1bc9dbf377aa54b8e21b36fb20dc551386f30d6c5062380c2d8e6632b6c641c038fe97f90fea90b1dc059da5f4bfa3091bc05c23a829357ebc2a552ce386facdf36d7540fabdcb260f4690a0726e8bd6d398a7be416a72d6ffe3c7eaa900a0d8d8d91dbb04b6a2345c6529c7078174d2e76d6666adf83a1fb4801276f145d01fc48cec776d36aced94ed190a54d07a145779b4dcce8dd7ef3c53fb38304583a242810571fb6aca44028dbee2d93740a7cf757c75eaa9ff680306eaba0ec4cc87cfe0db98745f97b51b322510065bcc8543e12b6bc1ba1324d1e747e95ec658675acdfc82cead3558f1bdabbbb8b790a5bf2251df7af37e9d64a2c053bff39e9e64110946de7268c2d79c6a6d243fc35aa1985a8771a2bbce48a79b75b1a856c3f36c7caaf7d4bdf51f574de5899ca03e9427ae0a6bb7e3f9db2a394b3badd27f6e4cbb02d1b69c544a87c5bf29fefbc5c49e5751a8af5de85ad9a6c262251fb5ab3cd49779d9d34069aceda5335321703cb300dbb2017a7b3d198c497625c5f0a541c8b0a78a456d8cd63110009f5f65c4e65a431575cf1d065e3890d3b7233214d15d5fc3f4d5a8edc71833bc95a6763ee556f40c92dbbfa4109cbbfbb8b4ae7dfc47ad5a81a5e309b8c18a5c3d1b38c0f564ed592079dabf24dc8a417c9e7377ebaa2201c2e7e1abe4dd5c47fde768165637b59774191bd6128411d36b1f39281fab50b3f2a84ec23ec2006d5ac4374075bb949f254fa2db5803d2e9f831caa0b9a68583062f1441a87209a85f8d4158b9481f542c1b31e4300df581cb809237e5346cd6ac1e8bd8ff620f00b7e4134d1ffc160dc217a42b03b2b1c89299078fa091cf0bfd584ff381d4c7aeb73896b8a89934f9b1d5f0cedfefa46b75136a6ed4bc10b652c34670dabf80f9292ed1b0f16560e9ecf8f197e1f32496fb6d52c33a2754f0e09bce5396feaaff5f9e06cabc9f9eca46dbc59ca5b1b1346d7e7f4f5ca06bbaaed72824dde7943d709bac1be462e5a594a16a632c3fc2d02c4cdfc5ad7cc213f61e0eb7c83f215acb80e5fd2cc868bfe9b22445a71d1d91cba029e92bd8231061b82b9985055d491412eebe9495960aa36abb55ace8d0c539d294182c1e2ff426ea6ad500780a2ea67d85abcc15683fa62af10b9991d0cff0b6e81f453c16cc89751cef9febc6bd22613fc499c4bf505549733e995322029f5658244666da886684ef309560d6e19bfd4aafea281361b7cba0e79f078670058b3c0325439109a7a6e5581cb569410bb3b7921cef17c8aa5c9e70aa15fb2edba89d2e7c044727763143896d911d2382c121f11a9bdff44ec8e6a80a6960d00f054933af4409689d8745727a4ae51465edbb325028627d252a0431b1176db9f36130edd4951a7feb023e30a43c30523f8201c61fe08247d313245cf06902d88dfda5b74a7c9c6d95829feb5ddad9a34841df1f401fd4c5ec216c4c263101160db280eb0641f027a09664741737450de062a3998d0977506e01998fa18ac986bd29e56145ee273b1797d6e5d8e5d9cea768dd3e46fad38ae5954b2f63a1bf21dc6b895f6fea78a208a41ba200a9c07cc6d696cdefeaf60fd809604744685adf23569df4466fbb1990cc0d595998afd5fd56e3e54b44a7bd24e98b1566124724c1adfb9cc689b5c3d726359de2b926a312eee5ad2a8202093f1a6c473c1f69bfbc9a40c282e997cd5c8ecc787cd2181818a5cde1dce44dbb3e9e5615621eb66a27d05c8fee60deb5307b9adef1321086d8d5223253357f0768dc9a1033d8d32bbf82554bed64d162e3a176cb5bab58627684c86256d936d3395b1f459d1f1f4721c7812bcfabda839d14463a23ca6e71a1a9ce754dfbf784d90b0980a3da07614ac03851064f2d6d7e7cc961bec2e59507a3170239beae00fd3bdd7e02f687a56ed151f9167a1b3533013ec034c0ead334cb1a2df505e52c0cc3f9c89ad16f0a5f6afeb2dc1fdf2cea32de60cf5e86f14ca9026a09be9f514481d796eb2a68a09cd56629215211213231c91b012ccf69960162856175da1b1d5a64cef104bbc5f96b133c03f51a789e2e5af1b81300f5bcf74a3afa965b4f88fd765b7003421da344a8e3356dfdf55223f662dacb6fc22def62796f06297911defc44f4ec50ec2f65f3ae369a5cf538bc65f7b140fc55ece1836fd7bd69203bda597134bc8b6767bfc877b65031d46a8edd899082238534dcf9d14422290fada155f751817461e2d297a31a686bd287074bbdccd43c36f35c8648318897008092d9b9cac1ab7382ad6a518ec61c33838d272b58eca9cfe73df0a218fb300756af5d64f135d6f895c5a6107fe52d85b2713800ffdfdf4f7d02f47bcc43603d3e83c28ffb88d5441b221a585830e9b6f92b77a08cb4e900097a13bd23f4ecf6c67d613cbcb05e9bd51f60d26fda27d2bf390c6568b181829c9039031709f4f281fe759f5a12e2245c4aeb809aa5bfec1b9656cff42fe93f648739f437dd2b12dedd395c7511f03160197c38f314da00af476cdefe1b9f73db15132e2048a39c1fa50392171b00b8f03db406497f8ab5bef842d6434cd4941d25a1955bf40b7072c0a43fa846ec5b55815ce83222e7598b4880472962185d370504fad8996fc4bf21177f86900ffbc9489863bd12fb7ab1f76e2565232412085b0fb13ac5a9559e92d2b44a7823cb876859b05de37edd1bacd9712f6fa788a2644af41c6779f690cc01dbeb07412a0fa553facae9b0dea9f7e58142e11decf732244416f641d6f2c6997aa7046a57e16b632a274f3a2008054d95fda7939366ef4d55d854f62496a8f1a736d7bbe0ed8b531512e636ef35606f34ede1142ecd6ea4f53f3a06f47de32d31fa5cc07614dab05b46490e5d54a7f83a89448b8632c2aeddbecd2ff76b04166de3b9d198defe4127134ab131ba6a96cbb51810bda03a78be9ca4cf13b32553c2d9855a77e8b618e70349e96d9479337f0b08191a3ac7fabbfe6babf928778d85338a5e47c33aa34b95358ea8711518c8c082f5fcdd4cb87021164327450b6892e1e09a9bd1c0c2b6017c9a13d46c2c63466dfd58988149add276f32c8e71a42b02a3c18a5b4a07555c783a00fdec79ceb0274e447685fd958351ea417173a1b052fe54a08a5193b31a2339d56419f1f25740d44185d20d8c15674690cf556a3edbd49039690d0fbd4b05eab8a5deb9f187162738e3e1f72f687323656307e05acdc3353f50e7c70d3628f0f01fe593a9f6e36cd9e02887e450334fd4cac5d4b4fae7e050a5a3a51eb7d6afef2077697f2f754c7e3917f15821183d43302009e0de973c7d089bcb03644c80daaa09f547e2b2c4cf0f22aa40b42e6cc84addd5a890fb397923b6f0edd0d87c4b3095568ba0c30e296cd658d38438c19e4d74b72fe3c13be63a914301efbbcbf22f97d1bbdfb684a7c173662eba1ced1cd478abd4ba32b942e9e5798bc0b9c07e651eb8cd9d2af1089f6034efeebc4ce922155bf05eb013079d1ef9aaa88ecc9c38dfa916d377105d0b9a02ce78b378c86836de3c6a7b0c6bb9ef925b6f9444623da8d699ae735d42ada3f11c24b4fc7b74a7ba9508d83026de47ecc2091951cd5d5889333bdba02c61852bddf3780fe3c6b9503abe613b4e455342af238a5347da086bd25c9e8b474fe2f97d63be0b4688221ea056eb6629f99c2d044e57f772a39f64f7d1e2c609dbbd910a4d6b410ecdd74bef94b338d999cf7df099c28bc16033185efd1c817c4bc294afbb00cfd75f47034a35726bed27ae0d7c2e457a7c08d4307c37f48eec20a34fefa6aecf8f17735abb312a3e7d5dea5a6978a37a818607f7a6ecc34cf40ad4a167f76cb2f8f5f293fc57eb62b44332abca156d64ce0e4ade2c8344bcf054458f2ab0fbb611a7a1628b077e02e21dde50143b12c75d3494aa149a57d394ed038d74c262b0c2d3d1c3d93d700da88ca4f95d945ec5fa57fe766abc471cb6bccbdd7013f36ad3410f08ec21808c3a7df53835f12d4d73fdb8a"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001000)={{r1, 0x8, 0xb, 0x6, 0x7, 0x3, 0xe, 0x6, 0x7, 0xb, 0xff, 0x3, 0x2, 0x6, 0x3}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040d0}, 0x8840) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001200), r2) r4 = socket(0x2c, 0x1, 0x3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000012c0)=0x0) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800910}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x101}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_VENDOR_DATA={0x35, 0x1f, "2321a449c3fa3fe5fe28c54c0c7688721715ef30734b1c214cd1a196e450a719168126d691d0e25abfa31122d54867bde2"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc800}, 0x8000) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r4) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0xdc, r7, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0xbe, 0x5b, "a457e9f5632fdd07219d7dfa2ff54e12771a502374515751d5a6623fb562494eec3b0d72a5a54f08f7e062cdb601e3760a1bd2d904a9f5d1b65b8accc2a91a30023cf7a21d9bf3a93639aad61be6f68d6c809bc7019cbefe8b68a95a178e44371eb8cb71feac5fc17c246bf70255bbcd73183a9cec5a63aae3189b6691cba5dd1837122b69a36132f9b127fb7eafc97b4b643d648a03433c5ae13f06fdfffd019328ade1aa8c227bf61addfe194a0dc2cae886a3e00d0ab017b2"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r4) (rerun: 32) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8400200}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4044000) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000001740)=0x9, 0x4) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001780), 0x4) write(r9, &(0x7f00000017c0)="9320dec654293abf5a2610f5ebe887f57514d6c7b8661528116300511a0adb1469de56e894c676a3230d197ac7d50be0f5c54bce86f44f1cbbdb1805c36557834a3c009c93118155cd39fef64dbd75996a379db1307290dd28be192015a82d85d286e1a520021e2841e9555493c2d3585205c0e508a1e84625973d8ba9764aecf98e1e53990ec020b5d1efc48426ce2212f356a0fcbaa3a6163b0bdb425801a59fbc455a7554d40664aeca", 0xab) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001880)) (async, rerun: 32) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x4000090) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r4) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x44, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x28}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) write$nci(r11, &(0x7f0000001b80)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x0, @f={0xff, 0x2, 0x2, 0x2, {0x6, 0xa8, "12f507a2cc96d823eee6ebe0eba21fb5e87db005c42dd7827848bf2fc93af8aabb110c687655f74dc960672e3d82ebbed8d324c4a8ff64070244262f863ddf2cae037df496ecb10f4f0f8fff404bad95a1e6a0ece65451ebf1667886036c9e876613bd0edb9cfb7fd6f6ac4df40b53d15fdce6ace7550778a79fc74c5bd748952ac6eb7a4b2d1630b6168b7e5e8b7849e811a2a7441a6e6abab6ed8fa1d4a3aaf38c5740f87f321e"}}}, 0xb2) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001c80), r2) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r12, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x8854) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x44000000) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xc4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) 17.530247557s ago: executing program 0 (id=2820): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17.435972898s ago: executing program 0 (id=2821): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) shutdown(r0, 0x1) 17.42813162s ago: executing program 0 (id=2822): bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r5, 0x0, 0x3ffffffffffffa) 17.408535528s ago: executing program 3 (id=2823): r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}], 0x10) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000000)=""/220, &(0x7f0000000140)=0xdc) 17.291275592s ago: executing program 3 (id=2824): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="61a0005e34dd03a66c7ea8981eca2408d3fbfe0000000069108900000000009500000000000000dd30a2da4505024432b708db7747eb1009850756b3ff83c66eec0ad43ce84aa4840a301f403f49d770e238f7d143b01d688600b50067c2873b7af2f4461ab5be71163a4b686bd1fa354b9ae2fa457480e67e25181f2e7b3348d8ae4769aef79d80ba33526217f8544ad30ff6e36a9f4ee025a292591bd754d593e7b58514c6be26e307d79c4d327a7b5171"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', r1, 0x2f, 0x8, 0xff, 0x5, 0x10, @rand_addr=' \x01\x00', @mcast1, 0x7810, 0x7800, 0x4, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbc}, 0x94) 17.290879548s ago: executing program 0 (id=2825): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x5}, [@printk={@li, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 17.249845893s ago: executing program 0 (id=2826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f00000000c0)=@default_ap_ssid, 0x6, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async) r4 = socket(0x11, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x200, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x8000, 0x8000, 0x6, 0x16, {{0x14, 0x4, 0x1, 0x19, 0x50, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0xd7, 0x10, "8bf6c55e2f721b2a52c1c9ccc8f5"}, @generic={0x83, 0x4, "ac3c"}, @rr={0x7, 0xf, 0xc0, [@empty, @local, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x7a, 0x3, 0xb, [{@multicast1, 0x3}, {@broadcast}]}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd0, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000800}, 0x48005) (async) syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @empty, @void, {@canfd={0xd, {{0x4}, 0x6, 0x4, 0x0, 0x0, "25675f429b0b928b90015c4b44f2b1ac4e10f09a0e1533bb2a28e03aac6c950dbe16613e824317281c35b66d274561d4445f6e710e1eb8b9501885d28b640acc"}}}}, 0x0) 16.408166517s ago: executing program 3 (id=2827): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) getsockname$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r8 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x8, @remote, 0x6}}, 0x1, 0xfffffbff, 0xf24, 0x0, 0x5}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000280)={r9, @in6={{0xa, 0x4e23, 0x94, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x100, 0x800}, 0x90) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000280)={r9, @in6={{0xa, 0x4e23, 0x94, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x100, 0x800}, 0x90) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) pipe(0x0) 15.483609908s ago: executing program 3 (id=2828): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000a40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0xc000) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket(0x11, 0xa, 0x10000) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) sendmmsg$alg(r7, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvfrom$unix(r8, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x2, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1fffe}}, {{0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}}}}, 0x108) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003400000008007300000000000e0001006e657464657673696d000000230002006e657464657673696d3000000800030000000000"], 0x44}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r10 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r9, 0x4, 0x70bd2d, 0x65dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$key(r0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000440)=""/93, 0x5d, 0x0, &(0x7f0000000780)=""/46, 0x2e}}, 0x2) 3.242459609s ago: executing program 32 (id=2813): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xf}, {}, {0xfff1, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xb44, 0x6, 0x88a8}}, {0x14, 0x1, {0x101, 0x766, 0xb1a, 0x88a8}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x0, 0xfff1}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004811}, 0x4041810) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x96c4}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8000}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x3}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000580)=0x108e75, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) recvmmsg(r6, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r8) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r9, 0x1, 0x70bd28, 0x25dfd3fd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2000004}]}, 0x55}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r10, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x8081) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$NILFS_IOCTL_GET_CPINFO(r5, 0x80186e82, &(0x7f0000000280)={&(0x7f00000000c0)=[{0x2, 0x0, 0x6, 0x7e, 0x2, 0x3, 0x7, 0x7fff}, {0x0, 0x0, 0x4, 0x8, 0x8000000000000000, 0x101, 0x9, 0x2}, {0x0, 0x0, 0xa8, 0x8, 0x0, 0x1ff, 0x80000001, 0x401}, {0x1, 0x0, 0x2, 0x9, 0x9, 0xc07, 0x2b, 0x7fff}, {0x2, 0x0, 0xbac7, 0x8, 0xb, 0xb, 0x9, 0x3}, {0x3, 0x0, 0x8, 0x0, 0x800, 0x8, 0x9, 0x7}, {0x3, 0x0, 0x7, 0x9, 0x3, 0x10001, 0x1, 0xffffffffffff0001}], 0x7, 0x38, 0x1}) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) 2.21113246s ago: executing program 33 (id=2826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f00000000c0)=@default_ap_ssid, 0x6, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async) r4 = socket(0x11, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x200, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r6}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x8000, 0x8000, 0x6, 0x16, {{0x14, 0x4, 0x1, 0x19, 0x50, 0x65, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0xd7, 0x10, "8bf6c55e2f721b2a52c1c9ccc8f5"}, @generic={0x83, 0x4, "ac3c"}, @rr={0x7, 0xf, 0xc0, [@empty, @local, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x7a, 0x3, 0xb, [{@multicast1, 0x3}, {@broadcast}]}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd0, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000800}, 0x48005) (async) syz_emit_ethernet(0x56, &(0x7f0000000040)={@link_local, @empty, @void, {@canfd={0xd, {{0x4}, 0x6, 0x4, 0x0, 0x0, "25675f429b0b928b90015c4b44f2b1ac4e10f09a0e1533bb2a28e03aac6c950dbe16613e824317281c35b66d274561d4445f6e710e1eb8b9501885d28b640acc"}}}}, 0x0) 2.165462243s ago: executing program 34 (id=2819): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000000)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001000)={{r1, 0x8, 0xb, 0x6, 0x7, 0x3, 0xe, 0x6, 0x7, 0xb, 0xff, 0x3, 0x2, 0x6, 0x3}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040d0}, 0x8840) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001200), r2) r4 = socket(0x2c, 0x1, 0x3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000012c0)=0x0) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800910}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x6c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x101}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_VENDOR_DATA={0x35, 0x1f, "2321a449c3fa3fe5fe28c54c0c7688721715ef30734b1c214cd1a196e450a719168126d691d0e25abfa31122d54867bde2"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc800}, 0x8000) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r4) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0xdc, r7, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_MATCH={0xbe, 0x5b, "a457e9f5632fdd07219d7dfa2ff54e12771a502374515751d5a6623fb562494eec3b0d72a5a54f08f7e062cdb601e3760a1bd2d904a9f5d1b65b8accc2a91a30023cf7a21d9bf3a93639aad61be6f68d6c809bc7019cbefe8b68a95a178e44371eb8cb71feac5fc17c246bf70255bbcd73183a9cec5a63aae3189b6691cba5dd1837122b69a36132f9b127fb7eafc97b4b643d648a03433c5ae13f06fdfffd019328ade1aa8c227bf61addfe194a0dc2cae886a3e00d0ab017b2"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r4) (rerun: 32) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8400200}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r8, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4044000) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000001740)=0x9, 0x4) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001780), 0x4) write(r9, &(0x7f00000017c0)="9320dec654293abf5a2610f5ebe887f57514d6c7b8661528116300511a0adb1469de56e894c676a3230d197ac7d50be0f5c54bce86f44f1cbbdb1805c36557834a3c009c93118155cd39fef64dbd75996a379db1307290dd28be192015a82d85d286e1a520021e2841e9555493c2d3585205c0e508a1e84625973d8ba9764aecf98e1e53990ec020b5d1efc48426ce2212f356a0fcbaa3a6163b0bdb425801a59fbc455a7554d40664aeca", 0xab) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001880)) (async, rerun: 32) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x4000090) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), r4) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x44, r10, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x28}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x7}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) write$nci(r11, &(0x7f0000001b80)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x0, @f={0xff, 0x2, 0x2, 0x2, {0x6, 0xa8, "12f507a2cc96d823eee6ebe0eba21fb5e87db005c42dd7827848bf2fc93af8aabb110c687655f74dc960672e3d82ebbed8d324c4a8ff64070244262f863ddf2cae037df496ecb10f4f0f8fff404bad95a1e6a0ece65451ebf1667886036c9e876613bd0edb9cfb7fd6f6ac4df40b53d15fdce6ace7550778a79fc74c5bd748952ac6eb7a4b2d1630b6168b7e5e8b7849e811a2a7441a6e6abab6ed8fa1d4a3aaf38c5740f87f321e"}}}, 0xb2) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001c80), r2) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r12, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x8854) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x44000000) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xc4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000010) 2.090470676s ago: executing program 35 (id=2818): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0xc00) getpeername$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x8000, @rand_addr=' \x01\x00', 0x1}}, [0x6, 0x0, 0x7, 0x8, 0x5, 0xfffffffffffffff9, 0x401, 0x2, 0x5, 0x8, 0x0, 0x6, 0x7fff, 0x1c9, 0x5]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={r1, 0x3}, &(0x7f0000000280)=0x8) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) r4 = accept$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000400)=0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000440)={0xfe, 0x3, 0x60, 0x12, 0x5, 0x5, 0xb6, 0xf1, 0x2, 0x6, 0x4, 0x9, 0xf9, 0x8}, 0xe) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000004c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000500)={r1, 0x7}, 0x8) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000540)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="6fbfeb20f9ea6f36b085530ef4f6e3e364e2c7390ff6ccc5f6ec8af7cbeb5129bf6b13a56cf1e616ccef56a8501d6cfffc5169f34d18bf1125adc17dcd352977a9e84ffa46d5b627ae000e525487b41a726991da93a7ea236b2e07dd6b4d79f39068e6a62e2fd89842f898617756afc89b55b405", 0x74}, {&(0x7f0000000640)="9e9af439bc738ce3312f1d54eb790d97a83bcd353c49ea85fb370d2aacec3a9fb0bf3e814cd782e93c689278fae21d6679301eb2a4dc69836253bfc70d44a7e7521f0302b016de21087a4f732ee1cccdce6ee7b48a4ddb", 0x57}], 0x2, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x260e012e}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x707d}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x378}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0xa8}, 0x4040) ioctl$PPPIOCGMRU(r6, 0x80047453, &(0x7f0000000800)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000840)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000880)=0x14) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r6) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4e402f6d373a0f22}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r9, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000a00)=@assoc_value={r8, 0x400}, &(0x7f0000000a40)=0x8) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000a80)=0x4) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000ac0)={'syztnl0\x00', r3, 0x7800, 0x1f, 0x8, 0xa, {{0x6, 0x4, 0x3, 0x2f, 0x18, 0x65, 0x0, 0xe, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@end]}}}}}) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000000b40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xadd, 0x3ff, 0x5, 0x100, 0x6deb, 0x4000000, r12}) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r13, 0x84, 0x1, &(0x7f0000000bc0)={0x0, 0x617, 0x9, 0x1, 0x44a, 0x1}, &(0x7f0000000c00)=0x14) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000c40)=0x4) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r6) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r14, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x15}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000401}, 0x20044884) getsockopt$IP_SET_OP_VERSION(r11, 0x1, 0x53, &(0x7f0000000dc0), &(0x7f0000000e00)=0x8) 0s ago: executing program 36 (id=2828): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000a40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0xc000) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket(0x11, 0xa, 0x10000) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) sendmmsg$alg(r7, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvfrom$unix(r8, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/58, 0x3a}], 0x1}, 0x0) sendto(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x2, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1fffe}}, {{0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}}}}, 0x108) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003400000008007300000000000e0001006e657464657673696d000000230002006e657464657673696d3000000800030000000000"], 0x44}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r10 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r9, 0x4, 0x70bd2d, 0x65dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$key(r0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000440)=""/93, 0x5d, 0x0, &(0x7f0000000780)=""/46, 0x2e}}, 0x2) kernel console output (not intermixed with test programs): ] bond0 (unregistering): Released all slaves [ 286.270682][T12161] vlan4: entered promiscuous mode [ 286.279194][T12161] bridge0: entered promiscuous mode [ 286.342338][T12158] bond0: option xmit_hash_policy: invalid value (64) [ 286.361982][T12158] bond0 (unregistering): Released all slaves [ 286.523775][T12170] pim6reg527: entered allmulticast mode [ 286.782983][T12179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1569'. [ 287.029957][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1568'. [ 287.235948][T12199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1572'. [ 287.236131][T12199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1572'. [ 287.282661][T12204] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 287.555233][T12214] netlink: Failed to add batadv0 helper -22 [ 287.555335][T12214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.800565][T12230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1580'. [ 290.037558][T12194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.296456][T12265] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1589'. [ 290.336780][T12260] syzkaller0: entered promiscuous mode [ 290.344552][T12260] syzkaller0: entered allmulticast mode [ 290.636125][ T5622] Bluetooth: hci4: link tx timeout [ 290.643689][ T5622] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 290.697897][T12285] syzkaller0: entered promiscuous mode [ 290.697953][T12285] syzkaller0: entered allmulticast mode [ 290.915351][T12295] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 291.027381][T12301] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1600'. [ 291.045337][T12295] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.096763][T12297] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 291.110465][T12295] netlink: 'syz.1.1596': attribute type 10 has an invalid length. [ 291.110509][T12295] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1596'. [ 291.166000][T12305] 8021q: adding VLAN 0 to HW filter on device bond11 [ 291.388860][T12235] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 291.590366][T12331] netlink: 'syz.1.1606': attribute type 10 has an invalid length. [ 291.678384][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1605'. [ 291.708237][T12336] syzkaller0: left promiscuous mode [ 291.708279][T12336] syzkaller0: left allmulticast mode [ 292.023577][T12353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1611'. [ 292.180365][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 292.304704][T12366] syzkaller0: entered promiscuous mode [ 292.304748][T12366] syzkaller0: entered allmulticast mode [ 292.363518][T12360] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1612'. [ 292.598927][T12376] netlink: 952 bytes leftover after parsing attributes in process `syz.0.1616'. [ 292.702763][ T5622] Bluetooth: hci4: command 0x0405 tx timeout [ 292.773338][T12383] netlink: 'syz.3.1620': attribute type 2 has an invalid length. [ 292.851345][T12370] syzkaller0: entered promiscuous mode [ 292.851396][T12370] syzkaller0: entered allmulticast mode [ 293.226070][T12399] netlink: zone id is out of range [ 293.226110][T12399] netlink: del zone limit has 4 unknown bytes [ 293.279205][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1625'. [ 293.808452][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'. [ 293.810580][T12423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'. [ 293.946717][T12430] syzkaller0: entered promiscuous mode [ 293.946760][T12430] syzkaller0: entered allmulticast mode [ 294.764437][T12467] netlink: 'syz.2.1638': attribute type 1 has an invalid length. [ 295.075293][T12485] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 295.708449][T12528] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 295.853679][T12514] syzkaller0: entered promiscuous mode [ 295.853723][T12514] syzkaller0: entered allmulticast mode [ 295.924882][T12532] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2 [ 295.935179][T12532] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿ [ 296.358313][T12558] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 296.369135][T12558] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 296.525203][T12569] netlink: 'syz.0.1657': attribute type 49 has an invalid length. [ 297.185460][T12595] syzkaller0: entered promiscuous mode [ 297.191490][T12595] syzkaller0: entered allmulticast mode [ 297.429368][T12602] netlink: 'syz.3.1664': attribute type 4 has an invalid length. [ 297.429409][T12602] __nla_validate_parse: 8 callbacks suppressed [ 297.429441][T12602] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1664'. [ 297.470479][T12602] .`: renamed from bond0 (while UP) [ 297.649152][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1666'. [ 297.738745][T12617] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1668'. [ 297.974444][T12628] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 297.974746][T12628] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1669'. [ 297.974786][T12628] netlink: 'syz.2.1669': attribute type 2 has an invalid length. [ 297.974801][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 297.981582][T12631] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 297.981634][T12631] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1669'. [ 297.981677][T12631] netlink: 'syz.2.1669': attribute type 2 has an invalid length. [ 297.981696][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 298.022956][ T4934] block nbd0: Receive control failed (result -32) [ 298.562236][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1674'. [ 298.657696][T12654] netlink: 1068 bytes leftover after parsing attributes in process `syz.4.1675'. [ 299.412820][T12695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1683'. [ 299.503231][T12698] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 299.651299][T12700] x_tables: duplicate underflow at hook 2 [ 300.311863][T12737] ieee802154 phy0 wpan0: encryption failed: -22 [ 300.816934][T12756] syzkaller0: entered promiscuous mode [ 300.816978][T12756] syzkaller0: entered allmulticast mode [ 301.047735][T12776] netlink: 'syz.1.1698': attribute type 2 has an invalid length. [ 301.192776][T12784] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 301.192827][T12784] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 302.035566][T12789] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 302.035622][T12789] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 302.233025][T12823] netlink: zone id is out of range [ 302.240946][T12823] netlink: zone id is out of range [ 302.246495][T12823] netlink: zone id is out of range [ 302.254768][T12823] netlink: zone id is out of range [ 302.256074][T12823] netlink: zone id is out of range [ 302.256787][T12823] netlink: zone id is out of range [ 302.256942][T12823] netlink: zone id is out of range [ 302.279929][T12823] netlink: zone id is out of range [ 302.368054][T12821] syzkaller0: entered promiscuous mode [ 302.368113][T12821] syzkaller0: entered allmulticast mode [ 303.690844][T12882] __nla_validate_parse: 67 callbacks suppressed [ 303.690902][T12882] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1722'. [ 304.294468][T12915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1728'. [ 304.541061][T12924] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1729'. [ 304.818673][T12931] syz.0.1731: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 304.840799][T12931] CPU: 1 UID: 0 PID: 12931 Comm: syz.0.1731 Not tainted syzkaller #0 PREEMPT(full) [ 304.840827][T12931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.840857][T12931] Call Trace: [ 304.840870][T12931] [ 304.840880][T12931] dump_stack_lvl+0xe8/0x150 [ 304.840929][T12931] warn_alloc+0x24d/0x270 [ 304.840964][T12931] ? kasan_save_track+0x4f/0x80 [ 304.840985][T12931] ? kasan_save_track+0x3e/0x80 [ 304.841010][T12931] ? __pfx_warn_alloc+0x10/0x10 [ 304.841040][T12931] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 304.841063][T12931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.841108][T12931] __vmalloc_node_range_noprof+0x127/0x1540 [ 304.841164][T12931] ? rcu_is_watching+0x16/0xb0 [ 304.841201][T12931] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 304.841234][T12931] ? __kmalloc_cache_noprof+0x321/0x600 [ 304.841270][T12931] ? __kmalloc_cache_noprof+0x14d/0x600 [ 304.841304][T12931] ? xskq_create+0x56/0x220 [ 304.841340][T12931] xskq_create+0x148/0x220 [ 304.841370][T12931] ? xsk_init_queue+0x8a/0xe0 [ 304.841402][T12931] xsk_init_queue+0x8a/0xe0 [ 304.841434][T12931] xsk_setsockopt+0x52a/0x960 [ 304.841465][T12931] ? __pfx_xsk_setsockopt+0x10/0x10 [ 304.841494][T12931] ? __pfx_aa_sk_perm+0x10/0x10 [ 304.841528][T12931] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 304.841555][T12931] ? __pfx_xsk_setsockopt+0x10/0x10 [ 304.841584][T12931] do_sock_setsockopt+0x17c/0x1b0 [ 304.841611][T12931] __x64_sys_setsockopt+0x13d/0x1b0 [ 304.841640][T12931] do_syscall_64+0x166/0x520 [ 304.841671][T12931] ? trace_irq_disable+0x3b/0x140 [ 304.841692][T12931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.841715][T12931] ? clear_bhb_loop+0x70/0xc0 [ 304.841742][T12931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.841764][T12931] RIP: 0033:0x7f49abf9e159 [ 304.841794][T12931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.841814][T12931] RSP: 002b:00007f49aceca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 304.841837][T12931] RAX: ffffffffffffffda RBX: 00007f49ac225fa0 RCX: 00007f49abf9e159 [ 304.841862][T12931] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 304.841876][T12931] RBP: 00007f49ac035024 R08: 0000000000000004 R09: 0000000000000000 [ 304.841890][T12931] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.841904][T12931] R13: 00007f49ac226038 R14: 00007f49ac225fa0 R15: 00007ffeb981b998 [ 304.841941][T12931] [ 304.975341][T12931] Mem-Info: [ 304.975394][T12931] active_anon:6204 inactive_anon:0 isolated_anon:0 [ 304.975394][T12931] active_file:0 inactive_file:43445 isolated_file:0 [ 304.975394][T12931] unevictable:0 dirty:140 writeback:0 [ 304.975394][T12931] slab_reclaimable:10855 slab_unreclaimable:103752 [ 304.975394][T12931] mapped:29439 shmem:534 pagetables:1331 [ 304.975394][T12931] sec_pagetables:0 bounce:0 [ 304.975394][T12931] kernel_misc_reclaimable:0 [ 304.975394][T12931] free:1314292 free_pcp:8959 free_cma:0 [ 304.975549][T12931] Node 0 active_anon:24816kB inactive_anon:0kB active_file:0kB inactive_file:173584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117756kB dirty:560kB writeback:0kB shmem:2136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13600kB pagetables:5184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 304.975708][T12931] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 304.975854][T12931] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.976007][T12931] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 304.976114][T12931] Node 0 DMA32 free:1298400kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24816kB inactive_anon:0kB active_file:0kB inactive_file:173584kB unevictable:0kB writepending:560kB zspages:0kB present:3129332kB managed:2546712kB mlocked:0kB bounce:0kB free_pcp:35836kB local_pcp:15044kB free_cma:0kB [ 304.976282][T12931] lowmem_reserve[]: 0 0 0 0 0 [ 304.976339][T12931] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.976406][T12931] lowmem_reserve[]: 0 0 0 0 0 [ 304.976445][T12931] Node 1 Normal free:3943408kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 304.976507][T12931] lowmem_reserve[]: 0 0 0 0 0 [ 304.976544][T12931] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 304.976814][T12931] Node 0 DMA32: 566*4kB (UME) 289*8kB (UME) 248*16kB (UM) 197*32kB (ME) 66*64kB (ME) 18*128kB (UM) 4*256kB (UM) 0*512kB 2*1024kB (ME) 4*2048kB (UME) 309*4096kB (M) = 1298304kB [ 304.990158][T12931] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 304.990464][T12931] Node 1 Normal: 2*4kB (M) 1*8kB (M) 6*16kB (UM) 8*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943408kB [ 304.990881][T12931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.990932][T12931] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.990995][T12931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.991038][T12931] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.991089][T12931] 43975 total pagecache pages [ 304.991120][T12931] 0 pages in swap cache [ 304.991141][T12931] Free swap = 124996kB [ 304.991175][T12931] Total swap = 124996kB [ 304.991204][T12931] 2097051 pages RAM [ 304.991227][T12931] 0 pages HighMem/MovableOnly [ 304.991248][T12931] 428757 pages reserved [ 304.991270][T12931] 0 pages cma reserved [ 307.086006][ T5279] veth1_vlan: left promiscuous mode [ 307.208438][T13014] veth0: entered promiscuous mode [ 307.310118][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 307.381784][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'. [ 307.458106][T13012] veth0: left promiscuous mode [ 307.818326][T13040] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 307.818391][T13040] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 307.818424][T13040] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1756'. [ 307.821820][T13040] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 307.821874][T13040] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 307.821909][T13040] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1756'. [ 308.380543][T13065] syzkaller1: entered promiscuous mode [ 308.380591][T13065] syzkaller1: entered allmulticast mode [ 308.410985][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 308.429326][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 308.429385][T13065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1762'. [ 308.733198][T13077] __nla_validate_parse: 3 callbacks suppressed [ 308.733282][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1765'. [ 308.753534][T13078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1765'. [ 308.926580][T13084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1766'. [ 309.051063][T13089] netlink: 'syz.4.1768': attribute type 16 has an invalid length. [ 309.059773][T13089] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1768'. [ 309.069640][T13089] veth0_macvtap: entered allmulticast mode [ 310.950534][T13162] netlink: 'syz.1.1788': attribute type 1 has an invalid length. [ 311.122130][T13162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.160327][T13163] bond4: (slave gretap1): making interface the new active one [ 311.172549][T13163] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 311.189085][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 311.207421][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 311.883135][T13201] openvswitch: netlink: Key type 150 is out of range max 32 [ 311.883517][T13202] openvswitch: netlink: Key type 150 is out of range max 32 [ 312.073757][T13216] syzkaller0: entered promiscuous mode [ 312.073815][T13216] syzkaller0: entered allmulticast mode [ 312.320917][T13226] netlink: 'syz.0.1804': attribute type 12 has an invalid length. [ 312.630274][T13231] ip_tables: iptables: counters copy to user failed while replacing table [ 313.100147][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 313.100204][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 313.193617][T13251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1811'. [ 313.193660][T13251] openvswitch: netlink: Flow actions attr not present in new flow. [ 313.221341][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1811'. [ 313.395923][T13251] bond5: entered promiscuous mode [ 313.409784][T13251] 8021q: adding VLAN 0 to HW filter on device bond5 [ 313.528722][T13260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 313.559516][T13260] bond5: (slave sit2): The slave device specified does not support setting the MAC address [ 313.562703][T13260] bond5: (slave sit2): Error -95 calling set_mac_address [ 313.791525][T13271] Cannot find del_set index 4 as target [ 313.840058][T13271] __nla_validate_parse: 1 callbacks suppressed [ 313.840127][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 313.840791][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 313.866084][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 313.866465][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 313.866757][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 313.895512][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 313.905023][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 313.914544][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 313.923859][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 313.934000][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 314.099166][T13266] sctp: [Deprecated]: syz.3.1815 (pid 13266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.099166][T13266] Use struct sctp_sack_info instead [ 314.336364][T13288] x_tables: duplicate underflow at hook 2 [ 314.686087][T13313] syzkaller0: entered promiscuous mode [ 314.691836][T13313] syzkaller0: entered allmulticast mode [ 315.659372][T13348] netlink: 'syz.1.1838': attribute type 29 has an invalid length. [ 315.670161][T13347] netlink: 'syz.1.1838': attribute type 29 has an invalid length. [ 315.682234][T13347] netlink: 'syz.1.1838': attribute type 29 has an invalid length. [ 315.683762][T13348] netlink: 'syz.1.1838': attribute type 29 has an invalid length. [ 315.778906][T13351] Bluetooth: MGMT ver 1.23 [ 316.128096][T13360] syzkaller0: entered promiscuous mode [ 316.128142][T13360] syzkaller0: entered allmulticast mode [ 316.899974][T13402] ip6t_frag: unknown flags 6 [ 317.490787][T13433] openvswitch: netlink: Flow key attr not present in new flow. [ 317.502284][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.747947][T13439] macsec3: entered promiscuous mode [ 317.748211][T13439] macsec3: entered allmulticast mode [ 317.748254][T13439] bridge0: entered allmulticast mode [ 317.939925][T13448] netlink: 'syz.1.1866': attribute type 1 has an invalid length. [ 317.941318][T13449] netlink: 'syz.1.1866': attribute type 1 has an invalid length. [ 318.156923][T13456] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 318.156973][T13456] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 318.235682][T13461] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 318.260792][T13461] team0: Port device dummy0 added [ 318.747838][T13483] openvswitch: netlink: Flow key attr not present in new flow. [ 318.981365][T13492] gre1: entered promiscuous mode [ 319.411451][T13507] netlink: 'syz.3.1882': attribute type 75 has an invalid length. [ 319.528403][T13509] team0: Cannot enslave team device to itself [ 319.612252][T13512] __nla_validate_parse: 14 callbacks suppressed [ 319.613057][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 319.869328][T13524] openvswitch: netlink: Duplicate key (type 6). [ 319.872395][T13525] openvswitch: netlink: Duplicate key (type 6). [ 319.963973][T13530] syzkaller0: entered promiscuous mode [ 319.971750][T13530] syzkaller0: entered allmulticast mode [ 320.743139][T13548] tipc: Enabled bearer , priority 0 [ 320.752063][T13550] syzkaller0: entered promiscuous mode [ 320.752108][T13550] syzkaller0: entered allmulticast mode [ 320.789358][T13539] syzkaller0: mtu less than device minimum [ 320.813612][T13536] tipc: Resetting bearer [ 320.887556][T13536] tipc: Disabling bearer [ 321.022644][T13574] netlink: 'syz.1.1895': attribute type 34 has an invalid length. [ 321.022689][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1895'. [ 321.283469][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1895'. [ 321.487040][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'. [ 321.888614][T13609] netlink: 'syz.3.1903': attribute type 2 has an invalid length. [ 321.909095][T13612] netlink: 'syz.3.1903': attribute type 2 has an invalid length. [ 322.596740][T13639] syzkaller1: entered promiscuous mode [ 322.596783][T13639] syzkaller1: entered allmulticast mode [ 322.788443][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 322.899387][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 322.899431][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1910'. [ 322.952883][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 322.975766][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 322.995069][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 323.284925][T13649] bond8: (slave bond_slave_0): Device is not our slave [ 323.284980][T13649] bond8: option active_slave: invalid value (bond_slave_0) [ 323.302172][T13649] bond8 (unregistering): Released all slaves [ 323.387774][T13677] lo: entered promiscuous mode [ 323.543353][T13654] bond8: (slave bond_slave_0): Device is not our slave [ 323.551782][T13654] bond8: option active_slave: invalid value (bond_slave_0) [ 323.563221][T13654] bond8 (unregistering): Released all slaves [ 323.673571][T13688] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 324.288835][T13706] syzkaller0: entered promiscuous mode [ 324.288880][T13706] syzkaller0: entered allmulticast mode [ 324.500185][T13722] netlink: 'syz.3.1926': attribute type 12 has an invalid length. [ 324.510584][T13722] netlink: 'syz.3.1926': attribute type 11 has an invalid length. [ 324.600779][T13720] netlink: 'syz.3.1926': attribute type 4 has an invalid length. [ 324.759735][T13732] __nla_validate_parse: 8 callbacks suppressed [ 324.767207][T13732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1929'. [ 324.797692][T13732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1929'. [ 325.388578][T13736] syzkaller1: entered promiscuous mode [ 325.396831][T13736] syzkaller1: entered allmulticast mode [ 325.802678][T13779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1941'. [ 326.185029][T13792] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1945'. [ 326.716920][T13808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1950'. [ 326.717136][T13808] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1950'. [ 326.823661][T13807] syzkaller0: entered promiscuous mode [ 326.823719][T13807] syzkaller0: entered allmulticast mode [ 326.840638][T13811] netlink: 'syz.1.1952': attribute type 23 has an invalid length. [ 327.321343][T13829] syzkaller1: entered promiscuous mode [ 327.329096][T13829] syzkaller1: entered allmulticast mode [ 327.350771][T13829] syzkaller1: left promiscuous mode [ 327.356573][T13829] syzkaller1: left allmulticast mode [ 327.617745][T13836] openvswitch: netlink: Unknown key attributes 1 [ 327.691299][T13838] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.035739][T13848] netlink: 'syz.0.1962': attribute type 10 has an invalid length. [ 328.051232][T13848] syz_tun: entered promiscuous mode [ 328.086095][T13848] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 328.108873][T13848] netlink: 'syz.0.1962': attribute type 30 has an invalid length. [ 328.166524][T13853] netlink: 'syz.0.1962': attribute type 10 has an invalid length. [ 328.197932][T13856] netlink: 'syz.0.1962': attribute type 30 has an invalid length. [ 328.221888][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 328.237918][T13848] bond6: option arp_missed_max: invalid value (0) [ 328.237973][T13848] bond6: option arp_missed_max: allowed values 1 - 255 [ 328.275506][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 328.283711][T13848] bond6 (unregistering): Released all slaves [ 328.284718][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1964'. [ 328.284750][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1964'. [ 328.407048][T13856] bond6: option arp_missed_max: invalid value (0) [ 328.407100][T13856] bond6: option arp_missed_max: allowed values 1 - 255 [ 328.424547][T13856] bond6 (unregistering): Released all slaves [ 328.530081][T13859] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 328.542879][T13859] bond0 (unregistering): Released all slaves [ 328.657498][T12236] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.660402][ T1363] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.660536][ T1363] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.660671][ T1363] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.154936][T13866] syzkaller0: entered promiscuous mode [ 329.154987][T13866] syzkaller0: entered allmulticast mode [ 332.033821][T13915] __nla_validate_parse: 5 callbacks suppressed [ 332.034645][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 332.119671][T13922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1981'. [ 332.365344][T13939] Cannot find set identified by id 65534 to match [ 332.397952][T13941] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 332.408463][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1983'. [ 332.408517][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1983'. [ 332.443668][T13939] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1982'. [ 332.461428][T13928] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 332.478098][T13928] bond0 (unregistering): Released all slaves [ 332.691399][T13952] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1988'. [ 332.750844][T13959] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1988'. [ 332.768634][T13952] bond0 (unregistering): Released all slaves [ 332.843408][T13959] bond0 (unregistering): Released all slaves [ 333.300987][T13975] netlink: 'syz.3.1992': attribute type 2 has an invalid length. [ 333.452381][T13975] : entered promiscuous mode [ 333.514559][T13981] ip_tables: iptables: counters copy to user failed while replacing table [ 333.713023][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1996'. [ 333.785395][T13987] 8021q: adding VLAN 0 to HW filter on device bond6 [ 334.141363][T14010] syzkaller0: entered promiscuous mode [ 334.141417][T14010] syzkaller0: entered allmulticast mode [ 334.215739][T14016] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2005'. [ 334.233431][T14016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2005'. [ 334.371033][ T4934] block nbd1: Receive control failed (result -32) [ 334.565148][T14033] vxcan0: tx address claim with dest, not broadcast [ 335.367620][T14056] syzkaller0: entered promiscuous mode [ 335.387399][T14056] syzkaller0: entered allmulticast mode [ 336.153778][T14102] ip_tables: iptables: counters copy to user failed while replacing table [ 336.288802][T14115] bond2: (slave lo): Releasing backup interface [ 336.297947][T14115] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 336.409222][T14115] team0: Port device dummy0 removed [ 336.463430][T14115] bridge_slave_1: left allmulticast mode [ 336.463480][T14115] bridge_slave_1: left promiscuous mode [ 336.464545][T14115] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.530100][T14125] openvswitch: netlink: Multiple metadata blocks provided [ 336.538694][T14115] team0: Port device team_slave_0 removed [ 336.585352][T14115] team0: Port device team_slave_1 removed [ 336.593179][T14115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.593260][T14115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.629964][T14115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.630016][T14115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.669300][T14115] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 336.722831][T14117] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 337.164796][T14141] __nla_validate_parse: 4 callbacks suppressed [ 337.164846][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 337.308759][T14151] netlink: 'syz.4.2042': attribute type 1 has an invalid length. [ 337.317395][T14151] netlink: 'syz.4.2042': attribute type 1 has an invalid length. [ 337.701322][T14172] openvswitch: netlink: Multiple metadata blocks provided [ 337.880779][T14175] syzkaller0: entered promiscuous mode [ 337.888257][T14175] syzkaller0: entered allmulticast mode [ 338.431427][ T5279] v: left promiscuous mode [ 338.501540][ T191] v: entered promiscuous mode [ 338.692076][T14222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 339.176375][T14239] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2059'. [ 339.192241][T14253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2061'. [ 339.226444][T14253] hsr_slave_0: left promiscuous mode [ 339.239815][T14253] hsr_slave_1: left promiscuous mode [ 339.634399][ T1363] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.634460][ T1363] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.687586][T14273] syzkaller0: entered promiscuous mode [ 339.687639][T14273] syzkaller0: entered allmulticast mode [ 340.218448][T14296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2069'. [ 340.248118][T14295] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2070'. [ 340.355464][T14299] blkio.reset_stats is deprecated [ 340.788467][T14319] sctp: [Deprecated]: syz.0.2076 (pid 14319) Use of int in max_burst socket option. [ 340.788467][T14319] Use struct sctp_assoc_value instead [ 340.912058][T14325] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2077'. [ 340.923822][T14325] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2077'. [ 340.986961][T14325] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2077'. [ 341.177050][T14336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2080'. [ 341.461235][T14340] syzkaller0: entered promiscuous mode [ 341.469101][T14340] syzkaller0: entered allmulticast mode [ 341.573347][T14345] FAULT_INJECTION: forcing a failure. [ 341.573347][T14345] name failslab, interval 1, probability 0, space 0, times 1 [ 341.573424][T14345] CPU: 1 UID: 0 PID: 14345 Comm: syz.2.2082 Not tainted syzkaller #0 PREEMPT(full) [ 341.573450][T14345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.573503][T14345] Call Trace: [ 341.573536][T14345] [ 341.573566][T14345] dump_stack_lvl+0xe8/0x150 [ 341.573670][T14345] should_fail_ex+0x410/0x560 [ 341.573776][T14345] should_failslab+0xa8/0x100 [ 341.573851][T14345] ? ovs_flow_alloc+0x24/0x1f0 [ 341.573925][T14345] kmem_cache_alloc_noprof+0xa1/0x600 [ 341.574019][T14345] ? ovs_flow_alloc+0x24/0x1f0 [ 341.574103][T14345] ovs_flow_alloc+0x24/0x1f0 [ 341.574176][T14345] ovs_flow_cmd_new+0x28b/0xea0 [ 341.574262][T14345] ? __kasan_kmalloc+0x93/0xb0 [ 341.574327][T14345] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 341.574527][T14345] ? __kmalloc_noprof+0x38c/0x720 [ 341.574621][T14345] ? __nla_parse+0x40/0x60 [ 341.574695][T14345] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 341.574781][T14345] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 341.574897][T14345] genl_family_rcv_msg_doit+0x233/0x340 [ 341.575025][T14345] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 341.575156][T14345] ? bpf_lsm_capable+0x9/0x20 [ 341.575231][T14345] ? security_capable+0x7e/0x2c0 [ 341.575313][T14345] genl_rcv_msg+0x614/0x7a0 [ 341.575404][T14345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 341.575488][T14345] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 341.575602][T14345] netlink_rcv_skb+0x226/0x4a0 [ 341.575675][T14345] ? __pfx_genl_rcv_msg+0x10/0x10 [ 341.575768][T14345] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 341.575884][T14345] ? down_read+0x2be/0x330 [ 341.575948][T14345] genl_rcv+0x28/0x40 [ 341.576048][T14345] netlink_unicast+0x7bd/0x940 [ 341.576136][T14345] netlink_sendmsg+0x813/0xb40 [ 341.576233][T14345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.576328][T14345] ? apparmor_socket_sendmsg+0x98/0x360 [ 341.576467][T14345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.576547][T14345] sock_sendmsg_nosec+0x13a/0x180 [ 341.576632][T14345] ____sys_sendmsg+0x54e/0x850 [ 341.576710][T14345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.576796][T14345] ? import_iovec+0x73/0xa0 [ 341.576878][T14345] ___sys_sendmsg+0x2a5/0x360 [ 341.576939][T14345] ? __lock_acquire+0x6df/0x2e50 [ 341.577005][T14345] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.577161][T14345] ? __fget_files+0x2a/0x420 [ 341.577227][T14345] ? __fget_files+0x3a2/0x420 [ 341.577332][T14345] __x64_sys_sendmsg+0x1b1/0x290 [ 341.577395][T14345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.577512][T14345] do_syscall_64+0x166/0x520 [ 341.577594][T14345] ? trace_irq_disable+0x3b/0x140 [ 341.577648][T14345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.577711][T14345] ? clear_bhb_loop+0x70/0xc0 [ 341.577787][T14345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.577860][T14345] RIP: 0033:0x7f3734f9e159 [ 341.577931][T14345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.577985][T14345] RSP: 002b:00007f3735ea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.578048][T14345] RAX: ffffffffffffffda RBX: 00007f3735225fa0 RCX: 00007f3734f9e159 [ 341.578099][T14345] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 341.578134][T14345] RBP: 00007f3735ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 341.578175][T14345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.578208][T14345] R13: 00007f3735226038 R14: 00007f3735225fa0 R15: 00007ffdbd42e438 [ 341.578295][T14345] [ 342.113000][T14354] netlink: 'syz.1.2088': attribute type 24 has an invalid length. [ 342.474465][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2094'. [ 342.474512][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2094'. [ 343.157759][T14401] FAULT_INJECTION: forcing a failure. [ 343.157759][T14401] name failslab, interval 1, probability 0, space 0, times 0 [ 343.181301][T14401] CPU: 0 UID: 0 PID: 14401 Comm: syz.1.2098 Not tainted syzkaller #0 PREEMPT(full) [ 343.181337][T14401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.181351][T14401] Call Trace: [ 343.181360][T14401] [ 343.181370][T14401] dump_stack_lvl+0xe8/0x150 [ 343.181409][T14401] should_fail_ex+0x410/0x560 [ 343.181450][T14401] should_failslab+0xa8/0x100 [ 343.181477][T14401] ? ovs_flow_alloc+0x24/0x1f0 [ 343.181503][T14401] kmem_cache_alloc_noprof+0xa1/0x600 [ 343.181539][T14401] ? ovs_flow_alloc+0x24/0x1f0 [ 343.181571][T14401] ovs_flow_alloc+0x24/0x1f0 [ 343.181599][T14401] ovs_flow_cmd_new+0x28b/0xea0 [ 343.181634][T14401] ? __kasan_kmalloc+0x93/0xb0 [ 343.181661][T14401] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 343.181746][T14401] ? __kmalloc_noprof+0x38c/0x720 [ 343.181782][T14401] ? __nla_parse+0x40/0x60 [ 343.181810][T14401] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 343.181845][T14401] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 343.181887][T14401] genl_family_rcv_msg_doit+0x233/0x340 [ 343.181930][T14401] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 343.181979][T14401] ? bpf_lsm_capable+0x9/0x20 [ 343.182011][T14401] ? security_capable+0x7e/0x2c0 [ 343.182041][T14401] genl_rcv_msg+0x614/0x7a0 [ 343.182083][T14401] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.182130][T14401] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 343.182176][T14401] netlink_rcv_skb+0x226/0x4a0 [ 343.182205][T14401] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.182241][T14401] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.182285][T14401] ? down_read+0x2be/0x330 [ 343.182313][T14401] genl_rcv+0x28/0x40 [ 343.182344][T14401] netlink_unicast+0x7bd/0x940 [ 343.182382][T14401] netlink_sendmsg+0x813/0xb40 [ 343.182420][T14401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.182457][T14401] ? apparmor_socket_sendmsg+0x98/0x360 [ 343.182493][T14401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.182520][T14401] sock_sendmsg_nosec+0x13a/0x180 [ 343.182554][T14401] ____sys_sendmsg+0x54e/0x850 [ 343.182585][T14401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.182620][T14401] ? import_iovec+0x73/0xa0 [ 343.182649][T14401] ___sys_sendmsg+0x2a5/0x360 [ 343.182673][T14401] ? __lock_acquire+0x6df/0x2e50 [ 343.182700][T14401] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.182763][T14401] ? __fget_files+0x2a/0x420 [ 343.182792][T14401] ? __fget_files+0x3a2/0x420 [ 343.182832][T14401] __x64_sys_sendmsg+0x1b1/0x290 [ 343.182860][T14401] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.182909][T14401] do_syscall_64+0x166/0x520 [ 343.182942][T14401] ? trace_irq_disable+0x3b/0x140 [ 343.182964][T14401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.182987][T14401] ? clear_bhb_loop+0x70/0xc0 [ 343.183015][T14401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.183039][T14401] RIP: 0033:0x7f67d019e159 [ 343.183060][T14401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.183080][T14401] RSP: 002b:00007f67d109e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.183104][T14401] RAX: ffffffffffffffda RBX: 00007f67d0425fa0 RCX: 00007f67d019e159 [ 343.183130][T14401] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 343.183145][T14401] RBP: 00007f67d109e090 R08: 0000000000000000 R09: 0000000000000000 [ 343.183160][T14401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.183174][T14401] R13: 00007f67d0426038 R14: 00007f67d0425fa0 R15: 00007ffe3b7ca958 [ 343.183209][T14401] [ 343.579702][T14403] syzkaller0: entered promiscuous mode [ 343.579755][T14403] syzkaller0: entered allmulticast mode [ 343.677453][T14407] nbd2: detected capacity change from 0 to 63 [ 343.728451][T14386] netlink: 'syz.4.2095': attribute type 4 has an invalid length. [ 343.980143][T14419] syzkaller0: entered promiscuous mode [ 343.986947][T14419] syzkaller0: entered allmulticast mode [ 344.457996][ T4934] block nbd2: Receive control failed (result -104) [ 344.806612][T14461] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20002 [ 345.412330][T14484] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 346.975728][T14538] netlink: 'syz.2.2126': attribute type 1 has an invalid length. [ 346.984859][T14538] netlink: 'syz.2.2126': attribute type 3 has an invalid length. [ 346.992792][T14538] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2126'. [ 347.006162][T14538] NCSI netlink: No device for ifindex 813332851 [ 347.059819][T14543] syzkaller0: entered promiscuous mode [ 347.059888][T14543] syzkaller0: entered allmulticast mode [ 347.282606][T14553] raw_sendmsg: syz.2.2130 forgot to set AF_INET. Fix it! [ 347.583448][T14554] syzkaller0: entered promiscuous mode [ 347.583504][T14554] syzkaller0: entered allmulticast mode [ 347.731253][T14569] syzkaller0: entered promiscuous mode [ 347.731301][T14569] syzkaller0: entered allmulticast mode [ 347.880944][T14584] openvswitch: netlink: Multiple metadata blocks provided [ 348.064618][T14589] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2138'. [ 348.273068][T14586] syzkaller0: entered promiscuous mode [ 348.273114][T14586] syzkaller0: entered allmulticast mode [ 348.315244][T14593] netlink: 'syz.3.2141': attribute type 2 has an invalid length. [ 348.354854][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2140'. [ 348.771921][T14617] openvswitch: netlink: Multiple metadata blocks provided [ 348.772049][T14617] FAULT_INJECTION: forcing a failure. [ 348.772049][T14617] name failslab, interval 1, probability 0, space 0, times 0 [ 348.796235][T14617] CPU: 0 UID: 0 PID: 14617 Comm: syz.3.2147 Not tainted syzkaller #0 PREEMPT(full) [ 348.796265][T14617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.796278][T14617] Call Trace: [ 348.796287][T14617] [ 348.796296][T14617] dump_stack_lvl+0xe8/0x150 [ 348.796334][T14617] should_fail_ex+0x410/0x560 [ 348.796375][T14617] should_failslab+0xa8/0x100 [ 348.796401][T14617] ? skb_clone+0x212/0x3a0 [ 348.796426][T14617] kmem_cache_alloc_noprof+0xa1/0x600 [ 348.796463][T14617] ? skb_clone+0x212/0x3a0 [ 348.796495][T14617] skb_clone+0x212/0x3a0 [ 348.796523][T14617] __netlink_deliver_tap+0x413/0x860 [ 348.796568][T14617] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.796598][T14617] netlink_deliver_tap+0x19c/0x1b0 [ 348.796630][T14617] netlink_sendskb+0x68/0x140 [ 348.796656][T14617] netlink_rcv_skb+0x2a4/0x4a0 [ 348.796685][T14617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.796719][T14617] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.796763][T14617] ? down_read+0x2be/0x330 [ 348.796790][T14617] genl_rcv+0x28/0x40 [ 348.796819][T14617] netlink_unicast+0x7bd/0x940 [ 348.796854][T14617] netlink_sendmsg+0x813/0xb40 [ 348.796907][T14617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.796953][T14617] ? apparmor_socket_sendmsg+0x98/0x360 [ 348.796989][T14617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.797016][T14617] sock_sendmsg_nosec+0x13a/0x180 [ 348.797051][T14617] ____sys_sendmsg+0x54e/0x850 [ 348.797087][T14617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.797122][T14617] ? import_iovec+0x73/0xa0 [ 348.797151][T14617] ___sys_sendmsg+0x2a5/0x360 [ 348.797175][T14617] ? __lock_acquire+0x6df/0x2e50 [ 348.797203][T14617] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.797264][T14617] ? __fget_files+0x2a/0x420 [ 348.797293][T14617] ? __fget_files+0x3a2/0x420 [ 348.797332][T14617] __x64_sys_sendmsg+0x1b1/0x290 [ 348.797358][T14617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.797404][T14617] do_syscall_64+0x166/0x520 [ 348.797437][T14617] ? trace_irq_disable+0x3b/0x140 [ 348.797459][T14617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.797482][T14617] ? clear_bhb_loop+0x70/0xc0 [ 348.797507][T14617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.797528][T14617] RIP: 0033:0x7f3e64d9e159 [ 348.797549][T14617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.797567][T14617] RSP: 002b:00007f3e65bbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.797592][T14617] RAX: ffffffffffffffda RBX: 00007f3e65025fa0 RCX: 00007f3e64d9e159 [ 348.797608][T14617] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 348.797623][T14617] RBP: 00007f3e65bbe090 R08: 0000000000000000 R09: 0000000000000000 [ 348.797637][T14617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.797651][T14617] R13: 00007f3e65026038 R14: 00007f3e65025fa0 R15: 00007ffdc3161d28 [ 348.797687][T14617] [ 349.355851][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2152'. [ 349.489148][T14647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2154'. [ 349.961754][T14671] openvswitch: netlink: Multiple metadata blocks provided [ 349.971489][T14671] FAULT_INJECTION: forcing a failure. [ 349.971489][T14671] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 349.971559][T14671] CPU: 0 UID: 0 PID: 14671 Comm: syz.2.2162 Not tainted syzkaller #0 PREEMPT(full) [ 349.971584][T14671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.971598][T14671] Call Trace: [ 349.971607][T14671] [ 349.971617][T14671] dump_stack_lvl+0xe8/0x150 [ 349.971654][T14671] should_fail_ex+0x410/0x560 [ 349.971692][T14671] _copy_to_user+0x31/0xb0 [ 349.971717][T14671] simple_read_from_buffer+0xe1/0x170 [ 349.971755][T14671] proc_fail_nth_read+0x1bb/0x230 [ 349.971788][T14671] ? common_file_perm+0x20e/0x2b0 [ 349.971815][T14671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.971852][T14671] ? rw_verify_area+0x24a/0x4c0 [ 349.971886][T14671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 349.971918][T14671] vfs_read+0x213/0xa80 [ 349.971953][T14671] ? __pfx___mutex_lock+0x10/0x10 [ 349.971988][T14671] ? __pfx_vfs_read+0x10/0x10 [ 349.972021][T14671] ? __fget_files+0x2a/0x420 [ 349.972060][T14671] ? __fget_files+0x3a2/0x420 [ 349.972088][T14671] ? __fget_files+0x2a/0x420 [ 349.972127][T14671] ksys_read+0x150/0x270 [ 349.972161][T14671] ? __pfx_ksys_read+0x10/0x10 [ 349.972205][T14671] do_syscall_64+0x166/0x520 [ 349.972238][T14671] ? trace_irq_disable+0x3b/0x140 [ 349.972259][T14671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.972281][T14671] ? clear_bhb_loop+0x70/0xc0 [ 349.972309][T14671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.972340][T14671] RIP: 0033:0x7f3734f5e98e [ 349.972359][T14671] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 349.972378][T14671] RSP: 002b:00007f3735ea5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 349.972400][T14671] RAX: ffffffffffffffda RBX: 00007f3735ea66c0 RCX: 00007f3734f5e98e [ 349.972417][T14671] RDX: 000000000000000f RSI: 00007f3735ea60a0 RDI: 0000000000000004 [ 349.972432][T14671] RBP: 00007f3735ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.972446][T14671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.972459][T14671] R13: 00007f3735226038 R14: 00007f3735225fa0 R15: 00007ffdbd42e438 [ 349.972492][T14671] [ 350.183645][T14674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.190422][T14666] syzkaller0: entered promiscuous mode [ 350.190459][T14666] syzkaller0: entered allmulticast mode [ 350.975642][T14710] netlink: 'syz.0.2171': attribute type 1 has an invalid length. [ 350.975690][T14710] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2171'. [ 351.121530][T14715] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2173'. [ 352.212616][T14751] syzkaller0: entered promiscuous mode [ 352.212660][T14751] syzkaller0: entered allmulticast mode [ 352.365750][T14763] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2183'. [ 352.472254][T14770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.484026][T14770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2184'. [ 353.050824][T14788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2187'. [ 353.238690][T14797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.509964][T14812] netlink: 'syz.0.2192': attribute type 25 has an invalid length. [ 353.841213][T14835] 8021q: VLANs not supported on ip6_vti0 [ 353.912899][T14835] syzkaller1: entered promiscuous mode [ 353.912951][T14835] syzkaller1: entered allmulticast mode [ 353.950100][T14836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2197'. [ 353.959950][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2197'. [ 354.287970][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2199'. [ 354.288021][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2199'. [ 354.316287][T14842] syzkaller0: entered promiscuous mode [ 354.322522][T14842] syzkaller0: entered allmulticast mode [ 354.365336][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079eba000: rx timeout, send abort [ 354.371534][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079eba000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 355.396538][T14870] syzkaller0: entered promiscuous mode [ 355.396585][T14870] syzkaller0: entered allmulticast mode [ 355.420459][T14884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.452529][T14895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.566221][T14880] syzkaller0: left promiscuous mode [ 355.566275][T14880] syzkaller0: left allmulticast mode [ 355.900250][T14906] bond5: option all_slaves_active: invalid value (222) [ 355.919909][T14906] bond5 (unregistering): Released all slaves [ 356.248016][T12238] syzkaller0: tun_net_xmit 76 [ 356.250225][T12238] syzkaller0: tun_net_xmit 48 [ 358.947823][T14935] tipc: Enabling of bearer rejected, failed to enable media [ 359.186049][T14988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2218'. [ 359.233344][T14987] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2220'. [ 359.254873][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'. [ 359.265835][T14981] syzkaller0: entered promiscuous mode [ 359.271486][T14981] syzkaller0: entered allmulticast mode [ 359.289905][T14987] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2220'. [ 359.958746][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 359.958800][T15015] netlink: 'syz.2.2226': attribute type 7 has an invalid length. [ 359.958845][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2226'. [ 359.959451][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'. [ 359.959482][T15015] netlink: 'syz.2.2226': attribute type 7 has an invalid length. [ 359.959499][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2226'. [ 360.277176][T15034] syzkaller0: left promiscuous mode [ 360.277248][T15034] syzkaller0: left allmulticast mode [ 360.456678][T15040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2233'. [ 360.667983][T15057] netlink: 'syz.4.2236': attribute type 3 has an invalid length. [ 361.552613][T15070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2239'. [ 363.404382][T15039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.757663][T15092] netlink: 'syz.1.2246': attribute type 2 has an invalid length. [ 363.767923][T15092] netlink: 'syz.1.2246': attribute type 2 has an invalid length. [ 364.028180][T15100] can: request_module (can-proto-0) failed. [ 364.053863][T15102] can: request_module (can-proto-0) failed. [ 364.152230][T15113] tipc: Resetting bearer [ 364.202814][T15118] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 364.251662][T15117] __nla_validate_parse: 2 callbacks suppressed [ 364.251725][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 364.251746][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2250'. [ 364.375722][T15113] v: left promiscuous mode [ 364.539711][T15138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2252'. [ 364.683343][T15121] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2252'. [ 364.694941][T12235] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.695007][T12235] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.695283][T12235] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.695357][T12235] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.696060][T12234] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.696138][T12234] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.758127][T15141] netlink: 'syz.1.2255': attribute type 1 has an invalid length. [ 364.806991][T15141] macvlan3: entered promiscuous mode [ 364.812513][T15141] macvlan3: entered allmulticast mode [ 364.819418][T15141] bond8: entered promiscuous mode [ 364.826173][T15141] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 364.846723][T15141] bond8: left promiscuous mode [ 364.998708][T15150] netlink: 'syz.3.2257': attribute type 4 has an invalid length. [ 365.008550][T15150] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2257'. [ 365.022173][T15150] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 365.071302][T15150] pimreg: entered allmulticast mode [ 365.122138][T15153] x_tables: ip_tables: osf match: only valid for protocol 6 [ 365.140441][T15153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2259'. [ 365.608214][T15178] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 365.821808][T15187] tap0: tun_chr_ioctl cmd 2148553947 [ 366.550513][T15231] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2276'. [ 366.864993][T15243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.372319][T15272] IPVS: Unknown mcast interface: rose0 [ 367.389882][T15269] geneve0: entered allmulticast mode [ 367.826874][T15296] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2290'. [ 367.946657][T15301] syzkaller0: entered promiscuous mode [ 367.952418][T15301] syzkaller0: entered allmulticast mode [ 368.129399][T15309] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2294'. [ 368.164065][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 368.292329][T15318] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 368.352139][T15327] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 368.516997][T15333] openvswitch: netlink: Multiple metadata blocks provided [ 368.827233][T15341] tipc: Enabled bearer , priority 0 [ 368.837769][T15341] syzkaller0: entered promiscuous mode [ 368.837810][T15341] syzkaller0: entered allmulticast mode [ 369.169637][ T31] audit: type=1800 audit(1788545766.076:5): pid=15346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2298" name=FFFFFFFFA002 dev="tmpfs" ino=2329 res=0 errno=0 [ 369.263145][T15361] __nla_validate_parse: 4 callbacks suppressed [ 369.288756][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2301'. [ 369.605431][T15369] openvswitch: netlink: Multiple metadata blocks provided [ 369.621768][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2308'. [ 369.784026][T15376] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2309'. [ 369.825376][ T5736] tipc: Node number set to 167837952 [ 370.048821][T15385] xt_CT: No such helper "pptp" [ 370.343144][T15400] bond5 (unregistering): Released all slaves [ 371.238663][T15460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2332'. [ 371.915343][T15491] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 371.922293][T15491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2345'. [ 371.988787][T15486] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2342'. [ 372.099875][T15486] syzkaller0: mtu greater than device maximum [ 372.120985][T15486] syzkaller0: entered promiscuous mode [ 372.121038][T15486] syzkaller0: entered allmulticast mode [ 372.336413][T15507] macvlan0: left promiscuous mode [ 372.350520][T15507] netlink: 'syz.4.2349': attribute type 2 has an invalid length. [ 372.600833][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2351'. [ 372.600892][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2351'. [ 373.354649][T15534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2359'. [ 373.781538][T15548] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2364'. [ 373.819738][ T1696] block nbd2: Possible stuck request ffff888027ece000: control (read@0,1024B). Runtime 30 seconds [ 373.821181][ T1696] block nbd2: Possible stuck request ffff888027ece1c0: control (read@1024,1024B). Runtime 30 seconds [ 373.821264][ T1696] block nbd2: Possible stuck request ffff888027ece380: control (read@2048,1024B). Runtime 30 seconds [ 373.821345][ T1696] block nbd2: Possible stuck request ffff888027ece540: control (read@3072,1024B). Runtime 30 seconds [ 373.930836][T15558] sctp: [Deprecated]: syz.2.2362 (pid 15558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.930836][T15558] Use struct sctp_sack_info instead [ 374.040211][T15559] sctp: [Deprecated]: syz.2.2362 (pid 15559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 374.040211][T15559] Use struct sctp_sack_info instead [ 374.303410][T15576] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 374.303461][T15576] __nla_validate_parse: 4 callbacks suppressed [ 374.308594][T15576] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2370'. [ 374.308669][T15576] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 374.425566][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2370'. [ 374.426223][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2370'. [ 374.451597][T15575] ip_tables: iptables: counters copy to user failed while replacing table [ 374.462583][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 374.462627][T15581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2369'. [ 374.462646][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 374.575639][T15585] xt_nat: multiple ranges no longer supported [ 374.874897][T15599] openvswitch: netlink: EtherType 300 is less than min 600 [ 374.899526][T15600] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2377'. [ 375.221720][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2382'. [ 375.241934][T15612] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 375.951643][T15660] netlink: 808 bytes leftover after parsing attributes in process `syz.1.2394'. [ 376.238959][T15660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2394'. [ 376.395216][T15679] x_tables: duplicate entry at hook 2 [ 376.491092][T15684] netlink: Conntrack attr has 4 unknown bytes [ 376.491152][T15684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.047326][T15701] sctp: [Deprecated]: syz.0.2403 (pid 15701) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.047326][T15701] Use struct sctp_sack_info instead [ 377.232456][T15713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.702324][T15728] syzkaller0: entered promiscuous mode [ 377.702377][T15728] syzkaller0: entered allmulticast mode [ 378.172842][T15755] macvlan0: entered promiscuous mode [ 378.282289][T15762] netlink: 'syz.1.2418': attribute type 1 has an invalid length. [ 378.666875][T15787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.870628][T15800] IPVS: sync thread started: state = MASTER, mcast_ifn = ipvlan0, syncid = 2, id = 0 [ 378.940556][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.379933][T15818] __nla_validate_parse: 6 callbacks suppressed [ 379.379987][T15818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2432'. [ 379.735994][T15837] tipc: Enabled bearer , priority 0 [ 379.781711][T15839] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2440'. [ 379.795926][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 379.886999][T15841] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2442'. [ 379.939552][T15839] team0: Port device team_slave_0 removed [ 380.016590][T15851] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2443'. [ 380.614461][ T4934] Bluetooth: hci3: command 0x0406 tx timeout [ 380.659523][T15877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2454'. [ 380.662009][T15877] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2454'. [ 381.326224][T15920] openvswitch: netlink: Multiple metadata blocks provided [ 381.353586][T15921] netlink: 'syz.1.2466': attribute type 28 has an invalid length. [ 381.362115][T15921] netlink: 'syz.1.2466': attribute type 3 has an invalid length. [ 381.370532][T15921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2466'. [ 381.447733][T15923] netlink: 'syz.3.2469': attribute type 1 has an invalid length. [ 381.447784][T15923] netlink: 'syz.3.2469': attribute type 2 has an invalid length. [ 381.505895][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2469'. [ 381.539540][T15925] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2471'. [ 381.900110][T15946] syzkaller0: entered promiscuous mode [ 381.900155][T15946] syzkaller0: entered allmulticast mode [ 381.917593][T15944] tipc: Enabled bearer , priority 0 [ 381.929932][T15943] tipc: Resetting bearer [ 381.976113][T15943] tipc: Disabling bearer [ 382.292759][T15965] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.314953][T15965] Unsupported ieee802154 address type: 0 [ 382.337806][T15966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.488563][T15975] netlink: 'syz.4.2482': attribute type 7 has an invalid length. [ 382.488605][T15975] netlink: 'syz.4.2482': attribute type 8 has an invalid length. [ 382.910165][T15995] tipc: Invalid UDP bearer configuration [ 382.911829][T15995] tipc: Enabling of bearer rejected, failed to enable media [ 382.935175][T15995] netlink: 'syz.2.2487': attribute type 21 has an invalid length. [ 382.972424][T16001] netlink: 'syz.0.2490': attribute type 11 has an invalid length. [ 383.004642][T16001] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 383.014385][T16001] gretap2: entered promiscuous mode [ 383.019978][T16001] gretap2: entered allmulticast mode [ 383.638877][T16025] tipc: Enabling of bearer rejected, failed to enable media [ 384.077088][T16037] veth9: entered allmulticast mode [ 384.326424][T16033] veth11: entered allmulticast mode [ 384.412572][T16061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.423055][T16061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.459837][T16046] syzkaller0: entered promiscuous mode [ 384.459887][T16046] syzkaller0: entered allmulticast mode [ 384.631222][T16070] syzkaller0: entered promiscuous mode [ 384.638247][T16070] syzkaller0: entered allmulticast mode [ 384.812851][T16078] __nla_validate_parse: 9 callbacks suppressed [ 384.812904][T16078] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2508'. [ 384.871977][T16080] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 385.132982][T16097] netlink: 'syz.3.2507': attribute type 1 has an invalid length. [ 385.220334][T16100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2512'. [ 387.956154][T16097] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 388.227434][T16111] sock: sock_set_timeout: `syz.4.2513' (pid 16111) tries to set negative timeout [ 388.341841][T16110] syzkaller1: entered promiscuous mode [ 388.341907][T16110] syzkaller1: entered allmulticast mode [ 388.529028][T16110] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2514'. [ 388.545337][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2514'. [ 389.333971][T16160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2525'. [ 389.722778][T16176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2528'. [ 389.723186][T16176] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2528'. [ 389.825543][T16176] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2528'. [ 390.007593][T16180] netlink: 'syz.4.2529': attribute type 2 has an invalid length. [ 390.750158][T16208] xt_TPROXY: Can be used only with -p tcp or -p udp [ 391.592122][T16239] netlink: Unknown nat attribute (0) [ 391.592180][T16239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.594036][T16239] SET target dimension over the limit! [ 391.686877][T16230] syzkaller0: entered promiscuous mode [ 391.686933][T16230] syzkaller0: entered allmulticast mode [ 391.876253][T16247] netlink: 'syz.4.2544': attribute type 4 has an invalid length. [ 392.059257][T16250] netlink: 205048 bytes leftover after parsing attributes in process `syz.2.2546'. [ 392.156901][T16256] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 392.203906][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2548'. [ 392.409285][T16255] netlink: 'syz.3.2548': attribute type 4 has an invalid length. [ 392.409332][T16255] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2548'. [ 392.737884][T16273] tc action pedit 'at' offset -2147483645 out of bounds [ 392.766190][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2550'. [ 392.779789][T16276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2551'. [ 392.851060][T16279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 392.871551][T16276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2551'. [ 392.871599][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2551'. [ 393.023327][T16270] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 393.030744][T16270] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 393.190073][T16286] netlink: 'syz.1.2555': attribute type 9 has an invalid length. [ 393.190123][T16286] netlink: 'syz.1.2555': attribute type 4 has an invalid length. [ 393.318304][T16293] netlink: 'syz.4.2557': attribute type 4 has an invalid length. [ 393.390323][T16294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2556'. [ 393.520565][T16301] netlink: 'syz.1.2559': attribute type 9 has an invalid length. [ 393.992784][T16310] syzkaller0: entered promiscuous mode [ 393.999618][T16310] syzkaller0: entered allmulticast mode [ 394.528410][T16334] tipc: Resetting bearer [ 394.598523][T16339] netlink: 'syz.4.2569': attribute type 9 has an invalid length. [ 394.615762][T16334] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 394.682948][T16338] ip6t_srh: unknown srh match flags 4000 [ 395.005567][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2573'. [ 395.382246][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2577'. [ 395.412540][T16370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 395.420331][T16370] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2577'. [ 395.477064][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'. [ 395.816444][T16391] set match dimension is over the limit! [ 395.956782][T16397] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:3620 [ 396.158729][T16409] syzkaller1: entered promiscuous mode [ 396.158787][T16409] syzkaller1: entered allmulticast mode [ 396.211805][T16409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.224844][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2592'. [ 396.273277][T16420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2590'. [ 396.439197][T16426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2593'. [ 396.451836][T16428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2593'. [ 396.630644][T16440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.743645][T16448] veth1_macvtap: left promiscuous mode [ 396.778586][T16433] syzkaller0: entered promiscuous mode [ 396.778632][T16433] syzkaller0: entered allmulticast mode [ 396.793350][T16448] bridge1: entered allmulticast mode [ 396.803002][T16448] pimreg: left allmulticast mode [ 396.960488][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2601'. [ 397.105386][T16447] bridge1: left allmulticast mode [ 397.519472][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'. [ 397.595346][T16474] syzkaller0: entered promiscuous mode [ 397.595388][T16474] syzkaller0: entered allmulticast mode [ 398.593262][T16542] macvlan0: entered promiscuous mode [ 398.603991][T16550] openvswitch: netlink: IP tunnel dst address not specified [ 399.053200][T16568] netlink: 'syz.2.2629': attribute type 4 has an invalid length. [ 401.332094][T16529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.455461][T16586] xt_MASQUERADE: bad MAP_IPS. [ 401.611045][T16592] __nla_validate_parse: 8 callbacks suppressed [ 401.617922][T16592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2636'. [ 401.617963][T16592] openvswitch: netlink: Flow actions attr not present in new flow. [ 401.650688][T16596] xt_IDLETIMER: label is empty or not nul-terminated [ 401.668720][T16596] xt_IDLETIMER: label is empty or not nul-terminated [ 401.669172][T16596] xt_IDLETIMER: label is empty or not nul-terminated [ 401.670787][T16596] xt_IDLETIMER: label is empty or not nul-terminated [ 401.728815][T16596] xt_IDLETIMER: label is empty or not nul-terminated [ 401.743525][T16596] xt_IDLETIMER: label is empty or not nul-terminated [ 401.756035][T16596] xt_IDLETIMER: label is empty or not nul-terminated [ 401.769378][T16596] xt_IDLETIMER: label is empty or not nul-terminated [ 401.781582][T16596] xt_IDLETIMER: label is empty or not nul-terminated [ 401.791167][T16596] xt_IDLETIMER: label is empty or not nul-terminated [ 401.804367][T16602] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 402.039780][T16609] netlink: 'syz.3.2643': attribute type 10 has an invalid length. [ 402.048060][T16609] veth0_to_bond: left allmulticast mode [ 402.064626][T16609] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 402.082252][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2642'. [ 402.153901][T16613] tipc: Enabling of bearer rejected, media not registered [ 402.179569][T16615] openvswitch: netlink: Multiple metadata blocks provided [ 402.613143][T16638] netlink: 'syz.2.2649': attribute type 1 has an invalid length. [ 402.647775][T16634] bond12: option mode: invalid value (10) [ 403.080399][T16634] bond12 (unregistering): Released all slaves [ 403.199088][T16641] erspan1: entered allmulticast mode [ 403.362489][T16655] batadv0: entered promiscuous mode [ 403.371934][T16655] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 403.371998][T16655] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 403.413238][T16655] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 403.498162][T16663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2658'. [ 403.573849][T16665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2658'. [ 403.905882][ T1696] block nbd2: Possible stuck request ffff888027ece000: control (read@0,1024B). Runtime 60 seconds [ 403.905968][ T1696] block nbd2: Possible stuck request ffff888027ece1c0: control (read@1024,1024B). Runtime 60 seconds [ 403.906019][ T1696] block nbd2: Possible stuck request ffff888027ece380: control (read@2048,1024B). Runtime 60 seconds [ 403.906052][ T1696] block nbd2: Possible stuck request ffff888027ece540: control (read@3072,1024B). Runtime 60 seconds [ 403.986802][T16682] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.2665'. [ 404.138843][T16685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.363617][T16694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2670'. [ 404.388073][T16694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2670'. [ 404.388231][T16694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2670'. [ 404.724791][T16718] C: renamed from lo [ 404.748023][T16718] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 404.949260][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2678'. [ 404.972230][T16725] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 405.129091][T16730] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2681'. [ 405.349099][T16747] sock: sock_timestamping_bind_phc: sock not bind to device [ 405.360250][T16747] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 405.408400][T16750] sock: sock_timestamping_bind_phc: sock not bind to device [ 405.412491][T16752] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 405.751982][T16764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.762586][T16764] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.769817][T16764] tipc: Resetting bearer [ 405.865271][T16764] veth1_vlan: left promiscuous mode [ 405.872140][T16764] v: entered promiscuous mode [ 405.879980][T16764] veth1_vlan: entered promiscuous mode [ 405.902009][T16764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.911250][T16764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.920606][T16764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.933541][T16764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.942811][T16764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.956537][T16764] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.965941][T16764] 8021q: adding VLAN 0 to HW filter on device bond4 [ 406.002369][T16764] 8021q: adding VLAN 0 to HW filter on device bond5 [ 406.013386][T16764] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 406.035498][ T1363] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.035726][ T1363] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.035888][ T1363] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.035973][ T1363] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.036153][ T1363] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.036227][ T1363] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.830169][T16800] __nla_validate_parse: 4 callbacks suppressed [ 406.838991][T16800] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2697'. [ 407.007457][T16812] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2702'. [ 407.183967][T16823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2705'. [ 407.200855][T16823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2705'. [ 407.222144][T16819] xt_TCPMSS: Only works on TCP SYN packets [ 407.578801][T16838] wireguard1: entered promiscuous mode [ 407.881012][T16855] netlink: 'syz.0.2714': attribute type 1 has an invalid length. [ 407.881060][T16855] netlink: 16138 bytes leftover after parsing attributes in process `syz.0.2714'. [ 407.917053][T16855] netlink: 'syz.0.2714': attribute type 1 has an invalid length. [ 407.917098][T16855] netlink: 16138 bytes leftover after parsing attributes in process `syz.0.2714'. [ 407.976301][T16859] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2716'. [ 408.151349][T16863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2717'. [ 408.225937][T16872] netlink: 'syz.1.2718': attribute type 13 has an invalid length. [ 408.247406][T16875] netlink: zone id is out of range [ 408.247443][T16875] netlink: zone id is out of range [ 408.247477][T16875] netlink: zone id is out of range [ 408.247490][T16875] netlink: zone id is out of range [ 408.247501][T16875] netlink: zone id is out of range [ 408.247513][T16875] netlink: zone id is out of range [ 408.266960][T16872] erspan0: refused to change device tx_queue_len [ 408.267967][T16872] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 408.268957][T16874] netlink: zone id is out of range [ 408.268969][T16874] netlink: zone id is out of range [ 408.268978][T16874] netlink: zone id is out of range [ 408.566104][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2722'. [ 408.645572][T16890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2725'. [ 409.968119][T16945] ipvlan2: entered allmulticast mode [ 409.968170][T16945] virt_wifi0: entered allmulticast mode [ 409.989580][T16944] can: request_module (can-proto-0) failed. [ 410.125393][T16953] can: request_module (can-proto-0) failed. [ 410.443118][T16976] netlink: 'syz.1.2749': attribute type 4 has an invalid length. [ 410.767643][T16990] netlink: 'syz.1.2754': attribute type 10 has an invalid length. [ 411.535737][T17017] batman_adv: batadv0: Adding interface: veth0 [ 411.542987][T17017] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.569349][T17017] batman_adv: batadv0: Interface activated: veth0 [ 411.737449][T17025] netlink: 'syz.4.2766': attribute type 12 has an invalid length. [ 411.754823][T17030] netlink: 'syz.4.2766': attribute type 12 has an invalid length. [ 412.008599][T17048] __nla_validate_parse: 6 callbacks suppressed [ 412.009242][T17048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2768'. [ 412.009295][T17048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2768'. [ 412.074942][T17051] netlink: 'syz.0.2768': attribute type 1 has an invalid length. [ 412.251087][T17057] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 412.502058][T17062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2776'. [ 412.655451][T17065] bond7: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 412.783662][T17065] bond7 (unregistering): Released all slaves [ 412.890560][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2778'. [ 413.187351][T17087] 8021q: VLANs not supported on bond0 [ 414.135205][T17114] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2787'. [ 414.218307][T17115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2788'. [ 414.218378][T17115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2788'. [ 414.662327][T17128] syzkaller0: entered promiscuous mode [ 414.662371][T17128] syzkaller0: entered allmulticast mode [ 414.958285][T17141] netlink: 'syz.2.2795': attribute type 1 has an invalid length. [ 417.642153][T17130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.231200][T17205] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2809'. [ 418.453138][T17214] syzkaller0: entered promiscuous mode [ 418.460143][T17214] syzkaller0: entered allmulticast mode [ 418.611897][T17223] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 418.651353][T17226] netlink: 'syz.2.2813': attribute type 11 has an invalid length. [ 419.099697][T17236] sctp: [Deprecated]: syz.4.2818 (pid 17236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.099697][T17236] Use struct sctp_sack_info instead [ 419.509286][T17262] net_ratelimit: 60 callbacks suppressed [ 419.515329][T17262] ip_tables: iptables: counters copy to user failed while replacing table [ 424.294266][ T4984] udevd[4984]: worker [12271] /devices/virtual/block/nbd2 is taking a long time [ 433.656659][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 433.666515][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 433.675874][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 433.685897][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 433.693739][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 433.976442][ T1696] block nbd2: Possible stuck request ffff888027ece000: control (read@0,1024B). Runtime 90 seconds [ 433.976510][ T1696] block nbd2: Possible stuck request ffff888027ece1c0: control (read@1024,1024B). Runtime 90 seconds [ 433.976611][ T1696] block nbd2: Possible stuck request ffff888027ece380: control (read@2048,1024B). Runtime 90 seconds [ 433.976704][ T1696] block nbd2: Possible stuck request ffff888027ece540: control (read@3072,1024B). Runtime 90 seconds [ 434.221680][T17282] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.222100][T17282] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.223137][T17282] bridge_slave_0: entered allmulticast mode [ 434.228597][T17282] bridge_slave_0: entered promiscuous mode [ 434.235156][T17282] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.235433][T17282] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.236523][T17282] bridge_slave_1: entered allmulticast mode [ 434.239477][T17282] bridge_slave_1: entered promiscuous mode [ 434.295959][T17282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.306072][T17282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.337642][T17282] team0: Port device team_slave_0 added [ 434.344022][T17282] team0: Port device team_slave_1 added [ 434.372322][T17282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.372362][T17282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.372470][T17282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.382508][T17282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.382555][T17282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.382640][T17282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.485634][T17282] hsr_slave_0: entered promiscuous mode [ 434.489410][T17282] hsr_slave_1: entered promiscuous mode [ 434.492067][T17282] debugfs: 'hsr0' already exists in 'hsr' [ 434.492133][T17282] Cannot create hsr debugfs directory [ 434.840076][ T4934] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.851615][ T4934] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.860487][ T4934] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.869368][ T4934] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.881786][ T4934] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 435.061088][ T5622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 435.081159][ T5626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 435.091816][ T5626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 435.096384][ T5626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 435.098142][ T5626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 435.116004][ T4934] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 435.155560][ T5626] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 435.168257][ T5626] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 435.181186][ T5626] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 435.189308][ T5626] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 435.736002][ T5626] Bluetooth: hci5: command tx timeout [ 436.300565][T17302] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.300960][T17302] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.301368][T17302] bridge_slave_0: entered allmulticast mode [ 436.308093][T17302] bridge_slave_0: entered promiscuous mode [ 436.352088][T17302] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.352455][T17302] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.353617][T17302] bridge_slave_1: entered allmulticast mode [ 436.367187][T17302] bridge_slave_1: entered promiscuous mode [ 436.439690][T17302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.449791][T17302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.486831][T17306] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.487148][T17306] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.487520][T17306] bridge_slave_0: entered allmulticast mode [ 436.492693][T17306] bridge_slave_0: entered promiscuous mode [ 436.522771][T17306] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.526670][T17306] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.528026][T17306] bridge_slave_1: entered allmulticast mode [ 436.532744][T17306] bridge_slave_1: entered promiscuous mode [ 436.558789][T17307] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.559144][T17307] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.559509][T17307] bridge_slave_0: entered allmulticast mode [ 436.566754][T17307] bridge_slave_0: entered promiscuous mode [ 436.586333][T17302] team0: Port device team_slave_0 added [ 436.603929][T17307] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.605138][T17307] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.607371][T17307] bridge_slave_1: entered allmulticast mode [ 436.612354][T17307] bridge_slave_1: entered promiscuous mode [ 436.622054][T17302] team0: Port device team_slave_1 added [ 436.671500][T17306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.704773][T17306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.733352][T17307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.745247][T17302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.745285][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.745315][T17302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.806872][T17307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.808358][T17302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.808400][T17302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.808499][T17302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.822000][T17306] team0: Port device team_slave_0 added [ 436.893664][T17306] team0: Port device team_slave_1 added [ 436.934686][ T5626] Bluetooth: hci6: command tx timeout [ 436.943257][T17307] team0: Port device team_slave_0 added [ 437.006155][T17307] team0: Port device team_slave_1 added [ 437.011432][T17306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.011482][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.011554][T17306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.069758][T17302] hsr_slave_0: entered promiscuous mode [ 437.076358][T17302] hsr_slave_1: entered promiscuous mode [ 437.078575][T17302] debugfs: 'hsr0' already exists in 'hsr' [ 437.078631][T17302] Cannot create hsr debugfs directory [ 437.103152][ T5622] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 437.110130][T17306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.110182][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.110271][T17306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.155700][ T5622] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 437.163370][ T5622] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 437.179068][ T5622] Bluetooth: hci7: command tx timeout [ 437.184032][ T5622] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 437.185975][ T5622] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 437.227309][T17307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.234521][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.261211][T17307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.261896][ T5622] Bluetooth: hci8: command tx timeout [ 437.303223][T17307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.303275][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.303306][T17307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.442558][T17306] hsr_slave_0: entered promiscuous mode [ 437.447134][T17306] hsr_slave_1: entered promiscuous mode [ 437.448753][T17306] debugfs: 'hsr0' already exists in 'hsr' [ 437.448775][T17306] Cannot create hsr debugfs directory [ 437.520315][T17307] hsr_slave_0: entered promiscuous mode [ 437.523196][T17307] hsr_slave_1: entered promiscuous mode [ 437.529396][T17307] debugfs: 'hsr0' already exists in 'hsr' [ 437.529489][T17307] Cannot create hsr debugfs directory [ 437.816515][ T5622] Bluetooth: hci5: command tx timeout [ 438.344573][T17355] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.344938][T17355] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.347126][T17355] bridge_slave_0: entered allmulticast mode [ 438.351944][T17355] bridge_slave_0: entered promiscuous mode [ 438.370751][T17355] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.371207][T17355] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.371591][T17355] bridge_slave_1: entered allmulticast mode [ 438.379112][T17355] bridge_slave_1: entered promiscuous mode [ 438.422376][T17355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.433102][T17355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.464971][T17355] team0: Port device team_slave_0 added [ 438.471599][T17355] team0: Port device team_slave_1 added [ 438.498948][T17355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.499001][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.499030][T17355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.505623][T17355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.505705][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.505781][T17355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.605367][T17355] hsr_slave_0: entered promiscuous mode [ 438.608157][T17355] hsr_slave_1: entered promiscuous mode [ 438.610069][T17355] debugfs: 'hsr0' already exists in 'hsr' [ 438.610121][T17355] Cannot create hsr debugfs directory [ 439.014316][ T5622] Bluetooth: hci6: command tx timeout [ 439.254434][ T5626] Bluetooth: hci7: command tx timeout [ 439.260094][ T5622] Bluetooth: hci9: command tx timeout [ 439.334400][ T5622] Bluetooth: hci8: command tx timeout [ 439.894362][ T5622] Bluetooth: hci5: command tx timeout [ 440.378008][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.104331][ T5622] Bluetooth: hci6: command tx timeout [ 441.334330][ T5622] Bluetooth: hci9: command tx timeout [ 441.334393][ T5622] Bluetooth: hci7: command tx timeout [ 441.415658][ T5622] Bluetooth: hci8: command tx timeout [ 441.974960][ T5622] Bluetooth: hci5: command tx timeout [ 443.174412][ T5622] Bluetooth: hci6: command tx timeout [ 443.414698][ T5622] Bluetooth: hci7: command tx timeout [ 443.414718][ T5626] Bluetooth: hci9: command tx timeout [ 443.494331][ T5626] Bluetooth: hci8: command tx timeout [ 445.496080][ T5626] Bluetooth: hci9: command tx timeout [ 464.057220][ T1696] block nbd2: Possible stuck request ffff888027ece000: control (read@0,1024B). Runtime 120 seconds [ 464.057361][ T1696] block nbd2: Possible stuck request ffff888027ece1c0: control (read@1024,1024B). Runtime 120 seconds [ 464.057456][ T1696] block nbd2: Possible stuck request ffff888027ece380: control (read@2048,1024B). Runtime 120 seconds [ 464.057559][ T1696] block nbd2: Possible stuck request ffff888027ece540: control (read@3072,1024B). Runtime 120 seconds [ 494.138540][ T1696] block nbd2: Possible stuck request ffff888027ece000: control (read@0,1024B). Runtime 150 seconds [ 494.138621][ T1696] block nbd2: Possible stuck request ffff888027ece1c0: control (read@1024,1024B). Runtime 150 seconds [ 494.138694][ T1696] block nbd2: Possible stuck request ffff888027ece380: control (read@2048,1024B). Runtime 150 seconds [ 494.138787][ T1696] block nbd2: Possible stuck request ffff888027ece540: control (read@3072,1024B). Runtime 150 seconds [ 494.265775][ T5622] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 494.275446][ T5622] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 494.282914][ T5622] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 494.287124][ T5622] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 494.288757][ T5622] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 494.821497][T17384] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.821931][T17384] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.822324][T17384] bridge_slave_0: entered allmulticast mode [ 494.827270][T17384] bridge_slave_0: entered promiscuous mode [ 494.835189][T17384] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.835635][T17384] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.836044][T17384] bridge_slave_1: entered allmulticast mode [ 494.840117][T17384] bridge_slave_1: entered promiscuous mode [ 494.896956][T17384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.907981][T17384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.937882][T17384] team0: Port device team_slave_0 added [ 494.944873][T17384] team0: Port device team_slave_1 added [ 494.970858][T17384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.970893][T17384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.971047][T17384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.978159][T17384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.978175][T17384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.978204][T17384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.083931][T17384] hsr_slave_0: entered promiscuous mode [ 495.087585][T17384] hsr_slave_1: entered promiscuous mode [ 495.089624][T17384] debugfs: 'hsr0' already exists in 'hsr' [ 495.089645][T17384] Cannot create hsr debugfs directory [ 495.413020][ T5626] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 495.426869][ T5626] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 495.438185][ T5626] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 495.449878][ T5626] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 495.460163][ T5626] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 495.578698][ T4934] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 495.593268][ T4934] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 495.595814][ T4934] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 495.610850][ T4934] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 495.618969][ T4934] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 495.631487][ T4934] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 495.640645][ T4934] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 495.648334][ T4934] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 495.658947][ T4934] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 495.667382][ T5626] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 496.374453][ T4934] Bluetooth: hci10: command tx timeout [ 496.771288][T17404] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.771719][T17404] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.772007][T17404] bridge_slave_0: entered allmulticast mode [ 496.779906][T17404] bridge_slave_0: entered promiscuous mode [ 496.801053][T17404] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.801250][T17404] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.802504][T17404] bridge_slave_1: entered allmulticast mode [ 496.808872][T17404] bridge_slave_1: entered promiscuous mode [ 496.910975][T17404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.926637][T17404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.010349][T17404] team0: Port device team_slave_0 added [ 497.020754][T17404] team0: Port device team_slave_1 added [ 497.128311][T17406] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.128719][T17406] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.129113][T17406] bridge_slave_0: entered allmulticast mode [ 497.138105][T17406] bridge_slave_0: entered promiscuous mode [ 497.149926][T17404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.149976][T17404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.150059][T17404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.203519][T17406] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.203993][T17406] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.207082][T17406] bridge_slave_1: entered allmulticast mode [ 497.212714][T17406] bridge_slave_1: entered promiscuous mode [ 497.221578][T17404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.221629][T17404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.221714][T17404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.392329][T17406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.425099][ T4934] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 497.442151][ T4934] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 497.449016][T17406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.463338][ T4934] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 497.473960][ T4934] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 497.482857][ T4934] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 497.494452][ T4934] Bluetooth: hci11: command tx timeout [ 497.509370][T17404] hsr_slave_0: entered promiscuous mode [ 497.521599][T17404] hsr_slave_1: entered promiscuous mode [ 497.530679][T17404] debugfs: 'hsr0' already exists in 'hsr' [ 497.537886][T17404] Cannot create hsr debugfs directory [ 497.560301][T17409] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.561598][T17409] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.562695][T17409] bridge_slave_0: entered allmulticast mode [ 497.567724][T17409] bridge_slave_0: entered promiscuous mode [ 497.620553][T17409] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.621041][T17409] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.621413][T17409] bridge_slave_1: entered allmulticast mode [ 497.638553][T17409] bridge_slave_1: entered promiscuous mode [ 497.651220][T17406] team0: Port device team_slave_0 added [ 497.708840][T17406] team0: Port device team_slave_1 added [ 497.734855][ T4934] Bluetooth: hci13: command tx timeout [ 497.744676][ T4934] Bluetooth: hci12: command tx timeout [ 497.767419][T17409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.810225][T17409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.825617][T17406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.825653][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.826048][T17406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.881835][T17406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.881883][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.881913][T17406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.959921][T17409] team0: Port device team_slave_0 added [ 497.969259][T17409] team0: Port device team_slave_1 added [ 498.062355][T17409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.070243][T17409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.096690][T17409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.110354][T17409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.117642][T17409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.144177][T17409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.162088][T17406] hsr_slave_0: entered promiscuous mode [ 498.165981][T17406] hsr_slave_1: entered promiscuous mode [ 498.168001][T17406] debugfs: 'hsr0' already exists in 'hsr' [ 498.168022][T17406] Cannot create hsr debugfs directory [ 498.347770][T17409] hsr_slave_0: entered promiscuous mode [ 498.350876][T17409] hsr_slave_1: entered promiscuous mode [ 498.355311][T17409] debugfs: 'hsr0' already exists in 'hsr' [ 498.355351][T17409] Cannot create hsr debugfs directory [ 498.454449][ T4934] Bluetooth: hci10: command tx timeout [ 498.910086][T17456] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.910519][T17456] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.910909][T17456] bridge_slave_0: entered allmulticast mode [ 498.917148][T17456] bridge_slave_0: entered promiscuous mode [ 498.922543][T17456] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.923013][T17456] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.923339][T17456] bridge_slave_1: entered allmulticast mode [ 498.928270][T17456] bridge_slave_1: entered promiscuous mode [ 498.988117][T17456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.010042][T17456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.051718][T17456] team0: Port device team_slave_0 added [ 499.061428][T17456] team0: Port device team_slave_1 added [ 499.121238][T17456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.130585][T17456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.130661][T17456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.140656][T17456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.140707][T17456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.140781][T17456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.266973][T17456] hsr_slave_0: entered promiscuous mode [ 499.269780][T17456] hsr_slave_1: entered promiscuous mode [ 499.271863][T17456] debugfs: 'hsr0' already exists in 'hsr' [ 499.271916][T17456] Cannot create hsr debugfs directory [ 499.494505][ T4934] Bluetooth: hci14: command tx timeout [ 499.574947][ T4934] Bluetooth: hci11: command tx timeout [ 499.814427][ T5622] Bluetooth: hci13: command tx timeout [ 499.814608][ T4934] Bluetooth: hci12: command tx timeout [ 500.534454][ T4934] Bluetooth: hci10: command tx timeout [ 501.575436][ T4934] Bluetooth: hci14: command tx timeout [ 501.654415][ T4934] Bluetooth: hci11: command tx timeout [ 501.816247][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.894298][ T4934] Bluetooth: hci12: command tx timeout [ 501.894311][ T5622] Bluetooth: hci13: command tx timeout [ 502.614615][ T5622] Bluetooth: hci10: command tx timeout [ 503.654281][ T5622] Bluetooth: hci14: command tx timeout [ 503.734482][ T5622] Bluetooth: hci11: command tx timeout [ 503.974292][ T5622] Bluetooth: hci13: command tx timeout [ 503.974327][ T4934] Bluetooth: hci12: command tx timeout [ 505.735839][ T4934] Bluetooth: hci14: command tx timeout [ 524.023752][ T4984] udevd[4984]: worker [12271] /devices/virtual/block/nbd2 timeout; kill it [ 524.028295][ T4984] udevd[4984]: seq 18634 '/devices/virtual/block/nbd2' killed [ 524.215927][ T1696] block nbd2: Possible stuck request ffff888027ece000: control (read@0,1024B). Runtime 180 seconds [ 524.215996][ T1696] block nbd2: Possible stuck request ffff888027ece1c0: control (read@1024,1024B). Runtime 180 seconds [ 524.216046][ T1696] block nbd2: Possible stuck request ffff888027ece380: control (read@2048,1024B). Runtime 180 seconds [ 524.216081][ T1696] block nbd2: Possible stuck request ffff888027ece540: control (read@3072,1024B). Runtime 180 seconds [ 554.296170][ T1696] block nbd2: Possible stuck request ffff888027ece000: control (read@0,1024B). Runtime 210 seconds [ 554.296237][ T1696] block nbd2: Possible stuck request ffff888027ece1c0: control (read@1024,1024B). Runtime 210 seconds [ 554.296285][ T1696] block nbd2: Possible stuck request ffff888027ece380: control (read@2048,1024B). Runtime 210 seconds [ 554.296318][ T1696] block nbd2: Possible stuck request ffff888027ece540: control (read@3072,1024B). Runtime 210 seconds [ 554.780149][ T5622] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 554.788692][ T5622] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 554.794879][ T5622] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 554.801198][ T5622] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 554.803095][ T5622] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 555.311226][T17487] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.311681][T17487] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.312881][T17487] bridge_slave_0: entered allmulticast mode [ 555.319057][T17487] bridge_slave_0: entered promiscuous mode [ 555.339681][T17487] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.339989][T17487] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.340465][T17487] bridge_slave_1: entered allmulticast mode [ 555.347118][T17487] bridge_slave_1: entered promiscuous mode [ 555.387521][T17487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.397545][T17487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.430446][T17487] team0: Port device team_slave_0 added [ 555.437766][T17487] team0: Port device team_slave_1 added [ 555.463609][T17487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.463663][T17487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.463693][T17487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.470945][T17487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.470963][T17487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.470997][T17487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.572958][T17487] hsr_slave_0: entered promiscuous mode [ 555.577061][T17487] hsr_slave_1: entered promiscuous mode [ 555.578874][T17487] debugfs: 'hsr0' already exists in 'hsr' [ 555.578895][T17487] Cannot create hsr debugfs directory [ 555.937359][ T5622] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 555.952807][ T5622] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 555.960807][ T5622] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 555.969184][ T5622] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 555.977484][ T5622] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 556.057806][ T5622] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 556.068962][ T5622] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 556.079197][ T5622] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 556.087472][ T5622] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 556.099458][ T5622] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 556.169499][ T5622] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 556.188893][ T5622] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 556.201286][ T5622] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 556.220653][ T5622] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 556.230396][ T5622] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 556.867084][ T4934] Bluetooth: hci15: command tx timeout [ 557.228809][T17507] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.229141][T17507] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.229520][T17507] bridge_slave_0: entered allmulticast mode [ 557.236290][T17507] bridge_slave_0: entered promiscuous mode [ 557.270969][T17507] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.271374][T17507] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.271845][T17507] bridge_slave_1: entered allmulticast mode [ 557.278448][T17507] bridge_slave_1: entered promiscuous mode [ 557.346877][T17507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.372927][T17507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.435368][T17507] team0: Port device team_slave_0 added [ 557.450033][T17507] team0: Port device team_slave_1 added [ 557.509357][T17507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.509394][T17507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.509422][T17507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.522740][T17507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.522789][T17507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.522863][T17507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.707931][T17507] hsr_slave_0: entered promiscuous mode [ 557.710772][T17507] hsr_slave_1: entered promiscuous mode [ 557.712661][T17507] debugfs: 'hsr0' already exists in 'hsr' [ 557.712716][T17507] Cannot create hsr debugfs directory [ 557.788416][T17512] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.789701][T17512] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.790089][T17512] bridge_slave_0: entered allmulticast mode [ 557.797359][T17512] bridge_slave_0: entered promiscuous mode [ 557.855050][T17512] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.855471][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.856565][T17512] bridge_slave_1: entered allmulticast mode [ 557.861390][T17512] bridge_slave_1: entered promiscuous mode [ 557.870146][T17509] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.870458][T17509] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.872238][T17509] bridge_slave_0: entered allmulticast mode [ 557.877797][T17509] bridge_slave_0: entered promiscuous mode [ 557.936549][T17509] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.936803][T17509] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.938087][T17509] bridge_slave_1: entered allmulticast mode [ 557.943853][T17509] bridge_slave_1: entered promiscuous mode [ 558.033490][T17512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.054564][ T4934] Bluetooth: hci16: command tx timeout [ 558.088190][ T5622] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 558.097990][T17512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.109918][ T5622] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 558.117855][ T5622] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 558.126202][ T5622] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 558.133883][ T5622] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 558.157767][T17509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.212609][T17509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.223469][ T4934] Bluetooth: hci17: command tx timeout [ 558.271218][T17512] team0: Port device team_slave_0 added [ 558.299149][T17512] team0: Port device team_slave_1 added [ 558.305177][ T4934] Bluetooth: hci18: command tx timeout [ 558.316246][T17509] team0: Port device team_slave_0 added [ 558.351751][T17509] team0: Port device team_slave_1 added [ 558.416623][T17512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.416678][T17512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.416708][T17512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.481797][T17512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.481847][T17512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.481894][T17512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.534771][T17509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.534808][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.534852][T17509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.562229][T17509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.562283][T17509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.562364][T17509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.695416][T17512] hsr_slave_0: entered promiscuous mode [ 558.702326][T17512] hsr_slave_1: entered promiscuous mode [ 558.709395][T17512] debugfs: 'hsr0' already exists in 'hsr' [ 558.715586][T17512] Cannot create hsr debugfs directory [ 558.784945][T17509] hsr_slave_0: entered promiscuous mode [ 558.791621][T17509] hsr_slave_1: entered promiscuous mode [ 558.798646][T17509] debugfs: 'hsr0' already exists in 'hsr' [ 558.804734][T17509] Cannot create hsr debugfs directory [ 558.945388][ T4934] Bluetooth: hci15: command tx timeout [ 559.425472][T17559] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.429602][T17559] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.430728][T17559] bridge_slave_0: entered allmulticast mode [ 559.436977][T17559] bridge_slave_0: entered promiscuous mode [ 559.462961][T17559] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.463226][T17559] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.463658][T17559] bridge_slave_1: entered allmulticast mode [ 559.470165][T17559] bridge_slave_1: entered promiscuous mode [ 559.516419][T17559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.537398][T17559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.583094][T17559] team0: Port device team_slave_0 added [ 559.590710][T17559] team0: Port device team_slave_1 added [ 559.630122][T17559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.630176][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.630205][T17559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.637605][T17559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.637621][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.637651][T17559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.745391][T17559] hsr_slave_0: entered promiscuous mode [ 559.748276][T17559] hsr_slave_1: entered promiscuous mode [ 559.750570][T17559] debugfs: 'hsr0' already exists in 'hsr' [ 559.750629][T17559] Cannot create hsr debugfs directory [ 560.134217][ T4934] Bluetooth: hci16: command tx timeout [ 560.215728][ T4934] Bluetooth: hci19: command tx timeout [ 560.216116][ T4934] Bluetooth: hci5: command 0x0406 tx timeout [ 560.216256][ T4934] Bluetooth: hci6: command 0x0406 tx timeout [ 560.217184][ T4934] Bluetooth: hci7: command 0x0406 tx timeout [ 560.217685][ T4934] Bluetooth: hci8: command 0x0406 tx timeout [ 560.217752][ T4934] Bluetooth: hci9: command 0x0406 tx timeout [ 560.294838][T17561] Bluetooth: hci17: command tx timeout [ 560.374696][ T5622] Bluetooth: hci18: command tx timeout [ 561.014330][ T5622] Bluetooth: hci15: command tx timeout [ 562.214519][ T5622] Bluetooth: hci16: command tx timeout [ 562.295025][ T5622] Bluetooth: hci19: command tx timeout [ 562.374429][ T5622] Bluetooth: hci17: command tx timeout [ 562.454488][ T5622] Bluetooth: hci18: command tx timeout [ 563.094311][ T5622] Bluetooth: hci15: command tx timeout [ 563.256867][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.294190][ T5622] Bluetooth: hci16: command tx timeout [ 564.374364][ T5622] Bluetooth: hci19: command tx timeout [ 564.454235][ T5622] Bluetooth: hci17: command tx timeout [ 564.534507][ T5622] Bluetooth: hci18: command tx timeout [ 566.454329][ T5622] Bluetooth: hci19: command tx timeout [ 577.975838][ T32] INFO: task syz.2.2813:17213 blocked for more than 143 seconds. [ 577.975970][ T32] Not tainted syzkaller #0 [ 577.976015][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.976045][ T32] task:syz.2.2813 state:D stack:24584 pid:17213 tgid:17211 ppid:5625 task_flags:0x480140 flags:0x00080002 [ 577.976233][ T32] Call Trace: [ 577.976257][ T32] [ 577.976297][ T32] __schedule+0x17db/0x58f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 577.976410][ T32] ? __lock_acquire+0x6df/0x2e50 [ 577.976535][ T32] ? __pfx___schedule+0x10/0x10 [ 577.976606][ T32] ? lock_acquire+0x115/0x350 [ 577.976683][ T32] ? schedule+0x90/0x2b0 [ 577.976774][ T32] schedule+0x164/0x2b0 [ 577.976862][ T32] blk_mq_freeze_queue_wait+0x101/0x180 [ 577.976949][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 577.977017][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 577.977220][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 577.977330][ T32] nbd_set_size+0x4c5/0x7d0 [ 577.977440][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 577.977604][ T32] ? nla_memcpy+0x5b/0xc0 [ 577.977685][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 577.977795][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 577.977893][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 577.977987][ T32] ? __nla_parse+0x40/0x60 [ 577.978069][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 577.978182][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 577.978288][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 577.978404][ T32] ? __lock_acquire+0x6df/0x2e50 [ 577.978473][ T32] ? __lock_acquire+0x6df/0x2e50 [ 577.978545][ T32] genl_rcv_msg+0x614/0x7a0 [ 577.978643][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.978726][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 577.978870][ T32] netlink_rcv_skb+0x226/0x4a0 [ 577.978961][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.979054][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.979168][ T32] ? down_read+0x2be/0x330 [ 577.979233][ T32] genl_rcv+0x28/0x40 [ 577.979315][ T32] netlink_unicast+0x7bd/0x940 [ 577.979428][ T32] netlink_sendmsg+0x813/0xb40 [ 577.979521][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.979622][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 577.979715][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.979779][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 577.979876][ T32] ____sys_sendmsg+0x54e/0x850 [ 577.979987][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.980072][ T32] ? import_iovec+0x73/0xa0 [ 577.980143][ T32] ___sys_sendmsg+0x2a5/0x360 [ 577.980205][ T32] ? __lock_acquire+0x6df/0x2e50 [ 577.980297][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.980386][ T32] ? futex_wait+0x2a2/0x390 [ 577.980548][ T32] ? __fget_files+0x2a/0x420 [ 577.980620][ T32] ? __fget_files+0x3a2/0x420 [ 577.980723][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 577.980798][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.980918][ T32] do_syscall_64+0x166/0x52 ** replaying previous printk message ** [ 577.980918][ T32] do_syscall_64+0x166/0x520 [ 577.981003][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.981065][ T32] ? clear_bhb_loop+0x70/0xc0 [ 577.981137][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.981192][ T32] RIP: 0033:0x7f3734f9e159 [ 577.981244][ T32] RSP: 002b:00007f3735ea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.981306][ T32] RAX: ffffffffffffffda RBX: 00007f3735225fa0 RCX: 00007f3734f9e159 [ 577.981357][ T32] RDX: 0000000000040000 RSI: 0000200000000440 RDI: 000000000000000a [ 577.981398][ T32] RBP: 00007f3735035024 R08: 0000000000000000 R09: 0000000000000000 [ 577.981437][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.981470][ T32] R13: 00007f3735226038 R14: 00007f3735225fa0 R15: 00007ffdbd42e438 [ 577.981562][ T32] [ 577.981593][ T32] INFO: task syz.2.2813:17224 blocked for more than 143 seconds. [ 577.981649][ T32] Not tainted syzkaller #0 [ 577.981680][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.981709][ T32] task:syz.2.2813 state:D stack:27872 pid:17224 tgid:17211 ppid:5625 task_flags:0x400040 flags:0x00080002 [ 577.981878][ T32] Call Trace: [ 577.981899][ T32] [ 577.981930][ T32] __schedule+0x17db/0x58f0 [ 577.982084][ T32] ? __pfx___schedule+0x10/0x10 [ 577.982180][ T32] ? schedule+0x90/0x2b0 [ 577.982257][ T32] schedule+0x164/0x2b0 [ 577.982340][ T32] schedule_preempt_disabled+0x13/0x30 [ 577.982423][ T32] __mutex_lock+0x7c1/0x1550 [ 577.982518][ T32] ? __mutex_lock+0x5d4/0x1550 [ 577.982619][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 577.982704][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 577.982814][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 577.982891][ T32] ? radix_tree_lookup+0x240/0x290 [ 577.982973][ T32] genl_rcv_msg+0x10b/0x7a0 [ 577.983090][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.983176][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 577.983266][ T32] netlink_rcv_skb+0x226/0x4a0 [ 577.983354][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.983438][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.983550][ T32] ? down_read+0x2be/0x330 [ 577.983614][ T32] genl_rcv+0x28/0x40 [ 577.983684][ T32] netlink_unicast+0x7bd/0x940 [ 577.983719][ T32] netlink_sendmsg+0x813/0xb40 [ 577.983826][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.983921][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 577.986026][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.986109][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 577.986201][ T32] __sys_sendto+0x408/0x5a0 [ 577.986305][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 577.986397][ T32] ? errseq_sample+0x40/0x70 [ 577.986531][ T32] ? rcu_is_watching+0x16/0xb0 [ 577.986632][ T32] __x64_sys_sendto+0xde/0x100 [ 577.986715][ T32] do_syscall_64+0x166/0x520 [ 577.986791][ T32] ? trace_irq_disable+0x3b/0x140 [ 577.986844][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.986893][ T32] ? clear_bhb_loop+0x70/0xc0 [ 577.986976][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.987037][ T32] RIP: 0033:0x7f3734f5e98e [ 577.987089][ T32] RSP: 002b:00007f3735e83e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 577.987144][ T32] RAX: ffffffffffffffda RBX: 00007f3735e856c0 RCX: 00007f3734f5e98e [ 577.987187][ T32] RDX: 0000000000000028 RSI: 00007f3735e84000 RDI: 0000000000000009 [ 577.987228][ T32] RBP: 0000000000000000 R08: 00007f3735e83f04 R09: 000000000000000c [ 577.987268][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 577.988791][ T32] R13: 00007f3735e83f58 R14: 00007f3735e84000 R15: 0000000000000000 [ 577.988850][ T32] [ 577.988884][ T32] INFO: task syz.4.2818:17235 blocked for more than 143 seconds. [ 577.988940][ T32] Not tainted syzkaller #0 [ 577.988980][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.989009][ T32] task:syz.4.2818 state:D stack:27872 pid:17235 tgid:17234 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 577.989192][ T32] Call Trace: [ 577.989206][ T32] [ 577.989243][ T32] __schedule+0x17db/0x58f0 [ 577.989410][ T32] ? __pfx___schedule+0x10/0x10 [ 577.989513][ T32] ? schedule+0x90/0x2b0 [ 577.989597][ T32] schedule+0x164/0x2b0 [ 577.989680][ T32] schedule_preempt_disabled+0x13/0x30 [ 577.989761][ T32] __mutex_lock+0x7c1/0x1550 [ 577.989861][ T32] ? __mutex_lock+0x5d4/0x1550 [ 577.989954][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 577.990047][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 577.990143][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 577.993518][ T32] ? __lock_acquire+0x6df/0x2e50 [ 577.993589][ T32] ? radix_tree_lookup+0x240/0x290 [ 577.993672][ T32] genl_rcv_msg+0x10b/0x7a0 [ 577.993775][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.993862][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 577.993954][ T32] netlink_rcv_skb+0x226/0x4a0 [ 577.994213][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 577.994307][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 577.994427][ T32] ? down_read+0x2be/0x330 [ 577.994505][ T32] genl_rcv+0x28/0x40 [ 577.994600][ T32] netlink_unicast+0x7bd/0x940 [ 577.994685][ T32] netlink_sendmsg+0x813/0xb40 [ 577.994779][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.994875][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 577.995566][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.997224][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 577.997325][ T32] __sys_sendto+0x408/0x5a0 [ 577.997439][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 577.997538][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 577.997566][ T32] __x64_sys_sendto+0xde/0x100 [ 577.997592][ T32] do_syscall_64+0x166/0x520 [ 577.997623][ T32] ? trace_irq_disable+0x3b/0x140 [ 577.997644][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.997667][ T32] ? clear_bhb_loop+0x70/0xc0 [ 577.997694][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.997777][ T32] RIP: 0033:0x7fb2a675e98e [ 577.997841][ T32] RSP: 002b:00007fb2a76b0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 577.997921][ T32] RAX: ffffffffffffffda RBX: 00007fb2a76b26c0 RCX: 00007fb2a675e98e [ 577.997964][ T32] RDX: 0000000000000020 RSI: 00007fb2a76b1000 RDI: 0000000000000005 [ 577.998003][ T32] RBP: 0000000000000000 R08: 00007fb2a76b0f04 R09: 000000000000000c [ 577.998037][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 577.998076][ T32] R13: 00007fb2a76b0f58 R14: 00007fb2a76b1000 R15: 0000000000000000 [ 577.998161][ T32] [ 577.998183][ T32] INFO: task syz.4.2818:17236 blocked for more than 143 seconds. [ 577.998226][ T32] Not tainted syzkaller #0 [ 577.998263][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.998285][ T32] task:syz.4.2818 state:D stack:27872 pid:17236 tgid:17234 ppid:5629 task_flags:0x400140 flags:0x00080002 [ 577.998468][ T32] Call Trace: [ 577.998488][ T32] [ 577.998508][ T32] __schedule+0x17db/0x58f0 [ 577.999955][ T32] ? __pfx___schedule+0x10/0x10 [ 578.000070][ T32] ? schedule+0x90/0x2b0 [ 578.000163][ T32] schedule+0x164/0x2b0 [ 578.000274][ T32] schedule_preempt_disabled+0x13/0x30 [ 578.000349][ T32] __mutex_lock+0x7c1/0x1550 [ 578.000453][ T32] ? __mutex_lock+0x5d4/0x1550 [ 578.000554][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 578.000662][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 578.000772][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 578.000854][ T32] ? radix_tree_lookup+0x240/0x290 [ 578.000944][ T32] genl_rcv_msg+0x10b/0x7a0 [ 578.001034][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.001128][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 578.001219][ T32] netlink_rcv_skb+0x226/0x4a0 [ 578.001294][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.009880][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.009933][ T32] ? down_read+0x2be/0x330 [ 578.009960][ T32] genl_rcv+0x28/0x40 [ 578.009991][ T32] netlink_unicast+0x7bd/0x940 [ 578.010027][ T32] netlink_sendmsg+0x813/0xb40 [ 578.010065][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.010102][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.010139][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.010166][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 578.010199][ T32] __sys_sendto+0x408/0x5a0 [ 578.010239][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 578.010271][ T32] ? errseq_sample+0x40/0x70 [ 578.010322][ T32] ? fd_install+0x94/0x3d0 [ 578.010357][ T32] ? fd_install+0x309/0x3d0 [ 578.010393][ T32] __x64_sys_sendto+0xde/0x100 [ 578.010418][ T32] do_syscall_64+0x166/0x520 [ 578.010450][ T32] ? trace_irq_disable+0x3b/0x140 [ 578.010471][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.010494][ T32] ? clear_bhb_loop+0x70/0xc0 [ 578.010522][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.010545][ T32] RIP: 0033:0x7fb2a675e98e [ 578.010564][ T32] RSP: 002b:00007fb2a768fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 578.010588][ T32] RAX: ffffffffffffffda RBX: 00007fb2a76916c0 RCX: 00007fb2a675e98e [ 578.010605][ T32] RDX: 0000000000000020 RSI: 00007fb2a7690000 RDI: 0000000000000009 [ 578.010620][ T32] RBP: 0000000000000000 R08: 00007fb2a768ff04 R09: 000000000000000c [ 578.010634][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 578.010647][ T32] R13: 00007fb2a768ff58 R14: 00007fb2a7690000 R15: 0000000000000000 [ 578.010681][ T32] [ 578.010692][ T32] INFO: task syz.1.2819:17238 blocked for more than 143 seconds. [ 578.010709][ T32] Not tainted syzkaller #0 [ 578.010720][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.010731][ T32] task:syz.1.2819 state:D stack:27088 pid:17238 tgid:17237 ppid:5633 task_flags:0x400140 flags:0x00080002 [ 578.010798][ T32] Call Trace: [ 578.010805][ T32] [ 578.010818][ T32] __schedule+0x17db/0x58f0 [ 578.010879][ T32] ? __pfx___schedule+0x10/0x10 [ 578.010919][ T32] ? schedule+0x90/0x2b0 [ 578.010952][ T32] schedule+0x164/0x2b0 [ 578.010983][ T32] schedule_preempt_disabled+0x13/0x30 [ 578.011013][ T32] __mutex_lock+0x7c1/0x1550 [ 578.011051][ T32] ? __mutex_lock+0x5d4/0x1550 [ 578.011088][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 578.011123][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 578.011196][ T32] ? stack_trace_save+0xa9/0x100 [ 578.015156][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.015237][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.015332][ T32] ? radix_tree_lookup+0x240/0x290 [ 578.015426][ T32] genl_rcv_msg+0x10b/0x7a0 [ 578.015530][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.015662][ T32] netlink_rcv_skb+0x226/0x4a0 [ 578.015734][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.015821][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.015921][ T32] ? down_read+0x2be/0x330 [ 578.016001][ T32] genl_rcv+0x28/0x40 [ 578.016104][ T32] netlink_unicast+0x7bd/0x940 [ 578.016189][ T32] netlink_sendmsg+0x813/0xb40 [ 578.016286][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.016382][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.016475][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.016547][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 578.018031][ T32] __sys_sendto+0x408/0x5a0 [ 578.018181][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 578.018265][ T32] ? errseq_sample+0x40/0x70 [ 578.018406][ T32] ? fd_install+0x94/0x3d0 [ 578.018470][ T32] ? fd_install+0x309/0x3d0 [ 578.018562][ T32] __x64_sys_sendto+0xde/0x100 [ 578.018625][ T32] do_syscall_64+0x166/0x520 [ 578.018707][ T32] ? trace_irq_disable+0x3b/0x140 [ 578.018759][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.018820][ T32] ? clear_bhb_loop+0x70/0xc0 [ 578.018886][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.018954][ T32] RIP: 0033:0x7f67d015e98e [ 578.019020][ T32] RSP: 002b:00007f67d109ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 578.019082][ T32] RAX: ffffffffffffffda RBX: 00007f67d109e6c0 RCX: 00007f67d015e98e [ 578.019124][ T32] RDX: 0000000000000028 RSI: 00007f67d109d000 RDI: 000000000000003a [ 578.019164][ T32] RBP: 0000000000000000 R08: 00007f67d109cf04 R09: 000000000000000c [ 578.019204][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003a [ 578.019237][ T32] R13: 00007f67d109cf58 R14: 00007f67d109d000 R15: 0000000000000000 [ 578.019327][ T32] [ 578.019356][ T32] INFO: task syz.1.2819:17239 blocked for more than 143 seconds. [ 578.019398][ T32] Not tainted syzkaller #0 [ 578.019422][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.019451][ T32] task:syz.1.2819 state:D stack:27632 pid:17239 tgid:17237 ppid:5633 task_flags:0x400140 flags:0x00080002 [ 578.025441][ T32] Call Trace: [ 578.025463][ T32] [ 578.025502][ T32] __schedule+0x17db/0x58f0 [ 578.025689][ T32] ? __pfx___schedule+0x10/0x10 [ 578.025791][ T32] ? schedule+0x90/0x2b0 [ 578.025869][ T32] schedule+0x164/0x2b0 [ 578.025953][ T32] schedule_preempt_disabled+0x13/0x30 [ 578.026028][ T32] __mutex_lock+0x7c1/0x1550 [ 578.026128][ T32] ? __mutex_lock+0x5d4/0x1550 [ 578.026222][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 578.026308][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 578.026401][ T32] ? stack_trace_save+0xa9/0x100 [ 578.026489][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.026558][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.026619][ T32] ? radix_tree_lookup+0x240/0x290 [ 578.026702][ T32] genl_rcv_msg+0x10b/0x7a0 [ 578.031596][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.031770][ T32] netlink_rcv_skb+0x226/0x4a0 [ 578.031844][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.031938][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.032053][ T32] ? down_read+0x2be/0x330 [ 578.032165][ T32] genl_rcv+0x28/0x40 [ 578.032226][ T32] netlink_unicast+0x7bd/0x940 [ 578.032263][ T32] netlink_sendmsg+0x813/0xb40 [ 578.032384][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.032494][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.032586][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.032651][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 578.032733][ T32] __sys_sendto+0x408/0x5a0 [ 578.032853][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 578.032935][ T32] ? errseq_sample+0x40/0x70 [ 578.033055][ T32] ? fd_install+0x94/0x3d0 [ 578.033193][ T32] ? fd_install+0x309/0x3d0 [ 578.033284][ T32] __x64_sys_sendto+0xde/0x100 [ 578.033349][ T32] do_syscall_64+0x166/0x520 [ 578.033427][ T32] ? trace_irq_disable+0x3b/0x140 [ 578.033479][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.033543][ T32] ? clear_bhb_loop+0x70/0xc0 [ 578.033607][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.033670][ T32] RIP: 0033:0x7f67d015e98e [ 578.033723][ T32] RSP: 002b:00007f67d107be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 578.033809][ T32] RAX: ffffffffffffffda RBX: 00007f67d107d6c0 RCX: 00007f67d015e98e [ 578.033866][ T32] RDX: 0000000000000020 RSI: 00007f67d107c000 RDI: 0000000000000049 [ 578.033901][ T32] RBP: 0000000000000000 R08: 00007f67d107bf04 R09: 000000000000000c [ 578.033942][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000049 [ 578.033975][ T32] R13: 00007f67d107bf58 R14: 00007f67d107c000 R15: 0000000000000000 [ 578.034280][ T32] [ 578.034310][ T32] INFO: task syz.1.2819:17240 blocked for more than 143 seconds. [ 578.034354][ T32] Not tainted syzkaller #0 [ 578.034384][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.034412][ T32] task:syz.1.2819 state:D stack:28624 pid:17240 tgid:17237 ppid:5633 task_flags:0x400040 flags:0x00080002 [ 578.034581][ T32] Call Trace: [ 578.034608][ T32] [ 578.034639][ T32] __schedule+0x17db/0x58f0 [ 578.034806][ T32] ? __pfx___schedule+0x10/0x10 [ 578.034908][ T32] ? schedule+0x90/0x2b0 [ 578.034997][ T32] schedule+0x164/0x2b0 [ 578.035080][ T32] schedule_preempt_disabled+0x13/0x30 [ 578.035162][ T32] __mutex_lock+0x7c1/0x1550 [ 578.035283][ T32] ? __mutex_lock+0x5d4/0x1550 [ 578.035378][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 578.035468][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 578.035552][ T32] ? stack_trace_save+0xa9/0x100 [ 578.035651][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.035713][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.035784][ T32] ? radix_tree_lookup+0x240/0x290 [ 578.035866][ T32] genl_rcv_msg+0x10b/0x7a0 [ 578.035969][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.036097][ T32] netlink_rcv_skb+0x226/0x4a0 [ 578.036177][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.036261][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.036364][ T32] ? down_read+0x2be/0x330 [ 578.036435][ T32] genl_rcv+0x28/0x40 [ 578.036518][ T32] netlink_unicast+0x7bd/0x940 [ 578.036610][ T32] netlink_sendmsg+0x813/0xb40 [ 578.036711][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.036814][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.036900][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.036949][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 578.036982][ T32] __sys_sendto+0x408/0x5a0 [ 578.037023][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 578.037089][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 578.037117][ T32] __x64_sys_sendto+0xde/0x100 [ 578.037142][ T32] do_syscall_64+0x166/0x520 [ 578.037174][ T32] ? trace_irq_disable+0x3b/0x140 [ 578.037195][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.037218][ T32] ? clear_bhb_loop+0x70/0xc0 [ 578.037246][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.037268][ T32] RIP: 0033:0x7f67d015e98e [ 578.037287][ T32] RSP: 002b:00007f67d105ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 578.037310][ T32] RAX: ffffffffffffffda RBX: 00007f67d105c6c0 RCX: 00007f67d015e98e [ 578.037326][ T32] RDX: 0000000000000024 RSI: 00007f67d105b000 RDI: 0000000000000009 [ 578.037340][ T32] RBP: 0000000000000000 R08: 00007f67d105af04 R09: 000000000000000c [ 578.037354][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 578.037367][ T32] R13: 00007f67d105af58 R14: 00007f67d105b000 R15: 0000000000000000 [ 578.037411][ T32] [ 578.037443][ T32] INFO: task syz.1.2819:17242 blocked for more than 143 seconds. [ 578.037498][ T32] Not tainted syzkaller #0 [ 578.037530][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.037568][ T32] task:syz.1.2819 state:D stack:28808 pid:17242 tgid:17237 ppid:5633 task_flags:0x400040 flags:0x00080002 [ 578.037743][ T32] Call Trace: [ 578.037773][ T32] [ 578.037805][ T32] __schedule+0x17db/0x58f0 [ 578.037960][ T32] ? __pfx___schedule+0x10/0x10 [ 578.038063][ T32] ? schedule+0x90/0x2b0 [ 578.038148][ T32] schedule+0x164/0x2b0 [ 578.038230][ T32] schedule_preempt_disabled+0x13/0x30 [ 578.038299][ T32] __mutex_lock+0x7c1/0x1550 [ 578.038395][ T32] ? __mutex_lock+0x5d4/0x1550 [ 578.038489][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 578.038580][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 578.038665][ T32] ? stack_trace_save+0xa9/0x100 [ 578.038768][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.038828][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.038895][ T32] ? radix_tree_lookup+0x240/0x290 [ 578.038990][ T32] genl_rcv_msg+0x10b/0x7a0 [ 578.039093][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.039217][ T32] netlink_rcv_skb+0x226/0x4a0 [ 578.039298][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.039383][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.039495][ T32] ? down_read+0x2be/0x330 [ 578.039559][ T32] genl_rcv+0x28/0x40 [ 578.039640][ T32] netlink_unicast+0x7bd/0x940 [ 578.039731][ T32] netlink_sendmsg+0x813/0xb40 [ 578.039842][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.039952][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.040047][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.040125][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 578.040207][ T32] __sys_sendto+0x408/0x5a0 [ 578.040328][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 578.040418][ T32] ? errseq_sample+0x40/0x70 [ 578.040541][ T32] ? fd_install+0x94/0x3d0 [ 578.040613][ T32] ? fd_install+0x309/0x3d0 [ 578.040704][ T32] __x64_sys_sendto+0xde/0x100 [ 578.040782][ T32] do_syscall_64+0x166/0x520 [ 578.040864][ T32] ? trace_irq_disable+0x3b/0x140 [ 578.040916][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.040976][ T32] ? clear_bhb_loop+0x70/0xc0 [ 578.041034][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.041088][ T32] RIP: 0033:0x7f67d015e98e [ 578.041138][ T32] RSP: 002b:00007f67d1039e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 578.041198][ T32] RAX: ffffffffffffffda RBX: 00007f67d103b6c0 RCX: 00007f67d015e98e [ 578.041241][ T32] RDX: 0000000000000020 RSI: 00007f67d103a000 RDI: 0000000000000010 [ 578.041268][ T32] RBP: 0000000000000000 R08: 00007f67d1039f04 R09: 000000000000000c [ 578.041308][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 578.041341][ T32] R13: 00007f67d1039f58 R14: 00007f67d103a000 R15: 0000000000000000 [ 578.041432][ T32] [ 578.041453][ T32] INFO: task syz.1.2819:17251 blocked for more than 143 seconds. [ 578.041495][ T32] Not tainted syzkaller #0 [ 578.041525][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.041548][ T32] task:syz.1.2819 state:D stack:28808 pid:17251 tgid:17237 ppid:5633 task_flags:0x400040 flags:0x00080002 [ 578.041668][ T32] Call Trace: [ 578.041677][ T32] [ 578.041711][ T32] __schedule+0x17db/0x58f0 [ 578.041892][ T32] ? __pfx___schedule+0x10/0x10 [ 578.041995][ T32] ? schedule+0x90/0x2b0 [ 578.042076][ T32] schedule+0x164/0x2b0 [ 578.042164][ T32] schedule_preempt_disabled+0x13/0x30 [ 578.042238][ T32] __mutex_lock+0x7c1/0x1550 [ 578.042326][ T32] ? __mutex_lock+0x5d4/0x1550 [ 578.042418][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 578.042509][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 578.042599][ T32] ? stack_trace_save+0xa9/0x100 [ 578.042692][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.042762][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.042822][ T32] ? radix_tree_lookup+0x240/0x290 [ 578.042906][ T32] genl_rcv_msg+0x10b/0x7a0 [ 578.043007][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.043139][ T32] netlink_rcv_skb+0x226/0x4a0 [ 578.043226][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.043331][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.043447][ T32] ? down_read+0x2be/0x330 [ 578.043519][ T32] genl_rcv+0x28/0x40 [ 578.043593][ T32] netlink_unicast+0x7bd/0x940 [ 578.043686][ T32] netlink_sendmsg+0x813/0xb40 [ 578.043780][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.043873][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.043965][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.073152][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 578.073269][ T32] __sys_sendto+0x408/0x5a0 [ 578.073379][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 578.073544][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 578.073623][ T32] __x64_sys_sendto+0xde/0x100 [ 578.073743][ T32] do_syscall_64+0x166/0x520 [ 578.073828][ T32] ? trace_irq_disable+0x3b/0x140 [ 578.073886][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.073946][ T32] ? clear_bhb_loop+0x70/0xc0 [ 578.080828][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.080913][ T32] RIP: 0033:0x7f67d015e98e [ 578.080976][ T32] RSP: 002b:00007f67d0ff7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 578.081033][ T32] RAX: ffffffffffffffda RBX: 00007f67d0ff96c0 RCX: 00007f67d015e98e [ 578.081074][ T32] RDX: 000000000000001c RSI: 00007f67d0ff8000 RDI: 000000000000000c [ 578.081115][ T32] RBP: 0000000000000000 R08: 00007f67d0ff7f04 R09: 000000000000000c [ 578.081155][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 578.081188][ T32] R13: 00007f67d0ff7f58 R14: 00007f67d0ff8000 R15: 0000000000000000 [ 578.081265][ T32] [ 578.081289][ T32] INFO: task syz.1.2819:17252 blocked for more than 143 seconds. [ 578.081337][ T32] Not tainted syzkaller #0 [ 578.081361][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.081391][ T32] task:syz.1.2819 state:D stack:28808 pid:17252 tgid:17237 ppid:5633 task_flags:0x400040 flags:0x00080002 [ 578.081575][ T32] Call Trace: [ 578.081596][ T32] [ 578.081635][ T32] __schedule+0x17db/0x58f0 [ 578.081800][ T32] ? __pfx___schedule+0x10/0x10 [ 578.081901][ T32] ? schedule+0x90/0x2b0 [ 578.081986][ T32] schedule+0x164/0x2b0 [ 578.082069][ T32] schedule_preempt_disabled+0x13/0x30 [ 578.082143][ T32] __mutex_lock+0x7c1/0x1550 [ 578.082222][ T32] ? __mutex_lock+0x5d4/0x1550 [ 578.082275][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 578.090240][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 578.090347][ T32] ? stack_trace_save+0xa9/0x100 [ 578.090442][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.090505][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.090565][ T32] ? radix_tree_lookup+0x240/0x290 [ 578.090670][ T32] genl_rcv_msg+0x10b/0x7a0 [ 578.090838][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.090971][ T32] netlink_rcv_skb+0x226/0x4a0 [ 578.091038][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.091123][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.091235][ T32] ? down_read+0x2be/0x330 [ 578.091299][ T32] genl_rcv+0x28/0x40 [ 578.091375][ T32] netlink_unicast+0x7bd/0x940 [ 578.091649][ T32] netlink_sendmsg+0x813/0xb40 [ 578.098501][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.098633][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.098737][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.098785][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 578.098820][ T32] __sys_sendto+0x408/0x5a0 [ 578.098862][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 578.098894][ T32] ? errseq_sample+0x40/0x70 [ 578.098943][ T32] ? fd_install+0x94/0x3d0 [ 578.098969][ T32] ? fd_install+0x309/0x3d0 [ 578.099006][ T32] __x64_sys_sendto+0xde/0x100 [ 578.099031][ T32] do_syscall_64+0x166/0x520 [ 578.099063][ T32] ? trace_irq_disable+0x3b/0x140 [ 578.099084][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.099107][ T32] ? clear_bhb_loop+0x70/0xc0 [ 578.099134][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.099156][ T32] RIP: 0033:0x7f67d015e98e [ 578.099176][ T32] RSP: 002b:00007f67d0fd6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 578.099201][ T32] RAX: ffffffffffffffda RBX: 00007f67d0fd86c0 RCX: 00007f67d015e98e [ 578.099258][ T32] RDX: 0000000000000020 RSI: 00007f67d0fd7000 RDI: 000000000000004a [ 578.099307][ T32] RBP: 0000000000000000 R08: 00007f67d0fd6f04 R09: 000000000000000c [ 578.099357][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004a [ 578.099404][ T32] R13: 00007f67d0fd6f58 R14: 00007f67d0fd7000 R15: 0000000000000000 [ 578.099490][ T32] [ 578.099512][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 578.102895][ T32] INFO: task syz.0.2826:17267 blocked for more than 143 seconds. [ 578.102955][ T32] Not tainted syzkaller #0 [ 578.102986][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.103010][ T32] task:syz.0.2826 state:D stack:27872 pid:17267 tgid:17266 ppid:5621 task_flags:0x400040 flags:0x00080002 [ 578.106312][ T32] Call Trace: [ 578.106343][ T32] [ 578.106393][ T32] __schedule+0x17db/0x58f0 [ 578.106546][ T32] ? __pfx___schedule+0x10/0x10 [ 578.106694][ T32] ? schedule+0x90/0x2b0 [ 578.106788][ T32] schedule+0x164/0x2b0 [ 578.106871][ T32] schedule_preempt_disabled+0x13/0x30 [ 578.106951][ T32] __mutex_lock+0x7c1/0x1550 [ 578.107052][ T32] ? __mutex_lock+0x5d4/0x1550 [ 578.107144][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 578.107235][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 578.107347][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 578.107436][ T32] ? radix_tree_lookup+0x240/0x290 [ 578.107527][ T32] genl_rcv_msg+0x10b/0x7a0 [ 578.107630][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.107732][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 578.113635][ T32] netlink_rcv_skb+0x226/0x4a0 [ 578.113738][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.113829][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.113936][ T32] ? down_read+0x2be/0x330 [ 578.114555][ T32] genl_rcv+0x28/0x40 [ 578.114648][ T32] netlink_unicast+0x7bd/0x940 [ 578.114745][ T32] netlink_sendmsg+0x813/0xb40 [ 578.114839][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.114939][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.115041][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.115135][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 578.115191][ T32] __sys_sendto+0x408/0x5a0 [ 578.115231][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 578.121186][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 578.121216][ T32] __x64_sys_sendto+0xde/0x100 [ 578.121240][ T32] do_syscall_64+0x166/0x520 [ 578.121269][ T32] ? trace_irq_disable+0x3b/0x140 [ 578.121324][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.121386][ T32] ? clear_bhb_loop+0x70/0xc0 [ 578.121459][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.121521][ T32] RIP: 0033:0x7f49abf5e98e [ 578.121566][ T32] RSP: 002b:00007f49acec8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 578.121628][ T32] RAX: ffffffffffffffda RBX: 00007f49aceca6c0 RCX: 00007f49abf5e98e [ 578.121671][ T32] RDX: 0000000000000020 RSI: 00007f49acec9000 RDI: 0000000000000004 [ 578.121721][ T32] RBP: 0000000000000000 R08: 00007f49acec8f04 R09: 000000000000000c [ 578.121754][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 578.121793][ T32] R13: 00007f49acec8f58 R14: 00007f49acec9000 R15: 0000000000000000 [ 578.121878][ T32] [ 578.121899][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 578.121930][ T32] INFO: task syz.0.2826:17268 blocked for more than 143 seconds. [ 578.121974][ T32] Not tainted syzkaller #0 [ 578.124690][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.124732][ T32] task:syz.0.2826 state:D stack:27872 pid:17268 tgid:17266 ppid:5621 task_flags:0x400040 flags:0x00080002 [ 578.124920][ T32] Call Trace: [ 578.124941][ T32] [ 578.124975][ T32] __schedule+0x17db/0x58f0 [ 578.125146][ T32] ? __pfx___schedule+0x10/0x10 [ 578.127096][ T32] ? schedule+0x90/0x2b0 [ 578.127134][ T32] schedule+0x164/0x2b0 [ 578.127166][ T32] schedule_preempt_disabled+0x13/0x30 [ 578.127196][ T32] __mutex_lock+0x7c1/0x1550 [ 578.127234][ T32] ? __mutex_lock+0x5d4/0x1550 [ 578.127270][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 578.127305][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 578.127344][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 578.127376][ T32] ? radix_tree_lookup+0x240/0x290 [ 578.127408][ T32] genl_rcv_msg+0x10b/0x7a0 [ 578.127447][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.127485][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 578.127519][ T32] netlink_rcv_skb+0x226/0x4a0 [ 578.127584][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.127711][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.127825][ T32] ? down_read+0x2be/0x330 [ 578.127891][ T32] genl_rcv+0x28/0x40 [ 578.127973][ T32] netlink_unicast+0x7bd/0x940 [ 578.128067][ T32] netlink_sendmsg+0x813/0xb40 [ 578.128161][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.128249][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.128375][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.128440][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 578.128533][ T32] __sys_sendto+0x408/0x5a0 [ 578.135732][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 578.135926][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 578.136000][ T32] __x64_sys_sendto+0xde/0x100 [ 578.136070][ T32] do_syscall_64+0x166/0x520 [ 578.136156][ T32] ? trace_irq_disable+0x3b/0x140 [ 578.136203][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.136265][ T32] ? clear_bhb_loop+0x70/0xc0 [ 578.136331][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.136393][ T32] RIP: 0033:0x7f49abf5e98e [ 578.136426][ T32] RSP: 002b:00007f49acea7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 578.136489][ T32] RAX: ffffffffffffffda RBX: 00007f49acea96c0 RCX: 00007f49abf5e98e [ 578.136530][ T32] RDX: 0000000000000020 RSI: 00007f49acea8000 RDI: 0000000000000003 [ 578.136565][ T32] RBP: 0000000000000000 R08: 00007f49acea7f04 R09: 000000000000000c [ 578.136605][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 578.136638][ T32] R13: 00007f49acea7f58 R14: 00007f49acea8000 R15: 0000000000000000 [ 578.136732][ T32] [ 578.136754][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 578.136786][ T32] INFO: task syz.0.2826:17269 blocked for more than 143 seconds. [ 578.136828][ T32] Not tainted syzkaller #0 [ 578.136859][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.136882][ T32] task:syz.0.2826 state:D stack:27664 pid:17269 tgid:17266 ppid:5621 task_flags:0x400040 flags:0x00080002 [ 578.137076][ T32] Call Trace: [ 578.137090][ T32] [ 578.137124][ T32] __schedule+0x17db/0x58f0 [ 578.143498][ T32] ? __pfx___schedule+0x10/0x10 [ 578.143619][ T32] ? schedule+0x90/0x2b0 [ 578.143714][ T32] schedule+0x164/0x2b0 [ 578.143797][ T32] schedule_preempt_disabled+0x13/0x30 [ 578.143890][ T32] __mutex_lock+0x7c1/0x1550 [ 578.144182][ T32] ? __mutex_lock+0x5d4/0x1550 [ 578.144279][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 578.144372][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 578.144467][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 578.144549][ T32] ? __lock_acquire+0x6df/0x2e50 [ 578.144609][ T32] ? radix_tree_lookup+0x240/0x290 [ 578.144702][ T32] genl_rcv_msg+0x10b/0x7a0 [ 578.144807][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.144900][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 578.149281][ T32] netlink_rcv_skb+0x226/0x4a0 [ 578.149373][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.149485][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.149600][ T32] ? down_read+0x2be/0x330 [ 578.149671][ T32] genl_rcv+0x28/0x40 [ 578.149756][ T32] netlink_unicast+0x7bd/0x940 [ 578.149854][ T32] netlink_sendmsg+0x813/0xb40 [ 578.149948][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.150041][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.150141][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.150189][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 578.150266][ T32] __sys_sendto+0x408/0x5a0 [ 578.150376][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 578.150559][ T32] ? rcu_is_watching+0x16/0xb0 [ 578.150644][ T32] __x64_sys_sendto+0xde/0x100 [ 578.150724][ T32] do_syscall_64+0x166/0x520 [ 578.170540][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.170631][ T32] ? clear_bhb_loop+0x70/0xc0 [ 578.170712][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.170774][ T32] RIP: 0033:0x7f49abf5e98e [ 578.170828][ T32] RSP: 002b:00007f49ace86e28 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 578.170897][ T32] RAX: ffffffffffffffda RBX: 00007f49ace886c0 RCX: 00007f49abf5e98e [ 578.170938][ T32] RDX: 0000000000000020 RSI: 00007f49ace86fe0 RDI: 0000000000000005 [ 578.170979][ T32] RBP: 0000000000000000 R08: 00007f49ace86ea4 R09: 000000000000000c [ 578.171032][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 578.171070][ T32] R13: 00007f49ace86ef8 R14: 00007f49ace86fe0 R15: 0000000000000000 [ 578.171154][ T32] [ 578.171179][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 578.171205][ T32] INFO: task syz.3.2828:17278 blocked for more than 143 seconds. [ 578.171247][ T32] Not tainted syzkaller #0 [ 578.171278][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.171307][ T32] task:syz.3.2828 state:D stack:26344 pid:17278 tgid:17277 ppid:5620 task_flags:0x400140 flags:0x00080002 [ 578.171479][ T32] Call Trace: [ 578.171500][ T32] [ 578.171532][ T32] __schedule+0x17db/0x58f0 [ 578.171688][ T32] ? __pfx___schedule+0x10/0x10 [ 578.171790][ T32] ? schedule+0x90/0x2b0 [ 578.171888][ T32] schedule+0x164/0x2b0 [ 578.173844][ T32] schedule_preempt_disabled+0x13/0x30 [ 578.173927][ T32] __mutex_lock+0x7c1/0x1550 [ 578.174967][ T32] ? __mutex_lock+0x5d4/0x1550 [ 578.175078][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 578.175170][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 578.175268][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 578.175393][ T32] ? radix_tree_lookup+0x240/0x290 [ 578.175476][ T32] genl_rcv_msg+0x10b/0x7a0 [ 578.175578][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.175670][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 578.175765][ T32] netlink_rcv_skb+0x226/0x4a0 [ 578.175837][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 578.175920][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 578.176025][ T32] ? down_read+0x2be/0x330 [ 578.176096][ T32] genl_rcv+0x28/0x40 [ 578.176173][ T32] netlink_unicast+0x7bd/0x940 [ 578.176278][ T32] netlink_sendmsg+0x813/0xb40 [ 578.176388][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.176487][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 578.176583][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 578.176647][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 578.176747][ T32] __sys_sendto+0x408/0x5a0 [ 578.176850][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 578.177014][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 578.177086][ T32] __x64_sys_sendto+0xde/0x100 [ 578.177149][ T32] do_syscall_64+0x166/0x520 [ 578.177219][ T32] ? trace_irq_disable+0x3b/0x140 [ 578.177264][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.177325][ T32] ? clear_bhb_loop+0x70/0xc0 [ 578.177397][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.177451][ T32] RIP: 0033:0x7f3e64d5e98e [ 578.177503][ T32] RSP: 002b:00007f3e65bbce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 578.177565][ T32] RAX: ffffffffffffffda RBX: 00007f3e65bbe6c0 RCX: 00007f3e64d5e98e [ 578.177607][ T32] RDX: 0000000000000020 RSI: 00007f3e65bbd000 RDI: 000000000000000d [ 578.177647][ T32] RBP: 0000000000000000 R08: 00007f3e65bbcf04 R09: 000000000000000c [ 578.177689][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 578.177735][ T32] R13: 00007f3e65bbcf58 R14: 00007f3e65bbd000 R15: 0000000000000000 [ 578.177833][ T32] [ 578.177864][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 578.178031][ T32] [ 578.178031][ T32] Showing all locks held in the system: [ 578.178063][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 578.178103][ T32] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 578.178255][ T32] #1: ffffffff9ad32098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 578.178418][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 578.178453][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 578.178671][ T32] locks held by getty/5369: 2, on CPU#1: [ 578.178721][ T32] #0: ffff8880356930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 578.178877][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 578.179050][ T32] locks held by syz-executor/5604: 2, last CPU#1: [ 578.179084][ T32] #0: ffff888035a269b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 578.179250][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 578.179405][ T32] locks held by kworker/0:6/5736: 2, last CPU#0: [ 578.179448][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 578.179612][ T32] #1: ffffc90004c0fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 578.179791][ T32] locks held by kworker/u8:11/12231: 2, last CPU#1: [ 578.179831][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 578.180021][ T32] #1: ffffc9000339fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 578.180189][ T32] locks held by kworker/u8:17/12237: 4, last CPU#1: [ 578.180230][ T32] #0: ffff8880329cd140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 578.180404][ T32] #1: ffffc900034efc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 578.180568][ T32] #2: ffff88802717d9c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 578.180732][ T32] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x41f/0xfc0 [ 578.180895][ T32] locks held by udevd/12271: 1, on CPU#1: [ 578.180936][ T32] #0: ffff888027dd2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 578.181130][ T32] locks held by syz.2.2813/17213: 6, on CPU#0: [ 578.181169][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.181318][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.181475][ T32] #2: ffff888027da5260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 578.181634][ T32] #3: ffff888027dab528 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 578.181826][ T32] #4: ffff888027daaef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 578.182018][ T32] #5: ffff888027daaf28 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 578.182186][ T32] locks held by syz.2.2813/17224: 2, on CPU#0: [ 578.182227][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.182389][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.182547][ T32] locks held by syz.4.2818/17235: 2, on CPU#0: [ 578.182589][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.182796][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.182954][ T32] locks held by syz.4.2818/17236: 2, on CPU#1: [ 578.182996][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.183152][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.183380][ T32] locks held by syz.1.2819/17238: 2, on CPU#0: [ 578.183414][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.183571][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.183745][ T32] locks held by syz.1.2819/17239: 2, on CPU#1: [ 578.183781][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.183925][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.236830][ T32] locks held by syz.1.2819/17240: 2, on CPU#1: [ 578.236873][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.237038][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.237190][ T32] locks held by syz.1.2819/17242: 2, on CPU#1: [ 578.237231][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.237405][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.237603][ T32] locks held by syz.1.2819/17251: 2, on CPU#1: [ 578.237643][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.239549][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.239734][ T32] locks held by syz.1.2819/17252: 2, on CPU#0: [ 578.239776][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.239949][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.240131][ T32] locks held by syz.0.2826/17267: 2, on CPU#0: [ 578.240174][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.240325][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.240515][ T32] locks held by syz.0.2826/17268: 2, on CPU#1: [ 578.240563][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.240717][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.240877][ T32] locks held by syz.0.2826/17269: 2, on CPU#0: [ 578.240918][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.241080][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.245328][ T32] locks held by syz.3.2828/17278: 2, on CPU#0: [ 578.245373][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.245490][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.245554][ T32] locks held by syz-executor/17282: 2, on CPU#1: [ 578.245570][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.245630][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.245703][ T32] locks held by syz-executor/17302: 2, on CPU#0: [ 578.245719][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.245779][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.245842][ T32] locks held by syz-executor/17306: 2, on CPU#0: [ 578.245857][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.246027][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.246206][ T32] locks held by syz-executor/17307: 2, on CPU#1: [ 578.246247][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.246403][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.246570][ T32] locks held by syz-executor/17355: 2, on CPU#0: [ 578.246612][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.248034][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.248187][ T32] locks held by syz-executor/17384: 2, on CPU#0: [ 578.248228][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.248413][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.248570][ T32] locks held by syz-executor/17404: 2, on CPU#1: [ 578.248611][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.248789][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.248968][ T32] locks held by syz-executor/17406: 2, on CPU#0: [ 578.249008][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.249156][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.249307][ T32] locks held by syz-executor/17409: 2, on CPU#1: [ 578.249348][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.252286][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.252465][ T32] locks held by syz-executor/17456: 2, on CPU#1: [ 578.252500][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.252655][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.252825][ T32] locks held by syz-executor/17487: 2, on CPU#0: [ 578.252866][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.253008][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.253171][ T32] locks held by syz-executor/17507: 2, on CPU#0: [ 578.253205][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.253370][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.253546][ T32] locks held by syz-executor/17509: 2, on CPU#1: [ 578.253587][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.253749][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.260513][ T32] locks held by syz-executor/17512: 2, on CPU#1: [ 578.260563][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.260737][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.260906][ T32] locks held by syz-executor/17559: 2, on CPU#0: [ 578.260948][ T32] #0: ffffffff902c1b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 578.261122][ T32] #1: ffffffff902c1960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 578.262442][ T32] [ 578.262462][ T32] ============================================= [ 578.262462][ T32] [ 578.262503][ T32] NMI backtrace for cpu 1 [ 578.262544][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 578.262606][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.262639][ T32] Call Trace: [ 578.262659][ T32] [ 578.262689][ T32] dump_stack_lvl+0xe8/0x150 [ 578.262782][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 578.262855][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 578.262943][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 578.263043][ T32] sys_info+0x135/0x170 [ 578.263097][ T32] watchdog+0xfd7/0x1030 [ 578.263183][ T32] ? watchdog+0x1c7/0x1030 [ 578.263279][ T32] kthread+0x38b/0x480 [ 578.263346][ T32] ? __pfx_watchdog+0x10/0x10 [ 578.263390][ T32] ? __pfx_kthread+0x10/0x10 [ 578.263452][ T32] ret_from_fork+0x514/0xb70 [ 578.263513][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 578.263596][ T32] ? __switch_to+0xc89/0x1420 [ 578.263687][ T32] ? __pfx_kthread+0x10/0x10 [ 578.263741][ T32] ret_from_fork_asm+0x1a/0x30 [ 578.263866][ T32] [ 578.263927][ T32] Sending NMI from CPU 1 to CPUs 0: [ 578.263998][ C0] NMI backtrace for cpu 0 [ 578.264012][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 578.264072][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.264085][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 578.264108][ C0] Code: e8 4e b3 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 7c c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 9a 30 75 06 cc 44 89 f9 80 e1 07 [ 578.264126][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 578.264142][ C0] RAX: 1ffffffff35a6400 RBX: 00000000000003fd RCX: 0000000000000000 [ 578.264155][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 578.264167][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 578.264187][ C0] R10: dffffc0000000000 R11: ffffffff85720780 R12: dffffc0000000000 [ 578.264206][ C0] R13: 0000000000000000 R14: ffffffff9ad320c0 R15: 0000000000000000 [ 578.264220][ C0] FS: 0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 578.264236][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.264249][ C0] CR2: 000055d20f207168 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 578.264266][ C0] Call Trace: [ 578.264273][ C0] [ 578.264282][ C0] wait_for_lsr+0x184/0x2f0 [ 578.264314][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 578.264342][ C0] serial8250_console_write+0xaa1/0x1200 [ 578.264377][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 578.264404][ C0] ? __schedule+0x17f1/0x58f0 [ 578.264438][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 578.264467][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 578.264491][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 578.264519][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 578.264545][ C0] nbcon_kthread_func+0x679/0x880 [ 578.264568][ C0] ? nbcon_kthread_func+0x163/0x880 [ 578.264586][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 578.264609][ C0] ? __kthread_parkme+0x71/0x1f0 [ 578.264636][ C0] ? __kthread_parkme+0x199/0x1f0 [ 578.264665][ C0] kthread+0x38b/0x480 [ 578.264684][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 578.264701][ C0] ? __pfx_kthread+0x10/0x10 [ 578.264719][ C0] ret_from_fork+0x514/0xb70 [ 578.264737][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 578.264766][ C0] ? __switch_to+0xc89/0x1420 [ 578.264793][ C0] ? __pfx_kthread+0x10/0x10 [ 578.264811][ C0] ret_from_fork_asm+0x1a/0x30 [ 578.264848][ C0] [ 578.269208][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 583.203332][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 583.212462][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.222538][ T32] Call Trace: [ 583.225845][ T32] [ 583.228793][ T32] vpanic+0x56d/0xa60 [ 583.232830][ T32] ? __pfx___schedule+0x10/0x10 [ 583.237711][ T32] ? __pfx_vpanic+0x10/0x10 [ 583.242257][ T32] panic+0xc5/0xd0 [ 583.246018][ T32] ? __pfx_panic+0x10/0x10 [ 583.250458][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 583.255966][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 583.261363][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 583.267548][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 583.273752][ T32] watchdog+0x1030/0x1030 [ 583.278106][ T32] ? watchdog+0x1c7/0x1030 [ 583.282560][ T32] kthread+0x38b/0x480 [ 583.286652][ T32] ? __pfx_watchdog+0x10/0x10 [ 583.291370][ T32] ? __pfx_kthread+0x10/0x10 [ 583.295983][ T32] ret_from_fork+0x514/0xb70 [ 583.300594][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 583.305735][ T32] ? __switch_to+0xc89/0x1420 [ 583.310445][ T32] ? __pfx_kthread+0x10/0x10 [ 583.315057][ T32] ret_from_fork_asm+0x1a/0x30 [ 583.319860][ T32] [ 583.323515][ T32] Kernel Offset: disabled [ 583.327853][ T32] Rebooting in 86400 seconds..